--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T12:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"bd75c3d8-ec9f-41aa-8460-53d62b5a46ec"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:21:09Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bd75c3d8-ec9f-41aa-8460-53d62b5a46ec resourceVersion: "2590" uid: a29dffc7-a271-4387-b29e-1c80c0673b00 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T12:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T12:21:09Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2577" uid: 51eab770-ce55-412c-9aa9-4e2aabdf6df9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T12:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"bd75c3d8-ec9f-41aa-8460-53d62b5a46ec"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:21:09Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bd75c3d8-ec9f-41aa-8460-53d62b5a46ec resourceVersion: "2575" uid: 5f9d0a97-7c2d-4e83-82da-4450d9e1bd0f - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIUSsD07vpWKcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTEyMTgzOVoX DTM2MDkwODEyMTgzOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlSr3jTu6Cog NI7Uv0+7P8LwTsXAVWnTqd6xkCh/34c5SBDdjM4IhpyVN7fpvRcJ0jBjg+z22K2W JTmFR74EmL5blj5uPqvUXzXOg6a8cklYAgZhzdyvbWMobc8RGOt0L+gje/h/RlGR P25DaHW5I/18lSQ5aGcbMA6ihfvxQthZATPeJooD2S8PnrMcrVAhJO/jV+UrADjk ikk87zHukwcSlTU84ETR8Fd6/+V2jcK82sN2fWUpBA122Zeg3+ST7iSbxL+dGiD3 VcK0QOdwG/JCCjI56BTXfLEXZac5sbrnDwmxsn6sGCYc2P4rMkjChRSMvmZiwG2g C31qzpubSwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAiUlxc8D+fW07szplM5N2Soh0bW27oTiN46Z/wm93kgMiRr3j GC8OnkARATmZqLUQBA/ybV6Xqc6F+mmOXjY0hTANBgkqhkiG9w0BAQsFAAOCAQEA ciyw0h9U60DQpx8Hm/RI/zycAE9gLsGkVPrjX8tVtaftbe2BWuohOehCm8Ge9eDj LMpd+lsCRZAk9bfYfL4YuBmLIW7GhuZhrhCtiBGBQVDgnrlbH9wgyABdWsdIU2Rn iIf4udJaSoqZRRWSjH+qxqvhlZJDlTIZqpo7ysoQteid1r2ThzCStg8xR5GUdAs+ wcH2AMoxd2JQ2qnRzJuSYCMKZtYkFlM2rOMwLvmfeW4ytblzQmXkokY+2nHf5yEs hTZ1cr6XA2IylOBnU/fjY+NfKLFxk8u0JGzUQZhb+LeE59BWcKqVLbe7L6gK/5QL XxRcQ1OkryldlNkHUIuh2A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIILuURuppR3kUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTEyMTkwOFoX DTI3MDkxMTEyMTkwOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APPG5sYE2oq0XTQVXbs8ohQzI0sRM5xKGe9PlfxalhRLJiK2ynIP19YeEYOdgnYf So0KXlHxKhpRqwjl4/iYzxDy4MljNdSBZpBR6XW6xXGb0kGfXIeN2GDr9Yc3YJ9B 3+rqHOAAIYSwYkGNJHdVJLlNXwVvHkaXgyXe9GXmzKmq2og6N8MuEAIP3X7ISd8z HEw9VANt2xeFXLdWQpxDfJa1QRtN9K/LXsTfqfYag4d70yNbOEAMey6UkHNbJbyA y8qcvLdBxOxxaUegjuKwHeAKZxwSxe1DLaEjAcZSM/9zTV/43GwabE+nDcW3XwEO bmmLonJ1ERQFq7XGOGHz3T0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAHizRvYk8tk3DuJW/GApxxyck1RuFg1HTRjsgcxzIO5p9XOaxhpRpMm7L qIa9YV3EA6RTN+CPSRKO00hptDBauTBLBgNVHSMERDBCgECJSXFzwP59bTuzOmUz k3ZKiHRtbbuhOI3jpn/Cb3eSAyJGveMYLw6eQBEBOZmotRAED/JtXpepzoX6aY5e NjSFMEsGA1UdEQREMEKCQCouYXBwcy5lYThiZWUyOS0xZDBmLTRmYmYtOTMxZC04 ZTNiOTA2ZTExYTEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBABuqNGDAuhaVCvCURlxuxGC333VsMmcUstRv5Su/JrExc78/nhMTbiVWJ7o+ 3bri5x8F5QOaKiIDsDQaxrm3aGT1KwOfZCrPUpbdl7WPmRBrzRJm+ER4o9AgzqJ6 tkLo1s9gcs4MUEXzYVcXqWyfmgIcVI6Yz2i7Vl8+hLaE6gK+y/MmuVs6Se7AhMjF TQJ/roojnqKrcG5LyV355mXBkbI6dX154n08RAOHl0FmC9NqGVYSCRUHm8Mifsqi Aqj1OWJBvHE1YhSrJLr9BIqFcvQ3YBuH1sSxq2vnSuI9D/Uc9if68edptuTS3TzY qjucPY8VCUT2iVDeGPLi5w/MLWI= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T12:21:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T12:22:01Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4442" uid: 364e7077-4697-4490-acd2-a7d7c1dd4645 