---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    annotations:
      deprecated.daemonset.template.generation: "1"
      kubernetes.io/description: |
        This daemon set launches the Multus networking component on each node.
      release.openshift.io/version: 4.18.25
    creationTimestamp: "2025-10-11T10:27:12Z"
    generation: 1
    labels:
      networkoperator.openshift.io/generates-operator-status: stand-alone
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:labels:
            f:networkoperator.openshift.io/generates-operator-status: {}
          f:ownerReferences:
            k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {}
        f:spec:
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                f:app: {}
                f:component: {}
                f:openshift.io/component: {}
                f:type: {}
            f:spec:
              f:containers:
                k:{"name":"kube-multus"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    k:{"name":"DEFAULT_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"K8S_NODE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:fieldRef: {}
                    k:{"name":"KUBERNETES_SERVICE_HOST"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KUBERNETES_SERVICE_PORT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MULTUS_NODE_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:fieldRef: {}
                    k:{"name":"RHEL8_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL9_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:resources:
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    f:privileged: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/entrypoint"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cni/multus/certs"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cni/multus/net.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/cni/net.d/multus.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/kubernetes"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/cni/net.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/os-release"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/run/multus"}:
                      .: {}
                      f:mountPath: {}
                      f:mountPropagation: {}
                      f:name: {}
                    k:{"mountPath":"/host/run/multus/cni/net.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/hostroot"}:
                      .: {}
                      f:mountPath: {}
                      f:mountPropagation: {}
                      f:name: {}
                    k:{"mountPath":"/run/k8s.cni.cncf.io"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/run/netns"}:
                      .: {}
                      f:mountPath: {}
                      f:mountPropagation: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/cni/multus"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet"}:
                      .: {}
                      f:mountPath: {}
                      f:mountPropagation: {}
                      f:name: {}
              f:hostNetwork: {}
              f:hostPID: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                k:{"name":"cni-binary-copy"}:
                  .: {}
                  f:configMap:
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"cnibin"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"etc-kubernetes"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"host-run-k8s-cni-cncf-io"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"host-run-multus-certs"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"host-run-netns"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"host-var-lib-cni-bin"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"host-var-lib-cni-multus"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"host-var-lib-kubelet"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"hostroot"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"multus-cni-dir"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"multus-conf-dir"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"multus-daemon-config"}:
                  .: {}
                  f:configMap:
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"multus-socket-dir-parent"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"os-release"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"system-cni-dir"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              f:maxUnavailable: {}
            f:type: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2025-10-11T10:27:12Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:currentNumberScheduled: {}
          f:desiredNumberScheduled: {}
          f:numberAvailable: {}
          f:numberReady: {}
          f:observedGeneration: {}
          f:updatedNumberScheduled: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2025-10-11T10:39:24Z"
    name: multus
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2
    resourceVersion: "19739"
    uid: 34404a63-77e1-4b43-8ed4-a6bdcef68471
  spec:
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: multus
    template:
      metadata:
        annotations:
          cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        creationTimestamp: null
        labels:
          app: multus
          component: network
          openshift.io/component: network
          type: infra
      spec:
        containers:
