--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-10T20:51:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"25dd395f-8811-49fe-81aa-aebe9a8811ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T20:51:18Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 25dd395f-8811-49fe-81aa-aebe9a8811ad resourceVersion: "2325" uid: b378f0b4-f18c-4d1d-86a8-db77c7c83951 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-10T20:51:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T20:51:18Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2317" uid: 787b4bea-39f4-45d7-ae30-4d7fa7145ae5 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-10T20:51:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"25dd395f-8811-49fe-81aa-aebe9a8811ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T20:51:18Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 25dd395f-8811-49fe-81aa-aebe9a8811ad resourceVersion: "2316" uid: 8bc8235a-b427-4611-b144-6435d15f5ff9 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIU39pm4YKi54wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDIwNDgzN1oX DTM2MDkwNzIwNDgzN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuzz9tA9iIFf fB/EieCaFYXhOMEz3Wt7VzbQgSM4H7YP1XK7lwDmJzYp8bnoQBWDepfqZg7pPBsd blIgKnn+dsisLAFh3y4A1TP7/D7qPFUGbhdXFzLwlrbVTY3aZg11Cqtv+pwmTP6i E+R/2bywj6rdRebrH6JDQptpz8rij5ddIOSzMicA8+Ny1kxSvPCTcR/vdWU5jBlN wD1xvU5mDkoJvj72t7IQ98n++39M1QhpfYPasMMY4t+V3MWXdMjw+e5qgQj8753w XeODOxMgDAJtubzUEXHy0JVkndUhZjTW+Yt7qEmuAWrjDLr/e7+ESb6SGAOPsNcM rezKHGO4kwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRArcT9/O+G7o4iTGtJU90EnNYt0pTv6cg31jix+OGCfDSPEtxq HY6NM3m/1YbqNsJh+dbvC/eCkZyhO84HgN2WYzANBgkqhkiG9w0BAQsFAAOCAQEA Mu2ZuEOPYgg3byvl03B4mBrXoUqy3rUuCZih2H56db2dtT5d0a5gFxrbCMIx3T8L mgKUSOS/S/n9XVH7r4jJyJqQHojG0HaxJrEp0rLUWI2E131TZQ6Sj688s52n44xS qDCaC9oJMT/RgoJ0efYPbyXg+ba1dOsvT10akwi/r0wM5sTosSgMySO/eeZ1z8I4 zXaVBL2/pTtGY1GfO6shNhzRRldhdRxtzvnGL6/iJie/QEiBUa1F1PWr91peeE63 6VS6tRKunoWQIh7kkwQJhBqVH+M6xHErHv9D6ZEyuypeLB5Y2PVjTZYYlD8Ncytb FN6HExUEZ2kkIU6a/9khsw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIbJA5hcYGKkcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDIwNDkwOVoX DTI3MDkxMDIwNDkwOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOin07SQSkPgC0MG8BBzw1sRKj623B0qjDKCiK8KM+ZU+Mj6DlDdOct11G89KzGP 4P63lswzxJfY5MC/E5x5jsrOFkI5CPn2Ju1rNNp2vneBMId+avS7EEBne+2HChn0 jMaV41v4GDQh4CN872AdJ2PulCeqq8kkuOX54ZuWncpQYVrXbEPJiAjp/iao3E3V 8z2COdzC/keS9U7PEcX8jE4Z8ib7jyf6htwJ5dOQcOIxYq/6cpyKuQfhguUbSqmL poi9/rhYDtGMA7M3+tLAAq8t6mgftp4w5dHWJD3FcgYPUavcB8c5Bx5vzZaJFTmR buo1hIcKr8o+wYnHFXteg1MCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRApq6ShDQNFlMtpq04xErWLBYSdaAl2lG8gBt6N5Bvqlj9k+RhItyduZ2+ 07ey+cq6sK9RazHlzbivmp+fsAb0JTBLBgNVHSMERDBCgECtxP3874bujiJMa0lT 3QSc1i3SlO/pyDfWOLH44YJ8NI8S3Godjo0zeb/Vhuo2wmH51u8L94KRnKE7zgeA 3ZZjMEsGA1UdEQREMEKCQCouYXBwcy5mYTlmODdiMy1kOTQyLTQ2ZTYtOGVjYS0y N2IzZjVhYzU4ZTkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJ36uQAjrXe+e1O4H7ELFp1Y2E8uTApGv9hnh6axqyxsYr8X2w3+JbuItpOZ PqkJ9ovTLJbZDsUuPCUv/4tb8pF+SYkiTElr3okAhBZwLffGfUjB4OgQHzO1BoaF tGOLA6S87rMDfmTvtNTSVCkLP9QVpb9DpBvyEPnPHDXz8Q/FaEqGzcMW6l4eJlnW 8O26DSdOSx5myhZ79T2bJpZAowK37IMKupGAen2Jgd0l7GRnTijQjIoZtxWiqrOt yUSaeKRE7DQR4NFJrAmXzKTwpPGQGiznP1XShXLmsxCbH7GUm7uRpw2Oh4rIbpH3 rAiGX3yGi/GD929t/mpZCGQcHzk= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T20:51:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T20:52:13Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4384" uid: 69631a4e-1fd9-4ed6-b0c3-e842e631f288 