---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.34
    creationTimestamp: "2026-09-18T08:49:03Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-18T08:49:03Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0
    resourceVersion: "2572"
    uid: a2710142-a331-4f3e-bda4-1c9cb97aec97
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.34
    creationTimestamp: "2026-09-18T08:49:02Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-09-18T08:49:02Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2557"
    uid: daf6107f-069b-4541-8228-04e4bb6d9750
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.34
    creationTimestamp: "2026-09-18T08:49:02Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-18T08:49:02Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0
    resourceVersion: "2549"
    uid: 95d6b3f4-c584-4266-9bea-c87fff14fc6a
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIITfrTW6MCG2MwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODA4NDYzOFoX
      DTM2MDkxNTA4NDYzOFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxWRsj9hpgWF
      P4qXuFLfV356bCIq5Q6xqVLRRFZ6bXoCWgnpzZ4QSgJrX84tCXPbRqIZl3pZ90LW
      /KipAlOyDmoQXpEWlzvsf7KswLBX3Zn4an/hfwKw17IVXzOWjg4RV3k56iIEPupO
      0cRFEjaLaljZ2ez1AXmsd5qdyzuF+4fjOq9qBOLClMG918Yj726EhVfNSrQfuHZ3
      LZg3r29yMBUw4GgY71ntlbcaVse7cOl6H6T3rylBnZOYf1O+Dfuos8mCQ27/GFVE
      vcOpZXtoFo7V9FnY9eR3n2CYZw8ZN/PK/s1G5esvYy+4A0gJ86w3pWYkSTuR4zW4
      SBFHXh5LswIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRAwJuyohovFsb33P6b70WIgH1MPBmnkoOA1lW0ciX/c4VRncsU
      ha2q+e2uYL1H6CKgmfyjmr/50fML0FozGeMAMTANBgkqhkiG9w0BAQsFAAOCAQEA
      zItvLi52TrpBoAgMYXZgGc7wYqKR6FSW/K9B/hvM9tJ80qbMZkyv6ceL6Q6esqHb
      1XP5Bj0IucRW7kdFRkVrmWhRdXP8MXe2GrIQSm41xvesvrFMjM2O/lvV9Bc8kRFS
      uQAM8CN+8pwbd8PoqENT1frLHfMhdNnBWk6Gt/IaPdRnsn5FQvCQJNKrIb59WJl8
      BM4JyLcTsdHgIphX3EfdpP1GACSRFS/AVBVW+hFxa1zYTCE34ZHQAlPH3FayueqD
      pbVs89HyhVHsE00IwGrMwMg4doOPSDf4si/TlIibujKPL2j+sfW9yaZY7ikHdpVO
      Jy4hEAXw7y4341Y+8G8uPg==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIJACIVY0Wz8kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDkxODA4NDcxMFoX
      DTI3MDkxODA4NDcxMFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AMpT32RI8WReoOcsParvm+DeI7Lw2FlLNxzm0g1pDY750a3OLt67YPXEEXTlIq7O
      ZmCdsSL7Q3f3mq4az3sCkLPKJDc/iClEtpqSQkl0AwQkpEtNlYybTwYeMcnnrzQ0
      1QdO5BVv4A/ym9QrGKqV2mPI4yj+LmYQCWgdrWfpyrWt/ueCs4tudR2x3iJL3RAc
      8w6vmE28PqBLvh9I8qRAcSeZXKgl6T+8XpUtdZa7sLC/t1TxjsjsmbfqQiz5w6+i
      wh8s+uXzFmzyOmRZCAHlaHEGA7zLPiU6oSdlnQvblQw+eThp++G4ceycuurXdWO1
      Zm37qtW4uh5pR+ioLJHdshECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAyarBjeq4AH+n5k7QKn1VirJFBYpvD3pWwO8yq7mxhYAi2tDZw3IwGaR4
      fkfDoUeT62F9rklO2dhRe97K4sTpojBLBgNVHSMERDBCgEDAm7KiGi8Wxvfc/pvv
      RYiAfUw8GaeSg4DWVbRyJf9zhVGdyxSFrar57a5gvUfoIqCZ/KOav/nR8wvQWjMZ
