--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:09:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a8664018-6d43-4a06-ab44-194a9b55789e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:59Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a8664018-6d43-4a06-ab44-194a9b55789e resourceVersion: "2609" uid: 96297c9b-a6d7-48b4-a63b-c09d77775432 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:09:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T19:09:59Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2583" uid: ed295d80-e3b6-4829-9fb0-75e71b0f8c45 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T19:09:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a8664018-6d43-4a06-ab44-194a9b55789e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:59Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a8664018-6d43-4a06-ab44-194a9b55789e resourceVersion: "2581" uid: aea5bcf8-176a-4535-9d98-292966f67243 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIaOve8nNMYbwwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE5MDcwN1oX DTM2MDkwNzE5MDcwN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbZnx1bDgmsX eLyVKLoTPUvGmtYareZWmZ+O8Pf+VakztUCNkL+VRvlMXtR/nrBC8ZmZKLEmkZVa V+EhMpdOc83Rk2D8nM1WtsKjEyIaWu5ff8VcWw4CQIGwahsGKycp4AQ25WFxCKWQ YdMGAWIMQ7C2+z2ZbUU2+/Lg/AEQvWXYiZYVZ4FsiXK9pDW7FeIULJGTm/hhfHBE QaISRMTo644qo54beAy7xRtuVIunxmyMTRfGuchq+l5y40MUD/jxFBQtT+wM+0ne G5y+/bHAwD6owp0WvDI4XDqaSGl1jIPxAcpUAFm2Q3wNQWJFREZGYCJN9YVsh58b gyn3iyQDLwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA/xFlHTAWHMXJ/NribiIHh7rnE20tC5404OShbgLr2M1rHDjX yB/XAGOjaPh1xwPgjzLxbcael5auta7BbVbGqzANBgkqhkiG9w0BAQsFAAOCAQEA VMNvdiiTUUdGQDiDmC15sUtW7yR+4OWHLm9dXLzEetQpp/+FOEtU8GcKJPhCx0PI 9Ee+PkzLbS9YszyU+LpwLz68y/Ay5i8ExmDIttZNIDTpODlAoLNfTz1a19BNXmcH LQ8pW/mebeONeJXXR8ct59dJY32xb1ha0f4yuAYoPaPRvrlINiIolhQWuEY6Aw0q nS/nG1FS7c64/vryN4xnqreaEjmDyCxHMylJaQ/bUKzjBA70s86U6LowLLOQEBlG FvuVe5zefLjB92YAHygmBlry5c8Y3g5e76dgfwFBGfoEHoSUgt9JxMyQY5fK7aHw Mw3LZfTqbjo8/a0zvwJVfA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIRbZiRc2tIl4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE5MDc1NloX DTI3MDkxMDE5MDc1NlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOQL9BUpC0B44k2UUgFp5nGb/7aS+lcPJOlQas48qcW7mCFiiqmMo9slsZr3Ttkf mrqjOq7MnrLbJjdiGoOKKiRbxiZ2we8r7mwUzS/GfSWGV1suYYnvpfL+m9KpUTWe vlAOoWiYCdtXsXbltGX4P7PgDDYwI+KbgAcHyHX4F8AMXKsU/mEeCrppfbEEmY0x 6kub9wmtMD6VW+g7G2P3+DPcAR7wlZE/jvURLDrsaTpqxR0avTr7HCDhu39z0eOH LUybA+NGw2qUn2QWsSaLdn/VbQAuDPXbnFky8Saj8+OCVdu2skYsnrF9kBHjkNmj UJk4QnGnmjD+BlX7oM279PsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRANCuUQ7c/Ke5mNYcMPxLDWlsnLAVynr1Jx95EZf4I2lM5EcicLAhHMlS/ xBodsUd3EXt6PVyA2vjFAyPokFCg7DBLBgNVHSMERDBCgED/EWUdMBYcxcn82uJu IgeHuucTbS0LnjTg5KFuAuvYzWscONfIH9cAY6No+HXHA+CPMvFtxp6Xlq61rsFt VsarMEsGA1UdEQREMEKCQCouYXBwcy5hZmZhMTNhOS1mMzdmLTQyMTItYTQ3NS1i NDk5ZDc3YWNhMDQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAHd1U76SVu8gfBYhBMjorfBoPigoQE4Ib2Or8cB9mtVgx8owB4spFyEGAjTs 4uRq89Q65Bt7rz1zmfWEF7QD0siOcz4OY3RKEXHrGcvl4TbTEk7ecxZdK0i1xW7X O8KNUHCwFUFbR87jl4VwJnz8y6npsBRqkHpvV43X4RFHuwKIb0a0b8BcFUX2sYFB bR8VWGz/DrIqDQ0xxvLpQS4Fji5FBB2mijy1xw9L9ashhRYa8qvOfGgMILaeqOJJ ew0rImdZs8Z1p2yYammiMGHZ3eYCYbCQ5QVLYczvwEuire62KCoCcqwHezWuM/7O G+7mP0hiH8+PrxRalyFE7ZNZQ9I= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T19:09:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T19:10:22Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4256" uid: 9e69fdd9-1418-4466-9cdf-797053402e73 