---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-11T02:31:35Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"159c9bd2-8616-44ad-9c5a-f3459cfaf679"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-11T02:31:35Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 159c9bd2-8616-44ad-9c5a-f3459cfaf679
    resourceVersion: "2268"
    uid: 0b5b6e2e-520e-4ae8-94e0-b7ade9657654
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-11T02:31:35Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-11T02:31:35Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2262"
    uid: 14d3f636-9bf4-40e2-b335-12232496dc9f
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-11T02:31:35Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"159c9bd2-8616-44ad-9c5a-f3459cfaf679"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-11T02:31:35Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 159c9bd2-8616-44ad-9c5a-f3459cfaf679
    resourceVersion: "2261"
    uid: 9d54f954-0ea3-46f4-8bf0-7af1edc544be
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIGptcziO6IDwwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTAyMjkyMFoX
      DTM2MDkwODAyMjkyMFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFSfNgIa4uZ2
      xfw13MQM/DNPztjvIHHHdCuMKyhcX4EpcqP/jembUTalL5Eljw3SR/lu9hOde3du
      rQaMPy/sOOWEMBR+5Z8Kx9WcLn7orNssfnRwlG28PInKjllPZOc56l3B99xbrDOl
      fQ4vp5Kfvj3DJoVNZDYdMas/ADDtG4c2L5xGtOJ0bxatdwlQ86A8I95xkznz87n6
      EYIFQyFUI//iOMxLVUA4t8MB4rXipyZ+wJKYkyVRvkyY5oQRAQYkFzikJPYZF6e2
      rqG5MtbcwfM+GH6ju3n0iH5iXoBjG28bGw37fFC8oH5WC52tHXeMS6gvylRLIt6B
      bpU6jSEfYwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAfX1zaImTW/6/aaj/jxsJWYt/jek3cHR3tcjLamfffqfEWoOp
      eFB92UstlLrFh3lWnp1fwUJpSXCNWgQliYK0sjANBgkqhkiG9w0BAQsFAAOCAQEA
      mwV354NvtlbOwsJ3GVLOUecvP49GVBn3s1CNsTp2N1xZi5rbVXE1jq62o+aDVSjR
      qopbj3lHfA0lOrC9wVd+FnlIoAg4HpVQv5GSFPJyVtgj3/gfvlly+o4D0Bnej3cq
      0bx81aldt2fGWNSScYxiY6fhk3z3RK7tiHFxQYPr0Anv76UjBamE25012BtTwCfw
      aZOt/bq+poJpzQOCdIOv0amZACcfPcAg0Lb7phPVQlwqjHJ2vqMTeQoO/RFcVLdI
      1CiXV84wiqon+l93J7HFCMOGcc/TF/0XbPws6u4I4+tM9aiDu+Kns+EX8YNYApHQ
      EIPagDFMpL1Je+by/oCwIw==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIaVm7F2NbP18wDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxMTAyMjk1N1oX
      DTI3MDkxMTAyMjk1N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      ALR14X+O8uVwBSAdBbgggOxr7DrifV0gQp0US/ueGsUdBTQ3cPMBJor+x20S4f+H
      3K15HmRncty4MSe9SlIkZSTBgp51XTTBkNdvkJjAsmaagIVYtu7GuppWn1y6fRpo
      InwxYes4SHcDgPA+v5kyeUiJj7VPgOGc9vdmrNbUl1tGMJbNysUpFrHwtkNbp0RG
      yEYxRAOzIRhAQ/RsUBAh9rEHSvTEdx5sAWFOg7gDtInJqAdi28tdRtSJut5zbRPX
      00BdwhDKKb7D0T9Erg+PF9cSkDH5ol+GYOUu5+laieCwM4O5S/YpHysRC/l0ESaL
      YGmXXZAX7iu/YSCkmiL6qE8CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAsWHImlEXMw9wRDVQlT7esSCOO9dPTwfigp721NtUTdgIy8N0Obe65O7H
      L+EcmQw/j1ntHQO8tnbsbhwJ9KN1MjBLBgNVHSMERDBCgEB9fXNoiZNb/r9pqP+P
      GwlZi3+N6TdwdHe1yMtqZ99+p8Rag6l4UH3ZSy2UusWHeVaenV/BQmlJcI1aBCWJ
      grSyMEsGA1UdEQREMEKCQCouYXBwcy4yNzE1MTA5Zi1hNThjLTRhMzAtYWY5Mi00
