--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T14:29:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"99307aaf-e194-40bb-bfba-fdbd1a53b4e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:29:30Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 99307aaf-e194-40bb-bfba-fdbd1a53b4e0 resourceVersion: "2671" uid: 0b19c362-1501-4728-bfa2-213695fa1536 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T14:29:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-16T14:29:30Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2663" uid: 0ac8412d-7cb7-48f1-a5b8-edc01d44927b - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-16T14:29:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"99307aaf-e194-40bb-bfba-fdbd1a53b4e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:29:30Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 99307aaf-e194-40bb-bfba-fdbd1a53b4e0 resourceVersion: "2661" uid: a77cd3a6-8405-4c29-9ef7-3d66ec66fcc1 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIW1Ol0Gaze3AwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE0MjY1M1oX DTM2MDkxMzE0MjY1M1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkV9WWmpFOmU rjhOGrJ26/GDQnZyQXX/soxixyZZMibSo2rrGhOfnD26QR2sdpBjt5pXDmAq93F8 1wWJp9/6PV5YfEUWyf6BAgXhpBsdfieG9ufzc+vrg5WRuadP81KTBURM45A380QJ IGYpS+nU7wAiOyMs6sH2CX4wo5PxfM+8DIG/t7DY1UmNcRmPZEGZPjA480pf9jE7 om++YEFibd5vCLWEXSbfnyV/K/mRuuzYkvufYPjVD9bkRAsKayn6tOnB1qhajtCM AAfzoUHS8AY3iPbe+aXNJxt3MTSSXeuTe8bBmNbSkGNVFx5KhJP2BrAkMs21Qw7i UtkKPnqLGQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA5OU2u6JxIL/LwSchRcASbuCkhyfBuihPYUbB2GmihP2nXbpN 5xM21xgB5718p9YpGSIVPRAiPcmjH0b/JCYtRTANBgkqhkiG9w0BAQsFAAOCAQEA vn6SVdLU2ggu22V99o+RX0DdgmhTl64CXJ0UMVOLE1eVUoSjI3u4NjhlIGH+1wo6 833v5cqR9Oz9dfW4g0ah/a0S3EFW/BnHNEiVoXOPNcAGCUTiyntaPZOhimEkH2+P e+WmgrBOmSCRNmtnNB7/gbrWLrb6i4zgzCcXnOCJak3yUJnlygPwbS13H9PQ9oTW WlTu4NJFqNOFm56CEabR/+h/lBdytRKmXR6Tw2TrTevLvacRBv8m1iDwswL8SYZW d+WjCPjmD9rVI+HIrq/t0UY3XYcS38EdBrz6X8ggcTCWUDUurw2cywRnbjfP6eI1 /DW2PvNqYorsyjp0pXEqlQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIbPl0iGuHn1EwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNjE0MjczMFoX DTI3MDkxNjE0MjczMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK0zpQdqBod4azXJn8ln/8F4gfMWzLhpBoI3R3qVoKO7HDQ9twFLr49lM4a6561G EAD0WALzi2Lp3F5lGM3NZB68YH6MpHNXk5XQbhCdoDUe9nDUhW5s5eqVRD9hMhDn lUu2W+gkBNNviwA05QjMafUGtHL5QtbizEbGFZPmiZ5oEZ9+2hmGKskI3mE/hFug Qqg+XfVbrtMONve/3oApYNsC0wm6P1ELRu0MdgnuNPYUKeTbedMo9jGMLjb+Xg0T YKI/D9xFhJzzttb+YR6XjfZvj1BdzXT7b3mgHynIgXDFoKYaxBlzP8ktbbGTqVSS XytaK/kQWqH1duI/gaJ5NPkCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAcC96IxRDo5epPOMeZ7GAcBM2kvATCBblkAxBh9P9YtCwjsrt/rZMs16t nOa2GXcR2vpGN+582vQqcR1tWWHoPzBLBgNVHSMERDBCgEDk5Ta7onEgv8vBJyFF wBJu4KSHJ8G6KE9hRsHYaaKE/adduk3nEzbXGAHnvXyn1ikZIhU9ECI9yaMfRv8k Ji1FMEsGA1UdEQREMEKCQCouYXBwcy41ZjhhZDAzMi1mNzgyLTQ2ZTMtYmE1Yi05 NjcwOTE4YmJjMWMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAGFeTAhQZ+BJbKydnW0hJ5dgNggUHFbprmr8GOIa36beQtp9d2yiRXnCA3YY I9jnKV7iYr3+6BWIWfOIlPRJimaf239AtiGEAxrOySHoDv/k7Bc6PcFQ5R+lERRc tyMTMUd3CsVhthX2LMyeAUxYDw8f1uavWGzlrhMhQS8pJ2J8BtMuZ/uV0S/VzKQF Q6kmafoPsXn3O+tHZ7P/lEp6zRQH389Y3KXJjRJIyZyBwfVle1JjNQ+9wQLu20qu m0uFiAekbR4ZYXIAviP82NyuMdeyyT2Oyg1aNhyJQUjoqWKJkJ9R113ZCg7/EjsU V7UmCdDCZ7ILSGuY8VZoA7GE998= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-16T14:29:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-16T14:30:08Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4322" uid: 648ca2ce-6019-4ddd-8c1d-99d4746b0ace - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T14:29:31Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"99307aaf-e194-40bb-bfba-fdbd1a53b4e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:29:31Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 