--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T09:00:47Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a78f8327-ccb2-4df1-a41b-b72c66a81faa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T09:00:47Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a78f8327-ccb2-4df1-a41b-b72c66a81faa resourceVersion: "2658" uid: bcdd71d1-6020-4b6f-a9dd-ca3637f0e73b - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T09:00:47Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T09:00:47Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2633" uid: 17dc3d27-df48-4d74-9604-b583327cff01 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T09:00:47Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a78f8327-ccb2-4df1-a41b-b72c66a81faa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T09:00:47Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a78f8327-ccb2-4df1-a41b-b72c66a81faa resourceVersion: "2631" uid: 659e83d6-9c25-40aa-ba48-9cbb9e42931f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIYI42vM20nJkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTA4NTgyNFoX DTM2MDkxMjA4NTgyNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fXwDN3iegnr 6njDylm5JuPDfWH7k7jb6Cd53jIqcMaMckZOqzayPDJxBHp2oXWufaQsquf6zUhE dyvYO61bh0LaR+ayg5xw+svG37Nig/gK38dz3j0Kr6vkLs8D40zCnI2dqaReQwF3 /m8lsjBo+TCRemmJIlsBXUXQbbtJEB18pZM3GJ02pSCaVo5P0+3xZyUWOpoXWjVd FZqZ3IIcpHv0iQSer8pM4eAZmwThHlFJubJNngolpfKGhavRr9lEkz1ZeE+hrdR8 jm1jDUhRsPMovof2/JOp6LH84UtN9Unth4vLStj4ap8oXK/p8kRXQ+X2mZNFqUad A80ZH2GxQQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRASEOhU1de0jUfmCuL0cFlHs27js7a+kkSGqHCwfHzOKQLXFJD 1KWuHLyV9MbiR0ekoLBebIJXpE5Qkmgr99vuUjANBgkqhkiG9w0BAQsFAAOCAQEA t517T0H1kPq0M+cctlIM5ekJK3bI7zM85SdgLke9M3y7jCsWDGC3zF5cPdxyZnS5 na0ymfqbTbVSIDVkuDZIijVxuWnbctPn2aAXblbOu1nnWW7DPZwoYDANk7XfI5p3 LM8mhpjKWerR9JMVbeiU2l9Um6VpvaQAL8LV+sr2hkLXjahkS0GH0ZehmcDAI8Qf tF7iXPMyUVFyLGUssqvO6/Ne7FPmXdT244IwMGoCSc0PhwRLBqP9MX/ZV5Gks0Ju +VXVghoMbCVNbATbYn15r3d/C5LAIVokbdTf5Pb7yGraqea6q7R/aam/rJG/o2VO djFsx8yG0lzi99g83HQsgQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIILvIalAhB+YwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTA4NTg1MFoX DTI3MDkxNTA4NTg1MFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALsBrgIN7UBtuqMlkztnp1m/UxD83StjOc0Ug5YUdhf1er6bZcsEtCuGAwBQSetX sffU92fBZTCWLBJSpQXBUYqqxIZ2QxLRPBbo2/O3kSZCXeysrHbfy/yH/cAZDhZJ JIrcWQeE6lwFj+1KFJ/SO17lQWpFPeFeJgtn8tFmyKWiQvT6ai3TRgrR4ObPqNbk jMsWJDJEqtQYqhVWNOKOluwQ5g26IrmdW9Atz4Z9TSMLtW/YXHzL0I8hdmniJTUu J4I3Ud4qP2WYTNSEjJTOC0qqM9HoduJO5LV3u+Ylw7xUkS8KQfRljmYu1TYMmGiy mNbVhwFV4sZY4nxmfnJ3PBECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA4uu/2+cMYOXalN2S5wJIYG0GlP2d7FIY3Zk/o9m4E8eScivwK/GFiZlr wx+43HuLDYZUsadbB0XSN+3YVMtqszBLBgNVHSMERDBCgEBIQ6FTV17SNR+YK4vR wWUezbuOztr6SRIaocLB8fM4pAtcUkPUpa4cvJX0xuJHR6SgsF5sglekTlCSaCv3 2+5SMEsGA1UdEQREMEKCQCouYXBwcy4xNDJlNzgzNS04NThlLTQ4YWQtODNjYy03 OTJkMzE4MzYzZWQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAD2yoeSV063ZxQIkcWgP8qNSVs2KnOAwrDuZ0rP2A/uQUKyHATtExoE99fKp Y2EPLk5z5jV6nDuNzMZ4QuqsNAECWd27jlM0T8TX3OeG4B3/ogPxigeIBiGyQAoS 8AxQYVuSLW2TqX1bl3fONSdGMoS41lDn2nOu3wKASRODN4xCbC/MWcjneadyrcmY r9/+34oCz5tkuLBpxAUQJMPA84x8EgbKfnb4leVJdtH+hAhJ0tn2BQVwU8oczpiy b/m2umUZePOFSv0LP+I4W62dwb8c/v4x57a6bqSIagLgZ7zPyWk0ZOlPBvhhm9Lk i1FQj0hYXMaLgGiuXdsNzDmIx4Y= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T09:00:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T09:02:03Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4531" uid: e6af75f6-9613-48b9-8fd7-c44bf442a627 