--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-08T03:46:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"559bd479-9128-471f-9b3c-bfbb5f768480"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T03:46:06Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 559bd479-9128-471f-9b3c-bfbb5f768480 resourceVersion: "2986" uid: a1d90d29-bd3b-4874-8d79-8dd06daeea5a - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-08T03:46:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2026-03-08T03:46:06Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2982" uid: 1aaab898-b749-4c6e-a99a-2ddc608c1569 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.34 creationTimestamp: "2026-03-08T03:46:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"559bd479-9128-471f-9b3c-bfbb5f768480"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T03:46:06Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 559bd479-9128-471f-9b3c-bfbb5f768480 resourceVersion: "2981" uid: 8da1479c-71ad-4ae2-8cb0-df81780a7788 - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIVSKm/C2JuPAwDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjYwMzA4MDMyOTU2WhcNMzYwMzA1MDMyOTU2WjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMGtpK1L/GOOey4k/N+GjL2WakaEblD9 a8nGs2gFYzzjvhQsiMsI4AoyQ/i0jn4dSyg9HAdZZdXLhVTwDjaut1qtsrn15a0Y v5oW2kNsBBNv8/2GVDA6lBNcYZHzcmtCfNsI83SwWKM4OceVJ0Kay7b8T6eJY+Pz ie1E0j7/ApPTPYIGlxFlfTPj8Fy2Jwyv1NZni63QB+N6eL3Pwqijg2vBmWNlV2a3 jZhKNSbVCBjUGufPhbf9Yu8akpVhs2NbCF92x8smWKasypXdREwhZ49RQ0TSTMWP ECUqi+OEj7YCGZSeAhwKjx/u6ElCzF+Q1+nXiI2a+86fk7h8wXHEiQECAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFH/h RyWp3l9EUouXh9AfUSVoPVc9MA0GCSqGSIb3DQEBCwUAA4IBAQAunKEAqvTN/Zxx kmSIv52BNfV7MKrxGHP4d0DUd2ywFs5qDg7c7KVOQAep8X+p308jZXrkoH26k2YZ u0GiEGdyAeb3QoFrBVE7+NNdF8NWeyXqnD7kd49YfTjLgDgnrdgC1X/8qKRBEp+x vVh8H4DA7AbyPEBlL8invpwCJtmbs8pJI/2xXz3y2WgRrHxtZ0rxWPqhBEN33gOK 5tv0Uc5retixxNjxvDRgpvmvcpogGDQ5XultNjEgOXNHFJJCNNProQKbOFHek3lW xI8bx1KqomkBfLshz3oKAbt+fcLY8G62Kby/pVmtqoSpMbYGe6sGA69NjMnNdXra +Htf3P7M -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIIY7TeidId0nYwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI2MDMwODAzMjk1NloXDTM2MDMwNTAzMjk1NlowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Sbnrg1Aq3u0 DnomgVeUxoSg5dok9Y4Uw1XFiXM/FxbNcSWXM5hQ9K1RkorwRNJUwDQDB2FjUzlG FTprY25rpYLc5wUJYbbAYoUqQSph82bQxKJpsb7GnvOnUDUJ/godosMSFHrGreC8 z9MTxGoJzMJZj5wuqb8L9I/9SeIDGB58p+rDkLux+/XjJJB29NiUfrm6R7qexvs1 qn9Q+5W7wfCFJ3O4tR3cR4R36TcAUjRBAulZITnyDWYWlUl67AWO6trYfYEjoyO0 JPLFS8lhdMFLH4eTl3Ek/LFFlexDMRQkLskDjg+Jgc6M+53/hwsDnqPKEFkNi3vR xTosqrinpQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUy45IQa9c66Mn6uwKdnBntPjSLFUwDQYJKoZIhvcNAQELBQAD ggEBAJCYjIKpKv3u3shugga7NhuIp+X1FTdT5zarFO3lI3hgj9+3LLy74Lb/poYF 823qtRhPOZ8Ues6n+b+rhW0dqlHRt4TW02j0CX2Q0e3OG8jezfenJM4fohyyGKyg htLaOtpZTWa7En3k3AkKAVh2wcV6EzH+l2gCcyYdhGmp80GL78TFV+LaBZc3I32E +c17981SZqLVz2Q+lAOxlFVxMuq7PUBdW9Q6uAaghgd3b6+vLIbwdpDv1OPpAPjy