--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T13:53:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"43669e60-fe05-4423-9ba2-ca112e74d140"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T13:53:13Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 43669e60-fe05-4423-9ba2-ca112e74d140 resourceVersion: "2396" uid: 47caf846-fef2-418c-9706-1272cb34c53c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T13:53:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T13:53:12Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2390" uid: 01fd857b-9ac0-48ae-8bbf-2a1571302f0d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T13:53:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"43669e60-fe05-4423-9ba2-ca112e74d140"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T13:53:12Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 43669e60-fe05-4423-9ba2-ca112e74d140 resourceVersion: "2389" uid: 103c6339-61de-4f69-a708-cc2eda4aafec - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIReC3FGIdIEswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTEzNDkyOVoX DTM2MDkwODEzNDkyOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVBxUtf/lN7+ 0K3cdR0m2eZ0CWFbHjsy6ALqpYBGB4tUKqs1yYNfKyk/LubHe+++8HdQ9YS4jU1f F3/lWTqA3+3ZvXNEwGSpsN+e9Fwf+L7YjeAwZoUXNG4rTCY67n/R3Q1ewVgAAFS4 s/v2UncF0OutIhe2GqFWNxEV+DkKj1Qxo53xYtVg7wKgQmJgYUvDpc2FE9rT9BOV 0+P5VmarXY0GAro6ERPyNQeKF7JgLnGfwsDVt9kRw3Ai7/83KAxh34gPoyAhuGw8 xWQl2gAgf0RCC4UZGXTUX0CQo3kRoQwszUUCG4g0cOQUYbjSWY75cEFtfcW3Gx/0 FVg8iFfXpQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA2ZxXzMCmLDt5+zbC1+VEIMi8SdzA2p6INPQcJ5sRhphubBFn X8cBiAqIiodfEqx4Z2ALhyLQ+Vvypu1Pam1ANjANBgkqhkiG9w0BAQsFAAOCAQEA Ks1xk6EHyPp0T23mBDekunzbfUPW0jYck/kTw/E8Fq2HgF+IONips+4GQqZUugR9 YdfGMZ/nDg1v/RuoqpMstst/GZ9W78G/69VtZsBMOpZeCd4BC3jXujTLWG2TkZCN 0lsf7cjjz9i7Sh5GJ8X4/c0SNRGv6GU/9Ojacs75/4Gt8PCWk7vq1TxMbhFAn7wt YWwSwWzHgwxsbRbwEPJLw6/t4m7S5t7CIdTMIr/X4ITWU4yz1R5fTSk0u02Ydp3P oubmwgwmzFqIQ7IsrzWQJgQwaKULNI0Mk4oy72KUseCRnJp21aoZ6Pa9mzGmh8Zw uLZz8bQii2wpXtn1w61hvg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIINp0dLprgfhMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTEzNTAzN1oX DTI3MDkxMTEzNTAzN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJXIfA0cBu6+O1cnYRFz4iirXrSRtV0S8hnWg1bDCYcr8+1r3LjIWDPl96Y7tOW2 Q5ieap4GwpMlAlJXIjwHVbOlcmVFGpxMVgLmG7GPi/K2Hx/88PpUxZeza6it/dHk oGKVbiVTksaFtkDAfJP2jjvb/DoZMxp+amb/naL1xjZFYe1RjKwalJ7PM2IFdyTk 1bKmKS0GODkqiXI/AvZTOcqSGbYR7lb9onkX6JKeKc8I1LPqWL/7vhH/FFMoyKet 6CcxRLli6z2cDmW5CCbHOnwKvA8hEigiCa79neysNRBJkS+Q5KlpvHcdKIrAiOmV xHypzo/2nB88NmvNRssCwgMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAYrLm8JXcU7/ONF0445DNHLdeG4o9sTs61YYOAwRxYyAfHug1kBbxdCVU YrASSjOy4udfjZ4QiSnMfLSqUwTVlDBLBgNVHSMERDBCgEDZnFfMwKYsO3n7NsLX 5UQgyLxJ3MDanog09BwnmxGGmG5sEWdfxwGICoiKh18SrHhnYAuHItD5W/Km7U9q bUA2MEsGA1UdEQREMEKCQCouYXBwcy43NzFiMTZhZS1hMWVjLTQyMGEtODczYS1j NDE1NDlmZWEyNjAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJUhSvBOrT8+mWtkhtPNhqd9atSDS5PDBisawWtyG5JYch6vrPQ3g1ZQiZo1 ESGy06ofJPCNX0qVcnWIDpARxCJGU+8UxqB2LbR5MRq816Ua4q9ywaeslkmm7+8m APFvbKkNjjTd2FFxUU3gLAvDSAEQ9t5QNIuKnU2E7RnxTiRgurR9tnY14/FYROa0 m7TW5IUNEGaWTjQoGf1qO2VffBd4hJe0tkwkhcAXn1DaGXyyobwQvJjlVg0Muz9l jNvKk5sM1lBBU/HB4Yc5hrk2BBAiaPsZlInXfvZazWb7jSCZ62GtHla+aJviXObw KvYWJTYv4U6oCZpcWBj/lbGclgY= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T13:53:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T13:53:21Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2660" uid: 6efff81a-bff8-4a62-9a4f-0209051d1c98 