--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T10:14:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"1083b70c-1a37-4fcd-9257-21e79467b5d9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T10:14:31Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1083b70c-1a37-4fcd-9257-21e79467b5d9 resourceVersion: "2288" uid: cdf601ae-a896-493d-9ad1-38e4174a29e3 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T10:14:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-07T10:14:31Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2286" uid: 2af5f246-7563-4ce3-a101-5f13ebfd9cb7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T10:14:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"1083b70c-1a37-4fcd-9257-21e79467b5d9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T10:14:31Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1083b70c-1a37-4fcd-9257-21e79467b5d9 resourceVersion: "2285" uid: 92c46b6a-3ec0-4a18-aca7-7393684032f5 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIHK+jWElDkqgwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzEwMTIwMloX DTM2MDkwNDEwMTIwMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzhx8xdTppIu Gu0/gN/Ob/eofoEDsS0aOlK2qZi5Jmvwkgpjo39b2WspC8v9HV0qwD45hz6dFGvr NzHOQnE5nOCKfPv+GooyKcO+oje6WXJCupFCs2aa8j/jiZaws9s6uR+Nijox2fyQ CbCBCb5V08mk30MnWEtIY0OLhrAQbz8PlnZihXSDMgWLq2Hq5kWSVgv1SGlZRgDO 6oewKVjwZRtXWtYPMXZHVs2WHAyiohfUNmwp28vfYyIkTvtCVE0udlYyfueXoP8C fSyjysz8oNyWAQt5G5mJMr0Z8t7CB05HoaHeizitFgFtmBRcFhKzK9VqgTRevIJk g8hj6d1ImwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAbnHUHKYjzHPtQURQXv9ryu2GGThhczeLYVMtuZ032pCrhuJz EP0V3FMDykdQV7FVdMS8PQHhTMJgise8hCSdJTANBgkqhkiG9w0BAQsFAAOCAQEA fZpCL2lJCEjruJo+xaF9eW/IuQ/5LGoe7m1TMQK2CYGLV24ZNMYS45Uh/MQC4Whh iwi87OA0tsoQeLcscalHj+d9RHNrrxbkrSQtfNdu2Vg+aWI4Vp470xrcqk4QQt9H g7U8Z1/A69F+s7AZXQJ5Sd0n1sYcaYW0Zr+oLwXXbT7NHPj6ZnSIvoD+GFSsJUL7 Bu+WU+a6LTJLQxv11PxXi/iTBPiSm4rrIwYyZwpnvKAssjIgNGsFvEaOeZ9qQriV iPXGVDiL3Dus1gvgJWa0YlZiwTlMWcaPkwqZcAyREpyWM+YDDKoSOl5LE5ENSatW FhOk1zJVFXeLD4j5zCCnmg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIfQ30QAZu1kQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzEwMTIzNFoX DTI3MDkwNzEwMTIzNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANTNHDBIgcy2b4S68fgHpVqw2iOEKeIgqtrEj08M0ALObsCTIF3lp9Ck9FsdkgOI +tyhAr5K6QgI83nov8QXaPVCQazz7bpPwBi1Idz6cyNSXD6vF2m/qtQiuFCa4Y7G C1d9N5YtUG+AP3lTpUqRy27iGgD5iOiAzcXDPA1ygtJmwX5cA9r5e/xA+rv8myDT g7Ok5U3sFDH7ioYLU2hUhkhtrIdt73ogtYZUtjBK05Into3Vz3otfiMs50LUD4SV aBDFhc0SAzVAoGo7I1Bs9zC/kFe3bp+wygdTalhFBSPrUnu55jKZ1FoGUqlz+lpJ Z1APh/vdFzCWk5LwWKgjK90CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAONywZfkLT9TX+kN0bxL8CD0Fz6KuN/QpISo1/xruWgpDMIl09s/WKk3B ORD3/RdD+EwxNb+97pqSpeptkw1YfjBLBgNVHSMERDBCgEBucdQcpiPMc+1BRFBe /2vK7YYZOGFzN4thUy25nTfakKuG4nMQ/RXcUwPKR1BXsVV0xLw9AeFMwmCKx7yE JJ0lMEsGA1UdEQREMEKCQCouYXBwcy44MGNjYzE3NS03MmZmLTQ0MjMtODgyMC00 YzEyYzA1Nzk2MTQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGBBX6++Zy6GIh7iImLGY+8OEfXDqH+UaxE46+HiqzkvQN1RG+gezaizHKxR GHZd5rA5dZpi6PmQjqxSSFPOYSi8mlzTOOcgRVY3epDhjz8YX78u6zgbyhgv0EGK hL8S+sLbn1Z1eJArlPafl6KQuI0X4iEegQwABPS2XDsDmIIUZaT6nmlWfEtebA+l NF3zLD06UdmcW0ITPZZ5SDIdFp04MephhF5m9AtC9W6PgogDG9YddE5P2mHYJS/S YujNr4LKwoAA1d+Xil/iRyf2hck5wNUWmgdMOjALp+IxlBdMNYhrkAkAR9qJALpI UI9VK4IEYvx/qsXkDpmxmudBIuM= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-07T10:14:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-07T10:14:40Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2657" uid: 0d8ae10d-2adb-4739-8853-7042bedb6df9 