--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T15:49:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"31d764bf-d5b8-4e9e-b9f9-29843b34b964"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T15:49:48Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 31d764bf-d5b8-4e9e-b9f9-29843b34b964 resourceVersion: "2315" uid: d7c270e9-2aac-43c7-9208-045bf18808d7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T15:49:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T15:49:48Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2310" uid: dbdee96b-5874-49fa-8b67-13e0b4affc9e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T15:49:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"31d764bf-d5b8-4e9e-b9f9-29843b34b964"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T15:49:48Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 31d764bf-d5b8-4e9e-b9f9-29843b34b964 resourceVersion: "2309" uid: 3db7db75-09f9-42ae-baf3-bcec1769cd8f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIEVUupbbQgFMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE1NDcyMVoX DTM2MDkwNzE1NDcyMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nm+VIkWL8sj JOGPQtxNIPTZNQ2n+vPkrwIygH/wm604rhdDryCvfqgMqApptglw1QcDSOrWYFfw pMXxKj90MKYdSzxT3QkueZsb75d8Z/4f7c7U4YMMM+7ZvMIqv4IxV0AruPkVYr9+ dbHN8WgG/EbEVuTHeT8fJ/gc5ELLbr2iKfIxBk19pHWH83qhIijEl7MyNCHsCoWA aC3SEgieQZzvZx2U8djaXE4ssWTEzvFB4iGSPQXWtPJ5cCu6cRn/DwCshN7BzpHg vpIVAmvl2jpk+W9zAeAhHfEYhYQRZgw7+HyhJOVKhqG3BRb33swlhn25admBcs9I D+AjbmqhRwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAnhbGbPHX3OKyMdSF8gry4V8AfF1ZbBIP/vsUx2zXCOKNsfy+ N8GWMnB3vUkcLqrSOh2m1iYfMJPtTgQXx5XUFDANBgkqhkiG9w0BAQsFAAOCAQEA dllNn94n9/doUj/7dFAaF0Cnk8FJXMDimBya0hzf5khQDDavOETH7W1X5AhByquI vsoCh52gZz99eg94JSibZANF7tMBQ2b2g2k6AiMqUiRFO9SOoaHDYdXSHXBZzAlQ KErorm01yBBoawOyzxA7f0P7xL5PqXGPStMzKctwT/8VfwToRLPpcizRTeiDd1kS Vnge0rE1Aq+IOSa4V9UZS/TJFpD+YXZAWLxpMeXXpOyJbB4Q8iD6ipngzHIjV8zb 3vWIDuYo2c55mmLpAdDuDW4w3bB34Vj6hELlm9jMq6zTH9HmV+9pGWWjHTvPVJGG t09tt+RfYgyojsL+kPPrgA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIAfyoPoFr378wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDE1NDc1M1oX DTI3MDkxMDE1NDc1M1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL0AVG40TvmYf2/ZTdDaxQty95je+ZQyMSoJ7DhFzBWmm5Nj5i+EZfy1mTvEeLbk p6sIfdirT3LtJLspV/iEUMKOzxtexIXGj4pY/e8RLMZ3OfmbMXAm9LchxaD4h5Nq KS+l4lVbNv4QCtT9nYc6q+UCZ/PVCKIwaE87IalMuBPk1HvpsH63OjwZD79NvwM2 6hgEqRf+kgpYmPWNS0O2Zs+4BMJp85R075l4CBrdS5+F3jMr0cq2tFtTq17dk+C2 Rx9TMKa8RNXqkHkTbpVq++sHmfr5UN/Mi69HKenZypQrUlF/Dkrcie6FOvNSU0Lx /LD2Fs9aC522n0wTgsp3gA0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAGOvVNsrRZe2RVKidCgcwxjD/V3Pz/Q9nCPf4HS3mhr7PIS69bq7yOj9V bb0YpGxeopGf5Ti1ylakwAZcHn9//TBLBgNVHSMERDBCgECeFsZs8dfc4rIx1IXy CvLhXwB8XVlsEg/++xTHbNcI4o2x/L43wZYycHe9SRwuqtI6HabWJh8wk+1OBBfH ldQUMEsGA1UdEQREMEKCQCouYXBwcy5lOWQ4NGUzNy1lOTUwLTQzOWUtYjY0MC03 ZTE2OGUwZTBiNGUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAFLLHH0pgvnJ6LDksvg2VF/aqpNUvKtJDgD9h4DKLvr0+VrWDlYutB/t4Nzf 6/ANkhOjlbcizfXW+cc0yJZrjTx9VZ84jAXyDAkShZfmXqHu7CxL8Mfc/9lQcqbx +tycI8D/aa8GetvVcCUGStXvzlNd+NcYYwRzGB0fDfqE9McLL/bGz2SOtQcgougO YyeFsK9uJKGdt5FfIs0bO7tDFkBCzBk94JAsd7ANoHOom6WgbjVnxQzAbbYEMgZU kf/sU8wkix53tGe3RdiQGVXLDnKiekTpRbFHeIJm8GwqvpVDJIBOSAJB8odaet/q mxWrQlzZEICnnNGK9oP2IXeTC08= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T15:49:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T15:50:38Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4375" uid: 7bcb56e8-4882-4b34-b76a-1cb5752bcad8 