---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-17T09:41:26Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"3e0ee13c-88fc-475f-9119-77a547d9e62f"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T09:41:26Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 3e0ee13c-88fc-475f-9119-77a547d9e62f
    resourceVersion: "2321"
    uid: dbddd668-ceba-4825-a78e-198c35a04a21
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-17T09:41:26Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-17T09:41:26Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2317"
    uid: fa72b204-3241-4d0e-96d9-c9a9b5582194
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.33
    creationTimestamp: "2026-09-17T09:41:26Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"3e0ee13c-88fc-475f-9119-77a547d9e62f"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T09:41:26Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 3e0ee13c-88fc-475f-9119-77a547d9e62f
    resourceVersion: "2316"
    uid: 2c411799-11b7-4e05-bb95-4876ec619fdc
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIdp9R5y0iB1AwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzA5MzgxNloX
      DTM2MDkxNDA5MzgxNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBG5DVSJrWyZ
      waXZRT+QEiVK1iMkASy7DlQwROjFG6c7xjfukmJMr3Rw1/RSBOcBfto/1RnLoMEj
      Ar1oWV3TjnTfnTMmVs1TwHLsIaw79Cp0PHqvwtC0oMty6Nrr6XY1YS4VuMZjnmLL
      i0CfHp/1AvM9zX6+wsa9u3uIyPAplB6NPzTFqVrvye8e3/o/ryZPyI7cdPVlJovl
      VWIV1Q4+ZOSjDWMOi1oKbsSzH/3HHLtdRl1hk/5D3EMb2ZCjVD/kZzSzyEpX9acu
      PwN4w/nK7cDvVtUmtphBlqsz6VTitdMnAhqlSNNYSDT11nPKxXxm5kV7wD2D6clr
      nJo6gnNySQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAZ6BDY8BMBCwOmmr8721VhY6/7ShxNKW/YKcSKXgtIvZDSny7
      RihAXcCIajqxPRDKfbejmtXlfvmZwsjaYymIYTANBgkqhkiG9w0BAQsFAAOCAQEA
      f72Z7qj4y6cDqTbIT/4KZSzpu2O0Xj2QbNxIknlwP4p4Y9HkmvsOO92aTF4hTU/h
      fYMyMx1fdxn+pqya7Fpi+mb6aXUpsvwtECmrbs61m188+NwHTOZq/1VXLezgY++F
      nNevtQCvwMPL0dwl7m4E8UFOMcyJYnKKSzwPlc+El8lwaCkqj9IeZBiFS/cj96Fx
      MaBMzAj6K195+QkbcdLgU1A9LRueQlWxxiP+44Z+RwWUe/c0Yuu2XQ6YLhTgoWeb
      NGfaIT0GuKB/XH5dO/RIzNJXwqxtpND2YxlGvFfSOntkvRPehO8i7TfC2Xsge35O
      MO6QuQ1P19r7GtL4EqRuog==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIErnkzg/h40owDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxNzA5MzkwNFoX
      DTI3MDkxNzA5MzkwNFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AK2JDSKxdi1ZYnwkRapjCFnFWMf1bNKVxbNPkBPP3x1BFdvGrLlvOSp4V/pUX7j6
      Bmsc7ZES3eduVUqeevOIKd2k22SWIE3r1T5IjpfRO7VfhSD/RGq7ZcdKYV99ADaU
      li0X9CeEkriPNZiRoKWnWZHKYlm1Wclyu37azmOhKLXpWNYjy3RTa0ZNIk2qzx+D
      pjNhmPS72ePN2x4C7WBpu8Hfshq3g/efRebhPv0N4cdAJYFdMi/fYiQ1mtkyUAAp
      tszklZ5LsPTLLslz7tRAWecp4EC7nML/0OLkBD654po0WmZUWDRU+pSmGarwgodT
      pI2FP0VakeQZ+O3yxZvruJ0CAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAGTjrJaH+LN38WT+9bg6cN1Y2RAfQq+LKcBT/0xZSQtpP53WoxX87w3L+
      u2KBAtGOcyWCds+5recsyrkShtMTxjBLBgNVHSMERDBCgEBnoENjwEwELA6aavzv
      bVWFjr/tKHE0pb9gpxIpeC0i9kNKfLtGKEBdwIhqOrE9EMp9t6Oa1eV++ZnCyNpj
