--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:38:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0869d019-acad-4e2e-89dd-2719d5ae4309"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:38:48Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0869d019-acad-4e2e-89dd-2719d5ae4309 resourceVersion: "2315" uid: 265d71b4-43c8-4da4-9719-4a79b06923c3 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:38:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-08T15:38:48Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2309" uid: c06b8ef4-b321-40e8-a402-2864238605c4 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:38:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0869d019-acad-4e2e-89dd-2719d5ae4309"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:38:48Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0869d019-acad-4e2e-89dd-2719d5ae4309 resourceVersion: "2306" uid: b22ebaa8-19c4-4192-8c19-5ed777bbf1ff - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIPeOItke2VacwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODE1MzYxNVoX DTM2MDkwNTE1MzYxNVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHFd11wA8YYx 0FYujerNMGtKX1cqaJvvCO3RrNztIRQjbJoQa7Kr7B2EmFyKmG+Bh0FFXUJyvt8U 8jhJ0dKpqPwHutrT1g3llm2lNWq184mVBt9tUmhjnOUUNHDKlaig0JGhSe2RYnIN jgHUEhu31Y1yHHsqKqAZpcGFrgStNzlCa+2g4fLi3RauQ7A75RRRnVy+NHuwuE8F li3usRSnNHVDcGm2xsUzoawHsSTYtfvUgXa+nEFLuIGdcvdy+JpNdzP3k/kQQcY2 YTEBH1vOzlr6m2yfrb0mJL/NfA2z/5jC+ZHvCiAOSft6EYB6SXG6sWfSxn2jOtmU BW8WdOZYsQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAdXj3TDntoSyrK7qxd0P1r+IwOJso8oFwIw4DLwOPP9IiPcjc WMyb9cd4opKDInKRo6WhFvwCn7ZUeOXRlp4M/TANBgkqhkiG9w0BAQsFAAOCAQEA iMZ2ZZEVxrYVTEmumPPKPzeZxAJheH8ICIsCcf49HX2loM6lq2szsfNbZDBEzqaW nQc/WgDLOOTZ9siOv6nKzbfm6pGmCaf+gGGM0FEcBcRxNhShH2tAfzGEUgi+/fOp Q27Sk0iC7azadQxySZ3bmIa0BtsMuQhkp3fYUFAZC7mK8562EVVj3qqrSPdFCa0H 1T5G4Qw+4HUYmWDwigmddsS4QDwtaNbLvaBl0FDlrNZVqCSjTBlsfyzTd6yRDbdF J9ReVXpYKTgJ5NUCJBt0UQY0pIrju7hh+D8KvTbMG/YsrGdX8taljpgfbIE/9r+n nooJ7vOfl1nVraovXnKe+A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIEv7ZQCKzFU8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODE1MzY0M1oX DTI3MDkwODE1MzY0M1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALV2PnJHM1b7mZW9MReUlL49s7W0tLjJU/+Tw/fcvFzlMqXlZ5OZ2XIfeCb4UfSm xVInAJ8e+N4HWuIOHKZdnNSropInFB0vcHqo8vFfjyrCT11HqJiGkVGqa+F3W5N1 SiCIhlDh2ZYaWPdkYKCJLd3eMl23eYZVp4LwGiFWIDjmz+GK4kKuxMpL6jW5AK3i CEEBcbu641jec4v3AvZOteAzRb6ZuT76BXWNSyqDoS1jZowRUy1jP998mf6fanp7 dk4RZMuWYdQ4e2wwl14ENcwvpsalJMRgsZF0SX0+jALIfdhXKqjpDLwc5ltik61Z QhHrv7eLmbOcdgmq9MoAVu0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAccDZ0ykGnVOwlhGtbScxJUcKiF0Fc/9KQgfhv0HMJCKFYtTBVTFU9rus V3ZMdid+EGwmoec14tsHXSsLdQ5FJzBLBgNVHSMERDBCgEB1ePdMOe2hLKsrurF3 Q/Wv4jA4myjygXAjDgMvA48/0iI9yNxYzJv1x3iikoMicpGjpaEW/AKftlR45dGW ngz9MEsGA1UdEQREMEKCQCouYXBwcy43NGM0YTI0MS1jMjE0LTQ2NTItOTdkNy1j MTJiMWYxZTRmNGUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAKmjv48QX17lljCtl8xzT27J3UEOj0bsda63jWv+mCZwGEztny2C8K1eTQVz Tx577LcrveXEwCI3tuP9+6bk6GB20YyiP/VZlYCzbl/Pmd0sms8tYB1cYqclLms2 ZFgi1/jmdHU3A/fxZae1mz0eh/6WdoeG263+xCczIn1KRXSVmCpOICA9IpfuCiX1 6w1emLdJO30+LRDirb6V2Qrh+Stb1O1uwG0byg1RTwxTLOhxMV3hVy0QV3HmC0Lo vld4Bm5QUThgBrT/3QtJvMYDCRb+z7Iwx8ED9Nlcx8tMGBJMZ4UBOvi9b/nARsDQ /IvZVS+yIsWNBJmkodXBNdpYIKM= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-08T15:39:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-08T15:39:02Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2828" uid: b39bd0e9-3b3b-4226-a414-9978e664bb61 