--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T10:11:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"68be1c26-8970-4544-83c2-ffe2371b51c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T10:11:54Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68be1c26-8970-4544-83c2-ffe2371b51c4 resourceVersion: "2343" uid: 99485f06-3c0a-414b-9bdc-a4d5506b06c6 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T10:11:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T10:11:54Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2338" uid: b821b7e4-7b50-4617-855a-43d05a7c9df0 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T10:11:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"68be1c26-8970-4544-83c2-ffe2371b51c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T10:11:54Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68be1c26-8970-4544-83c2-ffe2371b51c4 resourceVersion: "2337" uid: 806d2be8-29f9-4110-96ae-13b18dce9e40 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIRiFVkQv+2fUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTEwMDkzMVoX DTM2MDkxMjEwMDkzMVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xbAUd6FpgO EHu2vyfG+C75/bUZxTkMJFOTPVF+Lf42jAo2XX4QIlulLhGg6OdQL16ywcA5SZbL lEzSugiw2nv6hcV5NQ5TBgFXEKhyYfajiuJxSkd2adirjEZhQ+SZhta736LOPn61 n2k/5AIlXnHGurLkiQsCN0ZbffHd1LEkpS5KVc5kKc0zarWdUkF8WEw8zomH5j58 MtDRAnmeVhwRw/uS7/uKq8CQOHYYLKnGAcN1guRZIJHWsXmfVwhhO9rRA4fy+QCx mi2oEtXIDgJO5AXEuWLSBDPGc1Gl2C4kyEncIHWqEjzdpe+kh8/RSRLLShtS1+BZ cJ4z5NXgPQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAOmSqBYu5xf5sRXH7JCbW8Aq1e62hNV/hBUEGeVIUkvdu7uWb MpkGGcu6m6Oh76Xz8yL49FmLKDJUJd5IHoT/BTANBgkqhkiG9w0BAQsFAAOCAQEA RvcDKj5qYnA4rlM6ZsYQ0wlvzRXgnnN9q/kelKL/UtwCxx097/G6q3xZRihYymKq vTO5+Ux0ZwbN7+/m/NRSj9CtXnSWqM0DPoaqazUSrHNk0grSqIza3tau9ypssT6m +ssm+6TgowFlL9zhDhTLfbCGq7zzOGyHku2caX4DhBRMnRM8nHWgqt/qxwyCjbfS MujCenpeumdBAZiOunkf2xO6G0xy2IL1iSw7RqSzlKN5g7Dfnoh6MhDspvbbm/rV cREbi1cxhDcsmvFXQGFg5xHHZWvewRROi/s+3gIwEiSRGbHU1UcKTuHmVGvjEH7u Lp0YAkkCyqqkQnIEb+AS9A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIGSvHZkjmPqUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTEwMTAwNFoX DTI3MDkxNTEwMTAwNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANFzzMBK/HqputbITe9iZ/Eh2JYuF9oOleQTbGIMU6LeAwxaWjlD+ZS82w3/UyZ0 plzEJh9Wnq/uE/kwUWgGwS27GSyQyA1x5XwhHFWxkTuliRol4maEtERonaeOqRbV NO7SZr3mo0Et145snEfAMRHekmkghBQdwwx3c2NzjYXPBzbR5J567C9SOEaR39Xz v8bkbNEZSguwzqk4T54oDS5p9MbVTiZLmiHewKIz/iRmX5S9NkGJ63bPE/Gk/bQC RxGa27LiaNr+MDkrx+4BMCE2MXzUeKxiOq8bk5gcwyxcdBG4ldhSjjaqE3UxXP9e RusV/TnUQ1ABxpVDMYm0hNMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRARvQoDrYGd0BBPDEMW22WNcjFF0zykFqr4J+9sXOXQhzuNKZwmwscTfVp m11LirAOfdqlW+pbdr9THN/ga3XlqjBLBgNVHSMERDBCgEA6ZKoFi7nF/mxFcfsk JtbwCrV7raE1X+EFQQZ5UhSS927u5ZsymQYZy7qbo6HvpfPzIvj0WYsoMlQl3kge hP8FMEsGA1UdEQREMEKCQCouYXBwcy42ZTk4ZjNjNi00NTlmLTQxNWYtYWI0NS1h NDY3ZDkyZmQxN2EucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGwTzhP+9npv9C/2AtIM/Zs4AY5TO1IN+m2v60ktKOHp1kYCt2cM+cQMWynA Ahsq6CunADHSfyLdGI9hHhNb2I5wfoE7fnrbiwmPXj+eHu87iLgCmj4+qoIv/Qwh /VUGkaCXGwwfyFurLdmf/r/64y9l0/1MNgxOTOReiCyCZ0UOJRlj4l2ss3vkzDbj VdzGga1gqEopyPqPunG2r7QWW7blFsYfNPPgfI2hd9S3M/T8ZF5F3KLWZvPGIunT S/vyyrYzoDKuCBv8+bWA+Oj4yD2upoTKmLESDCbH2GbQIoYqS6QEjR4U3NP8+JxF UED6qp1qGmOFAOb+VwYeLG3KYJ0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T10:11:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T10:12:13Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3849" uid: fc3ccf2c-c65b-4253-ac26-f98d30144847 