---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$RHEL8_SOURCE_DIRECTORY" ] ||
         [ -z "$RHEL9_SOURCE_DIRECTORY" ] ||
         [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      # Collect host OS information
      . /host/etc/os-release
      rhelmajor=
      # detect which version we're using in order to copy the proper binaries
      case "${ID}" in
        rhcos|scos)
          RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :)
          rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/')
        ;;
        rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .)
        ;;
        fedora)
          if [ "${VARIANT_ID}" == "coreos" ]; then
            rhelmajor=8
          else
            log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}"
            exit 1
          fi
        ;;
        *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1
        ;;
      esac

      # Set which directory we'll copy from, detect if it exists
      sourcedir=
      founddir=false
      case "${rhelmajor}" in
        8)
          if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL8_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        9)
          if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL9_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        *)
          log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}"
        ;;
      esac

      # When it doesn't exist, fall back to the original directory.
      if [ "$founddir" == false ]; then
        log "Source directory unavailable for OS version: ${rhelmajor}"
        sourcedir=$DEFAULT_SOURCE_DIRECTORY
      fi

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-29T07:37:08Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"d892e504-44ea-41c1-9cc0-22f459acacd4"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-29T07:37:08Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: d892e504-44ea-41c1-9cc0-22f459acacd4
    resourceVersion: "2375"
    uid: 49388e3b-50d8-4d11-bd88-595bf4125e61
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-29T07:37:07Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-07-29T07:37:07Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2369"
    uid: 924a27d7-ad59-4040-b833-be1c4e647b19
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-29T07:37:07Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"d892e504-44ea-41c1-9cc0-22f459acacd4"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-29T07:37:07Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: d892e504-44ea-41c1-9cc0-22f459acacd4
    resourceVersion: "2365"
    uid: 1a74aa58-ceb7-469f-99bf-e6939210f385
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIcWDL/aGZeGQwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcyOTA3MzQyNFoX
      DTM2MDcyNjA3MzQyNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCv0+pp0aTur
      V6/6CKoO1xNOxOR0XbjHUjLIH0kRJj7JmhI6YD8sMazpoMGjzcN3vSzzf/SBvr54
      av/hp68Ng7Azv4KDHXCEJyGTm9z0uI+w1CTk273HrqVsdin1U8KJiJGXiTQAD+FG
      L0Lj50Lu3IgcHI1jXPaK1NVEmKnvMCnga0FieSllxag66BDmMs0qUWOUllL/uJbV
      ArmQk4QVVdJgoDh74NpGTiWD2BPAFa26IHJz9nuAka3+pThyAroxSX53pO3UnSvR
      DKwnVqmI8+6uIuuJuuAq59/+1O3dUiV27ZUaoKo9fUtKG5djmPHGxnu+5YB1/wvO
      EurjQlKuWQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAEDmw9i6u2KtxGGZMiIGMhH3dMiXCskybcPtlFHfYf0GLeIQM
      xI+UfFahQ7lJSk9LMJtJpT+vlxYXBdZkuFsTSjANBgkqhkiG9w0BAQsFAAOCAQEA
      wRsdeLazMhndYBftE/8YB95k5WmkCEoBsLjoX2yh4sLdJC1F5ZOty9PwHpgWkuKD
      XkcZGT0RPqQQ+CGvUhYdacqM2bS/oc3k5L59zFFCHcBQUW+CdGQavS2yPJ5HXf/i
      4eYohfzknYgbQBFqOjNvkRCsaN2VzV3st8ElLGq1Q5WftTZ/ECq5dW3DBiDdSa8J
      EaaRnx314iqN7Zh4N5F/RIlFhU6UGT614jDJq7gIiOMI7XYy/PFqbBMqgrGBJGAk
      llpPoJdBWHqwV1Xg0k+tph6RFZlXMOc5IVh1IkP45n4wxHpxuM86ZYTbFSViUyn2
      FTer8XzSzvGUdrRIOYeZjA==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIQdYuCd6dSFwwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcyOTA3MzQ1N1oX