        - args:
          - |
            MULTUS_DAEMON_OPT=""
            /entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT
          command:
          - /bin/bash
          - -ec
          - --
          env:
          - name: RHEL8_SOURCE_DIRECTORY
            value: /usr/src/multus-cni/rhel8/bin/
          - name: RHEL9_SOURCE_DIRECTORY
            value: /usr/src/multus-cni/rhel9/bin/
          - name: DEFAULT_SOURCE_DIRECTORY
            value: /usr/src/multus-cni/bin/
          - name: KUBERNETES_SERVICE_PORT
            value: "6443"
          - name: KUBERNETES_SERVICE_HOST
            value: api-int.ocp.openstack.lab
          - name: MULTUS_NODE_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: spec.nodeName
          - name: K8S_NODE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: spec.nodeName
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd0854905c4929cfbb163b57dd290d4a74e65d11c01d86b5e1e177a0c246106e
          imagePullPolicy: IfNotPresent
          name: kube-multus
          resources:
            requests:
              cpu: 10m
              memory: 65Mi
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /entrypoint
            name: cni-binary-copy
          - mountPath: /host/etc/os-release
            name: os-release
          - mountPath: /host/etc/cni/net.d
            name: system-cni-dir
          - mountPath: /host/run/multus/cni/net.d
            name: multus-cni-dir
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/run/multus
            mountPropagation: HostToContainer
            name: multus-socket-dir-parent
          - mountPath: /run/k8s.cni.cncf.io
            name: host-run-k8s-cni-cncf-io
          - mountPath: /run/netns
            mountPropagation: HostToContainer
            name: host-run-netns
          - mountPath: /var/lib/cni/bin
            name: host-var-lib-cni-bin
          - mountPath: /var/lib/cni/multus
            name: host-var-lib-cni-multus
          - mountPath: /var/lib/kubelet
            mountPropagation: HostToContainer
            name: host-var-lib-kubelet
          - mountPath: /hostroot
            mountPropagation: HostToContainer
            name: hostroot
          - mountPath: /etc/cni/multus/net.d
            name: multus-conf-dir
          - mountPath: /etc/cni/net.d/multus.d
            name: multus-daemon-config
            readOnly: true
          - mountPath: /etc/cni/multus/certs
            name: host-run-multus-certs
          - mountPath: /etc/kubernetes
            name: etc-kubernetes
        dnsPolicy: ClusterFirst
        hostNetwork: true
        hostPID: true
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-node-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        tolerations:
        - operator: Exists
        volumes:
        - hostPath:
            path: /etc/kubernetes/cni/net.d
            type: Directory
          name: system-cni-dir
        - hostPath:
            path: /var/run/multus/cni/net.d
            type: Directory
          name: multus-cni-dir
        - hostPath:
            path: /var/lib/cni/bin
            type: Directory
          name: cnibin
        - hostPath:
            path: /etc/os-release
            type: File
          name: os-release
        - configMap:
            defaultMode: 484
            name: cni-copy-resources
          name: cni-binary-copy
        - hostPath:
            path: /run/multus
            type: DirectoryOrCreate
          name: multus-socket-dir-parent
        - hostPath:
            path: /run/k8s.cni.cncf.io
            type: ""
          name: host-run-k8s-cni-cncf-io
        - hostPath:
            path: /run/netns/
            type: ""
          name: host-run-netns
        - hostPath:
            path: /var/lib/cni/bin
            type: ""
          name: host-var-lib-cni-bin
        - hostPath:
            path: /var/lib/cni/multus
            type: ""
          name: host-var-lib-cni-multus
        - hostPath:
            path: /var/lib/kubelet
            type: ""
          name: host-var-lib-kubelet
        - hostPath:
            path: /
            type: ""
          name: hostroot
        - hostPath:
            path: /etc/cni/multus/net.d
            type: ""
          name: multus-conf-dir
        - configMap:
            defaultMode: 420
            items:
            - key: daemon-config.json
              path: daemon-config.json
            name: multus-daemon-config
          name: multus-daemon-config
        - hostPath:
            path: /etc/cni/multus/certs
            type: ""
          name: host-run-multus-certs
        - hostPath:
            path: /etc/kubernetes
            type: ""
          name: etc-kubernetes
    updateStrategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 10%
      type: RollingUpdate
  status:
    currentNumberScheduled: 3
    desiredNumberScheduled: 3
    numberAvailable: 3
    numberMisscheduled: 0
    numberReady: 3
    observedGeneration: 1
    updatedNumberScheduled: 3
- apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    annotations:
      deprecated.daemonset.template.generation: "1"
      kubernetes.io/description: |
        This daemon installs and configures auxiliary CNI plugins on each node.
      release.openshift.io/version: 4.18.25
    creationTimestamp: "2025-10-11T10:27:13Z"
    generation: 1
    labels:
      networkoperator.openshift.io/generates-operator-status: stand-alone
