--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-08T00:20:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d8dd18b6-8734-45fb-bd1b-d31781e41a9e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T00:20:08Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8dd18b6-8734-45fb-bd1b-d31781e41a9e resourceVersion: "2825" uid: 3d1b7839-23bf-4394-9170-ae8018fb681d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-08T00:20:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-08T00:20:08Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2821" uid: 89019880-9840-4f1a-9ea7-be3ea53f87ae - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-08T00:20:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"d8dd18b6-8734-45fb-bd1b-d31781e41a9e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T00:20:08Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8dd18b6-8734-45fb-bd1b-d31781e41a9e resourceVersion: "2820" uid: d2d4c16c-d32b-4600-b7ad-c42cec4c7524 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIcB+BS2IZtgowDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzA4MDAwNTEzWhcNMzYwMzA1MDAwNTEzWjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7TOidcwN+YSWZG04EBi4uab+2HWNT1 RFy+pDcn4EFvntTc+5gSjyMgv/O6/lnkqIgJlG6CV7HFOdAHid/TdKMMrF0VDUYV vnyQz4KvTm+T0ctXI5/l2ZXTh6CM9wPrRzq7JiUWQg+pGUPtRJft3B7pngLy42V2 5lGTrcyqUu8P42cXdPr+RzAhfBYHCjXDTw8u/3Uo/Rowf4Ndx7E3wfmborp3GUju Yr4mgayAHx+TvuQ3O8MWJm5XfzmoWFHEplW2CpEhseXPl8safX+mn1xSmHBVQ9fi pT/daRtRIBR+xWo7giG1L6adGe1iklLM5Y1IfO66Dm8rcZJJXpNxUXkCAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFBCu 0RESnZH0whR4HLC0s2Sc/hhAMA0GCSqGSIb3DQEBCwUAA4IBAQBVR6xBBXTNX6EW hBhSJT4AFJ9b6S7MP2TGNX/HHsGT+hm0nvuTXhRGLAej/cdwoX+BGls5EBA+m3r2 8sZbgkOT+QrOJyCgzKLXF93hMpgRjvMyuY1bgswCRx+hsq59BzSImIxeebOULDKX OsmNYzOiLNKPTVVJNkNlIRTEpakdACPtBA1c6bdSSt0PBKxSJ3eMoX7o+uOvAlWU DFQfBj+MwpsyexsyeuayxDFvOYPESUyHxfUdNrmQ86SVCPPr0Q5uqx7CcWMuIK6p sdssfyur8eXd4+Myi9eEo1wcR8d6HB+fvY1f6gJ/DybJh1e/NEFG1UC7YKxynUvS mntV0bWw -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIdGawk0eovZAwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMwODAwMDUxM1oXDTM2MDMwNTAwMDUxM1owPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wNzg7Rye4BW Ede2QW5ImBL9BPUKDkcPYYrKuQYLC3qUhdKn+L9mNG8zZHQq6aIyXJbPOZXFMZaR QCpzjNI2A15Cug6DU/X9A/b6t4DvT2T3uTVqfV5DYB262vL+MaYap8zMl3Ydh+dX 3vVHv0nFKniKfSrbeS9K2e4vaUg+rDKaNWcu3mwZpX6mZ7EWNKO5tUIH60VkUYSw v0ez61/x37O49B6qrjo0LA9V8O8fbh/wD5/lbKuJV6pXxNZsnBcmO5mkOfR3mp8k