---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-08T08:45:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"44931165-825e-4fee-ac6a-df56c996427e"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-08T08:45:23Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 44931165-825e-4fee-ac6a-df56c996427e
    resourceVersion: "2332"
    uid: d5efb5a2-5893-49bb-8ea4-783237a3f0f4
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-08T08:45:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-08T08:45:23Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2328"
    uid: 38a58940-074d-4a50-a94d-799022272184
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.32
    creationTimestamp: "2026-09-08T08:45:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"44931165-825e-4fee-ac6a-df56c996427e"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-08T08:45:23Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 44931165-825e-4fee-ac6a-df56c996427e
    resourceVersion: "2326"
    uid: e5214798-111c-4fa7-b636-6106db5aa490
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIRiDd1uA0Z3wwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODA4NDI0MFoX
      DTM2MDkwNTA4NDI0MFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xGx2R8DAxp+
      AnR35NicPj2rm6qbH+agg8VsaSudUBw712uOa7Q+uSMQIIDR3G602LDIJ1FkKOUs
      cPVq5WzfqJtSynXCIndgG35vJjo8UBY/Qcs/y0fa1M2KoMkAMpY9IvBV+i7Ccr5M
      KNvp7/WMq0lZAmTuGuUFwO+WmrvyAf3P8ca9OH4zkHwdZnillSiEwWavxeizzLEZ
      sH7qx+C3mzaN0F8GyRwCOzqLa6Lhr4rMCBvlTsuM0y1owEFkrJbxsrHg9Q9QdkW5
      sRXxxwg5x07lz5Lg+gaGHnVoWpEfGLoKB3G5QmGmy4hYbWBDK8AYBEeK8SeOU90U
      Di82SMlamQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAfBuEh7vsneJ/545gf9pq7DSMwYOXQ/MSaPXRyj7pvWE2/X6g
      T7egF673GpoKLSwLMHLLgNrSi5qm3A2cZWCakjANBgkqhkiG9w0BAQsFAAOCAQEA
      DSWrOGTOStN6a7D8yHqGbeJNVM0GWe3DsBALrklJ07O3cr0GuPF55TRBFhUGNUXp
      b8IdhHQoMFvgnW8du2IGi0XUX/c2/W8rXDdGkquiPNtXF6csQNQqwNssRJlRojmj
      SVy0Fh/ogY6tz/2Qwk6PWlWgLo3a4guedckfA8NGG9pPaVJz5zOtWH9DURc2Oe0k
      Guxpui/z5MaIMvgjumz6q5EBF0fUzpyVV0JG+BQzhF/Rr697MW9IpczXlD4QKtia
      GeDibSBmpGinPmQB0Qyn2evQdEMEiO1/sQrPc5XY6cu4QdhISx+yyzwVvbOzc+4j
      1X1Kgxch4PZv9Uxm5jAj2w==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIN4JeLgFosiowDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkwODA4NDMxN1oX
      DTI3MDkwODA4NDMxN1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AKmXnPPKvARVgXe3GDb21Vf2n8zg16bGNFDuLay8APLMbqdg0lrJrQlXxeBoozTc
      adhDkY7PyU8/ALL5Ml+gSMqIVvytt8DbQUutB5L9+4xhAz3zfZMGT48jvHV5RPex
      w2Ob11yaNsX9bPR5PzBRfebSPTH8mrw+QI8G0zQ37yOpO4LjI/QrQf46pCVMkcTB
      +SiwZlLfEKlTZO9ZG6+GcW3XYuY7wqxXuYxyHN/+LOikCgBnjwcxlFXOSlaAA2Ns
      lVSmdTQ+z3c4c942PcZj+6OsJvirvNe3hXuWq71SV/ZpVwsc03fGIpbsfuzdl9Ad
      S/CXoMxPa1LS72NlvMHnxDcCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAeCKWi7YA2ZM6MpoKpavPHqBnwp6tbN5tNtWSRKbFkp0v9e68F8SFDawp
      4bP3ePA4+9pBPvOPaAf/6IVYkUpMyzBLBgNVHSMERDBCgEB8G4SHu+yd4n/njmB/
      2mrsNIzBg5dD8xJo9dHKPum9YTb9fqBPt6AXrvcamgotLAswcsuA2tKLmqbcDZxl
