--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T03:42:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"93b70494-d7aa-4947-bc50-e840a9113089"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T03:42:31Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 93b70494-d7aa-4947-bc50-e840a9113089 resourceVersion: "2365" uid: c2645e55-8974-4901-bc6c-41590ce6a816 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T03:42:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-07T03:42:31Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2360" uid: 0af70566-7e56-4542-9234-257c3900654c - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-07T03:42:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"93b70494-d7aa-4947-bc50-e840a9113089"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T03:42:31Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 93b70494-d7aa-4947-bc50-e840a9113089 resourceVersion: "2358" uid: 4035c2ba-5f41-45ed-85b2-36978459e743 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIWAns0pAem9IwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzAzNDAwN1oX DTM2MDkwNDAzNDAwN1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTWQtItYLf6V ZMMhc+kPhA9/Ap6qwqrjXknwH3W6uFxkHkBaOcTAePqs2KlQpY7HJRS2+AWurZwy Yk9dkDb/Va6q0tQ4k22h4WvucIcbxE4l8B6IOCqYn2WIo86gC3QMqSAFxCgMkWEH lmOiXw5ChR/Uz/hx/D6eGszItd1J58yvALTxplIDqTp8q/00MFa2GR8Z6qOaR06b KJlx/ocWG0Fo8ybcq/JuvuBfAc2nckcWcbYAAA3ir3Uxv3wHldPP83jlcn7l0N+1 PuYh9Yj+QV8lNN55lq9xy5SkyH1876mL1NQTpgT9NNrOeJduOD48rBpUnJX86Hjn xawcg+jLkQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAzBfKa6KY44E7TKwkN27OY7qT4j3mgKVcVg11rPt/N6NieSAN P1/+npWtNq6SyZwZyi8oir7CuL9a8S1m+qcUUjANBgkqhkiG9w0BAQsFAAOCAQEA Gv0mgnQ25JpvHOd/qD5RVv20lcOqZBaoIH+j9zkIv48auzjX/1ly95jo9Dq/7zw+ HN+gT+fvvpaKp/2xCzTDQYtsZLibo3ntkVE0wxhPJsSWf4n+FFueT+GZhLVaFO9i H/GfCfdtVuoI0h1xujWpXNk6OxfyYi7mJGJQrInHGLMcjnsqwb0Yo5DolehESQBV Vo0XCeA6OcnP+3F4FgI+9Pz8Gq4uwshK/gIcrqs8zKoTMRXipnaC+16+9oe4cqZE iWsh0HyfRz7ZMNRNQkoTJVX7todZ0y4p3Tq+8KdjMog39fqwF3oal9W3kVflOY61 KZp1oVCaqTuD1c57T46+Ww== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIa9FoA9AxMe4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwNzAzNDAzNFoX DTI3MDkwNzAzNDAzNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALJLvWqUPRR6lz5yvweuyaWzN6VMHe2NUnTAe9jTjxz0uYXO4fhcQWOjZKtj6eq+ mQaZxq/uMAz9qHbRA96dhNCN2IbtDVuexpGj/wRudA3UytO7g0sVmCyW2eGLefNz TKZ7rQpFD0KccJ243JriwBrGenXhnwRTEO7g/y1rey1ITk+uWAltr8+1OJELCb5r 5DxvydGKFi2+ErDi3kRr0QtynR4fKGrF4SoILL0HH34nMFdSAMi8oU5f1F5VrH8K lcicgG9hJnzYbCLU3LahwOVAwwbxuJpOhttiW6IApk0Qz9SmIkV0rc/yUV6wuBwa PSlEMdbGjC1UZzWc6YPcreECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAK5GWE7nrZUlhZhSXLjF28v88tfHqdbKnUI1S3WYmQN7/nHQKzNYO+Hri YPOFlewy7+8ulZfeDr6sENlRdKrasDBLBgNVHSMERDBCgEDMF8propjjgTtMrCQ3 bs5jupPiPeaApVxWDXWs+383o2J5IA0/X/6ela02rpLJnBnKLyiKvsK4v1rxLWb6 pxRSMEsGA1UdEQREMEKCQCouYXBwcy45MzlkZTZlNi01MzgxLTQwYzctOGM1Mi1k ZGEyZDU3ZmE0OTcucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAJ3H6846oITgKKZGCPWMjdKN1WIVa+EvrQCuhfutGnIjEG4MyzDTYBwSUaND 6q96njcQuCDMwm9Xtf/8Eqjib4YaBs5Pu47FU5LE871igVQWK72UN15jo+ME0A9K ZPoTKZeCHQE9eGAmuKYRY8nMPYsz0tjZ1T5E6nCapXVnH0/HF2q7bjnNjau1NAeQ EdSu3SD23FsJ3G67HSjplIFRE7LozjgFuS63HVbRINTAIiA+xvaO4M1xAKDmxMCw 0EyMtFiqimdzvdXdFoo6U0PBxWysvWGSWTVT493Bq744cBf0A5eUxHqpEX0sWLm5 E+/hLTqUqyVRbRxqyslcZHvbLhg= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-07T03:42:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-07T03:42:42Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3300" uid: 85df056e-2db5-490a-a06d-f8c08b307d13 