eUojzGRIQTczQbWnRqDRZIT98xmN91TuOSJK3ZNyqXoIMika3BV5E33H9JCZrsjH VE3G4lSzZQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUkHRQFn9bwfSqCVEaJsAyrsAAsHwwDQYJKoZIhvcNAQELBQAD ggEBABslce9rGbcLkY+rUys7vf+l13Zi2DP9gb38nHqnJVmsj39p9b7PIja/4svJ oOVq+GioMuTrl+buNGpFYc3ERhnWRELCi9DAjfoRJk+5iZInOPeRIwJJpfrv8B0/ 2ujfeK2pRPcAuDvXuluQN/iZLvEJKeARLAt2/ppln0hdnQlC4dL7w4v0K43XYs60 eeSreJomw4H9vjqQR5bH0NTQsH5ADN8eM8IpCg697tc7oDdIdH8VbTp3HyKfo8tQ j9ufjyUCR1fnQc5Ub11Ze4F4dXqJpmNpwWqJQhWpN+JZ7/EKfPYz78TNe5aPbOPS IxIdX6tEXHdRRJ7O4PQ4mFutQ7U= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIILJezD5VGh0EwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMwODAwMDUxM1oXDTM2MDMwNTAwMDUxM1owRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotkhP5fHHieiq8PuzeHq66SnghgCAkLz4kdCSSiFLT/FuqdJcV0jsG1WgxlS 9Vk3lLWofzk79ci57q4AU7R1cs89litiz9icxqO3BUSl8GFyRLUuZ19Ox47PV5wY lFwkri2OEzQETTvTDye7aEVLFze3yNXur7QPC1dUJ5IPmPoFn9XC2yYlmx+VdCIi vZOzjGqfcJwQCHuVQ6lqxOUZ2DpvF8aI/FMd/rSJPScJfsLx1Q4o/hdVxyyZ6ZjZ IuA8pVE06mtO6nir1bPtREHv04JmbzH8oxVKp2VNvWTilQW68bHYrkllnFD1zLxa 2ou0qD0LJN1VkKk8sXQIzMWHMwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUXjNJXKgyiUq6mG1BO3GX8Hg0Ut4wDQYJ KoZIhvcNAQELBQADggEBADh2pM6AwLYVvRSVHwPnfAGHIvDrf7K1w7zaKZhvxFnD EhonGpYEYeFr01iXE74KQp9pxuJT7xxYSKfKWlKA34zlRM+Rb0dOce+2Na/PvHTh K/8ZSIElxn+sPmlPPMIGNO/TfA7UyuG942x0jnc6JuAZTXR7o2cI/2H4Fg9AGF8w dxTHTC67nsENRTcnkvKsh8r4zZ0sb5JR+zPTbdQ4+9WhOYNa5JS1It1fo4wVlgwL 1yiOMjx1XUIsfhrDzVdleZ+NKDTaUeDjkCMzquTmAemxMGRaNCXKb8uwlmSFQYEd lw1HRrhShFygDhHC3PqOpI7oulNgYtNE5MlLh7lMDSA= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIQZ9DS9WdDuAwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzcyOTI5Mjc1MB4XDTI2MDMwODAwMjEx NFoXDTM2MDMwNTAwMjExNVowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzcyOTI5Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW0y Np9fNu2ahy0tBmCVOXbZe/4p1vdKND3lhg5dcn8DR2VyWWiZZfy8bhohVjAENtyw keW0VnwBO8QmgpNWz40QTWzE9O5GksYMXo1eKpXv+gKMPKCz/ey694ZKXyULqGIk kF/fWkhALEWoTJajz2cFLis4WT2GhsppkAcezOLlk9Df114i/eZGzr2CtElJZWSH I/+MyW4GeuJIy46iJh+SPAYvIKmfqSp8jIfE7FMsauXMHEqKx59Yj4Q7EEv8BiDg RwDOUL5eTnOP1s57s9YU1BfGbasNmlx9vpNRH+24zqQtKqAbM8lyRtuHai6bHUQb yNMCoYcMdz8QkaT7YwIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUcrMyB0g8iqKxpZ6W9l7mp5tJa0UwHwYDVR0jBBgw FoAUcrMyB0g8iqKxpZ6W9l7mp5tJa0UwDQYJKoZIhvcNAQELBQADggEBAEFF20Qa 14TjrNhajb73OX021ZU7oAD8ymiZIjk2LW4RyQKDNl6IeTVQQjgHfENlX3es+Zdn