--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T21:16:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e6a3d560-1e31-4d88-9741-e1451b523436"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T21:16:30Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e6a3d560-1e31-4d88-9741-e1451b523436 resourceVersion: "2406" uid: 35455c30-e4be-4e19-b0aa-fe393742e62e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T21:16:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T21:16:30Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2402" uid: 68a0ea5c-33ac-4c51-9d9c-508d9242c3ac - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T21:16:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e6a3d560-1e31-4d88-9741-e1451b523436"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T21:16:30Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e6a3d560-1e31-4d88-9741-e1451b523436 resourceVersion: "2401" uid: d117a61f-6320-495d-b635-8c1077c033db - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIICxf+vEaiW5wwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjIxMTQwN1oX DTM2MDkxMzIxMTQwN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9mV7So7+TWP eggauuIPmkpc/sPramsKgNTJv7wVxYdmQJjA4gxgnvRlywpAFoB6a3bcEYZABgXx NOhyXzrQ/mRI5IhORnZ3JAaCifc1DFvlohu6ZvEku5w2YZdYCW2AxC1lzQiy2fWR w0DGzugiPAVaRJnSm92pPs0dALWHBDQJoSCU11xiZzmqvSOWbM9Nz2TgdwYZdF9y yBSx1EaP5F+6EBFLVQG2xwZ23Et2czX/L5TqLG1E+miDLXzqu4gqHFIyC/OJb2mp gNMpubPoqvCX+nM4MAlEc5A92s64U0sF4tTqKr7EB6hIYihPqFsTPv6RvsnlVNd5 AMAYLJCSYQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAUdfgUbCcl71CP8Psnt/f9rf6AaV+EnuCWvFSsEz440WJRMms 9BzAZ9usCiimDtR82WC/KgGH4bRRc8m9/DI7hjANBgkqhkiG9w0BAQsFAAOCAQEA lFuD/oFg4Obf78MV4Gv0GB+KHKsjNbNgW1B+2ARDO/8r/zDMw4oWTk+yA6OntCcB uQXNv5cLpByoAKoOqT+PrtKlPVeLFGsdPG5qoBj3fGvJs5ThswYRBvnV0NnJ4IEa qE2a/Tq2Gj568YhtJsV1dWSF1b+zJv96Sypio+A3TJP3xtILrIcoz5No6XEm3bE3 dJMcum7HcznzDvVNPyGmaq5kPeDzQxJhVzYbyCc8QcP6RBVHNZ36emuwoWy0Sc0d KS5wOOt3P8flgX1lsQ3GEk55k17q5FeKEE//CeCIg4hIgBnXSGVif7m+hoIQfiWT O0Ckx3Rfu7cH5sDuBhdbtQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIIb10XyY0gYwwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjIxMTQzN1oX DTI3MDkxNjIxMTQzN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJ/4MGDbC39RzwDN1nUPN+Gm42O8B2kqznwJv3b49IqDP2BPeIvxqC0d4s6hd5uy 224NlzEx0wipif0mo9w8dRSmaCYIwNc3nt3HfrzR5AFto8Uixf5+byojV2samC9x 60Xmc7KJqOCtUuuvAa7rrlb5yR3SLdN4aM7T4B31CsET15+nZFfOG4ZTUXOPFWRl z5797Z69N+8yLpfIQt4+258brnQhWKH75HdUUDp2QGee4TnTVLsohD7bPfm4gK+H lehTI4YR2oKf+ud2lGPiKkWSySmX2yjRYRjNkDNNSoGqHveSNQWyd4LjKmkUtCiz p3n4CzCWfnLRKv9bmHDUXYUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAsQ9NduSyq4wZzzW9UfK7cobHVKnDaRHO0+qq2p72xjXIX+3pofT6fkg4 NjddzvtbL94z40w6tAMV3k+HdDtYDTBLBgNVHSMERDBCgEBR1+BRsJyXvUI/w+ye 39/2t/oBpX4Se4Ja8VKwTPjjRYlEyaz0HMBn26wKKKYO1HzZYL8qAYfhtFFzyb38 MjuGMEsGA1UdEQREMEKCQCouYXBwcy5jMjkxZTgzZC1iYjNhLTQ0YzUtOGFiZS04 ZjMwYjMzNjRiNWUucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAItVkHFHx4wDof5WFrcCjRPzH2a5jscNFd+n98FrvIpCsUGYNbvr0mANtl1X KKqlsdmLG0hIX++OAA4MISGFI0L/j+sepJD8cE8BgdcTH4albeXMnkNy6yFlH9jP zqc3cuoMCtwVZX1jDUKYOVTnI76tiySSQO28KzJtfKjZIxcCLHJr+yXpzyaYCU1j 0S6SaB7G+DxFJb1Im5Xftm68Sn3rz53xyqAhaESF67kZMkF0HTtdRh40BUorPxgB SVzEGJy0XZGoQTZHxFceixKsoy/NiNZd694usun9qr7ptNznRcyPmip0zo+ZnsuX qgWwL9zgGKVaR1YB3pJfmkoK6V8= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T21:16:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T21:16:54Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2968" uid: fcf64b69-5893-4093-916e-53d05ed17e93 