--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T14:10:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a733874f-e312-439e-a8ff-2161878902a2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T14:10:17Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a733874f-e312-439e-a8ff-2161878902a2 resourceVersion: "2446" uid: f28c4806-49a1-4776-b27b-0a4f310b7a65 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T14:10:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T14:10:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2425" uid: 6c073ed3-9976-4755-b3da-dca2cd02ee8b - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T14:10:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a733874f-e312-439e-a8ff-2161878902a2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T14:10:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a733874f-e312-439e-a8ff-2161878902a2 resourceVersion: "2420" uid: 704f1a22-3b38-4a6d-b27f-4a3e471b85c8 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIQtuwMnsXPwUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTE0MDY0MFoX DTM2MDkwODE0MDY0MFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2/2cYkETKeT k0cgLGS0VPeN987aSwDzXY9ZulqUGy4a5cl32FgvZZyHlYQZjbpO6utjs43JUWSm 1Dm2GIbNIZhqU+Kh8VVzCOATm/TNzsmdpFf4d8anMEvyCYlNtQK6WOpFe6gNN0F7 lDlhjF/+SD2G9k6juS3J8wVroXgDNW7hTmu3SCOqQe/CO59b9kiXaDIVXd4rl2HV sMrOnjEPClBecNsoercu78rBcu+DGnhy3sMQgUH5yzA173e2CWVStAcGvu0pCYg2 JtLj+rlf4FSRCohmB4r8hYHxgACartc68kU7l2wbxCZpfDhO1ow8AXaSXWWru/nT yyWUsyOg/wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAknLPReEVi1je/GjCpwlMrKwilJhDJetHHSPsFJ5E0sZi8pZN j6A0dFLFtoMnWnrKwfGXNtFYWjy6+a3xp6ucXzANBgkqhkiG9w0BAQsFAAOCAQEA O6hOxzOv/EUFfsTfFXL1nFcA5suxmILo1dzNmGAJY99xX+LISyZ+CmFT//ah0RU8 mg1r5sUNj1DYwLgy4L7jWJuF3UVff1A99jBh6XjypR3y75298HJD55iiyGhYHbop CHHa0y6mZUQvHXhTsiFmYqyyTMixaeE1HB/hVqGpMFtNkRv3kvc49D26eSm+rPJP asx6RrA06Gx17P68FUgCQflDF/I176Rngi1wdiKmq134XnBb9XX2Q370vsjOL7yS OpU1ezFwev0sJzpK4tirwS6XGRBVbyg0AsvMPlHZ1gqFPMSfAz0ByzALn83Lpxya 5ud9X7556UCcvNf0MDllmQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIU8H0PtwNOUIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTE0MDcyN1oX DTI3MDkxMTE0MDcyN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMSKcOGBqDBbztvst559ly9RsIX5S/xEuWczI/dDnaV42XitOMWm2I/L7mPkRuMO LB21amEwdSukbISVZOqiZL4/nDEbczVd6CfEODU4RsbBsbMiZk2gP+dJNC4xnEXO OhYuKZtFVrhFHm1TfE1jPBtp8hcdgSJSrwlN/IDlpSAPtbFOQUsNyFzZraQzhOey g0MjDm5fdP6/h5EMv+ekrEqHGqIU/pdkqmod+1Iefx0NhZK+K0c+bHyquF6YrsE2 TiZyvtl7dt6J3rN2LmDOl8xdEycjgBkXSx3NNly6qXkQPUPO8TkhKDtNN4OzrQGQ D8gh5za66x2301pQl/lCWOMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA5QIOreqJ//y2mASpji26tceNIslC3pL0yRC4x5RTXqAk38K+jwzX/3L7 jMOX3OP7y6SW2b6ZUsr0rHmOyS+BDTBLBgNVHSMERDBCgECScs9F4RWLWN78aMKn CUysrCKUmEMl60cdI+wUnkTSxmLylk2PoDR0UsW2gydaesrB8Zc20VhaPLr5rfGn q5xfMEsGA1UdEQREMEKCQCouYXBwcy44OTY0NmZmZi0xZjk0LTQ2NWItOGI5Yy1k ZmEzYjJjMTg5YWQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAF3eIn0HLjSNlGVkcsAwTR0mBzXbWEITOy9Wdov0GdxAtD6mgsCtMqk5t+GH NQbQbjCAxi9LC+VPKNuaQIRtsQcLyxCmGKcTIqDCOu8x/JuFPWFTgbnCcZh5wPz7 xE/jY+mv2rKMc8vxX3YkaOITCqygymGeny7ebG5+fMNs65rtav/RXCPPFILh2jAQ FY8fu33259qi6Qqo1it+sBclaGLr8cggviNJwXAejDy0TWiZy/HeD4g9XSyqxjTs 355mOGSJiGxGyAw5LEZkluB2cYpM/OK4IBVWURE5D3bkkZjG4RyirUxMhyQvzr0r aon++dYo9d6MraiuBcFpuDoYIWM= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T14:10:34Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T14:10:34Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3036" uid: ccb49317-fe27-43b5-8240-d6a58687dd04 