--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:11:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a3826a64-2101-43da-b11f-52b7f846d725"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:11:30Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a3826a64-2101-43da-b11f-52b7f846d725 resourceVersion: "2426" uid: edb57974-8c28-4360-8868-abf422ea0083 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:11:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T18:11:30Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2409" uid: 235a00e7-9b51-4299-b74c-481145ea4160 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T18:11:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a3826a64-2101-43da-b11f-52b7f846d725"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:11:30Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a3826a64-2101-43da-b11f-52b7f846d725 resourceVersion: "2404" uid: d70675fb-0dae-4a99-b3bd-aaad94e5a12c - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIIn1mlYd2AoMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MDc0OVoX DTM2MDkxMzE4MDc0OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Tcjbf3fxE7 H/bZ6EY+93JKGQ1JJ4unWeCG8dRwL89mcjGeXyMH+D3l+qHIahPAPZufpDSZKVB0 JzzMTtYQm4u8QXlr2uqkII6XCqIHBW44/eH2JdKEH6tL5LQblrW2r/Swk61vEfOg vlXojIugi49yoTESq3rLiWzxvXYKvCjiszwwfPphr7uXdrgavzMXEDCSVbVqDm5P 6ErjA8NfJRgY/hMgiy9Wn8CNEYv+UyTlc3vgez6vidQuFd9X/9yb3tGxQaDdDK+6 UINn/YLlQGHY8MZtlYGA6OMCHOnNSvincNkQow31jITWWA4LHctRyBvP2st/N1ZA pspgIO9/TwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAbAvJepJuOPD0T/LS65DstUv5ejkfoKG7Dfat52Mo/4ubOZ5X aLAMQaPHG6Z3cPOty3Bj9KK/yr+8gj+lCI0AlTANBgkqhkiG9w0BAQsFAAOCAQEA VcDW4NvunsGqak4Y5ZehEenLWanWECgNQOLzHjWO9hJ0FjqHkuzJpBScrr6lJ8FH fbUmjuQBU17CnO/rM3D4v+2S4dcZ58Fq5CeI8w+A0vz12u3dFaUFlXT5qorkxR1z c5N5FbaUy+9DcFpnj0rK+9IUulrSprffbZAJOxhOCGotp5737+8qVCbWFDFvD7+l XZ9taUyZZBboRRM/3B+Q4i+KXQC05R/Lz276gZnve8JNW/IngHTU9OJPSS1GtecC IfR+wOBnRfq+BHOTcCSOgQu1hWADthn8PBKJSF4A3Uta39x+flkabtd9ljcYKoVW ReLSec1sHex1E+fcjXKL3w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIQc0r89G103AwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE4MDgzNFoX DTI3MDkxNjE4MDgzNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANQOEFKZQtk3J2pvs/tCFnptLdqallVewe/sHs6PBd80hMCz6CySoN/Pr4fPtz/F zELaX2tkoLVwfDy0CKkWV98wU51GKnM9GMOTy8fOIQi8P16VWEM/cZZ4EOIHFBtE uputiHFcMMm+0eEAN0xUlskKMArFT2PrXVeAwwHaKMpbpjqaKCmAb4ecZINHs/EU zhNRRFilZGll7Iw6miyj3QxxJNXmN3kGDze+yZ4SIAb120NVSec+isQlv3Y0Znua z0zw+6KVrp35ZlANq2kKBoIKcPmzXSGPUJV13R/YNY3puyD1pUBoJ64QRD7DmLQX hUwFhRlZJPZ8LwDFKBulyRkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAXg7GucwRgqhQEsBSJWQMpKGBE2FrR738RLjMrASCFdwf1SzV88GdXCzt 7RE5K6Dk41rBbJ+AOryFIgc4AzePcDBLBgNVHSMERDBCgEBsC8l6km448PRP8tLr kOy1S/l6OR+gobsN9q3nYyj/i5s5nldosAxBo8cbpndw863LcGP0or/Kv7yCP6UI jQCVMEsGA1UdEQREMEKCQCouYXBwcy4yYjViODVmYi0wYWIxLTRkNGQtYTJhYy1j YThjYmQ3YjU0YTYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAEZ80ndnRLuBwHSL8U/Ud9U8F/aeRZmhNGP2GUKNK3zcPVcQ+/SbmpR5EeP8 Djbsby2TWSwNgz3k40YS4oNd9fq8nwwg82hPIZaJnLD3Bbwh9xZwghmDSEox0hGL U7wUxFgpSsGv41ccy0RHGpNWI04h+fTIx8T/IKXNjfQ9Vw6xigUWWoxWs7hBVJMS MFtTG8P5PQjDW9/XNDSYn139/A1vO7MFteh9gv5czppnstG0QKjB99p5bX9q+627 opMCg1xXW55hakdbFgiGh3VMh86eOJbIsOEqOkatvdVbYv48Bb4XvSn8zjmUd6XC 2n1ox+7pc/ZOvb64RSGMJ16Majo= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T18:11:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:11:49Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4196" uid: 489f3156-5a15-49ec-9c09-f5f097d34e91 