--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T11:19:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a28360c7-60a6-4035-893a-cfa8a4c8caeb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:19:29Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a28360c7-60a6-4035-893a-cfa8a4c8caeb resourceVersion: "2610" uid: f5ccb730-da24-4d79-a34d-9714620d99ae - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T11:19:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T11:19:29Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2599" uid: 77c237e6-ff72-4594-ad4f-64881ed7c010 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T11:19:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a28360c7-60a6-4035-893a-cfa8a4c8caeb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:19:29Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a28360c7-60a6-4035-893a-cfa8a4c8caeb resourceVersion: "2595" uid: dbeb0d0a-3e31-4856-a640-d890ec663485 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIeGBEFA0bkjIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTExMTY0OVoX DTM2MDkxMjExMTY0OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFbMv/v+JPoc oGNNJng4CSYVyQItGgFWLcOs1z26NQjUBSzYXzCrV3Mt36sz0stZG0gzKQH5sJGa vUXz+qgh+ZBH/b8dYzc8iW7PiJGBgdu9sFLHiFEauVvaJhR4qMgDiW2klbF/UyRG LOtcOdPN/JeJjQZR3iFAI8A2GwxQiSZUOMVy0w0pz/rcocqZ7tcXmBV9EYuNgZfu kzeo540jTOIeViH/PyazAF6FOgfK+o89AndRTHiA3gtq7FyD3nYF2k50uOm2Pz5R RUimMrTkcZ9mjHayDPdGbX0ltLztMhMqVD1KM5RFMYU5q/rdsHceJzmtv/tiov0k IcCAKZJbuwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRADyaEVbgevUb7An2BTu3d4fY9tCuvLmihwfMEGg15dzsBqSvu 5owKkHj5ggNgb2rbadybQBRG7sYPZANoqIzmpTANBgkqhkiG9w0BAQsFAAOCAQEA HKBIRNsXbiKP8vxs1CLY+y4X6zjEOFJIGVnfSeU/pnPTDE0QOlf5lavdTT6Cduq3 pPG4MFH6i5FSl2ZtlN7kPeYYlOku3iFlC2/z3Wt87XcDZGMC+C8GeldNzUELE7Ec Y9wcK1vF9LA1CYqTNBPSXy8QKPlFZNTmN5Uh2tq++HHocPbrf4LoP4DUVD4/QtGf iITbWw2IT+vm/MvNwfR5bn1yOhlfVEML558b77mNGH+rTwOvPs6d8Ys5WPMXfZsG 9IlT7Yn5YUthcmeMHU2zXWik948i3qtYKAoXlTlj35ghcAeKy/acoxlWF6cXVPNp 3QoniZHq2wLpfUoAsVTBWg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIJYrhiHA2HBcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTExMTcyMFoX DTI3MDkxNTExMTcyMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKQWh6TY/7N4W8RlpKIViBZrbxMYVBR8HxBbyt2Xz8P57wPxAF+RNnW3gIFRWACT eyK+p1L5NKZdnamDif+n1NKaiDnFe6PImd0K5FW15EZyJAD2fsRemIExFwmsXh7n omkCHxLXcLCDNmsqIQtDakhiJ69biatFd3/QfVGlBoLv5PcZdck1G+ZK8162elCZ 5B2jc7wohy9SsWtK0+oXY2af4CsAxWzZvkgd1kZQECyksSpDLQqdxJj2RSeG+Q1s 80fLiGqg9NkkxrC1w+9H/Z0uPqXTSfuzvdjf/s3qdQMvU6UWM3lTw0gAJw9vVGe/ hCJFFiKJ6qcYxKmcHJl98P8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAhyH75/dMPTAGLWf21CYXR5B9O8w4TSZ55eHuQ9cAs7LncNdgCSGDbBg8 r02PyTmL3qSV9+p1Cp8/YoscyfBjTTBLBgNVHSMERDBCgEAPJoRVuB69RvsCfYFO 7d3h9j20K68uaKHB8wQaDXl3OwGpK+7mjAqQePmCA2Bvattp3JtAFEbuxg9kA2io jOalMEsGA1UdEQREMEKCQCouYXBwcy40NTEyZTAwZS1iZTQ4LTRkYTAtYWU4Ny0z YTkxNDhjMmY5M2UucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBALAGFEsmE3t3QEFg/mZnC5tCMFY3g56Im6hCX0KzeAU1DeEQBbpaBgJk2Re1 cGQ9v6m7EqB/9BSFNFg3KzQAC3lnDpFcxjIA5fJMZD0wBuQyqTYYRXEmr/Dirpd5 GN3GxFjp06xWJWgT4xko/U8oKrrdTW2XHmKahTfuCVS/Oc4t5ZABtwg9lfcqgaab EBwIshzj1OyCyKIEqdLtlPwHE61y7GNS1WGadFVVjImA3PuOgqMEsuXOE9Q4SETO RJfSIToZT5ZjBTWBTYXaim4DU/ctkijsUGz0yrifQk8yToNcUpGofokRmt6UaBIO iqdETIG13SSshM+Ln+GSOdHUWqY= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T11:19:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T11:20:12Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4411" uid: f80ea134-e247-40d7-86d5-03f167a893a1 