---
apiVersion: v1
items:
- apiVersion: v1
  data:
    cnibincopy.sh: |-
      #!/bin/bash
      set -e

      function log()
      {
          echo "$(date --iso-8601=seconds) [cnibincopy] ${1}"
      }

      DESTINATION_DIRECTORY=/host/opt/cni/bin/

      # Perform validation of usage
      if [ -z "$RHEL8_SOURCE_DIRECTORY" ] ||
         [ -z "$RHEL9_SOURCE_DIRECTORY" ] ||
         [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then
        log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY"
        exit 1
      fi

      if [ ! -d "$DESTINATION_DIRECTORY" ]; then
        log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist"
        exit 1
      fi

      # Collect host OS information
      . /host/etc/os-release
      rhelmajor=
      # detect which version we're using in order to copy the proper binaries
      case "${ID}" in
        rhcos|scos)
          RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :)
          rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/')
        ;;
        rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .)
        ;;
        fedora)
          if [ "${VARIANT_ID}" == "coreos" ]; then
            rhelmajor=8
          else
            log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}"
            exit 1
          fi
        ;;
        *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1
        ;;
      esac

      # Set which directory we'll copy from, detect if it exists
      sourcedir=
      founddir=false
      case "${rhelmajor}" in
        8)
          if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL8_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        9)
          if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then
            sourcedir=${RHEL9_SOURCE_DIRECTORY}
            founddir=true
          fi
        ;;
        *)
          log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}"
        ;;
      esac

      # When it doesn't exist, fall back to the original directory.
      if [ "$founddir" == false ]; then
        log "Source directory unavailable for OS version: ${rhelmajor}"
        sourcedir=$DEFAULT_SOURCE_DIRECTORY
      fi