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:11:30Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a3826a64-2101-43da-b11f-52b7f846d725"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:11:30Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a3826a64-2101-43da-b11f-52b7f846d725 resourceVersion: "2430" uid: f906008c-45dc-4121-97ef-29db2c0f5025 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIH1UimK/2Xs8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4MjY0MzAe Fw0yNjA5MTYxODE3MjNaFw0yODExMTQxODE3MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODI2NDMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vXZ9180QuN4PVXIJlQmKFgZ7cdllWZaX qKbjTzR3LXHpSgZiC6b/+HcdRDabBMn1TJ2Pt6cjHLq2XRc9Hk6/g77jhx40ioeg lTn+bI7jwTUOn8eqfuQUDujPJYRn0FTsYcYpHEFKTEwm9+MnMAkI2vsWaZu2cw5o PRLMc4IJl32HWsxKvlkbsL+cFfVyt0uM/dv/KX16bXZFXSqcn3eek6DvECc+KAso Jd2kvdt5w0VbxjDSMG+9bt+6mozFOABomull27qSyOiGOrxMsCl2yLUMzgSbPjJ0 OhCwFFNFvP6EUO8vz/Jxk71QObMHEKgJIZj6C/LQXKMZuTag69jxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWf7a3 wcR/bzqU+O7zBKfLfw+X4DAfBgNVHSMEGDAWgBSWf7a3wcR/bzqU+O7zBKfLfw+X 4DANBgkqhkiG9w0BAQsFAAOCAQEAetuAQBJ5DYTbV8hEWwroQISspIS/uVrXKBHF T04ZqIyYVXg7+LA9taD/hAy3t7mG3cqzizkqHNBM85WbvmvKsZjFrUrTvyi0fQP6 Z/jwdlaY6oCpU6zUNAIS9ruWzJdoRI7Ey5upEj+85AJDPIG4QjVSe6nIqF06cgYR E9wniTmsTOdHTwFgfbGt6BJgNxVPEzvwYuNKDcBUINDdE0A7HSE79zE3/U2nkVTf bgAabj/DJBumwKf/AlDleCkRJrw8C+9ur5sqlgdlYdqWawXmBF5QWJHyld2W/IIe iCxZgrX1h5RhYk/R5hVNsIPSpXHigGNaXb36yDanWLJLlbeNYA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:23:46Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T18:23:46Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15039" uid: 555160eb-c705-4448-9bd5-1af6ddea7413 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIH1UimK/2Xs8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU4MjY0MzAe Fw0yNjA5MTYxODE3MjNaFw0yODExMTQxODE3MjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1ODI2NDMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vXZ9180QuN4PVXIJlQmKFgZ7cdllWZaX qKbjTzR3LXHpSgZiC6b/+HcdRDabBMn1TJ2Pt6cjHLq2XRc9Hk6/g77jhx40ioeg lTn+bI7jwTUOn8eqfuQUDujPJYRn0FTsYcYpHEFKTEwm9+MnMAkI2vsWaZu2cw5o PRLMc4IJl32HWsxKvlkbsL+cFfVyt0uM/dv/KX16bXZFXSqcn3eek6DvECc+KAso Jd2kvdt5w0VbxjDSMG+9bt+6mozFOABomull27qSyOiGOrxMsCl2yLUMzgSbPjJ0 OhCwFFNFvP6EUO8vz/Jxk71QObMHEKgJIZj6C/LQXKMZuTag69jxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWf7a3 wcR/bzqU+O7zBKfLfw+X4DAfBgNVHSMEGDAWgBSWf7a3wcR/bzqU+O7zBKfLfw+X 4DANBgkqhkiG9w0BAQsFAAOCAQEAetuAQBJ5DYTbV8hEWwroQISspIS/uVrXKBHF T04ZqIyYVXg7+LA9taD/hAy3t7mG3cqzizkqHNBM85WbvmvKsZjFrUrTvyi0fQP6 Z/jwdlaY6oCpU6zUNAIS9ruWzJdoRI7Ey5upEj+85AJDPIG4QjVSe6nIqF06cgYR E9wniTmsTOdHTwFgfbGt6BJgNxVPEzvwYuNKDcBUINDdE0A7HSE79zE3/U2nkVTf bgAabj/DJBumwKf/AlDleCkRJrw8C+9ur5sqlgdlYdqWawXmBF5QWJHyld2W/IIe iCxZgrX1h5RhYk/R5hVNsIPSpXHigGNaXb36yDanWLJLlbeNYA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T18:11:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T18:11:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T18:17:38Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7944" uid: 4ae32a8e-9661-4b42-9da5-2759ec95b3b3 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T18:11:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a3826a64-2101-43da-b11f-52b7f846d725"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T18:11:30Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a3826a64-2101-43da-b11f-52b7f846d725 resourceVersion: "2428" uid: 8d22f6b8-30d1-4da0-be7d-0ef3a603d0b5 kind: ConfigMapList metadata: resourceVersion: "71418"