--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T12:41:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"77fb2332-f113-4b8a-809c-84914d5030da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:41:03Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 77fb2332-f113-4b8a-809c-84914d5030da resourceVersion: "2295" uid: 54967699-40cb-47fc-aea0-d8549ab41bfe - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T12:41:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-11T12:41:02Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2292" uid: c04a20c9-1811-4cdd-85cc-f957a251f00e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-11T12:41:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"77fb2332-f113-4b8a-809c-84914d5030da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:41:02Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 77fb2332-f113-4b8a-809c-84914d5030da resourceVersion: "2291" uid: c1761093-4f41-4244-8122-f90a75ce2b1d - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIPNR4TKUmLK4wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTEyMzg0N1oX DTM2MDkwODEyMzg0N1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHjjDOJr4vN dy5xTMobCjiGFqSpKGO3npx0UCsqmA5YSlfTdix5X5eo4Ew9nD4JPhevfZnNloxR 269j5UEXKv3KCljhcVpJam7EiuF8p4UYtnAPkHXE450o3ZNR5wACwEYOwVvK8NAj qMCCMktrGkfu7grcoHEIxPkCeRnvAOhzqWmoXu85m/IJcRwtf+O4JkHABY4miKQ0 i7JvYdYRNurEle2XIvLAY5Ck82+Ww7VC7wAM4XogxIL9FC+Q3PebvIq2DAq2ureq iW81wmIBidrNuvR7om0xZSjMlEaXjKYWBgs2adbN8gZIa5+6wgkRw/xDRi9Q5CRW f+W9y4X0UQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA6fIK0Su3aicDJu4aotGYLICA9in4gQOenYn3Rz7AQjxbtrF9 xTqGsWaCxzb/fHrKo0jLAcsnt7zMYDrXHtexJzANBgkqhkiG9w0BAQsFAAOCAQEA ah5gCm/rBglqszL/m1lIo35s39cnIUDvKCRyRYKgqRIdgIVYIOkP+FQWWL95QGVi VSsVNXGo6C8OlBaCKLJgXBZeKAgeJabJbVR31epIdjexoLwnJ+hAg9ux48JjJ6jF w87xI+Ux7gS2iUbTN5niBB5KqbojM4bRjK3natrzK4lvkqdge6kHwsVQq42Oz5hu YzwxM0ie0LdxDfCGlt2DeQif/1KW0eQL6kelpMfX7qBR73O5JujLeTAWNqq7bmbz AfLHXbZ3WRKN+DRHqTvxLjdPY9Pn3bQqvdoCPFK5YAGTh+jiQSJnhcikk4QKoqUf /HuZ0utzRHELRLahD6iZ1w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIFGxPGPobYfQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTEyMzkxNFoX DTI3MDkxMTEyMzkxNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKRuWhcwAb8k17cVbIT1SAbkt/XhvIfXBeAjwtceifGPRFUlPqd4Q8XvDb88/ZZP swhWn+uX6dLe4mnBH6c9JrU+okt7m0rBwGdPshjE/oz7/Pdj8a4RJ25kN3Gq8Mb5 Rx10alYeUC/1cvswtO/njEXfPD8Fq3N3Ec0tJkPjHCnGsbnUEDo4Ckb/f1lRmfC4 9Y54mz9NLBW1YVgeYHGmZ7k4erUdn77UlRyBUmXtZOK2kZn5kVEFvjEELaPK1QD+ RpqjLsPAtOvBhJPd1IpFK3uz/Tj4bZC8lj2Re7Ccyjc5xotYl9GyGR5yLrwHjxBF tnwYPj8QJulKoljjyQWUCNkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAXz+0E03B350Za33Mce1RXvpFF1i3qReMNNTbCdYnpeUDlx2CmE9R73Wb ZlzjWesSXnpANaRxCcYs8B78IKrbbzBLBgNVHSMERDBCgEDp8grRK7dqJwMm7hqi 0ZgsgID2KfiBA56difdHPsBCPFu2sX3FOoaxZoLHNv98esqjSMsByye3vMxgOtce 17EnMEsGA1UdEQREMEKCQCouYXBwcy4wOTA2YzkwMy1kNDZlLTQyZmEtOTY2YS03 ZGZiMTViMjA1YzkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAKdxCsL4nLH4tXGR0MBS32/lkxK5Zrhn48h7bqihyodvP1n3P26UcBxyMLyB wKo9Fops6+dNIe+BHNADng+fh9BjVW2cXGWbBmuytI3Sv9P2wLOAJMg7HIgncp7p sc7rHjxr0M06xoTdLO/SqMImOkFJgb/jASOwz1kq1QxMglNqgLxZyEEuMAcIXv28 rcxO11RSNw8k93n7H+lTpp7aDMCaFsyNuOfGPaiTjPJWjI/Gv0ZNHWq6WURElN2h rmOFPo8nFnGYY1gOXJlPf3chM8QwhvS8JIyVGJ8P0jA7s3UJlg4yTbv6FaSKPHdP aR5GccwXIIKmOllCAEycWOWlt6U= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-11T12:41:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-11T12:41:20Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "3588" uid: ed383a20-fc76-47d1-b33d-592b9a23db77 