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T13:53:13Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"43669e60-fe05-4423-9ba2-ca112e74d140"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T13:53:13Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 43669e60-fe05-4423-9ba2-ca112e74d140 resourceVersion: "2400" uid: 449c5ba1-e7cd-4ae3-a058-5fe00f9bfcc4 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdGsEhgckN0YwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEzNTE0MTAe Fw0yNjA5MTExMzU5MDBaFw0yODExMDkxMzU5MDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMzUxNDEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOcqhAFWuk/l40kfY5jKKxLDht92nfCnL RyJ+wnxPGsNezMMJVB0RRihPd7GdPA3tP332AMldfD8bBMU1FFgXQBTVkeb3JJ6p NRtAHlDf2QVSXgH63bcECheHLPcsDr1hzaH3+8B9bTzSBPLwvN0uXQXCUfB+dshl 87YGINsnIoAcbpsjKZS8+H7kHd4MyVCzyssuxQa1yQSYiFfXCrrrx5+2bURhxeIp Xswsh9xcRCm0GpGXlbqK6wo76z5IVrO5FysdVFPOxYdtLNKE0MCwdG5pnrQuOaL5 ojj6laGQnDUT6BwjSjrVG3LOkdx11z/4eGEEZ7I/4Tu0xPi0KZCxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZiuCq 8VrOXOXkOHJS2azNae15iTAfBgNVHSMEGDAWgBQZiuCq8VrOXOXkOHJS2azNae15 iTANBgkqhkiG9w0BAQsFAAOCAQEAeUx72hTMANN9g1eD2mLbttdIOfaSZ+yjFpqy Ks15dFtSayuTou/CFhdrl2xXEadJ4s3kEYnex6r9EF6CcnWP33qxPOnzwJg/lv3e 7Fm3v1EzxgBzBwpu2e3hUZvInQBvQ6I5EM5AHAgTe3TDlVlvH90vtIrDVISkuA5x gnGNLPmSRVv0GNeRDiEnItBDCAjI8l0nGG/uG5b8fjPTCivbn6ta4qx8ue7JM4aW GOOLzEBX3ae9jgNoKJhlPv4ipZre4qizSzZE794j1m9j78FJG5TYecI8q3KuFiZm 5qrVVGHkbh0uGDBk3uCvI9ir8TqCYKasBZ96+h/uVjLm+PYVBA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T14:06:24Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T14:06:24Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15271" uid: 1cc3cd21-a797-4ca5-ac3f-d8f9e7d6faf8 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdGsEhgckN0YwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEzNTE0MTAe Fw0yNjA5MTExMzU5MDBaFw0yODExMDkxMzU5MDFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMzUxNDEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOcqhAFWuk/l40kfY5jKKxLDht92nfCnL RyJ+wnxPGsNezMMJVB0RRihPd7GdPA3tP332AMldfD8bBMU1FFgXQBTVkeb3JJ6p NRtAHlDf2QVSXgH63bcECheHLPcsDr1hzaH3+8B9bTzSBPLwvN0uXQXCUfB+dshl 87YGINsnIoAcbpsjKZS8+H7kHd4MyVCzyssuxQa1yQSYiFfXCrrrx5+2bURhxeIp Xswsh9xcRCm0GpGXlbqK6wo76z5IVrO5FysdVFPOxYdtLNKE0MCwdG5pnrQuOaL5 ojj6laGQnDUT6BwjSjrVG3LOkdx11z/4eGEEZ7I/4Tu0xPi0KZCxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZiuCq 8VrOXOXkOHJS2azNae15iTAfBgNVHSMEGDAWgBQZiuCq8VrOXOXkOHJS2azNae15 iTANBgkqhkiG9w0BAQsFAAOCAQEAeUx72hTMANN9g1eD2mLbttdIOfaSZ+yjFpqy Ks15dFtSayuTou/CFhdrl2xXEadJ4s3kEYnex6r9EF6CcnWP33qxPOnzwJg/lv3e 7Fm3v1EzxgBzBwpu2e3hUZvInQBvQ6I5EM5AHAgTe3TDlVlvH90vtIrDVISkuA5x gnGNLPmSRVv0GNeRDiEnItBDCAjI8l0nGG/uG5b8fjPTCivbn6ta4qx8ue7JM4aW GOOLzEBX3ae9jgNoKJhlPv4ipZre4qizSzZE794j1m9j78FJG5TYecI8q3KuFiZm 5qrVVGHkbh0uGDBk3uCvI9ir8TqCYKasBZ96+h/uVjLm+PYVBA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T13:53:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T13:53:21Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T13:59:13Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7974" uid: 79bc7945-f4a5-46f3-b612-e813f183b9e1 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T13:53:13Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"43669e60-fe05-4423-9ba2-ca112e74d140"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T13:53:13Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 43669e60-fe05-4423-9ba2-ca112e74d140 resourceVersion: "2398" uid: 6e04a5c8-ef78-49be-a65e-0ebf372a9d93 kind: ConfigMapList metadata: resourceVersion: "59486"