--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T17:49:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0f93b91b-4917-408e-b446-b17b4f13bb06"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T17:49:17Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0f93b91b-4917-408e-b446-b17b4f13bb06 resourceVersion: "2239" uid: d9301c51-7d0c-4236-9617-93e31001365e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T17:49:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T17:49:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2234" uid: e9c063a0-69bd-4d70-9179-a492e869d957 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T17:49:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"0f93b91b-4917-408e-b446-b17b4f13bb06"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T17:49:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0f93b91b-4917-408e-b446-b17b4f13bb06 resourceVersion: "2233" uid: f507f0cd-19b4-46dd-8011-b709fa562537 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIT2BP2AzYZDkwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTE3NDU1N1oX DTM2MDkwODE3NDU1N1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQQTNFN5Vv5n CbhwHcEUzCn8v4lDuTPoWNAFgpKn/q0G61kmiLHXyjEc5I2udSdPjNzJk8xGq613 amdk4k3x9px7+9I5S93fD9ooUdC37/fWsVAqGGPqLyHrmDk4ib313a/hlIckLeHS VP2sQm+oxJhY+e4cVhHv5coSCNdod2pfginMMICoqdmeiCpYDf1lxWJoxYFwYRRz mDaT5fqqjzvpy3cGNy8rgvg8Q7Gug0pZFj4yHQzNnx15Kxcbm3/QmlG0mUkhIbsc F7djO6n3aa2naFSEjQx++EmnDSejk35cIivkUOezLgrJ+NNgPWqNz6Lwz3XyyTGN ZPOvG7LS0wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA/jXgxdWZ/qud2q+Xi9DeEdNzjnyDtoep07K/de1BODLWccs1 0xDx6bzmwhMzZdNDC5Vpmxw6ktohjmJQKrPtejANBgkqhkiG9w0BAQsFAAOCAQEA PjRMrCkPgmvMxWY4EvXbhH1A7jk5z6k4VLh5ey+tF7Nrf0sOFwq9ZuEeTNdWz8HS 46yCsBI6zm8i9DB15oKjyoBZMJGl1qm6UqFPyxkwsPa040hswixy87SCQ1IlldZF b8pyANFudzN0BsTCfhr3cUflM2LOBhzzCu+8tn8K8l5FJpa1u97WuyYt71HNXZU1 tyd209kzg/NZF7aOup3GPuXuIsKoSlU0by5neakh2Y5pcfCio5pNuDv77M0OdBWR jvSrtCnG7z0bfx7U474VOJ65zd0ejpunMFOfALHPhetvSc0bLEtLF0VFsuvzIb3F fdN3mHhzdrDLrbyTCesPdw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIHG2qMWCvftswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTE3NDY0MFoX DTI3MDkxMTE3NDY0MFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK+nY/l1AkhL6WstaPlIjl2xNeCJRA0aFWPSt7PpOjyQR0idT9hRQGA1RVAJcs0l hEGZd8o1r6CyN4y7adzrTnwNlZFXombOASAV73pDNVskhMrfoCCJd/rsd223XfUr 3Jh6zeZrvidP0CGiJkrBFYGhOwAa+iesgi7ky5GY6R+CUpnHx83XoGqzN/yyU9rz Jj+j1EKhTaYQGs2QD++RM5S3fIhzFhODxf5NKcxDPHnyB3ulgNw/VOpX0/jiWs7Z 0JDv4V+iKfy40uLECmVPR3bw1KtqToHVaEnzU0a6W2rLh84Jnxff3ZwXZctgbCdc iwIB+B57fTiFDRgzOMajPFMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA4d7JC70yaxIkgAurLO+LjhO7eRp03GWLtiaca16p1ONjlyLAUuE8luFz IPhb5+u6uKbqkT2TMAyyEz46BiCeHTBLBgNVHSMERDBCgED+NeDF1Zn+q53ar5eL 0N4R03OOfIO2h6nTsr917UE4MtZxyzXTEPHpvObCEzNl00MLlWmbHDqS2iGOYlAq s+16MEsGA1UdEQREMEKCQCouYXBwcy4zNzY4NTc2Mi1mMDk3LTRmOWUtYTMyMS1l YzRlYTgzNWFjYzQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAAmfhqSm3twSEPwZNMOsn9nhDKbz6Bq9MZNb5NYJlI6FythBZL0vXvrwdNkU FMRC1BxYcINA1cPYbVSoerMaL7KI6fvbk2EmrlNP5+YxuxH/rtn+8VB7LsFvyeOF Ye5hU/xMrFxG214nr8mvHRqchOOp9rSIGY3iSLsXwHIYQ834IkJeOIn+uBJB31ri aJcM1HprTVGKwNQA5PIFOXH8TaYrTipMXx+jIvIoUqJ6fHhmcqALTNrMyyPLuU8i fMaftskrW4F0EOp8M9CXP0OnZ13e3BtXV4fyUW6mJ9AVhTcAEdDyC1uq8eZlx7ca uH/OSly550tu5QEtgAtnCO6of9Y= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T17:49:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T17:49:26Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2525" uid: 58f40349-a92c-477b-837d-448458dcdb39 