      DTI3MDcyOTA3MzQ1N1owMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      ALoZC+RAq0XadEQCzF8AV5So/M5vUOHXfhfcOezZ/83E9B9N2sE6UfjESa/PCY+f
      Ph0B4/oK6TdY1BjQbrxG09CkgO/+ONMJfoaq9mh7xjM9tghoEt2/N+O/GN1vL1o8
      jpCp5DadIiP4aaZ86oDB8QEN7U/Gxhghk0ne0pZWI/p9n0nh2I7QoQvl4FGVt0Us
      yiFPdo2cJv8I7TxUh997NIqdFJkZCJG+BVjsp1NrT17Q+riEBuL3x5IC1E6sPOKz
      6fzGFDAQIdvOAMoD9PB0Gv2nSqWilDs+VmuWZQKVmx8LF5ci2jIWta+eSNVrbZf6
      vQ+IUi0cxXjU4utq5xMYWOECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAdq/pQLE3NF+ZbzZ9AY3kxf6PTQycm/f6ya1AJ4+5hdRk0XGsD1Z25dM2
      quH6ZSr3+7gUFxER2hR6pOvlaFoaJjBLBgNVHSMERDBCgEAQObD2Lq7Yq3EYZkyI
      gYyEfd0yJcKyTJtw+2UUd9h/QYt4hAzEj5R8VqFDuUlKT0swm0mlP6+XFhcF1mS4
      WxNKMEsGA1UdEQREMEKCQCouYXBwcy5hYjM0OTlmMC02Nzk3LTRlNGUtYjE2Ni1j
      MTM2N2E5NzYwYjkucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAIW0JKDb8+hcbbEdojBe6KTgY2qft0SMyOsoh2yde/Yz3oVY1MYoq+dW6Uw4
      PGaZsKskLaP5q5hSin57y6i3G8fi3LFRE7QJbxwUICHuKW5Zu75QQaEDcSO+b8Qa
      poW2N7Pgcrk8QsXtpfvg95ncPW8wFIbhwWp3beBzInP/ngVMTLBxczKRXQkd/M7a
      7lvAcqX9yVZuFKGp9XDWKqWtBEpOtcfaa3Mt2idatd9uh9H9D8OI52WwkAAC86y9
      mydS8NBoNqhFdRcIp6xVXb5UbG3EfdDMqs4HD0nd48R9VDRYZUIVF721y/Wt/OKV
      pKbHRQLEBAGCfJ9p7lvDdQSkb+E=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-07-29T07:37:05Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-29T07:37:58Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4293"
    uid: 5c5bc8cd-7119-4dc1-ae40-41567ea983a6
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-29T07:37:08Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"d892e504-44ea-41c1-9cc0-22f459acacd4"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-29T07:37:08Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: d892e504-44ea-41c1-9cc0-22f459acacd4
    resourceVersion: "2384"
    uid: e1c7f84d-235f-44ec-8ad7-89e3eadab826
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIc/3MMh6HZRswDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4NTMxMTAxMTAe
      Fw0yNjA3MjkwNzQzMzBaFw0yODA5MjYwNzQzMzFaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODUzMTEwMTEwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5SpQIuu7Ikj1O3rwvQTm+aW4FAjk3zCz
      LbYdMT4/dNePvewIICZJ/llT4GFvy0hG65fPVbgV3vDOJUAUxPcC6P3MuvgJiZpw
      UxNN2WnonWDxD9ce2sSR6x8nsTAOf8kiNJnat8cAhsixAnCFdSemc5fyrq5sY6wg
      1i1RWcjvKFyn58p6dd4GRl0AAxsgNOLaAUAjTS98UV48tP4La2Ardgut0sD2FN2l
      pY60ISZm9DVI+nx1tLhv6CY0upaPY9Mrqv7Jp+nSg5kApEpajCbydopO82/YsQ9K
      ZPusGZhTayVlK1dKFG0NwChpCyyUl/Ya039A4Uq9kIQ5GqfCUlWTAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuEHVF
      umJuutt9SuBcFcfVeLqwjzAfBgNVHSMEGDAWgBRuEHVFumJuutt9SuBcFcfVeLqw
      jzANBgkqhkiG9w0BAQsFAAOCAQEABIKjABARsfqcHWRTReiDTznn792xOQv1095T
      M8LytVBBcpkfWKHNa4GrKA8WwT6ia+KMJnMWwwSB67FQXbIi80PP8aLHXgSl/G1i
      arpOs+Q5vNLrCk50lerMPTBj1eahuC4Ms6Yqx6RQAhKFEinMrUic4ZU1mkCtZ3CA
      5cPF0nnf/w71zZUwLllBbypnEEwSl4sUhkLKuDpp1XHX/NZr9YNMtgYKRYZ4zxDl
      KdsbWZ5/uoBZTjqwGNZUCxlEB5f0X7lQRvlMqNTivkGhR7tcFjPCnz+Td1U3Namb
      SfBAskmnXaYH6ru1udwWEvx5Hlw1cmeAhG4kni1PShrJAVcVXg==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-07-29T07:37:05Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-29T07:37:05Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-07-29T07:43:45Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8236"
    uid: 16af0b71-7815-49e5-a527-15560ace9598
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-29T07:37:08Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"d892e504-44ea-41c1-9cc0-22f459acacd4"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-29T07:37:08Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: d892e504-44ea-41c1-9cc0-22f459acacd4
    resourceVersion: "2378"
    uid: 42c66ca4-fd5f-4c58-b845-4ee046cb1fa0
kind: ConfigMapList
metadata:
  resourceVersion: "14577"