---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set the SOURCE_DIRECTORY env variable"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      sourcedir="${SOURCE_DIRECTORY}"
      log "Copying binaries from ${sourcedir}"

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      find "${sourcedir}" -maxdepth 1 -mindepth 1 ! -type d -exec cp --remove-destination {} "${UPGRADE_DIRECTORY}/" \;
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.22.20
    creationTimestamp: "2026-11-04T08:11:53Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"aa2ecd79-5668-4426-9f12-fd46e2b84f90"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-04T08:11:53Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: aa2ecd79-5668-4426-9f12-fd46e2b84f90
    resourceVersion: "2740"
    uid: 2e6706bd-27ff-4bc6-a76e-b8f2ca22a879
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.22.20
    creationTimestamp: "2026-11-04T08:11:53Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-11-04T08:11:53Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2726"
    uid: 19e54af8-845d-4bd5-872f-6975b64ae44f
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.22.20
    creationTimestamp: "2026-11-04T08:11:53Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"aa2ecd79-5668-4426-9f12-fd46e2b84f90"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-04T08:11:53Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: aa2ecd79-5668-4426-9f12-fd46e2b84f90
    resourceVersion: "2725"
    uid: 6c6bd98b-37fc-413f-879c-4ee138059ead
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIILcuycR51gMYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDA4MDcyM1oX
      DTM2MTEwMTA4MDcyM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EQfuojqimkA
      xR0iH+74ItsDJv/Qr+uB8rIn2KzmYYV3KE7iRdjhd2DSObG02iMg6CPcasicCMEj
      sMmUjRBZ+J1ru8yoViqOa1NLm0EM9hiPf5epipfITU2uOMZF16rbz7jLIe4yhykU
      XnXW5/Hx0wED1s2GhtGg5mCQPF+6zFjjJY4fcgxKxJ9Jzbzicl3u2KfKeOBLqrus
      TDSntwj94DyuUy84UjgxSLNOPcIgrrI8Oym0p0Q4CXd9Z1FvG2bK5xcjZX33wvCd
      SZj4Gn9Uh5ii0yAKWXrFVgGKw1QIA+ZBpWdYqQiEgxyuYQ6VzxISG2aqAOHI4MM8
      fXMWT/cFFwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRACWKXt8Rkamw/a2ooLAZPcwO1sTpdV0BqQjrqtK/A90/3hSic
      4pKh5wmYd2nXvXBSGlDYcOHMI+sgH3gnuKMbWjANBgkqhkiG9w0BAQsFAAOCAQEA
      zjFtfMtnxve/s2ns4AkV4oRYz//l4kbrn55TDJgcs5UXoPmKSQX9E2jciC9bLPu1
      GwZwGV4YSv6ATPAw6+RJ0/A5i5SCTo82pI387ihojxLP0EvTTYURapF22/6gYyuy
      t/ecqJYnyuhiwj7EmU8+PQJ0IcktOrVozKH7BRb6VdqJgy+SPQmZv9GwpJEXzcQm
      gVv3TGEp+641uGvF1FondkLxm0Ebp+b7qXTdupwWt8GuhSPVV1zx9eJqZ1Xrern5
      HWq8Yh8/J5SVBqiX34mV/eSLJh6xhlLTXce4NKMdWYum8B2ClZMBfoxGWOR9JFlF
      HvpIMg8BF//pr1A+793rBQ==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIID8zCCAtugAwIBAgIIR5VMTcZRy7QwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTEwNDA4MDczOVoX
      DTI3MTEwNDA4MDczOVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AOerSou+tYQII/weRllNqxENP2/Wg31FDFC7wJJ1e8J96Mw3mcveXeiBP8uyvVAC
      BtUm0mG5TstyNp+fCLqZTYXmxrz6nwkTt90r0+lbz9/XzkKqRewcD3AdTmX3u7r3
      vcx5sv8o0YdRwB9dSA6o3pGS9cLtyEmuYjVdHvMizARHO2Oz8uM384yNyn/tR1e5
      baQHXDOCZHsxnPsJZVhw9Is8spkWjrAB8QIC6IXA7LQ0dAH1p2JjOi1QY0y1hr/o
      DRAlnhfbcwrsnZwehctRINHaRzAw/K7bL9xhTyOg4b+cVhwUIIIEcWiojr1nfuRW
      2zlTMdlyqkRZ5TH3skF91ksCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRA9siYtvHY4IBrXMLWCkrqQkLfg8jVLs2aL+5UPH5+/UJ/usuLZ3WDKVql