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T17:49:17Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"0f93b91b-4917-408e-b446-b17b4f13bb06"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T17:49:17Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0f93b91b-4917-408e-b446-b17b4f13bb06 resourceVersion: "2247" uid: bd9e2e2b-35af-4159-b7e9-003d32d3fc33 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIce7Xx/Y7SOswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE0OTMxMDAe Fw0yNjA5MTExNzU1MDlaFw0yODExMDkxNzU1MTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNDkzMTAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGtYnYyLjk8yAiTxeIhCw8ujncbdOHeul IkmOPjqbXTIdMxtckz/wX96/vxw/4sI/nL3YOabeDHGYC+NGWrdfA5+ucLJAOlNE FF/GnauE8GXHQnMQgW3FA4M5XmcF/TU2x0qCdIdeyrjA28f5DwpJrCDhXJfDKCno QMsspcO2y5t0+eYp3uaGOnx9gv/fXKvd0xWkR9KB6HZ0C6Nq8G7MMOHvsUO+uHjW UQdHzGNPMyNnZ+3nz8y07Q7KdSYDg6BYlARFqNTUT/AZbSJsQZ4cFGL0rLi0sd1/ 9mAVpb+zWMLFLDk54GHhkzGks5FqE4ddAg43MXlXuGdTyjDsGmXzAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ00Jc9 z/4o9XsqDRAdqA3+VYbyUjAfBgNVHSMEGDAWgBQ00Jc9z/4o9XsqDRAdqA3+VYby UjANBgkqhkiG9w0BAQsFAAOCAQEA10IpFbUsIEdmpa/+ivWJqd69M5W+SMPhA6b7 mNtujJd948ZIwkWuEJ+lcVIBg7sZBB2wST2QojeMWR7oq+F4JJ94cgMr/FIaoJ/v CNyCir19ovTAnlNPF2yXZUuejIwemFaMIyDtWki41nDHY6tAQM39soOhHsfCo840 /yPAa+RneUEFsskt5dKTW7v09ZhfqKDeuWZDuQu73fHx/aIywUuhchQmd1sA5oQX NV6/Zu8o/uuiiymIXfOpHrgODZlyvpeq7x85b21Vs8on26FD5DzxWLvFXSD8Irxk 3RXNC4f1KOgsRmKuJwnKKC3AUqUDklSfPxdMe1BTZycqeg3dgg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T18:00:51Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T18:00:51Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14903" uid: c3b567b5-4694-428d-ac7d-1661ae1553f6 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIce7Xx/Y7SOswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTE0OTMxMDAe Fw0yNjA5MTExNzU1MDlaFw0yODExMDkxNzU1MTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxNDkzMTAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGtYnYyLjk8yAiTxeIhCw8ujncbdOHeul IkmOPjqbXTIdMxtckz/wX96/vxw/4sI/nL3YOabeDHGYC+NGWrdfA5+ucLJAOlNE FF/GnauE8GXHQnMQgW3FA4M5XmcF/TU2x0qCdIdeyrjA28f5DwpJrCDhXJfDKCno QMsspcO2y5t0+eYp3uaGOnx9gv/fXKvd0xWkR9KB6HZ0C6Nq8G7MMOHvsUO+uHjW UQdHzGNPMyNnZ+3nz8y07Q7KdSYDg6BYlARFqNTUT/AZbSJsQZ4cFGL0rLi0sd1/ 9mAVpb+zWMLFLDk54GHhkzGks5FqE4ddAg43MXlXuGdTyjDsGmXzAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ00Jc9 z/4o9XsqDRAdqA3+VYbyUjAfBgNVHSMEGDAWgBQ00Jc9z/4o9XsqDRAdqA3+VYby UjANBgkqhkiG9w0BAQsFAAOCAQEA10IpFbUsIEdmpa/+ivWJqd69M5W+SMPhA6b7 mNtujJd948ZIwkWuEJ+lcVIBg7sZBB2wST2QojeMWR7oq+F4JJ94cgMr/FIaoJ/v CNyCir19ovTAnlNPF2yXZUuejIwemFaMIyDtWki41nDHY6tAQM39soOhHsfCo840 /yPAa+RneUEFsskt5dKTW7v09ZhfqKDeuWZDuQu73fHx/aIywUuhchQmd1sA5oQX NV6/Zu8o/uuiiymIXfOpHrgODZlyvpeq7x85b21Vs8on26FD5DzxWLvFXSD8Irxk 3RXNC4f1KOgsRmKuJwnKKC3AUqUDklSfPxdMe1BTZycqeg3dgg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T17:49:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T17:49:26Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T17:55:21Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8144" uid: ba777dfd-f531-4c7d-ad51-d92682c9194f - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T17:49:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"0f93b91b-4917-408e-b446-b17b4f13bb06"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T17:49:17Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 0f93b91b-4917-408e-b446-b17b4f13bb06 resourceVersion: "2246" uid: 31dd19d6-50b7-446b-8ace-421acba0265d kind: ConfigMapList metadata: resourceVersion: "70665"