--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T19:30:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"8abfb723-9206-4dd0-aedf-98835597b4b8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T19:30:20Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abfb723-9206-4dd0-aedf-98835597b4b8 resourceVersion: "2384" uid: d096a5af-2892-4222-82d8-9b2a7bda4a3c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T19:30:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-03T19:30:20Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2380" uid: 5c514f81-e852-4221-aa31-32ede0f7e161 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-03T19:30:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"8abfb723-9206-4dd0-aedf-98835597b4b8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T19:30:20Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abfb723-9206-4dd0-aedf-98835597b4b8 resourceVersion: "2379" uid: 896e0077-ae85-41f8-b3a9-c25db73e09c3 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIUCz2IYG+rt4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzE5MjgwM1oX DTM2MTAzMTE5MjgwM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcB3ZfY8eoFj z3o6z1bonqk8CzHP/XNe1GgQdNcTyld7d30d8e84IzfpjC+iWZHEgRcrs1Fvpl3r b64r/WOhexHXEo9tTb47vYuNzR3Aaioh9zxVSNDNsAreyUduI2CDj9tk5UBVi9a3 cpyDV2DZ0UitbI4I4rMn/k58u25H7zOXJRcRr/rngiv6OwEMk45D85uDljqw+Fxs qYx6j+HjdZ77dBwXSrL1cIlQUxxhMKisWIbf6yMyeCASTJUFluAa1B4yQbNBdHyk i8KVeJNgu7qZ/2yzYfWR36tnK7XtkYw7DririiPIYWilrHSEDOsjLsZN5SwXKs7n TNSP7fQo+QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAa0roCZUApZbmAz4e20fpjQVHNdJwrtgmsd252zhn0ytgBI5s mI0jUhOfEaXuh/76p0Hw61De+IkddtHPPKN4xzANBgkqhkiG9w0BAQsFAAOCAQEA IZB7iPsHeKLPz8wy4Ugk4Ggu4Ui/RWeZdL3LD0ngadbSZhf2Dp0jxrn/AiaP/avq vSq3DUrgM4Ro/HIbGyhJJRhcUJpSMv+RMof/VuFIrXsplYrPj1JjbqBC+fqm9oFf TLlFxjAVQJo4y8L5CexbAEHwqNQoRpWYHY/PDoBrJJ8E/uiTqEjHJ4tkydjoZpgq 5ObacVBzfnmoiaeGk1ufZWGV8Fy8nZR8ygSydfXLwu1uCnVyECCv9pJLTWq5wU6S 9apQF8RSPwtX/Yda5IfoPDh6Rtlop8AK86rmy7XIvY1Qw5I4nUPN1AH+z2xG1YuQ 0RuFjYSZ68+TWbfNnyOs3Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIfTmmysiNnZEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzE5MjgyNFoX DTI3MTEwMzE5MjgyNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKhd6dMn+e6Xcjto5zosDehsaONDwa0gDX6zn7zv1Wk6khI+FkWs78diwlup3l3D F2zDcjeUbw8bwj+diZa0btpRNCIGHhxKKCQLDO5NgTOanafA8qXmtryNNgDAzvjJ xKYfMt18f05IPDo9L6Hi4vWLVnfdMwgYLnkiSrZspFs/CsQX57M8egUG/NiLcNjs 277hUA3ldxRf4/RUeBjnY7SsYkh0f16lJ4yUunU8avZnLDElVea3NgnlGs98Uyqt LGeP2OO7tiyZsuQkDkwD/KVmuk6TL9y2kAvq6w1SSERK4uC+CVsW/xz3JRUKwCac 0gfFHQWlfVRI04QsTOioPRcCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAAq7TKzgP3GIOg8koHR03LsOAlPPR3qkxqGoHR38XL0JSewY84Kk6/QmR wNvcWdBmDEkd50ThkaeczVHNNrxFSjBLBgNVHSMERDBCgEBrSugJlQClluYDPh7b R+mNBUc10nCu2Cax3bnbOGfTK2AEjmyYjSNSE58Rpe6H/vqnQfDrUN74iR120c88 o3jHMD4GA1UdEQQ3MDWCMyouYXBwcy4wMDEyNWExODBiYjA4YjYwOTgwYi5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAUclU/4Rnv7v7 QuqKbXsN48omEqSMPozSfa+CbP2IXLpOVKFjNeKdYL6/a+1KjCn3B/blGCv2L0n2 /228Mb3qtGLyiIhoO9lS5mTyymGcevBuLnxtk9Ug2vnJcUTYgsMhjnk6hucOBKye NKr4KyrHws7NEAa4HVuTLWMmGQJO7F45UIZ6dgzwpS3tLD8Ov6zqhJ8sf2/+8T8Y 9gyyg2KSTvyD1ZJJlj7TC8+icFpfz3luZ4Q74dkg/wnuaMLj0vWJTsJmb0fL9kAc apoO+gwjGBHIADENvilDj0OVwIY31l6mUmTZN8MsMUxm7xud6u/lacsFkBznk7+/ cLr6N2I7eg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-03T19:30:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-03T19:30:31Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3524" uid: 7f9ddda4-bfe9-4a57-bc1f-1da984a0db37 