--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-10T21:13:33Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"747470c4-47d6-45d3-9469-64a09a92c156"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T21:13:33Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 747470c4-47d6-45d3-9469-64a09a92c156 resourceVersion: "2430" uid: 516c28d9-1a1c-477e-90f6-32a5943a17be - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-10T21:13:33Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-10T21:13:33Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2428" uid: 36a04880-b001-48d6-8273-5f84ad956444 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-10T21:13:33Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"747470c4-47d6-45d3-9469-64a09a92c156"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T21:13:33Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 747470c4-47d6-45d3-9469-64a09a92c156 resourceVersion: "2427" uid: d8684de4-d6a2-49a2-8ec2-062521d7b713 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIVH4fiCQ4qDYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDIxMTA1MFoX DTM2MDkwNzIxMTA1MFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgvqSy05fhO1 h2fEZLoakKCZdWJkqNdTGh6eBrthMv+Va9R2/+7mY2V5Kz/22fBfyiLJnm+9Dyiw HZChM7dHlybfQL/MgTlqFd2/GBTj54cJDRKsn7HFoIL11WEV6IvjZDhCJMxiPrrx ExmOppQPMIP8ElepF2mirXLDn6llVEUdv+gZH3lK+02LZx1Eo5vww6/HpZjNaVYp 6LtRj204AE/uhzBQD3ILDSM9QqiTG2nB+7vMaarr1xKtCS2oZl3mbxUsgW6rdSx5 YNdiko8ZJfeHpFinDoSKGsy7Ge9gRHjH2LjQeThxfwdbs8tzomc5Bo3YIvuR3qgO F3YwJHzanQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRACmA/cZs7c0wkCQ3xnu2u7RueyU7i/kgrm24TNQbrCL/SXax4 NoI9DKCgfDjVK3Xt2MJ/a/ZZUtzvu+7xI5ZXXjANBgkqhkiG9w0BAQsFAAOCAQEA lZr4yHFitFOBUPzRkFHbGfU7hCXKtQVF6kg6ah/nxxQoIHRrz3lFykdnebejjXiN sjiaFDxL06x50IaQ5W8El8ie1EXFet3otyraBZn8Xn8je7om2YOVhQm/bcV5BUIp GASG4W0xfa/WBfKI3BQ0aozW/9b1hp16A3xgqTINorCjJcOWGpS/xmBUYIHvDY/z 4uXEXaC8aZNRuY4c6F+M2cgtJIdMunQVxq8O3LJ7Z+HDj1rjkIt44fGxApinDQry VE1ht+qbuY2qofMOCpPdae6dm4qpR37dPT5PLLY0UOY+HaqwP/XLuKoqLtelmyNt hDkvW8EqlZGnBTfh1B7i1Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIBe6T3rEVoB8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDIxMTEyNloX DTI3MDkxMDIxMTEyNlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK8y0FrvBHxchsaQy19f5IieEdRzEjSM8RHIHYwEaN8otVy9p225zv4VtD3zuj8m Vq8RlFYnhUaiSFDdVVuLGt+JxnS8B1YhhjErNE5iWcfUAlSsr6OC+UWFPjHuCp3O TlEFcncaKfqt+fSnJ+V0P/lzhRnj+xrD7o1907cZhBt38RFEipqCl8lxFdqv/GZ+ QTs4TQCY6VeAGY6ClNgPyE9M5fQx0wnv3QTM6qzmn+Pn0uLWTKHcV5bU6BK7dcbv 97E2svt9CHQfq74tQHq/wXTU80zmnoJuBDMxY92qNjFGo9VAphhyje+bzmi/KznV jX0nBgb4GzlbX16waEZqLYUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA49bNOusPZ1wHdWT2OXeovWrsG2awl2MAkwvecKyz3Ws8q1t9DFmCdtu8 28dwjmHdr9AhpDolNet4kqP4r9a1wzBLBgNVHSMERDBCgEAKYD9xmztzTCQJDfGe 7a7tG57JTuL+SCubbhM1BusIv9JdrHg2gj0MoKB8ONUrde3Ywn9r9llS3O+77vEj lldeMEsGA1UdEQREMEKCQCouYXBwcy40MGZmMWU3My1iNjE2LTRkNTQtYmE4MC1h MzdhYTE4NDU2MDMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAH77wViZV4XU6aAKLaQ1iXvNoUWyoPTdk2HGFz8Tkma5NuoKD2aMIbQPo7FG xjDSSNm1EolYO3MT4HKuohfTeYyH1nuLetbDCWiV/qojOhC8GxFOVT+JyPdLbJqL HUA6AsEA/W0GOusJp5/P5bA7FTphyQuZDWjj2ClyGftC7Jp443LsZ1sCPk9MUeJY 8DD00oHhfOX7f8IbEmehU48yZngicXh2hLjbJEYSL/U+ESaGNz8Sx4BhXTSrSgjp 0QPdqtw8jZcho0LkfaUE7doXLAS+iClVfmAKzi7CuQVZZDdQz2DO8nm3CrEDJx/q oaLf3FHBsCbQYP6RR9cIlO5iYAU= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-10T21:13:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-10T21:13:54Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3823" uid: 91c34b3f-63a9-438b-9a12-90904aaebcd0 