--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-13T10:34:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"33dd3034-91aa-47ae-8ffd-92d02ced6ce4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T10:34:48Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 33dd3034-91aa-47ae-8ffd-92d02ced6ce4 resourceVersion: "2895" uid: dc5556fa-d53f-4d02-8b8d-46fe94a8eaf8 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-13T10:34:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-13T10:34:48Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2891" uid: e30edabd-acef-441b-aafc-e7c796ed1346 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-13T10:34:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"33dd3034-91aa-47ae-8ffd-92d02ced6ce4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T10:34:48Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 33dd3034-91aa-47ae-8ffd-92d02ced6ce4 resourceVersion: "2890" uid: 72abd082-230d-41bc-b5b5-61be964d2289 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIEnZWXlNj7C4wDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzEzMTAxODA1WhcNMzYwMzEwMTAxODA1WjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKKQM1/b/ZEGsYd0vI1ZU342qZ5P9J/p gil2bzW8cyBB6JamJ6MnXU2vHXsVR16zw5XMhUtl9yNDIIDeycrN/hzXissr1X+C UwFaIJuGAecBCYCkINFu4fyoPrOlCNzssdCe8hk97wvaP4i+8QUQvshGO3SgXuQ6 WFsds8LJhf+XJuy+7pyIgXYfhGO3n2U++HiwBza19y3NC8M0h2zCXu2UGMoZlHRt 52t4NYOidrivKNOQdCubgEChBdT/Fteo1KYVTGyVYiMjOFxMEuFWoVBJYepwS9KJ imUNs2FjkulqNNDZdaVb9x5JKVC6l/l1QBerD4esZfNBVhpjZZeKvv0CAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFC1u rN8i/IJ/LUdJD3DXdVEw64eWMA0GCSqGSIb3DQEBCwUAA4IBAQBXVav/QRe+Iegp oV2pJvAfhPY+C2fvZRfcCswE8Ng03fxF57eJ0xStHgHrR8doq22YJuzxj1HP29KL +rOnDlG78rhTkrFSMp22uvjnRlZceM/9AR5ObuHkp3lWfLYmnU7gNqW+PP1PnjgU MZj8rVlaxRilaEmIuWpJCTeMtZlvkLOwXJgakJhziqmA3V8jTD/GvzcAz5QTAdYF IFlSmvWULw0jgLK69CmK7/yJv/l++xzdfaeYA+iSWkwCS+XGVZd+7aOR8hwmsUBs P6k5grXQmR8ZvDayKDdmdRLHCpd1ldIGukOVL3cFfcJpbqivv1T1Af4sWMogEBGR y2JPB3LC -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIPe/kmQiitYswDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMxMzEwMTgwNVoXDTM2MDMxMDEwMTgwNVowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrO2ajITicN6 xodNjla7zEzuNb2VxXTSe/S2GT5ZM6YxbjdJhYOAQEC0mGo2uiJUy6XVs3OyAkZV KJn+MZyLUpDb5s7ynZuC9GNS7qcbwHWS4mfWvC97/d0vIc9wHRBRE9bpVhDjNMzj nKaBq5XVTsNT+4MP7IJXYmJceAmH+uNxSCyDmxfeGa7yFhn0/AXInm1jw/YlcBTn uhanATys5aH04tXnhrw6uj5MTKKGfqDjDm16OBEoTL88eQ66k3FLvZNr2Olf7Ssr