--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T03:07:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"45fa9e15-5c98-413d-bb6c-96f63dc36371"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T03:07:12Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 45fa9e15-5c98-413d-bb6c-96f63dc36371 resourceVersion: "2296" uid: 23fdec8c-07bd-446d-83b2-f65bf736d92f - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T03:07:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-09T03:07:12Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2289" uid: ed7ad893-a77d-4871-acbf-5042900afbfa - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T03:07:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"45fa9e15-5c98-413d-bb6c-96f63dc36371"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T03:07:12Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 45fa9e15-5c98-413d-bb6c-96f63dc36371 resourceVersion: "2288" uid: dc735e80-cfda-4d9a-befc-29b978e6b3a2 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIGYj9bEUV2d8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTAzMDUwMloX DTM2MDkwNjAzMDUwMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/J53+RVyZuj zpiP9JbULeHa1fVhzfgZtTxQPB/oFpqhCNhjiB0Pu190hcpVTF7Wt7mQveAdhRXj T9nvW19T9sv5WiK3/IcLwkO4qD+YMAk9b2iYh8nD1+ZC9wbynSVCk6OHpr7zJjYk 4+TFeyv+JYhpfu1j1c1USCPYn0T57I3b/AI6AVLKD784ezFyCY6uhK9xynOTjJDX rzvRMAwwi1WerZ9Q1uce1JdrHpUA/h56N8RdlOI4ZCyIPDyNEUoXf1Vwmk0cV1Q7 4+M8KZQHsCjZsHxgzx7kurqLh6J8dPVh1Xd8B5m0JlcWIZdEeyEnFP0h34F1FHB5 29hdV1sLmwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAG3QmdHlME/H5F5e0kDDMsJH9R9mSzuq/mizyD3kja10wkxgD tO8zSg3wIdqLJWz0Wr3zZElGMZT6Nt7eSh9aPjANBgkqhkiG9w0BAQsFAAOCAQEA KlFviLr/cTTaaRwv1yU4NSS6O44+ip1FWaQoRqsVQtFI0k5pVEEsUqa69BkNbu7i dEDplkWhYfkrNWZIctnmRDM4I1U0SiiUg5gKRhi/UWDJm0j2c2QFPJHYDovd8CeF AnzlMYkQEsisuenxWS88t619sbRzK86i3B9WT0oPpd/UhDwNnjyFbq6LYxRzufEN UvvorEimVFEW2jWpO/5CUG/4b477X5Tih7NaL1cl4c5IDyFdzbg59CaLGGsyjTeK BH+iZpMpgQsYTXeZZPMptnh3TNgy8/+P33PW3cJxwGSNErlFfQoVlHMSmguJ6Z3x b6C7YnnFUKXWqRL6i24LJA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIITigkGUKrJ5cwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTAzMDUyOFoX DTI3MDkwOTAzMDUyOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMUn+yVZoCCzFwgV2uJPDXVVxb8oZYHAsHch+4mr6SykRJRAeWhcrGpxB6HI6o3H Q2wWLp656XcfzdvGTUl2z+k3vI2Ty8CFTLGDJ5caOSC2L84fWgnidbjNcyuRvL6u j9+TNnAtF3Rq6K7yQcS6oqiz3lFdhTDhHcJwUYl/kMzrYMoxGFN4NbOGqE9i8dDK o9XHAlwE6fUZSAJF0gwiwTQ49zAsUdaXPy5gVb+5WAusV0TAvVJTWGe7gQgtHfB9 pJYYN4Tqz+NIQFAi0zLR7NClsFOGFaOZ4fgpiDEjNkp89p2mQQKE4NKDhCGdC0Gu rK9xvWUrAE1VA8LtOMv/cOECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRASiGxyRXXzo3pmIPZumtNed36hlQ7gcf9Ed43Z0NOVPwoNfqHCFiNnn5X Q2DQ85RHXVjg0DPsEjQALzl0U5bfXTBLBgNVHSMERDBCgEAbdCZ0eUwT8fkXl7SQ MMywkf1H2ZLO6r+aLPIPeSNrXTCTGAO07zNKDfAh2oslbPRavfNkSUYxlPo23t5K H1o+MEsGA1UdEQREMEKCQCouYXBwcy4yZWJjODIzOS05ODViLTQyN2YtOTg1Ny00 MzZkZjZjZmRhMzcucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBALWttZv/TPTcPuz17pAqGN5qnm33+X18GI98gS0ujanG4A6plnQR6vJOqNzl kqN6OyL9rhH/Uq2XqhUN7r6Q4khXR2Ht9ujkj9NVn3ZL+XS5jfZ6ntMC3GPDuxcg ofKrBSeOlHMREkJ+gYbsDVrulbD26F2UeUd4VBXp21Ttd0Vb41WMP18DWiTNdYrT 79igaPtKzR6hYr9C5MzEZ2OWgTRY0wM73vNiKhEdGSbHJnRjAL9mDdFItFx/PyBb ooG0VzS6QfV/xtB+DvDlvQAbmBa+y8WTBqfpdew9+UecpIUjERQBVT6bRPclMTca GPYXGGu7pX+G9TEsjrzcVRlK7gY= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-09T03:07:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-09T03:07:23Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2748" uid: d2f930a5-b24c-44eb-accc-fb5559266234 