--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T13:28:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"b3d7fcb4-50c7-4685-9e66-03662e9d60c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T13:28:17Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b3d7fcb4-50c7-4685-9e66-03662e9d60c4 resourceVersion: "2399" uid: d3a88c90-41e1-43db-94b5-637f166f7748 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T13:28:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T13:28:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2391" uid: 39b6aab0-9c8d-491f-8b4a-df45d0c783b7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T13:28:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"b3d7fcb4-50c7-4685-9e66-03662e9d60c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T13:28:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b3d7fcb4-50c7-4685-9e66-03662e9d60c4 resourceVersion: "2390" uid: 9594cf84-0354-48d1-aa27-5386ba31ac26 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIatdJFIEanJgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjEzMjQ0MloX DTM2MDkxMzEzMjQ0MlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ1EAHbUBcL0 BGKkblCv7KHUmNgVwdg7BHH+i10dLyc52mHUCPDwfoE7baTOuOTxdpqEPiBgoZJy sPuDjPxT0TeFJIffHOrQktve+yXK/3uP3mLyUEJ9W39WU8XreA+jPcZoF9NcgGW5 DPTL1QIL+zoRcCR3KV1JKHLNIhJX2MfDMLQkOCkBZvbbqeDdBJMMs9Ve7JlONXbI b3bu3xV1JikBiPIdJngcwAElkvm9h1JiYWHBsgqsGVbd6IGuWh4obf+5xq2WW2W+ ChP3oeHD6ja8f2Oz1RZOhteVmipCP7cn+C3nXOiz5AhgieHuvtgIC2ojakcTc9T5 C2d37atzlwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA42iu29jVSZezVdrlUTekog5jqok+bMAthNZABmK3DXXvZinL q1QnmpoffmOrHzJXCm9N9AKH+8ipgVUJc3LvzDANBgkqhkiG9w0BAQsFAAOCAQEA jT2Vzp+cRQvHlJGXWkOHBjVvox1mHNEM7RpR/QPDiihuaWnkhWPfFpBC1HvOUBdG oUOvpPS6+HapZLkY1ut+zRFDY6mTMsddxZ9NJDrgrley+4AgtSpgG2HJSwoybuhr Sh1ldLwNDmzMNS8DJcuUh1WXrpjc9ENohWMxEbR/A9yG+xEpNiC0IejVng/uvks8 TcT41l4TseRNSj7fLEotFUAd3KI4p3ps9KOjxMKJooQ/vA2ZtwhpiPvYxahQE9lR kMqt3vhEzkNOXEuxKNPTLLHaU5y8qAXsNbQO5aI0UJjM31Gf4T9I/SznLhEQr88U BSDuAgHHy/bObiWAeSoIJg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIDcT/lee1kqowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjEzMjU1OVoX DTI3MDkxNjEzMjU1OVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK6OWdkAN6pAUwcplDWX3A8645paOLrodt+VaGVDXC4PcW62iskQ9dYkEcyqG/NF riuoo91jMKxdL0Jn8DrtGNZhhCQ+vtkXJDjQ8CFPSC6UV2sd6kz8rn6IO4TsamoJ 2Kvbq79gEbzv4+mQDUW1BoDq65MJu9NQ9twJLo0gSLzMVDFEektYm7sJPlxkXy4b Tr8hlXivy45E2QyZtwi44qmljBrCUt8kC/PWxAPdvLN+9TqXfT9ZxcQLMKxKAI3z 9eSnm3MNs7pqk0FVrSgs+Z1a1A+6fRKiUieEc8mfRvCbfeSmk7AuyGWSVr/p7eHe kcLIsQo/kMUO++XjCqEKqIUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAnoHoGFn6KCmS4Scj2IVdrIcc2NhUhYh30Q5YHH6e4VHC2EEc5ekC8cLe 76hJwl1lBcrI8zqt9zXXgRW1mQr5ETBLBgNVHSMERDBCgEDjaK7b2NVJl7NV2uVR N6SiDmOqiT5swC2E1kAGYrcNde9mKcurVCeamh9+Y6sfMlcKb030Aof7yKmBVQlz cu/MMEsGA1UdEQREMEKCQCouYXBwcy5mNzExMjZlNi01ZWUxLTQzYTUtYTg2ZS0z Y2MzZDNjMTYxMWEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGXxKRybaKc7z6j3mbp68MC1P7ZevixoYeefZS5Yk64ZraVWwb0SUbGa+YoL hqHWBzcXoYbRYcqo0e8b+j8sf9vzRt6pR06xvmF32biwP1d1/xKoAyU61qjVz3V5 tb9YjaaMIQf3pBWMgqm9Rl7mW9hAxdc+4n38AnML5FX9K3QSJfnX7k47GwIdV3s2 dx4HJac2o2VCfK7Lk+YY8ew5Ts3iXPE7ur6dsCKgbuahSfZ1Q7alefyau1tsRDrR zCiE4+8BZgkvmLVfyEHwfM9nC42z8isXu0bP2W6kj4U71eFLlS0E4VidFlvfDjXH kVf5WOgGP70kPhEoWUIcy+XyyQ0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T13:28:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T13:28:25Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2704" uid: 4d25234a-3bfe-407d-bdf7-fb5d910ebbad - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T13:28:17Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"b3d7fcb4-50c7-4685-9e66-03662e9d60c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T13:28:17Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b3d7fcb4-50c7-4685-9e66-03662e9d60c4 resourceVersion: "2410" uid: 977a2a5b-45ac-4bc8-82c5-b62b426d0ce5 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIISTttvP2A2TMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2NTY0MDAe Fw0yNjA5MTYxMzMzNTlaFw0yODExMTQxMzM0MDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1NjU2NDAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKeFM+eQN3LHXCP4dweKXU/omhYBl8gXj HI3l3ebDAg8uTCKbftSXFojp5l80w3O/GMWqL6jA5kRTNr9UvmVRFx0+8cFYyt6+ 7XxMbc9nWg2Q7Ob+vVQhVAQDjdrRmj1L+q8P1rv2UHvHS0xmkgi7wAByXlJt1LtC SnqUNdLQ86K+ZmrYab6bltTxgIwSj93Q61uiXZwD6Kyrgutx9Kh6iLJZ2d1C+z6Y g6TVCjRJRIgJ+eNPV/tU9bM/cCkLOGJMz0b07S9vHI0z9UwNiUd4LtIX0dHoxCWv IwwAMp5KtJq51MwEG8dASUkTZeRHwWZq23bVMnWsyGPZFbSU54gFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP1nkB UVpeBsrkK+el6PJrYkFQrDAfBgNVHSMEGDAWgBRP1nkBUVpeBsrkK+el6PJrYkFQ rDANBgkqhkiG9w0BAQsFAAOCAQEAnLrg8aTlfzooc/9TZisAON4X5f48t7WzCd86 k8e89HdCE2VVJDKsP3yYWA8UFCBu0GLU4j3iuqh71EBGPEp1FJjVzBkr1r5q2JOK ryUcDynts/Gh8CeCH0FWT9EW3XVRMCj+WGDyh3++QyYWOUq+ftu6hWejiGtXGw/d l8T/Wi5XTS96A3FGoAWjyfUEo1Ivdpm7bcy9NL9lW8UUi4w8Mk1OQWbBysMGU/o0 k9JZk+r2dV2q8GAoOpe67j0DItJdH4CqdSE6duqRncCmG3rQ7WC1DRaMQ2PCev15 /Re/SUd2JBok/uZCBjTi86DzNVAMNvtjyPyu5gXQLAvNHk0Qpw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T13:39:00Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T13:39:00Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14502" uid: dcc0b61a-48ec-433d-a5c5-4342d867acf1 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIISTttvP2A2TMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2NTY0MDAe Fw0yNjA5MTYxMzMzNTlaFw0yODExMTQxMzM0MDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1NjU2NDAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKeFM+eQN3LHXCP4dweKXU/omhYBl8gXj HI3l3ebDAg8uTCKbftSXFojp5l80w3O/GMWqL6jA5kRTNr9UvmVRFx0+8cFYyt6+ 7XxMbc9nWg2Q7Ob+vVQhVAQDjdrRmj1L+q8P1rv2UHvHS0xmkgi7wAByXlJt1LtC SnqUNdLQ86K+ZmrYab6bltTxgIwSj93Q61uiXZwD6Kyrgutx9Kh6iLJZ2d1C+z6Y g6TVCjRJRIgJ+eNPV/tU9bM/cCkLOGJMz0b07S9vHI0z9UwNiUd4LtIX0dHoxCWv IwwAMp5KtJq51MwEG8dASUkTZeRHwWZq23bVMnWsyGPZFbSU54gFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP1nkB UVpeBsrkK+el6PJrYkFQrDAfBgNVHSMEGDAWgBRP1nkBUVpeBsrkK+el6PJrYkFQ rDANBgkqhkiG9w0BAQsFAAOCAQEAnLrg8aTlfzooc/9TZisAON4X5f48t7WzCd86 k8e89HdCE2VVJDKsP3yYWA8UFCBu0GLU4j3iuqh71EBGPEp1FJjVzBkr1r5q2JOK ryUcDynts/Gh8CeCH0FWT9EW3XVRMCj+WGDyh3++QyYWOUq+ftu6hWejiGtXGw/d l8T/Wi5XTS96A3FGoAWjyfUEo1Ivdpm7bcy9NL9lW8UUi4w8Mk1OQWbBysMGU/o0 k9JZk+r2dV2q8GAoOpe67j0DItJdH4CqdSE6duqRncCmG3rQ7WC1DRaMQ2PCev15 /Re/SUd2JBok/uZCBjTi86DzNVAMNvtjyPyu5gXQLAvNHk0Qpw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T13:28:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T13:28:25Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T13:34:13Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8019" uid: 70875a5f-2fa0-4e37-9a1c-ded53c91ef23 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T13:28:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"b3d7fcb4-50c7-4685-9e66-03662e9d60c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T13:28:17Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: b3d7fcb4-50c7-4685-9e66-03662e9d60c4 resourceVersion: "2404" uid: 88346461-d007-4a2e-9d66-86657b39fbdc kind: ConfigMapList metadata: resourceVersion: "69748"