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T19:30:21Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"8abfb723-9206-4dd0-aedf-98835597b4b8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T19:30:21Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abfb723-9206-4dd0-aedf-98835597b4b8 resourceVersion: "2394" uid: 5b949115-eb06-45de-a9d3-8bbde333552d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPa8XXlMYkUowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzczNDYwMDAe Fw0yNjExMDMxOTM2MzlaFw0yOTAxMDExOTM2NDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3MzQ2MDAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuESLdcYS88PpkvZOaIx34dTGVFzqUE6ne JDyMeQn+qRdX3Qe7t4Wosr12WRyZifg1/TYGPYg5TUef8uzKb4HfhJ/3oGaBsgMx wtFaFZvvGc0aiyH1UcGZQ9/PlRK4F/UnibUAPmTuxD7HQtno7BLsRry8QxxI5C29 b2niiS5EdFGQub5dA8ioxd3grvg+/rKX79i+kUntjVKFoPkCKDkkFwsK7C09Po/y hApRNRXMz8ObwuTyokSMSGNociAEz8XcBK3+7GjGUVarnxrAohxwoNlHS88cSuSb BNB/9M98a8qyH+193vFZEhy15A+/m5Saj+Ph4V2qmv0ygzFWnCzPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUqiJT dLJVySmvrXK8RsmJGMCShTAfBgNVHSMEGDAWgBRUqiJTdLJVySmvrXK8RsmJGMCS hTANBgkqhkiG9w0BAQsFAAOCAQEAIcXcWwCWRnvyYnVfUiIvOiWBIZISzXdVEwUX TTte8+QqM3Ur9WfmHCU3YV1q/t041E1tHFR8QdkYUU9vy7CfKH9HHAZJdJZEl9bv izMqeIYagfDbiKkOpD71cjo5ZtzC42xhrHSrH3otFEZochms6xAUP+MB98stNWVm 62GCZfYyKCvPLUh1wJNRcHRoyYan6+IDjT2rhoWTeOUO6vElJ0lrMOf+MV4WK6UE 79AN1Bt/Rc1NiKZUAy1gjwmAsLrtJbyxgeh/lnpCVjz1XDL/gGyMODKvN5NGGWTw 8PsEqdZWGQoK6sm4ewR6MyE9/Jv8FYtBd9r+R6w+yMEpY5O+Pw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-03T19:43:44Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-03T19:43:44Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "17014" uid: faf576e6-6bff-45bb-ba6e-7b1301c2c8d8 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPa8XXlMYkUowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzczNDYwMDAe Fw0yNjExMDMxOTM2MzlaFw0yOTAxMDExOTM2NDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3MzQ2MDAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuESLdcYS88PpkvZOaIx34dTGVFzqUE6ne JDyMeQn+qRdX3Qe7t4Wosr12WRyZifg1/TYGPYg5TUef8uzKb4HfhJ/3oGaBsgMx wtFaFZvvGc0aiyH1UcGZQ9/PlRK4F/UnibUAPmTuxD7HQtno7BLsRry8QxxI5C29 b2niiS5EdFGQub5dA8ioxd3grvg+/rKX79i+kUntjVKFoPkCKDkkFwsK7C09Po/y hApRNRXMz8ObwuTyokSMSGNociAEz8XcBK3+7GjGUVarnxrAohxwoNlHS88cSuSb BNB/9M98a8qyH+193vFZEhy15A+/m5Saj+Ph4V2qmv0ygzFWnCzPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUqiJT dLJVySmvrXK8RsmJGMCShTAfBgNVHSMEGDAWgBRUqiJTdLJVySmvrXK8RsmJGMCS hTANBgkqhkiG9w0BAQsFAAOCAQEAIcXcWwCWRnvyYnVfUiIvOiWBIZISzXdVEwUX TTte8+QqM3Ur9WfmHCU3YV1q/t041E1tHFR8QdkYUU9vy7CfKH9HHAZJdJZEl9bv izMqeIYagfDbiKkOpD71cjo5ZtzC42xhrHSrH3otFEZochms6xAUP+MB98stNWVm 62GCZfYyKCvPLUh1wJNRcHRoyYan6+IDjT2rhoWTeOUO6vElJ0lrMOf+MV4WK6UE 79AN1Bt/Rc1NiKZUAy1gjwmAsLrtJbyxgeh/lnpCVjz1XDL/gGyMODKvN5NGGWTw 8PsEqdZWGQoK6sm4ewR6MyE9/Jv8FYtBd9r+R6w+yMEpY5O+Pw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-03T19:30:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-03T19:30:31Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-03T19:36:47Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6822" uid: ed7fb97b-36e6-4d6d-85e4-857d5c9bd97a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-03T19:30:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"8abfb723-9206-4dd0-aedf-98835597b4b8"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-03T19:30:20Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 8abfb723-9206-4dd0-aedf-98835597b4b8 resourceVersion: "2389" uid: 64090f65-0bb8-4ea0-b2ae-00b25ee96af0 kind: ConfigMapList metadata: resourceVersion: "242619"