--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-13T12:37:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"30fe669c-5eef-4187-a2c5-1deead4971cd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T12:37:38Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 30fe669c-5eef-4187-a2c5-1deead4971cd resourceVersion: "2914" uid: de619e6a-8928-42e1-b0c5-2896afd1cac9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-13T12:37:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-13T12:37:38Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2909" uid: bc51d958-101c-4d07-af5b-67e4b5761936 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-13T12:37:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"30fe669c-5eef-4187-a2c5-1deead4971cd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T12:37:38Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 30fe669c-5eef-4187-a2c5-1deead4971cd resourceVersion: "2908" uid: 098b43f1-4e6b-476c-b606-9809a603801e - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIIjIPbsRXsXEwDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzEzMTIyMDAyWhcNMzYwMzEwMTIyMDAyWjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAPI2OGxsZZmW/pFCvfIcO0UtXD2hupjn sd2aVyOfYMp8i7rwgCPJKHtLXiyOKMkaGxFSMprb8yAdH/+6WD+PMnUR9n5KWYu8 RDJOOLnOFsXKMi9W9MRHrkAXtvwtfZWGieLc2ohg7lK6YgmkovqYKxPkssmKPzs4 AU1xpSbP39QlJ/mIWOG3qLXmXfuGRRrTPN/SrcWXSjs8u2H+ScCGte50djIkO+fB hYIA/4Raa7n2RDf+Vvhp7UntZHa56bWu0JEqH4Iukr+3PCtYu3Ze48TgYHxh+qls e2Iox2Oi3wcXfu6vN+busqni6a1msl7KDC+1BF9cb9WAieGbK4B6mXsCAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFJIm O8cXPYBgKsn5CctBZeFliHcIMA0GCSqGSIb3DQEBCwUAA4IBAQA5Rjy+MT4ZKQvq DBnDnHtXyUVuXcLOIHCCDreKJOJk/5BINmyqqp2BNBg/L+aOf8qS5oj220Yp7Zna GAh8Y5IAgypecMv3ZRvoUFGQvEX47gGOC7SnhTxRdoXngVopPRbjnVWoStr4IBFf 1fiMh31A17nz2exqQH+xf4gEZGIgVNN/QnPBGf/1Epc9gHK+nbBTC7bDSRYfVhMH WAVL23bWgFnExnxUabUYzu2LwloAHPoFUHbUBZQr6qS5RCU3FmkldxWG1+XLJJ9b N4GHdCEGT+AWiamNZ8PEODDACOWLjIamkczJY/3IUdEZ+xfKm8+9Xg81lMfX6jkX DwEtbRFn -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIf7k5PowTYrUwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMxMzEyMjAwMloXDTM2MDMxMDEyMjAwMlowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFFVUi9wNj1v 4CJ1H1JSeW+C4KozQpIHmdalAp148JM0JxR3m+bI+EaCRBQuU9NZgvuW/J+ohPOP PFNWMqJtkHglmGEyKn8c35UnXdYH+wAdHsfmUoq2zPujli2D15NToXHmQSZMbc8p +qPhxKGwIyXk/ZwSGT6DqEOKnsZDPwpfYhlwAUIS1bND0VOB4u4YPiJiqIVgolqL anhx2AKbn9q6Gr2emT/CpUANPoNjH4xDsLggjOEfL7ZHEr5TZgh44oQompukKmAo gDfz0WLNUolLfDlRGS5BnHd58HmWun9Zhd56rOPcsOKiSOudoQ2gd8vKldxDxZD/ B9GfvY3MzQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUdm3cLpFjx+cRa5MBFZrdOGCinuowDQYJKoZIhvcNAQELBQAD ggEBAAXb0pWa06LilMVG3yIi/LoI33n1Xusp2aSxW8btsFuHrdtYVRNaqmMBQlzr 7jngxWmqq4zZRPnIKdz+VOioyEt1ayX+cj6QluTIJes7fubTeMjANVpvj3JtHmMd SDUJ8dh0VXK/KgAH1og6LTBY1+Q2KDuFaS1l0ZStZKqSHRBjVkaUZMg5eOCZB2Wg YXJIJzqR0G60HilJQwL6cgq9xpi3j/wz3Jlq+OjVKQHKkyM0m5d3wehz5H5Cfnf9 dwMkYaRj3IqoMwijS5LCNXMksAvwbxpWo/h2stFGCynGwwZJAdz/oi3ZKZqSjehK 0LJ/oE3i4UFXvWFPonDi0JRlvLM= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIIMpO7KbiljGwwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMxMzEyMjAwMloXDTM2MDMxMDEyMjAwMlowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IIyPZaH4lOP8A7KlsWAs55bbbZJWF7bsSXzK0tfrXN+E8VV1NVVHxaD+HXK