      # Use a subdirectory called "upgrade" so we can atomically move fully copied files.
      # We now use --remove-destination after running into an issue with -f not working over symlinks
      UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen)
      rm -Rf $UPGRADE_DIRECTORY
      mkdir -p $UPGRADE_DIRECTORY
      cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY
      if [ $? -eq 0 ]; then
        log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY"
      else
        log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/
      if [ $? -eq 0 ]; then
        log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
      else
        log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}"
        rm -Rf $UPGRADE_DIRECTORY
        exit 1
      fi
      rm -Rf $UPGRADE_DIRECTORY
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        This is a script used to copy CNI binaries based on host OS
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-27T12:17:29Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:cnibincopy.sh: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"87989821-568e-46a1-8033-dd8a17b4cafb"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-27T12:17:29Z"
    name: cni-copy-resources
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 87989821-568e-46a1-8033-dd8a17b4cafb
    resourceVersion: "2404"
    uid: 89aef543-3fc3-450c-83ff-3348eef5f924
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-27T12:17:29Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
      manager: network-operator
      operation: Update
      time: "2026-07-27T12:17:29Z"
    name: cni-sysctl-allowlist
    namespace: openshift-multus
    resourceVersion: "2402"
    uid: 94e5114b-302f-4e46-ad92-456daac11be6
- apiVersion: v1
  data:
    allowlist.conf: |-
      ^net.ipv4.conf.IFNAME.accept_redirects$
      ^net.ipv4.conf.IFNAME.accept_source_route$
      ^net.ipv4.conf.IFNAME.arp_accept$
      ^net.ipv4.conf.IFNAME.arp_notify$
      ^net.ipv4.conf.IFNAME.disable_policy$
      ^net.ipv4.conf.IFNAME.secure_redirects$
      ^net.ipv4.conf.IFNAME.send_redirects$
      ^net.ipv6.conf.IFNAME.accept_ra$
      ^net.ipv6.conf.IFNAME.accept_redirects$
      ^net.ipv6.conf.IFNAME.accept_source_route$
      ^net.ipv6.conf.IFNAME.arp_accept$
      ^net.ipv6.conf.IFNAME.arp_notify$
      ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$
      ^net.ipv6.neigh.IFNAME.retrans_time_ms$
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: |
        Sysctl allowlist for nodes.
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-27T12:17:29Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:allowlist.conf: {}
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:ownerReferences:
            k:{"uid":"87989821-568e-46a1-8033-dd8a17b4cafb"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-27T12:17:29Z"
    name: default-cni-sysctl-allowlist
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 87989821-568e-46a1-8033-dd8a17b4cafb
    resourceVersion: "2401"
    uid: 2587addc-7002-45aa-9b57-aca73f2f43a2
- apiVersion: v1
  data:
    ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDPDCCAiSgAwIBAgIIS02kP7ocb3kwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcyNzEyMTQwNFoX
      DTM2MDcyNDEyMTQwNFowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy
      b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQTJS20wkUsQ
      iFAQXXd9Y9juccLGj4OO6cp1K1IQtDm6G0PpgtL/eh1qc2eyQnY97dIXVYrdRNnq
      pCwDzGGhMHN7Ga96hukD8WAm5p9EwWzf0XNueSZF65cruyk3++7EQDq74BSF74Le
      Lkhxyil6y/gUzF16nnUwokL+DXHugToJwisHVzSzh8ZMP/72+9jdZtw96/C2IwiJ
      NRCCodF03Iw4cQd+Y1imOh0zS1ESOmtLd7I8pt/kE5ArABsMs6oh9oCu/e0aDjBd
      oWOjS6S5s0txHK9li4fqLSNx6j8+imWvduhvpSZhUSwvdmdxmtybahJyR6HXevhU
      8HDMUOIu0wIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB
      /zBJBgNVHQ4EQgRA6itgxRBLgwvk0nbTiWd3kmeMjnpG52blUJUeDtMsupHMKXBC
      i5JRP0Hr/HIZ/CETpaZunT6/+ALcHhVHZIhuuzANBgkqhkiG9w0BAQsFAAOCAQEA
      qDcxlXFpviJ8DWa9F8btR7BNvTfT+LpkoAhpP3V9qj9KZxiyt3FMKq8QSHIVbULR
      BvhSnPOa/BDtBtGTV2sR5q2HvQeXXxe/x1rS9xdoMbijgrmLCZTPQDLG5bE4pzCL
      sk7XWMbIQAVNBVwRMfApH4cWjLQ8ZeVrj9YAzMC5ti2A5Wr0KxmTPTSvqCp3Fkof
      Ci5LhjuZ74a4+eM2FaO6jaqAzHhXlhpBHWsvGzNkmqq6H+g9zcp1RUIRmmqhXUvV
      ery1P//uQTpu2ObneR/gnPH606fT2LVFERzD6edeSBB8x+57wB7+BjlroezJ5o0/
      StDW9mlap0oaNjZBX/7SHA==
      -----END CERTIFICATE-----
      -----BEGIN CERTIFICATE-----
      MIIEADCCAuigAwIBAgIIaOZbP2dIpwEwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE
      CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MDcyNzEyMTQ0NFoX
      DTI3MDcyNzEyMTQ0NFowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv
      cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
      AMS4+2MNC07XlvrM6XKpQf+T7dL8jwwr8s9VrASsAVcRzt7GlfNFm+ioN+hvbMWk
      PWR0eH5UYgBe3iVKWqqLa+fOan8CJayK/+x4yKHlJF/8ngR1eavN0KV1TOWCspsl
      43j2xP7VhkisO9yXmv6cyG/G2F9cQef1BhmA4YZrprchhVhyojjPwQKm1AvNvXiH
      Z9gcxVroe6zFST4/xpOZZYeONQ5E4K+EYDxru9T9djwby4Go04Gr3SQ3E6idADtg
      tQIZaib7mEZlF+EIk8V+8r/6Qt1gv8zEamlCy4vOFDxwKnS5n5Gcszqw/5xIvc/G
      wBSDORuXXBKZQzGTrZmCR8ECAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIFoDAd
      BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV
      HQ4EQgRAOcL+i8oUCay2Tr2mG4baDHspNHZInHdp3iqsuFZvwBiQX40BLCSOVOvq
      p83lh2hYECeXD+8A+XKmt6Pw3p05njBLBgNVHSMERDBCgEDqK2DFEEuDC+TSdtOJ
      Z3eSZ4yOekbnZuVQlR4O0yy6kcwpcEKLklE/Qev8chn8IROlpm6dPr/4AtweFUdk
      iG67MEsGA1UdEQREMEKCQCouYXBwcy5iNWIyZWFkMC02NTMxLTQ2NzEtYTJhZC01
      NjU4ZjE5YTViNTIucHJvZC5rb25mbHV4ZWFhcy5jb20wDQYJKoZIhvcNAQELBQAD
      ggEBAJq57E63ADBse+9SyV1AQ1qJ2sET+nV4AfO6LL/9dysw8ctIwUItko7qK6tj
      cZp+5etOT/5G3BiRrqPKbkQtRSiCHRLQo/V4wA3c/1X5BB+ShzG+q9OW03qU8aPk
      RhXdiJnQzlIOLsrGljgB8xPPDwF9ba+IfqhrEIy0JQfN7stz/jiqSLtjaotuMTsF
      L3mHZkOpBf31ah27AlqmnFHVqJsINtnVVlP2WUEJT9ijaFKHZXKGZTbiXuzB1fmD
      4D+7+r3nRHGZhvQOMhp0y/AyOqJEKb7eI6kLI2i/uOVP+ngoMGI5RhiHRp04oF9H
      xA9phS2IA/jCZYCs+q7JaNoQU8U=
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      kubernetes.io/description: Contains a CA bundle that can be used to verify the
        kube-apiserver when using internal endpoints such as the internal service
        IP or kubernetes.default.svc. No other usage is guaranteed across distributions
        of Kubernetes clusters.
    creationTimestamp: "2026-07-27T12:17:48Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:ca.crt: {}
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/description: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-27T12:17:48Z"
    name: kube-root-ca.crt
    namespace: openshift-multus
    resourceVersion: "3863"
    uid: 8ca4c2b6-ddd0-40ce-9c98-8d79bda2f8d8
- apiVersion: v1
  data:
    daemon-config.json: |
      {
          "cniVersion": "0.3.1",
          "chrootDir": "/hostroot",
          "logToStderr": true,
          "logLevel": "verbose",
          "binDir": "/var/lib/cni/bin",

