--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-06T19:21:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f406cbe8-794b-4483-baa8-4b99c8df1390"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-06T19:21:41Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f406cbe8-794b-4483-baa8-4b99c8df1390 resourceVersion: "2735" uid: 8d6d05dc-b63f-433d-a6e2-32d7cfd03264 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-06T19:21:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-06T19:21:41Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2706" uid: 6e304e1a-ff60-4a55-8053-9707f1ccbc31 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-06T19:21:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"f406cbe8-794b-4483-baa8-4b99c8df1390"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-06T19:21:41Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f406cbe8-794b-4483-baa8-4b99c8df1390 resourceVersion: "2704" uid: 8f0ecf05-c432-48f9-860c-1215bec04529 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIITm4NZr5BTLowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNjE5MTkxOFoX DTM2MDkwMzE5MTkxOFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ5gLPQnt/ev zOS6ZFVp10XF2mtBzk5bOy+7SIoofH6Yd1uJEymFFgGQzMAqF9cOX89Ypwe1SlPo DQUvZ96g6cd/bvDL3YFLnKm8Yts4FlMx+mDJJtASeVckqrSuU+35/plXUl3b3RT/ klv98oUTrIBAhZyYYSV6vEkEvjtaKRZdkxkD5fohUSPAxYmNVA3XnNFt+bDthndH IEQlMF4O/zFSxCIde0xglYRn1tzFz65V1AdKJc4UQeqMh/39cRwOFs8omUV8OCvH OSbftlyua3IO0jtyM1mN8NmiUoJ6cvHodHPIB/gHbgsmHsWKiqOCTJk+BzAxrgid ZOGZiSnIkQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAdEmuk4vfkZ5nQfXgakO1h1QSnJ3h7LtZ+aARCQYA1bLQK2bL kH6zsJ7d1kz13wSPS3P4dyWc6F62DbWuXF3k/jANBgkqhkiG9w0BAQsFAAOCAQEA bi2UE6gHTk93VmFWHb5at9SZhVwI3/skjDnNpIi4qlpv7LIZkrSX+kpUK9ZbeXEl Gf3KN0bTQPrCOuv7zU+xe8sq+gNsEAjSlXIffYq2njieffXNntOKkwDTZzNTlafw JrpsDlw+9MNyKCYCwKptYjio/RWwZFnwhyJpMn6MzErWcCjd4C9pnEkxtUeAjLH2 gdyM1veSPy8rGR3WjdDK/4Gi1/7EXNKXTmBH8OOcbUVzbKqr7D77Z/2dRWpUdRTs RJ36mT5zh8IT5pvhbbaUasyXg+r5RCAfUwxvZHQvHDbdfkeYzJBi7cgqnNUvxFxm a4Av/IwNGNxjynLjhXAHPA== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIQRV1kpYBJGQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNjE5MTk1MVoX DTI3MDkwNjE5MTk1MVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM5d73/32cGpPFM9xbtW+gBS7/ePnMEoRP247UBVIBUkfjEN0y/zdi0qjDY/gpoO laMEh7kVY5mFKVMEc3w28x16lcV+buxLi5rGvGRHd+KcUp48bQE1alLY5lLg1LAI 5+V78Y9s9vUZMCrteeMyG0L++O4XFk0ITvWS+B6YSAi3f0YxTzDR/srU5Izf2lSe 4fI8TunkiNRyxPTMsESHDGoNZEfjgWU49F+F3upY7hTnLDYjJ+eCgGewV3iDRH/l poek6JFtddWx/gAbd6U6OaRUh+Rb4p2mTnBsyAAnCVK3zFzFMhalj89giMUFctnP q1dA0/7SUWbgQnmq+MUeMVUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAvlD2ACb5EeOKUtjtC+nzSo60+T/SGoN2PW59FwuTS9329roGVT8prc6o /klOg2Hnu2zhe4xHAMKeTbUOfJ67YzBLBgNVHSMERDBCgEB0Sa6Ti9+RnmdB9eBq Q7WHVBKcneHsu1n5oBEJBgDVstArZsuQfrOwnt3WTPXfBI9Lc/h3JZzoXrYNta5c XeT+MEsGA1UdEQREMEKCQCouYXBwcy5lMjU5ZTY0Ny00MTI0LTQ3ZjctYmJlZi0x MmE1YzFiOTFhNjkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAHjssddXMt63h+xCJQwAP0pJSDMS26qRYLt7IQXuqWtteZcj9SF3G/p75CGq SO5wfC9O/JuYZ4C0ny3c8ucPIV54p7mHt9LKmKBXYLwzUb88dEU60P6ekr+zQbs7 +jHKW53hRJCEY5S/m6NTtiHua7yx6PyGSOaA9RxH9aUGT7WGEQSXKfIihnGcqigt Qtay8xhwrH9US4xFf6YX0SO3ISBOUSZ9GpF4GtGOhkxR+lFDdOeyNZ21fd7m+Ux8 jJlgYF+vYd1lzWRNa0npGcKteyF2p2fg1/GBTp1noQTC9ZcpjNgWVP9STGHgTubD 0mjh4wNws1czvvWcpeek73qVlUo= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-06T19:21:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-06T19:22:53Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4521" uid: 5b2f2f82-3b58-4ad3-b29e-0754c15c1890 