ByS57GeBOb0GDgESaoySaIqmYPxWW1nwUwIhpwnCZ6oeHdo2UMuIoU2h0u8hjTl5 slfjnaZpMJc5kiCKLV7ZxMCPU7484B+m3rWsrDl50fyAiUvQznRN5aJCtyEFI2wv 40ZtWmmF+JjQ6t9JQrS73kyfKzSrVUGiBNRPVhKB3Dnxj893SyTZvEd99J7v0yOh ZW0wbqN42Pc9kUGsJO23TwgtvjiI5r+DMphczbTODkIDXH9CuJHiNexO2oO8dC2Y +uFXNAYMbhvheyvx8vNUcCgiOQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU9RabnydJZl9aQJY+RyDS9H5eSaEwDQYJ KoZIhvcNAQELBQADggEBAFgq5k45EJKnPkQbabp8Y94kOBdx++k76DZWWDyfJG1j AJcvyeZOhr5BHnIX4OuYeX9wxyEVM4NZMcA07KruOLdXD2Hr4dWBtLQZiTQOA5EF Vx/xaBccehEtcNQXbJeZuAkvlqmDSAE4uPKbGHWPRu8Omw5Tl/3jf0h8Lf9jGrD7 UuZgnok9xF2wOydA4MV/OxO+cdGf427hJ2DhB8wsSWH1MWPBxHi+r1LvdUEAQbKJ jQfF00gdelVuTE1rZBHdV3Fynbq95lNtoJL5b2dG4AoVnNKeQu2OxluWxAA0TEXC yAuB1z+QVCM5feQNc0hiVbOkgZ+J5X1wW6Z+QeE2iRg= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIPr0M89nBBuIwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzczNDA1NTI4MB4XDTI2MDMxMzEyMzg0 N1oXDTM2MDMxMDEyMzg0OFowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzczNDA1NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnif1 3w+6eoNdQaaUO13mBKauEaas2pzHE8dbtipBytCVMRhrQL8uXHpsX/NWfHv36BON +2Zlx2OVYO51Q8+l4C0wKoqa+WoBV/JcPkYK+2ukexHBN3SUTOQlhWmFtbJZRvgn K3FLzbURK+YHiNNfUeqKvVGJgs+JfaZkawhiF85tL69UBrEA+kYFXV3SzpSU7Fif pfDBGpgKr/KfQK0iBjjXkaNJ8BhG8qRQ+AhYzkiPkL+UMRg/Jm1YnlZmkI/jfmBh Rdbi35ojY/PqsjWnLM6SudXYiEGIJtrSY0jXxDNut3nLepJ9IX4S8vFJyVz7Jlc8 AsI38RBjCUlX+5lqnwIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUf5pe1mtlbH+59Yj39bQYKphtJHEwHwYDVR0jBBgw FoAUf5pe1mtlbH+59Yj39bQYKphtJHEwDQYJKoZIhvcNAQELBQADggEBAEuMBwgP qdc5EYxrK899SxKz0SB3JRFkNBHTEiZf8WJo/o59a4Mhigiuzu4dtwR786cWcBt7 uLsdPb4EVFQKyqGfO0uZEl6lTsOzuAUgrtfbBmFXLF+ZjyzyAve50b2yN1hsVEcP RxHmsb9Ita2ReDz6bjX8eQqe6QumD8z8Z0pD11z4+AelGm+GA70M7y8C+VpoAZPy CxBRF3JgXiEpM7QVqROS554MZY+LuUzEt7u9QbRMDPU6NSOTu5YFYtXL5aX2Z2ZJ rZKQ6u3jme36+DwFXIeC/iGYv/+BMQ7r9aM2XLJO2fnY/szkaZz/0Ou0n/aVRA3X ryE5CfJdf9A8juc= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIJmcKjF59FvAwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzczNDA1NjA2MB4XDTI2MDMxMzEyNDAwN1oX DTI4MDMxMjEyNDAwOFowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLfFFdRYqdt/quRX xyxonCcqqD41iOY3Yhz4m3kymXiF8TRtE7OfVw/LCJ+xbASnspvPEdc2cJJsNrAZ kAmH0ABbxQV2fC3ken8xMLbm91nrqH+K8UKCZRdCmce33x9bVAis+ueLwukvwUjE CMyPttzE8E0hru5oS87zcX/kFWDi2QrxdXQT7qGR4Hm6PIEYTtdbT1WLknWyoU3W SjYaML08TkvXK1ZevUgNrqoHwyT8bu9y95WtWLjZ355LV0QaaVgo4Tagl6k6KLeH hMmNmPQU1IbcvuOZhEvVPduGVOY9GfWJcD/8A8eJQNzxm5avmBojMvfO2iDrA8gx vSLBfQIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRUjoCRbWRNTbZtmzYbYJce6k3d KTAfBgNVHSMEGDAWgBScx1RmZcgEL/y7oamYwJ7sDnnaDzAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBACfiRWXJ QWHpKFT7Wxm6nfUotd9cIFfDBpdbrlMvQXMNmAzf78wDtseSek4geglNp914phYw OzOaucOAHxH4uKC3bYwXfrLRf/4pnC/LH6219/vEU9Hj0NUqbvmy/p4OpQLNdVtR Z9rr08F1tEZkxj7jOiE9BVsG4rf3jM4iqKEgVmlmEmbYXVroOAtYLiiJGpEYPscv B3d8HTRIlcJ8IakDBOTJ+1LSfMELYirDDZp0/gMvW0yKclmlsoNHHuAGyzp/Q06E gMTj1/VY4D3qe5hQMtnLJD3ceJJ90m3Qqmq2+SO5mndhzB/fKFuXnSvNizhnUECS wQzpBOxGJAsTALA= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzM0MDU2MDYwHhcNMjYwMzEzMTI0MDA2WhcNMjgwMzEy MTI0MDA3WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzM0MDU2MDYw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYiaXyF8K+4V4Qg64UXsl