--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.25 creationTimestamp: "2025-10-11T10:27:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-10-11T10:27:12Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2 resourceVersion: "3272" uid: c608e73c-dfde-4f66-87fd-3ea2ab0afd2a - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.25 creationTimestamp: "2025-10-11T10:27:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2025-10-11T10:27:12Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "3268" uid: e03632db-7c7c-4646-8e37-03a2bb92498d - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.25 creationTimestamp: "2025-10-11T10:27:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-10-11T10:27:12Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2 resourceVersion: "3267" uid: fbfc833f-9a7e-40c7-b23a-2e2a04fed6cc - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIUTYnMSIgGpEwDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjUxMDExMTAxNDAxWhcNMzUxMDA5MTAxNDAxWjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVk0B0LFq7q+FPQcuz14PYBSUrsfZI9 gEMWyLLEaCYNuzQCMP5RuHATJ8Tw2BAXkplfaMvZztGQ7e8jgMHSdZEPd0Y5L/0v SCXJcmz7OUSGVWLk4Lv0SZdJ5yoIy2YPn6qOxWZFZfK5pHkCwk2D3c83YwThA9Dz MV8NiEJmTcQvu+ZdEFurYLiF8DzNEUYBcN4gY4tyBxGFFkxzHX0hoLq6EkfqW7++ Pf6GWuoMNDJM+/vz3vyE41tnT9GEOyFzjzhTOaZxS+Xsu9POk840/JBx1Ur1VMF1 3GafWiAtBDQIfrgNbHmAHw2ZlUfZBpLaqs0yAa/YF5ChTwgmxT9ycpECAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAx7 ugoRXvd8xok92pCcrZ8xXYzhMA0GCSqGSIb3DQEBCwUAA4IBAQBT1rD25BvG6829 I/7i0sICiVm2X8JZs7kw4g+tbo8pqBEYPcAO+86K4mU/CgShV/RaYM1YPPqj6sbZ vtA7gj9hN8g4PrTjjyaPDPYZxFw6ugFgRcB8Z4okf7cobrNODfwML8Bjy7j99FPs XxcM+VbaUqRo82oBpdtLnYVk1FPKft5wEmPFzVE/b/t0ZKy9h4g/enyQxhsEbGHy hhz+L092nXRWtOwCDt8PpdoFMVzgAy0dV9/s3Km3XsNmq/G20IT4zgt1sgQGOpGT 4FcJr6QRuZVWh2ilPBMrQsPc/MB7jxuspCzwEx2w5zFM4Q7m+4PtUQcWj/mg2wDF jTDrDcuF -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIY5FJXdkjfyIwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI1MTAxMTEwMTQwMVoXDTM1MTAwOTEwMTQwMVowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5XpmEMFMIsg bWc31ixnJY7LKS2kMlwjoTimuC1uIwbB3NmYuAr3up4fpAkdB/qD6hgnLWHJD2ax x6CFtcdT67KmTgsOD3B79YdxQnFRaZMOeZE9tyJhYp5Yl2saIXcTDUg26Zgzz7FH t0z/b+kzZR+RmiW/fMwbksMbgyOEP27HYAXXoo5vMzbXIVg2yEwjWKsh9fZHjctO CVlr9yIhopbEgpmehO2J7vKE3llK4xzrEgAGhvDozoEk18zotDjY55yUaQaL1QCs e9sGZwTzocd0uTpWgumyZ/RhvekLlDRBbFGY8Ojy5ujAk/1RXGVG7EdG1X9G43VO