UJL5DY08zJB2CW8QZ6UnbodB3HWxp4ooMyw+0Ox/ambWY1jZg7mBkMMYrvE7422c Sodb4bRA5PX5/UpFkAA9stTFS+8= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIISyhuqMcGMyYwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI2MDMwODAzMjk1NloXDTM2MDMwNTAzMjk1NlowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11+RyOLoQ/Hr6UJTfXE78ckBESM5opWcB52OUzyNCUBvrr126lAhd2/VJolC yYqcLUQgF4GpDpJ0LqZRJmKipRBkmA/kFQD36VR/IwxXa2gUXnyBlLtaqDDfafEB Am1Rv6xzY2gim70NdTurXIMIHlAXOEXf7UkrawLgEhVtf5rjbgblh8+/Z46pfXMW MEQfy8TsGsocG7fa23ELSRsU3BR5V/aMO5HRseLUylcjIjywalG5QuMvSdfSkv0c QjiR538K5jn9NKlSeExf2iiGh4hroC4mffzGCSasw8ygiJED+Lw5jqR9N7E/7RMk /cDonFkAC3lZ5mSf00w7lpiZSQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUnFe7kHJTjxFYC+8Sq7Lw9clY4hIwDQYJ KoZIhvcNAQELBQADggEBAEApifmY8CccljMelrM2Hi+qihRzegNXQzLy9fPeMZnC yKgvmvQ7FA+trIQCH1AAP0oYZbHfEz13ryrF2Ifr8ukzdQfoXO13aso2ws9H6qgZ wtH6L2gz0qhGejOp6Ogwvg6nnWw3yNNXC4yznm+2iSWPZ8A4+hnbSY39kElLbSCU JicH/tWqYCTOz4V2AynftZpuHUPHOF2YBHq3Rj47Awk6+BNe+MYzCDsFZjzIQQPk oFz/ZA3Sf9pINdXbImYsRyfIR/0HTYhJ3PA4Qrld6/SRYymfSIu/XqvQCbmqO1md zzZORwomd9GzBY7KdsGOvICX3kFOg5/UesNTaIDqeoI= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIW3La9j8Cj5YwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzcyOTQxNjMwMB4XDTI2MDMwODAzNDcw OVoXDTM2MDMwNTAzNDcxMFowWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzcyOTQxNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkog hdlE+THXDClteS9lDya0PPz/QHad0+Ikv5eY11hpN/7Tqb7fGmJ4ESp/0z8RsHSs j+AawkIzK+OMPE2LaYpoHZrP06A/ZB3cth6N0KrvFKKqd4nkZMvOkdDhKYTwsJyq KWMHq5iyu9U9z0iI5+RLddoKHYHnEyae91TGGP9lqp6mBwId9/cE9+Ko2BRBG4F5 p5ua+OO3SS6hx7TLomjqWZnm8111kTEgOPhpgBjy85lOHGD2+F8IY7BKW5Dnt2L9 cbBQp2XIvQjFKkQ2HoAwlvStR+Lh6PagJ6ZNyYCe4CjrtzRtuRElpduG26MlJgIu bHTfFdN83YRKRhaVOQIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUnMB66h/iD+aNPRBquxnPjnJM4s0wHwYDVR0jBBgw FoAUnMB66h/iD+aNPRBquxnPjnJM4s0wDQYJKoZIhvcNAQELBQADggEBAFetsR3I 4i6aT4ZJqR6qpLPRndrLjeMXHIDGTnNfUZ40KQCWzs/pqTKCrG+kNPwRnEdAT5i/ YBCpeuSphg3PKnUIQmezu+7c9QbRaq7zx4LE2yDCXsR4Knrfl1WEC3x39SRywgzJ NjTBE7Yyqz44DxdHSsEHSXhM+RA5ysFvWXzYOMYzjQKop/Nq6B6yx4qr/TzP0FSf ftO7yNIkGhdvIgND779lrNCh712ywRaw2eFdYrjbIfPPjzJFx6eOGLW9T7CPy8PX EJvg+6YiFdsLxzrlTRLHBqTN7YtOloqXRQpFbJHXBgSjhNX2j7NYdUrwR3CQWB4V S3iNvomeUX17P/o= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIW0oABpBfnfYwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzcyOTQxNjg3MB4XDTI2MDMwODAzNDgwOFoX DTI4MDMwNzAzNDgwOVowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycyJz1PYJHNj+zAg tDKB3wsYhQ8baK3ihs/kuVvjLP7AneAT3YLzzHwjaVk7CH6w01M1UbngJ02jA3ai MHWVvQVJP5KRfa3uqXOey6Y6eAlxlRJQfXc1u3CEQw/slKT3Rw/pCtLKcROT09sc Li6jadRLeiGrmVsmctrrJ11oqBcNt1L5ucXX46zjuATD0eHDLAFVvFYPeyzM95UT vjjC93DWQBd49LnksJ3heODqHzEQOcToe1un7UuwCdvZXwxGzZCD1ZHvGofWAE5T InKWSR2JG605rtYZ7Zy+6RuJQGatMtCkN39sn7NxlfZpMxFPEu6D9mS7tVBPoGol u/H+/wIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTc7UTN6OKCd2CLIKk0AmGWHN75 5zAfBgNVHSMEGDAWgBQiy4qZ3u5PKAfzmhX4lhTFV9+JYDAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBABzdNLw7 