--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:02:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"2a616ffd-e7e5-4dba-8658-d2930877b6f0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:02:35Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2a616ffd-e7e5-4dba-8658-d2930877b6f0 resourceVersion: "2513" uid: ec9e68c1-6528-49c1-a964-e343c3880a50 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:02:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-08T15:02:35Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2504" uid: 5f567d1b-094c-4267-86ff-37bae7160762 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.32 creationTimestamp: "2026-09-08T15:02:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"2a616ffd-e7e5-4dba-8658-d2930877b6f0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:02:35Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2a616ffd-e7e5-4dba-8658-d2930877b6f0 resourceVersion: "2503" uid: 0bbaebd1-1c54-4861-8eaa-5bdc66c9ae84 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIf2lcXeRM1nIwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODE0NTk1NloX DTM2MDkwNTE0NTk1NlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KmP2WErn8Bx WcE9FaKR8dONcWPFau1l8pYJJ5wNQPzNlJPnfzqoqsPmh+LAnyD3CibUrh2PvESU BgXpWUqC5rjd7W7C6ujJQr5hKbLuCQ1ph0xeXcCAy2DZ1MX+WcnqeSoKLaC6tIPx N4ttffgIUzbd5ogaiZgaQJBIXElpk1oStrUoesK13I/JCqYt5aUoJD/SS6Nuk9dK 6v6dME3JsyNGNuIB7h+awQNBRp9CnpW5TnM0ydyEpvhOkixdneNG9BeL4uzXyMVN dU6LZp2X2vQF8lMG3K5V7Z3L0bRpv3s3i8fAdmHGUVD7XdXNcjRYvQYFE1zdZt/E 1TAF/S1b9QIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA3sXptW2SqZEXhkSe2au183MoHxE6PTWLAVuUvLHVq2IIcrdQ XVJFhSdbQ2UQLHYKJJ7ZAQFBjnzPm1pe0VkRfjANBgkqhkiG9w0BAQsFAAOCAQEA hUuDKBxurNdggLJ8uha/8bln/UMcyqsk+1z/JihzWaUtXUEUHJvPIOAlTSAWiGNq 3hVZx6Dhs/wI0lq7wy0qeslboMCVJqBH6xKJW5shtNMlv0ieNKN5u54DjPyWWQ49 7jgBChP9bGmEQZ1iTaAcH2JkfrgTxmOfS5pEYp4b7ZNynNONXVYjIOCRy14TOtu+ S7bFZnudCWVKPWSJrVrb7s3Oqrlfye5NbUXMjs1jdFsJrxQNVenV4Ll3Fw91r3qh k4Aemdpa/B5WqwbN68MrfGw/erG6MogcKb8SBaxHWuZie4ZPQ3vDbOGDYqR8jcD3 sZhRxFNJUnm7wMzW2VxvtQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIIr34f7fZQe8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODE1MDAzOFoX DTI3MDkwODE1MDAzOFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMwF+NAc8WthXHoKCiWlHfftJtBoxyFQ8ArKteP6B2oaCqa8yiI04nnOiMKfpS1H DYByrn3RLYrwhCWAaNEazLo4Eq+ZV53t9umH/JTKQNfWbHx5AIN1Sy81z4friVq7 Ntm3s6dzw3ze0eFsSzLzsyKAG7dPC0a5+wMpvvproVfsTPMdcbOgKMbHSqkU8d+E BTM7Mmv82dfBpATaWyeCkyDwNodq9bVlXDzZjRnQXL24cZhqbnResr9mSaSe29t8 z9+lebvYyY+j8eJpLV0A0+w/NMBUUJIUyUf8S6iNBDQdKbekBQtHqb6z1QujSOWr 6uD3wLaVQY2OThWUpQ3EvcMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAh4a9ZlO3WJxt4pf0YhloQndmOcCfbHS8iFu+pPD4s/SO+tIeHmBCHezY CYd7BtRYS34AHchBGf6YhZFx9EIy/jBLBgNVHSMERDBCgEDexem1bZKpkReGRJ7Z q7XzcygfETo9NYsBW5S8sdWrYghyt1BdUkWFJ1tDZRAsdgokntkBAUGOfM+bWl7R WRF+MEsGA1UdEQREMEKCQCouYXBwcy40MGJlYWIxZi00M2RiLTQ3NjctODYyNi1m MGY2YzU5MjY5ZGIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAHpDWXiVr4qzNAUIiXgZTnIBii49XCchAZm0DSzIdMgr7/OVUyaSYINqAhuO QbN0aGLDcTEmMuvexoCIqpe8l0aDo1lw+4Zw9XrDRpSf01fJyaPO5KvAbxp7hlLf x9QGwmbGQpIoVr6vHOgZ7DxsN/Ned+LKFB2uLcxBWZTNnOrtxYgPEipDjjmBpK6J xR4hli+YbWIPCRSwF/TTaxNyKP51Xxis63Lc19acxyQaOmwZQYtUQbuQIZu/gdao iTfEfJHlpZ4Cnoly0JFCZn4yov6x+XnSVtURg/yJcUlV4aT6umI/PaRMsOKlsvab FhqTMU1lg+MxkHK3Ex+gIsCr0bI= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-08T15:02:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-08T15:02:51Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3755" uid: 4b9460c9-9660-4f93-8296-5f40f1b83c02 