--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T08:15:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5fa3c50b-c861-4024-8ab1-f44cfce3a3c9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T08:15:24Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5fa3c50b-c861-4024-8ab1-f44cfce3a3c9 resourceVersion: "3359" uid: f586155d-c18f-4e59-8e0a-cf799e62acbd - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T08:15:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-18T08:15:24Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3339" uid: 6d4761e7-7d77-49c5-81e9-9bca7b7b3c65 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.34 creationTimestamp: "2026-09-18T08:15:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"5fa3c50b-c861-4024-8ab1-f44cfce3a3c9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T08:15:24Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5fa3c50b-c861-4024-8ab1-f44cfce3a3c9 resourceVersion: "3336" uid: 9c80f8d5-cd5e-4274-a6dc-63f285d8af17 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIDSTERrxgkbMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODA4MTI1MVoX DTM2MDkxNTA4MTI1MVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/2oQtw4en9E X9kQc+8eJI394mbpjHWR53s8uQnz/dmsOIQk09qh5SVjWC5J9LL9ttOXFBfIGJFu M3tnvqkWuXomqAlQk++EIxCeGGpw95+CTcfcx/xKTmP6WFavoK836FP0TT8LrBVR xvAzX89c23pma3Xe9fdMsY7mZTo4ohQ+/8DfNfAEdFIzP9Unyppk8j04a6KinIee vruZ6fQhBLZky7ooGfu2ErEShBarqvMZRjaW7droRF0x0s6FeJsTmv7WnJXWnMEq p81VQ3K/iOR3vV5DMQsP1GpYR2PdV/hyxLlK4OoixUuFJckWe4k9L9XCNGStddIh zFzATqRuJwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAbyIj+1zj0tXPTal6xCsnF5Fq10ttJo7qSsXLzdJFJH6O0pRf PQXQ0pmGskd1rRN4GlkLX1FHFyXxRyNvEf3S+jANBgkqhkiG9w0BAQsFAAOCAQEA iviXpLJ9dALPlPA2RrFbL9sD6lwmrKlzCQ120XRZl38mSkp5oBRBLcFzn5fIgDmH h5D4IzofqRv68jpeyrcTzJIQViIjN+LktDHdiMmowDEld+5dtA5I8ScQzYRKCc/o 5X2T5P8OPLjnTc6sJTlu8n1nCZM7H8YiEdHfpIbUxeFEu11MuZbRcj7kg/u+hRva UTqLmAIWl/7/bH7i2zDoKp7dzbIhPneXiH6tExjAc0QVPVpwuBPUETRBhYm1aQ5x 3CE6It5Cvag11p1oEgTz5stmb2BhkcpQuyOfMSu8zk63046usKvTaXgh4pAqYY4k 5z9L+lLQJ8Z25LVkP9Wqqw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIdYRBnWb3GLUwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODA4MTMyMloX DTI3MDkxODA4MTMyMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMW1jth51T45Q3pcC97+x1gp5tsYEem57AsLXZqVNzsUBndTAC/kXB9tBAFUI2P2 cIAtUrT+omDCNgjUnM0t1BxDSuMHN5Ew329oemBqLPmvIVX/VGdsalg57TYIDeRo ebZhKTgasok0fkHxnrDrXyru55iiYa8WvMEaG0mMhPR+M2h1Y4dZg5B/IVVE5JGP vtJ0lBV6tgExbYi9j5OiB4vsd7Tc8a7piRQuJerazW+0BHT7/5+UKfnvlDBnm28f 9KUqrPtkeUrvjRtC1zUwYjlDNvB8FeA9jps7gPNPJl7TDk0OjClt9zBGuaPJniy9 4rJEFncOswUfkBRhtqx1CVECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRA8DsUXMu/HGqVFSjofKPwdBktC/N1LBfgESbGtNZaqeVL7Qe71aJStY0C c4/JBPhUS58/hxRsaud3CVHAFS9d2TBLBgNVHSMERDBCgEBvIiP7XOPS1c9NqXrE KycXkWrXS20mjupKxcvN0kUkfo7SlF89BdDSmYayR3WtE3gaWQtfUUcXJfFHI28R /dL6MEsGA1UdEQREMEKCQCouYXBwcy42OGY2YmZiYy04OTlmLTQ2NDktYTY5OC05 