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T21:13:34Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"747470c4-47d6-45d3-9469-64a09a92c156"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T21:13:34Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 747470c4-47d6-45d3-9469-64a09a92c156 resourceVersion: "2434" uid: 36e4caf8-d8b7-415c-883c-19937996e725 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIbcERG8tZZEcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA3NTE5NzAe Fw0yNjA5MTAyMTE5NTdaFw0yODExMDgyMTE5NThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNzUxOTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNFvt9rKFjN0as3dBUxdAnwQ3/Bt/N/mQ Ysc+64hF1Xh1mMVyuWFT9ud+i72hC2xiIn0YZKxSn0ZuvBdKWiFhgd5gmm1a9S7l tP9c0AFaW62F9dWb4vwBXCzTSKQKz+hOOEe9M+Mz5rssR7ZCJbEdGmSxU07A5oyR jpil5n0Vwogz4SvJc6mFjWkMtewclOT7Dd0Rx3c6lO1jb8PPkobMcPC/CRNNQKmQ FuPkP0g55nutKG1ROm3DAE1EIVbYOXKrL/aG2tY4SXYqGOuk6CqOyPKov2CVDaVn 2Tq80L5YKnELyAy2EmX27tKXO7K0xYxdnotedJCpTYWX5at0eFcTAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3zmv+ eXVS8AVj23qr1F1SPOmVnjAfBgNVHSMEGDAWgBQ3zmv+eXVS8AVj23qr1F1SPOmV njANBgkqhkiG9w0BAQsFAAOCAQEArEsuZ0JdIh5obzVdFcN9cIrkFpoLXo5ljwLn Ie04uxF43YobPTP2TZ2P8S/AU0WbpWL9NHQd0uA+GRdgTQXLdAfHyZ0T+dnNdr+7 La8ryveZShCVFWtg5cE7jPcjCxU5TgsuEJOMYGVnzO0UCwAwjuRjSw0I6fe1/Fwj +i75Hhymb7svf73UQ9z1ebX5QIq50z15mqhipgHhIKgDTTt7LmwWhbUajUZPN9Z+ H2rSvkaeIrCCJsM0MILrXKgls+3mB+GOY8RD4rtRTeexs2pu8h9R3/PzrvnTddc3 04V5dz9kql2x04UaelKnATDGu1mw319zSqi+WRKPtMl5k2cT2Q== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-10T21:25:36Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-10T21:25:36Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15093" uid: 52407bd6-9eee-4034-950d-30cc7f5f18e2 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIbcERG8tZZEcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA3NTE5NzAe Fw0yNjA5MTAyMTE5NTdaFw0yODExMDgyMTE5NThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNzUxOTcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNFvt9rKFjN0as3dBUxdAnwQ3/Bt/N/mQ Ysc+64hF1Xh1mMVyuWFT9ud+i72hC2xiIn0YZKxSn0ZuvBdKWiFhgd5gmm1a9S7l tP9c0AFaW62F9dWb4vwBXCzTSKQKz+hOOEe9M+Mz5rssR7ZCJbEdGmSxU07A5oyR jpil5n0Vwogz4SvJc6mFjWkMtewclOT7Dd0Rx3c6lO1jb8PPkobMcPC/CRNNQKmQ FuPkP0g55nutKG1ROm3DAE1EIVbYOXKrL/aG2tY4SXYqGOuk6CqOyPKov2CVDaVn 2Tq80L5YKnELyAy2EmX27tKXO7K0xYxdnotedJCpTYWX5at0eFcTAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3zmv+ eXVS8AVj23qr1F1SPOmVnjAfBgNVHSMEGDAWgBQ3zmv+eXVS8AVj23qr1F1SPOmV njANBgkqhkiG9w0BAQsFAAOCAQEArEsuZ0JdIh5obzVdFcN9cIrkFpoLXo5ljwLn Ie04uxF43YobPTP2TZ2P8S/AU0WbpWL9NHQd0uA+GRdgTQXLdAfHyZ0T+dnNdr+7 La8ryveZShCVFWtg5cE7jPcjCxU5TgsuEJOMYGVnzO0UCwAwjuRjSw0I6fe1/Fwj +i75Hhymb7svf73UQ9z1ebX5QIq50z15mqhipgHhIKgDTTt7LmwWhbUajUZPN9Z+ H2rSvkaeIrCCJsM0MILrXKgls+3mB+GOY8RD4rtRTeexs2pu8h9R3/PzrvnTddc3 04V5dz9kql2x04UaelKnATDGu1mw319zSqi+WRKPtMl5k2cT2Q== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-10T21:13:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-10T21:13:54Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-10T21:20:12Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8168" uid: 5ed0e317-70a7-4569-91eb-83294e475974 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-10T21:13:34Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"747470c4-47d6-45d3-9469-64a09a92c156"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-10T21:13:34Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 747470c4-47d6-45d3-9469-64a09a92c156 resourceVersion: "2432" uid: a82da078-fdad-4483-9880-18cb7960880f kind: ConfigMapList metadata: resourceVersion: "57715"