--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T21:19:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"2adcaa62-6acb-4829-97fd-2525332f07dc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T21:19:56Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2adcaa62-6acb-4829-97fd-2525332f07dc resourceVersion: "2458" uid: bd5ac3b9-977d-4970-b11f-b3500dd44330 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T21:19:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-15T21:19:56Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2413" uid: acc705f2-9406-4624-b92d-944d1d453125 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-15T21:19:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"2adcaa62-6acb-4829-97fd-2525332f07dc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T21:19:56Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2adcaa62-6acb-4829-97fd-2525332f07dc resourceVersion: "2412" uid: 1538271d-eb7e-49b3-86a0-6e6f0151a7bd - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIaaoRRYzGzgcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTIxMTcyOVoX DTM2MDkxMjIxMTcyOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/d/bJPYzJ5O Qpt/K2LBUCugRgmHxhPgugDQ3iPsWDEjCuNpSKEWBQtQY2C0VqVLHBXuDQikcCuv s4laUzuxYtII4ajDcc604Ni57LepR+W8vVHigsek07vGcfSBbVzfTK8wWZCrzPAn LtxvXDF3jaEJmIdjcEpclIYhaY1Da7zFCZkgryuLU3gWEp7DnHwFSy8k01xSzDpq MIRDRmKvtB1W8lj2/ULTLDxw7qFEWSQxqfjXUe5LRpG+vZkZHPDc8qHYBv60GxCl qibq5lUP9EDhveQodSh/13AUqdY5+IgPXRhmGoTZtRm1oZ+NiUn09AYPIQWSji/n qMBOom8qYwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAVITOhQtMh9uxVW7/CXgo3LH5bXcWE3I9q2eXku8Phchv9hMP 06ELMpF1wXxiwYjDoxIswmIHhaF7reKv42VJJTANBgkqhkiG9w0BAQsFAAOCAQEA crHYJLGLEZKhGjv5NeKETtRrosFytfM4tzeWWDIPLt4C+UmDffZ7M3x3qSm7+ROD zKNf2q32TykFGDvBuuKhYsnQ6bG0ViT0ToCot49vzgG6KNvVTy9gVwUKQAQXnFYr zRLx+PmlyIo9yTL3jaKqYsvznIf7t1eJNEmmhohbaOzfapERjAFz706nZrHZOq6o 7SpinAcvx3cp/8Dr98N7P2hmHQerAABAvb6OM1sea9BXF+4HS5ZVHqtbCGZ9+vaE SraZwpRSEouWA+6ePPJEdwvhps6rbx+KgkudBfxIWIT5DC5Q4VJdRIE9DOF2zww5 5LeZXhziWdkL60prshs6qg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIRgwFbUfAiH0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNTIxMTgwM1oX DTI3MDkxNTIxMTgwM1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMBNQpQroY4WmeR1fgb5JcOWjfcqNlnmDRM3SXZY89mz1h8joBi0Ht9OEKrgCt83 g09oIwsHkXoFMNCdnHv/CuBwus7rw4pKa0RUKKqYThX8TcqcskaMZe2QENg4Mvwa x2A+1Rh9axl1dBFUzEiY5K/MIU0EC2c5/5mGh3JvF5OEzLlqjNrWkJI4tS4cDdNt 5tsFDOy8wbHtViyP3HrwTYP/dg74mrBNNWr4U7eWQpyqIXXbUUWFPqAnE+2NQG/5 nhFS9sqkrBYu3Cuq750tj9jxVZiCeOb1rzzEYHMb6NGpFyI7CevKYPPPkDe8/ibP KOo3HISq+31lpWl+IVHcNmcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAi6SEz4rjExhsaCe/2oihxoqwV/3HVXaylrkgZZFsqRnZv2Lq5a9nu+W/ TRDe8MtDML1mgKDgj15wdPr2WYQ49zBLBgNVHSMERDBCgEBUhM6FC0yH27FVbv8J eCjcsfltdxYTcj2rZ5eS7w+FyG/2Ew/ToQsykXXBfGLBiMOjEizCYgeFoXut4q/j ZUklMEsGA1UdEQREMEKCQCouYXBwcy45YmM5MjIwYy0xYTk1LTRlZTgtOTdlYS1l OTlmMGIyZWQxYTgucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAHb527GNxUpltxoDTbXVljJEJSIg09mFax8xquq5qQJhwNxMfxm6nGPndT2J lxeeaVYD6U0dK05Z3rYeT9vqQn25ziY2AKlF/RWyChQCjuGfRTyaAfChmlbKpwM6 Ef4cgwPeeMAO6ZgNGd3gPAN3+byb0/WeNknQICyL5uvS0MUab3iYUyGknwkS/sco YiUJT8Lbjpr3TZstSkGGX1HD3sGy9lNojxfjyzR+n51/zPNmdfwlK5fLv5rdR1OL HWUZ0Tj2ilIOZVzsnzzhkcGFtcVvjR9aWTLRQNgjx+axxgnIZ1OEMREYsXCCD07y YKy4a2ugvAA3DiGejTxuB6MnjLo= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-15T21:19:53Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-15T21:20:47Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4423" uid: 2a95a4f6-9512-43c0-b4d9-84c20cfd7658 