--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T19:40:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f70c4990-b8cd-453c-a261-8fbe812d32a4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T19:40:26Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f70c4990-b8cd-453c-a261-8fbe812d32a4 resourceVersion: "2379" uid: 5e411329-5724-437c-ae6a-6040a58e48ef - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T19:40:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-02T19:40:26Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2376" uid: 93b90bd9-49c2-4129-b8e8-b6060993c1ec - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T19:40:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f70c4990-b8cd-453c-a261-8fbe812d32a4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T19:40:26Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f70c4990-b8cd-453c-a261-8fbe812d32a4 resourceVersion: "2375" uid: 9b57ac60-298f-482a-b248-c57860376603 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIaPrXMUTdoKcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjE5Mzg0NVoX DTM2MTAzMDE5Mzg0NVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61lg5qz+AtVS cPlJ64ZNS6riUiE3EWeO8ND90J6nLQLLsiQpcyx8VvjKWhZVscJwphMX5W09rAtP Kdc0rhbn/iUy8Vq/+ntBHo5LYgNtfoLLtK9iR83sBnQX5xFPZGfDJ9yIVlx0zRdm hqZBx7vtCwNnzWtdq4rbdrVhul4A1Y6lIsyTd1wvgsnwi7BkM5A/JOlAl2cJNm7j q6CAWKlLabfJswTz7N+xkYQESKNAizPV4QU0KIFqbIW8NtcqDh0RJloWl0Lve0kI dc1wl5AE6S67BgynUn/pfD4yqNcAD98Q9DHa6B8LuQcCa4zh5m77/Wnorc4WHvea mjFLbYvTOwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRArC7fh5eoyM50LwY70WBuFC+4tb8nBWFLnjd9STSCNx4dvUsa 56xqBBY+iiQYVHy+1yG33ehfjifBtIuzeo9jizANBgkqhkiG9w0BAQsFAAOCAQEA G9EtLAv7hjCOBBjvxvelOeIaYhw+jxBTJvDIaYkUbJMd9ttdTZ1urzID02gphTni oaSOrMh/EVydFzX7gZ2LFW2JY3dwX72QGGSnVKqZbR6sVN99PC6gTo4FdzCZtsD+ Zd7DApEc9EJXhpGZklykCuDyA+UxOCOzq1sWcltNm7YiZ5eUbhRxpjH8DAbL4HDa CdaL2nzHejjr5ztfJQ3ekttz3WA2lDYB7B5IPMTqJCVf9QDUYcr7Be9Q1ijwmSpG MOuIBXqL55eyBZDIEvp0eBh4VnxdTiZN0dRenPVDiB12yys6car7I5FNVL1c3G8c C0bgaiMvUV8VMS2FZmZ5Kg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIefV7tE7b6IcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjE5Mzg1MloX DTI3MTEwMjE5Mzg1MlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALQJymcEQL+OnwWGzZM/xTssk6Rgi/474X1JXcWPok4148FIKn13dKjeDBAJirCK JMlV2TA6y9Ux+DDYk6egEz5dDcjxgiI9tK43lmSqeft+1QMqQPE1Sb23shfGFwAS 1Csb3bCg78pTmCrJra8oeF2FXK2PKFbHWHDGmgKk4JV4GNkaihLLZdAC/C/Ci1GI ehu06T+nzawF0+4gyw9Li+vBpGlmtvWq6jm+N4GRa7VkRNo6iu85k8HWPi2dGzmg zufOgAqEfjjQLANomT5ywN0i6/ZZP3ZVI8RG/RJK5EQey8HEmmUQScx+dFgTfs+C VVbqZkKlialXjtcdbB0R/q0CAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAhrA1ONzJt9DjYm3U3myNLVHALHjXxmH8bH/d8A1cfG4hzsGOthl7GIdg Hurc9zoH1YKdAYQRuf7TAjUDgmkmjDBLBgNVHSMERDBCgECsLt+Hl6jIznQvBjvR YG4UL7i1vycFYUueN31JNII3Hh29SxrnrGoEFj6KJBhUfL7XIbfd6F+OJ8G0i7N6 j2OLMD4GA1UdEQQ3MDWCMyouYXBwcy42ZmE0NzQ1ZDgzYjgxZWQyZTVhZS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAIQNaDmn6L9uv BIakB8msnSJhmiKwP6UGutANgyw880okZOlHVdUJeROkpxw1Uw8kfHoS9q2r2V8J xmgsA/IlGwKscjX0Ppc9o3GypZyfuC2iwa1R29CQLay5F81DAMFAaI79E3AoAI5U xFDcNTgBP1q/dtnpH9VxUyJXv2SNNz9E+MK59oJp69paOLTJrnlNWfQMbsoGsu0a 5dTQo4Fuzwmc5QYO8LYlMi0j+iXM8BWV8VrDf9eLvFpA/sn90NocfXOEuRDUnuXU V8dDuOBZkMGHe5FD44lviZ8FT9nq6hELsTLux3SMvr0piEHDq1prnZ/NVSvZ9e7B R0nMBWtv7A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-02T19:40:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-02T19:40:37Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3405" uid: e383a1ba-fd21-484c-a900-a1fbc9d29a13 