      9/bcue2WYTCrRAyIFvU2CzrIU9kXHDBLBgNVHSMERDBCgEAJYpe3xGRqbD9raigs
      Bk9zA7WxOl1XQGpCOuq0r8D3T/eFKJzikqHnCZh3ade9cFIaUNhw4cwj6yAfeCe4
      oxtaMD4GA1UdEQQ3MDWCMyouYXBwcy5kYThjYzM5NjA2MzIzMGQ5YTVkMC5wcm9k
      LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAar+2vnl8wi4G
      ribH+Kn6TQGnjRoyVw9Ea80Oq3gqTHCOr61QiI4OrEXnbcvnFPedJuJxtd8xQcUK
      wYbXIyDWmwPag95i1R6ryjqCvxYrtQRyRiq8rTRJ1yCsZaYv+wBjiaWOL7RsZfoJ
      cXhyJBx3TVpfls42Au+FPrqbJqn/kDYehj0cBMR97NZ7ZMyOrolncxYNDihzAajr
      E19o2THBLJeW0GC1n1T4L29qJhxjzEcKhtYGmIP1thYVQl6bDG3Syq/H56vkKF7B
      VoSgBbJXqaptCJnbNT2MNfHZzdz0e6r37NcZ2gW/OgnTgUHBaNv+FsB7L5YF6JgN
      +tyivi21yA==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-11-04T08:11:49Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-11-04T08:16:58Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "5696"
    uid: eb4aed8d-f6d7-4a17-a691-944fbadef58d
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-11-04T08:11:53Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"aa2ecd79-5668-4426-9f12-fd46e2b84f90"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-04T08:11:53Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: aa2ecd79-5668-4426-9f12-fd46e2b84f90
    resourceVersion: "2763"
    uid: 270c8d03-a4fd-4834-8579-753bc39394f9
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIZTEHRZv6I0cwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5Mzc4MDQzMDAe
      Fw0yNjExMDQwODIwMjlaFw0yOTAxMDIwODIwMzBaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTM3ODA0MzAwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzWe3+uJ9t7n7il35U2cImBKp3otX3fKm
      IU1mDnsspNXP2HgIlni7R+E0MJII75wwdhRVKR1bBzoyBDy055KM0YcIpKgDuYE4
      fgmsBnUOph9qM1SzCCP+jJ0vayF7Y7udHT1HV5NnaOGhdiDLbKyhk0hU06O0g0XG
      NBsBQeevKQOxnYnECjXVj0N2nZWyH6Vs56D3RT5xGjtO4cMjZC7HxVEMbmvTOEN+
      qBYJsWTmqwNRHqBntqpcV4PUAjIVjVv6gc3mWeswhTN8xjoFFNpuH9bnHPfg9VGL
      ephGayKbWH325xWnA2nnvdNqZyfVqeJR0Ybu2b+HsaJg5fwtwFd1AgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQeVXNS
      NYOHGl0cHlfgweTWISeuXzAfBgNVHSMEGDAWgBQeVXNSNYOHGl0cHlfgweTWISeu
      XzANBgkqhkiG9w0BAQsFAAOCAQEAtpM8+ZJDW7ka+poS4dsSPI0k/UoVkJTiAOrQ
      GgAGXafbHcvF4jsVk0GbF5/2A7d/9jKsuCbrdP1SuVWS02PXJQwceLDSB6HhOwP/
      8GPBBB2ydnMI6uuhvOU8yIRLsTYsBz5rgA4HYAuSbcpXMQVdRT99pmTscQ71/Wsp
      bBE8zTgoYVbalWOGyxKG+A7twA9ZoDcSDhb+9fkywb0e7mCgh1GoJ2QxIXKaf21W
      3SjGeQCRXgUHbI7AO9MJAUSYtJxO3O1xVgT4MEpMqXaOpuJr4xvEp4rrxIyM3igs
      kORZx9+6amJL+0LeFJVbMs2D0JKJYW9HXiq47DwWo8Tjrgp5MQ==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-11-04T08:11:49Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-11-04T08:11:49Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-11-04T08:20:35Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "7241"
    uid: 170b8c2c-4954-41a8-9a21-83dc0adf1e79
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-11-04T08:11:53Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"aa2ecd79-5668-4426-9f12-fd46e2b84f90"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-11-04T08:11:53Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: aa2ecd79-5668-4426-9f12-fd46e2b84f90
    resourceVersion: "2750"
    uid: d40bee40-a29b-428a-80e0-51aaf85d40ec
kind: ConfigMapList
metadata:
  resourceVersion: "12878"