--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T01:07:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"15b0caaa-635f-4181-a690-8fa8a68b08aa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T01:07:00Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 15b0caaa-635f-4181-a690-8fa8a68b08aa resourceVersion: "2394" uid: b0f99d71-0726-47e2-bd52-5751c97098ec - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T01:07:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-19T01:07:00Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2386" uid: e94b4e24-78fe-4239-b569-ff67f93fe5f6 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T01:07:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"15b0caaa-635f-4181-a690-8fa8a68b08aa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T01:07:00Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 15b0caaa-635f-4181-a690-8fa8a68b08aa resourceVersion: "2385" uid: cd9d6b08-0243-4a1d-8480-e30b45edfcba - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIIi/SQA78NOEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxOTAxMDM1N1oX DTM2MDkxNjAxMDM1N1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYwpp2htGb29 4kVG4mV1FUqbRZuBZ+406maiF7JKRB+I88di7uep11XHZr0YonPJJ41Z/Pf/o05/ zQGIz/rl8/jGa0SVvLJ9wJuCu6PafNtf7SO7hVdD9sWRe1Buxkmj0nJUPSfkw4dj e0qCh2W93qXQ6LDpXoqSu8p/rSv/GzDVpB8x2PiO863Qd3fO5xJQIBNDK2wXOUW4 16GMghyspRWiEJehbgNn9IsYVlTuPLmh7/LmQtNsB8+s1Eqk0vyPncblCKAJayDy yGVSOsXaiD7rMdVX62+P6O1mOMunP/wEeoumuhzIFx1XJskABM/dMgXWkgm3H76X 1arWPK790wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA9ujEp9ptkjZrXQTXPqCeSnwF4Xsaq/GC3ybUcQ1PXcnoy6mp rkHamSIUSVRIO2Z6QNGDHaMswTza0YOA8MCYvzANBgkqhkiG9w0BAQsFAAOCAQEA PN9kMWI69A1xtOYsSRLP/HVhV+d7+N2SufKHDwrYuM2YKX0EBQCtrEaGr4ts7pNj ESxpPwmd6XKwtURmi2hf+j/JqxocQ0fasFtMn/7aBXcWQBYQThlAbv4eO+wzFTGE ObUKk5vPZzZWEMCeso2//kbm6uG5kKv3ASCwL+5iEOdSPajqeu4ESmAl0R/MsjUd binWnX8CS7PzV/gRE9NTRFvLyCHEFYODe6zwb2mSfOe4SX9tHV9A3vMH3cyJ4N4b QLllqVO9ENO/qrsmOeD5V/M+6g4HY2JzUH3KTVT3yTwt+vHh0FGCmSleGVA6aWIg ydp5MVjleWg32H20hZZ3ew== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIWA6KnzB7aicwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxOTAxMDQzN1oX DTI3MDkxOTAxMDQzN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO7odbNtKIsoGF5nhSri5XRYd1257xsYqMrO24YrQcpQ0EK0apuA7qY6rfUb9cuY xBJEswVvTBh0LS4PrAwWOZn+8mNK0BCc97YUBslTuM/zgCsEcXKIQd1UrE0xYoYy f0PuTGZECEo54fw2pvpT2kRgH/n45wjMbP83DN5WdB1nYkkDNB96x1pncVTrVa7p MJCSH6sbXAekjK+1W0v4z+NcMv3DLGB+/o8cgnPrjH4DYjWjfVyaKcrnWqVGEaRh 7+Hl5L3NT4ey7iCYFQtnM2yazzOPDo88deNDGuJqgR/Z1m33LqqQUYAyR/fK8yZd WOnj01mwZbAFkmxXq5rL5uMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAb8xdlDUGiypy6h5ZKnOewwnl9MvMsX3F8TvmYXrzYUNFVNrJCB/njxU4 yMijhbYYvIA1VaCPvwrSd9HqdIAIATBLBgNVHSMERDBCgED26MSn2m2SNmtdBNc+ oJ5KfAXhexqr8YLfJtRxDU9dyejLqamuQdqZIhRJVEg7ZnpA0YMdoyzBPNrRg4Dw wJi/MEsGA1UdEQREMEKCQCouYXBwcy5lMDBiZGJlYi05OGY0LTRhMjgtYWEzNS03 YTQxYThhYmU5M2YucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBABjW+x1rP/DngiuLaoIeSuUwNDgmZsKD0pLNhYTwQBqPY8ME4UN+GBhbThBQ ptv4dWOvyzI9tZYFro0qC9uoVoxebvPbLTXaSpKHXseKmdAzbHYUmmGsWcJ69bkW 0WM2HVt/kw7siUfXreP69OmsccYc0VyWr46Tx5+M2bj51se+QFMuvRGorekj2IE2 sIv4fQDwNLiclRXqMxJKVzI5ZthPObyjKlK9UPugUkWF+7qBeB9FP5iKAgdmzmxZ HWjanUyOJ072iYkZfblvxjquEVJLGDgwgopBxjKc491oLzxcukl7Hd1dGqW8m11t Oefgj9lKVl0b0IDENpqre1C9eVc= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-19T01:06:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-19T01:07:27Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3940" uid: b4d5cd1a-dcb8-4e25-ac78-6565924be440 