--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-19T09:18:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e65ca28a-fd72-4bf0-a504-8eb8b938af3b"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-19T09:18:01Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e65ca28a-fd72-4bf0-a504-8eb8b938af3b resourceVersion: "2865" uid: 9ea40abf-c09e-4d5f-91e0-2e2161a8da9a - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-19T09:18:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-19T09:18:01Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2861" uid: c2a8674f-79fd-45ac-83d7-43cb2fe6c9bc - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.35 creationTimestamp: "2026-03-19T09:18:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"e65ca28a-fd72-4bf0-a504-8eb8b938af3b"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-19T09:18:01Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e65ca28a-fd72-4bf0-a504-8eb8b938af3b resourceVersion: "2860" uid: def0f417-7303-4cdb-ab8c-e9d75ccbc685 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIYgVIlu00TeIwDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzE5MDkwMTU2WhcNMzYwMzE2MDkwMTU2WjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMm0cYZLcQn1qCt9e18cwTXot/RZQ/JW HERBGZTZ2qClD2hZ5fqq0qTMmHZ39HX8yy3I207rtSsSQy07iL/7oN6zjfahwk34 lkEWm8OqN47RZ6YMy0Ly7kzTS8tgosrkaRVnS3UqD9Mupw0gKQgrJwcyNVOhOK5/ icmt5yDB66Hw0GEQuar49SYbck2s6TFUdHOCTyWRx8FPOZmWUTtbYTWa8rT0R74W bQlz32GTMYeSPV2MzgPDde+P/+lF1brx3JdMsi++akti4DbucR5TTN7rZ6+nI09f tQRoBgNaSqnjC4PkwdUECjONZvk8MNlrczQQnwD6zUpqv71CDU6ZzcsCAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMaQ hjgNdG7ajCYaJWW23XgbMh/LMA0GCSqGSIb3DQEBCwUAA4IBAQBUPKDkhw8UJukf vRFee72mIZlACLx+ylLxeHx0Vjo1bo+JhKb0RE/Fe6UZFD2T68sHjdCczFO3LrcN 3RtF+75VCce/eRiS3VfBJcsUqQYF8dcKrpgMsW0q9ImR/SQnwnP9i78MOIWEQp+T /jhW5IhTzuJRcrKmCLKkW5xopynEocS1O/k+mh03YeZPUil6bKCzB8K54+w2HloG 6lXfq3bBUi2OTTe1v5X7c/diWKqi2JEYLvIg/Yopp3LVHj60mb/992T/nkxihPHB uTQkwfXIa2Sjb/eXUYoOlIhPG3xSU7aa4ZlDAiW/CPgjRIR0aniFg2p+YHOFSWjq rlq0y6aE -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIQS5og1kSzu4wDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMxOTA5MDE1NloXDTM2MDMxNjA5MDE1NlowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXPBq2mxmcp7 cI8N8F9Se7bEMwDNCwuXgV/hO1kCASQyAaNYyQq4QqEWrk726KK4wy9Qs10cfkqA jg2yciJhCQGW028xGR7ipgRSuRdxVxD3ECtG2bTY5naeJOZavbl2ZFJ+K4QvdjxP /fMxQ1UK9KF9ULGLgkj0heXBD20JSLiBuguPyJXeA4aQE/aGoIYV1QKT9eqvm9Am 