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:release.openshift.io/version: {}
          f:labels:
            f:networkoperator.openshift.io/generates-operator-status: {}
          f:ownerReferences:
            k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {}
        f:spec:
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                f:app: {}
                f:component: {}
                f:openshift.io/component: {}
                f:type: {}
            f:spec:
              f:containers:
                k:{"name":"kube-multus-additional-cni-plugins"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:image: {}
                  f:name: {}
                  f:resources:
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    f:privileged: {}
                  f:terminationMessagePolicy: {}
              f:hostNetwork: {}
              f:initContainers:
                k:{"name":"bond-cni-plugin"}:
                  .: {}
                  f:command: {}
                  f:env:
                    k:{"name":"DEFAULT_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL8_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL9_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/entrypoint"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/os-release"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"cni-plugins"}:
                  .: {}
                  f:command: {}
                  f:env:
                    k:{"name":"DEFAULT_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL8_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL9_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/entrypoint"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/cni/tuning/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/host/etc/os-release"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/sysctls"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"egress-router-binary-copy"}:
                  .: {}
                  f:command: {}
                  f:env:
                    k:{"name":"DEFAULT_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL8_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL9_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/entrypoint"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/os-release"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"routeoverride-cni"}:
                  .: {}
                  f:command: {}
                  f:env:
                    k:{"name":"DEFAULT_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL8_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL9_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/entrypoint"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/os-release"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"whereabouts-cni"}:
                  .: {}
                  f:command: {}
                  f:env:
                    k:{"name":"CNI_BIN_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"CNI_CONF_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KUBERNETES_SERVICE_HOST"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KUBERNETES_SERVICE_PORT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NODENAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:fieldRef: {}
                    k:{"name":"SLEEP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"WHEREABOUTS_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:resources:
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/etc/whereabouts/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/cni/net.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                k:{"name":"whereabouts-cni-bincopy"}:
                  .: {}
                  f:command: {}
                  f:env:
                    k:{"name":"DEFAULT_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL8_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RHEL9_SOURCE_DIRECTORY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:name: {}
                  f:resources:
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/entrypoint"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/host/etc/os-release"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/host/opt/cni/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                k:{"name":"cni-binary-copy"}:
                  .: {}
                  f:configMap:
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"cni-sysctl-allowlist"}:
                  .: {}
                  f:configMap:
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"cnibin"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"multus-cni-dir"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"os-release"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"system-cni-dir"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                  f:name: {}
                k:{"name":"tuning-conf-dir"}:
                  .: {}
                  f:hostPath:
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"whereabouts-configmap"}:
                  .: {}
                  f:configMap:
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              f:maxUnavailable: {}
            f:type: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2025-10-11T10:27:13Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:currentNumberScheduled: {}
          f:desiredNumberScheduled: {}
          f:numberAvailable: {}
          f:numberReady: {}
          f:observedGeneration: {}