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T12:41:03Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"77fb2332-f113-4b8a-809c-84914d5030da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:41:03Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 77fb2332-f113-4b8a-809c-84914d5030da resourceVersion: "2298" uid: eb9a6cc0-36fb-4afe-bea4-991fc0a2fa96 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGi+ACuGx+swwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEzMTA4NjAe Fw0yNjA5MTExMjUxMjZaFw0yODExMDkxMjUxMjdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMzEwODYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdJ1asMXcfXY03rYHAfu5EF34+Rvz9fBR mEnm5LSXfkmCvZBpEXfQbyX1Q6ySarVolG1fLOlKjAdvXybND61Z0zrZ2r4U9aTH HVAmA5zE5CYEUuFBF2Kx1pHeSMUXy+RxJFdQf4d6Pnrsy+U6DDcXSKc7mT81BQGZ vOgeaEFnaTtsgoFpEb27ZbxHrS6o+UsxDQqt2wNrtveC8/FfcnEUz3ioN/gqxgh+ 0sUnb5IYZxsIm6ce/q9AFwX/8zogXglo+I+aitc2KLH23LXuWEx2hwJFqJ/JsI7f MAp3F/j1bNqvfyIM4VWAoE/SjlzOL4kRsgAdL/kv+YtEabRqzBPZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKh7Q1 HstvQEd/aRSYElcUY7yZijAfBgNVHSMEGDAWgBQKh7Q1HstvQEd/aRSYElcUY7yZ ijANBgkqhkiG9w0BAQsFAAOCAQEAQ53K26kFHyC2mFg8OJZ5xdUTpNSBZBWLr8N5 3b19QmrJKoxLyJs6UlXgTwyX2bY8ek4Zps82k00NRrhXVjUuO3MMgaesz47dw+NM 0Il1QjH+Rnbn46QZJMSu/1ma5yrhPZfNQyDkhd+ydsSFp8/qbIzNaDA0UckNqwwU FCKMfNQcL7a1FOX4lDc01QuUJOK0jygKHJDWKJnHFXpC99GHospTPLYxakBvNcZS /40pD4HYpig0/4GWk759dIgrNreUDHzs7AKC+2POllVp5ZtO+VTFUh/Pc0E1ZNuE ZuLVW9D9rKdJslD5hIetqXyZu7yLoUp8ER/RZpy+HM984aKPPw== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-11T12:56:18Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-11T12:56:18Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15830" uid: 5e8e7613-9b6d-4ce2-ae50-5ebf615debad - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIGi+ACuGx+swwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTEzMTA4NjAe Fw0yNjA5MTExMjUxMjZaFw0yODExMDkxMjUxMjdaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkxMzEwODYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdJ1asMXcfXY03rYHAfu5EF34+Rvz9fBR mEnm5LSXfkmCvZBpEXfQbyX1Q6ySarVolG1fLOlKjAdvXybND61Z0zrZ2r4U9aTH HVAmA5zE5CYEUuFBF2Kx1pHeSMUXy+RxJFdQf4d6Pnrsy+U6DDcXSKc7mT81BQGZ vOgeaEFnaTtsgoFpEb27ZbxHrS6o+UsxDQqt2wNrtveC8/FfcnEUz3ioN/gqxgh+ 0sUnb5IYZxsIm6ce/q9AFwX/8zogXglo+I+aitc2KLH23LXuWEx2hwJFqJ/JsI7f MAp3F/j1bNqvfyIM4VWAoE/SjlzOL4kRsgAdL/kv+YtEabRqzBPZAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKh7Q1 HstvQEd/aRSYElcUY7yZijAfBgNVHSMEGDAWgBQKh7Q1HstvQEd/aRSYElcUY7yZ ijANBgkqhkiG9w0BAQsFAAOCAQEAQ53K26kFHyC2mFg8OJZ5xdUTpNSBZBWLr8N5 3b19QmrJKoxLyJs6UlXgTwyX2bY8ek4Zps82k00NRrhXVjUuO3MMgaesz47dw+NM 0Il1QjH+Rnbn46QZJMSu/1ma5yrhPZfNQyDkhd+ydsSFp8/qbIzNaDA0UckNqwwU FCKMfNQcL7a1FOX4lDc01QuUJOK0jygKHJDWKJnHFXpC99GHospTPLYxakBvNcZS /40pD4HYpig0/4GWk759dIgrNreUDHzs7AKC+2POllVp5ZtO+VTFUh/Pc0E1ZNuE ZuLVW9D9rKdJslD5hIetqXyZu7yLoUp8ER/RZpy+HM984aKPPw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-11T12:41:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-11T12:41:20Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-11T12:51:41Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "9232" uid: db92a0e0-1b33-4c39-a0e1-fae663f78a86 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-11T12:41:03Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"77fb2332-f113-4b8a-809c-84914d5030da"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-11T12:41:03Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 77fb2332-f113-4b8a-809c-84914d5030da resourceVersion: "2296" uid: 4c7e25b4-a12a-46ba-81b0-2fabe33ab7e1 kind: ConfigMapList metadata: resourceVersion: "59347"