97C0UQQBZSskrgmp2n1cUt4wYgvtsQ4JkYiB+rohKz+mQjcZEWGWlMFNLZLp2nRS xLsmcMPQFB0P8z3exRGSg5+jQfEvZDbBZZAyoIbbK20DxOBF2FnvoUoOKH8zDSwm cOZBVW1AHwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUL7kN4+JQCTpzVhkODVNNDdJ1h7MwDQYJKoZIhvcNAQELBQAD ggEBAIYa8FTFTHT65JgkAVbBpt7ftsRb7AwWSYiu41/37SIpWIs+VNj9n8d+7n7+ 43kiRBjfFLxCfIDPrNUpBmNj3tVi/FyHu8frOQIzb0/n/pZzEMRneq9IiMb+fjFe J0mpXcXCua73J1EfVtZ1FenQYKssjcmSkLnCSNeCVDCKjjzXlnOKXb73pBvMoyGu qrTru7zR1muos2sEUHDs3qrwpW1Sub9wTCfVRuLVI6mNDpT6wa3W/bCt2knmk3Rz dmk+dcvx2Acju2IOtbk3TISdzQOrKfK19SpL3VxkoINJItiRp6kIXMVGkrNpOqaM o82EM/KRjxx5FcWNPoABFg3yIh8= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIIfmoZrrTphfIwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMxOTA5MDE1NloXDTM2MDMxNjA5MDE1NlowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPhISJnxOKWHxQjLmJxpKuu8T0EP3ZDNN07YwtPrAbVEx3G/g4HwGFtrWLir vU1l2RWOgfVopw81dELZG2i/B9FhCEm1fpo/vlKJWYscTHEf/KkHnqCVrgn6pk25 wUFOsEtrufpYgwVn0FXQ1ajrT5ek1Cg6PkAGWgQZV9um5xbp2GjOUGk8onviog0A j3h8YvDkMGJWy5W2Oc8tGfVjNf7GndkdhmDob0SQEQlx0OiCG2CraUtuv5JkPHIK 1/ZMmPbh1QiQlnai3eWZWid08q/8Heps/EJIDOqkqmZx2SoXhpEmyU10R4H7gDDK PJ3iCHSkqAVDW0W4gvFPsr13xwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUzLmzZkhIOOJWepnT8prRZUJIsNwwDQYJ KoZIhvcNAQELBQADggEBAIIt6Do/WEp2tm0IXtM+/d+SSM4UJ6s9bQgXnpvjbM65 4F7H7Akjslc3OyZw0NO0h6fMOYjqPU1tbdA0Pi8WE2pS46FqParORyK9LHUcpl9j AC0oLhVk0kozSJN95oGqvVagVZ27li6ISGctYrJ+s68Tqi8GZBGI7S2xBM1xEK8e aCEd6XfZXD3QSUN+fRDfWcnW5pV72EnvoGu+naQfjB2W+w2itp+KG6kJyJbuiMoa UXM6mE6Jsmor8ZLxz8RUISv8sh3liZAxpMT4ALZCZ1uAisCgQ+YuR3I//2P8PgBf LI4ZV2sKWuMWbEUAM83r+DNj+EoOpJoNAi9JjW3SqR0= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIICM6QDeCJqFUwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzczOTExOTgwMB4XDTI2MDMxOTA5MTkz OVoXDTM2MDMxNjA5MTk0MFowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzczOTExOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7C1 vrfFaEaxPID9mgJHbR89lnix5T/g+JvJfYxz+StaQXWI535tlEG9W0sFVlFUZqWH V3hbwqoBq6xb8e4DVwAQKoxFFUNPIQWhF/R0W88FK4/xhZ321KALbj8xJi6so6y4 TKTDeBTwpwGtk898IBrg8IfdCUJ/C2NZvEMnOtx1KfNvIdUxZ20ifxOPaLUldnaX B/IE4M8R7AotVt+tibOdEGOkasIOHIp2ikHlU0RXRtO86jFNbtMhkaAgGGfCr6lk AkYbqyppARnGyXhtVQsjDz2YWG/lb2r4A0WfRpeF/XOci3/OC6GlJC870Ql2V9TX 6qRxDShrNlpFbm+YAwIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUXxigkMgAIlB1KAyf52t3x2xs3mAwHwYDVR0jBBgw FoAUXxigkMgAIlB1KAyf52t3x2xs3mAwDQYJKoZIhvcNAQELBQADggEBAF7dowwt Aa5LmmoDgESWDiRnisdL5+eTdxWgVz4k/aTnk8eYcg9aLWc+B3MQU/xZTTy6APAG 7FBOMwXV5tQaNn3d389cMqShntwQNOvi0s9eWXrzhMKJi+E6kbRgHgs955D6tFwT