NDA3YjUwM2IxZmMucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAKWyXxiok2KGG75Z7YOxJOaam7+FzNbk64Aa0LKakg0QtXAmreWUMJud+h2E Gd8RQY/IP2Bk4iGI7eF+pvuByrg6ZCsoDCODpDHLByPLvYoI6GHg0voxP7G5/FvZ q9qCBo7B3aLRcTHCsJ511+WfWDjG2SRAga7+u+TrSpzAZEPjEu8o9/88g4uW7XJQ v87HT67nNJyWmgtzT2rky/yLZXmV4VC0RZBfVcRgs3QFpJbKKeA5o/tKzhCmCgAQ ifbqOKvB28M0YinUwvpiTSZWBGd6Dzu07ECgQOwO4huikuEsnNglefi7sL8KzVHB nchu7IPeJ5EMwXVYGCPZAv5zNf0= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-18T08:15:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-18T08:15:54Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4298" uid: f593b3ad-9c35-478d-9ace-7b323124026d - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T08:15:24Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"5fa3c50b-c861-4024-8ab1-f44cfce3a3c9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T08:15:24Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5fa3c50b-c861-4024-8ab1-f44cfce3a3c9 resourceVersion: "3406" uid: bc2f2c4d-5874-481e-bce4-e8b3a52e77b1 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIfBLvM7UoLgYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTcxOTcwNjAe Fw0yNjA5MTgwODIxNDVaFw0yODExMTYwODIxNDZaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3MTk3MDYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsnqRl7fWjIzvzMR77y7LbyAHlSGu+STn qMNPfoSB3gCgG6Y2co3l2E9Fo41k2vm0i1uF2dK99Ms6DdQJbdmUaQfaoSmok0zN eGjph1UlnwY/zpfwrYvj7GTENnQTzrX1ZyS/RAfCqucOnYfWK4eVSY6s6TMPJrNC LquiHx7r2AoyAv3gfJU7/C9Dvba2jtsjQKBDBBkejw+Walqcjb4XAPF6q9mY5dOV KOPkcaHPBVHfgMbllxTXwLt7ckqt4XRSo9+LYx6RP2I6JN8QvvZkdyQ4htDDx1PR GKA9Z/Hdo+D5uiJaonwV5H/lGx3ZyOTdJoiMaU0kodot3rhEjQmLAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKPoqh B59og7yU1WrrdPHbfuc2LTAfBgNVHSMEGDAWgBTKPoqhB59og7yU1WrrdPHbfuc2 LTANBgkqhkiG9w0BAQsFAAOCAQEAKlvfhNDAKiyZ2buZZL4ugDjmG1BZCh4W/mHg KgURKx7zc1QBs9cCh0RDCDMw0p5pcgZa9AQonGVme406a21xWU2AFaErOl/y7lQc mR3HjfjJg9nRDEBH9WZkU4aol9hLPRfXDAPPtNBz++tr7Lzb/jDuXYVlPfzPE5Q8 gEST5fRqiHsja6C5I/+1dikErE6bV9V0AXMEJ116OAnrhsq/Rw8d8xTfpjHJqT/N O8XNlS27pyD57EaO8mslo+w3cWkuIpqbZD5ay8xErPMYCEaA85UH/cHSSPpjBl6R bxf0AVsJFX5S+4NAgv0BB5lRCPI++X0CkmobiW9tyVNYueh2sQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-18T08:15:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-18T08:15:21Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-18T08:21:58Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8110" uid: 186ad654-0d35-467a-acd9-d1477fcd8626 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-18T08:15:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"5fa3c50b-c861-4024-8ab1-f44cfce3a3c9"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-18T08:15:24Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 5fa3c50b-c861-4024-8ab1-f44cfce3a3c9 resourceVersion: "3385" uid: b14011a2-9950-48ae-9344-5243fc96809d kind: ConfigMapList metadata: resourceVersion: "16422"