--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:58:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"94da1ea7-1ac8-496d-a688-5f6a2f8bde7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:58:19Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 94da1ea7-1ac8-496d-a688-5f6a2f8bde7c resourceVersion: "2388" uid: 9185fef4-469a-449f-b083-1029dea21681 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:58:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T17:58:18Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2384" uid: 58cda4a3-4d01-40b0-9f14-0adb42976447 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-17T17:58:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"94da1ea7-1ac8-496d-a688-5f6a2f8bde7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:58:18Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 94da1ea7-1ac8-496d-a688-5f6a2f8bde7c resourceVersion: "2383" uid: 9956d5f9-0254-412f-bf43-ca8bc8da2a80 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIRXV8fApsi8YwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE3NTQyMloX DTM2MDkxNDE3NTQyMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfx9wCLd9PsG XOpYgrRlAKALWHeQ6m+lZ88XZXCQEKIF8J1Owigve1uCtdqInOAiAXyR7ZGXVZiL 78n905TCNfNw2el+y67zeECpqyuQsnt/uztwdqwvNuB6NHJ4czi7D+lwZBb8Wh8i Daj92g6mjcSFH8KN5pHLvX1du/0yxHOAZO4fdAcSKsAeo4t9BJYgcpI82nb7KNoh 2Iv94GG74EQanoec8JJKfzTap2Nz+/vEYGAeJ4bCtDPo4/qqoOXigdkqQHnWwLd4 Kd++GvVZuThGY/SfhEmvxE08C7w+i/1DRWapL3EgOkZRCErTJ9x4erUA3rRjFKA3 DkrEsrSFsQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAfKihSiElHnqSNlk2sePsl0V6btMkRFeK6B8MD6XgQH8JRvD6 CFtKGtus/XEDdTsXZAloXZyTKb3Gn2fUtZ4hdDANBgkqhkiG9w0BAQsFAAOCAQEA ftaJoOTQ0Sd+Oix/Bju3gBht/sI2POP4MJoYx+qmo1woCcBfAy2ZUR0fn7aryg2/ VmatQxsYcjGmyg6LlAf96dYxrNrRrUNfAV6VLBChPfWIGucUFbvrZPJlq7VJWdsJ 6jc2OTQ1jL4W1L9aeB8oka7upy5QZUMbe4k/NXDSQ207hLFRz535lyI0VBYNc5Wh OoYdnQ6hBLsbv9s1KU4qKjoKjkQKT7I8NYhOsXBa+bYVmt2pTvi9IywlOX4MkR3G b8ZDwqDlJ1C8KxcbAwFwcO6xLFmacNqdcu71UBe3hYtTsvsEIHq6eK8naTns051g FEMjIU1Q+qY/MUwzJMtosw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIUvE9ifg40T8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzE3NTUxOFoX DTI3MDkxNzE3NTUxOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOa9+8NinG5o68zMD3JJNxaKCbl6V3CMnPaMGdafDMXSrMk6FRjPUmsRtSCpiGi4 B7DF1zqxNlG/Uwxu4gXprLtu+aX5LRx/g9Dc3BhZk1+V704pxUKRrjNSeC8jM4PY j8j8PShvm1WzGi/i8hEbYcZ/F0c4KnG5Ajlq1X3/HlSySnz0NPx8UtDTPGlBdins BKoXC0nKp6LYhHtyqE6Q2MhN6TQuuzEcGvxYTD6r3BZ+jwqVzLDT++0sx+1a6ixC 438cbvT566imMrLMRIhruziYm6Zt4XnDQg4P2eYxeuabEbu0ynbTpXZc1topVNiH ADJENsBG7DZi+tmIBw2cH20CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAiM4dvq9PrDTym/pl0m/Xr2uczLSBhT8l7Vj3CY6+Lb9I9DShbmtQ0JRL 7+nqT62GTF4ivYbx8YQJ+72BTPjvTDBLBgNVHSMERDBCgEB8qKFKISUeepI2WTax 4+yXRXpu0yREV4roHwwPpeBAfwlG8PoIW0oa26z9cQN1OxdkCWhdnJMpvcafZ9S1 niF0MEsGA1UdEQREMEKCQCouYXBwcy4xMzhjNmVkMi05NmZmLTQzNDktOGMxZi0x MTlhNDVlZGUwNjEucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBABTvcS6iXsOeO16tVL1/quu7Wbh5FprpjvHkikVdNMG77CVDHVnG8WIjDUMH Mx/ZcBepsrWxeht1PW8OF0jJaFaSwWF4OXez43Onohr19HGinnYNnCbBkUFJ7GAr OyxgOT9Jvve9VqeqnPYtNzVJF9LFs6ZfifgV6QxBGoXKlFCXE1HrVY683d14Pmvg L5BQOaW+1g8ujc7E7SHPWDEPu62RWpxBp6qNASDT9i81lRIRgC3wLui/QIN3wjKo ngy3uy9C05XS+qRDkTGjQnFh41VOMDKJ4axL4GT5209cKgz2JmxZCXW+p7HQY8fR 4oET2f+6qxGiQmBk1WgoaEnDPt0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T17:58:29Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T17:58:29Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2623" uid: 30b12e33-a0d4-4b71-b754-84d80432fab6 