z1nFdESTF73mcAI3eH0pAc38X2OdJldTjis3XZUUCcIuiwEETdYHaPYkCwtMQIe8 T+kTixw4j9UDzIxMlj8XiDfVN4LDO3sxcnd2s6dzMPq2Ue7zX9/y2m011FZc2s+2 ina22uL5FdLMTX9pGX/fce4/ePSXsqpiLoBH7K8Tvriqju5dsMxGXcvyXmAknA4B ClErByMBV1RKmqZmjwdaoJJrk5MMA0cNtj2entizJM+U6H1SI44WQbzIwxLwfNfz rmw93QmYij6XoArj15xvYNLdfGilE0YNUXpnIxKLQwk7yCwmdFrRPScexVH9GQB3 AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBScx1RmZcgEL/y7oamYwJ7sDnnaDzANBgkqhkiG9w0BAQsFAAOCAQEA V19jFtXvwhTckCBSpMUvfQxjCUWHdNNUZcsUtw5nNQlNljYxDBYNdOD9AoSYBbTY I3OwLvHCyiZrNLKhsqRCHqS1La0kxh5zvhnyjvpaP+A8/BUaZ07NBug2nNqQDQwc HopREpnIAeLKssdrINFdksmcUKyXiysRfXU2lDuyllxonAqu1QX4BaLK+vl90wSr gEMI5PJo3ypnsoZabAGeK3T6QlHKjbORPNy+NNsM5BPeCLvvns7Dh4N6f5jP2Bbl 9JElH7Qc2706DuLJiB9y0HgbqZyEtvnjOS5yojOKTETRXy2VGd8CNIMaHIDBFxZ6 +9oPfbS4LZ5myICUudR+Rw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-13T12:37:36Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-13T12:52:00Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "14620" uid: e40cfbe4-4b6a-4f4f-9a27-649dd0467e42 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-13T12:37:38Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"30fe669c-5eef-4187-a2c5-1deead4971cd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T12:37:38Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 30fe669c-5eef-4187-a2c5-1deead4971cd resourceVersion: "2917" uid: 374b68a7-786e-4b09-913d-8485bc4e3c88 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIXc//O3OpKh0wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3MzQwNTU1MzAe Fw0yNjAzMTMxMjM5MTJaFw0yODA1MTExMjM5MTNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzM0MDU1NTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsW9vPd49OdPneAEx1or1C095wMCMchFVK AUrLMqiUhZ/dJue6ZS3XG6yava2vaRGRDIZR9TOgBwW2YocY+YLN4szrKUgxu0yQ vtVkNlXHarqPgsFOW/kvigq27V5q1Gyrs16aBDaDhpnRpEQBftI2L1KyRMtI75au dKWwWhf1U/10WlnntvQj2WMwqWFC4v68c/im7aZb7FzB1K3geM+C1GM/NoXO8cuf C+7amHm5ClySwjkycl96AyyxK+WlrIDtWsBoCO6MYayWXscxVUegyEToN+1IWYt3 dpm/DjTfNq6Hv2K/Hv1geXWF7cuVDtmQpNzEzVJ8sDsWT3flcXlVAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZAR42 1V45dfxSY87M+HLkiOxFcDAfBgNVHSMEGDAWgBRZAR421V45dfxSY87M+HLkiOxF cDANBgkqhkiG9w0BAQsFAAOCAQEAydxdyUPVbGun/4zWaUrGTGEW06Ku9XWqVCxV Jrfeg22UVhZhYabHA0sB0tjDQPTZWQlEn1aO0IehETDs/m3emxPr8GylVI9ryKI9 +OMO51095TdepY7uax4K/9hGwA/24VvinBAwkihzo/FhHcgVVsDf56aX75mh6ArR TjmbNW8qJGoqpyX6v5dUrBJAfkC/D3BvYtfpaH8Kn/587V1pNQY+nhJg4xW9kKgy CTDRYYD/dN0esDgBSY81L61q1nOu1NhnXYbg/YNhP46+R3qh7g1KJUdEVn2eX/EU +THQo53L7NUjdK45deIhLn45ljQGN1pYH5XMZRD6V4iP63W+qw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-13T12:37:36Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-13T12:37:36Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-13T12:39:56Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6590" uid: de2f3fc1-d0a2-40ae-a6e9-e8efb7fde8b1 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-13T12:37:38Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"30fe669c-5eef-4187-a2c5-1deead4971cd"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T12:37:38Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 30fe669c-5eef-4187-a2c5-1deead4971cd resourceVersion: "2915" uid: a869abf7-39ec-4760-97fd-45e63e4f54de kind: ConfigMapList metadata: resourceVersion: "23764"