--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T02:19:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"20edbf84-9fd3-4c1e-a907-e69df4ea39e7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T02:19:58Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 20edbf84-9fd3-4c1e-a907-e69df4ea39e7 resourceVersion: "2287" uid: a287f30a-99a1-4eb8-8ffb-34d085485d4e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T02:19:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-09T02:19:57Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2282" uid: fff40eb7-11ed-4efb-b223-42c674143ab7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-09T02:19:57Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"20edbf84-9fd3-4c1e-a907-e69df4ea39e7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T02:19:57Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 20edbf84-9fd3-4c1e-a907-e69df4ea39e7 resourceVersion: "2281" uid: 0bfd4c51-9b10-4401-b27f-7b65fffbcf23 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIDksvc6tn42kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTAyMTczMloX DTM2MDkwNjAyMTczMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wOGaQ2nvGDD EAhViTMZkp2X6VnPCu1BYihBJmPJUEh5iv7IhnOcaQhiuLuGRPmD5XH1bEeGmGm+ 6IWXac/Q/qGMOo3sIUirmNLyxOkFOMnw6sY85jjJkq5Khu+ot491cuLKd0OdYilv dKF4Gq7L8jZq/LFPsh0ypNumo6ekPtJafeW4/bmOPeGewyPe8f4hdFOJBXyUXBNH 7u+ZlfnSb4YNBwVBUqhogAXyzK1j3pLD2brbOcJGfPyUaEiiybdtELMZCL9Il5i/ ZhBS3IIFk50QmdpzuFjsRIjfM35hv+1nwtpCoPH+xGiIK+/AjRm90D8YtaPszYsS ahIHlm97rQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRATPlR9Q2wzBqavtAgWvVjGakSROePE6R3JzXkW42ZkZJfa4Sq p1Vjug22BruKBdJYzgKFOGtztbmZFfAwreojaDANBgkqhkiG9w0BAQsFAAOCAQEA j194CbfqkEYlqCGhm6gIaD330cZOvA5x2IN14450E9ctxSYDLyraa4d0c2nfM7VS m4N/LO0tcNolRPilQTWHk5p1i5Inx88CU4KZX7z3yv0QoclWgHK3UfzIpZImxTQV GhPMyal4UZvPGn6cKG6reo8+1+OvMH41CJRCY29jeccEdnG45vb8CWpnmbId/qKh WtP3aN6yki7Pu9RQ35EwEQCqRMfI7TJWqMjFZFgcTTr4kSL0tQp1SedUE3UTz98p M0Hb815tkUx1dmt2wZgz36DRcWaB7VXDtiqx7pMgZdrCuCoJsGFqUEmsNfLhtqvi ulkvQadjQQ+F9hvgr5TCLg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIC9JWvCfx73swDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwOTAyMTgxMFoX DTI3MDkwOTAyMTgxMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMRYxGXJKG354Dml/VbQr/5KS7m+vnR6A3hVadiIZzhRo9k+PEK/C8VGDbh6qg11 SDTCUHsM/iuteG31Fa322TvEey/EJFStgi3vj3DT1kzr74quZzhgAyUr4oGrAQlX SvSBp2V9/RGv2QF1UZUjB+Du5apWPrxG2to3AS0tS+7iDZqgfM1Yj8LBxFgsphrh AZD4Uv4qWmABdlaEDAQ4rdfjA6eI4pS4kqA7ou0j4KmHwwxdoE/JR2PuPck7HFRy bNr/+o8DBcWsOr9UoqzmvYt07bJnWepKIQNXj3z8P8AZGHK+eQESIrAX/Q0MnWDR 74DW/PUkgC2DYWG7LKA9+AUCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA212DEarT3s3rNGfIZRPhqamb2YqO/hELqnnA5VFRL+U0aMsAou/2+GbU Xj/XJlnVrLT/PdQXgVaLSfoo6s+m+zBLBgNVHSMERDBCgEBM+VH1DbDMGpq+0CBa 9WMZqRJE548TpHcnNeRbjZmRkl9rhKqnVWO6DbYGu4oF0ljOAoU4a3O1uZkV8DCt 6iNoMEsGA1UdEQREMEKCQCouYXBwcy5kYzNhNTdmMS04NGViLTQzMjItOWE0NS00 YTM3Y2QyNDZhMjkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBADFldef+tPj/SIn5Y49WI3lbg3IN+tS41ywyVWQCKcQghEG1W6EroWbY0mg9 bNwU8R3oou17iNjMyCopf94r+zg9gdIi/oYJ4XvuxUm9fV22UTPsYvYkjCUEu34A CQoS6/g943j6fW5tnTkILb3YsxlfX8d4SMPIq8Y5tD1x6S/zrL3cizXOe0VPaVzk W6Sj+FVWY/zuoxVBFPu4EvBFazmT6GUY1pvuSyFAGMjMXGSDaTtSRQWTudb0tehW 3qimTixNt9bappE+xw6JHrmai2tpu2CtEL2/8vpMZdWMugEXKU+wpPOD+LYFC/DC fYiIGCOLBmIrdthjRqtwoAj2gUQ= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-09T02:19:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-09T02:20:37Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4267" uid: 75c5b889-ebf1-4c8f-9c18-5f7f9c368535 