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-06T19:21:42Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"f406cbe8-794b-4483-baa8-4b99c8df1390"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-06T19:21:42Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f406cbe8-794b-4483-baa8-4b99c8df1390 resourceVersion: "2789" uid: 6386f4e3-4e17-4ddf-8ec8-19aea0b77853 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcSI5lrtOf5UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODcyMjkwNzAe Fw0yNjA5MDYxOTI4MjdaFw0yODExMDQxOTI4MjhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3MjI5MDcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFpUEWOw24jiqN2z8RACNCq57rU2xpgZw koakyGm7MSRQILtVTKdUU+D1cBVE4q2Rc/rhmBZgmcR1AE/1DssHOsWYaT8NID0e Zah5aSz54HSVM/wg+3Tctq1DKepWA7VNl6U9IclF1JyWpT9Y4IySFlOiqevM+IPt uyzQ/t7+lfhr67LjzlEdL/s5+sLrOVGHLFKj1yh+aStt1aVk9kPqqhdXUMqjRUbQ Uzni7juW9fKFLWGhEnFA5bl/IUT2ZtbgmlTouVQVntZqeFmqWTReLnjyqI1i8YAD b+ECTFuabshbq/kMRYlBV1bZ6EYmcT7LssOiNB+GP3L+VFgx0TEHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsgaHq +x6c06T1rRQp1OZceJTr0TAfBgNVHSMEGDAWgBSsgaHq+x6c06T1rRQp1OZceJTr 0TANBgkqhkiG9w0BAQsFAAOCAQEAauzY2DguLOJZkmWfaxDtG7U1EI1FUK5B7kiY H5ecKNiIdQ+RmNsUP8h2scgVY7p2sClol/1140lYJuWv93L0BpIYfUdfFb6w0qL0 HJAZUxsufQ9p//nK8koR1aXRl9CKfvlfNYamsb7nlEyJ9IA9dGZuF3jKa9Mqq0Sn MOP69OOCgpA4HEvc+HQil85xIiftIy7LHH0+BmaGez2NQEMPJ5hzrIf61V9lX4oZ d4Q8FAuij+rN0zONGadkW/92Kpq4IMK744ILDVjcK/zSD/tgXcbCE//jYgCvNehp pQcmgegfIO3CWwLP8vsNk2ZTbooIGA3PseGdeJQX6miVbB4eNA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-06T19:34:18Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-06T19:34:18Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15750" uid: 3b0e7b37-7b9d-4354-b19c-e772d42d215d - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIcSI5lrtOf5UwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODcyMjkwNzAe Fw0yNjA5MDYxOTI4MjdaFw0yODExMDQxOTI4MjhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3MjI5MDcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFpUEWOw24jiqN2z8RACNCq57rU2xpgZw koakyGm7MSRQILtVTKdUU+D1cBVE4q2Rc/rhmBZgmcR1AE/1DssHOsWYaT8NID0e Zah5aSz54HSVM/wg+3Tctq1DKepWA7VNl6U9IclF1JyWpT9Y4IySFlOiqevM+IPt uyzQ/t7+lfhr67LjzlEdL/s5+sLrOVGHLFKj1yh+aStt1aVk9kPqqhdXUMqjRUbQ Uzni7juW9fKFLWGhEnFA5bl/IUT2ZtbgmlTouVQVntZqeFmqWTReLnjyqI1i8YAD b+ECTFuabshbq/kMRYlBV1bZ6EYmcT7LssOiNB+GP3L+VFgx0TEHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsgaHq +x6c06T1rRQp1OZceJTr0TAfBgNVHSMEGDAWgBSsgaHq+x6c06T1rRQp1OZceJTr 0TANBgkqhkiG9w0BAQsFAAOCAQEAauzY2DguLOJZkmWfaxDtG7U1EI1FUK5B7kiY H5ecKNiIdQ+RmNsUP8h2scgVY7p2sClol/1140lYJuWv93L0BpIYfUdfFb6w0qL0 HJAZUxsufQ9p//nK8koR1aXRl9CKfvlfNYamsb7nlEyJ9IA9dGZuF3jKa9Mqq0Sn MOP69OOCgpA4HEvc+HQil85xIiftIy7LHH0+BmaGez2NQEMPJ5hzrIf61V9lX4oZ d4Q8FAuij+rN0zONGadkW/92Kpq4IMK744ILDVjcK/zSD/tgXcbCE//jYgCvNehp pQcmgegfIO3CWwLP8vsNk2ZTbooIGA3PseGdeJQX6miVbB4eNA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-06T19:21:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-06T19:21:38Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-06T19:28:41Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8285" uid: 1eae83e6-3f90-47d6-b887-384bcd023042 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-06T19:21:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"f406cbe8-794b-4483-baa8-4b99c8df1390"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-06T19:21:41Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: f406cbe8-794b-4483-baa8-4b99c8df1390 resourceVersion: "2762" uid: ce90bf58-836b-4694-b8d1-6810b1d46e83 kind: ConfigMapList metadata: resourceVersion: "59305"