      YJqSMEsGA1UdEQREMEKCQCouYXBwcy45YjE5ZTBhOC01NjkwLTQ3MTctOGMwYS1l
      ZWEyZGNmYjllMjAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAAnDsYKMLHOty3IBMbRdPEPLI+p4B4E973G27XiOb7bW3Lj3EJAI2ddJZjrU
      VSHn1Z3FYLkHkF2mNRY/nEjfqFLqIToXlybFSw8QYOQcrLNxuZ2Cf6mSpwBouXTD
      GEd3rOqr8nUqAe4IFcWjMvJdkNICRR37iPDMmsU8EmpB5htSVNYISpuHP76IrEYV
      eo+g9cnq/CQnLzFvM+OYPe/D5IdFW5hgRzN/OUQZnBtqLbky5sXeSVi9dWc9eRX3
      U091imMOe6QhQEPACC2dQJ8jBAqX4ELBRvyZKCmd3J+xmdHHKO7GyOTkw2WDoOR5
      7Sy/sxhMG7sBLbPKF/dqEGfz9/M=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-08T08:45:20Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-08T08:46:21Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4444"
    uid: 4f8b4849-967e-4e63-bdc8-9d625137397e
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-08T08:45:23Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"44931165-825e-4fee-ac6a-df56c996427e"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-08T08:45:23Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 44931165-825e-4fee-ac6a-df56c996427e
    resourceVersion: "2346"
    uid: a7f0ad66-fb42-408e-9bd4-55b901051ebc
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIOjSmvYmxCfkwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4ODg1NzUxNzAe
      Fw0yNjA5MDgwODUxNTZaFw0yODExMDYwODUxNTdaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODg4NTc1MTcwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5Dr6dsPoR5CuNmobyRFqwnp6FfRUeug5
      heTICoXnPEoF08y39c8NITqGnZ5qiYxl2HooPj3+wi/+yeChv4fiUQQeJHCqnHzL
      lK397fI5Q6iR6BVWe7CDbuxV7qsY8ZBF7sLceQ4Xi8MpJN+ZV8mQbVoO0GzKrJd4
      fULF01nrRa4isyp6rph6FKFw8xd2MWu7piDy6YJimBR9zfCO/FOpDhpREdkcxutL
      I39SKwi0cl+3c0eyxnnHEyW3dda/im/lIycjvJ9IV1yBxE0WA/e770lbQtCMWqhV
      FK1dojr06k68wIMl2w4Got7kMTygwJIwwSxjhtFIn8A38cEtZfRtAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTafK6
      w57eXS4pqVEkCdxQppKWjjAfBgNVHSMEGDAWgBQTafK6w57eXS4pqVEkCdxQppKW
      jjANBgkqhkiG9w0BAQsFAAOCAQEAJI99HBMb1/YYh6+waOhtlwhsezrwofU9dXRI
      j1RPFidhAly5Y2UvDJNaBwi3ZKPXfdVW9G8/CJhAdlQF++yVk6YYdP9UleeIVyk3
      EyaDTUWe6wKaugh8C20PFFYDBrJxHqwzhfWIPZTdXNxSQFW0DQCGgRfyQu3lnSUT
      gA+Hglv4iaN89dmL5PbPNoytKnYjRysPtMzZw6LxJdMgAHrMD8dP+uj/ncCsDngm
      BL8eI8zTNqvzn7HCNtvi6SfnHheajJVMI773hzHGS7puwEzUnzOMhFF2iYapmkp0
      GeVwtZDj5Eztc2oRvmrV0eOMFz3jcrky/QsaOsz9RH6SjxcmqQ==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-08T08:45:20Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-08T08:45:20Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-08T08:52:13Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8363"
    uid: a0d60b12-364d-4dbe-a5d3-d1ea2b3d1c28
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-08T08:45:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"44931165-825e-4fee-ac6a-df56c996427e"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-08T08:45:23Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 44931165-825e-4fee-ac6a-df56c996427e
    resourceVersion: "2342"
    uid: 9e78ac94-8259-4e4c-bc33-c891c71496eb
kind: ConfigMapList
metadata:
  resourceVersion: "16277"