Opz5pSX13mBQFfx2X052T2gpSGPepwDeunu/HN00NgqO1pidQduGJCS7RocGOvQg 1ayBpOuZnVnxyKNqYBqS8haAUerIH16IyOmrwQuRxfT8Beow0DCTs0+mDmNZV7RH u+ekhiKAJwkUcNNLAMJulEDsb4/8QS8Ahq1OnkMiYwXpvWmQFicHKNLSN+/dJhDr JTdj/nKF6PqUyN/2/8mXE6TBt5A2staZlLU7lw0u5Hdhv5Yg2JOdmox5xurJpsm0 TMmjF61OEa6Ou7Y= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIINACkKXNPqdEwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzcyOTI5MzE2MB4XDTI2MDMwODAwMjE1NloX DTI4MDMwNzAwMjE1N1owIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdNMLqH/tUjyxqXI HrwhFhe9B0G2K8sdXnSJ+Va13ue/KXTCngDQ8xnsg5oeDYnJa31wQMTLnXKAZJUB Ofe3ZJZPYmMXDetSPK/cPqhmU7lE7+Krt0I9CSLw5PtQY1QYflNw4Gw9wpFgR5Qm zt78zxTxmfidHaTkQSVgCP52cZSV/HqZaAsnmW7wGHjIhneNPt9o5Y+IkbbKG/l3 NS7IYrzSWvwujflTbFpvil7zuEWF9tJeHUk2uOse60Z9OWy3Nm7fLe7dfQABcf3f qL+ukdIpbzkosqsMYYWVKmMsckSWlxv34SN6y/VQEi9JVaZUUk9HIdTl4Gc77UT4 0FvXpwIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSEZRlXp935/YSddeKlDSw8X6E6 VzAfBgNVHSMEGDAWgBTbLMNLBgufeG1XogushlboVdtltTAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAC6FJZiQ TFOYio+i3m1i6UdaCQ3O/X4qhIVwUBC0/oKSkZ+ihkAox5FJR3MDbaKODEOXpz+1 bTF6/6piBD5p9vEHjmNpY1kMhbZeAtprLD8C6mOJ0A2qa85wolAJX/wFYnRXHd6s RzbfE4k/zYWIk43ORsPW9ge8K6bP1fAY5H5sR7VWmKavAZMY+uEtqyeTLm7UgxI4 xhTxXpokYG/z55DhXJx/9WVSdUIsGKfkAKP2kTYTVfN8O0Mw0jm93QHfTsg15pqD pHEYarcDfCbxb0T6i4HERTu82BKDZRoaXnDvidDmbVQk/6FH/LZFWP2Diy87IR17 QL7k6yPuCIYhLk8= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzI5MjkzMTYwHhcNMjYwMzA4MDAyMTU2WhcNMjgwMzA3 MDAyMTU3WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzI5MjkzMTYw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxzg7cbOPyRMY0EpAl0pI A1pmA5yxvUnLRztZG5BPiI4CdDNr8OdutEDqtywHHXEvEsK/WfjQp1nTa8btaVo9 dmW5rRcuOCgEKhgieobxcotuNM56frY/RvsgDpc2CH6hu64Z2iOGkGjfTgYtxuom dOQp2ngp8SSQTT4utCKap1aDAcYDqdhK97wx9wMdgO3ptXV2su1KnsiFy7gq6ujG 6ULZmARWpx6Fb7fKJrw3QcmsJnHnCxymyW6eWYgMCiXhkK09kegXsghZ1IxOzQDB BM4uRZQNM+BlOKoEQmLtVma790+SXxfx22OVxmfzb6pORmD2kx0LQLY+e9zbBF/p AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBTbLMNLBgufeG1XogushlboVdtltTANBgkqhkiG9w0BAQsFAAOCAQEA paV3lqxH7sPUkG7buHcNG/SxQEqUYPMknggc2RmWTcgHPtDM7kTIFRW3F4h2MgBD MCvqYq2/RjaD8HnRiPEpE1iGpQGFNsXkBKDX5SnCz//U+Vql9hv24QoJR6Z2SRt2 TJ3GZx7DCu6/RJtD23QsjplULhpkNnqfAFboqh1qN0+rFffBeSBZ2sTtOPM974wo tnbOl6muXCXOfln0SEKWTe9WIceXN8/36tFcSV7xtoNqlYD5pESEUse9C0zFd0Vt W8t+FPXXLbes2SysrW1M58js2pzVdKfUuvltNmTzS8+qQzunca2shiFuCPaTb+YS