--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T05:35:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c98c05c3-c763-4163-afbb-f31e9012b04d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T05:35:37Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c98c05c3-c763-4163-afbb-f31e9012b04d resourceVersion: "2800" uid: d9a0918a-32e4-4381-8b29-a97876041988 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T05:35:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-19T05:35:37Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2771" uid: 072ffe00-bb9f-4163-9082-7c2457c359bc - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-19T05:35:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"c98c05c3-c763-4163-afbb-f31e9012b04d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T05:35:37Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c98c05c3-c763-4163-afbb-f31e9012b04d resourceVersion: "2767" uid: 03f003bd-cfc8-4501-95b0-11d3bceabee4 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIem2BV3+yKaAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxOTA1MzIzOVoX DTM2MDkxNjA1MzIzOVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNhcVVgpBLya /86sdbUGG6biUJgytCt39Y9kOe56nP/E2msdIVJy0wvS/FKqJZ2qOfL/SChN57bj ThEfWGP+5BJpihOsXlZQ49RQ+/JinlG3m80ze4mJ4bW/4xgA2+vob5fkDFKLPo3X UcprIwgPWXQOeTZ6354M8nrKjYpvczr/hWBGuqd9tSt36QB9uV0CL58Dei2mzItu J0pLGOp4dAyfrEExs4GMTQpVwXwybtJYQC50WAjA9yiO6sGvfsnT2L5X88qLzQfv WfoKZicMh5C6zI9mR6Goy7gkVQ8hdV3YbetNSnV37iyZKJu3mGMQRUqQcOEQA5Yi v9VqG9TvUQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA6kaqko0Ln3NxfWXZKjrvBzZy7X1ldMgT54vhC5kyE7XUsS9f 7u2YqfYrEQ5jvk56djpvxH9gernnlqtM+bcxgDANBgkqhkiG9w0BAQsFAAOCAQEA csv1Msg8InEDhYTDcmC/S832lWWK0N+giBwqRJPbrmjNBoi7ko3YwrwpfU84hVqI Ud6wv95hnShibSTAGq1626/wlFC4nP/DPJBTYrB7WQpjwnrOHznJLKKvkyMB9k+0 Cl5ynJrnrZNh+A9PEjvV/b1/JAiv1wl44v3SnYD63hMSyqoFGBT8qfDGkaAjLRkS rfI5bLOQxmHl3UPs5XQryNgqWEwGh5EwWTsr3rhfULpT9hjKr3AI06bo2whN0PbY vrmA8apfYJBfCqT61sRY/6dgF8Em+eBvK1MBQXSwzeSq7Y6FQg9WBUg17FZWBXtj vDx+y4VWvnO8j6RWYXM3Rw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIfl5wnblyFugwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxOTA1MzMyN1oX DTI3MDkxOTA1MzMyN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANKXsYCqQdxGVGsO2WE2b90KcixvUBsXgK/PPbSAsu6zS7p7maIS/GhWLSRhS5aJ bx9TgB95GL6OhdTKMK0riBKkizU8lDWBQp6Id05dKpXnkrGPanmTWWYCLzlmvB6H cwf43dZRQtbi2+GSc/OQtVyhykVOBkA7CGPqPyND99P5ohMGoOuw4GqTjYAQUor5 SRHkfdoujszoS6B4FL98CBV6eI5o5qCkK4UEvYj4Vupi6akdWRxNrkTJVsKjsPrf YxaJage8bmR5Y9mJVWQ/WkXs63B2zCK9P+u33kxzrSQJYtaE4w5liVl1GW4vkjl2 KafOVLQMVlQT+nl2/fLdsBsCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAGAqqqd917ymX0FG+uvkCs/DYFR0Q7X1BdErlEgkPTc7DyopBsCMLZdS3 6LblccNrXnv8SMpB+GTV+vSz/6uh5jBLBgNVHSMERDBCgEDqRqqSjQufc3F9Zdkq Ou8HNnLtfWV0yBPni+ELmTITtdSxL1/u7Zip9isRDmO+Tnp2Om/Ef2B6ueeWq0z5 tzGAMEsGA1UdEQREMEKCQCouYXBwcy4zODFhZGMzMC0wZDYxLTQ4ZDItOGRjYi03 N2ZlZDFiMDczN2MucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBADx7d+Z2vhqvjaYJ8BT/V4IM743NpBO2vF/i0cxumVrEfUEITQyXpM8aXh+k tSwTNjIuSYQbmiwemMcBHkHb2IqbbDVXy5IRZ/I4ChOp/Bk3IKrmlitn5qa2fYFd qBLHjqdlx4hY10s+PeDcO1yCnsu1cTIXdOp61sz9X7knB+zHsuZFYk1p1WKvlNap 1UPBgZfDyjCerC4obiHS4b8PM5oiml9/4eo1wtgSV/hwCEIViyvZTAj6cofYuo1f Zlo+VGo5r4lm6qrCXlboi0l67d0i6JUoVlRh4hefy45H7zABqvfHI32m2aGR1IDe ths520rzUM+1aT6hj8DSHBLha4I= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-19T05:35:34Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-19T05:36:03Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4168" uid: c6a85f4d-1c5d-47b2-8dbe-fbe701afcc5d - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-19T05:35:37Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"c98c05c3-c763-4163-afbb-f31e9012b04d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T05:35:37Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c98c05c3-c763-4163-afbb-f31e9012b04d resourceVersion: "2848" uid: 6f1ab567-5f86-48ca-9529-052674b015b3 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVYkOtg93Bg8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc5NjQ5ODAe Fw0yNjA5MTkwNTQxMzdaFw0yODExMTcwNTQxMzhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3OTY0OTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcNGj2bQ3bcaPtZussfOYDHA3Ta3SKiv6 BjVYAhO6+S1991r3HiDR5+kXAOEyVF1wtzzIIItrTNoE+s2zk7zT8KPiVmDNLRh7 erGut9SbRkbqlf3kOKvnf06ANtX4dBtnhrMVtSjJUNNCDLLzuKFDShcnOOIWRgUm QpyX2977znxu/dWLRM0DkrwHpYM3CbTYpO5qkq+zwgwn73lvieZ+V8AkeIV/wk1L 3XW4SrZ3N2qqJqLgvm16e8YOKs51E0oVHC1Q5ohVmJko144XMV8LGllE1i7ZyiVD z6bulbRd0LBGk+TPS/HfzsShevg5kbmx7nmITelZ9ecnlMQe1SFFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxopMJ zbdvDShQZetP9akD7mmgejAfBgNVHSMEGDAWgBRxopMJzbdvDShQZetP9akD7mmg ejANBgkqhkiG9w0BAQsFAAOCAQEAZhUWmGxjfT/aCPiYFzrBOL6QRF5Ft2+9HL+w mHNglFNVtnp3nm6QU6tgEKDbJEMpBWEJoVCOQzKtQOhPtJWhvF3hjzHRK+fxJw0w Jzj6ijFbabk2YyB43/LnYbMzCNq0TXVPMOcgnYBPg9ZsZ5EnPzrj5DycpXP3OMoR Yl2W8LvL9QLyiBEYq8Z/mMGCzZnWHkgLRoV4BG2HqgmQuSOwy4+HdLWaJ6cN72PX tUxJgwJgDzXNa6xxcaVeYTA5HsRAyXXszShI+ld+FNEO24m0EUwmUOTOdEdtudtP 3GRQ6O7WahIGKLUFwMfF0qaFTKYJmlm2sT04cF5y/TjgL1QKyg== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-19T05:46:01Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-19T05:46:01Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "14417" uid: 6f042cb3-ff34-4173-982b-2aaa49c53e3b - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIVYkOtg93Bg8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTc5NjQ5ODAe Fw0yNjA5MTkwNTQxMzdaFw0yODExMTcwNTQxMzhaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3OTY0OTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcNGj2bQ3bcaPtZussfOYDHA3Ta3SKiv6 BjVYAhO6+S1991r3HiDR5+kXAOEyVF1wtzzIIItrTNoE+s2zk7zT8KPiVmDNLRh7 erGut9SbRkbqlf3kOKvnf06ANtX4dBtnhrMVtSjJUNNCDLLzuKFDShcnOOIWRgUm QpyX2977znxu/dWLRM0DkrwHpYM3CbTYpO5qkq+zwgwn73lvieZ+V8AkeIV/wk1L 3XW4SrZ3N2qqJqLgvm16e8YOKs51E0oVHC1Q5ohVmJko144XMV8LGllE1i7ZyiVD z6bulbRd0LBGk+TPS/HfzsShevg5kbmx7nmITelZ9ecnlMQe1SFFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxopMJ zbdvDShQZetP9akD7mmgejAfBgNVHSMEGDAWgBRxopMJzbdvDShQZetP9akD7mmg ejANBgkqhkiG9w0BAQsFAAOCAQEAZhUWmGxjfT/aCPiYFzrBOL6QRF5Ft2+9HL+w mHNglFNVtnp3nm6QU6tgEKDbJEMpBWEJoVCOQzKtQOhPtJWhvF3hjzHRK+fxJw0w Jzj6ijFbabk2YyB43/LnYbMzCNq0TXVPMOcgnYBPg9ZsZ5EnPzrj5DycpXP3OMoR Yl2W8LvL9QLyiBEYq8Z/mMGCzZnWHkgLRoV4BG2HqgmQuSOwy4+HdLWaJ6cN72PX tUxJgwJgDzXNa6xxcaVeYTA5HsRAyXXszShI+ld+FNEO24m0EUwmUOTOdEdtudtP 3GRQ6O7WahIGKLUFwMfF0qaFTKYJmlm2sT04cF5y/TjgL1QKyg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-19T05:35:34Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-19T05:35:34Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-19T05:41:50Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8117" uid: 5db459df-7de0-4f21-85f4-33004b6ff3ce - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-19T05:35:37Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"c98c05c3-c763-4163-afbb-f31e9012b04d"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-19T05:35:37Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: c98c05c3-c763-4163-afbb-f31e9012b04d resourceVersion: "2825" uid: af771948-8cac-40f5-aa7a-d2784a3881f4 kind: ConfigMapList metadata: resourceVersion: "70632"