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:58:19Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"94da1ea7-1ac8-496d-a688-5f6a2f8bde7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:58:19Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 94da1ea7-1ac8-496d-a688-5f6a2f8bde7c resourceVersion: "2392" uid: 7970459b-65b5-4484-8d4c-e1be3fcee22f - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIB6kSYZL8fRkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2ODI1MjAe Fw0yNjA5MTcxODA0MTJaFw0yODExMTUxODA0MTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjgyNTIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgOyGXOd4u4R08N16eqNP5Ud766aU3kdGT h2SYwB0iYyhmEHbi/uImzLjzjoKlh9dfym8749HwOL3Y4dUSVUgUDZIaquHYR71R FOMliWAryyuSl+CBMxiiDfmMBm5u5M/Dwn9yT7hIPhDoR2BDoWZdORa72cglvWvr o+oV5s1vTUCY/pE6g0S3nL21dXz7CxrE2sZYPHnVS+ouAI3r8JorioEGgQQGkuiD DPRXKJwRF+UNm8AV9sypsnlTDWZ7fhj/Xu7HhZU41+9sQ96iGRCMlhYcjgJt01wy TLAl7h71jmsA0MRTtcFXtbxOcOr4GzcD9iho674DqC/YG78FOAe9AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJAX2Y /Iru/MC5sv490/BligWv/zAfBgNVHSMEGDAWgBTJAX2Y/Iru/MC5sv490/BligWv /zANBgkqhkiG9w0BAQsFAAOCAQEAXlzyj7gLn0ADYkg9+Up6Xppt26Mjlz/txjYC KLWSwXSTtouzET8kXEPSn2oXjnz9vbC1+6Dz8ZGG9A35/kBOOmXInZ0zg2mSbAj8 dGmHHSNSEWmjQKah72klnOPs2YElh67F5O7kB1S/GIuxPjqLRmPBvKFuiYAKHMVd dSNxwd+swIQ0X4C11EbLC5ttbh+iK6NabOI/gY7Nrc9u+xGhXSe8mI+55mFIGSe0 9A35/Eufr5HNzTVrEBr1vst8N+dijblRaig7sy8jgT0+dtScf0pqO/cQvqjFgbtW FR8yJ5bwUaWNb4o4Q+AYuvLWt/6YA7X4fKcWnR14a/nLDVX/lA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-17T18:08:46Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-17T18:08:46Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14609" uid: a09e651e-8f65-4280-9317-d83387871566 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIB6kSYZL8fRkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTY2ODI1MjAe Fw0yNjA5MTcxODA0MTJaFw0yODExMTUxODA0MTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2NjgyNTIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgOyGXOd4u4R08N16eqNP5Ud766aU3kdGT h2SYwB0iYyhmEHbi/uImzLjzjoKlh9dfym8749HwOL3Y4dUSVUgUDZIaquHYR71R FOMliWAryyuSl+CBMxiiDfmMBm5u5M/Dwn9yT7hIPhDoR2BDoWZdORa72cglvWvr o+oV5s1vTUCY/pE6g0S3nL21dXz7CxrE2sZYPHnVS+ouAI3r8JorioEGgQQGkuiD DPRXKJwRF+UNm8AV9sypsnlTDWZ7fhj/Xu7HhZU41+9sQ96iGRCMlhYcjgJt01wy TLAl7h71jmsA0MRTtcFXtbxOcOr4GzcD9iho674DqC/YG78FOAe9AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJAX2Y /Iru/MC5sv490/BligWv/zAfBgNVHSMEGDAWgBTJAX2Y/Iru/MC5sv490/BligWv /zANBgkqhkiG9w0BAQsFAAOCAQEAXlzyj7gLn0ADYkg9+Up6Xppt26Mjlz/txjYC KLWSwXSTtouzET8kXEPSn2oXjnz9vbC1+6Dz8ZGG9A35/kBOOmXInZ0zg2mSbAj8 dGmHHSNSEWmjQKah72klnOPs2YElh67F5O7kB1S/GIuxPjqLRmPBvKFuiYAKHMVd dSNxwd+swIQ0X4C11EbLC5ttbh+iK6NabOI/gY7Nrc9u+xGhXSe8mI+55mFIGSe0 9A35/Eufr5HNzTVrEBr1vst8N+dijblRaig7sy8jgT0+dtScf0pqO/cQvqjFgbtW FR8yJ5bwUaWNb4o4Q+AYuvLWt/6YA7X4fKcWnR14a/nLDVX/lA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T17:58:28Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T17:58:28Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T18:04:26Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8324" uid: 4325fcd8-6adb-4ccd-ac0c-1a750fd80e6b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T17:58:19Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"94da1ea7-1ac8-496d-a688-5f6a2f8bde7c"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T17:58:19Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 94da1ea7-1ac8-496d-a688-5f6a2f8bde7c resourceVersion: "2390" uid: 278d7063-4557-499f-8522-5ede1f359115 kind: ConfigMapList metadata: resourceVersion: "71738"