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-07T03:42:31Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"93b70494-d7aa-4947-bc50-e840a9113089"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T03:42:31Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 93b70494-d7aa-4947-bc50-e840a9113089 resourceVersion: "2370" uid: c7610a7f-4335-45d5-bc71-718f29ba0276 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVn+KYbB50t0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODc1MjkyODAe Fw0yNjA5MDcwMzQ4NDdaFw0yODExMDUwMzQ4NDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3NTI5MjgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC554CLNHfJstdGHGblkhBW9oCYCic8cTsE 6rP1Hb1ObDA3p42wFZZ7ZbESCisbBLlh7nHNgkR4onIHBKiqzlbJR0/0+m0Z2W7M 9zgKKf2PcvxnrzQe/OZUUZwgevPeej7f4bnd9MFfQGGDCAYwZtIJST2S8N8Nz2dv LFr211Y1ILjPeF0r1KZt5iuOMwckD0rSejGuR334R0BFI9N9awtmoC1vFOzfriKN /XKuLhZUKtB55qxFnwjXAw+hRox9iTrVQpZg3aszsbwIIFRTmxwNMrGs0NQVaZ4g 31J62S+5CurE7Z0junBJHrbNT2x4f3fs2eqHvWfbEQsKHLjQglnZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQK4PyS /eMxBtWJJXj5RiAzghougzAfBgNVHSMEGDAWgBQK4PyS/eMxBtWJJXj5RiAzghou gzANBgkqhkiG9w0BAQsFAAOCAQEAdelT3cd9kWZPT03uzx/O/7ppe58DIYFgceCN 6bskyKHZRrndI1H2TxjyOwgbB3obxxyuAtG+twbMuWtZi2fYoLpieiR9vbzVoZsS OvFdrHU3f8jkfXZTtYN2SathWf6gCJgC4eCxDVnNam2QkdNUUB7dAvD+NtnavVgi 4whKjJH47ipQqX05MR4HN9pdiX7iZl6d8PU5xGN3qubbFVYw4r+xtMTfo9DnfXOU j+sHUpjxlKciwZFRpHFnHSE6mVj8WPbk5hPrg3sOc9E70412pXZj8KRzrBmRCP0/ cm6VFNrcK4ICJmhKsDnCOrk+Uk2IQk8/00tQ4hbyY8REjrdL6w== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-07T03:53:35Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-07T03:53:35Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15288" uid: 195f5169-d4b0-40ae-8520-13f5f5497c2e - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVn+KYbB50t0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODc1MjkyODAe Fw0yNjA5MDcwMzQ4NDdaFw0yODExMDUwMzQ4NDhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg3NTI5MjgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC554CLNHfJstdGHGblkhBW9oCYCic8cTsE 6rP1Hb1ObDA3p42wFZZ7ZbESCisbBLlh7nHNgkR4onIHBKiqzlbJR0/0+m0Z2W7M 9zgKKf2PcvxnrzQe/OZUUZwgevPeej7f4bnd9MFfQGGDCAYwZtIJST2S8N8Nz2dv LFr211Y1ILjPeF0r1KZt5iuOMwckD0rSejGuR334R0BFI9N9awtmoC1vFOzfriKN /XKuLhZUKtB55qxFnwjXAw+hRox9iTrVQpZg3aszsbwIIFRTmxwNMrGs0NQVaZ4g 31J62S+5CurE7Z0junBJHrbNT2x4f3fs2eqHvWfbEQsKHLjQglnZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQK4PyS /eMxBtWJJXj5RiAzghougzAfBgNVHSMEGDAWgBQK4PyS/eMxBtWJJXj5RiAzghou gzANBgkqhkiG9w0BAQsFAAOCAQEAdelT3cd9kWZPT03uzx/O/7ppe58DIYFgceCN 6bskyKHZRrndI1H2TxjyOwgbB3obxxyuAtG+twbMuWtZi2fYoLpieiR9vbzVoZsS OvFdrHU3f8jkfXZTtYN2SathWf6gCJgC4eCxDVnNam2QkdNUUB7dAvD+NtnavVgi 4whKjJH47ipQqX05MR4HN9pdiX7iZl6d8PU5xGN3qubbFVYw4r+xtMTfo9DnfXOU j+sHUpjxlKciwZFRpHFnHSE6mVj8WPbk5hPrg3sOc9E70412pXZj8KRzrBmRCP0/ cm6VFNrcK4ICJmhKsDnCOrk+Uk2IQk8/00tQ4hbyY8REjrdL6w== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-07T03:42:41Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-07T03:42:41Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-07T03:49:01Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7981" uid: 1c19d777-c72d-41f2-a528-da53a53fe9bd - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-07T03:42:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"93b70494-d7aa-4947-bc50-e840a9113089"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-07T03:42:31Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 93b70494-d7aa-4947-bc50-e840a9113089 resourceVersion: "2367" uid: 46756506-e342-4dea-bfe0-919b10f042d9 kind: ConfigMapList metadata: resourceVersion: "58149"