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T14:10:17Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a733874f-e312-439e-a8ff-2161878902a2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T14:10:17Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a733874f-e312-439e-a8ff-2161878902a2 resourceVersion: "2475" uid: d0cd9cd8-f03f-4f11-af9d-7356a6a88833 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIXdjea7Q5KmkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEzNjE2NzAe Fw0yNjA5MTExNDE2MDZaFw0yODExMDkxNDE2MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMzYxNjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+wlENp/8401L1M38m9zZdMLcaYvqxoZV HneWFuM1hRz6CS9P3DkG5wn2u/D0Zymo4RWGzXLB4jL2hc0m7/xWaPy6SIKsB6HM b6YnM02PK98YHVC+I81mNS2OXpWgpe6f5X6tuwUIo4balszc0tL7xnvBF4xPNz3R z8NUdlNdxryabR2Npq7kH2qBRM6G/42sxIedhEuCnBEBB8VQVqCZQvd3ZQruruyb M1GgMDcoNawXh6sZeXT/O74A47QeX43Ns+1EC1r7zaN9xZs2v3hU8PSVof6sq7eH StKxOBxB/zdrdXjcg/MJk9NezgnzLcsmHf+RK3wmPvqFFc1ASGutAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQL+eev H7aB3nVD7qKQj5LMbSVRDzAfBgNVHSMEGDAWgBQL+eevH7aB3nVD7qKQj5LMbSVR DzANBgkqhkiG9w0BAQsFAAOCAQEAZoZvBUhtUZWhX0smaoHcH3ZJG4Yhn5RsoOZx Q//voJeWMEP73zPv1XjLJMWbjdJfcLEl9s3Wzey3n/UN3kuHwfvlQipcL3f6k3N6 QeyQi2daLRdtyERuL20DNb1ZRnxPD2xfQ4s/xAhJ3qQgcUrLByjRQ5/722TEitBx fYZn87bsjqsma0ATekP1BErTUjM81X6VS8otf+LyF7FogGvP3sDVAdeMI+VLhoaT zykvQptuszz6beFr6/PImJDWLv7SxzCuU7Y4O99fa3hbCTCdA+lwDD0lNiw6k5ti D0rWSnQLBKQKP8l4d5oYkVHLISuaOuYdke6Dw/NCB0BMyzyRBQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T14:20:40Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T14:20:40Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14529" uid: 9d6838ef-e2ee-415f-a3dd-47d1c1233395 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIXdjea7Q5KmkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEzNjE2NzAe Fw0yNjA5MTExNDE2MDZaFw0yODExMDkxNDE2MDdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMzYxNjcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+wlENp/8401L1M38m9zZdMLcaYvqxoZV HneWFuM1hRz6CS9P3DkG5wn2u/D0Zymo4RWGzXLB4jL2hc0m7/xWaPy6SIKsB6HM b6YnM02PK98YHVC+I81mNS2OXpWgpe6f5X6tuwUIo4balszc0tL7xnvBF4xPNz3R z8NUdlNdxryabR2Npq7kH2qBRM6G/42sxIedhEuCnBEBB8VQVqCZQvd3ZQruruyb M1GgMDcoNawXh6sZeXT/O74A47QeX43Ns+1EC1r7zaN9xZs2v3hU8PSVof6sq7eH StKxOBxB/zdrdXjcg/MJk9NezgnzLcsmHf+RK3wmPvqFFc1ASGutAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQL+eev H7aB3nVD7qKQj5LMbSVRDzAfBgNVHSMEGDAWgBQL+eevH7aB3nVD7qKQj5LMbSVR DzANBgkqhkiG9w0BAQsFAAOCAQEAZoZvBUhtUZWhX0smaoHcH3ZJG4Yhn5RsoOZx Q//voJeWMEP73zPv1XjLJMWbjdJfcLEl9s3Wzey3n/UN3kuHwfvlQipcL3f6k3N6 QeyQi2daLRdtyERuL20DNb1ZRnxPD2xfQ4s/xAhJ3qQgcUrLByjRQ5/722TEitBx fYZn87bsjqsma0ATekP1BErTUjM81X6VS8otf+LyF7FogGvP3sDVAdeMI+VLhoaT zykvQptuszz6beFr6/PImJDWLv7SxzCuU7Y4O99fa3hbCTCdA+lwDD0lNiw6k5ti D0rWSnQLBKQKP8l4d5oYkVHLISuaOuYdke6Dw/NCB0BMyzyRBQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T14:10:33Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T14:10:33Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T14:16:19Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8132" uid: 9bd2fea1-b08d-401d-933f-0fd04e562656 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T14:10:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a733874f-e312-439e-a8ff-2161878902a2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T14:10:17Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a733874f-e312-439e-a8ff-2161878902a2 resourceVersion: "2470" uid: 200bf378-eb2d-4171-8201-777d282c9bd8 kind: ConfigMapList metadata: resourceVersion: "58788"