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T09:00:48Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a78f8327-ccb2-4df1-a41b-b72c66a81faa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T09:00:48Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a78f8327-ccb2-4df1-a41b-b72c66a81faa resourceVersion: "2702" uid: e0825017-d0f2-4f59-bca5-1c63c5eb3a2e - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIT1JqEM25mHAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ2MzI1OTAe Fw0yNjA5MTUwOTA3MzlaFw0yODExMTMwOTA3NDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0NjMyNTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58Jh3dRnTnh51puh73vwJ25+y6HGCPT0P GgPqosPMIDL1uVQaLKwLXnc3rQCRED9Peab5AnGAKeJncz9G5lF8hdMnyAAWHxT7 JaAEUrcX8NgX348zHqps/p2NFlPUK88AHdDqZGNOzZd1XNC+2AdmYbBZcYRPGeeV mK+ZVWyH9L6GG/s4fGd9fkJaTw8wJ3gXslCDeey6AgkdG7L73DwDTJ9emFFrKVDa GsnloEcKVGeOmX1BaAvYES6q2ovwS8p87zPwaA51tTgT0k8cBrd7nxHr3oHLZLZ7 eamltbId8wlrgGWK677LAWn0WCDbp6tpH3fhBufnUC+SMBVFUYaBAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNF4Ql qd+QTFrFgjIxsYAlDJhuVzAfBgNVHSMEGDAWgBQNF4Qlqd+QTFrFgjIxsYAlDJhu VzANBgkqhkiG9w0BAQsFAAOCAQEAtenVv17DHYCLzCllL3pVAHZNK9iMnIOYd+Nu u4wkPbql6tj1DLk6LlMftD4/hFbADHVhLRQgxtWoYhb21Aa2WFNBZQE83p4gWoKJ GVfNcspxya8wibc8NmnHmWU3uDpC+Mkc5KCUSfjan8xKExJ8jVZctK48eQZU6USy L5KgUi7+0+on264Vxl+BIAPoKEQiCxUUV25fc/KXqSNXUHdoPBp9Jyz+zfECOVJ2 vLaWvx/N1NH5hWibqqjcnU0TV3xq5dTmP3B6nvjKU8gDAbr++UNL5xKpwOrRcM/x 1hN/gtcoRyKfo57kC2r1OZKvHmL34CgaWZSrWTAe2kAPixYJmA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T09:12:36Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T09:12:36Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15055" uid: 57df4269-5056-47a8-a584-c1ba00c54c27 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIT1JqEM25mHAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ2MzI1OTAe Fw0yNjA5MTUwOTA3MzlaFw0yODExMTMwOTA3NDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0NjMyNTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58Jh3dRnTnh51puh73vwJ25+y6HGCPT0P GgPqosPMIDL1uVQaLKwLXnc3rQCRED9Peab5AnGAKeJncz9G5lF8hdMnyAAWHxT7 JaAEUrcX8NgX348zHqps/p2NFlPUK88AHdDqZGNOzZd1XNC+2AdmYbBZcYRPGeeV mK+ZVWyH9L6GG/s4fGd9fkJaTw8wJ3gXslCDeey6AgkdG7L73DwDTJ9emFFrKVDa GsnloEcKVGeOmX1BaAvYES6q2ovwS8p87zPwaA51tTgT0k8cBrd7nxHr3oHLZLZ7 eamltbId8wlrgGWK677LAWn0WCDbp6tpH3fhBufnUC+SMBVFUYaBAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNF4Ql qd+QTFrFgjIxsYAlDJhuVzAfBgNVHSMEGDAWgBQNF4Qlqd+QTFrFgjIxsYAlDJhu VzANBgkqhkiG9w0BAQsFAAOCAQEAtenVv17DHYCLzCllL3pVAHZNK9iMnIOYd+Nu u4wkPbql6tj1DLk6LlMftD4/hFbADHVhLRQgxtWoYhb21Aa2WFNBZQE83p4gWoKJ GVfNcspxya8wibc8NmnHmWU3uDpC+Mkc5KCUSfjan8xKExJ8jVZctK48eQZU6USy L5KgUi7+0+on264Vxl+BIAPoKEQiCxUUV25fc/KXqSNXUHdoPBp9Jyz+zfECOVJ2 vLaWvx/N1NH5hWibqqjcnU0TV3xq5dTmP3B6nvjKU8gDAbr++UNL5xKpwOrRcM/x 1hN/gtcoRyKfo57kC2r1OZKvHmL34CgaWZSrWTAe2kAPixYJmA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T09:00:44Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T09:00:44Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T09:07:55Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8411" uid: 302c022e-a355-4805-84ca-18aa0b6c3f59 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T09:00:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a78f8327-ccb2-4df1-a41b-b72c66a81faa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T09:00:48Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a78f8327-ccb2-4df1-a41b-b72c66a81faa resourceVersion: "2680" uid: f707b163-f583-46ed-8d5d-512971a66b8e kind: ConfigMapList metadata: resourceVersion: "70447"