--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T22:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"60391a25-c157-4302-a315-24aaeb99a1f5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T22:12:08Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 60391a25-c157-4302-a315-24aaeb99a1f5 resourceVersion: "2483" uid: 1e71329e-9b87-4884-8d1b-ad2ed166d7c9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T22:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T22:12:08Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2477" uid: 8c297f75-3ea7-4b6d-a2fe-d566c3c5d2ec - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T22:12:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"60391a25-c157-4302-a315-24aaeb99a1f5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T22:12:08Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 60391a25-c157-4302-a315-24aaeb99a1f5 resourceVersion: "2476" uid: 94ecd86d-5e46-40b0-90b8-6693de5ce2ab - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIPLuQmk9TTV8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIyMDgzMloX DTM2MDkxNTIyMDgzMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/iO5Xb6haBt gipsN6JY1V0G0ms64cupzavBXgkDOZ1IrfG8FiEfLrjuItELgiDp+E5FZ1jSkvyv GI+Trb+ZJ3uxvhKGkPREUzk/50pbVf2QSGZcoXtrynOeNEnMFeL5vJQpccgagyE+ dKvbXPcDL/QbCa8TqOXawJv/D4C3wPLVkkl0wEPumBoUUU6/koVz+BsyJB5AAwW9 /rS+Siq/66PuU3QNHmcdzgDd2jt8JJNRFYRbUFjWr0QB2KUQ4KAj7lo4A9aVnBNw j828WAXBLcXNeS7xSpRVr+331xQ/Te19GtW7bTlnTBRDJ6c3U3+URPqUjPTV/fo+ jXI3IgyWSwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRADl7lomqRo+mgLvmz0cBelW2XhwMxfpfjB4wf2n8wWb9196vT OaftAiajABtShpQG4TUx37J+CPORJiYu8K9GhzANBgkqhkiG9w0BAQsFAAOCAQEA MzDcU4oGpDoEK+YynmnwR+fQcO73SCOmHvNTdPc7yF2kG3th8a8J5J+tjxe+qqP5 10dk4fTE8x67JTyQbS65EPGUzczo0Ul7Qv8zhiX5CjCIsZ57LW8TTVCG6S0Q4lFM BHhoa5mKHE0aHGevsDTG2nNlvuIMBhuMuKBe3bT1P6kPXUt01HBcdeibxviNzMLd qi7oqQOkV5Hx6MX/uKmlIR7ESMrX4JBl0uImP9/XijQMBAVNagpHXZt+/h/yjPnE nVMhPgwV3CAstPEh6uRr7yx+Pbb1PPOAxpZ7ML4n8wFqXY3i1zExPywiN8uu5+A8 we/cZqHY4+kcWbUHNI7jDg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIICWAjJWllSikwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODIyMDkxOFoX DTI3MDkxODIyMDkxOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANIU71BFklvi/P7bmif4ZDTnfSp1yChYBOrjafSFfOwej6V6RnYO5wUjq3oQ0Tsy aJSCEYjsOWH5tfNwhro74z3C5lMNWORl3kib/VrNfFN57H7/BaAkq+CnfCtjaxs1 OMhEd2CsLctYy72I56uJw1EB6rKQl0uEUSg+aUZ0pwV7NS5z7+b3gl3cMi5WASq1 Wu88hRw7UtlT6BgJaef6bEQIuTyz7JlDkvXR6UHXKQwZIJOCOBsgcf4VM0emKSmW UtgADtUW2MZPYkMsU23/Pi8F4RST6KPiy4SheMBaXjb/r4928KklZPHegCnPMJJy bIHS5iXZdynOGV0qWVZu3nsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAaGTyFMOhj04r0D0az6jU06csT55F9FXDZ7cTpsYZCrW/I29alPQjhQsS Cc+T+okgGxApW0x8uSqZlwjDCHDSuDBLBgNVHSMERDBCgEAOXuWiapGj6aAu+bPR wF6VbZeHAzF+l+MHjB/afzBZv3X3q9M5p+0CJqMAG1KGlAbhNTHfsn4I85EmJi7w r0aHMEsGA1UdEQREMEKCQCouYXBwcy5lZmVmNTM2My1iNjM4LTQ5MWMtYWQ0Ny03 ODVlOTc4MTdkMDcucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAAKP5z9g5qhbyTdnSoWQV9nNdRdMZnpkWTpLH9AIL95oywKN+i1XuGH4wbIU s2kycjWwhPbpvi8/Z0p48Ubxb9Gg7w4w9BiOSj0tMnhtpC3R5Wznrwkvlsm41rDd TGfA2TZfQCJ7sup0/oJm93VOqv2nXgkp9l8zBH3iOV2/XHP0qmMy+mOjCUADfYTk YGAuowaGLqspwi2eOFXMAeL9jf1r5v0Dasc/1d0yHPD4CdOJOSsFU03jHX/sI94C LOjFO7O374makZ7RET8qC+irT+SvhlXxVFzA7j1DRbUBe0VdnJItWV8DZCJrc6j8 UkIxJCqtnYV4LzrDQVgIwpFWoqs= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T22:12:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T22:12:27Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3027" uid: f03218b8-ecff-4739-a447-acf8cd0cef34 