KTfsFwP1EQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUjE5YJJRa3B85hvamDlaL3SaVvvUwDQYJKoZIhvcNAQELBQAD ggEBAGreTCu43KDfTJcSJ4EO4tSNO8CaWog9TBB6UlArt5OUAfxLTCQgqx+HZhqH olYURkpCmVTuBNXoHx07lVN1lQJNb3RhJmFUTzX4b+1PWEcDEJUYcuyi63soTVrj e2oKZVPkyBehzVIVCRaBKo3A1cGTUiT7OSCmNxSe18Mk2RuN/obJZoxV0ZNO+2Ud w5Kve0WyFMV/+I03hX85R/Hh8xZH98Bjv/XLoXPxWwWLP7WrYkiDRQO2akWX9jXo ww1VovJnWzZuxiYQw276yyuk0SdEOzV6C8+R7p0n+g+ZPkDWkBbjGCw7EqSAOOuT dq6IWoP++PamJSY7sEWrj4V4WW8= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIIXxoegJMIf7wwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI1MTAxMTEwMTQwMVoXDTM1MTAwOTEwMTQwMVowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgbBKdesMPmQgd4QQ0bmc0OPXU+10SoYj34CLMEVPqJeHDFek5sTQ7f0oUSN NyvlyFb92PUXmJxI8J/Un9c7G0x1eSky9FCGJaDnEpRBlILmVvhylz8u/lXMTCG+ a9LF7jVTfHlNzZKInqfnpMiURWCP8y0wuVjMSQRQLvLcwlHU1XPRBiZ+DEoJP6o2 KAi/C0u4esWW//D3v6kmVyI0eX+Cn6dH0khEVpiTRXmTFO9fYJai7qZde1YNrYPV /2P/Ja8JY6r4Jeajtll37oLbn1LE+mZcF/nbVufvgvqGzqooAc3IDZHOvsIBlEGu hGVgahyLh6iBY3GQzvf6wIciOQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU+oI6BoyosgV81gHU2AEEpugNXkowDQYJ KoZIhvcNAQELBQADggEBAIRemSi05feww6bRRhW8RavEcfm1f8EcaaHYzm2ycq2+ rPxmQGdSHjrkblC1v2YD19mraiYUIoIM5muYQCN6Z0Fvmq+qxCw1zpZA06GWy/W2 sZ0fSbdcHhR/35lZEIangTuByFBsfvcXizcxAln00czsIfh2887SbCJNRbTrem2z O7YXx7U7OgsDduAc1sRB7tTmpjHN3HThZdSOFnyy/7BLfJIq3UkBAKCmn8JEkU18 uRUh4ViYagWt4g7siGDeU6U0BbrL6xcuS5D1vxzpLVQk9oULl4CgxdCvqF7E2KkK Ync6dgesNR5UcgYhK073GClnv74EY6kw3k5JMymv+qs= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIXYAi/VS6n+MwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzYwMTc4NTAxMB4XDTI1MTAxMTEwMjgy MFoXDTM1MTAwOTEwMjgyMVowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzYwMTc4NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUJ7 1a608DOXg+d+GAG6zNBPLr/TnPlx/Zq73iALqhu3Rc0BO2AG/b71Ao6bGk5q7KUl G8Q981ts/r8wootgqaGH7W+BoeiFOSAG1nrzjZnsIzDNlTXPA4Z16XnKuVDo6Mk3 VMVSY+fj53GPVT5tRSPncCcsLnxK8hzteLQevvpt+ZDCblZi4MsS43UmBU7Z3/si n+I+rdPd4oAti3ThP1YywQeAODpjQ2p6Ajj4zwbGoPbeR4hSmgIgTYKQQ2kNopg4 wSdz+vF40BRdMX7PVjj56y1l3oq4TjWrly5YgpJt6yMJkfYRcf9btQ1THChdSKCq hapfgqEPoG1IU63T2QIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUyeKT1952jdsIXbO2Ltzf4bA/2lkwHwYDVR0jBBgw FoAUyeKT1952jdsIXbO2Ltzf4bA/2lkwDQYJKoZIhvcNAQELBQADggEBAI2XSoVM f6P7kOCu3Mp4EhYifbtu7nglEwtSlLrCKWdGde/P3ghX1wguRqfqu7t0A3AGXIY8 kxzXxgrfEyU+/fGyiaMBUPRcWcUdgOW7fpHIcy7OYY0cdIC04hKBHwSN/o8r0Gg0 