--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T04:35:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"32c76cdf-8dce-4a45-a24b-600381b19c2a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T04:35:14Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 32c76cdf-8dce-4a45-a24b-600381b19c2a resourceVersion: "2347" uid: 8aa6bb71-785e-4fb2-adee-09c9ee48308c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T04:35:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T04:35:14Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2341" uid: 051c513a-cc5e-4829-ac64-e1dbe2450761 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-10T04:35:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"32c76cdf-8dce-4a45-a24b-600381b19c2a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T04:35:14Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 32c76cdf-8dce-4a45-a24b-600381b19c2a resourceVersion: "2340" uid: 142662ed-442c-4424-81e1-9160cc1a8f69 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIMAG3gXFE5EYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDA0MzI1MFoX DTM2MDkwNzA0MzI1MFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvugBpgJ14xVE Pxr/AcfB4ls1M7TdNmr0w4kOTnoeEfNWKbq/HddVJqJIAx03Eaf4qIiiwhtTZYjF 7uYKjNn9FN4O9shH0baWvbpVtWrmbi2akkcYRXucNhsyeXtFPB7Jde/q3VQyiMuD FokqyB/0DBD8txlnFm5/kvSvpq00+aD6BWKL5aPX4u4bnAQ9kDnJOxX60r+yom8a PdkEHkOy4Op1rCtNW9Fw2EhZrcqJlkZ/s9Xo2YBzTe+CciSZgb0Y15iJylqPNArf CoPDYead1iFROnEx/u4gjXcOCUDpOATxh58JCb2HVSZGD8gAI1Ua4HpXoJqmGj7B Mqj5eNmrjQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAvTxpZxMjZQWSU08SzzMZ49Q4A2X9en3ecrmSLrccySdQGAJ3 1SFeuZVMDTn2ZTEWXk44qrmPSxoz0Yj3lw3ZmjANBgkqhkiG9w0BAQsFAAOCAQEA rX46Ba0gFVsegcojrTqXnKsgieE+tM5MhmHpReS1L3HxkZSRnyxuqyx5WvpUTRgc pENbVNlVap0grOm8cNKg8HJQHCsc6Sur3XcK7ex3Yx6xB+C7TVMfTqQ679/QP7LR 2lwNaztvVqtyZEaegXHvjRQ+4H9UD1LFp1hDDPBTRhC0xlPbL2JoKnBgioBp8vGQ 4KHUX2hnvIdNEop4OeqKOBzmaPrOwMRQ8zE1gyzgosYBCpXd2j2wuT3EwRo9l3SD IjI4wy7KCYqXcg7zRWxH5JI120U4jCiwiCfd+WWobZflGanUYhAK7jfrc5A/1h2x qAPOEUVzRskzC+i+sWGx6A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIEqB+MELPqaMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDA0MzMyMFoX DTI3MDkxMDA0MzMyMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOcc3upYi0SpJza8+I5Yh57uA4bQDPkTVoKkQ9WbPoOE0VlG7vq+mYOp2rfVxYj2 FJjDzxGpo88O4gvnASSJmV6FO6kaSqh18PzEIeubEFmBZMzEdEARr5K03fe5uKRw DT6ixFtJRCKtiXEANHzW1+4r9PFK1TPgjZG8Zf0zFfHIfZ9JjXE1miBjAtAPy8p0 c4lTJzu7pUqb3YNDQdixNoIktPDHH6MUnGAh2yEoPqzxwraad4yTm1fDEldvLkEd 3Us7M6DfyLF1BBNfcLjHudpyNXLPfKDOsWbmOMAQPn5g3tuQ+n4jt6/I8wqJTZFR XqH3aJ8iiUEbZmW64MRrYxkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA9pPaF2HYy/qnoFR9Zit2AguCFzzNjcjC1epOmgd8o5zEbHpF/BY/BW1n c/UjyGTqsmoZqWNa1VF6uEbTjiJYIjBLBgNVHSMERDBCgEC9PGlnEyNlBZJTTxLP Mxnj1DgDZf16fd5yuZIutxzJJ1AYAnfVIV65lUwNOfZlMRZeTjiquY9LGjPRiPeX DdmaMEsGA1UdEQREMEKCQCouYXBwcy4yZjk1ZjY3Mi0zZjdjLTQ1ZTUtOGIzOC1j ZGNjYmIyNDMyODIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAFfH99cEy70yoY1IqqcaJSbKy5bfGaLXmgvteHaspzL/lOv/gSD8fNhzSBn5 UpUFHgzpEg1kZHJCPOKQwAXMk9i3JYPD/2XL4qgB6kSEThK1ozkL1eC/wlykEVOu PFddDrU8bZBnLwigCa1UTcATNXHlmFaJEUTo8+4e010dhwlhoS9aIcvNfOnE/DYB tSQ2LSR70XoeD60AiQEntVQUuecuWyqLI2+kzh/rzLjiq0UdLPuP99PW2f/yiqXK 8eRoB0V8WqtJNJnv8mowjLPuP7+7CpeTaaM+7X7BPfuWUgTCSWSGAwXumbWtGwWc 01tAjijLmeBkZW3MytJmTv9AW58= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T04:35:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T04:36:12Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4482" uid: d380b8ef-0ccc-4444-9ad6-24270daa5ac1 