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T10:11:54Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"68be1c26-8970-4544-83c2-ffe2371b51c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T10:11:54Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68be1c26-8970-4544-83c2-ffe2371b51c4 resourceVersion: "2347" uid: 33e6339f-9990-4a63-a6da-3ed12034b293 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIOYD91TySedgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ2NzUxMTAe Fw0yNjA5MTUxMDE4MzBaFw0yODExMTMxMDE4MzFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0Njc1MTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVn7Qd8yHbXfzd1bR83fF8rHqNHlWQB/QG ch1iu2fn/d0PQr9ZrG1rs6XqCTYMxV/fQw+82jpxX3+eruPAfOZxXG5ORQ00jH+W mZDnomublvh2F9g/nloU7+lKrgceS680jLKHTp5X/3vmmZY20GmKL4lU2CFEb7nl LOxEoYkYye3Cy+U3SAhgijmchwTQzDUGQPM/j3B989Uq2+ZPMX9dEzXsMTlWM9ju AaeNcvdybZRiTqNFtVPVE0k+c7B/vQ/UCTYMgydY6+gG3TZEdL2P+38gZC7n1jMy s7zHQ+1JiUZGYZLzcKgzWZy/+b8zhRVzfPPnIH1boZ7sYJy/XCfPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ816py E/2fnp9PP/DV+L7Z08ZwYzAfBgNVHSMEGDAWgBQ816pyE/2fnp9PP/DV+L7Z08Zw YzANBgkqhkiG9w0BAQsFAAOCAQEAgvfya49HG8vwVl8KVHuOXCGQDd2uDappkZrQ fywOk43zq2KHP8QKSKteqrs45Ob9b+a/gOwkeAjidE9620TE3CZD5VcWatjmup0O EP7F/7ujM267zqF4whEJl2OL0lktjRWb1JZh9D4T3CQs+EGC3ERDcRFwbvVCumSQ qSyH9UDmM40SA4KLotP3LICUrnIKRjU4N73YiT/Xi4smNVWPimELfjNRM+Qwfn0v vokkxLucxzreReg4nrtEu3h++yHyPGw9WnKxJhFu7r6xtQ6G3orUWxG4M+gbsmCW VlyzpkVNmzx5gl3Vm0rmuZWA3Hkic5qFpNdF9lrMsg3N1buCpw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T10:23:50Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T10:23:50Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15324" uid: a25a2aa4-d31f-45ed-995f-de5b4c9a3e46 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIOYD91TySedgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTQ2NzUxMTAe Fw0yNjA5MTUxMDE4MzBaFw0yODExMTMxMDE4MzFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk0Njc1MTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVn7Qd8yHbXfzd1bR83fF8rHqNHlWQB/QG ch1iu2fn/d0PQr9ZrG1rs6XqCTYMxV/fQw+82jpxX3+eruPAfOZxXG5ORQ00jH+W mZDnomublvh2F9g/nloU7+lKrgceS680jLKHTp5X/3vmmZY20GmKL4lU2CFEb7nl LOxEoYkYye3Cy+U3SAhgijmchwTQzDUGQPM/j3B989Uq2+ZPMX9dEzXsMTlWM9ju AaeNcvdybZRiTqNFtVPVE0k+c7B/vQ/UCTYMgydY6+gG3TZEdL2P+38gZC7n1jMy s7zHQ+1JiUZGYZLzcKgzWZy/+b8zhRVzfPPnIH1boZ7sYJy/XCfPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ816py E/2fnp9PP/DV+L7Z08ZwYzAfBgNVHSMEGDAWgBQ816pyE/2fnp9PP/DV+L7Z08Zw YzANBgkqhkiG9w0BAQsFAAOCAQEAgvfya49HG8vwVl8KVHuOXCGQDd2uDappkZrQ fywOk43zq2KHP8QKSKteqrs45Ob9b+a/gOwkeAjidE9620TE3CZD5VcWatjmup0O EP7F/7ujM267zqF4whEJl2OL0lktjRWb1JZh9D4T3CQs+EGC3ERDcRFwbvVCumSQ qSyH9UDmM40SA4KLotP3LICUrnIKRjU4N73YiT/Xi4smNVWPimELfjNRM+Qwfn0v vokkxLucxzreReg4nrtEu3h++yHyPGw9WnKxJhFu7r6xtQ6G3orUWxG4M+gbsmCW VlyzpkVNmzx5gl3Vm0rmuZWA3Hkic5qFpNdF9lrMsg3N1buCpw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T10:11:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T10:11:51Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T10:18:42Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "7882" uid: 589d1fb8-374a-4b26-8b04-6de06f9b8b46 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T10:11:54Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"68be1c26-8970-4544-83c2-ffe2371b51c4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T10:11:54Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 68be1c26-8970-4544-83c2-ffe2371b51c4 resourceVersion: "2345" uid: 2e8a5419-7e5a-4369-a663-abc5fca07f35 kind: ConfigMapList metadata: resourceVersion: "72796"