Xl7BJG8o1srWu9ORuQVT/KFPyfAkQ2QAbb+uXAiloUqgvuTE/pNKUo0waCAhVLZ8 xu05otbTnjwh78PchUSnHLtgv+nYSN6Atf2U7PKhGUVaUI2bUo72ATz4/HGJE/bW Zwh1f3btbZtolTlvuCQytbgwgNry64wXY5HOZO8jpW+GakbAqyw245cLyHtA/JgB hR4k2ZrxO0DMJRA= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIChYay5Y6MjcwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzczOTEyMDYwMB4XDTI2MDMxOTA5MjEwM1oX DTI4MDMxODA5MjEwNFowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhVu9dL/HYbzv9ay 3iofKJW9m8G+nTpKiaj4e5kDF6fwtPcfP4jaHiXQKV5ddhQapfaJ2yGKuvul9Wt9 CQDq8KkKnPh4NfA2oTLxNEkyDi0n1pgnx+yyL763dZKNBHDkqiNrsvd2ZngYFUp5 4Y/WZp4fJzGzlfLhq3oEii8QDtY2grG8aOqXOkEZvaTJ0yLc2WvygwF1/ctCtWvP arFfKQn3ibj+Mnu8T0yIlfNfrSt/+gpDfpemqAHLqygpPpRGnUABKsZSupV1fuGJ IxjkE8AQHbK8HYP1svQSaESImpk3rvF6sARfGN490oB47ek6uJk6H3wLTc9c985q bb0QNQIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTjNC7JuUHFoNeYQOOHX9UfbLuR 6TAfBgNVHSMEGDAWgBTH7BazWKArQAVHBsGMoYtxpXNN0jAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAC3ev5KA 6f8ZnT7u2q80afrUq0IBnZW4r68NpUK3cVu/DyKihac8MreaUSXwW5DlSwbDmMCT 9v4WLLUFXJPZSQFwsijW74vfHL09QJNPMb960NQzi8zbewL6LrABwFswdDnRZ13v Hcy/uynOH9K8mtE1zP019bIBuLov5FTqWsnEnRvn1DdL+rYlHsjmCd7LXNshBm1o +KSd0rdvw1LNqHlzmvTtUu8BgpmHDvYljQ1s7DfDTsY+XLTz/7oo0Sa4Nk+d3Q/p RrFsAy0we+gIyXUBI2WKBJxwVsiWDQQ4OuGrhGoS6jywIYycWgHW2ZltWpQ9lwAR NNbHRptFBKCISss= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzM5MTIwNjAwHhcNMjYwMzE5MDkyMTAwWhcNMjgwMzE4 MDkyMTAxWjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzM5MTIwNjAw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg0oInpeb4CR/AUNwbU3SD AjMmLJxS8LlJFGT6/DgqBUfzxw4Zp2gvZojgO5I87AMFgP8UpYLHLt90eSv8full 3lynt/RUrDVLOkbEYclY48OHyE7C1CpnUHNUSxmzd/urLj9pbHOPE68Rgrm3JNFn Xp+HBiJK8J3ewrIVgzVL4B5C8ostDGAAIt4mEeROjaft862LB1xGWqs+GgvEx1uJ gp8Hm+Mrrr+dAVcOGBba2hipN+GM70+rQDWT1Juwi1X6/fpVxw4aVGxlOhit9oTC Lu8A2Vr+7ciwxQKkH871WcjpA5XE7hD4KNyuAsB3gf/oC+Sb5oeH6G+bFhpy2X0l AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBTH7BazWKArQAVHBsGMoYtxpXNN0jANBgkqhkiG9w0BAQsFAAOCAQEA haupvxMne7079AkhvM0wUfUAY2QaLFG8AgpK3wKbWMyHV30igCklY/2VKqhFxd8y E1cvP2kVEU3EpcG3xM2H6mPf8DTaXwOMDFW9YHz9omMuBgergIHpe/dgVmpyqLcv BY7RcKKqG/mq8EasErWHARHecM/ya7QfmYmpDNR6BzytlyjwMfeyXQeFEmZbtpvx 2G27oKSdiZNSA0PllrQSUnvbUFYus07unUSe4W3x0KFZnm8WhIq+u2fy/tAAfYF6 wO+jK3vRUDVq/jtkTGKpkxHkxN0bvRrOwlItB/ftGe9btA7P/oTKkaeYeiqwfGFT HfCb3BVquYSggB54mjTW5g== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-19T09:17:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-19T09:33:58Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "15385" uid: c4d18cf5-650b-4ce7-81c6-29c61fc26ced - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-19T09:18:01Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"e65ca28a-fd72-4bf0-a504-8eb8b938af3b"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-19T09:18:01Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e65ca28a-fd72-4bf0-a504-8eb8b938af3b resourceVersion: "2868" uid: 9ad2713b-b175-4d3d-8512-6e440a6e02de - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIIIjZKVMcqj4wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3MzkxMjAzNTAe Fw0yNjAzMTkwOTIwMzRaFw0yODA1MTcwOTIwMzVaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzM5MTIwMzUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2F8uO+5PlbHi4LRohEDXoajf/hkL5oYlV t1PwwGiqxaiQsZlkTMXvrky/VNXTE8b7Dr1aHFFmG8TzbHlx6RnCloxRmbO/0D6f Cyje2EYVIX3QP0QExdkuoQ8Rbw9QkxiUdz20AwiIAldU6+yDB6q6Bzh2nsBDJmi9 zgUrnmmtemtto9j48OVuQ7XTMH9DwOFp9S1Qk88oJlW465BU+IqsJ6Z7FtmmUYb3 9jol/N7NdbZTSq946mKjaeifWIW3KwDwq8LZck7wYXqaB/6bOSsTXc2qLKGulKV2 zbdmSpJLPybFyba759+waeI/pea/8aDjuazHgJEapRh+m+hA0o8rAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/R8Td 7i1LLOy2Pee7r28H5cEl4jAfBgNVHSMEGDAWgBQ/R8Td7i1LLOy2Pee7r28H5cEl 4jANBgkqhkiG9w0BAQsFAAOCAQEAJKSMpFZm14GqvzFrKedlU81WDWcIM521Ndz4 xbMB3BlMVzQZvz+wBvbr5CyTjD9pQbfV4Xm98yuwS5lRXkw7m288JMVWjw0TkLAd chNHYi1uUt5+ROdp52JJ16hR9CPOC9tyzEoTkUviNt2TO9eRhutPx+8kCirDGXig ZmhSU3l/HVViS/BKz2AzMg8rC3FPeHXtVHt24vZihMrCmXY3RZuzfuO+CMUgZ3BH 7JJsH95KNFUYel7PjvDKG+zEH3wRRDq5ia/byzuFDfNKkFoT5/Lcy9FHBCD5L3MR j8Yp8PfBRT7vsAVWz4o9wED8sR19Vlrc8twpDlzH6I2hQduISg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-19T09:17:59Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-19T09:17:59Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-19T09:20:45Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6222" uid: e53e539c-b76a-4d20-95fd-5ca98367c922 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "verbose", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-19T09:18:01Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"e65ca28a-fd72-4bf0-a504-8eb8b938af3b"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-19T09:18:01Z" name: whereabouts-flatfile-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: e65ca28a-fd72-4bf0-a504-8eb8b938af3b resourceVersion: "2867" uid: 583d5760-7d65-48be-b7a8-d57d1070542d kind: ConfigMapList metadata: resourceVersion: "75814"