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T02:19:58Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"20edbf84-9fd3-4c1e-a907-e69df4ea39e7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T02:19:58Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 20edbf84-9fd3-4c1e-a907-e69df4ea39e7 resourceVersion: "2314" uid: 05eb08ff-c3ea-4993-9d95-6e32028baa6c - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIICPYOIAfi1JQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODkyMDc3ODAe Fw0yNjA5MDkwMjI2MTdaFw0yODExMDcwMjI2MThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5MjA3NzgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+bGbjVr5x0FLq9oYkyZ0fqZH9MA86NUt uYqd7yVKWjECQbpxXWfmWqDf/aFfvGA/Lil8TGch32d9AOuKyvBuDI76/1zKwKTD QEbMK7603rjNOi8AEmusAKm5jK/MotvINTw6mlpU2ySlvUkkmQsY9x7NTRWCTSue va9JjRMMfIwW3rSKfmVMrM2KrNIs1+nHvjIBfLqrf8nDkB/IjKffuH/tcQZ94rj6 JgdNs1WG1L4uCo98VptugrqJKZVyU23HJgrBplj/HUOA5D7QLByVTjNGKR5WYFku gnsXt7tJtu6sorW7orgA+mM+VZD/vC5t0rQThmzTgIHJaLy6iBGlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMXmBi PIrbNqPlQomp9tvWT3w9iTAfBgNVHSMEGDAWgBTMXmBiPIrbNqPlQomp9tvWT3w9 iTANBgkqhkiG9w0BAQsFAAOCAQEACVWoyujVv8CqrBIumrIIMF/w6EnDA9VTwncY Wqpdi1fns4nakhivLdOUzymbu5XHM2zNZ8Aj+cRXRUuIior+OGu5MMNkKU/uYKTF eR4VO++zfUO6Rl89L69oJY1sl5MPbGEYDxiONxFEDA4pzi7me5hoYIP+ZMayDbhW WQJ6xpgyfn1/GBTx1Lny/nvCBxbSFQ61OupNcnqPOMIqjuVkoS88cbMO4VSZu9sY 4mq7Wrcwxf3l8+DiUeIaxWjxv5CaYGMP3HIpr69g+qd9scohJf/4jOG7F66is6x8 eRRmnJpgpVREL8fZFlMB7YjnjDgCHLt4cqUJNg/WrNT0VzLxkQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-09T02:31:31Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-09T02:31:31Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15057" uid: 88d0eb20-bf97-4857-94c2-a00d775860b8 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIICPYOIAfi1JQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODkyMDc3ODAe Fw0yNjA5MDkwMjI2MTdaFw0yODExMDcwMjI2MThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg5MjA3NzgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+bGbjVr5x0FLq9oYkyZ0fqZH9MA86NUt uYqd7yVKWjECQbpxXWfmWqDf/aFfvGA/Lil8TGch32d9AOuKyvBuDI76/1zKwKTD QEbMK7603rjNOi8AEmusAKm5jK/MotvINTw6mlpU2ySlvUkkmQsY9x7NTRWCTSue va9JjRMMfIwW3rSKfmVMrM2KrNIs1+nHvjIBfLqrf8nDkB/IjKffuH/tcQZ94rj6 JgdNs1WG1L4uCo98VptugrqJKZVyU23HJgrBplj/HUOA5D7QLByVTjNGKR5WYFku gnsXt7tJtu6sorW7orgA+mM+VZD/vC5t0rQThmzTgIHJaLy6iBGlAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMXmBi PIrbNqPlQomp9tvWT3w9iTAfBgNVHSMEGDAWgBTMXmBiPIrbNqPlQomp9tvWT3w9 iTANBgkqhkiG9w0BAQsFAAOCAQEACVWoyujVv8CqrBIumrIIMF/w6EnDA9VTwncY Wqpdi1fns4nakhivLdOUzymbu5XHM2zNZ8Aj+cRXRUuIior+OGu5MMNkKU/uYKTF eR4VO++zfUO6Rl89L69oJY1sl5MPbGEYDxiONxFEDA4pzi7me5hoYIP+ZMayDbhW WQJ6xpgyfn1/GBTx1Lny/nvCBxbSFQ61OupNcnqPOMIqjuVkoS88cbMO4VSZu9sY 4mq7Wrcwxf3l8+DiUeIaxWjxv5CaYGMP3HIpr69g+qd9scohJf/4jOG7F66is6x8 eRRmnJpgpVREL8fZFlMB7YjnjDgCHLt4cqUJNg/WrNT0VzLxkQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-09T02:19:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-09T02:19:55Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-09T02:26:33Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8138" uid: 2a9d7c02-9b41-48b6-84c5-fc424214ef7e - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-09T02:19:58Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"20edbf84-9fd3-4c1e-a907-e69df4ea39e7"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-09T02:19:58Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 20edbf84-9fd3-4c1e-a907-e69df4ea39e7 resourceVersion: "2288" uid: 16400009-c592-4e2a-8e8c-8cd1fdc809e9 kind: ConfigMapList metadata: resourceVersion: "26732"