--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T17:27:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ecc77b51-ce11-4a5e-94ca-2948fddf75df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:27:27Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecc77b51-ce11-4a5e-94ca-2948fddf75df resourceVersion: "2354" uid: a06c45cf-b578-4df5-a195-6c5921bcba2e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T17:27:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-11-02T17:27:27Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2352" uid: bee7230e-1448-43e1-9db9-c94270d8191b - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.22.20 creationTimestamp: "2026-11-02T17:27:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"ecc77b51-ce11-4a5e-94ca-2948fddf75df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:27:27Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecc77b51-ce11-4a5e-94ca-2948fddf75df resourceVersion: "2351" uid: d8d56bc5-e19d-422c-b754-abc1aa529b58 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIHzNIUvtwSe8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjE3MjUzNloX DTM2MTAzMDE3MjUzNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkhNbY8llmnT ZtCDVTb7M4NYLGbifHcbwfiLywMdKJ42hewwG+xCGBKRDriQyrDL1AyMKWfTkGTR ewPVFqpv58hfJCX2BdnpK5ovJl8YS40E19zScgpU0rem0aLUjhTlkgDy9fIV4bAr Xxf6I04uq9LOykRxTlwa7S/OAr0yzt26FOkJfC37deBC82hz+2Hpzwn8C38hb2H3 SBdoA7PyHOEKikkrTo84Lq/2t45hVaiI96ejJrm9X4Cx2zs2HlOVEMf6g/WfJZ1Y lQo7gDZaVjN36yP9A327HKLFXcKdLFn0cQA/tT+cPwxaeLyyCN/OifulhuUU2fFR tlPLrxBdAwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAKg/mXS46tptmELCok7ijyaqunf0XTyurHP7d/PyKp1FMydkc tTC6WA+Sf+5hCb8izjZX7x0b4W00c73dwN7vhTANBgkqhkiG9w0BAQsFAAOCAQEA AuaeWIl99eUUjb0gDh5KbVUjjpOb0b+miqZe8uFE/ple/F93GcNI11SsJnsr6EBK +tgM3fhYbY/nzaop+se5v3i+Hjw2D5s48TkYTEzOBxtj4eENk54MLZwoUWI3FBDq CUiTF2fpk4tYn+Pfo0mEHlXgb3zHXoHr8PPrYUZz1SNTYmgGDVWPgRa/FF+Hq0f5 I3oVnQXuUSfF7D5wQ2lPWmJgFo+Qsb0kk/IydaQerSLEHk7lcbk1OmS3YOMp1OzG pDMcKm02tefOMvdzYhtciWaoaqPHo6I5VyzbkkAe0N6bHySBN5fhFZXQ3xlQZmqT J80R3e5WrOzqCRYZmTN2mg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIEyzL7QblChswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMjE3MjU0NFoX DTI3MTEwMjE3MjU0NFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANBzPmlh/1uweQ/B/pQkTXqScDFvBe246wm7mLgRs/oKoPByEzVIRjd01015eMxv swB68GCumRY4AEPuheYmw8qMXJq5H3gyScSw4U8ms2/13ZTrOkznvKHE/rRuMdDb N6/2TvOndkLypj+eyiRt1nHykm2tx79ujmCWKX7rdvDqs/8bjnxjI8v9OyOIMm/4 2BYKduDZ3zsHfx9zEj1bQm+cTHugTwYVyCuJ2OSsah02T0++lnPDCL54N8sicCXT +Dfp1gsWLxrZ8Dpe4ZybecmH2ik25cvgaLqH8dU2Wz7ttXsFQJXI3nlvhWD7Mb5T MBTHvbLPCiUXc2yy2wRUYdUCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAkgFI2l85/Ow4a13XzNQEFwslEJUhnTQnVBes8/9tCyp/O7zpRpqaJ0g+ 6tbyxLY/lHbOgoUwVBWy7F/oVDCidDBLBgNVHSMERDBCgEAqD+ZdLjq2m2YQsKiT uKPJqq6d/RdPK6sc/t38/IqnUUzJ2Ry1MLpYD5J/7mEJvyLONlfvHRvhbTRzvd3A 3u+FMD4GA1UdEQQ3MDWCMyouYXBwcy4wMDY5ZGYwNTg3NGUzZjkxYWM4OC5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAVWsXa5vRiWYH x4LjqMEIMI/hXBywRawq2qWIHVfHkVOcd6aOLTJWxSEowKWapcISd1RD45mA/c4G Z/FOY5mAj9EIutgnQwjFMqMYRH4P9lq/HI2TgUYY3NjTXbCVFWhidwiPSdhZP1T5 Dnn9D2rtvTKa7AQDkKQYkXMgzjb98xbfX3sSsDgq9a0O2YWvMEhFPAibNvZRUH9k 4ipb+jqPJT7QdU87WMyljDMfw5nb2I9rDoD6U99klhhmh7l5T+azOaCLT+nHiDku bklKdagikW8ZTm77VaJJ8EMSQ0W7g64MO/TiweeqvVUtvMYoJTSQQ/GCJrhULA92 h8s7bMPA9A== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-11-02T17:27:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-11-02T17:27:43Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "2649" uid: e44ba9cc-15d9-4e2c-9fd3-4eedbc290ffd - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T17:27:27Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"ecc77b51-ce11-4a5e-94ca-2948fddf75df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:27:27Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecc77b51-ce11-4a5e-94ca-2948fddf75df resourceVersion: "2357" uid: bac0350d-24f3-4593-8d43-717935590c0c - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIB+YOq4ehmCMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY0MDc4MzAe Fw0yNjExMDIxNzMzMDJaFw0yODEyMzExNzMzMDNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2NDA3ODMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTI2Bt4a5at7mxRG52pRZZ6vYPksBXuHqn mqAB4kfLe5ZYyuQJwijFLK3friXPoGacnmTQau9XE+3TB3kmdrVH1E9Zr08hHTzk 3eKsNKU1GblPwjDdf7q/Cs3tRVOSjzkSlvgXP6mZ/9hh8hKNNdiF/ZVXV6oFpcgv iWB+r3apXF6WodzlwLu5mfXN8YxittZxn/wrjTg1uUTKoTPT8rUdZVUFGcbT1J3D zLM6M77K+OxKznEf5zzyrVWzyT+1Cg8eYi68olzZSBLRateindtwUxTykChQi1Pq 7nE3SnPB3DYb1XfkDWqdsNP27vN6KaYrGMC9piwYqZfGVxCt85I/AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKiMN3 884ofp8SHSUQuqOqivtVYzAfBgNVHSMEGDAWgBSKiMN3884ofp8SHSUQuqOqivtV YzANBgkqhkiG9w0BAQsFAAOCAQEArr0nuvm6Z58JLIZTk6eCEb4XPYRl3bxPLb2U UOy8y5E+8yStj7mgIp2IGmZS18Q/txFVZ+mRcHNtJptR1o2nRUuY41Kji5bPSYhs bvTwZv6mnqXiwJ6pB0acMHfD9TZFi6Kn7Zsv0HUxs+/QTE2mkg7N4WP+zikJJQeD cLUCJbODRovECcRaB7agFY10/S8IFryKWmskRXFUCPrwNjh/nqSE+9jVJEgK40vq NsRAFUlMQI+l8dOb60RTNEks9mgX62J6bQOosu+OfGV/JF74dTfO/JIhy/G+Pmaf 1oqvVEdMEC/ARBiZjXxjvnb2dXVLDUlXg7QB0rzg32iJvwl3Fg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-11-02T17:37:55Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-11-02T17:37:55Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16986" uid: 035b2bac-9e2a-47ea-9385-09c4a6023379 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIB+YOq4ehmCMwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY0MDc4MzAe Fw0yNjExMDIxNzMzMDJaFw0yODEyMzExNzMzMDNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2NDA3ODMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTI2Bt4a5at7mxRG52pRZZ6vYPksBXuHqn mqAB4kfLe5ZYyuQJwijFLK3friXPoGacnmTQau9XE+3TB3kmdrVH1E9Zr08hHTzk 3eKsNKU1GblPwjDdf7q/Cs3tRVOSjzkSlvgXP6mZ/9hh8hKNNdiF/ZVXV6oFpcgv iWB+r3apXF6WodzlwLu5mfXN8YxittZxn/wrjTg1uUTKoTPT8rUdZVUFGcbT1J3D zLM6M77K+OxKznEf5zzyrVWzyT+1Cg8eYi68olzZSBLRateindtwUxTykChQi1Pq 7nE3SnPB3DYb1XfkDWqdsNP27vN6KaYrGMC9piwYqZfGVxCt85I/AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKiMN3 884ofp8SHSUQuqOqivtVYzAfBgNVHSMEGDAWgBSKiMN3884ofp8SHSUQuqOqivtV YzANBgkqhkiG9w0BAQsFAAOCAQEArr0nuvm6Z58JLIZTk6eCEb4XPYRl3bxPLb2U UOy8y5E+8yStj7mgIp2IGmZS18Q/txFVZ+mRcHNtJptR1o2nRUuY41Kji5bPSYhs bvTwZv6mnqXiwJ6pB0acMHfD9TZFi6Kn7Zsv0HUxs+/QTE2mkg7N4WP+zikJJQeD cLUCJbODRovECcRaB7agFY10/S8IFryKWmskRXFUCPrwNjh/nqSE+9jVJEgK40vq NsRAFUlMQI+l8dOb60RTNEks9mgX62J6bQOosu+OfGV/JF74dTfO/JIhy/G+Pmaf 1oqvVEdMEC/ARBiZjXxjvnb2dXVLDUlXg7QB0rzg32iJvwl3Fg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-11-02T17:27:42Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-11-02T17:27:42Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-11-02T17:33:05Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6966" uid: d883ba7b-0d08-4328-9b5d-04085c3b2ede - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-11-02T17:27:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"ecc77b51-ce11-4a5e-94ca-2948fddf75df"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-11-02T17:27:27Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: ecc77b51-ce11-4a5e-94ca-2948fddf75df resourceVersion: "2356" uid: 94096dd6-585a-48be-b7aa-c793c851924f kind: ConfigMapList metadata: resourceVersion: "236241"