--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-09T16:24:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"342c1662-32e4-439b-83f4-c8445e66fe79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-09T16:24:30Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 342c1662-32e4-439b-83f4-c8445e66fe79 resourceVersion: "2919" uid: 0048cdc4-fcd5-449a-bd44-0d8fe75e13fa - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-09T16:24:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-09T16:24:30Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2915" uid: 71eb1413-3131-439c-90ce-a9fb1848cc2e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-09T16:24:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"342c1662-32e4-439b-83f4-c8445e66fe79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-09T16:24:30Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 342c1662-32e4-439b-83f4-c8445e66fe79 resourceVersion: "2914" uid: 42c22bd1-5608-41b6-8cf0-020ed71cfe10 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIc3uynuWwMJkwDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzA5MTYwOTMwWhcNMzYwMzA2MTYwOTMwWjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6zReXLwj3ZrrWs/iWOEwDiJUslCYL/ QueqRewI6kZ0JCJ7ro6ANS7Y8PgAx4vBgThafmbqdrEikxibx0G5FxaLQlIPF3HR yP1aR/HlDCEMgIKL+1OncvKC2IhWmXQMYDqnnudVhsrtY9BM7YWnGgDa4TRXNdaI lxRRd4xp2A+fgaTAWeq0fwvBdNVu4dxcWwsTqtuB6lHaN1APsM0WarghgV9EmGM/ 0OU4eaffiqDRlG2+auz1/LbtXYu/PSobjzJJlowDSeAoSfe3xs2cOPQcE94D96SZ 6/ktjgTtV2GLGP5T+VfxyFnl7vZZ1I1SohBneSU5EQqT7Ol96MZmLKMCAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMBa TbLEiy34KNKxp65mciztPCy/MA0GCSqGSIb3DQEBCwUAA4IBAQB937J6ntVZ7xVg wbhXC88XHinlh+5O0SeSQTx4uZPPuPQi/TXyGhiqY5sk6JHHH+oHNHYFtyKO8IkP TFVCxeRzdB8kZVlkKIioxzNcbbFf4ygDY8khcgIVOQHQvjtQy5nWLyj2jHjuhOP/ RKxtRTPkoslJbi3zwtZEV1YnzVUAq0WThAq8dmr6hCxFlTvyvtcyR6KoLla1RHd1 FtsoPuxbmDNiU/MXpvx6RwDBTeuPDuG99A2CQz0klJXAvw1tUsaxusR+SWaQAgL3 ZTqV7fV6O3mJnOM1IyCybsvopfR4cK407yc1Ubamx4Iu2nx3ZJdDwGX4yVFkT4F/ d9KRApvn -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIAub7S4oatKAwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMwOTE2MDkzMFoXDTM2MDMwNjE2MDkzMFowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0/cfeIR9khp W/b38ZLj/3fJkLELd7ji1WnuD6UhBLmETskfGKh4E16w03ThAy0zNYlfKqxB0nvS l1wd6hcDKWYn3thuqVTKMLchAe1YbrG3IzoisEgEtRJJuIajfE/liSNKwOy4qCYZ 3KxKIT6KMNCI86jIRGEVilneXQVKDFVCjE0VA7YrLWWqzLb1vnoNeQ2miXYMYi9E kQCJ7zbsbMmxILPs/EWOpyy7G+mim5NSWEGAlpQbPkL4k9sgg2vvj2Lkppdyzzgb IeVx5HKxfL7aJFYEd+3LV4X8JS3RTdHEGYmsWZcIX6VO1nIvZwzl/czKsBLeDrB9 s4GzUIi4+wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUoHnsAwcG+UTxWH6iNfHAGoXppUwwDQYJKoZIhvcNAQELBQAD ggEBAIi4JAeUrZuMZhokvgOrgn+A1tNQgsExIZg7zfC163B8HkN7aQcrWg1+kWwK lXNLurqoiazSkskw10T1z23zUub1uPNyRWgPtmDvpvpEY2YUZj9XKPlpAK/PqB/I xkXAassl4OU//tZ//haxMDFtuzdGwmp3HfjbRbInhbFKmjc3TQT16CPrQojtoH/z U/wtLA9MTuxaaKA3+lyJEKppo3RRUBu3WANx4/tdmAnMaEZrx9uFAgdRgQU1pYpE 0S7DdLBgP1DeCmtxyARqnn3jFPkup+52YjKxWLKPJAr/zcfDOD/FHkyjWxAJO0Vq xigrYHP+Bh5T2nLk6mjPJhiKaCI= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIIWhcgNFfREbswDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMwOTE2MDkzMVoXDTM2MDMwNjE2MDkzMVowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yILcl8YS3Yg5nrVx7l+sQHniRdCZt3EJ12M1jkozaMVJcnAeDkZwiis+hTH