kpZuJDPtbn84OLr1LGkzgNynQL9OimvF2Gbc3oxyXviVEEu9E8U//ooeuxC8y3y5 alYNMJsU91iA9OMwWsfb50fE14UTVoHkG00lUH+kXHwZgkqGk/rHm1IttVNr/8Qf j92t+fTGgu4/jNxSldNYhJyYIHqczIS6FetPMpz5UOy/i0aLGQ2QuGHmuoCHJSjA qBuPet+qmPY2N5o= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIC/EnvtSGJRQwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzYwMTc4NTI3MB4XDTI1MTAxMTEwMjg0N1oX DTI3MTAxMTEwMjg0OFowIzEhMB8GA1UEAwwYKi5hcHBzLm9jcC5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk79+6fsaH5xsX8Re U5xBtanKB1qFCRfGUZkjZYqaQy1xlXq+4Ynns6DNgq2A3evGfXL/TF5BMG+ruZQP yDygd2OTcqWRo4E4nFPy/UAogTbEXTa9B+Mfm5ekGXCyYOTPKQjQL043zVHYk82B OZNQ9KhpzGPPUl54AMqtSyf+daGfdTF4z96VrzT1kux83vSZyRuLzcIgfYQr7xNC a5Ji/f5DAlNOMiXvA3JhExSxGf1KorgwuBIM9UE8GzSPKxhy5gNFHZqFEfLWdFMa AzN/nAO4q1mlNek04hsvsgTuacJIvYgXNWuUTzCzZUbboXHOwi42i/qwHTIYQSWB 7F1GmQIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSYcovBzhSdsdMFw1pft3VYyIlJ CzAfBgNVHSMEGDAWgBT7kOWpKPM1KbfS8dF3ELXqqARFLTAjBgNVHREEHDAaghgq LmFwcHMub2NwLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAHG11rdF Au/Oh7NTrcDZDCk3E/KmjZy7iGla0onSgqJ+iG512dMts8ozh3CGx7xsUM4Um8wP 2KkoENNPD3CtwXwTQkE9i3RwCk4wvqUYFfGqSFpi1J6X/7ULdi3ES9mEFBHd6tO7 AqwCVAqzBy/GXOkF/n4/9/AMP0hHpi5hxqTpl4awAsFEiIhBfQb/6VxbtsYFGNJV Mrr2+83fSJgA/XfdXRlu2s19n5Hum12ObwGsrGwsi+mejADxtzrelIQ2qm0Hkyu0 xCETs+6pk+YlHuEEQlKJ0Ml3IURcn6OHA+rYv68w2+oxa2cu1nVBM5zOn5k4XLzL hj/riXIBMuaX5TA= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NjAxNzg1MjcwHhcNMjUxMDExMTAyODQ2WhcNMjcxMDEx MTAyODQ3WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NjAxNzg1Mjcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXnDFqNlvUbJgtJo9NOkH rhLh6guRmXG2JjmgqspD198TRK4BK+sIOyNecFpgIBhktwKFtn45J+RekqGt35hx Z09nPH/ZRZZmvSizwOGMpWM5bBiROr6XRywcSId9j4jmRUmkpjw+P9Lts9VNQMDG 4aXqzNEkHmjPZWAnBek7t0gkS+vXPUgh+muaHKs8t8vRjIxJyQnavUwLmaVh2Jz2 IsgGB3BL0IZt8u61MBmjxv9PTQP3Y+jn2p9qjPb6ny9v/lMVJZV+JjkwQ+DnDaKS ScbUpy0i3vDyqXIiw7zuwEoDZNiaxgjw9IoY+26X1AJY6bewXvidPDmcq6Zn6bs5 AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBT7kOWpKPM1KbfS8dF3ELXqqARFLTANBgkqhkiG9w0BAQsFAAOCAQEA tuVxiq1mzpWxhPbDTZXRNHXIY3Jkl2Mq1X1YkAOkwErLjhsUsGxbMXWoo/YVrcDx 8qEZ40CZb9qTaI6h8dhpsBtKE2qDV2h/FFbFkFQ2ICBns+zksP5HKy/bCO+bAUK9 +9/VLPCKvMdjwxCoZQVjnRP3/XMoERWSBmbf/A/XMaCiLX8jBlafHTRnG0GjqX1D TwLbV06vmqD42R3oqezFpvjLWUdDwS3QkqJWxpV97Sf/hVJCSq2xcQ/uJ+HcT/tQ 4pekoqc1T7RKjyKFxf1liYH8i27f+tFB8izBb3zCCHGhcL2ZYnArCcZ12IS5Q/qV