          f:updatedNumberScheduled: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2025-10-11T10:39:49Z"
    name: multus-additional-cni-plugins
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2
    resourceVersion: "20113"
    uid: 41f9b9b4-1ebd-4b55-87f4-44f6863ad7ee
  spec:
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: multus-additional-cni-plugins
    template:
      metadata:
        annotations:
          cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        creationTimestamp: null
        labels:
          app: multus-additional-cni-plugins
          component: network
          openshift.io/component: network
          type: infra
      spec:
        containers:
        - args:
          - |
            trap : TERM INT; sleep infinity & wait
          command:
          - /bin/bash
          - -ec
          - --
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd0854905c4929cfbb163b57dd290d4a74e65d11c01d86b5e1e177a0c246106e
          imagePullPolicy: IfNotPresent
          name: kube-multus-additional-cni-plugins
          resources:
            requests:
              cpu: 10m
              memory: 10Mi
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
        dnsPolicy: ClusterFirst
        hostNetwork: true
        initContainers:
        - command:
          - /entrypoint/cnibincopy.sh
          env:
          - name: RHEL8_SOURCE_DIRECTORY
            value: /usr/src/egress-router-cni/rhel8/bin/
          - name: RHEL9_SOURCE_DIRECTORY
            value: /usr/src/egress-router-cni/rhel9/bin/
          - name: DEFAULT_SOURCE_DIRECTORY
            value: /usr/src/egress-router-cni/bin/
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbde693d384ae08cdaf9126a9a6359bb5515793f63108ef216cbddf1c995af3e
          imagePullPolicy: IfNotPresent
          name: egress-router-binary-copy
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /entrypoint
            name: cni-binary-copy
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/etc/os-release
            name: os-release
            readOnly: true
        - command:
          - /bin/bash
          - -c
          - /entrypoint/cnibincopy.sh && cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/
          env:
          - name: RHEL8_SOURCE_DIRECTORY
            value: /usr/src/plugins/rhel8/bin/
          - name: RHEL9_SOURCE_DIRECTORY
            value: /usr/src/plugins/rhel9/bin/
          - name: DEFAULT_SOURCE_DIRECTORY
            value: /usr/src/plugins/bin/
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6128c3fda0a374e4e705551260ee45b426a747e9d3e450d4ca1a3714fd404207
          imagePullPolicy: IfNotPresent
          name: cni-plugins
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /entrypoint
            name: cni-binary-copy
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/etc/os-release
            name: os-release
            readOnly: true
          - mountPath: /host/etc/cni/tuning/
            name: tuning-conf-dir
          - mountPath: /sysctls
            name: cni-sysctl-allowlist
        - command:
          - /entrypoint/cnibincopy.sh
          env:
          - name: RHEL8_SOURCE_DIRECTORY
            value: /bondcni/rhel8/
          - name: RHEL9_SOURCE_DIRECTORY
            value: /bondcni/rhel9/
          - name: DEFAULT_SOURCE_DIRECTORY
            value: /bondcni/rhel9/
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9c713df8493f490d2cd316861e6f63bc27078cda759dd9dd2817f101f233db28
          imagePullPolicy: IfNotPresent
          name: bond-cni-plugin
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /entrypoint
            name: cni-binary-copy
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/etc/os-release
            name: os-release
            readOnly: true
        - command:
          - /entrypoint/cnibincopy.sh
          env:
          - name: RHEL8_SOURCE_DIRECTORY
            value: /usr/src/route-override/rhel8/bin/
          - name: RHEL9_SOURCE_DIRECTORY
            value: /usr/src/route-override/rhel9/bin/
          - name: DEFAULT_SOURCE_DIRECTORY
            value: /usr/src/route-override/bin/
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0b95ed8eaa90077acc5910504a338c0b5eea8a9b6632868366d72d48a4b6f2c4
          imagePullPolicy: IfNotPresent
          name: routeoverride-cni
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /entrypoint
            name: cni-binary-copy
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/etc/os-release
            name: os-release
            readOnly: true
        - command:
          - /entrypoint/cnibincopy.sh
          env:
          - name: RHEL8_SOURCE_DIRECTORY
            value: /usr/src/whereabouts/rhel8/bin/
          - name: RHEL9_SOURCE_DIRECTORY
            value: /usr/src/whereabouts/rhel9/bin/
          - name: DEFAULT_SOURCE_DIRECTORY
            value: /usr/src/whereabouts/bin/
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7983420590be0b0f62b726996dd73769a35c23a4b3b283f8cf20e09418e814eb
          imagePullPolicy: IfNotPresent
          name: whereabouts-cni-bincopy
          resources:
            requests:
              cpu: 10m
              memory: 10Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /entrypoint
            name: cni-binary-copy
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/etc/os-release
            name: os-release
            readOnly: true
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/sh

