--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-20T08:34:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a29e71e5-82cb-4f88-978c-27503b835e67"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-20T08:34:10Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a29e71e5-82cb-4f88-978c-27503b835e67 resourceVersion: "2834" uid: b69a6f28-b8d3-408d-979f-5040e8ef6ba9 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-20T08:34:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-20T08:34:10Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2832" uid: d041ab6a-3e7e-46c6-8c71-bb1ed019bc77 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-20T08:34:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"a29e71e5-82cb-4f88-978c-27503b835e67"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-20T08:34:10Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a29e71e5-82cb-4f88-978c-27503b835e67 resourceVersion: "2831" uid: 228e8b38-9149-41b2-9db1-377870ce5a6c - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIBwwnRoGGBKYwDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzIwMDgxODQ3WhcNMzYwMzE3MDgxODQ3WjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALWjZj/P8v14glA09WoBDcV8eUQUpLb3 6eFe72SBf1SPda79ADDpGoL30sGBH4citaV4Zkt1I3VLSW/4FU7AQMFwOQ08Gejl XzctJosLxaJlcJ5o2ZTM0TdgUN7aK9FsCevcETyIQMzIRj2C/SmGcAtAI0wtkU/N hE3mLc6ChIm2Z1UclTHeJ5tFd1uhPx45Bh4Tw21GhGMMkIg+ISmJ8P36YExZm3Sd bmpPWRfDhI1FyZSOci5bsrcYLV/6VL0yNFDmREQxvNTsvgX9Dh4xSQOdePm26On0 ldz5G3P7qVJKdrBtgCNQ3s4jg1SW7vPnN+uyA3X8lUFSOX0F42c6CYECAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFCTa 0DFnU5eeAtb8qjOeh5SKIGwoMA0GCSqGSIb3DQEBCwUAA4IBAQATlzPu9gU4syIE RArycWxbFNNh7DmHRRwFBrMsYJZWcBMsB21FjEKTQItJKxP8xN2D7u+Z2owx7fNT NbRoWLwAOVJGzkD/N+6zAsVnr6TgoSHM+/+hSyWvucTUspQlQkkCBY7XQZsHx3Pe ljP52ntJhq6vDGDAmNV6fx1zAKYQdfkAZIWHzOorloY4p3f+2IN/AYk2llwNtpzQ KLhJDH4sqBW60X5HT5kzfEiXRB8o4auOO7fBuWfWb61qMMPhcztaFl8UlfE02m0r NcpiBve4KN1p0H6iAcGzuYmJsm0x1PcJ5ouN8mXcsoX9QG/nsdKEIjp3rmm8naOY F5k4EZ70 -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIP4Eq+UPG+vYwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMyMDA4MTg0N1oXDTM2MDMxNzA4MTg0N1owPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKYGtLswbf2J XoB1+zEVwjo5hhQg1DBvc9GwEWGuDWAdQymLJPZc3pz1hSkfHQ0ENbGOJwuFWVAl j9dFYBrbdqJF9IuWTgZxY2dHczOs0gwBLEaJXRhyPD1rCqz18RILlJ1Z3V8H9RFw /d9VDTO78W0X0r7xq6yBK0WiMsrT8V8S7j/UP2ZiVIi4PCdnowFKyPk9fELk/cEZ LCG/9Ctpn8aUqk++3bFg10SHEr5wm/hIRHGlkypDi9tvjPb2ogxWEincKcYCn1Pw o+0mnSLAZZHrPzeWesGJjwvlPiVq9eQnHv+k/sz/FyjnymcW7qEcRhNEKTzEeOLr Lrs9BY5XHQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU0w6bfBYmNdo1NUb4OLzgIFeNsIgwDQYJKoZIhvcNAQELBQAD ggEBAJY68eKrr3czrWiviZkeRRKiRwveLE8qc0Vz9/dk7Z1SxIdEbuUcRVJzJdYq 0SrOzhqvqoFOlb/b+KyWzbxszU6zkkJAzBt/dgChTUIbdD/j6Asg7D5zLMJpQV2Y UqSCZziJd53WRSXGMVPxhMJ3FE8vLsRtNhPXQyOGpa+O7hGJS8npQ7GTa2/6Um7G CKrHQwhZE9rygTtSOCamxwvU6t5zzkIWrGviV6jivSTIB7W3F1b2PIE6nuaCLLbG w38wxovVM9xmtEEphv069Gn0lkw/5/KopeiVpFCT/EDSzcOFCMOFq6kRDUnwuzMd 1x33bvOOS5QmLiqi6jnQGUe7ACQ= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIIDKh4XEm9LlswDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMyMDA4MTg0N1oXDTM2MDMxNzA4MTg0N1owRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujtbOmeoIEf1PBIKUxtVGHjjNQMHRI8RCgAnfuC+GkcUyp78045uDlsKL7m5 tfmnIvjJv37XYg6JNlvlaQJl8kJ73XYItqAlRLqObaPNlfPRwAwpKq5wFrbvCF5p oyDR550KiQHOeA9Zi+NMb28R0iF5KBVQJ7umWwsPGtvdIoJIczfkUqfghlU8aSNY AiBIW7abOo3e47VJpPeZq88Gl1CYniaS+1pGXaDqgTFKJKBR9E6R2yTckRFOirRi TE+nWNDWMlkSnoOW5gHgvkOjn+886lxNBtHZXa1cdzqmqlRmOtxeXpsb4Rhnycfz iSIUk6vXXyBLq28LhkKc7xZ+vwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVVPpljsSQETWytUnYf3YVv2vL4gwDQYJ KoZIhvcNAQELBQADggEBAFAMyyhd3qzpwz95lP42iKZ1hEd8P6atGs7/k8+Xibk8 AaYk1eMlG/k6aOdW/uA5ZEK5+z5HYpXDp3dh8XDMBCwUQjxyua/Doy4ALRGGPDx1 ZpgEnO2+C40m+Jj8Aq3iwDZ8KOfAS3gxp512KZmz3gi5QDpAxD9dCF+vk3Udr2eD fTbkz1oogcK0f6eGr4WvKH1JmHdNBmi5GZSc757jrUxqSUmvv6y/MkKy2kDVVkrQ ud9+n37+o4CXLTXFvDd3slgoT7dNKgpFCRQNgKpOg8SqlBh2W3Lw1XgVHi1+qrvD u/FEI5b1vMhtYJ7L7ZjWOGo89XUdumtah7oBZfV/YIM= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIckVHyK9BB/YwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzczOTk1NzEwMB4XDTI2MDMyMDA4MzUx MFoXDTM2MDMxNzA4MzUxMVowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzczOTk1NzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kIr LqrNwCe6eaI8H86yMCl7cGjhkOlTM4hpiS7y1yDaufSDqh8cXnQokz4RoZ7ov8q6 P9zDiqBr2E5ss1S062oRAuF/gdXMV+4D5qXJ5NV6I5s/PAnQQRBbhgHHDIHntCey M4K7/BHgSOybnkp9COxT2Rj1yy6KBzP4Qu9N9qgLR7tlswubfkUNgLHyBnWalghN X6huuAePjRMR9MN8atidpH3h1YPY6tC3qgTluM4DZn2morFr1P0Xx59sXCcQasLH FW27ZlrhQc/NoHJnkdrZmaamrih315UqN0+TIGCK/pt3HgXgHTR6jOHhDglCOSoA aSuHn4cNnq+KECArIQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUjYxb0mCrYZyytEDF5x5iwFQXFVEwHwYDVR0jBBgw FoAUjYxb0mCrYZyytEDF5x5iwFQXFVEwDQYJKoZIhvcNAQELBQADggEBALIIxxsF Tgx4vg9xwwj9AqB9pz0Fv6Hx4ejIMOVb6Md9eyKxZpCZfvIQ6rV8915vm7dUZX/M