      4wAxMEsGA1UdEQREMEKCQCouYXBwcy5hNzA4MWY1MS0xN2EzLTQ5OGQtODcwNy1i
      OWUzZTQ0ZDQ1MDYucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAMC1RO18aq+V4swCEFcXtcBOvrF21yw5p4U6P5CfISUiPbgMDwpHEDNAPUp7
      Y+zChm3yKxTTPBXFDvO8yLONnRmSIbK5WUBcJiva6vzSsrs6PO5TaX/O6MeX9FSr
      kLijYSW2TLDJgKvkt60rQKERzdwhxq+eCOTzlG9cjx0RIEyd2Bka6LE/fYYOF2sM
      hYvpJNMVB5ziUjefs0ClGSDUeLSeOQTHG09QtjtkOb4vy38va/P1ox3qBch9/I3c
      bZ5/bALi4OWXYnOIRj0J6gfVSkcoSklNfLA1OYIf2v1RIDO0guoqUi5je1pMvUJL
      5apZeeHdZkkDW8Jq1xNw0UhUgAU=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-09-18T08:49:00Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T08:50:32Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "4639"
    uid: 576ed239-ee28-4753-a8f0-d153afd88220
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-18T08:49:03Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-18T08:49:03Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0
    resourceVersion: "2586"
    uid: c4099425-420a-4ea3-b29d-17bece493d07
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIINwavYkZzBTAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4OTcyMTc2NzAe
      Fw0yNjA5MTgwODU2MDZaFw0yODExMTYwODU2MDdaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODk3MjE3NjcwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccyrKvIyXm7NQTdKzHFXsnHxM0OAJe/Jv
      Uu6WCRQADfHDE6hhvgq21xi+SL3oDURm4m+UC1mXbiAOgU2tlZH/E23bR9K+Bc56
      X8fKrQ96Fe6rpjxiXDG2vvSp5safwPAfyVOAj/jU1o3PLTkZ0UYlshUQXQNzUNWk
      ce9mAwFGnv+S4AR0eBoL00UKrT5Br36etbc+QjU8QbJ9Iq+k2nAM/NyqEDqh7OqA
      jtNroN+ZyV3pnPLAzNdR0mFU4T1kTMgVi9yYnNPFKKo8zEv542x6cpO3BAxvMB6J
      ffpvZmpU2mLcDd0cTh7ITGNvYz5nmy2CREZ1ROvxhe50z/ggPuy9AgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnl4kn
      6la39UxhT3pgdtGTW/0rbTAfBgNVHSMEGDAWgBQnl4kn6la39UxhT3pgdtGTW/0r
      bTANBgkqhkiG9w0BAQsFAAOCAQEAWG+yozKa6xkSlc3RGDO9Z+hqEy9XlXHR7yw3
      OCzMfQn1Hpv+ooZMXUlZTbt7uTM4CxiyQhnVP3Ri6feKZMbuQ+1SANFeVR1Qqnbu
      l+JZXBXdvkrO1sDkJ4VWiHk9Mj2eiV5jwkMbImWZcT5mbXxut6f1kqj0pK5vb+bB
      V0pW8L9XjXoQ7qqQyeZXBmXubw1aR6IYzLn3NfGWYF/mNJU+5gq9j1p2fdmh8xJv
      cPj7GpBSZtto3UFt9O8hq/md87o2qiK2fZ9iBiA8E82nvLjmeOsCoez9Jovz4uIF
      uipAkkLUuRsvhR2zMCujOBYTcQGFZpwKHvTgC+5FvsvOeaO0bg==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-09-18T08:49:00Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T08:49:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-09-18T08:56:19Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8507"
    uid: e4c5d66c-4918-4040-aaf8-d19c851bf386
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-09-18T08:49:03Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-09-18T08:49:03Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 94c1ed2a-8017-4806-bc7c-c7ac7a4b89c0
    resourceVersion: "2580"
    uid: 98012394-4279-4d1d-b13d-2ceb023d8b45
kind: ConfigMapList
metadata:
  resourceVersion: "24718"