            set -u -e

            CNI_BIN_DIR=${CNI_BIN_DIR:-"/host/opt/cni/bin/"}
            WHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig"}
            CNI_CONF_DIR=${CNI_CONF_DIR:-"/host/etc/kubernetes/cni/net.d"}
            WHEREABOUTS_RECONCILER_CRON=${WHEREABOUTS_RECONCILER_CRON:-30 4 * * *}

            # Make a whereabouts.d directory (for our kubeconfig)

            mkdir -p $CNI_CONF_DIR/whereabouts.d
            WHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig
            WHEREABOUTS_CONF_FILE=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf
            WHEREABOUTS_KUBECONFIG_LITERAL=$(echo "$WHEREABOUTS_KUBECONFIG" | sed -e s'|/host||')

            # Write the nodename to the whereabouts.d directory for standardized hostname reference across cloud providers
            echo $NODENAME > $CNI_CONF_DIR/whereabouts.d/nodename

            SERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount
            KUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt}
            SERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token)
            SERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token
            SKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false}


            function log()
            {
                echo "$(date -Iseconds) ${1}"
            }

            function error()
            {
                log "ERR:  {$1}"
            }

            function warn()
            {
                log "WARN: {$1}"
            }


            function generateKubeConfig {
            # Check if we're running as a k8s pod.
            if [ -f "$SERVICE_ACCOUNT_PATH/token" ]; then
              # We're running as a k8d pod - expect some variables.
              if [ -z ${KUBERNETES_SERVICE_HOST} ]; then
                error "KUBERNETES_SERVICE_HOST not set"; exit 1;
              fi
              if [ -z ${KUBERNETES_SERVICE_PORT} ]; then
                error "KUBERNETES_SERVICE_PORT not set"; exit 1;
              fi

              if [ "$SKIP_TLS_VERIFY" == "true" ]; then
                TLS_CFG="insecure-skip-tls-verify: true"
              elif [ -f "$KUBE_CA_FILE" ]; then
                TLS_CFG="certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\n')"
              fi

              # Kubernetes service address must be wrapped if it is IPv6 address
              KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST
              if [ "$KUBERNETES_SERVICE_HOST_WRAP" != "${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}" ]; then
                KUBERNETES_SERVICE_HOST_WRAP=\[$KUBERNETES_SERVICE_HOST_WRAP\]
              fi

              # Write a kubeconfig file for the CNI plugin.  Do this
              # to skip TLS verification for now.  We should eventually support
              # writing more complete kubeconfig files. This is only used
              # if the provided CNI network config references it.
              touch $WHEREABOUTS_KUBECONFIG
              chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG
              cat > $WHEREABOUTS_KUBECONFIG <<EOF
            # Kubeconfig file for the Whereabouts CNI plugin.
            apiVersion: v1
            kind: Config
            clusters:
            - name: local
              cluster:
                server: ${KUBERNETES_SERVICE_PROTOCOL:-https}://${KUBERNETES_SERVICE_HOST_WRAP}:${KUBERNETES_SERVICE_PORT}
                $TLS_CFG
            users:
            - name: whereabouts
              user:
                token: "${SERVICE_ACCOUNT_TOKEN}"
            contexts:
            - name: whereabouts-context
              context:
                cluster: local
                user: whereabouts
                namespace: ${WHEREABOUTS_NAMESPACE}
            current-context: whereabouts-context
            EOF

            # Copy the config from ConfigMap to the desired directory
            cp /etc/whereabouts/config/whereabouts.conf $WHEREABOUTS_CONF_FILE
            chmod 600 $WHEREABOUTS_CONF_FILE

            else
              warn "Doesn't look like we're running in a kubernetes environment (no serviceaccount token)"
            fi