XOYqEF7Ei6MAE05pfM+BypxqLv19miIkQWdWZBnilBvajUiYuqKZ/gaqaG2rV6qW g2N5az7s97t4W9d3ceFda2bYfnOMEgLxeb4zZQGr8CPQ9sQ3Hs9yh8qd4cw2Zy42 Sdv/brvP5MhrxSxF8+QiGFjIvXhfSa/Qyono8pIdBs4c6SVjXIcsOT2CogxFMVpb meYeOS9Nty2QhmyiCOKTHsot6lHPIJwByckXZctyT5xYgUjzOE3ZT0jg8peTlWZq vSi0PtqDCmV3CxQTRdTRLJvw8wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU358nhBe/aOwGLR6NvstikM6zHUYwDQYJ KoZIhvcNAQELBQADggEBAAgg+z2Cr3KkMZHZIJBLOO5kLX6pmo7HLA93hZPqqTlG 6AY6/Hlkm6JR1w4trUVGI/cFqHuRB3ilO8Qg4vdt6bhiUbXZBU2Hkrg3mWMZadyx oVy90jR53aHGQW7UaGbdUqmd81OdBX4YuCYJM6A0Su0R3i/FB5G9WaLwCAy9Hf0i dn3OGMbww3TfVqpRKAJELQ1/N9NEJLFxz+UbbzdWbZKx2+Lu8GRfJFfKwfrOuAEd QujpCFQW0emg2C/62RJlRjeYqidvTszlVeO6drH9rYsMdgG/tMPPyTT2lFqWryta V3MwzhWbkOBMdQtlz2P5wBQ15K7Erd3yfrpgihlRULE= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIA3f1k/SdgjEwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzczMDczNTM3MB4XDTI2MDMwOTE2MjUz NloXDTM2MDMwNjE2MjUzN1owWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzczMDczNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMmV ADd5twi42A1N6ezIg6MphudKuJCBwZTXhNEUMjW0pdgAuxIDy7HH4gg55ndggeky hVKF63HBd7vQkdwnF9GSsHdmKYYDrx3RBRq4EPUlDAZp5Wd5ZLXQkhkdYyl7Dppq wfccrRzBGw1AXZFUP8Erp2kJn/ukdXO0tcInQ2Y/mljDWTTxTG6JS0OUHeKvjOvc ZBwilCTBYXTklhyylBMQxTLIjNIukdgpw5tRAXe9suK81VIXLcgaInVZY8rV5liP awITEAYUJa7DTZUPyYN/ZIEABInJcHahHDpELHpQgzIwBSDq6K0Ziz8Qt14M9RNn 6fUanAil9oJt9ByXTQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUhavNTPSIKAO9/aYQ/J9eU/QGyDkwHwYDVR0jBBgw FoAUhavNTPSIKAO9/aYQ/J9eU/QGyDkwDQYJKoZIhvcNAQELBQADggEBALWzMCn6 SPnu/EA9IZDAaCj5FNR8gfg8oCWEczpQiLPcksc/OLlrzrsgMyuwHE2TqdCc2ZRX 49D9rrouK+anzziM6uM57/6kDjUAHlAvK8Fjjn2Lik41qldIgxdXTBPk1TWOAwU1 kZTj90oBvC/LLBvezUscRaI80/ECwbpkijFt6mjctfd6sRJabMVpD86k363buiqY i8FoRoJoJWx9av6/FJQKX6/n9QB9pRIoStwb4hzxAZkBvZgb+vXk79kn9/0JVNMW rlwEQ7QLOPIyg39875LL9LvKysvObmySKvw9gVEFgyLbF+hZFGJ6q64fwVlbq/KH t+Liy9oBqXtyWKc= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIKlBAuuVA00EwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzczMDczNzA1MB4XDTI2MDMwOTE2MjgyOVoX DTI4MDMwODE2MjgzMFowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD8m2jX2bZAH0OL2 IhW+rmniFHD4H03i5mLaYC4OwpRTNt2NnsMAcEdtsijlh4loCx+8AD1W4ewSpinH 2fX+MwYYegBkz/fUO3WkETnBs4UOls0NCYm1Kiay/GrwvOl14NX7KWdhK2ih3tRJ fIMjZg3PhaQrmeh8gBJbIUPu83qAFRRcjNzhTqEsZsikAZ0O3c5gVxpQZSiVvKOK xUKQMLH2pAIgeFxuEwOUP5Lmy4KcqkQKR0Cgq4xeAv3p+q5E/ho0qru6zy6rQ+V8 XGgx1aw4hhM1vBNRtPw8hsshAEspxGagHIJirV5iz8UDcTXolefvwV3PKrtN4aOt fZgL0wIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ8pF9fRTy5JHTIUpMLfGny9A9E IzAfBgNVHSMEGDAWgBS70KHIR6yJSz4Hh9t2OCefXf4KQDAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAGiJL53n Jo7Pk9zpobFpvctPApLXFzdExHHWk7Fnh/ezz/enmm2/xHIALpMd3LOY54zPpnV8 TCmGoHZn7fvQFpamjQoBMxfv9H5lDg88Hr1njLgGv9k8+twwwrNY3oPDBx7An6BH u3JnjHW4nc4N5PqtiG0roqMJtWYhdsKx0ESuBCGZRt91ZShzZkA7/Ke7beojjKyZ UY5xKGMghtVy5TikXVwmQx7OuDWwf+ER477IU3BvreyfMYZaq3eXRN3Be0xntZ3b snsOPxrggwa5KanV/YrZH6GW+DQGNnYpvgCT1yu4avomG2Q1f/5U6ZlWCWajH/Vk 6VFKnOYDKUJcn9A= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzMwNzM3MDUwHhcNMjYwMzA5MTYyODI0WhcNMjgwMzA4 MTYyODI1WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzMwNzM3MDUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXCIUMtczM/SvcS2PbxJp