BIwzqpARR66mtLLSsH7J2qGuDK8rxfvrvtaerYfrHQ/JU1qKidVuT8kEbn7IwpJB PQ4Vf2cQQxe1ZYM9u/1TVpMjCZ0nDlntJrp4Gl4IM+WdZLBDm2Hk/emQWTKfDBhf jMQpmoCoS2Cs8ep22Vn4N8+x6p3xFttw6c7GJCHOAlUjSyY1CoKHRyIWfQP7kibm K93QBG//kYxiNxqr/t+G6VYQN4Mc74NZKYIJBB2w6/uua25ZTaVahCJNyrtmIp83 Zmv10X0VwLMpTqY= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIa8BfWlsv8AwwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzczOTk1NzUyMB4XDTI2MDMyMDA4MzU1MVoX DTI4MDMxOTA4MzU1MlowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aTA32US6fA753xl fNzBmd8NKqpfahDwVZsk5KxTfZAFh3Qg2z/WaftDRE1RVSieTslZy4G2w/4Dc+Xj YfjVXT7RwNSnAakeEoNI83dM2wsHuDMHTZ8SQ4Dk7oLW9u59W3/BidMIBddznb8o KVojZqs46utQKl2348HN2/zcs0Pa8gmLR1EPMSa/YiXGnOnCtDW7akmrHN0E8sRb RX29GycjCv8axb1PlvUp7sQTmGE6yMv7ve1SsId+upbsweZqqp4UI24lhhjoXUYN CH1eR9LDh5qP/Gh2GRNdhXCKCNAl9uo3JtW5A68pzt+FWlztnMSAKegu+8SmHGXN DBrCPQIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS6gmgp8cYryYnmD2TxtUFputYW ozAfBgNVHSMEGDAWgBSpNOwTL5dsclaAaWoybUU65hi67zAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBACIIruEF oXzQTNuNRkGuCVsIxkOfl8He+c6pwnUPdI2Fe7lR/YPekb6ChRU9O0uxLFTpwMCC tVExzUNPR6qb52cTR7Hy3bFYmba4xwZAlBbHvqhjwZaNZLxWA5SZxsekmQWaC72/ wNoHaLeVrz4mTYDR9ZC+5HhW/f1LgY8VhMeX/YVoMkgHQWRWtxR00gQ5fgufgVV8 4RafsE3SLN9MNTakvdHCagFlsiyB46h6hYxAdhi55/vT4oCLZ/rAv0LPZD+c4ckL y5+RoQZLM0L4NlUygNUOZSE+hcqiThV8Es2Stts2lrTyWZPlwlM7hluA+bJzgbqG ru+2P2IA4sVFfFs= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzM5OTU3NTIwHhcNMjYwMzIwMDgzNTUxWhcNMjgwMzE5 MDgzNTUyWjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzM5OTU3NTIw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqU10a/va7kZMyNMUlXXY 5OXDPHk3BazbCgCLyap6iK53aIXXgyk1V2Qklh0cyuCmbJEa6SQNUYBlX+5Xp3zG PVCNbKHniH8M1jm7l5b8tj3GXI60Jg3pi6+WqDfNYZR6gnKp04HJ66W5/M41H0Zf HXQ8/+KFH3g7lZWzmVebXKUmUeMVbnwhAYehf9XAH7tli8cPYfDJ1avAOAuwXGFC vaQ8PgKIGTauDQmSrVHd1GO9wBHXgRLUMsXKMxZFQNnZ8eNqmPo37BbjBTnKXErk UOvSH1+Mii50cD7fKVrDsHC9B/UfzAWW44eq2y9vAG2MbDtUqUUtOkwTA81OY7bL AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBSpNOwTL5dsclaAaWoybUU65hi67zANBgkqhkiG9w0BAQsFAAOCAQEA gz6H/pqEjNrHIUcSmiYLP4urZB6SCjw/wP0A8gP4vaUzOFXldYtdDx5LdqjG3aLl UDf/jDylb0kPCFe1Mz0BHpnB4wyLg2VW/hGArLcY6HFhbujgp97Y58ru7FPXe7zW E4RWfTxiJZGy/ElBj8QnwAXSnL4kjmatW9qApl1d7x4QfkqcbCB3XGhEBHXaPxUx +p6QyYH8HY6y4nj0SfNLF9+benola0jDM405/Mx615ROOR7qhvM/msQA6zwEUp+2 38hyzs8+81wEt/YTIIX8klPH3ORabtO3LllEPN/ec8GTVlYJV4eaNbGsMtykSMQK 