            }

            function generateWhereaboutsConf {

              touch $WHEREABOUTS_CONF_FILE
              chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_CONF_FILE
              cat > $WHEREABOUTS_CONF_FILE <<EOF
            {
              "datastore": "kubernetes",
              "kubernetes": {
                "kubeconfig": "${WHEREABOUTS_KUBECONFIG_LITERAL}"
              },
              "reconciler_cron_expression": "${WHEREABOUTS_RECONCILER_CRON}"
            }
            EOF

            }

            generateKubeConfig
            # ------------------ end Generate a "kube-config"

            # ----------------- Generate a whereabouts conf
            # removed because we have the configmap
            #generateWhereaboutsConf
            # ---------------- End generate a whereabouts conf


            # copy whereabouts to the cni bin dir
            # SKIPPED DUE TO FIPS COPY.
            # cp -f /whereabouts $CNI_BIN_DIR

            # ---------------------- end generate a "kube-config".

            # Unless told otherwise, sleep forever.
            # This prevents Kubernetes from restarting the pod repeatedly.
            should_sleep=${SLEEP:-"true"}
            echo "Done configuring CNI.  Sleep=$should_sleep"
            while [ "$should_sleep" == "true"  ]; do
                sleep 1000000000000
            done
          env:
          - name: NODENAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: spec.nodeName
          - name: KUBERNETES_SERVICE_PORT
            value: "6443"
          - name: KUBERNETES_SERVICE_HOST
            value: api-int.ocp.openstack.lab
          - name: CNI_BIN_DIR
            value: /host/opt/cni/bin/
          - name: CNI_CONF_DIR
            value: /host/etc/cni/net.d
          - name: SLEEP
            value: "false"
          - name: WHEREABOUTS_NAMESPACE
            value: openshift-multus
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7983420590be0b0f62b726996dd73769a35c23a4b3b283f8cf20e09418e814eb
          imagePullPolicy: IfNotPresent
          name: whereabouts-cni
          resources:
            requests:
              cpu: 10m
              memory: 10Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /host/opt/cni/bin
            name: cnibin
          - mountPath: /host/etc/cni/net.d
            name: system-cni-dir
          - mountPath: /etc/whereabouts/config
            name: whereabouts-configmap
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-node-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: multus-ancillary-tools
        serviceAccountName: multus-ancillary-tools
        terminationGracePeriodSeconds: 10
        tolerations:
        - operator: Exists
        volumes:
        - hostPath:
            path: /etc/kubernetes/cni/net.d
            type: ""
          name: system-cni-dir
        - hostPath:
            path: /var/run/multus/cni/net.d
            type: ""
          name: multus-cni-dir
        - hostPath:
            path: /var/lib/cni/bin
            type: ""
          name: cnibin
        - hostPath:
            path: /etc/os-release
            type: File
          name: os-release
        - configMap:
            defaultMode: 484
            name: cni-copy-resources
          name: cni-binary-copy
        - hostPath:
            path: /etc/cni/tuning/
            type: DirectoryOrCreate
          name: tuning-conf-dir
        - configMap:
            defaultMode: 484
            name: default-cni-sysctl-allowlist
          name: cni-sysctl-allowlist
        - configMap:
            defaultMode: 420
            name: whereabouts-config
          name: whereabouts-configmap
    updateStrategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 10%
      type: RollingUpdate
  status:
    currentNumberScheduled: 3
    desiredNumberScheduled: 3
    numberAvailable: 3
    numberMisscheduled: 0
    numberReady: 3
    observedGeneration: 1
    updatedNumberScheduled: 3
- apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    annotations:
      deprecated.daemonset.template.generation: "1"
      kubernetes.io/description: |
        This daemonset launches the network metrics daemon on each node
      networkoperator.openshift.io/non-critical: ""
      release.openshift.io/version: 4.18.25
    creationTimestamp: "2025-10-11T10:27:13Z"
    generation: 1
    labels:
      networkoperator.openshift.io/generates-operator-status: stand-alone
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:kubernetes.io/description: {}
            f:networkoperator.openshift.io/non-critical: {}
            f:release.openshift.io/version: {}
          f:labels:
            f:networkoperator.openshift.io/generates-operator-status: {}
          f:ownerReferences:
            k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {}
        f:spec:
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                f:app: {}
