--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T11:41:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"6e30a8e3-e8ec-4dc1-9812-87ba9817f17f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T11:41:14Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e30a8e3-e8ec-4dc1-9812-87ba9817f17f resourceVersion: "2486" uid: 9d094c62-6bdc-4182-9ed0-f130a5723cd1 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T11:41:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-07T11:41:14Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2482" uid: b4011314-b6fc-4883-a1dd-2b984120b7fb - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T11:41:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"6e30a8e3-e8ec-4dc1-9812-87ba9817f17f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T11:41:14Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e30a8e3-e8ec-4dc1-9812-87ba9817f17f resourceVersion: "2480" uid: 2b9a25d3-a796-4b45-85ce-6dcb7f8780d0 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIdalB18/IjeAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzExMzg1OVoX DTM2MDkwNDExMzg1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nm0eQeWYSaU oRe/hHwKBzwqQuRVc+/FNdFOt24NNpb/e5s/elnT9vK2X+5pOV9CXwQYe/m0CBMq O7maQOAbPNGaXUk3cK5/rfub/wwp1Yx5CLaBkcLng7G5o9iqJO6TQb+CHRce2nmX ILggbDaI19jYVAdn60eDy+Vfm6gpHnPjzQ+yjmxjabmZHsn5n/f3YT70tcB/0uXU 4Y1Pyz8KNjoaJN0zLtN8355PnTF4XA/oNyzLxrRxkwRK7mEEXjlJwLRbxmi/tsje HtqWal2VUjsKTWeGac5v2qPHu8MPO+pukIXRTBaTg1oLAZq9bwBjizaZUAkARzKs 05DHh2HOoQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAz0lGcBAFY8AaR65lxkqXTWxAHCjlcwj4CDlWlGLVry+e6rgP cA0SYncfonpVxFWkRDytHw7HTAhf9PaaM75xBDANBgkqhkiG9w0BAQsFAAOCAQEA mfIrYswns7ZpXqpXKCh6QnE+ouAersZFQL/vqA/XidP9jjjzz21Hc2E578yIneSL 0WosqGCa9JO6hqY1H9eIZNt6yfFLB04GZrppzwTBTZvl2WprCl8R3w3OS/jOC0TP unphSEjEET9lOBXDZPrjrr2JwvmXpsimZFrxtjxICxrSK7SWOUJZ+Y1nBhJaVVHk E5LQfnfxF2oB0BaRIf/PIxQofnWZkimPNgfY0E6xxjOHqwDUq81FCvsiz6H+ntfS AVlJU+V7Xa1jxCNHskXuAw0PQA6Uz4trm8dk3stlDZOu5PfOwbaGFqKKuXsH9t4H SqOY6ubnSqxDJFB4ENXcVg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIeeYVSMBQ5LAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzExMzkyOFoX DTI3MDkwNzExMzkyOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANehWWWcVaTogO3iGcGh8PBizntsfr9AsjF8QZnSU9eDuaZsYHpjy0bTFU3Ttplk VFRIe06MFsmfDkYSIeCyq0+O2hAfho/zp+o6JEYT8BcDYWAa5HfTfZN0kaBfPR3b xmrSxtUV0UqkdHNltwpp6WkX8hCasyOXtdsALro6HyFCjQvjsdLOmopRsB+9i4Qz y/38ywDTEFMsOt/HPCsz3kCU9kC23KOZREb8yTI+3AC1uIp4OtvsStzylObjd5sB 50O9S5Ad+ZTr9gmW6qCaRYgcOz1W1OTKqSS0wmdJUbTcWiyKClnGSGT+mqudTB69 06Bfl1h8G5DOoFbRCnK47t0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAHwY8s/kzrgxUh45grFNzVBmsVr6XIgCsTsLtjsb8LkmJvQ3JYCll8g5b CY/zn2opYeOkwgRT6M1eJSeLAGL1TDBLBgNVHSMERDBCgEDPSUZwEAVjwBpHrmXG SpdNbEAcKOVzCPgIOVaUYtWvL57quA9wDRJidx+ielXEVaREPK0fDsdMCF/09poz vnEEMEsGA1UdEQREMEKCQCouYXBwcy43MDczNzQyNS01NTRiLTQyODktYWViZi1l NTNjYTMyYjNiYzAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAMqo3vabtn93sxzpuaFaqW35olvcbxUY7dSsNdGI9CQEWxZqvMhgVZPnjqm1 v4vuPSbC4Vn2RH8EIcMnftlYNfjjaQjhkah4xjH3JqRjFOzhtfK/sZ/fdGTNjifz 0Q0sEdMPLZjKxDO+sqP5EU4wBjLIA86tE2muyxqE3d1dGQFZw3LJN0+NakVNJt5b RVNIL3IEJs2cllN6GV6qjgdwO5+q+9fG4FyhXEzYBJaD/GvQsyzWQTDLewes6Yqa QVSZvI8Y6+ww485yS+7a1EXKNU32pNz97d9M7eqne1zAfuytTKOmiraB3O5037gE oYh1QFm0cSGtAmPeYUe14r/qbpk= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-07T11:41:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-07T11:41:25Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2756" uid: c7a4bb56-6700-4e60-a7e8-e7b7ef61d222 