      MjE3OGRmZTY0MzkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAFndPySm5KJru84HBL1OShfyOKBKcvji727ffImik4tccOlLHgvRb1ivRknK
      /WysZhBhaEqewjbtvUnhdWr9idFZC8AKTwUfCl0Rjzfeax0PRe+9I3AeIs+0gK9c
      GCsJjxnI2Et4J9g5ipzfe1stFMyDt8DCgllCdnnenygKDciQpwfZVZfyOzKqUuFT
      0ESPjGIewgE5qCvoEkw3eQfo1Id6QHPfbRm93dmL9P6qazO38AGbKxUD3OJJR0FR
      53Jy/4ijcvo3yvuJLyTijD3oFSIego016LO9Ya4NUxtahP94LEX8C7ZSv/BxMRcX
      lGfP1mlqncoQFF6sCZX3Ns12YiE=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-11T02:31:50Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-11T02:31:50Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "2596"
    uid: 1d4af1ff-9792-443d-acb5-7b14559f9c9d
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-11T02:31:36Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"159c9bd2-8616-44ad-9c5a-f3459cfaf679"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-11T02:31:36Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 159c9bd2-8616-44ad-9c5a-f3459cfaf679
    resourceVersion: "2272"
    uid: d2f7b25b-889a-4daa-8f81-dc6d9321e65a
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIfjGM5gmU+7MwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTA5NDUxNTAe
      Fw0yNjA5MTEwMjQxNTRaFw0yODExMDkwMjQxNTVaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODkwOTQ1MTUwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTukJ0uxzFX6H5Jw7IgUemL/T8JzwXpceN
      shQHElGV/7H9eDuaJgpIswakU6a9cV/TwtcgTOxpuGciW1ewDlvZco2T5ici4a5s
      nN4gsf/A3VBvnrbBTLVNV7s0iD3F/dKixtWH6N5OEPWdn0bhBDCcEH1YcogFw9Lp
      xIHhk/4DPOeBWdywmawdIP0AD9klcCXCfU9uXK7wuRWB/VThrKH8eJf39udS0TcH
      Lw8FBYbg1sCFPK/6L90ANHa1KghHkVqql1MTS3DTodBweEjwYl7MIMPvLeu4/3td
      Mr625wJglfes58d1I6kAEsb9Du2gkuQ1hRpoEvrU10Kpty9AOn/rAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ59bJP
      x9thcZ9GLr4SSq5pnsSSsDAfBgNVHSMEGDAWgBQ59bJPx9thcZ9GLr4SSq5pnsSS
      sDANBgkqhkiG9w0BAQsFAAOCAQEAUICCSP772cjmcE62eTzYeS+Du6WaBx58itJK
      i4AfnVZuLPYFHhyJKgpX5KRPbH8zlunjZzxvHSTGWsuxgqJz3i0kv8n4V0diW0Cv
      UgAhCmNVmS7hAwXyaN/OYKYM67LfDdmU2kO+jsZFe4qURAOQSZPxPlgiJtC6iH5Y
      pLoYj801HJigTtrlvKPREB0FvT+6E7egnMSZCnfaBXXGceGdyzstPVytbdUhGcKD
      BZarZWUcyef8/rhbC5KOfyuSdME9A4kqq8rhJ7zGcuzOB1sydHwXM6YIWgFno3dG
      /wJFgWGbs6z96YMpx184L376qDeIsEcBraksvXccsdnI42P85Q==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-11T02:31:50Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-11T02:31:50Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-11T02:42:09Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "9111"
    uid: 6337f367-7472-444b-8821-ccce33103d8e
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-11T02:31:36Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"159c9bd2-8616-44ad-9c5a-f3459cfaf679"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-11T02:31:36Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 159c9bd2-8616-44ad-9c5a-f3459cfaf679
    resourceVersion: "2269"
    uid: 2064c482-74b1-4011-8759-c327c6494b13
kind: ConfigMapList
metadata:
  resourceVersion: "17493"