--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:06:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"75fcc8a4-a196-48f5-ac25-4b85ec4195e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:06:46Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 75fcc8a4-a196-48f5-ac25-4b85ec4195e2 resourceVersion: "2317" uid: c9e35c18-f03d-4822-b38d-981fa072d26c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:06:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-08T15:06:46Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2312" uid: 21c20f3c-df24-43b0-b3bb-f29daf5e9c76 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:06:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"75fcc8a4-a196-48f5-ac25-4b85ec4195e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:06:46Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 75fcc8a4-a196-48f5-ac25-4b85ec4195e2 resourceVersion: "2311" uid: 34fc64f3-964f-429e-9e89-572e5fe58c8a - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIVcROmGsMmcEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODE1MDQxNVoX DTM2MDkwNTE1MDQxNVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmww/TaE+SfEx MClxyPq7FW71LvaCf9QCh1otOWxb9NlxjOHF5c5DQB8XvzZ0g2JQTtgacp7U/Ktf UJZxVtcKVotgn8J1aq6/huMNFGQomYtO8JLlXkXRYcFyf7LcWIbXh9I4R9woAJhB 9plT1NovpqX5i3JXH+4Ajen/vo1txjx0DYwS7Qe5fB9gryFghCgCyjqpmmUzoIg+ OSAVoL9KxF7q8lBHtXU9WxaJ2vsjXwv/IQnncV6nu0EJODrS0nG2+O85o6YokTsA MhhyOeEihEByd3GN0fXNhElPePWGDDBd/Aab3e4GMVZwwcVfyZ4sjRVcWJfg+m3l Z5q06wKOpQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA1PTXH6+j+02u7XMFhFBbP59C9UVUP4zIyewxVxzBNWDUqG6O h18rMEUIjhogZEbcXQ5ucRKQoacm4Tiz+1ij/DANBgkqhkiG9w0BAQsFAAOCAQEA c+tfK7SNRjrDSj/CK+JvDw81bhGxymWALkCsn7T0EI7Y3ltNhMPL764umaS7pxh6 XVH52wRDLQT0APmpWlM9Zn5hvs/nFQ9uYVZ8oYDTv97i1kCH+n4WeOMmEvlthWlU 9Kc0SAWfvgbvDDFlEy6cEEt7Vnhhwhg9op+MSpx2bw+Zi6PxG0FmM+wgwf4IT4Ml qVcpakYfAtyceSFkGW5llcIZJiuvCW7I419ojz2SrX5ifp1WY2AMNJuXCi08G6mA +7/wJCLtJs01Eh5SCOlJDXhxAw4BWJIzbxl8BPM/rtzu7JWQn254ZQwPFa1QY3cU s7E+0W1tqSCDh+B38XRzog== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIINQP2Mqi6FIswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODE1MDQ0N1oX DTI3MDkwODE1MDQ0N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANE0AWmMukfzHjLXt036ooe0pAAinuI/7BS8afo4ZvtKLjrFhHm/70j7oaJk9lgc VgvIkjjXxtkYnFtO45AW0yY7GcdqAS24/h1NRlled8rH39EcuYcoh4nIpu9j9SvL vA3Pwwlv4BQ+SYVQ1Vc+Ldx60N8lJH6QclveyMOf5lU4y+vF+qKSd0QSx1fyKwFS ZeY02GqG/ky8jWo0htbkVrBpfJq3B3a2HfXe0m1q9lGyDK8l8eJ2T7T6t27F1V9F 6Pgo98HZ0RtP8ldHmiFJfiwIhE800v7MAkn/42nfa2K1SOxjxTcWU6NGwayNGVQ4 ryHuibAm+ny5ygGWmMjLF0sCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAMkqOJwabeXE/iIKx28jH2iFue/efSc3JXc0uh5NW5laYr6Vd7l7hSOV8 QRCJj7q2wKSKisNakMJIl8u774JCbTBLBgNVHSMERDBCgEDU9Ncfr6P7Ta7tcwWE UFs/n0L1RVQ/jMjJ7DFXHME1YNSobo6HXyswRQiOGiBkRtxdDm5xEpChpybhOLP7 WKP8MEsGA1UdEQREMEKCQCouYXBwcy5mNmQyOTFkYS02NDcxLTQ0MmQtODdhYS03 ZjEwZmRjMWYwYmYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAFLywQQ4bC+RvbQ1+WfnCWrPBhs95MfAc4RyGNU1var6N6E/TUQDCGnhIaq4 78B7CpiWzFBPRA54q2rUVM21VJmH3pXTVaxqc/6v8umJ/ZcGnzo0cxFvgfA08Guc pIf8pPyMwmjucd0+BCRTbeznwlCuxoA5LQQX2ud8xwvEZ/sQkCl7zUHQpEuEdpxi QG9fsZCogfil0dnhqMPnzlxEhhDs3rS/qbp+wETiNMXypoauaFHwY0/R4GI97PMf EpIQ19x8UYoZaj+SeUkOWmMEZTeW7QTTd3G4tVRG8CVpMyGhyWx24Fm/uReZerr+ 0jLI3ute8W4Z1V1xB6ohHJeG6RE= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-08T15:06:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-08T15:07:36Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4379" uid: 949340e5-f1f6-4d33-ba7e-3b047dd3b17b - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:06:47Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"75fcc8a4-a196-48f5-ac25-4b85ec4195e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:06:47Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 75fcc8a4-a196-48f5-ac25-4b85ec4195e2 resourceVersion: "2322" uid: f8f30ed0-96d1-4d96-a3d3-ecc2dbf5a126 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIf73yES8m+E4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg4MDQwNDAe Fw0yNjA5MDgxNTEzMjNaFw0yODExMDYxNTEzMjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4ODA0MDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEPj6sd+mTl/lbEWYn2ZNQCnXQXwJh48q +uvD1elAeaimD2/CjNK3rekpVP3CseJqDx7bvPhKwuCkFboSOrhD3DsPrq8Uf4Nh 629UWz/nuqir4brdehRXYhQ7GTzryxUcnrgRtMpZx75+ROk157aoAk+pQHhVFtYr NBwl3fb9yo46p0hHt1rn5YgFe3anYr+9TGR2FOfyxuCpc1u1jCgu+0uRNMuDGCbL HyvNmo3/F03x+Gew5enUj3CbaUmcvYnGJXxoej1yhvuSfzzuf4ebAPLFr3t4BSB6 aeGxvMxgNEHyjQll0EozZcboCQ7bguqUjk7Hg7Pme5+Yk9eGv+19AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQeHTlY 5LWZuW7jVN8gJKOFLFFfpzAfBgNVHSMEGDAWgBQeHTlY5LWZuW7jVN8gJKOFLFFf pzANBgkqhkiG9w0BAQsFAAOCAQEANwCP3UDQovK9L3w4JYCKNADPtVq282457LMU +LDiLJmHkguOLM7JiNLImxocz6Mcdfz8J4Vx/HqihQ/EJgw+V+S8MyA5ZB6+01Ra 1iFq7O8is5DP2L5DjhsTZiTOHo1O80xTfkBC6TIxyzGgf21uuBCeCB17fKUBcplF P8aH8Vg91OkvJBj7kyWpwRfpQORKxdhaj8bAP9ZDgmPyOIPqOB8EF/31cfTD7JER iDKvOAMTPx06kk2E3KFTClz0Fjl0Lhi1hTlgfrjc+yu/vtirbdj1fH4zdHDSsgL0 EQW889r2sHIsHjFbG3SKFjxzrkgLDmO1GaDJhb6CfawJxWg3cA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:18:22Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-08T15:18:22Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15396" uid: dd1734cf-e009-4092-bf1f-2adce53dcfdc - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIf73yES8m+E4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg4MDQwNDAe Fw0yNjA5MDgxNTEzMjNaFw0yODExMDYxNTEzMjRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4ODA0MDQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEPj6sd+mTl/lbEWYn2ZNQCnXQXwJh48q +uvD1elAeaimD2/CjNK3rekpVP3CseJqDx7bvPhKwuCkFboSOrhD3DsPrq8Uf4Nh 629UWz/nuqir4brdehRXYhQ7GTzryxUcnrgRtMpZx75+ROk157aoAk+pQHhVFtYr NBwl3fb9yo46p0hHt1rn5YgFe3anYr+9TGR2FOfyxuCpc1u1jCgu+0uRNMuDGCbL HyvNmo3/F03x+Gew5enUj3CbaUmcvYnGJXxoej1yhvuSfzzuf4ebAPLFr3t4BSB6 aeGxvMxgNEHyjQll0EozZcboCQ7bguqUjk7Hg7Pme5+Yk9eGv+19AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQeHTlY 5LWZuW7jVN8gJKOFLFFfpzAfBgNVHSMEGDAWgBQeHTlY5LWZuW7jVN8gJKOFLFFf pzANBgkqhkiG9w0BAQsFAAOCAQEANwCP3UDQovK9L3w4JYCKNADPtVq282457LMU +LDiLJmHkguOLM7JiNLImxocz6Mcdfz8J4Vx/HqihQ/EJgw+V+S8MyA5ZB6+01Ra 1iFq7O8is5DP2L5DjhsTZiTOHo1O80xTfkBC6TIxyzGgf21uuBCeCB17fKUBcplF P8aH8Vg91OkvJBj7kyWpwRfpQORKxdhaj8bAP9ZDgmPyOIPqOB8EF/31cfTD7JER iDKvOAMTPx06kk2E3KFTClz0Fjl0Lhi1hTlgfrjc+yu/vtirbdj1fH4zdHDSsgL0 EQW889r2sHIsHjFbG3SKFjxzrkgLDmO1GaDJhb6CfawJxWg3cA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-08T15:06:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-08T15:06:43Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-08T15:13:36Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8238" uid: f7d15abd-487a-498e-b7d5-72c120171782 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:06:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"75fcc8a4-a196-48f5-ac25-4b85ec4195e2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:06:46Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 75fcc8a4-a196-48f5-ac25-4b85ec4195e2 resourceVersion: "2321" uid: 23bbc1cb-e2bd-4144-9ee9-9a2908475019 kind: ConfigMapList metadata: resourceVersion: "58340"