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-19T01:07:00Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"15b0caaa-635f-4181-a690-8fa8a68b08aa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T01:07:00Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 15b0caaa-635f-4181-a690-8fa8a68b08aa resourceVersion: "2408" uid: 2023c0c4-985c-4070-9bf7-212bb77deb9b - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBzvhdu8QioIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc4MDM5MzAe Fw0yNjA5MTkwMTEzMTJaFw0yODExMTcwMTEzMTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3ODAzOTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4TlsqVhfpwLDli1++RlF6SjGyLTWxWQ0 YsShXf5jcx4tMMTKfxB0QZKD8Q/AXTJtGq279Eu9HGFtJ7TCbMFpb48PR5mLz5wm yEHu7qdsP2dVIn8Ek3h4tIrRz9GRt3cQFQQSSDlIqRyEXquzHCdzXfSdAGjTGwTW XL1mPJsVdNvyn+UEzvKU+O4CnyBu7/6AESUOYNhqEgJSIQbgPhDQoMJWmeauS5wr fadI8RKBMxgZN7uilNxp957KsbP9f4hNET9uwDpz42h9gfu3x1hSnDRGXTi51QsJ 6mJBOOIN2lq0RIpOg1bdPx0tMH8zlARnZgeigI9pWvau6tDxQ6tpAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRFIYdT /KKnOrX+OV0mvSOMUAzmBzAfBgNVHSMEGDAWgBRFIYdT/KKnOrX+OV0mvSOMUAzm BzANBgkqhkiG9w0BAQsFAAOCAQEACUnEGdEwygiZU/zkQo8U/Bz3a1aaSJpIiNr7 L7IbYubiqsVDvV+EamevabQQnKQMTrz7hIE8NFQa2EvTr0yB9j+ODKRrHz4Cqv/N Q+O8KIf5jIcXjynhTJJreQ3tvV+mnpYk9EiBdwJUnr61gL3Xi9kKBH+cCtPQ3r4v DnWmGuPKhJlG7W49psT0edv2/0gAFkOtURtDP28LaRlJiyymkZ85xrrjTOK3Y4Zf WB6Cz9OAR/LBLtEit5xfJnLjpUXsaFlXGuJKemMKTh/sWPcMIuXX5WciPaqMIZRl p4MDKRFX/Njsd0EKXztm+Na95Wfp7BKkDOsXudK30+ps+c8qbA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-19T01:17:52Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-19T01:17:52Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15102" uid: 353d397d-4d26-41f6-9f92-e81dee1a0022 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIBzvhdu8QioIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc4MDM5MzAe Fw0yNjA5MTkwMTEzMTJaFw0yODExMTcwMTEzMTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3ODAzOTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4TlsqVhfpwLDli1++RlF6SjGyLTWxWQ0 YsShXf5jcx4tMMTKfxB0QZKD8Q/AXTJtGq279Eu9HGFtJ7TCbMFpb48PR5mLz5wm yEHu7qdsP2dVIn8Ek3h4tIrRz9GRt3cQFQQSSDlIqRyEXquzHCdzXfSdAGjTGwTW XL1mPJsVdNvyn+UEzvKU+O4CnyBu7/6AESUOYNhqEgJSIQbgPhDQoMJWmeauS5wr fadI8RKBMxgZN7uilNxp957KsbP9f4hNET9uwDpz42h9gfu3x1hSnDRGXTi51QsJ 6mJBOOIN2lq0RIpOg1bdPx0tMH8zlARnZgeigI9pWvau6tDxQ6tpAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRFIYdT /KKnOrX+OV0mvSOMUAzmBzAfBgNVHSMEGDAWgBRFIYdT/KKnOrX+OV0mvSOMUAzm BzANBgkqhkiG9w0BAQsFAAOCAQEACUnEGdEwygiZU/zkQo8U/Bz3a1aaSJpIiNr7 L7IbYubiqsVDvV+EamevabQQnKQMTrz7hIE8NFQa2EvTr0yB9j+ODKRrHz4Cqv/N Q+O8KIf5jIcXjynhTJJreQ3tvV+mnpYk9EiBdwJUnr61gL3Xi9kKBH+cCtPQ3r4v DnWmGuPKhJlG7W49psT0edv2/0gAFkOtURtDP28LaRlJiyymkZ85xrrjTOK3Y4Zf WB6Cz9OAR/LBLtEit5xfJnLjpUXsaFlXGuJKemMKTh/sWPcMIuXX5WciPaqMIZRl p4MDKRFX/Njsd0EKXztm+Na95Wfp7BKkDOsXudK30+ps+c8qbA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-19T01:06:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-19T01:06:57Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-19T01:13:27Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8380" uid: f7487667-7999-4eea-8b06-0e93ad72abb4 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-19T01:07:00Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"15b0caaa-635f-4181-a690-8fa8a68b08aa"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T01:07:00Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 15b0caaa-635f-4181-a690-8fa8a68b08aa resourceVersion: "2403" uid: 270de2e4-3471-41ec-bf6b-931d63c38dcd kind: ConfigMapList metadata: resourceVersion: "68597"