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T15:49:48Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"31d764bf-d5b8-4e9e-b9f9-29843b34b964"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T15:49:48Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 31d764bf-d5b8-4e9e-b9f9-29843b34b964 resourceVersion: "2319" uid: 87bf5586-2d87-4607-9bfb-9a9bf1831f39 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIId35Uxzw0QowwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA1NTc4OTAe Fw0yNjA5MTAxNTU2MjhaFw0yODExMDgxNTU2MjlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNTU3ODkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GWp/u9CfLcYXi3DSnPk8PcCGqgKdH/+Y QsbclV261H+hOvgA8ig6KvF9k/RB4gZnhhhtIcjXOqab6DQZSPdLzTPiEuE8Xf5j g2ME9bYhP84r/zL7qxGvCWT/t276XcqT8ZBS2TbyJphmYC0ZXZFMrPpYmkBHad4t S0MlgVgioI5X93TV7lKesR0OrUUNoNZgQgM2EfNJFokq8RdWvhgriom67gAmhzKi ouV23ElHZuyzLOYvodzDRc+8fOdZkfMC2Ujr9vlFFAUubgozO7YwHN25WWpSh3Pn XVkOuz8eaEHWtMmXcc0pw2YvwGqBQ2JWxcADmTn7L1C/OPekdvkTAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfTHUr lAh+tWh1aCkC5q/L3qLf8zAfBgNVHSMEGDAWgBQfTHUrlAh+tWh1aCkC5q/L3qLf 8zANBgkqhkiG9w0BAQsFAAOCAQEAKePs9jPlAa97q2OsUBKAw8i6i3rGN48O22ic 5pGkzi3kSAmdMjbKZpD1eQsSUuwSw3EUdcSsnOSVB94ZmGuMYtb4Pak3Kpr64W/l zhO5TQ7eI+7Qz4f7uY8fBhkKuPvf2WfxzIPWgFkFKs96pm8atsQPKmnpVZHf2P8S IWEQLMo9S6s2KbNj0oWl+/6nyeKB3h0FK1GwG4QEgt1Mabr31f13gGtXnODJEf5+ 5g36WQjpcHgpjgsQeHxhCd/Crpqo/moPPfsfMvzkuOUulLaYMadBPeCeO/hwU2vz y2EbQWnKRy0sIVrXo2SqvoSN7igrZba77vxjZaC9VCvgwPPS2A== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T16:01:18Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T16:01:18Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15306" uid: 06820ee6-6c8e-4933-a5fb-200d10c7af87 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIId35Uxzw0QowwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA1NTc4OTAe Fw0yNjA5MTAxNTU2MjhaFw0yODExMDgxNTU2MjlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNTU3ODkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GWp/u9CfLcYXi3DSnPk8PcCGqgKdH/+Y QsbclV261H+hOvgA8ig6KvF9k/RB4gZnhhhtIcjXOqab6DQZSPdLzTPiEuE8Xf5j g2ME9bYhP84r/zL7qxGvCWT/t276XcqT8ZBS2TbyJphmYC0ZXZFMrPpYmkBHad4t S0MlgVgioI5X93TV7lKesR0OrUUNoNZgQgM2EfNJFokq8RdWvhgriom67gAmhzKi ouV23ElHZuyzLOYvodzDRc+8fOdZkfMC2Ujr9vlFFAUubgozO7YwHN25WWpSh3Pn XVkOuz8eaEHWtMmXcc0pw2YvwGqBQ2JWxcADmTn7L1C/OPekdvkTAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfTHUr lAh+tWh1aCkC5q/L3qLf8zAfBgNVHSMEGDAWgBQfTHUrlAh+tWh1aCkC5q/L3qLf 8zANBgkqhkiG9w0BAQsFAAOCAQEAKePs9jPlAa97q2OsUBKAw8i6i3rGN48O22ic 5pGkzi3kSAmdMjbKZpD1eQsSUuwSw3EUdcSsnOSVB94ZmGuMYtb4Pak3Kpr64W/l zhO5TQ7eI+7Qz4f7uY8fBhkKuPvf2WfxzIPWgFkFKs96pm8atsQPKmnpVZHf2P8S IWEQLMo9S6s2KbNj0oWl+/6nyeKB3h0FK1GwG4QEgt1Mabr31f13gGtXnODJEf5+ 5g36WQjpcHgpjgsQeHxhCd/Crpqo/moPPfsfMvzkuOUulLaYMadBPeCeO/hwU2vz y2EbQWnKRy0sIVrXo2SqvoSN7igrZba77vxjZaC9VCvgwPPS2A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T15:49:45Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T15:49:45Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T15:56:43Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8537" uid: 29c863b7-7038-44d4-b247-05a9555e86a8 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T15:49:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"31d764bf-d5b8-4e9e-b9f9-29843b34b964"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T15:49:48Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 31d764bf-d5b8-4e9e-b9f9-29843b34b964 resourceVersion: "2317" uid: d657d163-cbb2-4fd6-8dc2-7b7caec28c0a kind: ConfigMapList metadata: resourceVersion: "27251"