--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-12T00:10:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5b22afab-bfb6-42e2-8a0c-24e0113dc776"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-12T00:10:16Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5b22afab-bfb6-42e2-8a0c-24e0113dc776 resourceVersion: "2469" uid: 0f796c4f-3db2-4999-b10a-d1c5641f4943 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-12T00:10:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-12T00:10:16Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2333" uid: f7eefead-4834-47fb-9767-d89b1cd83aec - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-12T00:10:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5b22afab-bfb6-42e2-8a0c-24e0113dc776"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-12T00:10:16Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5b22afab-bfb6-42e2-8a0c-24e0113dc776 resourceVersion: "2322" uid: b6198397-a694-4342-a2f2-6c83934b0ce6 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIQLiq+ZjSBtQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMjAwMDgwN1oX DTM2MDkwOTAwMDgwN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyQZ9mFHtJ+O NFBrIESmDrTXJK7SQX3cgH0BSFZuhj8dLjMX2CsX5BHe/cEAcjofdP5vJwgt5g+4 F3QkpL9YvE/hnnubHMcjJPiCWzVFsK8hCOiu/Hfi5PVpREubkfU01NG1V5ip7XL1 Sz4UX7HpuDfRt9LuYtqcL40QqhmSzYekHljEHp4j7cEr3iIDqEVCJ7oOe7n4O2qY NWvV9wwp21rU09LUZ7i97IT6EiUawBQckbK7eqztFC0jl5Pbgnz/N9I7lU5uVPud fhbaFzR9kgjsK8T08LqH6DvDbYu3GHSrQgKu9/ekHsag4O+nz8QZzp5tRlPsLjCk YYj/XaLx7QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAs+UJUCscXkHNiOpx9tpeUxJ8uBWOxa4j6PURopTYY094UNGh HAhHHIUdhMjfkRPMJ8TE7CZN3gMdY0R/PCU2xTANBgkqhkiG9w0BAQsFAAOCAQEA IgJEXamRqAbbA1Us7Vtc1AnpU58nNJAkxyC2SZJkF+1hDuAozuMV8+Ul5UNOY/Jw k7VtrSV38GxUGaOvzYME/G459tHTZwPwXcVH7pynbAv1C9X39h/3E4Xk31wL4WMQ WLWG4O/zbT/KVZigEc8y9hEppFlo0+OBst1/h7Oq1BxATi9/dfVKqhBiQ05XoNfn tAsBJO5gNoMRUlQoOKNx6OJza/UP373jR2OdRZgk+ihNggoNMbwOb6MADvk5BQgp D81ifJuEcm6MmmFemnk9JkK+GJYZyQksdzZlqfof2PGWiUhXeCncNs6JALX4FiTh 4unEPDugAtHLqQJcZpdymA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIUDkHcxtfd9cwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMjAwMDgzNFoX DTI3MDkxMjAwMDgzNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOQJ5DxYO/FjFqrI/bYS8ha4A0oumx2r6ph9RPJH8LknTLhuW0P3iYzygQUEht/5 mbzZq2CfJ8CWgA9bDmEpVIDLDM+MlGD3+zIlCZ0Kpfc8bYHXPRZdZBar9kSaeIUP sAwQQPpzh+kKNe4/xsSyugr4MlV5MLKpq0320lhkiEE45XYaVmCk5UP7FM8i7CBP FASDy5Vznoif26zGxOnNEUpIEggLpUuHis2aZBWBjrO0xIfar3XG2CTmx3DFihGq YE+8gUF9PweM3LwoYTA8BfCgoH1N+MZATiPYBS0409v7TPDabnNWI25dSvRyuiRy 7M5sX6xui51HwTvPsOfPqKcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAjg0GEctP0R/RAE1XgQDOax4/ENcU9iEb4jAzuN75ToC4FCaWnRDPIk0P K0Y1ph2gt9EtjbzsbzRbAgWFAsTn9zBLBgNVHSMERDBCgECz5QlQKxxeQc2I6nH2 2l5TEny4FY7FriPo9RGilNhjT3hQ0aEcCEcchR2EyN+RE8wnxMTsJk3eAx1jRH88 JTbFMEsGA1UdEQREMEKCQCouYXBwcy5hOThiNmIyMy0yM2YwLTQ1YjYtOWRhNi00 MDgwN2JiZWYwMzEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBABFdxX09E9c9TQEJRTnAg7vlu2ZoPU3LxweCY/6RCK1F4FFKvfVhtC/tOFyO 17q+p1r3c5wyLF9e/59kWf98zt/Dzoc5qBzW0vUB9FEAhrsH6Z4kEq+98mBzgAWm w/QgSkumgsyZgyzIHIvqPbzYtC1UMEZy6LUJqze1TGis7Pi+dAwltx2JcSNo+m2H 9V85fRDylgLdMqhMsp4Yxz7R7VeC/qMtS+cfNvZjfX5qoK3Xy1UA/Jna5wAmfRHq v0RglJQ0eDBPHumgu7gLZTUzagMiEulBfhhqUZJMM3x57H18EqlQT272jzwgqNaJ N6JXfGYn/k8TKul0xLG5onAL2/E= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-12T00:10:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-12T00:10:29Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3894" uid: d35f0535-cb36-4847-acae-cdd559cb816a - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-12T00:10:17Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"5b22afab-bfb6-42e2-8a0c-24e0113dc776"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-12T00:10:17Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5b22afab-bfb6-42e2-8a0c-24e0113dc776 resourceVersion: "2583" uid: 40cd5154-1208-4c9b-9a29-4485912b8330 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDUpvT3RyVtEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE3MjQzNDAe Fw0yNjA5MTIwMDIwMzNaFw0yODExMTAwMDIwMzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNzI0MzQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0R7HZ32EAMbqcEBaRpORiLQvqJ81GEm0 D7V0KToKghNyOfEmyrIFznKkHbq5TP8BY1LmZHv/n2JDcoETkUqSNogsm/XGH7QB hGojdPGu1a0hsK8QyN8ZhLmzdpZOJFXqGy4H6T7WIM9LcXCUIbqUsNaFL7f4hAWK inmUD3swd01W4IQS1UHGLXYuvW8WplITyqJ1xmCRGp4UHhet7jHZhEOTnl0M0PhM fMZth84FYy6dGP45ISqKy39mv0k2rbqosOMS5vXRb6rwghXjJbDYc26X+uqzEYhB JyfsXf3u8/Ix4ny85SffDAykRFpyU4LjnchQAUIc5klU2CidzchJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR62QVC 0xoxhtHBWDD9g+OX6/6uiTAfBgNVHSMEGDAWgBR62QVC0xoxhtHBWDD9g+OX6/6u iTANBgkqhkiG9w0BAQsFAAOCAQEAqcjZUkLGHFuvIMSEPcooZqWTFlIQXvZ+9Ylc 61aRVKaB7hTdQuhJxPItlUgWNAD6hWdM6kFMcQR5V+ec47GJShNUdchc0FRsWNM9 AIWcGTvypFjNAo3tueP0OicfvyuHjAfuiAbOl2ESntqTk00MykRPeY25TJj00WRV TsQdFfHUVw7FvfM9ptzL++11OvL4vtDvIwD8ZtMkGO81wBBVOTcC4H2ZhagB1maq AxE2CjTiqjKJF9rAbfgmU3xZgitdGc2w1r56NcaPHfaFl2Cg21oTzf9y3eJqwagG lYARMLsAer4vtfttWhuJQJ4Cz2jF//S47DWhnn5C19864Eu9mA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-12T00:26:31Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-12T00:26:31Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16383" uid: 8240d7a1-5274-4200-af20-a91ded9e13f8 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDUpvT3RyVtEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE3MjQzNDAe Fw0yNjA5MTIwMDIwMzNaFw0yODExMTAwMDIwMzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNzI0MzQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0R7HZ32EAMbqcEBaRpORiLQvqJ81GEm0 D7V0KToKghNyOfEmyrIFznKkHbq5TP8BY1LmZHv/n2JDcoETkUqSNogsm/XGH7QB hGojdPGu1a0hsK8QyN8ZhLmzdpZOJFXqGy4H6T7WIM9LcXCUIbqUsNaFL7f4hAWK inmUD3swd01W4IQS1UHGLXYuvW8WplITyqJ1xmCRGp4UHhet7jHZhEOTnl0M0PhM fMZth84FYy6dGP45ISqKy39mv0k2rbqosOMS5vXRb6rwghXjJbDYc26X+uqzEYhB JyfsXf3u8/Ix4ny85SffDAykRFpyU4LjnchQAUIc5klU2CidzchJAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR62QVC 0xoxhtHBWDD9g+OX6/6uiTAfBgNVHSMEGDAWgBR62QVC0xoxhtHBWDD9g+OX6/6u iTANBgkqhkiG9w0BAQsFAAOCAQEAqcjZUkLGHFuvIMSEPcooZqWTFlIQXvZ+9Ylc 61aRVKaB7hTdQuhJxPItlUgWNAD6hWdM6kFMcQR5V+ec47GJShNUdchc0FRsWNM9 AIWcGTvypFjNAo3tueP0OicfvyuHjAfuiAbOl2ESntqTk00MykRPeY25TJj00WRV TsQdFfHUVw7FvfM9ptzL++11OvL4vtDvIwD8ZtMkGO81wBBVOTcC4H2ZhagB1maq AxE2CjTiqjKJF9rAbfgmU3xZgitdGc2w1r56NcaPHfaFl2Cg21oTzf9y3eJqwagG lYARMLsAer4vtfttWhuJQJ4Cz2jF//S47DWhnn5C19864Eu9mA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-12T00:10:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-12T00:10:29Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-12T00:20:47Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9298" uid: e04b5e48-6229-468f-a6d6-38ce487b1097 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-12T00:10:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"5b22afab-bfb6-42e2-8a0c-24e0113dc776"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-12T00:10:17Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5b22afab-bfb6-42e2-8a0c-24e0113dc776 resourceVersion: "2536" uid: 843e5d17-91fd-4929-a00d-2702e616f0b7 kind: ConfigMapList metadata: resourceVersion: "69894"