udczrGf4t3eMaHz4tyhgQQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2025-10-11T10:27:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2025-10-11T10:35:39Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "13898" uid: 4dd847f5-1517-4d98-86a4-5c63006cd8bf - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2025-10-11T10:27:12Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-10-11T10:27:12Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2 resourceVersion: "3274" uid: 6bf992f6-7028-4db8-aa3e-01f35d2d49ef - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIILi99DFj68xcwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc2MDE3ODQ5OTAe Fw0yNTEwMTExMDI4MThaFw0yNzEyMTAxMDI4MTlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NjAxNzg0OTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2F/NrtYheDP52dirb64UnaTwYZyt09Lx fNk4CB/DgPRKIKlXI+Ym/lXQfY4w1af4nCMG5F7v9iH0G0t+bTls6zVwMPfOggbY FZQvLk3z/DUZgYDBNpI7jpXkS3zCFXyGtgEdNvK6+/R5XfSHrgt0zqDqhQozSHCt fx4ZxnNFp2s5C8NiQQh/X3k8xxu4P6o+giIihNMsYAKRZnZjBoxdnr+vxUGLCzIB VzuTNkI9GtVXhpeNI5m1tJp1m0CCEmzBEflExKk2YoYIKjhc067EocUhSlxzYek7 wYyDQTfTyBIlS0mRB0M90nikzzOncFm43pOb81k3FOuZwjqCIMaFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnUydn b4IFPQb6f7h04eVoOv/DbzAfBgNVHSMEGDAWgBQnUydnb4IFPQb6f7h04eVoOv/D bzANBgkqhkiG9w0BAQsFAAOCAQEApD3F5xbsO2JnAJGf8/9Etyj/b8vQ+my0t8W0 +GbJ7b5zVcVOpEcCShRYK4uSj2p8oBfB6GpRakYgRLTxSFoN5742mdwApu0WUiSl It7QRytlk86JkxRdaY99vbhk7SsRZA5HVwyg9LFgiT/hIzxasXUx5y0WSUV1T+3K EWC+mosyEEAtvgnIrEMrRXGzqCz6ti1McTHOZcE+p49r281X5swkgOpnnNtjZ13U 2ajLksN8qYkWK0Ehr4xOVagOZN6KMVJNg+ZqG0x61BtmN5Fxrtm91rGqYuBXeN2E TCf1j0pdR8xHoFSTQP2jvlZ4ldxBzT92SiXGO2KPPzQBhRJjFA== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2025-10-11T10:27:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2025-10-11T10:27:10Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2025-10-11T10:28:35Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6535" uid: a5a3a306-97a6-4099-817a-ae24a090ecc3 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2025-10-11T10:27:12Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"216d30b3-cc7f-49b9-949f-43cde8dd9ab2"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-10-11T10:27:12Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 216d30b3-cc7f-49b9-949f-43cde8dd9ab2 resourceVersion: "3273" uid: 4c3810c6-ba81-4cba-becd-71078b19dc26 kind: ConfigMapList metadata: resourceVersion: "64690"