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-07T11:41:14Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"6e30a8e3-e8ec-4dc1-9812-87ba9817f17f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T11:41:14Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e30a8e3-e8ec-4dc1-9812-87ba9817f17f resourceVersion: "2495" uid: b20ad814-1ced-48b4-b909-7549327fc0b7 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEBxutulqxqIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODc4MTg5MDAe Fw0yNjA5MDcxMTUxMjlaFw0yODExMDUxMTUxMzBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3ODE4OTAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFpC11O7m4v+m2OaD7AGm3wA6moFTsCoe zsJ6zvnKnSSzoVt3dpk2xbHPLHCtEXbI9tsshLxzLHkiyZX3CqYl3FVoe9X6IMOA xISfPPOVfysnOXkh7VDad0ismG6NkMrSAomNXGHQ05RW1+YPdjL2MxoE1PPzdU+Z vKpqZzLqdxnUCLLoT7UIFHymMJRf6QRZ3PjEQtfjEYCR0Q42KMgD8sKSBHBRLLgL 8dzxwx3Ii5Ds0kMauLBjRzOV5oQSEtyMFN55Y/Wn7C7VxWEk6FjpVzhmOIEIoZOH pMHplXVSx8Rx04dJDa2qmgQipPPCcNruDS+PGiXVRBePcGDhGZaxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR80fFn y9uFm6I/2fyMr5l+cmCAWjAfBgNVHSMEGDAWgBR80fFny9uFm6I/2fyMr5l+cmCA WjANBgkqhkiG9w0BAQsFAAOCAQEAA6Jj3UWTt0LG32O1vnTjK1YkaPg4qct5ZYCT oHJVWWXngj66NoBJ3DubnbI7WPVJRKQ4kKPmmSWiXytrixgW6HWhZSpdeDoUzYqz QKVYypq5KB1rI6QJFzPo2sT9HronK2ENfd90gh66Fubdd+CjWEXJ5QedbgNg7zg3 Bp7j3X0kRuv+oCV2jPLkkuGo/vCnwabf0ZanHVTfQ+Smiz9guzYWw3bO58dDXbtD +gQBMqEUlmGrndYUDQg0d0VOHrJkrNFZInKFnB72PPg824pRwlrui8oTq3MtqZOy 4w3kcZvs8z9YrPpi4sOEwyQg0aIfeEURQK0kl58rdUqV2L3zrA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-07T11:57:36Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-07T11:57:36Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16424" uid: af13796f-d1ea-48be-91e6-ed77daddf878 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIEBxutulqxqIwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODc4MTg5MDAe Fw0yNjA5MDcxMTUxMjlaFw0yODExMDUxMTUxMzBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3ODE4OTAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFpC11O7m4v+m2OaD7AGm3wA6moFTsCoe zsJ6zvnKnSSzoVt3dpk2xbHPLHCtEXbI9tsshLxzLHkiyZX3CqYl3FVoe9X6IMOA xISfPPOVfysnOXkh7VDad0ismG6NkMrSAomNXGHQ05RW1+YPdjL2MxoE1PPzdU+Z vKpqZzLqdxnUCLLoT7UIFHymMJRf6QRZ3PjEQtfjEYCR0Q42KMgD8sKSBHBRLLgL 8dzxwx3Ii5Ds0kMauLBjRzOV5oQSEtyMFN55Y/Wn7C7VxWEk6FjpVzhmOIEIoZOH pMHplXVSx8Rx04dJDa2qmgQipPPCcNruDS+PGiXVRBePcGDhGZaxAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR80fFn y9uFm6I/2fyMr5l+cmCAWjAfBgNVHSMEGDAWgBR80fFny9uFm6I/2fyMr5l+cmCA WjANBgkqhkiG9w0BAQsFAAOCAQEAA6Jj3UWTt0LG32O1vnTjK1YkaPg4qct5ZYCT oHJVWWXngj66NoBJ3DubnbI7WPVJRKQ4kKPmmSWiXytrixgW6HWhZSpdeDoUzYqz QKVYypq5KB1rI6QJFzPo2sT9HronK2ENfd90gh66Fubdd+CjWEXJ5QedbgNg7zg3 Bp7j3X0kRuv+oCV2jPLkkuGo/vCnwabf0ZanHVTfQ+Smiz9guzYWw3bO58dDXbtD +gQBMqEUlmGrndYUDQg0d0VOHrJkrNFZInKFnB72PPg824pRwlrui8oTq3MtqZOy 4w3kcZvs8z9YrPpi4sOEwyQg0aIfeEURQK0kl58rdUqV2L3zrA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-07T11:41:25Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-07T11:41:25Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-07T11:51:43Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9201" uid: 61f3875f-0c0e-4b6a-b091-12ab56de4f0b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-07T11:41:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"6e30a8e3-e8ec-4dc1-9812-87ba9817f17f"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T11:41:14Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 6e30a8e3-e8ec-4dc1-9812-87ba9817f17f resourceVersion: "2491" uid: f39cb1b5-197d-4ed3-bf90-e29c13c3b571 kind: ConfigMapList metadata: resourceVersion: "59744"