--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-08T19:55:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a150608f-3210-41e6-8463-0dc128c7d602"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-08T19:55:10Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a150608f-3210-41e6-8463-0dc128c7d602 resourceVersion: "3214" uid: 4f2ac5fb-e83f-4849-8432-baf13f0e53a9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-08T19:55:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-07-08T19:55:10Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3211" uid: 85921728-60a7-4b2c-9ebf-3346c73c5ae0 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-08T19:55:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a150608f-3210-41e6-8463-0dc128c7d602"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-08T19:55:10Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a150608f-3210-41e6-8463-0dc128c7d602 resourceVersion: "3210" uid: e9d5c1d7-e6d7-41b5-9ae1-827091c9022e - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIFJQZmRifK5wwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwODE5NTE1OFoX DTM2MDcwNTE5NTE1OFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhHYOV1j9CcZ GCzB0qrfws+1640hHDgEkA3p5kfBmFH271HEzHTos027vJFnYinGUVT3Yj6idXeA KI3jHDQ/v1TnfHcwTra1vuma6juT3ZDPXeIDH70VUHgjuXJMz9bJlzlK+rIF3sVI /oUnD2Ase9buOmF6IJATKgdmTYphs4IB1jhiKnku78TIDovUTcaghyduX13M9xrH 1qj04seABaDyhzi28yoo6NdnRbapfcajFtPj08obvE3TJgKBGkFr6efKsE1Z/xLc /8wSow2lBypeNgvODYdBg0a1Tpzkogrq/7ac9YajCI3vqIDhp9rRyvXs+q2S0U3G +9olKKokQwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA68yseAlXNb/Ldkqa8njM9MgXYggfoRgD7DU3mVeGZL3XQ4Lf eWozY1T8eZ0SbaMK4rRum37UURgouwWL05uIMjANBgkqhkiG9w0BAQsFAAOCAQEA IDkKwSH3jTaVSOP+MRT2GqU2nSf/bYsKT0WVY1QQJLdPpoAfgwLCgcdeQJ2kj+5a O7L+QJdKsVTPrxeKJntudlxPCRkk7ji5tXmHVgV6ldLmO7boCk8CgnXO8weYY4aD Nc+P9quMc69N9DIw0hdn5D7JXPy/VS+SL6yImiIiypySJSTUUD/iRIrlf/NfNWne L1xGnswpUKKsZwZLCzMRR9gWo2851WzejMhY5z2/pflK2PkInIYc1aIbPGKqOGRU fHJTa7mrW39sMxhIOXYuKW74h6Vo9Qg0lpVzW3adbLRS1b50NMTXPUbC0olC6xTn Nz/nfIqGvVor+pABizUZFQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIHwVZjXqMBlowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwODE5NTIzNVoX DTI3MDcwODE5NTIzNVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANj13X8KU1lRXisjZjTrfX3L/ImntHIjhj1DfUvTL3EfwJDsY9mZlIRTMvldk0ja N/GzLWdQ9TQ7jPY+E9ifftS4Zwg4N6WpqOpj5toQnNKnibJfKG0TyN24cAU0IDCN VDXRRlisCktHDHq+rT+Y+cbCXC1mJgP4adg6aCIaJYC4nETNONEpq3f+9KacoW6r BQizd2TYVDpIYp14i8AWwqLRGTVidHUSX8yQhmCkoZ9TxO3Ty/ZZz+bm7R6iipbo 9LgCqlM8rNB6+l8glB3JWKtP6rm0DTcyrUL3RSQqmgQe1HuOZw7U0tPuewwaPLc0 vY8nUSxp5TIJsUpIAirX1JMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRACnl5axoIIl67HbMRjFrX7r2qc4fUZ5aLDbZhfnuRQyd0FEO2FEu0/M/x bjyqQ+eKx2WCRjACkWoZzihpaAuDjzBLBgNVHSMERDBCgEDrzKx4CVc1v8t2Spry eMz0yBdiCB+hGAPsNTeZV4ZkvddDgt95ajNjVPx5nRJtowritG6bftRRGCi7BYvT m4gyMEsGA1UdEQREMEKCQCouYXBwcy4zMDdkYTY0NS0yZjg3LTQ0NjMtYjAzOS1l YjA5ZTY3ZjA2NmQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBALoGTKVhCqV0DafWJHaDWw5T7U0jOntChVWqBFsfw/MdMkRMUUFNixGFBMid 9HzkWKTK77fnhntx5lCBVUr/G7nhmSe2lM7yF03xK7ONgtnNgUQ1W7knaOwnPZJ5 vPn7+0XQL1mPAb8AlGmVerbgRFtFDOJMngyLSdCctOY6Mt1Tk30ljG5pjGpQzHNl lPvrge5ezsueJBSxHLzy3YsHKum62/IOHZ9dM8jQDcwgwZocgKYc2Qv64YQUogAG +Co3l1BDiHS+LR+6IvbBlHPxZD6ypP0/RfBQF1B+IUAUVvIA1wryCHVLJZuT217x Ga1FxR0h3Qv01cZfhLwVfgS6N4I= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-07-08T19:55:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-07-08T19:55:24Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3589" uid: 3dabab27-3d2a-4bd1-be24-9b58b561376e - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-07-08T19:55:11Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a150608f-3210-41e6-8463-0dc128c7d602"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-08T19:55:11Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a150608f-3210-41e6-8463-0dc128c7d602 resourceVersion: "3219" uid: 80413cf6-f676-40c4-b9fc-29e4f125640a - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIId7V85OhlUskwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzU0MDg1ODAe Fw0yNjA3MDgyMDAwNTdaFw0yODA5MDUyMDAwNThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODM1NDA4NTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hGfKD9pQKKw7Bf7Kryqgfn5WZwcojvEQ t9L9VH2KF5nRyNWa5c6JZ5xZDpQNzMOXX6a+disaXdMVqvZ+YgcSPiYJeQ8Gc3uf 0UJqsg0MJyXQr9svwmfIDczJgHM9JDRcvFTCBJxn2c9DJ17noxQ1xMN9D2DrtTKU u3UxA5LXHRzkrRl0NWRHOXF0T8ryVkRNNV9Axz3pxVB2/w9+DJMn6ky0+9N2Wgpm QW0Aun606Wf/IYedimMagH+ScDMp9YkJcwASnqk7a2bI63KhWTH8amw5rV20PY9s RjVLTeA8tpANh3sySyAQNDFABdmkcgjwR80/+kdGr3ZrSmlNr6WRAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJAyF3 6Xh4e/FW72CNs6VWD+0euDAfBgNVHSMEGDAWgBRJAyF36Xh4e/FW72CNs6VWD+0e uDANBgkqhkiG9w0BAQsFAAOCAQEAi3QlB/YbNu3kZdpXCjN+289WPxHbedtOc9Dn AhURDF9/xYS152stVw0hkLGbOiBb8QArH0iVARJTyDZJbO/Qp18jYj9tvinTdzuF NsGH0WrP/M2g31N7l3B9w9LmCkLqlB+j9H/bIV7bKyVZxH8Ztd4N1gvVvW+0gGCz T95kwhyDyhlCYys/jHe8JxxxqfelY3IATeB0whCqZnsUowldXHr61ZzxBQyMyVHn MJK/CBrz3n3PMyGtMTnD235plYxrIQlTE//vLcUo2RMObTHQekV4AyRLy9nNAha+ F/A6SnPHPIvfn2/TuIP71R0VcyiAySc/mv0YMnLOQclwit2qNg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-07-08T20:06:52Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-07-08T20:06:52Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14981" uid: c29c0894-b42d-4815-a757-fdcd9f3528a4 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIId7V85OhlUskwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzU0MDg1ODAe Fw0yNjA3MDgyMDAwNTdaFw0yODA5MDUyMDAwNThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODM1NDA4NTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hGfKD9pQKKw7Bf7Kryqgfn5WZwcojvEQ t9L9VH2KF5nRyNWa5c6JZ5xZDpQNzMOXX6a+disaXdMVqvZ+YgcSPiYJeQ8Gc3uf 0UJqsg0MJyXQr9svwmfIDczJgHM9JDRcvFTCBJxn2c9DJ17noxQ1xMN9D2DrtTKU u3UxA5LXHRzkrRl0NWRHOXF0T8ryVkRNNV9Axz3pxVB2/w9+DJMn6ky0+9N2Wgpm QW0Aun606Wf/IYedimMagH+ScDMp9YkJcwASnqk7a2bI63KhWTH8amw5rV20PY9s RjVLTeA8tpANh3sySyAQNDFABdmkcgjwR80/+kdGr3ZrSmlNr6WRAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJAyF3 6Xh4e/FW72CNs6VWD+0euDAfBgNVHSMEGDAWgBRJAyF36Xh4e/FW72CNs6VWD+0e uDANBgkqhkiG9w0BAQsFAAOCAQEAi3QlB/YbNu3kZdpXCjN+289WPxHbedtOc9Dn AhURDF9/xYS152stVw0hkLGbOiBb8QArH0iVARJTyDZJbO/Qp18jYj9tvinTdzuF NsGH0WrP/M2g31N7l3B9w9LmCkLqlB+j9H/bIV7bKyVZxH8Ztd4N1gvVvW+0gGCz T95kwhyDyhlCYys/jHe8JxxxqfelY3IATeB0whCqZnsUowldXHr61ZzxBQyMyVHn MJK/CBrz3n3PMyGtMTnD235plYxrIQlTE//vLcUo2RMObTHQekV4AyRLy9nNAha+ F/A6SnPHPIvfn2/TuIP71R0VcyiAySc/mv0YMnLOQclwit2qNg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-07-08T19:55:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-07-08T19:55:24Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-07-08T20:01:15Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7961" uid: 385d2487-81a9-4a94-871e-3713cae9268d - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-07-08T19:55:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a150608f-3210-41e6-8463-0dc128c7d602"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-08T19:55:10Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a150608f-3210-41e6-8463-0dc128c7d602 resourceVersion: "3216" uid: 14f039ea-7a0e-49f6-866e-5764aac0a79b kind: ConfigMapList metadata: resourceVersion: "53852"