YQ7VTVAAqLV5GUajB23Wub7VPi8gC1E6810qkaaSZnvNtWDZHflEZWixMhrwh04/ UANikyXbUUTCQZqRwVr/Ml6W8dzwZySXK/5ghTqp7QV5RoaVrfdFo2Hl/MHucR2m 0I3ngplaIBHsf9lMBHKjxrczlOxlKgYaVTj09HRJ0eD4XirHbIcY91OLM1P3ODXI H4M8AVORJz4ZE+N/n/35NEd1tfR2KZhkRbXb8sHATU8Swkt32DJNJgn3ql6z8huo Ti64Pn4hbhcYCp5kobvnrZkmlpfw/bWkdrMRwN+rKWPZWl8D2v+S7gm6CRzKUXQ3 AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBS70KHIR6yJSz4Hh9t2OCefXf4KQDANBgkqhkiG9w0BAQsFAAOCAQEA chTjLOfV9bi/E/BQUnK+Csb7jCmSTcOjgO7cLC6Twj4opy0kzOwmZPbE72azDfQQ SgzXiz9PCT0vJVA5/7gaX2asbmpym/iYpHKmIsvjbWwnb4IuPY3qDIWca3MVMFXu Wb9Dar+QNcjv6jD5QNwzm3olENcG+QJxcw7eQhP0+L725aVY1ajY6JPVjD3iinvV xa4F0w4LdXNjAQPMco9ksgPF/s97hiMRqZTVETsY26v6Uw0PXU9lV+Gmr+4QUIm6 TMBHokc5gm05wNhGVP8beiFyH2K8EAW7Mu90s9j+UXIr1S+KwcYyat0riOewFP6Q 7lB0nwwbtKFc2jDFJifVVQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-09T16:24:28Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-09T16:40:50Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "13244" uid: 52f2309c-ad60-4405-af73-e7e1c893d517 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-09T16:24:30Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"342c1662-32e4-439b-83f4-c8445e66fe79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-09T16:24:30Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 342c1662-32e4-439b-83f4-c8445e66fe79 resourceVersion: "2921" uid: ee50b807-a4e9-4ff7-8309-2cea010b3b4e - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIU48kpSqDSSEwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3MzA3MzU2OTAe Fw0yNjAzMDkxNjI2MDhaFw0yODA1MDcxNjI2MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzMwNzM1NjkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHF6IhHlPlTKqD/bIC0gTGrtLcYufodYm wwuH33hnvBT/CMutnyRPLvHT0SaEvN7N8MIH37gO8thJXKYf+iqNqRJGWWwwTRUs 0NSmtPzXR9cojwtS9kWUmn8ftudKb6evGbW9oooT3kteCWR8IsYtUy7o63AJ8OtX MPF39R/l7sMdKtB6ZebVrxfyprFZ1euyLW8ho5e/9QuOdV7BSVmBxaxvjxnyta5f O3wVb9hbfpQ+WJS6vkJ5bdBXsCLFcMHk9z6imboYvxsKJmgEPjBr7CcY9AzmUva1 EbYQlPycz84kMecDoEapxQ9aR9feUcHZPgDb8Q1zcdN/IxzNQlbBAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKRhub NGiwOnwyBN97Har84xI8UDAfBgNVHSMEGDAWgBTKRhubNGiwOnwyBN97Har84xI8 UDANBgkqhkiG9w0BAQsFAAOCAQEAQVd03D9ubeXBU1o1egxbJzet7kHcxcU4jwSs suWeilPaYpebmabk1nNV6MalwwlXLRZDcoHSOwdgr8pehx6GAkvFTqfhFwEBpwOs YLPUj7kExmduAnE0Wpkv1S6GqSESKDUf9i4hTEffgrKScINhuXFTUwDOAXMeCZG4 5QBsM60P//BXDCRuGLg019kKRa1uyzfe6atmQVTM3ybxxArJZoBTNgbjXnd3RFXs RIZ8ZwfweSHarYubU1KGa0iK0dRkabdhZOkfV34aWExdMHfeadwkRuACbCpgxnUg J168Ht7AqZ7d3fsuHc2FPXnvrLMzXQpHkC3XaN9mZcwJoe/ZyQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-09T16:24:28Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-09T16:24:28Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-09T16:26:21Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6365" uid: d87aa8eb-e4e5-42ba-a7be-f6ed85b3a8df - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-09T16:24:30Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"342c1662-32e4-439b-83f4-c8445e66fe79"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-09T16:24:30Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 342c1662-32e4-439b-83f4-c8445e66fe79 resourceVersion: "2920" uid: 16e00443-061d-4a7f-a84e-eee31ae08926 kind: ConfigMapList metadata: resourceVersion: "26360"