--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.24 creationTimestamp: "2026-07-12T17:47:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ac84cccc-b448-4e2f-9e50-0fcd6fd013fb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-12T17:47:31Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ac84cccc-b448-4e2f-9e50-0fcd6fd013fb resourceVersion: "2355" uid: 48182453-9150-4bcf-a86f-86369bc7dae3 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.24 creationTimestamp: "2026-07-12T17:47:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-07-12T17:47:30Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2350" uid: 35da170f-d44a-42d0-9dbc-c29c3aa24acf - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.24 creationTimestamp: "2026-07-12T17:47:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ac84cccc-b448-4e2f-9e50-0fcd6fd013fb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-12T17:47:30Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ac84cccc-b448-4e2f-9e50-0fcd6fd013fb resourceVersion: "2349" uid: 29082132-1c6a-4283-a7f2-c06f7cc43323 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIIpeUuHb90dAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcxMjE3NDUxNloX DTM2MDcwOTE3NDUxNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7fBBjUfGNlP nl5L8qS170Ff/V7WXdY13hOCL5JBh085a+XoubxdqmeHypktEwQJIl5ZuSHUvVYC y8qB86lgh+EHaDLR1Fbg439tHzilETNX/10uqZYR3D1D+3lTaClACb/8Wu9/W1cX MezvXNU1HnmwA/l9sOSilgNvUU93wKKf+BHcjO4dx7CC6KSmAhZST6XJgXk1xY73 zE5thNE/DeuGAbsyMtWIK8gbVtQvgVwrUTGFh/NgvAT9eM4dJZFiLEsXv9yqnMFc Y7doi8QC+9O01gy4umVQUsKOJ5sl58fhvPUp9PXI2F0h6qTHhDlVDY36mTGX/L3P APDoKl8ZVQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAYol9wNALpIO2KrDKU9XYoSoZq5SEJZrH4sd91NFBHSCF8pKU ri0MXquURBiSfGHmbyNae0WzD4GvDoorpQvtujANBgkqhkiG9w0BAQsFAAOCAQEA hhAllD2rxLOzRc1pcC/QB24ljhjKtYrwjolCg/FwH1UpOts6766ikSQeviIzitx0 cvnHl1v8TLV+GGZx0gvKRFhONC0vEgVU6ppzbpOlM4Dd+ivrmoOutrRxmRGSkt67 68+4Cuih43/HziPjwam7GmIRNWaj/DFKXOFLkV4p2ikI4zTYlOueJ68tqjRIWWzA vmZHoEL9zAoZm/fSBRkTSGjbIAPviJ/nyUJpDxscNNSM5foiq1ksyH5ZghHZnKfV /EzduXvEKta/VVHQYoNCy1sbkyCHCUVlHNucPsbmOt5rQ7NW07VnfHOLqGt2wLbj AwCm79S+szEZjXJgmtUOPw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIamInxfCHw7IwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcxMjE3NDU0MVoX DTI3MDcxMjE3NDU0MVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APWVh1PvgN40aoAbO7v5EkCVgQOCcnG+AiOnDgcUDLo+dp7sHByLABGYA4LLv+py 5Zpcd43pecrtLavaCB5KwrmUM7uMMBhaIr7IbLROtV9pPV2wpP3IChzu8E5ENGmA tW0mFbW6lSCJNcKUScD4MFShPe0EZisjAm3gx1iXzXXx864bT+d+0/VbfwMXDlox 0qJ35tXD2U13IlsTKi5UtWxnCqE+p5RGjksoYX9aQmblg+LggmFvSHd6iMlfJkyc laFQBhDY5uaKlZUkU3+pZvhxNBlDNL7vHJkahejsJkz7b6aAm1FSpNtGyBniB8E8 bIweMLEKDGCqueMDauXMPxUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAec88EZPVHhaAhnYhcnsRcnM0KGARO2ti2SNirtr0/oMEhlaxEAmIuRP8 6trnGAV+ggJWDpMGv6fZTOUs1c6+hDBLBgNVHSMERDBCgEBiiX3A0Aukg7YqsMpT 1dihKhmrlIQlmsfix33U0UEdIIXykpSuLQxeq5REGJJ8YeZvI1p7RbMPga8Oiiul C+26MEsGA1UdEQREMEKCQCouYXBwcy4wNmQyYWUxZC05Y2M5LTQwNzQtYjFlYy0y MjZkZTUwMmE5NjIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAE0UuZnf15wbL5c5R4WC2PTUa8zOzllz3+LTJGNRnltvw/zmKdcf0szHuvk3 gYVoOsqyEerHcZdqvhpdfzeIKsiuv7lb7ioC2zCn3EzjFkfgxDd9W830Y2zZtp2m n9hd1MugQf066eWheI1LP16H3YlheDRme3J3rpsU2pp2pgKTThtGwOgQQ/LoFgWk XdNBm5agFxlmtD6j9IN3tie43akTixiQZs3/ZLfje1I1SVV7xngrKL3lC6FhU470 GpnOBQdGiN64+XqE3u0o7hXMeIqpeiqfWq2dPv+JpqYwu2MVFlTdeWYTRmCviZHg mf2ycidD5XDnMdgOdl9sS1zVSd0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-07-12T17:47:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-07-12T17:47:40Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3200" uid: 9bd792f6-1f76-4776-abfb-2024d14f83dc - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-07-12T17:47:31Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"ac84cccc-b448-4e2f-9e50-0fcd6fd013fb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-12T17:47:31Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ac84cccc-b448-4e2f-9e50-0fcd6fd013fb resourceVersion: "2358" uid: 8653a05e-5a59-4d6f-bb3c-fee3722127ff - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIZIUKfcMFno0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4Mzg3ODg0NjAe Fw0yNjA3MTIxNzU0MDVaFw0yODA5MDkxNzU0MDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODM4Nzg4NDYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1k31BwcmRG1s5o+qu8Nlefe9YSW//46k j+6SuWriUj4C+h69lBgHYs4tiYc7qmeGnJdHdfdEAEyrb8F8Xkb8/UcU5RvOM2pB 09nEuiBCshk1qq+OuBEiN4/p32D61IXLA8szBYA8ZdtG+0hsamubyls7fNWcNJ/G 4fJl/wb5i0ZXYR6wdorZOHMqfNqZfOzCsCn/Uf/I4TSZ3/yjhW+W31v0VbKdEKmc j+E6C8HxCR5AbYoPAxdz6HL1zDRN0Z0YTVXgLRY/tN3b0ML1QFDQx7LC794bcXEB qAettG5zYzl5N3fLrx6Uvre6k6m4ODiTiW4mK6BWqjYGPwYdW7ppAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwlXpX r2JYtpedawVVsVWZBcyQ6zAfBgNVHSMEGDAWgBRwlXpXr2JYtpedawVVsVWZBcyQ 6zANBgkqhkiG9w0BAQsFAAOCAQEADOofdgOs499ZGFmL9p0ieHvjXo6jaaB/eLVr 7dT99ZSTAB/4Vc4LoSouY+mp9ER2dlCgCNri6xZ3IW/mBgBfsbSBwP3n8qCokXF5 QpWhld19kEkziOSUf8M/eEQ+kEMbeNjvd/n+lPQOSDDYb7ed4pR3SN9jNDGFSIoj bQcN9ZFilNvz14GysPzVDP0wKsbjTOK6OUhE7dZSWC8d0o+ayP97AHQQZFC2IdXA r+DfegkzUE+BRfyr5ZTFz9d9ekvGgqX+1zJeWDVyfjiyoXQFlddrn4eipePcNGNK iKr4mcOr81oKThkqluRHVdMnu50TFwaNi7psbJTKrhvNYbs5jQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-07-12T17:59:39Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-07-12T17:59:39Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15251" uid: 47af92d0-b6e6-40bd-8c42-0b5c526b6888 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIZIUKfcMFno0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4Mzg3ODg0NjAe Fw0yNjA3MTIxNzU0MDVaFw0yODA5MDkxNzU0MDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODM4Nzg4NDYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1k31BwcmRG1s5o+qu8Nlefe9YSW//46k j+6SuWriUj4C+h69lBgHYs4tiYc7qmeGnJdHdfdEAEyrb8F8Xkb8/UcU5RvOM2pB 09nEuiBCshk1qq+OuBEiN4/p32D61IXLA8szBYA8ZdtG+0hsamubyls7fNWcNJ/G 4fJl/wb5i0ZXYR6wdorZOHMqfNqZfOzCsCn/Uf/I4TSZ3/yjhW+W31v0VbKdEKmc j+E6C8HxCR5AbYoPAxdz6HL1zDRN0Z0YTVXgLRY/tN3b0ML1QFDQx7LC794bcXEB qAettG5zYzl5N3fLrx6Uvre6k6m4ODiTiW4mK6BWqjYGPwYdW7ppAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwlXpX r2JYtpedawVVsVWZBcyQ6zAfBgNVHSMEGDAWgBRwlXpXr2JYtpedawVVsVWZBcyQ 6zANBgkqhkiG9w0BAQsFAAOCAQEADOofdgOs499ZGFmL9p0ieHvjXo6jaaB/eLVr 7dT99ZSTAB/4Vc4LoSouY+mp9ER2dlCgCNri6xZ3IW/mBgBfsbSBwP3n8qCokXF5 QpWhld19kEkziOSUf8M/eEQ+kEMbeNjvd/n+lPQOSDDYb7ed4pR3SN9jNDGFSIoj bQcN9ZFilNvz14GysPzVDP0wKsbjTOK6OUhE7dZSWC8d0o+ayP97AHQQZFC2IdXA r+DfegkzUE+BRfyr5ZTFz9d9ekvGgqX+1zJeWDVyfjiyoXQFlddrn4eipePcNGNK iKr4mcOr81oKThkqluRHVdMnu50TFwaNi7psbJTKrhvNYbs5jQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-07-12T17:47:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-07-12T17:47:40Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-07-12T17:54:21Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8076" uid: 6f57390f-ee52-44d1-b61b-ce4ea72c5f29 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-07-12T17:47:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"ac84cccc-b448-4e2f-9e50-0fcd6fd013fb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-07-12T17:47:31Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ac84cccc-b448-4e2f-9e50-0fcd6fd013fb resourceVersion: "2356" uid: 521288ad-8024-456f-ac4d-d9c952c68573 kind: ConfigMapList metadata: resourceVersion: "85293"