---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.22.20
    creationTimestamp: "2026-11-03T05:48:03Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"91ba9536-42d0-4509-a067-8a885e4d59cd"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-03T05:48:03Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 91ba9536-42d0-4509-a067-8a885e4d59cd
    resourceVersion: "2556"
    uid: 3532f88c-6309-496b-a0e1-eaa16e6cab33
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.22.20
    creationTimestamp: "2026-11-03T05:48:03Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-11-03T05:48:03Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2550"
    uid: c82a7422-c7e1-48c8-a230-62f798745623
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.22.20
    creationTimestamp: "2026-11-03T05:48:03Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"91ba9536-42d0-4509-a067-8a885e4d59cd"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-03T05:48:03Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 91ba9536-42d0-4509-a067-8a885e4d59cd
    resourceVersion: "2549"
    uid: 985f8b81-145b-4796-99aa-91da96c70a26
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIUn5ISTGDepcwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzA1NDU1OFoX
      DTM2MTAzMTA1NDU1OFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn2ACL8wS/Nm
      3A89Q7pmLhDHlMoIQhT0mF4oDipEMN3dXYIV8MwhWRygazrW79PfvyUb7FRFEkvy
      O3UJfACMVj3oKOwqVrt/9G5DLWKKRn58MTUfKYJSnBwi8MBFwglf7PH1FFYvY0J6
      F/GraGvsHPN1y3NovaZObzzAELYzdYoTel6ZJsCMlhr0f9mNS/uiuNE58hsHWmBP
      ExHeGtKMTF+De0TkjvBOT6nxR9BU4S+gVmadWrWbXe2XGsgrfBDuESXFD086ca9p
      TQDGFftZU0vST1giOmluLTAblya9IyhHfmV48sGpaYgxTqPPbgt3lBgWyCD7EVB3
      rbZmEmprpwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAAqKvF5BORqJwY4ib1vHUURo/g84I4EgmDJA2LjJGT7yDKCpR
      K8zmfk5Sa8KOl1sTZAx+tX8S4CeUb/1+6I4qATANBgkqhkiG9w0BAQsFAAOCAQEA
      hfQZeDvxM0dJ2L2CI7auMJ+Bb33b7fgBv0+BVZjP+nODo7g+BUAPv9VZ9pdV+gyh
      walZCaCCovX5aV7W/qkbjMkyAGcdNPTgr2KaSXerp12IoPtByl75JpPGuw31JVD8
      CdnspcPArXN9ILNHLUJEcErv1CBzrCqp2RUxCFsH14JAW+EoAKGZtUSHq+rt8BSZ
      uRCSTgWpIB4oXbwEZTfCXKCjEHIeKkHsvLx5CSddNDnlUusaIYrHdZdTXTnztQKX
      hoP3GmLV8slx/Tyw1pdDhhsYnTlyj9aC4H7avxqSwKk0WoTkUMR4cBdtW2H/Wi6o
      b3NhWkeKEQo84Z7riSbArA==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIID8zCCAtugAwIBAgIIBaCqtNCyBjswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwMzA1NDYxMloX
      DTI3MTEwMzA1NDYxMlowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      ANpZTDbsAymBoW4B033LgNSTQSA6qKGx2Dd5Dk+l+b/jkgT7bizXv+zsH52NVIk/
      dcVKHqQWBKsdjJPfP03raFVYGE0QxQbslUMeRfmCWfSOGczrI1EWIoYEvKCEWjQx
      Qfh/7BDmyZGFKDEUZ6uXLC3UlxW+LOCyK7catsh4y9uRhF2plZN8GyytvcfivhF/
      xNsYdNwBbxvIA1e2yYxliC4anNXul2eSFtnODk5wL9xZXBppR4O45OwY9K1y/ku4
      RbV1qhV6aWfU2z1i6KLmJw2xZSVQ70ATEv015X0lzTWE3sNCwPk3Zb4wBJSlo60F
      bd0H2NC7vTe6dKiDbLkC7RcCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAUKaai1k0TVU+xLCsJRR/hvMbJjr1/xPAmPQ/W/p2TgIVJjYYQWu44eIV
      HziSgXksVHlvkAUvbEy87Kaa4R4yrzBLBgNVHSMERDBCgEACoq8XkE5GonBjiJvW
      8dRRGj+DzgjgSCYMkDYuMkZPvIMoKlErzOZ+TlJrwo6XWxNkDH61fxLgJ5Rv/X7o