udekoc9YuXT8/Fl8UX7PKqmwrjDXDIbNmIO0njDxS54khWIR7m0s5c0kZ9v25hDD VyQVXHpKJQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUJ73HdgRksXIcZA9mf6HTJl8aH+AwDQYJKoZIhvcNAQELBQAD ggEBAGsFAwZjgwFqipzPyD3kJL9LBnXHxK0QUJ45zBAlC470RHeIems56rwYSZjJ tS9eITBflmpKLL7zeIgnLZBeC0Oun5H1dRAxgSLi4+ki45/qzO7ENJ756WkBM/Yz EmZ0C2pJkAyBle6uYuz3DBQ3PGEJBDo2+1IE7DMXqvUezJXxXIcwKHMqsg3naVad fWES6SGi2TKDcC/m4scclKz46zySp3toFlps7MisrR5EphZFXp9MgxwIqrcEWc+p Gt9oWPTcgfgbszk6Ugt8wpfJREisWQzLZu4MZHMK+7aVRjJ+1MofwxvSDcO0sDMi lAAZ1doTFbMZddAue9jZDMGFjts= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIILZqFclkA0OgwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMxMzEwMTgwNVoXDTM2MDMxMDEwMTgwNVowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FlhlqBCeVnhS5sSwx1BTysOjoxDyNrDIywf3iG8Sh7gmhoqNnwceySIA5LJ +XDfsfMjqNISXS6kq5wiCYAn+7RCZd0dqv6t8EdvYF9s95PJ6nCk6qyv6flv7dkd UGM8D2FJ698v0Iam299DIrRYOhmTEZanp6mv20eIzoOLtg1wmtLPdIi2hXUbSo+R Q5+wmLQOIDFIAiOcPNtjDpPkdVN/5W6272x7CwOtL9Ue6cUNv8/99Y/kiMlBFD3Q Cne4OjUHrCq45UkCAC4D/WSzMdd7kfzwRXDQFaXVAwC0/J3BNl2BTux/H121gwdC lph3STAaNmG2jfIdFJTXgXKIdQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU0qHkRj3O3LlAhqxVWBjPirrm8DIwDQYJ KoZIhvcNAQELBQADggEBAAz4stc8pVVq0ZWTkQeNwPvPKyc+n78r98Wp0Csy8SmR VPbEvMBpANmetAlTnGFY8fgr0Zwp2Ut/OWctuzpKirxuFuoSEpJBHTXqpB5zKrRC 0WG9Dkz1B9NFSjQqz2akNzRnBn5Hc0SNQwaxENAKJAiNYPkD7kUZN93JDtwG9oDY hq3R569Hs6ijJ92mGtW6afZfIk6dcugqQWEz83pCqGmP9KGri0u5W5FAXFzesrx/ DQVfXSDsLWUfy6PmJHh1b7hMdUvfpZwGt+oK5cMcNDYxN0nC1YvCwcuuLJHbPf1P 9JkLj9GrLXeYlp6n34Co3xmF/1BFGPKbUdsbKzjEWdc= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIdkOF+WEsmiAwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzczMzk4MTU1MB4XDTI2MDMxMzEwMzU1 NFoXDTM2MDMxMDEwMzU1NVowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzczMzk4MTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lL6 vdV4Pz59uMTQrM4zkVMFslpNv7PO05mRXl4lTqKsE5qwvJDIXe0L9lWKX+zIDP6+ rCKsuUa0YlOOfLXcP+fPXeRw400hP1dYQumZSK+k9LjYgTl84qZF1rmn0VYyZzi7 +jGuf2jWTYjMwovjEm+pQ9/Nk0Mlc/W3H0SLAPgWyTQyZfjC6sHV6zl7jNG8hG6F yQpl6ApBl/g4hd7OLPZKp0lTv6lqz2Mzo9lurzQ9DFqS+Aq2xq4/Khkw1SUf17aU 7RzcjuFm04r8pzHZLHYeQ0ZsjkPWlmTOI526HKQVuYnbsw2XnW7nw+oZEeYubg7H Mh1f/6hktdumYbL4lwIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUDEpZF5of9f5/TxbyE6eTV+W47EAwHwYDVR0jBBgw FoAUDEpZF5of9f5/TxbyE6eTV+W47EAwDQYJKoZIhvcNAQELBQADggEBAJ2/p63O Q5lxspn7A811orlROUwv8ZMKAiHCdog3UKPqQ/KIA+ykvVmrnnoOHIEDZOd6qCT8 