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T22:12:09Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"60391a25-c157-4302-a315-24aaeb99a1f5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T22:12:09Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 60391a25-c157-4302-a315-24aaeb99a1f5 resourceVersion: "2494" uid: 7933f4bc-0c05-40dd-9ec7-7d9f57197cba - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIR2dN5TE1GjswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2OTg4MTAe Fw0yNjA5MTgyMjE4MDBaFw0yODExMTYyMjE4MDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3Njk4ODEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00cPcUvFaoNXQ5nDg8UNqtR3i7z8eWbsd AXBHsU3opGcb0+CDaFOwICVKDw38px/bn7nCeMx+iw3KPqUA9qs0YmChUU7pLfXW ihJqznS3tiSS206WCuUfMvHH1Y0v5V95UsJQAnRg9p0HXuqxQE/LEQOrNlcD2ixt YDeyiwv6FH4HFvzCqyxC7JyBEeQB3EsJXygJpEVW+86eeLl00Wmu4YhHWBSP460U L/xCaXkeCzf97MPtD49ilXsaxV7fAEuJUVtFf9xqQX8c1NrqbjI+UD0esBdRxVQ2 P7WFeDqp40CcF1b3Dc+jHWYFkb/ux5GyaRNm9RUye1FUxy5FNAp3AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQaFPYS LxF9stuu0nqHPX+wR1zwLjAfBgNVHSMEGDAWgBQaFPYSLxF9stuu0nqHPX+wR1zw LjANBgkqhkiG9w0BAQsFAAOCAQEAO3A0YPq59FV77VVG+0eYmBeIekKK8c7U8skt c0xmvWCI+U7G6iRMIPwMOfGZHy9T6ZDfVnuM7iOCYnsEjMQwVD4QZEULKxfe+bhX rmwiFKsK8uYDvixwHcBfZetoZz0zhdKvtd+PYyM4klGrv+m746Teb5VjT4mDuo9C vRIKUUCjyjjsqUFvmJMzguh/Ihb/JI/gLv4wNoIvGAJBNlEzkSuzdLwi40kX7Vtz TAXRtP5arkUZNS7sogCcXOOWzQysjs88ncrQv23OVtQBqd9PaTp5XQ+a31X7zX+2 pd1KFej4IiO9yozhLQeNLoOu1I5faPniRY5ku+Z4Ci1D9r5Aag== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-18T22:22:53Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-18T22:22:53Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14746" uid: 061b1109-eaf6-457d-8406-5affb0eea2ea - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIR2dN5TE1GjswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc2OTg4MTAe Fw0yNjA5MTgyMjE4MDBaFw0yODExMTYyMjE4MDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3Njk4ODEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00cPcUvFaoNXQ5nDg8UNqtR3i7z8eWbsd AXBHsU3opGcb0+CDaFOwICVKDw38px/bn7nCeMx+iw3KPqUA9qs0YmChUU7pLfXW ihJqznS3tiSS206WCuUfMvHH1Y0v5V95UsJQAnRg9p0HXuqxQE/LEQOrNlcD2ixt YDeyiwv6FH4HFvzCqyxC7JyBEeQB3EsJXygJpEVW+86eeLl00Wmu4YhHWBSP460U L/xCaXkeCzf97MPtD49ilXsaxV7fAEuJUVtFf9xqQX8c1NrqbjI+UD0esBdRxVQ2 P7WFeDqp40CcF1b3Dc+jHWYFkb/ux5GyaRNm9RUye1FUxy5FNAp3AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQaFPYS LxF9stuu0nqHPX+wR1zwLjAfBgNVHSMEGDAWgBQaFPYSLxF9stuu0nqHPX+wR1zw LjANBgkqhkiG9w0BAQsFAAOCAQEAO3A0YPq59FV77VVG+0eYmBeIekKK8c7U8skt c0xmvWCI+U7G6iRMIPwMOfGZHy9T6ZDfVnuM7iOCYnsEjMQwVD4QZEULKxfe+bhX rmwiFKsK8uYDvixwHcBfZetoZz0zhdKvtd+PYyM4klGrv+m746Teb5VjT4mDuo9C vRIKUUCjyjjsqUFvmJMzguh/Ihb/JI/gLv4wNoIvGAJBNlEzkSuzdLwi40kX7Vtz TAXRtP5arkUZNS7sogCcXOOWzQysjs88ncrQv23OVtQBqd9PaTp5XQ+a31X7zX+2 pd1KFej4IiO9yozhLQeNLoOu1I5faPniRY5ku+Z4Ci1D9r5Aag== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T22:12:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T22:12:26Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T22:18:13Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8122" uid: 6d6fd367-c95e-489e-8b50-f05c8c1f4d4b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T22:12:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"60391a25-c157-4302-a315-24aaeb99a1f5"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T22:12:09Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 60391a25-c157-4302-a315-24aaeb99a1f5 resourceVersion: "2488" uid: 1a689249-509e-4c78-ac73-a30b1f68671c kind: ConfigMapList metadata: resourceVersion: "71222"