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-07T10:14:32Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"1083b70c-1a37-4fcd-9257-21e79467b5d9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T10:14:32Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1083b70c-1a37-4fcd-9257-21e79467b5d9 resourceVersion: "2298" uid: 9e533974-a060-460c-84c2-12e004d35835 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIW6CNWQ5/QFQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODc3NjQ0NTAe Fw0yNjA5MDcxMDIwNDRaFw0yODExMDUxMDIwNDVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3NzY0NDUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6bXL8SFrHgglZ97yj4WZDxlqksCh/fYX lLva8F880ajZw2lJQSC0ziWlUygEt2T9KH2kzhv9FurMF+7kSLejjYVjPiaEwqXI kknji28dXvgpHofL3/5GYLkILG1pkxJjaGJtXgaMWMKlOI6dhSK3BYsOgoliUgcU JUmLFo6+IPRtQYc86RC01iVwqx4GGkkZbrULqCKJ9BaTNQczBiKNzaMLvWPGQ+Tx E9/2dbXYGmJfeDlxY4mlwcTGOLUOfn3HHK9gNPYnKijI3AFthq6r0YMfL5NtyQCz M9y7JkMz8B2C213IZoI9ylav0vf1UQy7vtLvm9QIZxzKtpvjq2JrAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0tprk G1nz3YNmK4qbSVvpVM3S6DAfBgNVHSMEGDAWgBS0tprkG1nz3YNmK4qbSVvpVM3S 6DANBgkqhkiG9w0BAQsFAAOCAQEAHciwi+PcZdlOyoIe2r3R5lzM8t2MwzZ2jLsV 50cIb4yUL/aIW4zDDelP/Ma9AsvlezGLh+wHRt4TjRQ/mro8kb6dXfMuhCnBzvvh EAcHtUWXYWTzYzozKB5dhfUFD98F4tKYzx5cU2F5ZwAPyC+DHEfki+8iSWASBlSS DV9hA8lYmtbXc0VgZtory0y4mYRtrgaYoC+mnmP480VvX54GZWqrQB3Rc0FqAG0m 3GfcoyvtMoUc5HyyS/UNe2UxvkJvrgnzLYO0/68cV4DhFVL5tOlHRNMnR4XVWM+z IUTdyRRyIhhJighKTdcry1vpBK6TV7NofG51fZ4aPhLrnsIYMQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-07T10:32:15Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-07T10:32:15Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16524" uid: 6ae12658-0a82-42d6-8729-41be658d59fd - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIW6CNWQ5/QFQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODc3NjQ0NTAe Fw0yNjA5MDcxMDIwNDRaFw0yODExMDUxMDIwNDVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3NzY0NDUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6bXL8SFrHgglZ97yj4WZDxlqksCh/fYX lLva8F880ajZw2lJQSC0ziWlUygEt2T9KH2kzhv9FurMF+7kSLejjYVjPiaEwqXI kknji28dXvgpHofL3/5GYLkILG1pkxJjaGJtXgaMWMKlOI6dhSK3BYsOgoliUgcU JUmLFo6+IPRtQYc86RC01iVwqx4GGkkZbrULqCKJ9BaTNQczBiKNzaMLvWPGQ+Tx E9/2dbXYGmJfeDlxY4mlwcTGOLUOfn3HHK9gNPYnKijI3AFthq6r0YMfL5NtyQCz M9y7JkMz8B2C213IZoI9ylav0vf1UQy7vtLvm9QIZxzKtpvjq2JrAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0tprk G1nz3YNmK4qbSVvpVM3S6DAfBgNVHSMEGDAWgBS0tprkG1nz3YNmK4qbSVvpVM3S 6DANBgkqhkiG9w0BAQsFAAOCAQEAHciwi+PcZdlOyoIe2r3R5lzM8t2MwzZ2jLsV 50cIb4yUL/aIW4zDDelP/Ma9AsvlezGLh+wHRt4TjRQ/mro8kb6dXfMuhCnBzvvh EAcHtUWXYWTzYzozKB5dhfUFD98F4tKYzx5cU2F5ZwAPyC+DHEfki+8iSWASBlSS DV9hA8lYmtbXc0VgZtory0y4mYRtrgaYoC+mnmP480VvX54GZWqrQB3Rc0FqAG0m 3GfcoyvtMoUc5HyyS/UNe2UxvkJvrgnzLYO0/68cV4DhFVL5tOlHRNMnR4XVWM+z IUTdyRRyIhhJighKTdcry1vpBK6TV7NofG51fZ4aPhLrnsIYMQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-07T10:14:40Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-07T10:14:40Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-07T10:21:01Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7919" uid: 856ff514-1071-43a5-9726-e3028696df26 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-07T10:14:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"1083b70c-1a37-4fcd-9257-21e79467b5d9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T10:14:31Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 1083b70c-1a37-4fcd-9257-21e79467b5d9 resourceVersion: "2297" uid: 2da7c2bb-94d9-4557-b7ac-d376b8fc8585 kind: ConfigMapList metadata: resourceVersion: "60135"