tNfpj7vfKEo5mHB7zMsaiA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-08T00:20:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-08T00:33:04Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "14457" uid: df84f6e8-c491-41e2-9dd6-a1e7959ea586 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-08T00:20:08Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"d8dd18b6-8734-45fb-bd1b-d31781e41a9e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T00:20:08Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8dd18b6-8734-45fb-bd1b-d31781e41a9e resourceVersion: "2828" uid: c872497e-dd17-4916-91da-e9449b1b6626 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIMrd9s7oWjRcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3MjkyOTI4ODAe Fw0yNjAzMDgwMDIxMjhaFw0yODA1MDYwMDIxMjlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzI5MjkyODgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudn6C5GSTGpDZeIlE8OW5F6Q2iIQMVptt QvTUu2Ar+yuimwFaj5H2XYV4o3ZxP7vJPy9kafBnyI03ehDmefuofzhzPtd6wReH 20jEIVgvFNdhLtUwqrRDyJKsCPNtXz5/mp4xLMakHFPSEtuSu8rgPiMSkPZ03J9i ZxPyBdtp+bLTohROs/OasAQWVyvfWw8ppJX7JTxAbAg3dgqFrGDiuviTjihvdvpE QgqrzE0BYKO30R8p3+ja3eMLfBSBEmGX5HOK0lObN65T1uC1ixfzRq4XPbGQPkgH wdceYNz+t8QyboCvpsnTDPwknLyE/8KvNaibJ0/h77fKEvmTssWPAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOk0QY /WuiSGxxVUMGwG0sxGaEuzAfBgNVHSMEGDAWgBSOk0QY/WuiSGxxVUMGwG0sxGaE uzANBgkqhkiG9w0BAQsFAAOCAQEAoV+Xo/JX53h6jWZur/GnKWsO9eKKKRE28OmF /5m0mA7s4Y/tXfGt9eR8XIcHTMdlNJzWxTOUxO0cyFWt6gr9wcaP0bO841v9zqHJ PERED8tQ+zrPJlZgvew0XfICkaKCGcloeb04a/zVCjUOYf8TR+WTiYwhnWIutRIq 1bPCvKAxjiJmlWZjko9nnvTpGymeyMcy5tWt0q7HvS14bgaKLp2efb6TU3V/5P9g VpUHVyZrH1//Em4nRv4fkL+qgUPVX1PuguCV2tt9bFtVyEVRj2SUlzUgji7EVq0A YU6/XYaqoLuh97Hw7WU3LWm1/PXB+hdNb2J9VhN5bVHmNRCH8Q== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-08T00:20:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-08T00:20:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-08T00:21:42Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "5588" uid: 9098b047-e916-45bc-bd6c-0d08cc4ea528 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-08T00:20:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"d8dd18b6-8734-45fb-bd1b-d31781e41a9e"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T00:20:08Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: d8dd18b6-8734-45fb-bd1b-d31781e41a9e resourceVersion: "2826" uid: d7a45c4f-6e36-4a21-8c0b-07e1d4f72736 kind: ConfigMapList metadata: resourceVersion: "47883"