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T04:35:15Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"32c76cdf-8dce-4a45-a24b-600381b19c2a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T04:35:15Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 32c76cdf-8dce-4a45-a24b-600381b19c2a resourceVersion: "2358" uid: 681dbd81-e9dd-451e-bdc3-1c624b113acb - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIO2AjVEsz41QwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTAxNTMxNzAe Fw0yNjA5MTAwNDQxNTZaFw0yODExMDgwNDQxNTdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwMTUzMTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/r5pYYlcANha26dzibnJEjI6YCBYihqM J3hkstgTW1/Mklc4TNbozcZgvHtzGBBImhS8sshMS5GXZ4n/Ut65IA0OPJpqENbU muPCczZcklwnfpIBniQOBrh/yDBEkPPQfodnsord2/VZopNM21frhCKzRFXvkAbk hB5BcK0UBYWJgEgoHypIWf6Nm0JxuLxIFu9SJ/U3MaIeIDutrFtng+bmXwGYEjTa 24hRdDFjr8/k3tX84YRBMLoLdLMmzFlXrWgDyZ9rCYhkNCc/4U5R76ErUduTGOKh 7YjRGi439Kr9DggDPM1zjUd9DKgUdJqK5yPvQcHntKohvYZKfQ/XAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1ywL4 Vie7oAkSdrz98l3OelketTAfBgNVHSMEGDAWgBR1ywL4Vie7oAkSdrz98l3Oelke tTANBgkqhkiG9w0BAQsFAAOCAQEAe01RjENbdT9jMmgkMLZ+fBKRze+tiBiRpLzx krL/GlqmdDoUfngPeES6pHuZA6q6NF3gN9koT6BirtXqiEUl0iWWVZ2BKioxsPna 2lIhJBQvyvkjalJ61VjolwJ8ssMEcab6O/PhqlqgCM7k5WpJRUPfDJwemr6BrYcn rjeAp+eAZFHam7R3btmBm+AV/PE8OJW0eVDW/N2tx7gO64YIFNpXsqEBk0iqeQP+ IDe9VcTbZEWE2pzoPcGrZuCWS/cEePlgtD/eWvARJ1EAAua6bQigmcmhXPC2Od04 GUCLxPayXEdU1A2M/6XC504KH27KGey8FIqNW/z+OETL3VsxHg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T04:47:13Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T04:47:13Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15201" uid: e205149a-89f8-4453-b8e9-e2d9cd063585 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIO2AjVEsz41QwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTAxNTMxNzAe Fw0yNjA5MTAwNDQxNTZaFw0yODExMDgwNDQxNTdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwMTUzMTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/r5pYYlcANha26dzibnJEjI6YCBYihqM J3hkstgTW1/Mklc4TNbozcZgvHtzGBBImhS8sshMS5GXZ4n/Ut65IA0OPJpqENbU muPCczZcklwnfpIBniQOBrh/yDBEkPPQfodnsord2/VZopNM21frhCKzRFXvkAbk hB5BcK0UBYWJgEgoHypIWf6Nm0JxuLxIFu9SJ/U3MaIeIDutrFtng+bmXwGYEjTa 24hRdDFjr8/k3tX84YRBMLoLdLMmzFlXrWgDyZ9rCYhkNCc/4U5R76ErUduTGOKh 7YjRGi439Kr9DggDPM1zjUd9DKgUdJqK5yPvQcHntKohvYZKfQ/XAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR1ywL4 Vie7oAkSdrz98l3OelketTAfBgNVHSMEGDAWgBR1ywL4Vie7oAkSdrz98l3Oelke tTANBgkqhkiG9w0BAQsFAAOCAQEAe01RjENbdT9jMmgkMLZ+fBKRze+tiBiRpLzx krL/GlqmdDoUfngPeES6pHuZA6q6NF3gN9koT6BirtXqiEUl0iWWVZ2BKioxsPna 2lIhJBQvyvkjalJ61VjolwJ8ssMEcab6O/PhqlqgCM7k5WpJRUPfDJwemr6BrYcn rjeAp+eAZFHam7R3btmBm+AV/PE8OJW0eVDW/N2tx7gO64YIFNpXsqEBk0iqeQP+ IDe9VcTbZEWE2pzoPcGrZuCWS/cEePlgtD/eWvARJ1EAAua6bQigmcmhXPC2Od04 GUCLxPayXEdU1A2M/6XC504KH27KGey8FIqNW/z+OETL3VsxHg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T04:35:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T04:35:11Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T04:42:12Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8344" uid: 6810345d-2b11-4cd4-b5ae-81acb3aa3376 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T04:35:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"32c76cdf-8dce-4a45-a24b-600381b19c2a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T04:35:14Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 32c76cdf-8dce-4a45-a24b-600381b19c2a resourceVersion: "2348" uid: 13f9a90e-09ba-442c-8499-eb86423f027a kind: ConfigMapList metadata: resourceVersion: "27299"