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T20:51:19Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"25dd395f-8811-49fe-81aa-aebe9a8811ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T20:51:19Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 25dd395f-8811-49fe-81aa-aebe9a8811ad resourceVersion: "2330" uid: a8ec592a-192d-4a1f-bf2a-2ebb25a44e3e - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIINoZHy+A3tsswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA3Mzg2NzAe Fw0yNjA5MTAyMDU3NDZaFw0yODExMDgyMDU3NDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNzM4NjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhQoGr5AOXss3N4wvui3TFaq1lvYkOUqf UVI6XPyeRzA2kywjTmgD9yF2R3OhZJNVpv3kPpC/EmxxlRxPlRhMuMmVlwBlomXM rp7PxQhSzU/VX/uOXRdLkJOYJGM8vbtFZGJ0s+90bYcZGj/fUR3nwLdxJRh9s9XS Ow5OVkH8vFOp0azZkmkTmCj89uDtAStgmCaeMYsYCWQfwlbzu8zATgBa4QKV5JeC 48XSmsBFC5v1JBhtpsSQnurKYBudJCa9qnUB4rzaOZN6u+88R4bpnJFlp80LtDeU Ob7hg1G6lIkH4HkxK4XWHYC99dRyvmBDFBsdp7fORxdaoTb31VdxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT+29O 7yCMX8470qo0uk0+a+SNQDAfBgNVHSMEGDAWgBTT+29O7yCMX8470qo0uk0+a+SN QDANBgkqhkiG9w0BAQsFAAOCAQEAD3NmzZB+QmfX5ytIv/fMhDyPzP85qirN5nIc x/C137VI3rDq0Ck/gOFFSSRj1cCEN1RaG0wspCPna2MXVpGf0adMea3rDatUrjbN bXUfKBqzK2+VwUvC8tQSIy1O7beAFt7XDQnfAJRzjiR+x2is3MTDU18+MuAsq6wO /V1oJ16bBd1jM1kMW0/tzzynAg8emSZfJycuDYgOia85306teFnXtFMa40OPCqqa SA6hPQb4aDbVbjYGP3AYxTZOgmj2/bvBjkl7n4gdAI0VO1NlyXprTqOoPk4CRElA AbYk7xp72EygUdSAkyqECOYyJEDvBkxB1pEjJ/o7UMG+KpW3nA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T21:03:26Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T21:03:26Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14930" uid: a6beafda-015e-466d-aa69-9c7c35026b2a - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIINoZHy+A3tsswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA3Mzg2NzAe Fw0yNjA5MTAyMDU3NDZaFw0yODExMDgyMDU3NDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNzM4NjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhQoGr5AOXss3N4wvui3TFaq1lvYkOUqf UVI6XPyeRzA2kywjTmgD9yF2R3OhZJNVpv3kPpC/EmxxlRxPlRhMuMmVlwBlomXM rp7PxQhSzU/VX/uOXRdLkJOYJGM8vbtFZGJ0s+90bYcZGj/fUR3nwLdxJRh9s9XS Ow5OVkH8vFOp0azZkmkTmCj89uDtAStgmCaeMYsYCWQfwlbzu8zATgBa4QKV5JeC 48XSmsBFC5v1JBhtpsSQnurKYBudJCa9qnUB4rzaOZN6u+88R4bpnJFlp80LtDeU Ob7hg1G6lIkH4HkxK4XWHYC99dRyvmBDFBsdp7fORxdaoTb31VdxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT+29O 7yCMX8470qo0uk0+a+SNQDAfBgNVHSMEGDAWgBTT+29O7yCMX8470qo0uk0+a+SN QDANBgkqhkiG9w0BAQsFAAOCAQEAD3NmzZB+QmfX5ytIv/fMhDyPzP85qirN5nIc x/C137VI3rDq0Ck/gOFFSSRj1cCEN1RaG0wspCPna2MXVpGf0adMea3rDatUrjbN bXUfKBqzK2+VwUvC8tQSIy1O7beAFt7XDQnfAJRzjiR+x2is3MTDU18+MuAsq6wO /V1oJ16bBd1jM1kMW0/tzzynAg8emSZfJycuDYgOia85306teFnXtFMa40OPCqqa SA6hPQb4aDbVbjYGP3AYxTZOgmj2/bvBjkl7n4gdAI0VO1NlyXprTqOoPk4CRElA AbYk7xp72EygUdSAkyqECOYyJEDvBkxB1pEjJ/o7UMG+KpW3nA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T20:51:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T20:51:15Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T20:58:01Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8328" uid: 4e7138bb-f926-4b33-b55d-91c3be2540a4 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T20:51:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"25dd395f-8811-49fe-81aa-aebe9a8811ad"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T20:51:19Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 25dd395f-8811-49fe-81aa-aebe9a8811ad resourceVersion: "2328" uid: 3c17093e-f1f9-4362-8b77-a191876cfea6 kind: ConfigMapList metadata: resourceVersion: "58208"