RNhdpk7NjWBBmnuF595bYuLUeLTMzz1rl/jAaHDMjglAxgFVV8v9k5zyngjbMmOt zyMk9hnrg4PMyBBMyu96wNAWIzRretHyW9uEe8sN50wYdBOu9W1ZVSLCnB39i7XP optWzqoAgMhly/qjg006aoyv6h8oi15vjcttOa5Zt+sQbd3Mwi331rPMzk/Iiy96 yjVL9mvejcYeSnPaeEcbeyX94sqor64eAC0RWpb8n97by8FR1JI0sQc6wgGVK3i1 P3HoUedW7n5YzXU= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIMYnlYUjAwLowDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzczMzk4MTk4MB4XDTI2MDMxMzEwMzYzOFoX DTI4MDMxMjEwMzYzOVowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx58kYqmwDNBtkm+H f8CFMcBCiLf7l3IWfOozzA/MbUAgFB1JbJsh6VmEVZG9GA4D8PSFlzNO/2OlpNyC b+6oyYo/UmCQ6fBl6bL+x6RXjQ0axO1Gc27MINRkUVZ9sbHOeyBdtlFyRAj6Kcqf FNTbxswyIb53Vp4lI7m2CWK+fMdY40SCAYZgB2ZHb1pRWFRy3g52SQDyrpEoI90D gU/S7ebQLEA8f+8PLeR0ImBKbFVjjvT3bmdDGsdS2Bc0hwB7cpP9KmuosxcVXRmw g2Hk1xO1HdvuAOSO/RaBSf0WkKy9ARkG4vAidA4FFtgZoqoJ7R2PmQYT8XUHRgZX szU/lwIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQssTUEhLlMhwMviFECl2FpLGfH UzAfBgNVHSMEGDAWgBThAQCSPA+QFjjxmFiheWiVcw9E0TAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAFKTf5Nt dYJbAkMnow/7Z6B3wddQBFS1Jsf+BPUOq9bduMEUUkH8lz80BcXDk9uCcFRmOdB1 Uz+bMKzgK0sqJqTcFeqC0OY0KgpCbFbMtgq4+ueGJfPLhk5/vgkjH8U+XkUEcjr7 I5XWJ2Dpt79qaGG1RxrAs/fojC4IE7csNeO5hR6biBtEncPjVgnWe5EbMCD5Pv1S UdyPTm0lqgjJkYkiqK4av7cgaJKMIAAVqsUOpEMPTPOc6/0caSqlob6hLII74jpN rYR6bLUCuKo0Cor7LU7zXvJBlqNkF0KJ5hMrildWCe1NzqgIvduLq/tpMuMZgMi/ h0LohLavOlTIrtU= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzMzOTgxOTgwHhcNMjYwMzEzMTAzNjM3WhcNMjgwMzEy MTAzNjM4WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzMzOTgxOTgw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCol1pO/xCmtQUQkDYKYvw eaQIzJO2VsDZzkwULi7GglDNCj7v/DO80N3FAlyiAEGryL5TCl5rFB564KvU09UG Fh13Pfht1qh7WEkHUmDdpK2hjM2Nq9wfbLoURFqX36MWinm3aPP/bbG5yEXb516n eA8i13dbBsF35RaiKum2Rl2K6Ni+aYjnuV384fwIEW1S8feBFg2oAzx72EywdgFN ebmMynl9FLiViipQGTJJAKHoSgI29ZEG7fsIcvWhTShKCopW09B2R2OLbZy0ZFN/ l7Yh+H//nfrj5waCJE2qSnfi8HlkFcIHqJ7wMHalBt/2KBvAA5FGFLL/wfPH9PjP AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBThAQCSPA+QFjjxmFiheWiVcw9E0TANBgkqhkiG9w0BAQsFAAOCAQEA vbwCRkcBegRzEA0nbmzAGJKwbmKRpzIVmq3ztxSuhOMkUHOvCwyKPUydtBCm4q55 p6FgGjlB/KE7vPLDoaVc5cOkTpxpm88GPexGKAcgmWgd7rF2qCoNQwzkXdBqKY3B z3n+p6/4uKHn69xX/1bK4KLkZJK306GoZ9OtxPwXyXSHloLeEW9sl0/AuuA8nBgO A7opn9IjkY8ehNXxgLAIp3Po+jPra2eYZ3B7aUC1OXVWTfLgBpvbTbjSfOFxyaHK 8tW6gBX2DHJdC+TshnJ90bKynTtwMcW396vd7xaNr8RgLYdeCG9ugL3ugaSOyAXn