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T03:07:12Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"45fa9e15-5c98-413d-bb6c-96f63dc36371"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T03:07:12Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 45fa9e15-5c98-413d-bb6c-96f63dc36371 resourceVersion: "2299" uid: 86ea0c2e-c1b7-4bdf-a00c-200aeef3b088 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGwDk9axRiqkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODkyMzg0ODAe Fw0yNjA5MDkwMzE3MjdaFw0yODExMDcwMzE3MjhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5MjM4NDgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6T9wTimICNB+b0rb9G8jCygGmcTar0rAm dbSM4uJM1ijnM5JxVU1coaSGrI1EYRTX21oU+ADusxkRkgZwcLDqQswgRSLUO9+g J1MGs8oLKWm1aHjqtWJCX+ff8AOuV+18O0I5NPIjvfMaqzZFWchB7oRX9JgWJ9vZ RBb9hJ3aJ4EaqM30lxBIVue5Bv+yNZRNbjj9MyzAoXsscY5QzuigQlON86WGc8O6 ajxw1gKjm51XdrhiHV76te52gU50XU9cmt1RLQFROvZIZ2Aucdigh+E7HiTrRh6V EyVhzp1ta4aPf3V4af5Fwfscv8ucJoEqiRIMoj18bJzThhxQ7LbJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTa3J96 MCvqbHyQQ1aNca715W20OTAfBgNVHSMEGDAWgBTa3J96MCvqbHyQQ1aNca715W20 OTANBgkqhkiG9w0BAQsFAAOCAQEAOAHCen1wzWowh6sDUjpG9mCRrfD8X/xH+7kr mdjROOVob6xP0FhG+nXiJ1uTwR4Rsr12Fb95iRgCnMQfQ8bMxMtJFW9zjE+pkPpB BFw/FPphh7R/2IXyra4t2wcsXhuU9M0+2+B36NX75VHd4XgP7Z/TYkYnV9dRDYER wsG+jO4qG/4dza5QVxwwEQbKnl3crynfZYG/sFAH323yCDHTJhpylQd5soUYGBHD jUzCZCh7YxO6gJCJzu/VLQiPesJF5BfEvRhl9ryuv48R7uZ2ndDIsxzeu7dxqF2y kP7wZpN+tsOueKYd5+1k0BWaTittn2FtIGU6W5AxYgXYTUtrlA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-09T03:22:16Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-09T03:22:16Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15986" uid: bc49dd12-cf2d-4cad-9e60-72fbb5cae43c - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGwDk9axRiqkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODkyMzg0ODAe Fw0yNjA5MDkwMzE3MjdaFw0yODExMDcwMzE3MjhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5MjM4NDgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6T9wTimICNB+b0rb9G8jCygGmcTar0rAm dbSM4uJM1ijnM5JxVU1coaSGrI1EYRTX21oU+ADusxkRkgZwcLDqQswgRSLUO9+g J1MGs8oLKWm1aHjqtWJCX+ff8AOuV+18O0I5NPIjvfMaqzZFWchB7oRX9JgWJ9vZ RBb9hJ3aJ4EaqM30lxBIVue5Bv+yNZRNbjj9MyzAoXsscY5QzuigQlON86WGc8O6 ajxw1gKjm51XdrhiHV76te52gU50XU9cmt1RLQFROvZIZ2Aucdigh+E7HiTrRh6V EyVhzp1ta4aPf3V4af5Fwfscv8ucJoEqiRIMoj18bJzThhxQ7LbJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTa3J96 MCvqbHyQQ1aNca715W20OTAfBgNVHSMEGDAWgBTa3J96MCvqbHyQQ1aNca715W20 OTANBgkqhkiG9w0BAQsFAAOCAQEAOAHCen1wzWowh6sDUjpG9mCRrfD8X/xH+7kr mdjROOVob6xP0FhG+nXiJ1uTwR4Rsr12Fb95iRgCnMQfQ8bMxMtJFW9zjE+pkPpB BFw/FPphh7R/2IXyra4t2wcsXhuU9M0+2+B36NX75VHd4XgP7Z/TYkYnV9dRDYER wsG+jO4qG/4dza5QVxwwEQbKnl3crynfZYG/sFAH323yCDHTJhpylQd5soUYGBHD jUzCZCh7YxO6gJCJzu/VLQiPesJF5BfEvRhl9ryuv48R7uZ2ndDIsxzeu7dxqF2y kP7wZpN+tsOueKYd5+1k0BWaTittn2FtIGU6W5AxYgXYTUtrlA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-09T03:07:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-09T03:07:23Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-09T03:17:43Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9272" uid: 48d290c4-21e4-4040-9901-ca5497b47d02 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T03:07:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"45fa9e15-5c98-413d-bb6c-96f63dc36371"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T03:07:12Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 45fa9e15-5c98-413d-bb6c-96f63dc36371 resourceVersion: "2297" uid: dd0e1ae7-bc18-4f7b-b348-31382cfde0fe kind: ConfigMapList metadata: resourceVersion: "59053"