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:09:59Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a8664018-6d43-4a06-ab44-194a9b55789e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:59Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a8664018-6d43-4a06-ab44-194a9b55789e resourceVersion: "2623" uid: 6d4b7d3e-8a1d-40a9-b8da-205fff1923d9 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIF0rc1aVGNAowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2Nzc4OTAe Fw0yNjA5MTAxOTE2MjhaFw0yODExMDgxOTE2MjlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjc3ODkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1Y7IS1ojcGXYKAf+mXIeg8hAXDDGeXiL O/qLM+TxMLset6jkRbAf8g6nBO3dqMF6/UWl1nr6mjOx2yn61lzo59afTVwpR/28 zdVc1k04TiDnvnr9jVMDuvUtNnwVoweSK9JiTBlAFZmU0XSLLXlrscvlI+5lSrvd BSIIuy2EwJQOW3tIjjYwxojgff3K8fLyN8cw7ZQVrWNtsrpPcfr6wsPjK5Fkws5C qDN91fdNpPQ7GJ17MbBh2wqI67P5kkZLWsbNQcaPVM5Nmuk1vJz2ac2AEjH/UEIr AUNg05LYBybDGGfCmtbtgMzG6+63omJcXW5TTlzkY6Zw+UPQuJ2BAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSncbP7 3ZziZjxMu3tJ0vThtRQQdTAfBgNVHSMEGDAWgBSncbP73ZziZjxMu3tJ0vThtRQQ dTANBgkqhkiG9w0BAQsFAAOCAQEAbgVEVYyKb3GpKpwqAdgNjmEOXES3TtI0GcdL JIOiNLFlptJi/Lb1MTCrXR40X4cGdAQzz7JSW4djJutEY3XRz55WH0Qbc9oB4q9A R8Hh3vkhssfrMGZVbYXk4ZU7gAmmcoVSCR8G4hCjoLcCdqdtrVWrLtR/QuJLUenm 1H4ltxVZXwJbzS8eRlbBwfsbXY9F73GSLq8VTvRG0dFrRx5J6YPgPOr9eACfdQ3K npz6XfoL80G7rIIkHSBG3ER8U2IyouFq2qQR+u3l0uo1OYrBw7XJJ9oHr0k6Kt/5 I0ZXMgQcDRaVIe4/xFszqKKP4+hq5X2Z4uETZtFMYkEDM0bfjw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:22:34Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T19:22:34Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15784" uid: 263fa684-c3f6-42e3-b3d8-e17d91be51d9 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIF0rc1aVGNAowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA2Nzc4OTAe Fw0yNjA5MTAxOTE2MjhaFw0yODExMDgxOTE2MjlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNjc3ODkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1Y7IS1ojcGXYKAf+mXIeg8hAXDDGeXiL O/qLM+TxMLset6jkRbAf8g6nBO3dqMF6/UWl1nr6mjOx2yn61lzo59afTVwpR/28 zdVc1k04TiDnvnr9jVMDuvUtNnwVoweSK9JiTBlAFZmU0XSLLXlrscvlI+5lSrvd BSIIuy2EwJQOW3tIjjYwxojgff3K8fLyN8cw7ZQVrWNtsrpPcfr6wsPjK5Fkws5C qDN91fdNpPQ7GJ17MbBh2wqI67P5kkZLWsbNQcaPVM5Nmuk1vJz2ac2AEjH/UEIr AUNg05LYBybDGGfCmtbtgMzG6+63omJcXW5TTlzkY6Zw+UPQuJ2BAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSncbP7 3ZziZjxMu3tJ0vThtRQQdTAfBgNVHSMEGDAWgBSncbP73ZziZjxMu3tJ0vThtRQQ dTANBgkqhkiG9w0BAQsFAAOCAQEAbgVEVYyKb3GpKpwqAdgNjmEOXES3TtI0GcdL JIOiNLFlptJi/Lb1MTCrXR40X4cGdAQzz7JSW4djJutEY3XRz55WH0Qbc9oB4q9A R8Hh3vkhssfrMGZVbYXk4ZU7gAmmcoVSCR8G4hCjoLcCdqdtrVWrLtR/QuJLUenm 1H4ltxVZXwJbzS8eRlbBwfsbXY9F73GSLq8VTvRG0dFrRx5J6YPgPOr9eACfdQ3K npz6XfoL80G7rIIkHSBG3ER8U2IyouFq2qQR+u3l0uo1OYrBw7XJJ9oHr0k6Kt/5 I0ZXMgQcDRaVIe4/xFszqKKP4+hq5X2Z4uETZtFMYkEDM0bfjw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T19:09:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T19:09:56Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T19:16:44Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8397" uid: e512a200-3787-4475-a942-6522ba7e3adf - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T19:09:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a8664018-6d43-4a06-ab44-194a9b55789e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T19:09:59Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a8664018-6d43-4a06-ab44-194a9b55789e resourceVersion: "2615" uid: 133823fc-d789-4062-8437-92ba9b0625e8 kind: ConfigMapList metadata: resourceVersion: "60006"