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T11:19:30Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a28360c7-60a6-4035-893a-cfa8a4c8caeb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:19:30Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a28360c7-60a6-4035-893a-cfa8a4c8caeb resourceVersion: "2624" uid: fafe5c2a-74ae-4624-81bb-150afdda775f - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDMm7R0TdFBMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ3MTU1MzAe Fw0yNjA5MTUxMTI1NTJaFw0yODExMTMxMTI1NTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0NzE1NTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpK22PqJd1F5c2BGSh817hUbvM84F7v+1 Rx9q8g8ik23m645CmNe5QV7ottEXwSBA1Ji2nVZWS3hOz3bSO7c8Jw4OvxpvJLDP +FXtgoys+vv8QALGtWfGZrQbZbDadH1INBSV/gM8up18e7LzBYfBdIeguTf+bTtr xAvfXLJaNbWJOFFLMMo3Y91THcaRqWEZIdQ5zVnGOtNttr6UZoqf4FUXM2jz6aTb RojWusWoQwgV5ffUrs5gmpxRhpbz+o6c36MXZykyEP1ss5bcZ8HcQEFBY1So0Ytx MITz0DPAwKD8ImF4xf4bUQTIZDC2ZyHNe3khLDEWbk4aO42bauMLAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeyVgD NXY69UzePdO8iFlP5wdNZzAfBgNVHSMEGDAWgBSeyVgDNXY69UzePdO8iFlP5wdN ZzANBgkqhkiG9w0BAQsFAAOCAQEArmsPYvcTn3adun3jMn32U8pCM1LX0HCOfXr/ gJ57ZGtdgHwJTqHLpmcccBi562MfZZTZG4bbgW1/8CcEBPV6RbRCwFv/DPWvDBsh aXg16uQ5fbwCq/hTr/yotUxp2tM79RWc2+TyOWqv28ZbmujdAPakFi1+e7nVwMSW xcz+FJMIKftisPlILrohQNsbquPcjgRfiNyds4Dk/2PwoF3hwQPGo/Slua7UhX1f i7JtcugysM5F4lCt2N29RuM0jXeCJQ9yfQT+PgzSMkfvogdyQLwZfljNr41L9BJO db1/3QVysotAoBBWaktmLYWeI3wzNqar4iyrxQEByVzfoOgq/A== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T11:31:55Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T11:31:55Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15135" uid: e9e0aae3-f838-4aea-8f78-1c2ab95cf82b - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDMm7R0TdFBMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ3MTU1MzAe Fw0yNjA5MTUxMTI1NTJaFw0yODExMTMxMTI1NTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0NzE1NTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpK22PqJd1F5c2BGSh817hUbvM84F7v+1 Rx9q8g8ik23m645CmNe5QV7ottEXwSBA1Ji2nVZWS3hOz3bSO7c8Jw4OvxpvJLDP +FXtgoys+vv8QALGtWfGZrQbZbDadH1INBSV/gM8up18e7LzBYfBdIeguTf+bTtr xAvfXLJaNbWJOFFLMMo3Y91THcaRqWEZIdQ5zVnGOtNttr6UZoqf4FUXM2jz6aTb RojWusWoQwgV5ffUrs5gmpxRhpbz+o6c36MXZykyEP1ss5bcZ8HcQEFBY1So0Ytx MITz0DPAwKD8ImF4xf4bUQTIZDC2ZyHNe3khLDEWbk4aO42bauMLAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeyVgD NXY69UzePdO8iFlP5wdNZzAfBgNVHSMEGDAWgBSeyVgDNXY69UzePdO8iFlP5wdN ZzANBgkqhkiG9w0BAQsFAAOCAQEArmsPYvcTn3adun3jMn32U8pCM1LX0HCOfXr/ gJ57ZGtdgHwJTqHLpmcccBi562MfZZTZG4bbgW1/8CcEBPV6RbRCwFv/DPWvDBsh aXg16uQ5fbwCq/hTr/yotUxp2tM79RWc2+TyOWqv28ZbmujdAPakFi1+e7nVwMSW xcz+FJMIKftisPlILrohQNsbquPcjgRfiNyds4Dk/2PwoF3hwQPGo/Slua7UhX1f i7JtcugysM5F4lCt2N29RuM0jXeCJQ9yfQT+PgzSMkfvogdyQLwZfljNr41L9BJO db1/3QVysotAoBBWaktmLYWeI3wzNqar4iyrxQEByVzfoOgq/A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T11:19:26Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T11:19:26Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T11:26:08Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8292" uid: 2dfd8a22-9a38-4f77-82b9-a20549b170c9 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T11:19:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a28360c7-60a6-4035-893a-cfa8a4c8caeb"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T11:19:29Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a28360c7-60a6-4035-893a-cfa8a4c8caeb resourceVersion: "2618" uid: 91fe8ff8-f478-4773-8542-cb968c80937d kind: ConfigMapList metadata: resourceVersion: "70381"