      KYhhMEsGA1UdEQREMEKCQCouYXBwcy4yNGU4ZDE5Ny0yZDhjLTQxYzktODY2MS0x
      YmVjZGRkYjM1YjAucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAETCITb4BuFk/DG/17V7lx/PmN97+AheSV1uqxyqAdTLHqHuAg/rtO+kjIJa
      sMdPegWRtLxr16tmReo5Go6loc9I5XItaTOZWykyXoaU0fmTQnnEpunJCqXru4hP
      qa8I211WYUnjZKV7tTVOaprzgdKMk5cB40M8bmUPNWqkNT3/hd2sG3Jdd/7SbS+K
      KUGTdLKQp9nq7Z1c/zesRktgaWIQ1KFvy2/AS5EjWwduOPKQYLSA+zCPuLYuq3DM
      ea7UciEQ56W2WnFPo6BxXmEM1GxpxVXnVQfjOcImUUUkdUVaTRTxwTibsBEFuMdl
      H0THQXwaiArRerW3Q9EhduX4Kqw=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-17T09:41:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-17T09:42:03Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4115"
    uid: 23f84c94-9345-47f5-928f-0ce44d5da777
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-17T09:41:26Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"3e0ee13c-88fc-475f-9119-77a547d9e62f"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T09:41:26Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 3e0ee13c-88fc-475f-9119-77a547d9e62f
    resourceVersion: "2329"
    uid: 2517f9ae-d4f1-4ae3-80c6-ae285b09b7d2
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIUiZLyLN3fkowDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTYzODQ1NjAe
      Fw0yNjA5MTcwOTQ3MzVaFw0yODExMTUwOTQ3MzZaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk2Mzg0NTYwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDYSmskor+BnzWGS05r/J7yqB265W/P+K
      BeKsszohkyvpHLqhZnLQ1OrUo0q7NzXFiJZkviPEEsALnhvx201dOtPdVECIlXZF
      a0BsrFYxen2PbLWkmRvGrInDTTuiv0/A5GK5C0zQ54ReYCSNg3EeW7WYGsZP2jyG
      SohqkqVpgA5lWMrrM9zj/qjCipdVJ3wmQYsfHT6iox6sH1nXF+/sWOUUJanxQPG1
      4gWrMQZpCx6g27hsGqv71gVhinvvgPDzLs8c6+FAVlwktQ8j9i+BzJWt8rU3rlwU
      QiNS46lwRT+Nv/oGwR+RR1GBvmy7Xbud4XBwAtwuwidy/VlQkwWZAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLoT81
      H+rH15Cs+l2no8L93GjA+DAfBgNVHSMEGDAWgBSLoT81H+rH15Cs+l2no8L93GjA
      +DANBgkqhkiG9w0BAQsFAAOCAQEAXDlTBSKILT4aQUJZBn91pF66yrnFjXgvj7dE
      fOQbHZ7iYG55KL34OmmAXlpU1EHBYReVaI+kjGoPndPIMeHkWlF1hzXsakvXRVGT
      iwmcUJ0t3lrVBduY34df4LjE5PnLgsqchZoKFx2IVRINQrtf6EmBHD4CRq/fTYXs
      E5Qo1Zv+91b2d1s3JGh2shplQpXfsz/sUm4RRZPlUGKs5Vsx3kwrTEl0G4qfz/8w
      b+DJ92FjCZ+MxaifLBlOiNpXWomKvzBQ8p3ovJiAuAafS+1+WjUylsNlD9FEsIqs
      BIUVt9ZBzi4IddATt34HvjPsxM+9yazw5TwESeQpgZpu8o1GBw==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-17T09:41:23Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-17T09:41:23Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-17T09:47:49Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "7214"
    uid: 77f38404-045c-4cad-a446-dff64aa060d8
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-17T09:41:26Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"3e0ee13c-88fc-475f-9119-77a547d9e62f"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-17T09:41:26Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 3e0ee13c-88fc-475f-9119-77a547d9e62f
    resourceVersion: "2326"
    uid: 813db99a-8e10-4f85-b49c-fa0bebe59f9c
kind: ConfigMapList
metadata:
  resourceVersion: "12268"