7s5gJDKVIg55eie8tAV8CA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-20T08:34:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-20T08:39:03Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "9974" uid: 7338ae45-4755-4268-b538-21b0c576abae - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-20T08:34:11Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"a29e71e5-82cb-4f88-978c-27503b835e67"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-20T08:34:11Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a29e71e5-82cb-4f88-978c-27503b835e67 resourceVersion: "2838" uid: 242e75b4-71c0-46d1-81b1-ad2e095cda9a - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIWH7Iv9+xWfgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3Mzk5NTcyNTAe Fw0yNjAzMjAwODM1MjRaFw0yODA1MTgwODM1MjVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzM5OTU3MjUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDasld5r/+SkuCBYYf3E3PJbIUxeBRIs0Eg fXehnCYxPs9dI7fvm820Fxd4k/2GztpTev2AOzD0VZG+j+xdRZa9E9Inj4Vr7TU5 9zsYLazr+X7MnhUFywrUSrBQqEKmIGDSRAc66zoaRbSr2hvl3VgUOVc+8wNKPNtg S+pHTZdgTU4TO2MWYgyXtEe7fuy4um8S88maKue5XT3Oc7N999SOhjwTXWpC1H8J CSIPMo5czt7atE0JeLpFl3MRzSpIFMzjsbjrraxYT2Ay2DyUo46rE4VF3HKUQgg3 dmBEk39EkKqDz7h4gjdVDnuhsl9rvsFKvX7GnXnzfe7rT0QxU131AgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGE7uW AzQRy3a+CbqDmxGwD6mxyjAfBgNVHSMEGDAWgBRGE7uWAzQRy3a+CbqDmxGwD6mx yjANBgkqhkiG9w0BAQsFAAOCAQEAElzxU+BsQDIqMzrXXDL/4eOvfCZ1vczFCqbb 0hrwnhY5tpf+8MPICT88x5/BZyW6MYf679tvnQSeC/Jr++bjX7rWQyRkA6Sa1Gxe pFIeRbF/9FvbSkaYXN1mqmQlK9syLAXxI3Tk71prbtRyobGNBPIxmO17ie2SzqOC dfvDDWmKbnsD1vdjrxSNUPmbl41EQQDvicaHutHDBXL84oynLBETjZzz2E3Oi4P6 F4FdlbeC/keUY/3DwWojGm48m12fTfxbEFm6H3GFtjwsI97NEC2JcTE2rrFcXaS5 r1AVqIipvX+bxtshdOqp3bKg1g2yhdreFjXGe++FDoHCo9oEUQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-20T08:34:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-20T08:34:08Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-20T08:35:37Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "5565" uid: 0a8e2a20-8e49-4711-abfe-459f7f68484b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-20T08:34:11Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"a29e71e5-82cb-4f88-978c-27503b835e67"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-20T08:34:11Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: a29e71e5-82cb-4f88-978c-27503b835e67 resourceVersion: "2837" uid: 691b3afe-f539-46b5-aa6d-1eaf59589fd5 kind: ConfigMapList metadata: resourceVersion: "23748"