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T21:19:56Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"2adcaa62-6acb-4829-97fd-2525332f07dc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T21:19:56Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2adcaa62-6acb-4829-97fd-2525332f07dc resourceVersion: "2474" uid: 5e21dfd5-e3c4-4fb2-987f-23dd11c878fa - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQkha3jeKrREwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTUwNzU5MzAe Fw0yNjA5MTUyMTI2MzNaFw0yODExMTMyMTI2MzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1MDc1OTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr85PWhfWsYEdy0spyaexne6olKsoX9oBH K9CNa0WF9o62ttsqXmU9V0gpemCfDMjvIA6O43yf2us9m3hUBaE233SqtejoYGQo VqoZIJzd2AYf4KO5M1jjjK9wJjj7g2OCI8jSPu46ZmaJziClB1OhmZJOEKq+v5FR Au1hgZhRgDE1oDe5FcKCHFIkTXq//sSoM8e9E91Hjx7IhxczmA0ECrP+h4qLqyzV JNiHaxcATaGMKZiDYiN6Lznc6TqB4emwKaTQY+AF6U2dZCSEtyU81bVeUWylJy3h xIoL6LIooZCyBUbT1r8Fb2QspyuNMW1XHdzkkJbjYhpkVdhajVfPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3Gchh W60Wr7JHBal4JnACLQgIBjAfBgNVHSMEGDAWgBQ3GchhW60Wr7JHBal4JnACLQgI BjANBgkqhkiG9w0BAQsFAAOCAQEAlLmo4nDtkrLXihEDHdUAXhDIdHy2JOto153v YQtGJzkeOcQQN1AC5gZyt+NLW3oO0wj79cs+kDht5FPCowo5JTHIXzV4QsGqX8WX OiCQenaX6wGfZe1gkKRKsN9CK0r72Q76xwMjYL2OPQ2+Q3NmL0j2JUBeCjuoY8KD lu2A7IDWwbdRr5AroftbTaO8z/IuoJy+PE32YN2XQk6djTLK22+IrNdtIaJ7xYEI Kl/MkRGCmginouMUU+/cR4+xUWUuR19j36xtsd0DK+JuiOgQZ/Bsp2C4Y01pMlI1 3dy5mGTSrW/P1RQfi54OCSz8HcO/mf+/t4kHJsUhVOmux0P3Gg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-15T21:32:27Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-15T21:32:27Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15406" uid: 37505beb-5a2b-436d-adda-d94e790b47f9 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIQkha3jeKrREwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTUwNzU5MzAe Fw0yNjA5MTUyMTI2MzNaFw0yODExMTMyMTI2MzRaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1MDc1OTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr85PWhfWsYEdy0spyaexne6olKsoX9oBH K9CNa0WF9o62ttsqXmU9V0gpemCfDMjvIA6O43yf2us9m3hUBaE233SqtejoYGQo VqoZIJzd2AYf4KO5M1jjjK9wJjj7g2OCI8jSPu46ZmaJziClB1OhmZJOEKq+v5FR Au1hgZhRgDE1oDe5FcKCHFIkTXq//sSoM8e9E91Hjx7IhxczmA0ECrP+h4qLqyzV JNiHaxcATaGMKZiDYiN6Lznc6TqB4emwKaTQY+AF6U2dZCSEtyU81bVeUWylJy3h xIoL6LIooZCyBUbT1r8Fb2QspyuNMW1XHdzkkJbjYhpkVdhajVfPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3Gchh W60Wr7JHBal4JnACLQgIBjAfBgNVHSMEGDAWgBQ3GchhW60Wr7JHBal4JnACLQgI BjANBgkqhkiG9w0BAQsFAAOCAQEAlLmo4nDtkrLXihEDHdUAXhDIdHy2JOto153v YQtGJzkeOcQQN1AC5gZyt+NLW3oO0wj79cs+kDht5FPCowo5JTHIXzV4QsGqX8WX OiCQenaX6wGfZe1gkKRKsN9CK0r72Q76xwMjYL2OPQ2+Q3NmL0j2JUBeCjuoY8KD lu2A7IDWwbdRr5AroftbTaO8z/IuoJy+PE32YN2XQk6djTLK22+IrNdtIaJ7xYEI Kl/MkRGCmginouMUU+/cR4+xUWUuR19j36xtsd0DK+JuiOgQZ/Bsp2C4Y01pMlI1 3dy5mGTSrW/P1RQfi54OCSz8HcO/mf+/t4kHJsUhVOmux0P3Gg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-15T21:19:53Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-15T21:19:53Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-15T21:26:48Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8338" uid: bbc1b306-43db-4b10-9d86-5813d4432986 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-15T21:19:56Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"2adcaa62-6acb-4829-97fd-2525332f07dc"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-15T21:19:56Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2adcaa62-6acb-4829-97fd-2525332f07dc resourceVersion: "2468" uid: c1b10593-5e75-40c8-9051-a58590538b50 kind: ConfigMapList metadata: resourceVersion: "74438"