99307aaf-e194-40bb-bfba-fdbd1a53b4e0 resourceVersion: "2687" uid: bbc7711b-b4c4-4ec7-8b0a-ce9f7845f121 - apiVersion: v1 data: cabundle.crt: |- -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIZuewcyLf5CswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2OTM1MTAe Fw0yNjA5MTYxNDM1NTBaFw0yODExMTQxNDM1NTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1NjkzNTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIRUjG1a3mXrQze4qyITtHJS7qdM3SpQA Ev1Ep2gSbw2wjlFLl4U2mewWlyjudRFcLSLPZLHYYveqjYApDTocCfIVxxMBVv1R JgVYj/qNgmyCepFn2DwD7dWmqSqMJMIGQB7+aNGe3g8pLVAYU+/kHijQzEHXDE8b 3/tY82YPUKsImEE1Mew9pdTAR3tEj9WyXXv/BDfoVlbSKmc3EGzC74qSj84ERQ6j kc0WbOd0OO7qZBynK4xNxnN/qT62nJFX4u865YAK+xy+aZsS66mvi5XxSFTYF/Yf QqbK2zP848Dx+8yt+6uA7We6HS54bwXgsAIDAayiyB8cchum9vfDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEfRQn Xcl2hwFR9YKtD2rTjHQgjTAfBgNVHSMEGDAWgBQEfRQnXcl2hwFR9YKtD2rTjHQg jTANBgkqhkiG9w0BAQsFAAOCAQEAB7cWUXtRhBoAaqBDv0k3z+qcga3hi6GrhJS9 KPEkkBUIKwebyHU/PdYlZoQZHXPJlrdm4WQms8otYqDu5YqnaAZbj5RYPXeTT3I+ 2+b0xbYcwW5QEH9+GaQ7q6oY5CQz07k4kesMcHmaQ8HxSlhvBKw2GhlYU4QjHQJB FN6J764T7cfC3gyG4cEjrOdLzXjWbOo2vCYZzyEOPhL+ZpmHYxagvVbcJIubIxR/ GYzPnk0hUte8RZb3ehFxpZ9qnH8Ma3hOu4OhuCUeLG+lteG/k3bqMJKBtqyyowrz 01PY9E9WaAflF37ZUo89tFo13OF75BZLELre2T0ALFxy3em/yA== -----END CERTIFICATE----- kind: ConfigMap metadata: creationTimestamp: "2026-09-16T14:41:43Z" labels: opendatahub.io/managed: "true" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:cabundle.crt: {} f:metadata: f:labels: .: {} f:opendatahub.io/managed: {} manager: manager operation: Update time: "2026-09-16T14:41:43Z" name: odh-kserve-custom-ca-bundle namespace: openshift-multus resourceVersion: "15522" uid: 83226d3a-0ede-4314-849f-02a670a3606e - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIZuewcyLf5CswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTU2OTM1MTAe Fw0yNjA5MTYxNDM1NTBaFw0yODExMTQxNDM1NTFaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk1NjkzNTEwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIRUjG1a3mXrQze4qyITtHJS7qdM3SpQA Ev1Ep2gSbw2wjlFLl4U2mewWlyjudRFcLSLPZLHYYveqjYApDTocCfIVxxMBVv1R JgVYj/qNgmyCepFn2DwD7dWmqSqMJMIGQB7+aNGe3g8pLVAYU+/kHijQzEHXDE8b 3/tY82YPUKsImEE1Mew9pdTAR3tEj9WyXXv/BDfoVlbSKmc3EGzC74qSj84ERQ6j kc0WbOd0OO7qZBynK4xNxnN/qT62nJFX4u865YAK+xy+aZsS66mvi5XxSFTYF/Yf QqbK2zP848Dx+8yt+6uA7We6HS54bwXgsAIDAayiyB8cchum9vfDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEfRQn Xcl2hwFR9YKtD2rTjHQgjTAfBgNVHSMEGDAWgBQEfRQnXcl2hwFR9YKtD2rTjHQg jTANBgkqhkiG9w0BAQsFAAOCAQEAB7cWUXtRhBoAaqBDv0k3z+qcga3hi6GrhJS9 KPEkkBUIKwebyHU/PdYlZoQZHXPJlrdm4WQms8otYqDu5YqnaAZbj5RYPXeTT3I+ 2+b0xbYcwW5QEH9+GaQ7q6oY5CQz07k4kesMcHmaQ8HxSlhvBKw2GhlYU4QjHQJB FN6J764T7cfC3gyG4cEjrOdLzXjWbOo2vCYZzyEOPhL+ZpmHYxagvVbcJIubIxR/ GYzPnk0hUte8RZb3ehFxpZ9qnH8Ma3hOu4OhuCUeLG+lteG/k3bqMJKBtqyyowrz 01PY9E9WaAflF37ZUo89tFo13OF75BZLELre2T0ALFxy3em/yA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-16T14:29:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-16T14:29:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-16T14:36:03Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8172" uid: 7d8aec4b-0ee9-4a06-9aca-d6d578f7d63c - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-16T14:29:31Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"99307aaf-e194-40bb-bfba-fdbd1a53b4e0"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-16T14:29:31Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 99307aaf-e194-40bb-bfba-fdbd1a53b4e0 resourceVersion: "2675" uid: 985ed3e0-f72a-4136-960d-9deaa71e72a2 kind: ConfigMapList metadata: resourceVersion: "71728"