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:02:36Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"2a616ffd-e7e5-4dba-8658-d2930877b6f0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:02:36Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2a616ffd-e7e5-4dba-8658-d2930877b6f0 resourceVersion: "2540" uid: 90ee8d3a-18f0-491e-8a24-b02dbe26110b - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDDL2W58bNNEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg4MDM3NzAe Fw0yNjA5MDgxNTEyNTdaFw0yODExMDYxNTEyNThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4ODAzNzcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeQf6EquaFrOg0UC4Qy2AiHr5WTKzvWnh 8gHphVkvxOzq7FvhVPjCvOOWC9VxZk6tCO69Jz8fF9s64wkA+SdovKRH3EwqF/Qy OK7x6yK/9j/psH6mhWJDgqGE5W7V8UgPkAC+gr7d1KqJS0BeiBk2XEMG6nrTLPu1 LPqai0Fr7pPDlavYkZ9SGQtewil2SwEllfIU1vG6FgOhX8YmM8rHJUVZCV3nER9z 9vC57lVOndLCfsURAWkHnC0ei2C8U1rlrYVZp6eLStstBSCB85u/5/ErC/n/NSkp O2+ShqK4DM1Tppz70GJXcRDsrbewiBQNLei3BKv1RRnw23TjankdAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9I3QT 0ZGgrkeQnabtNSyq72L4ojAfBgNVHSMEGDAWgBT9I3QT0ZGgrkeQnabtNSyq72L4 ojANBgkqhkiG9w0BAQsFAAOCAQEAuBn5nrJbgwnM2+ItzocGwzSGASyJABDba2LN E1afKx2P6i/6bWGZn5tdkf2Ymxxke9FemHNgFvT7EeOCAj7c8alSYIQagO+pkh21 rdeLgors9wQ927aVPqvg0U3EhVL0Yl00FXKnN/bU6/Xi0t6LRM3zYLwZLdjkVRm6 2Wh6dRbRlBtlyn8ml53qG3gx9JoQncBTzmFr55/VK2xhKX605GduPc2p16v5EbA8 Vnc9obixmnp51ljpSg10Q5FxjKyPoWtuEnUAEiFFAk8GbLsVb7ThyQD7s9+gD/+d xUGoxjJZglDL9yc/iwDHVA13C+rf3alaGRTYHXfHd/fIskY2Ig== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:19:06Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-08T15:19:06Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "16157" uid: 01bdc623-5c30-4dd9-b38b-a51b9962b5a2 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIDDL2W58bNNEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg4MDM3NzAe Fw0yNjA5MDgxNTEyNTdaFw0yODExMDYxNTEyNThaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4ODAzNzcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeQf6EquaFrOg0UC4Qy2AiHr5WTKzvWnh 8gHphVkvxOzq7FvhVPjCvOOWC9VxZk6tCO69Jz8fF9s64wkA+SdovKRH3EwqF/Qy OK7x6yK/9j/psH6mhWJDgqGE5W7V8UgPkAC+gr7d1KqJS0BeiBk2XEMG6nrTLPu1 LPqai0Fr7pPDlavYkZ9SGQtewil2SwEllfIU1vG6FgOhX8YmM8rHJUVZCV3nER9z 9vC57lVOndLCfsURAWkHnC0ei2C8U1rlrYVZp6eLStstBSCB85u/5/ErC/n/NSkp O2+ShqK4DM1Tppz70GJXcRDsrbewiBQNLei3BKv1RRnw23TjankdAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9I3QT 0ZGgrkeQnabtNSyq72L4ojAfBgNVHSMEGDAWgBT9I3QT0ZGgrkeQnabtNSyq72L4 ojANBgkqhkiG9w0BAQsFAAOCAQEAuBn5nrJbgwnM2+ItzocGwzSGASyJABDba2LN E1afKx2P6i/6bWGZn5tdkf2Ymxxke9FemHNgFvT7EeOCAj7c8alSYIQagO+pkh21 rdeLgors9wQ927aVPqvg0U3EhVL0Yl00FXKnN/bU6/Xi0t6LRM3zYLwZLdjkVRm6 2Wh6dRbRlBtlyn8ml53qG3gx9JoQncBTzmFr55/VK2xhKX605GduPc2p16v5EbA8 Vnc9obixmnp51ljpSg10Q5FxjKyPoWtuEnUAEiFFAk8GbLsVb7ThyQD7s9+gD/+d xUGoxjJZglDL9yc/iwDHVA13C+rf3alaGRTYHXfHd/fIskY2Ig== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-08T15:02:51Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-08T15:02:51Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-08T15:13:09Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9323" uid: bff688ce-7b6f-432a-839c-2cd6c72d6db1 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-08T15:02:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"2a616ffd-e7e5-4dba-8658-d2930877b6f0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-08T15:02:35Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 2a616ffd-e7e5-4dba-8658-d2930877b6f0 resourceVersion: "2521" uid: 7b7aacf7-8441-44ea-91a2-dcb8c7502571 kind: ConfigMapList metadata: resourceVersion: "59474"