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T19:40:26Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"f70c4990-b8cd-453c-a261-8fbe812d32a4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T19:40:26Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f70c4990-b8cd-453c-a261-8fbe812d32a4 resourceVersion: "2384" uid: d6d049a3-1470-43e1-8af4-cdca81a81de7 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILOlEcW/gVmswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY0ODg3MTAe Fw0yNjExMDIxOTQ3NTBaFw0yODEyMzExOTQ3NTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2NDg4NzEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvA/UvhBG1/pS6bKT/Ee6a50luaJFHAhI xQA4GI3V3s+lQmJ6kDPsoNT1Jw46C+8tuICNZc/V8uu6KstUxpSZX7HwQJGGjR6L 6K5XihJh4UQaCJMG8jX+G4C/X56Bwc1vtS8fa007FxLhnKA9Io5FiCabDkVbexXE D1N/qO+8AnpV0IigCnJvmE3BplLS44mnQMYfjZoxafqR0gsY66q9Vz6u79K1HoDX UqbAgwekS8Y4G6SU4xMnpmq/niaFmP+pP+xMUDJzU+3Wytm7IMJZZOBG1h36KfO9 T/nUYqhrFVtexKPwF2us5UocrHt/oudHGibdAxzbcbvI/hCYZDSJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTlAr8E hTOsA7q3b+WixbCgsDiosjAfBgNVHSMEGDAWgBTlAr8EhTOsA7q3b+WixbCgsDio sjANBgkqhkiG9w0BAQsFAAOCAQEAfht25rFsG5OT5/eshmrSe5dXq8sSDozsowUk s+W1Yc0s9iNKSEBStcrSJIIAqaEiGZoszIJ+Tv12Z0NLBM4sf/ENRakqc+HLO5ZJ c12BMaAeLMj5QGoVtuPb+NVRyc4sEzP9hy+ez1ZVJslnnRSUKbQEWpiDF/b+mmmc A6/Y98YIg6mXxApgkZHx+mH+KIfjaTubCsoCQMTUcgOq/wiLzCQ0YvL2TO1exaMQ D5LpJcOgkTqs66N54vb26VKxuoRZjycJinXvdUCJ1wFSZiZ7IGbFHX9K+rBHUA5s q7hH3tpM2M4bxXmO63j/PW2Ac5X8R0uUoJ/IvQ6xLQWcAY48sA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-02T19:55:29Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-02T19:55:29Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "18205" uid: 154e74b4-c82c-44bb-9c45-ba1554106942 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILOlEcW/gVmswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY0ODg3MTAe Fw0yNjExMDIxOTQ3NTBaFw0yODEyMzExOTQ3NTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2NDg4NzEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvA/UvhBG1/pS6bKT/Ee6a50luaJFHAhI xQA4GI3V3s+lQmJ6kDPsoNT1Jw46C+8tuICNZc/V8uu6KstUxpSZX7HwQJGGjR6L 6K5XihJh4UQaCJMG8jX+G4C/X56Bwc1vtS8fa007FxLhnKA9Io5FiCabDkVbexXE D1N/qO+8AnpV0IigCnJvmE3BplLS44mnQMYfjZoxafqR0gsY66q9Vz6u79K1HoDX UqbAgwekS8Y4G6SU4xMnpmq/niaFmP+pP+xMUDJzU+3Wytm7IMJZZOBG1h36KfO9 T/nUYqhrFVtexKPwF2us5UocrHt/oudHGibdAxzbcbvI/hCYZDSJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTlAr8E hTOsA7q3b+WixbCgsDiosjAfBgNVHSMEGDAWgBTlAr8EhTOsA7q3b+WixbCgsDio sjANBgkqhkiG9w0BAQsFAAOCAQEAfht25rFsG5OT5/eshmrSe5dXq8sSDozsowUk s+W1Yc0s9iNKSEBStcrSJIIAqaEiGZoszIJ+Tv12Z0NLBM4sf/ENRakqc+HLO5ZJ c12BMaAeLMj5QGoVtuPb+NVRyc4sEzP9hy+ez1ZVJslnnRSUKbQEWpiDF/b+mmmc A6/Y98YIg6mXxApgkZHx+mH+KIfjaTubCsoCQMTUcgOq/wiLzCQ0YvL2TO1exaMQ D5LpJcOgkTqs66N54vb26VKxuoRZjycJinXvdUCJ1wFSZiZ7IGbFHX9K+rBHUA5s q7hH3tpM2M4bxXmO63j/PW2Ac5X8R0uUoJ/IvQ6xLQWcAY48sA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-02T19:40:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-02T19:40:37Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-02T19:48:01Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6788" uid: 2b790c4c-9abd-490b-9e83-ad15f91ec6b8 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T19:40:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"f70c4990-b8cd-453c-a261-8fbe812d32a4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T19:40:26Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f70c4990-b8cd-453c-a261-8fbe812d32a4 resourceVersion: "2383" uid: c5d289a0-d993-4171-96f4-46e16ae1e16a kind: ConfigMapList metadata: resourceVersion: "176482"