--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-06T14:18:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"102830ef-264a-417a-9dc1-0c1357dea413"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T14:18:59Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 102830ef-264a-417a-9dc1-0c1357dea413 resourceVersion: "2579" uid: 97f586c3-c578-490e-8097-5b4a52c8df4f - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-06T14:18:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-07-06T14:18:59Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2568" uid: b7446fa4-6f62-496c-ae06-a47b5d6652f8 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.23 creationTimestamp: "2026-07-06T14:18:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"102830ef-264a-417a-9dc1-0c1357dea413"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T14:18:59Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 102830ef-264a-417a-9dc1-0c1357dea413 resourceVersion: "2565" uid: 67abffbc-29ee-4b45-8ac8-1012886c54e0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIZ9OSEvehqHIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwNjE0MTU1OVoX DTM2MDcwMzE0MTU1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGwz1DJd5pf5 DHe0/VyUzGVDDEj3dGX2JarnyfTTt+WWoXX2vEA/28LAzg+4A0GIC7Dgs/08N/az lZX95W/XtTbo7d0R/X7E0jNkOGYae3fSgKHlPryGX4y4L8PhkSkIyVHIqOODcgQa 3FEI5I6/CI+/bLVGzw7CFgBr5z4lmCbU8F64vZDwsKwzdY9rS0Ji0LkzihM6GkOw 3Xn9cGOB6ZDGVKcn4WBZpceiLcgsHJl+p9dIDxnZHzqrmMBPP3Yw4H383DJTSFvw o9xUN7jRR831sXm0a3jeaG6FncFRZ98mp1MrLpmCw6lXNxE1qR/4x+NjRjoK5DCF NsteiEwfmwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAjDoRAAQoDuw2yoVpdjSMVvDTzVbdMdOYQKtvpoIMiJtQ9Ti+ KR345C0GU6C7XW0x0C3uizDMFljvvJnlKmW9tDANBgkqhkiG9w0BAQsFAAOCAQEA cjFgpxzlYFU1nYhElW5fjufO8SfB1cUD0kDholzbUz74jU0y2Uec/6CXbODeaS3y vcUWaQsUjBy/Ny/MfZPdGv8INWjzIL4xhY199s91mmdHv9fYf+dR8/SVTigfV32v MvVPcVjr4ijEp7h+h/aDbfnHw0+8ZoSNz60gVcN+/Em4Soiy05dZTCpHkXcBsnHs 9GJ7jE+xbUe5Yc039afZXXl/pPEQMbcM0Y3E/w3T+mhywuvWrWOUJNTFiTKxGnh4 GaeUPs76GfDY6G5uHUe39HjWgzcMeCM+cVx9fcwY77u8IO0AwMJCYmPRiM2bCSEH SmaLMr4UFIkHk4YCKGY63A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIITW42zHRkyAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcwNjE0MTY0MFoX DTI3MDcwNjE0MTY0MFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM3NljbECNOH4qGe15gM3z56s3lCKrMbV5P0xF1h2IguLQ7vNDQJeXnZMG7WvQVc HEE5OunJNsg1qLx6i0XMscRdmwxw+Uhn9oWeoUe1jOWp446XSuxXpLboahAANFZN 9Gt9kYYIV0o0bUMCuFeo0MqO9sV9Ipz3S0MFhodK0ADUDbhaL7/QrWvcYOYEcjSP UnxDbK2wPEotVh6tyhhWDNqsyaRftIVqIlYKnT/sxIjk2fqNU4CApeKQA9LeTicz mBY7oSS9uBdH0EZkPqhM2RkcNhyU6pPnTd2aOTNXY5Q0umz0YW6ckoxL66M0xPg0 ABCTlFQlEN+T5g+oF384yEkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAnXWY1TmBH0+31agF2dGKhN49dw580cCiu6a/2/O/IuK9lE0uO+WT773h B+0wlwDw3szbHGd/EJaTRl6s+G9hdTBLBgNVHSMERDBCgECMOhEABCgO7DbKhWl2 NIxW8NPNVt0x05hAq2+mggyIm1D1OL4pHfjkLQZToLtdbTHQLe6LMMwWWO+8meUq Zb20MEsGA1UdEQREMEKCQCouYXBwcy5mNjgwMmE1Mi01OTdmLTQ0NmUtYTZlZS1l NjViZjc2MDI5NjcucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAA57MM/OHKwK9sMn7GBdzBEDe8HNg+SCh4KfAYAb/QLwSg1O5gV9pWp7TPH1 /wPBcrYTmcw+2bMQem+5n1GHuhcRCDMub/Wz61tw7CO8IyPEUnTto4XYHHRme6uB eNqwAi4sbQoW73nAky8+OQZjNihFrVMaMneyb22qpbU815qNZbE/LvuLl14y1Uu2 R1HI32Pexa3ZCUKvIH2WY6w9Jq/oN4tz7zBLNwZLMHIzmmIdp+8mD0PGvx3FCBeP UTrYpSrBcrQ8Q1lEQ3SLrTkkyarH8vTAH9wbMnbLBQ6UDuv/hzdEu8ecoQkEPJHG ecsOkW8FesS7m7hvpVayLsY5BCs= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-07-06T14:18:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-07-06T14:19:42Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4347" uid: 3b896e3c-f70c-44c3-be31-3e1db07f7fca - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-07-06T14:19:00Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"102830ef-264a-417a-9dc1-0c1357dea413"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T14:19:00Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 102830ef-264a-417a-9dc1-0c1357dea413 resourceVersion: "2595" uid: 8e291b00-497a-4c47-bd3f-0484b77236eb - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIKhkeEdAGGHAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzM0NzkxNjAe Fw0yNjA3MDYxNDI1MTVaFw0yODA5MDMxNDI1MTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODMzNDc5MTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2GP/gtGfKbv8PAXbPtj2tzt2/ypSO+WB Z9GNogRsDoNdgnSAod2tZ/EY8cCFPDDSL7wavvIABoMCax/H0mAXv7mB+YbWb7rw L9CVgq2ixOGNR3kWAmFN6mP47nj76XysK7poUO8Xcahh2x3LV4NIbby17vGe+3xi HMwj5OFnmj0ijdJiuYmo9AR6GzATuc1xwSo+3TZ8x7UNHDUIloeh2FT17X0gadgX YmOjbCeFop/LVxLo7wDQFWfvX6IixIfk0Cbytbggo9Lyezkp7rbBkIkRLz9RGhYd GdA1Rj/V4yGaXDNhcs8WHrIH+Xu828XPag2FvPcgLZzNyFxTGEqzAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGh449 8pRDuEZB86wXmX9DvN+PRjAfBgNVHSMEGDAWgBRGh4498pRDuEZB86wXmX9DvN+P RjANBgkqhkiG9w0BAQsFAAOCAQEAZCGhsXPCKHqE5HbAGVggNxUpG047VIwO1XD2 JlzudL/BzZ8uoF1lJ84o6BD121bGyazZ4Y5LHEYe6hfgwKXF48uAHB0SrbjV9DzM lKFTIgGENjdDZXfMebkrdZbw1oolhviUcrFwPxlD2o/6lapOHKB+jvd6CLEzmYVp hzRzIketq07nJoinjeJHETfcngYPxc8Q/TVBeANpdO4P1hAB0/IAK6FP3H5UoivI 9liyUZw4h4LO9RnS0LAaPAKEEmV/ZBAC5PM7IGKP9PQs0TG9s+UOkYtV4jGxFFJf BF7MUO+vefhfnOdzhziaEQem41fqrSuddv9k5HQEhaPTsD0c8A== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-07-06T14:29:44Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-07-06T14:29:44Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14811" uid: 2b0cdafe-bfc1-4365-a32e-4fc96f76ce6f - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIKhkeEdAGGHAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4MzM0NzkxNjAe Fw0yNjA3MDYxNDI1MTVaFw0yODA5MDMxNDI1MTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODMzNDc5MTYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2GP/gtGfKbv8PAXbPtj2tzt2/ypSO+WB Z9GNogRsDoNdgnSAod2tZ/EY8cCFPDDSL7wavvIABoMCax/H0mAXv7mB+YbWb7rw L9CVgq2ixOGNR3kWAmFN6mP47nj76XysK7poUO8Xcahh2x3LV4NIbby17vGe+3xi HMwj5OFnmj0ijdJiuYmo9AR6GzATuc1xwSo+3TZ8x7UNHDUIloeh2FT17X0gadgX YmOjbCeFop/LVxLo7wDQFWfvX6IixIfk0Cbytbggo9Lyezkp7rbBkIkRLz9RGhYd GdA1Rj/V4yGaXDNhcs8WHrIH+Xu828XPag2FvPcgLZzNyFxTGEqzAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGh449 8pRDuEZB86wXmX9DvN+PRjAfBgNVHSMEGDAWgBRGh4498pRDuEZB86wXmX9DvN+P RjANBgkqhkiG9w0BAQsFAAOCAQEAZCGhsXPCKHqE5HbAGVggNxUpG047VIwO1XD2 JlzudL/BzZ8uoF1lJ84o6BD121bGyazZ4Y5LHEYe6hfgwKXF48uAHB0SrbjV9DzM lKFTIgGENjdDZXfMebkrdZbw1oolhviUcrFwPxlD2o/6lapOHKB+jvd6CLEzmYVp hzRzIketq07nJoinjeJHETfcngYPxc8Q/TVBeANpdO4P1hAB0/IAK6FP3H5UoivI 9liyUZw4h4LO9RnS0LAaPAKEEmV/ZBAC5PM7IGKP9PQs0TG9s+UOkYtV4jGxFFJf BF7MUO+vefhfnOdzhziaEQem41fqrSuddv9k5HQEhaPTsD0c8A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-07-06T14:18:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-07-06T14:18:56Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-07-06T14:25:29Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8196" uid: 1a208843-505b-441d-8142-52d94bbd817c - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-07-06T14:18:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"102830ef-264a-417a-9dc1-0c1357dea413"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-06T14:18:59Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 102830ef-264a-417a-9dc1-0c1357dea413 resourceVersion: "2586" uid: 82935d82-143f-4032-a062-b269970d5761 kind: ConfigMapList metadata: resourceVersion: "57633"