CSpfNStSplJYaSxk1PgQRw== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-13T10:34:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-13T10:47:20Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "14722" uid: a79f3735-e132-4a67-b423-4f596cb4c3b5 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-13T10:34:49Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"33dd3034-91aa-47ae-8ffd-92d02ced6ce4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T10:34:49Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 33dd3034-91aa-47ae-8ffd-92d02ced6ce4 resourceVersion: "2897" uid: d7d2294f-3ad4-4a31-b726-8e3c22702b3c - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIHZgRaaGLFrAwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3MzM5ODE2OTAe Fw0yNjAzMTMxMDM2MDlaFw0yODA1MTExMDM2MTBaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzMzOTgxNjkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1Y9dpgiLq3o+bBP91jGWGkouoC1O+JtI KkPZvBVcsVqtHFRkDaaQUocJHT9fTmvcFmJMU2ggwBjCXE2qON6+xhmAYbw8xXe2 LaegCF1pOeSG1xKtKun/x0orqLn8/5bxs748w7QMaLW6S14gsjjckJkPHK07WYqd zKt056ZLVPP5esiZMcEiB+0XhQ/9rxtmnVnzUUtphJEaRKXOHlHKbKHwu25gZ6aV 2994iBuPU/Lznohz2O5lYeNtZEPXWkmACcZnkbWe0cNVafsphePzTc006tk1/CZJ PMEv19UXFbmY/159blSYM+iissaEwqReLtTfdFtj4AprT/rxH3jDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsg7HE 9JSTct+nMYN/DvAv7jJAeDAfBgNVHSMEGDAWgBTsg7HE9JSTct+nMYN/DvAv7jJA eDANBgkqhkiG9w0BAQsFAAOCAQEAD2NXriGsqzAIK5YEYY6t4Z8S6lsPcxkvEPhe pWsChqR7PAFf6KDDSpz6TZ4dOAy9xMSMAdMLpaCjtC1s1l11qgJR6BHKONdCIota InvE7Vy/bVCZl23F0+soFNBKCuyngolHGWjfBhOknUI1i3VU7JKjq/IHnWiWGy5a Vg+jybs2Crhp53sI6Um1YxM94Rxzf0+6alkVpTFmVXsFGGftUGE/esZI/bKNt7lR bMPZP8+5VFHOnKSbRDUdwglA5H0NyIehsZVzmvCGP3R4ltk/OsnoYyeHffPJDIuq 0CzuOoQVmEOZqATyZ3jNn/9YfNMiXqrdOQwEA3btyoR7h0eiHA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-13T10:34:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-13T10:34:46Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-13T10:36:21Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "5284" uid: 0a244eaf-c5d7-444c-9660-89b90b6c56df - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-13T10:34:49Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"33dd3034-91aa-47ae-8ffd-92d02ced6ce4"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-13T10:34:49Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 33dd3034-91aa-47ae-8ffd-92d02ced6ce4 resourceVersion: "2896" uid: 8bbe68d9-61d8-4e99-908b-cb66c8d2a458 kind: ConfigMapList metadata: resourceVersion: "21840"