          "perNodeCertificate": {
            "enabled": true,
            "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig",
            "certDir": "/etc/cni/multus/certs",
            "certDuration": "24h"
          },

          "cniConfigDir": "/host/etc/cni/net.d",
          "multusConfigFile": "auto",
          "multusAutoconfigDir": "/host/run/multus/cni/net.d",
          "namespaceIsolation": true,
          "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv",
          "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf",
          "daemonSocketDir": "/run/multus/socket",
          "socketDir": "/host/run/multus/socket",
          "auxiliaryCNIChainName": "vendor-cni-chain"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-27T12:17:29Z"
    labels:
      app: multus
      tier: node
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:daemon-config.json: {}
        f:metadata:
          f:labels:
            f:app: {}
            f:tier: {}
          f:ownerReferences:
            k:{"uid":"87989821-568e-46a1-8033-dd8a17b4cafb"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-27T12:17:29Z"
    name: multus-daemon-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 87989821-568e-46a1-8033-dd8a17b4cafb
    resourceVersion: "2410"
    uid: cb336a6a-509a-4708-a6c6-71054aa12823
- apiVersion: v1
  data:
    service-ca.crt: |
      -----BEGIN CERTIFICATE-----
      MIIDUTCCAjmgAwIBAgIIZlY0yUL2GM8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE
      Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc4NTE1NTAwNDAe
      Fw0yNjA3MjcxMjIzMjRaFw0yODA5MjQxMjIzMjVaMDYxNDAyBgNVBAMMK29wZW5z
      aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3ODUxNTUwMDQwggEiMA0GCSqG
      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtwnMplDP4OloNL+u6opxVIWceayCZP3f
      RJ0jDTHRdR+oAj/krpvxDbGsv+31L1PEfwgpoPdmT4GDfnvpl/2NT/3q2Fv+9PdK
      Hr1k0SZ/rlHiZ9fHoMbnv25pissIeTEUMc0ic4vC747TsmuUo8NjWbs5q46q8nTd
      H+ughC9Ne11gOXo+dC0V6/pbacAnOeJ/M/fUJnaOoPkJibbkNwX8M9opyCtY+yN1
      j9BRXxHrQbKvEe3OWMO0iRjMMGfvGm0PbNZgiWJ/8sLaD88TpmBhLpzgwfsCdgDn
      ity/BzCp4bdxq8HHBb7dmu6AqpYg1J1/gCUkI7yTniatdvZbrolfAgMBAAGjYzBh
      MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDCM+H
      awd4iTHr1Y7ZWaZiyfoJ4zAfBgNVHSMEGDAWgBRDCM+Hawd4iTHr1Y7ZWaZiyfoJ
      4zANBgkqhkiG9w0BAQsFAAOCAQEAo/awLN7Sw5jo2yBQvUr8l5iqTv87k0PxKPMZ
      vw+cbhjMikKr57jlD4FizmuXYaODn8C5bT5Xm18/CaIl2VoJsI4T/8bxX+Bw9ezS
      98U58mdVethhzpzKdmqkkEHf5y3T0l1MmEqPGxLa9RqdmutOLpQQKgQ4f9tT9tCB
      UUssxdL+OO55LUpn5DYtHkp3ij3jEKny1Xv2Z+XiUVTE9Hb8WdejEqVEux0wjiYU
      byMlC2P7EzUfDGKO5FowdNFDYK9fhV8mF88sZKrFUWloxRWVDMqbrBWXD+0mLBYr
      mjjYWHD6bkJSzxXwgneDdGWDg5rtAWiRxgCN+u4zZOq/YCo3WA==
      -----END CERTIFICATE-----
  kind: ConfigMap
  metadata:
    annotations:
      service.beta.openshift.io/inject-cabundle: "true"
    creationTimestamp: "2026-07-27T12:17:47Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:service.beta.openshift.io/inject-cabundle: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-27T12:17:47Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:service-ca.crt: {}
      manager: service-ca-operator
      operation: Update
      time: "2026-07-27T12:23:39Z"
    name: openshift-service-ca.crt
    namespace: openshift-multus
    resourceVersion: "8045"
    uid: ff3b089c-e521-49d8-8be0-08ffa27a486e
- apiVersion: v1
  data:
    whereabouts.conf: |
      {
        "datastore": "kubernetes",
        "kubernetes": {
          "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig"
        },
        "reconciler_cron_expression": "30 4 * * *",
        "log_level": "verbose",
        "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d"
      }
  kind: ConfigMap
  metadata:
    creationTimestamp: "2026-07-27T12:17:29Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:whereabouts.conf: {}
        f:metadata:
          f:ownerReferences:
            k:{"uid":"87989821-568e-46a1-8033-dd8a17b4cafb"}: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2026-07-27T12:17:29Z"
    name: whereabouts-flatfile-config
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 87989821-568e-46a1-8033-dd8a17b4cafb
    resourceVersion: "2409"
    uid: c0c35442-4259-40d0-ad85-0168438012d2
kind: ConfigMapList
metadata:
  resourceVersion: "14927"