--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T17:45:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c1c207b7-3539-4e92-a246-b3e0adf29155"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T17:45:55Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c1c207b7-3539-4e92-a246-b3e0adf29155 resourceVersion: "2687" uid: b40b080b-8103-41f4-b4bb-29f210e9d9c1 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T17:45:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-10-30T17:45:55Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2685" uid: 967fc69c-c726-4c3d-b048-93019da6e68d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-10-30T17:45:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c1c207b7-3539-4e92-a246-b3e0adf29155"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T17:45:55Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c1c207b7-3539-4e92-a246-b3e0adf29155 resourceVersion: "2684" uid: 7d88f509-2643-4b90-932f-d56b9bbdf0f3 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIfVnmLNRumLAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE3NDMzMFoX DTM2MTAyNzE3NDMzMFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt86yzm/znbVt NYPPpu3540SAW6kvwCteUC2XeevvbD5J+P/S/NEdSf+teZpHrJaT+oyV4wNZAgEC 9T/g0tRa60z6D8lxdX1xu2WoUKGHa3rRP/QOiQtX2g/3vPxzm1beku6gBruSd6/M u+EV+3KY5wmySxcxLd6hjjUvMxIKcyT0hIr8QyAYlNoDKe5OnFHtk4N/nM6fN+6w 5CVh+ArXQ2TTytk9HSZe9Jx8Yhwwm3xKP/0+4l04Ake2rgS89H0iYngbAJZfeL0D 1J64TWyM45/dFOSqGxr0RXNNBfoQq6Uy5SM0qKTNWA3bS3XHEoQGFR8kS37Yh+sN bGw6UHTTvQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRArcFp8iNtpSCAjOCMuLjmlEwJ+Z3HTc57c6W8gvPEOTf1bulu 417mNECZWYc2Xn2ZrC34LDr2VAA7UQf4s13zlzANBgkqhkiG9w0BAQsFAAOCAQEA N4KCi0WHaymer0hS00zPRswGwqm0oSbr2ne/Nn9oswsReXwr0wpjuEM1K5GJjIuf GykeMJMChtq4pe+sNQu8reX3K6wQwtUBtHbSfyMet7a3gdHM1n5vpTqtF/WSAlzm t5tRdgxuZgU25dHyqatiNu4tww3vQlImPUBfI6LVoYRTVCymnpQxQx9qrtXcfSgV bSh0qTpp5wJHjKAz6zGgp0ZUIIwj5Do2JmBjYugMp9GG+tZB0lE5hCrLoEpLJ+aE AlxQJ3saJk6KjvtSpeg3ePJDjlkJm35/URX7GM3v3/4TEzjyg04tyV8ENKCq7hx+ XGMHMKYhXfTP8+NqfiVB6Q== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIGI8zH6+q9PswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE3NDM0NloX DTI3MTAzMDE3NDM0NlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK/yUhLMI4WzEBiVELZ0SrwcI8gJ+Rj9dB4FYKFr6EKKpkQq2bvoLJwItY28y4dq pAIPWQhzMJU3ZMzvbhW5i9ebTaZXmDTpqH8hVePPeaf1D7EypnApQRjkeVnV4FDy O0g9/BZtp8dMs51u/u1worbL1GpvmLWTcyXRE0/WESwIICaBlERXPCGLlBAjqsk5 70u3EJHoE6c6uZcHXf6qcOMVThZc3VyPFn2z3l5iwIzHC3la7HTa8Eq78WZ77HEl NNbEO+gQSr0EyjYUS3Jvz7loFSGf2a1WyF8xnh4ibS3xY9GELxzAOOvF7X37B/+S VcteiRQ8szxVLWx6kzM0uLUCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAsKxT3bOfk/d9/T77ev+5DmYmIC+C7s9+g798jWCxLGLwdgTlkYtyYuPr fNzXUS/5Gj85nLgboWtnjnLNfdIjPDBLBgNVHSMERDBCgECtwWnyI22lIICM4Iy4 uOaUTAn5ncdNzntzpbyC88Q5N/Vu6W7jXuY0QJlZhzZefZmsLfgsOvZUADtRB/iz XfOXMD4GA1UdEQQ3MDWCMyouYXBwcy5iZjcwNGUyMmE3OTk5MmYxMzk1My5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEABJYGQEYqQ76Q DQoH6w/SFPQ0evnlwMnOrWlD5TamNFYzP9OGDITaLLgJv78m22pE5UETspPko9uO an4RF7fAx/yDj/a5NrFXnh7NETg4QSXBwi6/jEuqrqM0zC0B7bqq5pi8zDXdcnv5 c9ZXxgaPrcuxUYgP62+xpPWx7Z8Skj0jmQXy0FCm8G+h7Yr0YjZnbda/ZuBHLjpA E4aSOIEJs45HZpkHt5nUWNVSPy4JCVJYInbKl6quJJAHia6R+oh7Jgs6GmFvdP9L JPHKiM/DXaPNDFXICs7ud80sP1MghILMEhUOdXUDiEXa0XrbR9N8Z2BbdRLukO+u TDb3ZRoviw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T17:46:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T17:46:05Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4016" uid: cc6d3e06-7677-4258-a145-9c2e36c9afbc - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T17:45:56Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c1c207b7-3539-4e92-a246-b3e0adf29155"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T17:45:56Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c1c207b7-3539-4e92-a246-b3e0adf29155 resourceVersion: "2690" uid: 55795af3-1a8e-46e2-a636-407feef607fc - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIG9PFmYEpIkwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4MjczNTAe Fw0yNjEwMzAxNzUyMTVaFw0yODEyMjgxNzUyMTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODI3MzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTfnXVC+pWZWm3UJcl2J+ZHhsRupJrIxj R5ZZPq63u0AHufIfdHHhRt9NNImjY5m1YHD1jPR/GDR46LkTFvnQblpH1+1biYUK ScRWNxAdWRrh0z7CdY2xIWQDkJa/IVNA7WaRWZmiM4TWTXXC2npNd5Zmp9/rIjte RSxTAblImMGs6TpUXsxShK/kT48QBbFiiunfPO4/SVILue8oEctjiW4M1P9J/X0c 4NX1TEwQljOulDG0csDpoQ8LWF7SICqSNY3bHFhibcsaitHGWHOLElaHQBv6Nqjb L+7hlrp/lbbL1iChs6hgqXnbL3qbntmtbdsKiHogR7iYXaxfEdBnAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPXYeZ z39OIZMR0s3ADniU5xxW4zAfBgNVHSMEGDAWgBTPXYeZz39OIZMR0s3ADniU5xxW 4zANBgkqhkiG9w0BAQsFAAOCAQEAPVSFma04wAfH0e/9g/SeezYoIf4FubQM8Bcs lT/8VMSC5pcYr8UIdu1wwwxTJ63HruJtpeLdWWn7VmfrFk06IlbzHc5G5G21pOEO f/G5VF7Cjcb7Wf/mjIUZJtRwhn68JtjmEUE58KidamEkyrvcovnDl70YDlPoiHxR nM36b3n6utAy/M8F3Col6J7eDD7L+nYmMeT84O8NQDSg6PQ8KtFZHQf4L72sQiET EXM+xMDCB5u6kbZ01SR6+cl3/3mi6QMdzcQtTXv/ZpvJSSX3tgcpacSk5Fl7Vzi6 1fUC1Dx0woW5sMMwPtVboZTodNmvgjzG8lCTZiAofIUII/QKRQ== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-10-30T17:58:20Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-10-30T17:58:20Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15231" uid: 8cf5dd1e-3540-4659-b6a5-d8bad7508d4e - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIG9PFmYEpIkwwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4MjczNTAe Fw0yNjEwMzAxNzUyMTVaFw0yODEyMjgxNzUyMTZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODI3MzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTfnXVC+pWZWm3UJcl2J+ZHhsRupJrIxj R5ZZPq63u0AHufIfdHHhRt9NNImjY5m1YHD1jPR/GDR46LkTFvnQblpH1+1biYUK ScRWNxAdWRrh0z7CdY2xIWQDkJa/IVNA7WaRWZmiM4TWTXXC2npNd5Zmp9/rIjte RSxTAblImMGs6TpUXsxShK/kT48QBbFiiunfPO4/SVILue8oEctjiW4M1P9J/X0c 4NX1TEwQljOulDG0csDpoQ8LWF7SICqSNY3bHFhibcsaitHGWHOLElaHQBv6Nqjb L+7hlrp/lbbL1iChs6hgqXnbL3qbntmtbdsKiHogR7iYXaxfEdBnAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPXYeZ z39OIZMR0s3ADniU5xxW4zAfBgNVHSMEGDAWgBTPXYeZz39OIZMR0s3ADniU5xxW 4zANBgkqhkiG9w0BAQsFAAOCAQEAPVSFma04wAfH0e/9g/SeezYoIf4FubQM8Bcs lT/8VMSC5pcYr8UIdu1wwwxTJ63HruJtpeLdWWn7VmfrFk06IlbzHc5G5G21pOEO f/G5VF7Cjcb7Wf/mjIUZJtRwhn68JtjmEUE58KidamEkyrvcovnDl70YDlPoiHxR nM36b3n6utAy/M8F3Col6J7eDD7L+nYmMeT84O8NQDSg6PQ8KtFZHQf4L72sQiET EXM+xMDCB5u6kbZ01SR6+cl3/3mi6QMdzcQtTXv/ZpvJSSX3tgcpacSk5Fl7Vzi6 1fUC1Dx0woW5sMMwPtVboZTodNmvgjzG8lCTZiAofIUII/QKRQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T17:46:05Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T17:46:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T17:52:26Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7155" uid: acadcaea-df1c-48df-aa81-41ad033597ca - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-10-30T17:45:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c1c207b7-3539-4e92-a246-b3e0adf29155"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-10-30T17:45:55Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c1c207b7-3539-4e92-a246-b3e0adf29155 resourceVersion: "2689" uid: f514ae3d-cb5b-48d8-9f8b-11cee01cfc6e kind: ConfigMapList metadata: resourceVersion: "126091"