--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi sourcedir="${SOURCE_DIRECTORY}" log "Copying binaries from ${sourcedir}" # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \; if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-17T08:37:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"03816c50-3f29-4edb-8224-5c2d1a236e9a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T08:37:17Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 03816c50-3f29-4edb-8224-5c2d1a236e9a resourceVersion: "2592" uid: f05ca409-018a-4bd8-ac70-5dcec48764d3 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-17T08:37:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-09-17T08:37:17Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2583" uid: 5bf6af65-4076-450b-a1ec-d4df12a026fc - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.21.33 creationTimestamp: "2026-09-17T08:37:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"03816c50-3f29-4edb-8224-5c2d1a236e9a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T08:37:17Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 03816c50-3f29-4edb-8224-5c2d1a236e9a resourceVersion: "2582" uid: df5167d7-59bb-4593-9c01-49dcfb464a12 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIaICC3c34Cv8wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzA4MzQzMloX DTM2MDkxNDA4MzQzMlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Ke4h1xBjlc fgivQv6R6bs1SToBpnbRBeBDEOfsvBmak36Fb0whJ/b0IX4AEZnIu4CaVgnndord UHhJfvrBtxGcVJGNgTI/FkhXV6NamHtWWeIrCUn/nYjL4aYPS9gsi5hQxHgcky8H Gk/yT1C60ZdFtNYcQkKEC6tlGwqxSFiYfJuIxHyQbOtj5uhdjsus+ttn/eAQSvV3 fVStFqIeP/5CLL/mncaTRTnRbWF+MHVcmf7RhUUoFknCVRr9u53OoOT2aztwb4Xa KRfebhIulW9LgCaueba7+GqjcRKUQgIv9yBI6EAUaNDYQYGqS+scXGSjc2gEqJMx j4MXcModVQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRAw+H5egPy+F26IR3JL1lx2KXAvP72tLrzKCM90gmcMjuZkfqu YsCqn7roQmp6sZV7Aw9/nOXZA+u2j8mH1MQq4zANBgkqhkiG9w0BAQsFAAOCAQEA aaAYZAN0fnohRYTUeDaV2UxzR5Hf8xgtxXbuLJOUF3+Xe3JoahYzIe/WSCfufDyz K3Bi02POykeluC8aAmu3mNrFnhmVAoGI8mjybVX+1dikQZQcW9tpY/9A0GIunMBL B5akzB+R4XoEqpDhqicND00/jXIP2zpy4IjyUcytYH9aWxZIiN0VhUFtYdtt29Y8 kPwSXjAMUxE80xwRQ5KqrbDlTWz+dPbrpnqRRM94i+NZZSqShkMCtVmNYkf9IQjC 7K5UxbhqW0qwWH4zNPBOlXisTC4/X6rHgqvjOlFvq5Z5Ojvo5+eELXpMp5ztTnEH sg+iO7bJOQM6vkN8Lqq8Ew== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEADCCAuigAwIBAgIIZF4a4HneRw0wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzA4MzUwOVoX DTI3MDkxNzA4MzUwOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKNEOmtcMZRj1v3Ha/hcfRbcL52b3+7jOElgt/gNpz2aeOxCiFNlDFRkPGqKm0rJ 5HcRWz+oXvsNAnC2wK3bhoIbz2k+nxocPbZPwtkGPyZBg4/g3hBPQQtTScCcteiQ WhQlecTPKvZFhAd7PL1EbOMFDSkxh/RYhd/Yro66z96EtdSUOpXEe805NigBnppy tApxBEDTYkr53ySOSUC/HMScFCM70TexmYiHKoJX9zwSVqSnO341UFPgvTl2wbnt Mh48Qfwnz9pzyQu1a5KjF9FyHwIIhsBo//Lz8r/Qxtev3V7Qb/UTQd1t/jxu+yB0 D/O8pBwHDmrMnmav7neYybECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRATBa8eFp9QOtbXCU04wMK6dLuLYyqGQB5jIFaxnAjU3FgO0XuqKAOo+Xb EIU25c7BIvHDmHef8pPULOE3jSLusTBLBgNVHSMERDBCgEDD4fl6A/L4XbohHckv