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T12:21:10Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"bd75c3d8-ec9f-41aa-8460-53d62b5a46ec"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:21:10Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bd75c3d8-ec9f-41aa-8460-53d62b5a46ec resourceVersion: "2605" uid: 0b328048-a999-478e-b031-e132274d3f20 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIbOM8eZrlEP8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEyOTY1NjAe Fw0yNjA5MTExMjI3MzVaFw0yODExMDkxMjI3MzZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMjk2NTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YxhTtDVobshzaQwyGEl3KJMAcMm4M62X /89j8Y6WewKGCwurvgpJW12uXmJG0mt8l/0OrZD1ZhHXs5hKkcAQJY2eMiUqzuAO 1BRT+5SBeTvO3qYxGzLol601ozmoIZPWH3eG5JKXT1ZBc/SkIpFbaIc/nudPJsK8 3KgE8/5hHDT3LIXgqV9eap/BCtUL7UWm+e/GsNBFfpH3ShnjaKcIQSYi9uATiDUa XFp/H1avP7J6JwS5MS3E8j4vcnzIvKNybofFGdt2VBzlN/scpbDtD+siESlNa/oL Mj7MFjw42S+X0ijAcHOyb1r8U+mqQANLEz49iKANFV5qfTzz2CjFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTABvGG 05F6jUQVvbBXH1gYBQAUYDAfBgNVHSMEGDAWgBTABvGG05F6jUQVvbBXH1gYBQAU YDANBgkqhkiG9w0BAQsFAAOCAQEAetu0Y5Im4eAnDjEouo9H+3JcdfWJt8OFvFU3 tjwxYoHnET34zhM8DLdr54dPLgQKpc5b+0XgSF8eTArNeZBqnncHdVDGDRke31gN q5SvFNTgT4+5hm6E3iYa8KuYjCVYmcAtgyKMBHnIoUEZN2o2bg7Im2Rp0E4tio1z O7lfB5xkOUZnxEMu9Ulqolle/JTQwlMNqqEfXxpPfUiA/W9tEiIDHemSADmKvAu8 NkxJS+mFh4rS7K+E1aqW9tNysect7UFHAsf5XpUYRKDVwBzV/bnlIpxO23DWBdZQ bqLir0m4Iyry8t7ePugcVfG+H862tajaRl8mz9sT2CqgVhFYgA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T12:33:34Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T12:33:34Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15027" uid: 2255ccfa-c2a2-44dc-8e30-b67d47403391 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIbOM8eZrlEP8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEyOTY1NjAe Fw0yNjA5MTExMjI3MzVaFw0yODExMDkxMjI3MzZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMjk2NTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YxhTtDVobshzaQwyGEl3KJMAcMm4M62X /89j8Y6WewKGCwurvgpJW12uXmJG0mt8l/0OrZD1ZhHXs5hKkcAQJY2eMiUqzuAO 1BRT+5SBeTvO3qYxGzLol601ozmoIZPWH3eG5JKXT1ZBc/SkIpFbaIc/nudPJsK8 3KgE8/5hHDT3LIXgqV9eap/BCtUL7UWm+e/GsNBFfpH3ShnjaKcIQSYi9uATiDUa XFp/H1avP7J6JwS5MS3E8j4vcnzIvKNybofFGdt2VBzlN/scpbDtD+siESlNa/oL Mj7MFjw42S+X0ijAcHOyb1r8U+mqQANLEz49iKANFV5qfTzz2CjFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTABvGG 05F6jUQVvbBXH1gYBQAUYDAfBgNVHSMEGDAWgBTABvGG05F6jUQVvbBXH1gYBQAU YDANBgkqhkiG9w0BAQsFAAOCAQEAetu0Y5Im4eAnDjEouo9H+3JcdfWJt8OFvFU3 tjwxYoHnET34zhM8DLdr54dPLgQKpc5b+0XgSF8eTArNeZBqnncHdVDGDRke31gN q5SvFNTgT4+5hm6E3iYa8KuYjCVYmcAtgyKMBHnIoUEZN2o2bg7Im2Rp0E4tio1z O7lfB5xkOUZnxEMu9Ulqolle/JTQwlMNqqEfXxpPfUiA/W9tEiIDHemSADmKvAu8 NkxJS+mFh4rS7K+E1aqW9tNysect7UFHAsf5XpUYRKDVwBzV/bnlIpxO23DWBdZQ bqLir0m4Iyry8t7ePugcVfG+H862tajaRl8mz9sT2CqgVhFYgA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T12:21:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T12:21:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T12:27:51Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8369" uid: 61edab9b-5770-4c50-a89c-b072a0923c74 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T12:21:09Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"bd75c3d8-ec9f-41aa-8460-53d62b5a46ec"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:21:09Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: bd75c3d8-ec9f-41aa-8460-53d62b5a46ec resourceVersion: "2599" uid: d737a7c4-b275-4ebf-829d-634223071f56 kind: ConfigMapList metadata: resourceVersion: "57742"