---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-10T12:54:30Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"38494c33-2e5d-4a0e-bb67-710f577bc4a5"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T12:54:30Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 38494c33-2e5d-4a0e-bb67-710f577bc4a5
    resourceVersion: "2610"
    uid: dd2d8cd6-6124-4293-a9e7-6d489274b8ce
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-10T12:54:30Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-10T12:54:30Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2602"
    uid: 8b99023d-5b55-480c-bc17-f48347b0621f
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-10T12:54:30Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"38494c33-2e5d-4a0e-bb67-710f577bc4a5"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T12:54:30Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 38494c33-2e5d-4a0e-bb67-710f577bc4a5
    resourceVersion: "2601"
    uid: b1a5f783-5aa4-4e5e-b795-0adca4781188
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIYWILYS1HQTMwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDEyNTA1OVoX
      DTM2MDkwNzEyNTA1OVowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZd+zMN6xhhJ
      j7G3GoFUBJE711WpcfgcUaBFdTT2rsEwVHXOPVbq2IRJEOKpc1N9LYGJODcYlRMF
      Bl5RPvEQ2wbUQit6zSLBKcqJ47apvh+weRTskhvGuM+siRgUocBgkopJwKAtCyRN
      2IuYY/788YiHRZVW1TIg+7lyDF1baTY5Wrc6drADEW/a0B1+dD26sy7SFXO0dVFF
      D3lONfx74pfGoJnMzSAt+N/j59EqkqOxbJNxziDgcrE2fU+/9lYGFSvm6vi5yX+0
      o2FR7ZTmiDgt+NIta541FNVggM1LOPNqMr76nOA+FsZ59YMzHsqXYiljynpNz8z2
      y2qc9oPCfwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAQS6772jLigdNjMiE8oHQDKgPs20w4xHTjeLqs/zCs9kesY79
      2z/k7gfUtfsz7r9aOyrbAIDum3V+l+bMrCZj3DANBgkqhkiG9w0BAQsFAAOCAQEA
      vDpr7naUBGL4jcm7B8JRmfj2i67BBEXZY3AvoAo1nO0xoyGJ8qF9PZ0KL8qazneX
      T1GVz7qScLHRKU9frnt5rJPj9i1Y7r4A+koBzBSrWyOGb9aWyC+K8rLDhLubB+cU
      AZ6rV5A3E577pxCcR1l22IiOR9lD0fIbcoxRLKblY09huAyTtr6h/m6ujT1pXHLN
      B/z3HVIUzGbvUUeP/cys/ZL2nfNdPSVaMggEztT0iBSBRX5zJGr0Q2Fq8zQa8zFI
      lhgPw+h6lNmm5NoNVHaT4xLlrwV4u7aYVqrVv2SuEPbD0JgYSy58KaZ7VNPE58eB
      JjyYO3U3J5jrXFXjPDKo7A==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIDSbCIRxCpnEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMDEyNTE1N1oX
      DTI3MDkxMDEyNTE1N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      ALSPwVfvQMemVQ82Flqq56VrOAxnKlCaKxGc+WZmXEgyaJgUqcoq5w67/IlfTU2K
      P0XuA+0rUKkBFEeKe5r29bc0urh/z86Lgna6kKrWyqOfWlZQFWvdNaH2j7rP1n2H
      UGg3GnY0tEJ3xwikpsxEWMkcBVAD6p9qqESNjG40bMWUwXWifuYL0h1hvzOkMgZI
      Q89058guD+mGbPdLozq1UCdTc77eI5R8m/Hvh590qGK9W/GsQGfHg9w2TZmj6EUu
      0Q2T4OCWM3lLceHLnP0t6QFLdOMjrnF6p1JJfyAd0WLJmhQA6FMgRHZ8o/TWF9VD
      nK1TcxgQVF8IBqD2xU3k3IECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAB+WsVZGYky0CdpC2Jb3A5jaVYKbmb0yJo9c9ppHsQIbvK+dJAL2XatSm
      zSTy8FOfXn/tveidqW6RzuZh7QAhKzBLBgNVHSMERDBCgEBBLrvvaMuKB02MyITy
      gdAMqA+zbTDjEdON4uqz/MKz2R6xjv3bP+TuB9S1+zPuv1o7KtsAgO6bdX6X5sys
      JmPcMEsGA1UdEQREMEKCQCouYXBwcy4zOTZkYWQ5Ni0yYWFiLTQ4YjYtYWIwMy02
      N2ZkNDkzOWVlMzYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAG1h5erK4p9FxVtTK254JPPAx6iaw9IbuelFUeq5jnU7cg/9NWJ/I930jiw8
      ecmUerfNs6ZuyS6wVtN5E8X9rvWyqBKnt1vPLumnrsPSGob6u62V7NfuO/+D+IPW
      FTlzAQ+dakuelb5EmYvr7cigR8tpC6dCrJD/mVI13x4fPj5ma/ZR9Nq+AEXtxe/2
      9Z7KOmVwL0BTGWemsT6yJxbATr74GmC8WM+uWoeuIsHPogEpODy4PDgWjyjNPRNz
      iLZ/SVCL+W4+2MrRDgtE4sw1/5NwBUrOQ/E0QEMIZ92VHKMeG65biCmgKqPOWKm6
      sT3s9IMsG3LOjuW6VG9hva67yyw=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-10T12:54:46Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-10T12:54:46Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4123"
    uid: 69eca065-174a-440e-bdf3-c0b9f7e38f87
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-10T12:54:31Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"38494c33-2e5d-4a0e-bb67-710f577bc4a5"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T12:54:31Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 38494c33-2e5d-4a0e-bb67-710f577bc4a5
    resourceVersion: "2683"
    uid: 1a8da9a8-1f63-41f3-8052-f1fc1daa886f
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIIG845+TkOa0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA0NTIxOTAe
      Fw0yNjA5MTAxMzAwMThaFw0yODExMDgxMzAwMTlaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwNDUyMTkwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEGaITPf/STqiweHerJa+tCQbPQoSnqSL
      kUirNKJSeMa8R1knj8izdfroxW2iwnwaCwNCKo+ADIxzufvlEW6xmOsdrMmS9Nal
      2Td8wvFP3MOt61nywA4YTumQfxQEAvKpWCPfTA82XHuAnE5rohyVKkx/Ju4mgHr7
      xYFTZgjM+l3I5As7cpR/HkuprXs139DXe9TeQTbFnGcJStPuPWs1mppSFiCD3er/
      Iq7FqGE55ED2X+LawivE63xDOdXRF6CMrtJmkgk90m3hTVtLzXThuhHs3Zym4Rex
      +ZpOuQD4+cmQ4DY1CwZwW1mjxpn3NMe20CZEePrJFlgWwhtcw24zAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrTPBb
      ztxqRI99hnFH4yHZcy4xRDAfBgNVHSMEGDAWgBTrTPBbztxqRI99hnFH4yHZcy4x
      RDANBgkqhkiG9w0BAQsFAAOCAQEAAuHUtDwY/i9RxljUpUpf8D+TMpxAmKxUP6hr
      szNDeWkNxeWub4HHq/IrAZlugmeTNEoN4xaYdxc65blB8Lw9h784wsVv4mhG0Bz3
      J0WxCpQNbo445Dj7mJs6pm40SKRXw29IWUfmIEEaqL8rv6wKDke2GxnFXG0dVFWo
      eVonZSQBxG4V2NsD99alJH4AEnmkjHtnti8slAYiLY+I4VJmIaZZj2emeWOG1sxb
      5cGQ6T4p2DGKRHMNBUOqRJEBpHxrHBGSl5IZZeI/93k7dXPFIladUbQcqK6zvxQz
      6O10xr+/HjpOnBMFHr1AT010yo2fqiLU578Lt3jA7fc4vSkxFQ==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-10T12:54:46Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-10T12:54:46Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-10T13:00:31Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8142"
    uid: 74b9060e-52c9-41b8-a455-309d73743aec
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-10T12:54:30Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"38494c33-2e5d-4a0e-bb67-710f577bc4a5"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-10T12:54:30Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 38494c33-2e5d-4a0e-bb67-710f577bc4a5
    resourceVersion: "2615"
    uid: 376cc59d-e4fe-49b4-9274-8457756c3d85
kind: ConfigMapList
metadata:
  resourceVersion: "16319"