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:38:49Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"0869d019-acad-4e2e-89dd-2719d5ae4309"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:38:49Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0869d019-acad-4e2e-89dd-2719d5ae4309 resourceVersion: "2334" uid: a9ffe0ea-9d18-4dc8-8402-c3c708b29773 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIe7Snl+dGVSYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg4MjMwMDAe Fw0yNjA5MDgxNTQ0NTlaFw0yODExMDYxNTQ1MDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4ODIzMDAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHvRdTsuMGeEy/NfnnAvzSjEbYyt1RiXy wVTm6kGUNE38nESJAx8iyvmI8/KMP8+Ro68W5fJyep3Ni10d0xXsF4S63JjZSxKd oHxI4qc8xZGM+sNPLrnAobXJpz7iAX7V159w1FQNfb7PSY4VbK9ns7+j+eyKb2X6 oPRI/E6kqVVTmiuvtpCO/pa9rtPIe4czB44WeieWMsQSUy0PsfucCJ3LTLbOaVsc BT61FBOvB39Tr73E1CngKRtY40dojgtOHek5RX+uAcJZGxsmyOUDSwq2aBUzgXhN o8vsN95I7ivLTu/F0uA0/WdRPrnBaTq3LDSQGqk0UB8k/qK/jT5lAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStwOnR 6TtqD+9xr5xYbREwbX38YjAfBgNVHSMEGDAWgBStwOnR6TtqD+9xr5xYbREwbX38 YjANBgkqhkiG9w0BAQsFAAOCAQEAfhvdbJ3RpWgyDOmzX6JRAAwQU6F678VcQ/n2 rYXMGSZuSR9rmiwdBsK1LLYaSML4UWY/b+GON4P8wGXvYDA5AwtVkXH7oC50+Ure rqiqRHKY1xsYObnTIzT87IXqAjilWL+u0FzfHln6k7YOyMd5CYsbxnfMLqgpXJEG 39udkgdmfxqALUo6aB3axevofQVz5uvON+V8pA80UjtGL1TuaqtCdWek/0oGD2ob DYM40MqNzh2W88gRZCBtB52o3vE+/Zs+lI40O/kcePMUTw+ZMAArno/eOV/QfXhw 6V+xVzemnX/bUJMQABup/aKP/SBVcPng71vrKBAXy/UbPFNenQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:49:19Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-08T15:49:19Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14351" uid: f640cfdb-57f7-4535-bf2b-a979e88a3b70 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIe7Snl+dGVSYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg4MjMwMDAe Fw0yNjA5MDgxNTQ0NTlaFw0yODExMDYxNTQ1MDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4ODIzMDAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHvRdTsuMGeEy/NfnnAvzSjEbYyt1RiXy wVTm6kGUNE38nESJAx8iyvmI8/KMP8+Ro68W5fJyep3Ni10d0xXsF4S63JjZSxKd oHxI4qc8xZGM+sNPLrnAobXJpz7iAX7V159w1FQNfb7PSY4VbK9ns7+j+eyKb2X6 oPRI/E6kqVVTmiuvtpCO/pa9rtPIe4czB44WeieWMsQSUy0PsfucCJ3LTLbOaVsc BT61FBOvB39Tr73E1CngKRtY40dojgtOHek5RX+uAcJZGxsmyOUDSwq2aBUzgXhN o8vsN95I7ivLTu/F0uA0/WdRPrnBaTq3LDSQGqk0UB8k/qK/jT5lAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStwOnR 6TtqD+9xr5xYbREwbX38YjAfBgNVHSMEGDAWgBStwOnR6TtqD+9xr5xYbREwbX38 YjANBgkqhkiG9w0BAQsFAAOCAQEAfhvdbJ3RpWgyDOmzX6JRAAwQU6F678VcQ/n2 rYXMGSZuSR9rmiwdBsK1LLYaSML4UWY/b+GON4P8wGXvYDA5AwtVkXH7oC50+Ure rqiqRHKY1xsYObnTIzT87IXqAjilWL+u0FzfHln6k7YOyMd5CYsbxnfMLqgpXJEG 39udkgdmfxqALUo6aB3axevofQVz5uvON+V8pA80UjtGL1TuaqtCdWek/0oGD2ob DYM40MqNzh2W88gRZCBtB52o3vE+/Zs+lI40O/kcePMUTw+ZMAArno/eOV/QfXhw 6V+xVzemnX/bUJMQABup/aKP/SBVcPng71vrKBAXy/UbPFNenQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-08T15:39:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-08T15:39:02Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-08T15:45:13Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7959" uid: f9f8ea5a-5da8-4075-88b7-e0a3b1014509 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:38:49Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"0869d019-acad-4e2e-89dd-2719d5ae4309"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:38:49Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0869d019-acad-4e2e-89dd-2719d5ae4309 resourceVersion: "2323" uid: e4b608d3-defd-4539-a22a-895241490b81 kind: ConfigMapList metadata: resourceVersion: "60581"