WXHYpcC8/va0uvMoIz3SCZwyO5mR+q5iwKqfuuhCanqxlXsDD3+c5dkD67aPyYfU xCrjMEsGA1UdEQREMEKCQCouYXBwcy4wNmJjMTI1Yy01ZmQxLTRhYjYtOTQ0Mi0z ZDRlYjVlNzhlYjQucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD ggEBAEMddIfNLMyZ6i0Di9Cv54W2Eo70E9Zjop99sGsaCJqgM1AGLOBZywAdnp8c Dd0tUELZVNWPxH8uFtr9bRHoqq/Wt32PIxKCAyhEagYbdA42Mru3TmLPtMIjNF4X dhOsWeeAEaa8TLo+oLtzZdZM2FJHrcRH5tZPzkrlQDGI3A7km4U3WlMSTWUY368k mX6t3szJF1D4N6LG8u96WnW6CYrBG3Fjuty8dskC8Xk7uFKSH1U0NRUd6GjJj5xc xjgkx0/HdJg3mJa9BaGH2LUHFRdYA+19ZfNzUT8PqgiK+59mX2LVGaTnjTuoKBy9 FcuMWEw8T/3akgi2tAXI+ZcuTuY= -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-09-17T08:37:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-09-17T08:38:04Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "4396" uid: d27b55ea-0cd8-4a6c-822f-6c31f96ad745 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T08:37:18Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"03816c50-3f29-4edb-8224-5c2d1a236e9a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T08:37:18Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 03816c50-3f29-4edb-8224-5c2d1a236e9a resourceVersion: "2601" uid: 8bbd6e31-068b-4448-8eb2-a86dedb9dece - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIPXu7tSYeTWYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTYzNDYyMDAe Fw0yNjA5MTcwODQzMzlaFw0yODExMTUwODQzNDBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2MzQ2MjAwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDgqrYq6saZHf6z2qh6/aZGh1J0arYkiN r++FYDHktrHc8DCpru6jXVqw+Mmtl0YLIhlaUeSrbUZuVSDitCn/r6oTNqTfULSH lx+3Vn8ttaFpAgoaAJIKG6XHF3mxmdOOASwnelJEA+QmYogxssDJNKuyme2Owm7W oJW844yEHI3j5/xKqYQUFtdBsIgnDmgB5L3sh6BhIP0dshS2oLc2nh3LVexXDL8S v3OkgYGl22CARKaeIde8Dm5uAhdqQGn5YMaFX3eaHX6S8z/HibA39Y70QDTDKdPm g6rOtVqof6X+Rtkp3IOxDXyd/yUWqRsDPh34+WixNJp7wE4GdJURAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQ1PQs jdWLewycSN1v8Y2NI3x39DAfBgNVHSMEGDAWgBRQ1PQsjdWLewycSN1v8Y2NI3x3 9DANBgkqhkiG9w0BAQsFAAOCAQEAR9Ep466fqP1yCCXyQOCmXaavbrGc5hLM8/YS NobnZpZRTkyLbrO/yTOXOpAcH9jo7UDxHxgYN6o8TIswjOB4TBE16J1KDZLjz9Of H2nskpaJt/8jSPABN4ublbk4YMzsIoP0JOrJucol4gSz7VyuhbMLfh36Tl65NYmc XvXR9DPys2e7c3EfZzYaL82hbNWL482yHuIE2eCl5FhAQS1ndzo0R/hKkPnnlmJK 7IdZzA5J0k3sA03xot2UxOzkaSF2eukJY5F0fJUxTYeAyYV2JKW/8M/A70AnecSA 1durX6CWIImMNUr/7gpUkCMiOfoygHQ44NXD+HBSSZvvV2iWSQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-09-17T08:37:14Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-09-17T08:37:14Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-09-17T08:43:53Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "8016" uid: 405b7f4a-edfb-41c3-97fa-17d2dae8be5a - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-09-17T08:37:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"03816c50-3f29-4edb-8224-5c2d1a236e9a"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-09-17T08:37:18Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 03816c50-3f29-4edb-8224-5c2d1a236e9a resourceVersion: "2598" uid: 6d5e54b7-ca50-4bd1-a812-fc430f7e7102 kind: ConfigMapList metadata: resourceVersion: "16531"