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T21:16:30Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"e6a3d560-1e31-4d88-9741-e1451b523436"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T21:16:30Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e6a3d560-1e31-4d88-9741-e1451b523436 resourceVersion: "2411" uid: 03379375-98a9-4883-8fc7-3ecf83a34df6 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIY3QEQW3GkdIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU5Mzc2MTAe Fw0yNjA5MTYyMTIyNDBaFw0yODExMTQyMTIyNDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1OTM3NjEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy5z1FijYY8R667HKWhSQy3Pe2M8Nu/ON 0BD73XaIwxwzayjI08ypUTpSb576Jii5XTITX8S29EZWuZXcAvijPtDOlXPZc3dZ Z3HPAiGtnXvS5RrChWD9w4dyxuk1F4nORJ2OTHAHwf/Q4Tnao+54O/iVo6qaC0xz 0ro6z9qmn4GV1mN7sey79qCgPfN+DNAmmh6imcf9UL3UuEWtcaJyKW4eS18yRlmL sVbFN+P58iGbOgxhDnzXB0asw2FYt37Ajk+T/ItB0cOiq4PqKlMX8De/e/dafqdM p2zQE0y4l9Ta2MfZGxOuBCC1f1Mq1AkNCSFX1deebChXX14CkzeNAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLzfmD S2yz2Q3HhcCB2sh9Wf60DjAfBgNVHSMEGDAWgBTLzfmDS2yz2Q3HhcCB2sh9Wf60 DjANBgkqhkiG9w0BAQsFAAOCAQEAYVsiHYYqzNkTyF4M8C4q+yNXVzqe2w5m4bIp C9qime4Arg/cH3fb+6dX201pNOQOAoIpxdWXfw+Zd9CWAXzZoctD3RaFzzHal5Ed zYjHLixf81xqFFC1QNBu+zGxXosfLI4Vt3CWNhGaYqsET5hAxNkIOf3/EpCVKIKY mwT6ieZz/bMFg/qGQ1pWmWGL+nNAWgG76NDkNHXMM8reCfffR180CNgZ76R8vQsY rBuFy9MWLxTHWgzkPggaAeTgbsDY0CJwsb8aqHefn+oVVU5n+k88mEdGLNqOjHWJ UJGBAQT8QIMTqROZnRyUVYh5UNXbXn00Fm/ofG6FZNACUexjqQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T21:27:36Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T21:27:36Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15023" uid: 29317eec-1c03-483a-ac7a-625ed06e5608 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIY3QEQW3GkdIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU5Mzc2MTAe Fw0yNjA5MTYyMTIyNDBaFw0yODExMTQyMTIyNDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1OTM3NjEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy5z1FijYY8R667HKWhSQy3Pe2M8Nu/ON 0BD73XaIwxwzayjI08ypUTpSb576Jii5XTITX8S29EZWuZXcAvijPtDOlXPZc3dZ Z3HPAiGtnXvS5RrChWD9w4dyxuk1F4nORJ2OTHAHwf/Q4Tnao+54O/iVo6qaC0xz 0ro6z9qmn4GV1mN7sey79qCgPfN+DNAmmh6imcf9UL3UuEWtcaJyKW4eS18yRlmL sVbFN+P58iGbOgxhDnzXB0asw2FYt37Ajk+T/ItB0cOiq4PqKlMX8De/e/dafqdM p2zQE0y4l9Ta2MfZGxOuBCC1f1Mq1AkNCSFX1deebChXX14CkzeNAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLzfmD S2yz2Q3HhcCB2sh9Wf60DjAfBgNVHSMEGDAWgBTLzfmDS2yz2Q3HhcCB2sh9Wf60 DjANBgkqhkiG9w0BAQsFAAOCAQEAYVsiHYYqzNkTyF4M8C4q+yNXVzqe2w5m4bIp C9qime4Arg/cH3fb+6dX201pNOQOAoIpxdWXfw+Zd9CWAXzZoctD3RaFzzHal5Ed zYjHLixf81xqFFC1QNBu+zGxXosfLI4Vt3CWNhGaYqsET5hAxNkIOf3/EpCVKIKY mwT6ieZz/bMFg/qGQ1pWmWGL+nNAWgG76NDkNHXMM8reCfffR180CNgZ76R8vQsY rBuFy9MWLxTHWgzkPggaAeTgbsDY0CJwsb8aqHefn+oVVU5n+k88mEdGLNqOjHWJ UJGBAQT8QIMTqROZnRyUVYh5UNXbXn00Fm/ofG6FZNACUexjqQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T21:16:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T21:16:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T21:22:53Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7896" uid: b4c0c481-2403-4b8c-aa4d-0f7ddbf1c1cc - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T21:16:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"e6a3d560-1e31-4d88-9741-e1451b523436"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T21:16:30Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e6a3d560-1e31-4d88-9741-e1451b523436 resourceVersion: "2409" uid: 83cdce05-66b8-45f8-b302-a8cbf456f2c1 kind: ConfigMapList metadata: resourceVersion: "69638"