                f:component: {}
                f:openshift.io/component: {}
                f:type: {}
            f:spec:
              f:affinity:
                f:nodeAffinity:
                  f:requiredDuringSchedulingIgnoredDuringExecution: {}
              f:containers:
                k:{"name":"kube-rbac-proxy"}:
                  .: {}
                  f:args: {}
                  f:image: {}
                  f:name: {}
                  f:ports:
                    k:{"containerPort":8443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                  f:resources:
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    k:{"mountPath":"/etc/metrics"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                k:{"name":"network-metrics-daemon"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    k:{"name":"NODE_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:securityContext:
                f:runAsNonRoot: {}
                f:runAsUser: {}
              f:serviceAccountName: {}
              f:tolerations: {}
              f:volumes:
                k:{"name":"metrics-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              f:maxUnavailable: {}
            f:type: {}
      manager: cluster-network-operator/operconfig
      operation: Apply
      time: "2025-10-11T10:27:13Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:currentNumberScheduled: {}
          f:desiredNumberScheduled: {}
          f:numberAvailable: {}
          f:numberReady: {}
          f:observedGeneration: {}
          f:updatedNumberScheduled: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2025-10-11T10:40:12Z"
    name: network-metrics-daemon
    namespace: openshift-multus
    ownerReferences:
    - apiVersion: operator.openshift.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Network
      name: cluster
      uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2
    resourceVersion: "20873"
    uid: 4942cea1-e6f6-47ac-86b2-aacc25dba26d
  spec:
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: network-metrics-daemon
    template:
      metadata:
        annotations:
          cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        creationTimestamp: null
        labels:
          app: network-metrics-daemon
          component: network
          openshift.io/component: network
          type: infra
      spec:
        affinity:
          nodeAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
              nodeSelectorTerms:
              - matchExpressions:
                - key: network.operator.openshift.io/dpu-host
                  operator: DoesNotExist
                - key: network.operator.openshift.io/dpu
                  operator: DoesNotExist
        containers:
        - args:
          - --node-name
          - $(NODE_NAME)
          command:
          - /usr/bin/network-metrics
          env:
          - name: NODE_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: spec.nodeName
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c704e6891838d4e4223e571351240db67c4b562ca3bc4ffd92e27c6e059c19cb
          imagePullPolicy: IfNotPresent
          name: network-metrics-daemon
          resources:
            requests:
              cpu: 10m
              memory: 100Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
        - args:
          - --logtostderr
          - --secure-listen-address=:8443
          - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
          - --upstream=http://127.0.0.1:9091/
          - --tls-private-key-file=/etc/metrics/tls.key
          - --tls-cert-file=/etc/metrics/tls.crt
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
          imagePullPolicy: IfNotPresent
          name: kube-rbac-proxy
          ports:
          - containerPort: 8443
            name: https
            protocol: TCP
          resources:
            requests:
              cpu: 10m
              memory: 20Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /etc/metrics
            name: metrics-certs
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: openshift-user-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          runAsUser: 65534
        serviceAccount: metrics-daemon-sa
        serviceAccountName: metrics-daemon-sa
        terminationGracePeriodSeconds: 30
        tolerations:
        - operator: Exists
        volumes:
        - name: metrics-certs
          secret:
            defaultMode: 420
            secretName: metrics-daemon-secret
    updateStrategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 33%
      type: RollingUpdate
  status:
    currentNumberScheduled: 3
    desiredNumberScheduled: 3
    numberAvailable: 3
    numberMisscheduled: 0
    numberReady: 3
    observedGeneration: 1
    updatedNumberScheduled: 3
kind: DaemonSetList
metadata:
  resourceVersion: "64688"