      jioBMD4GA1UdEQQ3MDWCMyouYXBwcy5lM2RlYmUwZTg0ZmFiZmU3ZThlNi5wcm9k
      LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAKa+gQojUvgCJ
      1bGgJwFuHqLl4UWagWAELCzVpACHLfWTyDxjhjhGF96ZM6CAk/G1yEck01RFjk5m
      F/9O2HsNVGyOoMISbIctBC3e7NIvXNeVhfNzn+6rKxsCzyfuyHrWURFRCG3pj3GH
      zsl/8BbkoDHKA0kqDsN8H+bK3cPMgIZNxJm4MeCA6cIFsZyz5OSptRq1tyZrR6Sp
      +w5Z4GQ23C5GoiDb21XQBX3DzmQs6uDCJnW1PxMuSK9QVaQyH8jSblkShaD/kHR4
      Ucagc2SYODNv4PUtwt+F8VJ8Qu6I3aNTgzQMun8HgkKIrYMoySTAG8hvW/cogNX2
      Cdm5A6u9OQ==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-11-03T05:48:24Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-11-03T05:48:24Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4179"
    uid: eba3c357-c39f-4686-a381-2e2496677fc2
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-11-03T05:48:04Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"91ba9536-42d0-4509-a067-8a885e4d59cd"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-03T05:48:04Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 91ba9536-42d0-4509-a067-8a885e4d59cd
    resourceVersion: "2575"
    uid: eb17d905-1525-422e-95fb-53a21a74f87f
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIdJkHlb6OWRYwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzY4NTI2OTAe
      Fw0yNjExMDMwNTU0MjhaFw0yOTAxMDEwNTU0MjlaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM2ODUyNjkwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYk7yGgAXmbEXGjB47I5fNLyvbSO3ALvQ
      1kCliA5QYYvFIHOMMv5PxBzxVGscwqLBdNRdKXkP+4ibgyBkC4ta6kLXbFXb4civ
      d4OdB8NGHd9lEgMCHiUdo6TSo8yB36HB2+fSbUuke5Y+HnGuhXURgv/eQzr54D2j
      qc7xGhtRg31Wd4K8G4/GScpBjLzApgBT/ExbtoiS8lbGTkgKKOpJa7H1aDLZu8UI
      rGy421M3XL6hGAZdzi0O1k07JoQTCRenrZTCO02dBqhbjPANcsBR6fTEiCsxgPs+
      WEzuLJtfm9lMPT3MHToFFM0+Cc1ONv1vCoUPfyX8gOwNcninzLb5AgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHDyPQ
      2epWyBYwxQC71k90IdF40jAfBgNVHSMEGDAWgBRHDyPQ2epWyBYwxQC71k90IdF4
      0jANBgkqhkiG9w0BAQsFAAOCAQEALBRYh8mh2c0gSMz0/4e16R+ANHKHAJLfCS2c
      6ZY8FeONH3v+6GpyAryoUgHY7deI9izV1R9iABosl07W0ee66wQClyN1duvu/BsM
      xxG2hJ4yrWLq864R9oBIOfRFBOHHx3mQxDGk+JQWBXBWORHlaVKkRUIt7Et9EsES
      5XG+OGuz3Tbb7SNaJD4TenKtwZdJ0BxEbi7LQYnDNjJKhV5klK+CMAAm326XsvFl
      QjpPfJPAjo6F3Bq69xYnT6l2QNAxZ6FjllqPaLwGeiL0ksIkV2+5G9yAEpi9Nwjw
      Hrea35uqoyS/zNRZP5BkoLQdawZ51uvym2OosYS6SPWQZq+6Ew==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-11-03T05:48:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-11-03T05:48:23Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-11-03T05:54:35Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "7091"
    uid: 6538c167-6fe7-4db5-956c-24da46ff3e01
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-11-03T05:48:04Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"91ba9536-42d0-4509-a067-8a885e4d59cd"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-03T05:48:04Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 91ba9536-42d0-4509-a067-8a885e4d59cd
    resourceVersion: "2565"
    uid: 3aeb2906-f099-4751-827a-505869279aa9
kind: ConfigMapList
metadata:
  resourceVersion: "35532"