--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-04T22:04:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"26488de5-e513-464a-b6d6-0234ddb10ad0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-04T22:04:15Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 26488de5-e513-464a-b6d6-0234ddb10ad0 resourceVersion: "2300" uid: e6ecf3c9-6332-47b5-a7c9-815a07f5f2f7 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-04T22:04:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-04T22:04:15Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2293" uid: 67ee6a65-bb95-4fda-83d5-1e01dcf98e34 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-04T22:04:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"26488de5-e513-464a-b6d6-0234ddb10ad0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-04T22:04:15Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 26488de5-e513-464a-b6d6-0234ddb10ad0 resourceVersion: "2292" uid: d7945cdc-349c-4ed2-ad2f-c5c0a5826a2e - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIYtgBCQ2LTdcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNDIyMDAxOFoX DTM2MDkwMTIyMDAxOFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7PMgeOSHVq9 GemTGrXroM+ospEphVTL6ys/Q2blXjwoyUnLYztEa5pz50DvQXR4pV5H3CbrJ0oC eCwrAcEE9kqpJyxiK7JMdWRZcvCYwYl8wGnAhEVTDVhVfUnMf/KyutKboH+Mvgte cm5+of3UtjacPEgE1Akww+u0ssSNrBmp7CSQ7buK/A1Y86sLukYShgPxmIGY+mr7 34Icy9enzPKx3FKwRmxj/ZAJ3KVwEDSnUFXz/NgHwYuRlTRt67/FoG461Yrj6/8f xuLVcoRSLBIy+IVV4Fg3eoZWuhP5ilj0zjVrAphtAXgE3BA9lySaXqGQQZYAfwie LR97FS/ZlQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAR9dVlrCS2jltp25eFEBKNYzrS4ZImpc28oyeAf6L93/dLWZ1 172BYJGXzCmZVEQGv7hGdycRobcNdSRwtkKgJDANBgkqhkiG9w0BAQsFAAOCAQEA ajn56/lWtPyOkpFb1AlfRIZ0v9UDp1LJQOfWPDB1ZPZQJ07w0tnjdcs1X1vTA0Ss +wVUUzlZfmnt/dLKjEzwXZiG99ATXqfjriO6XnPordTYSGUNA/bE/puHBU8wAEnC LA/2A53zzaB/ZEr4Gh38suyxEFZ7HRV17o4p1CNsh0PpNNkAU40QMlCxjJX19ctI FTExA5uU7wli7vzfk8Htb77zK5WZZebH/hxI+c9EZkJ8ZUWKS6zW81zVWMr8OK9K KGFL0g7oVlKcO4sw8w65Q8q5aChtrlFRbv6YNRzzUA1tE/gdcbUFIt1uZ5TIwR7N dZE1ioRSOS/6Rk5naXOuvQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIfl6dmJIA2RowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNDIyMDEyNloX DTI3MDkwNDIyMDEyNlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOJFOTddl8DSVrOgfjrUfPPW1Bl3BL+imEmmP2LojnFfcpTaLqKEkxAV8MGoXpZA JdTTVhgBDRyHpL6/xZFRzKM17rBqSpM2Ul8whsbnaS+P5+jvANcmA676eOFTKHP9 woK8MJYngoNeKMJUGTIXcZNs4cwpSGpqr1ZdOP4AAhmXBk/FgblZftVRj+gRhrkX b0aA0DLQrNAlakEhmIL2aQRhnl1uL4rxCWQf2rghpPb1EtN5p08AEw7+Vl/e+sAN iujbyQcEVHgK0BZpruScX7bDaHSzKWwH/O125cYMI4dZA1Lx2u1MW5KZ1CupYZqI NEoRQXqLXGsg9bubnC93E9cCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAv9ftYUyzPCIrJoUlNZyixVYSzxQkO6HdIqtEqFgSCdIum87mOuwcj5DY plzbaJzcPui+nAghgV5EdU6ZUC3AbDBLBgNVHSMERDBCgEBH11WWsJLaOW2nbl4U QEo1jOtLhkialzbyjJ4B/ov3f90tZnXXvYFgkZfMKZlURAa/uEZ3JxGhtw11JHC2 QqAkMEsGA1UdEQREMEKCQCouYXBwcy4wMDhhNmNiMy04YTg4LTQ1YWEtODgyYS02 ZWJhOGYxOGJkNTAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJCRbAPuf+cyD5slau7GTv76XkBBdly/7fLK6e1S1jOC6ttx7CyADFuNjy8q 7YJPZYcoObUYJmfmmz9A1VcqdTtHtcsGAI5ucYr7CGrrhWWjULbl3IgGrYoCLp2A 2LYVBabBlINcImwZvluZpqaEUx88BkhJBdpiKetskHv+ruTr+aVIUpF1u8Mc8Yel TCszJ0TjD9c6e41NkCI5xLZOmznI48j2XwmLDXUfYCkIvEyf8SQqRjrcUNbTGgR1 rjkAmyJi90pyHFiDORKcnfyLjeWRtxglahxnOhgos18/IATO35LEfrHV9nZgHevw MTMH/9nwmDxbU3spWrR4uxCVS0w= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-04T22:04:33Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-04T22:04:33Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3199" uid: 07bde70b-30eb-46b1-9cc6-aa1a7735a2de - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-04T22:04:15Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"26488de5-e513-464a-b6d6-0234ddb10ad0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-04T22:04:15Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 26488de5-e513-464a-b6d6-0234ddb10ad0 resourceVersion: "2306" uid: 37d94c27-340b-428d-b3d1-1ce463569f3d - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIZEyMQtb0QVAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODU1OTgxMzAe Fw0yNjA5MDQyMjEwMTJaFw0yODExMDIyMjEwMTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg1NTk4MTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXv0VYCtebz/ck9/EbSkUxMv5JpF8E8md njsCvwbTDZsBPbxoG6RDluYPU3zQh2RLtiWi60phcUW7W5KcxO8UV0AB0DIdV+U2 D/hR70cfuN8xZ+nRZRVOk/liEyw6nzmXUn/Jz/eBicdGYsVrp+pnrqkYkwoO9RT4 9VpG8Cge7mMAfKmoT80DIWU5SBeBb7UGt3NYcign/UFOwkCwXdRYFxiHgNm+4Dhr N5hSuATsesxm27S1e6GR1mPcgKnNopMPBgQuGToReSgZ6O4T094DJ++Qip3C15Aa aH40/l1q/zLWpJ35prk2/nSlISOF3C+z/5B5LbaDAC5NlzB7IAmfAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOGshv +Mds4jVuz7Nija4XRfcpCTAfBgNVHSMEGDAWgBTOGshv+Mds4jVuz7Nija4XRfcp CTANBgkqhkiG9w0BAQsFAAOCAQEAIqDhO+v3hx/YsokmCsfKLhKdVJNV+/k+ri/5 BPLD/ks8KkA9GgNhfne36fRVzFKFHFWaBHJb13FLePpcpEMs1yAphOVB5D62UYNc K9eynwORv87BpmxCnwn55GNUUWkdUeTthDEb0bmyFCz3cWVQdmD/NjL/TYApaWTQ lLbrfNw8aez7UfakKZczXZHtXigZicG+gPkNHhwlYmIi+9TbPMj/leFyfO7YXP/I BQ3BsPGsIZofek5QyXkED3YyJ663n6d2cDyKCeQZXcq120ucpq9EhsQ45Xl0kuZh jsHS1j4rokbPTkKuZ7BRcQxBEa/AyRSYW1EVPCIGtVZB+Rf3oQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-04T22:16:03Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-04T22:16:03Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14768" uid: 728807f8-a51a-46bd-83a4-d2cc7da0a0a3 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIZEyMQtb0QVAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODU1OTgxMzAe Fw0yNjA5MDQyMjEwMTJaFw0yODExMDIyMjEwMTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg1NTk4MTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXv0VYCtebz/ck9/EbSkUxMv5JpF8E8md njsCvwbTDZsBPbxoG6RDluYPU3zQh2RLtiWi60phcUW7W5KcxO8UV0AB0DIdV+U2 D/hR70cfuN8xZ+nRZRVOk/liEyw6nzmXUn/Jz/eBicdGYsVrp+pnrqkYkwoO9RT4 9VpG8Cge7mMAfKmoT80DIWU5SBeBb7UGt3NYcign/UFOwkCwXdRYFxiHgNm+4Dhr N5hSuATsesxm27S1e6GR1mPcgKnNopMPBgQuGToReSgZ6O4T094DJ++Qip3C15Aa aH40/l1q/zLWpJ35prk2/nSlISOF3C+z/5B5LbaDAC5NlzB7IAmfAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOGshv +Mds4jVuz7Nija4XRfcpCTAfBgNVHSMEGDAWgBTOGshv+Mds4jVuz7Nija4XRfcp CTANBgkqhkiG9w0BAQsFAAOCAQEAIqDhO+v3hx/YsokmCsfKLhKdVJNV+/k+ri/5 BPLD/ks8KkA9GgNhfne36fRVzFKFHFWaBHJb13FLePpcpEMs1yAphOVB5D62UYNc K9eynwORv87BpmxCnwn55GNUUWkdUeTthDEb0bmyFCz3cWVQdmD/NjL/TYApaWTQ lLbrfNw8aez7UfakKZczXZHtXigZicG+gPkNHhwlYmIi+9TbPMj/leFyfO7YXP/I BQ3BsPGsIZofek5QyXkED3YyJ663n6d2cDyKCeQZXcq120ucpq9EhsQ45Xl0kuZh jsHS1j4rokbPTkKuZ7BRcQxBEa/AyRSYW1EVPCIGtVZB+Rf3oQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-04T22:04:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-04T22:04:32Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-04T22:10:27Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8087" uid: 850ed6b8-3153-4ad7-b125-febc65cf8da5 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-04T22:04:15Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"26488de5-e513-464a-b6d6-0234ddb10ad0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-04T22:04:15Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 26488de5-e513-464a-b6d6-0234ddb10ad0 resourceVersion: "2302" uid: 9e90994f-5533-4d72-bb59-3be2ac01d46e kind: ConfigMapList metadata: resourceVersion: "58502"