9yc/0HBow+a4clO7CteawzqGVolXXC98wNwLFXwcsA7k2IzNqbuv5MszaXw8F9qp URHBPRlaHTtY7u8jqXJpIK0u8P0+7olpEmDZplVVGfaV5r/51J46e2/Vh1AhWyHN mLW3y6JvbWwtOm7SNS8O0R4oyufMiQ+uWnyzs8a2i61yo1JkRyWVzR97ozMzLIpW xgyHK/0ATaG+PvbherLVJOur+Te45VjrwYqPP9h02HtsxGETK5PzodK5ag0U8EGL 3h5EvwSLR2KyHjf3CoHr0ASeRoXuWSuUi5ZUNeAUniFWkmbkDao6RUSvZtCH6At1 42aV+Uur4r0tb6w= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NzI5NDE2ODcwHhcNMjYwMzA4MDM0ODA2WhcNMjgwMzA3 MDM0ODA3WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NzI5NDE2ODcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/BK2O3OlutPRB9M+59jo X8sG/O6CsJ7AIA18BYGDQnebFfNmYbNVoC5R8bUC3Ct/nbzSGx7y3sjgTjjzlJi9 6XkAfMSkCG/jovPcqLGvD4ZahBYuFgC+rRnKa1SDSu+AduTcYFrAYgy4EhzHfmFD CsEWt3qVJwJxL5XzI6ipRV1b8G3LwFt4Dxem4M9Zn+uePaJPyS9aTL94ur+Ge2jv r5O4+6NlbVenBX53qUb6HGHozIlKspa+zr23eJHaV3ONxFK2sKzenutysDhjyvsj E4O5gCLxQLw2jPgN+ntraiTRsgeodvUb80zIW9fhT+Rmf43gnUdnbDxch22ScWVV AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBQiy4qZ3u5PKAfzmhX4lhTFV9+JYDANBgkqhkiG9w0BAQsFAAOCAQEA XBxDagbEqPsLeKtxGziNiF71dgKM2bj0cNhwIvpvBJa6Qw7edPGalR8hE4cEpNzT qdUZ8uCPAeopfglbJ2qwFNAIi/73iEtSWjLssFDuj7OOcKd0dW+0Vw5xrT4ywbn5 +bkN77VE0zgLNB5+yYKahrFb6JJmuSuQYkA6HArgVpP2dmvY5glLbRYnXXoClBjd pxpmlCHSi/A8c9DDSYEds0kY/7w/GWnoB1kVIc2wNik+gKmgAiaD7FcZic1WwDLk gsJJbfKDSCGkosG6OR3StQiZhWtMfQg1ClmUXDZMaLQLmdQqRHD0nBUgB2R+mLXx M5nvgytfbwO1uL3NmeIILg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-03-08T03:46:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-03-08T03:52:51Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "10791" uid: 6eb04747-d2fe-42f9-af1c-c72037afb576 - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2026-03-08T03:46:07Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"559bd479-9128-471f-9b3c-bfbb5f768480"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T03:46:07Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 559bd479-9128-471f-9b3c-bfbb5f768480 resourceVersion: "2988" uid: 2ebc4ac6-bd56-4f6f-8cb2-0404ebd71328 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIdWESYU4aCU8wDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc3Mjk0MTY1MzAe Fw0yNjAzMDgwMzQ3MzJaFw0yODA1MDYwMzQ3MzNaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NzI5NDE2NTMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkGQlZGtKYpNqFgokcU9ZKk+MogJpeM44 MsMcFITel3ZC6QfF53X1btgLKm10mjxcjlliNj7OX/oJDQwslupGODe0MQlrERgL n97jEGmuTLx9EFcV3wnRLZoHqxZpQZkNGgKfCmsl+99XQEGR5uBDGasYWRwEiOA1 m2Ljp/ikBs5I+oEKRVPUA22IMaeHVh4Rv1SXbJ2FP8CgCwEKyBm01thqRSiLq6xO yxbMYZ5z3CgZfZaWM8IoVgeXDnsuhl8HKjDslA3ISLpt5WvQQjmLeRggexUD5AGw QaBQrUzzblgulb9lHWtdYzBreQSm5rGbI4ESd5IpDnMYO0DA+laHAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRnNd3P SMZDr56LknJaHkIU4HL1+zAfBgNVHSMEGDAWgBRnNd3PSMZDr56LknJaHkIU4HL1 +zANBgkqhkiG9w0BAQsFAAOCAQEAfMAFx6DqgHCfExuggTzS52i6Q/0GSaz4+aA7 duoRs88d7aoVLHpA4O0tcwho/FcIQPfqNu3XaeRv9upvSpTXNtChbxzDdqTiZpZ/ PTTNf3je02UOLiot+PjhZiBqqxmH10IArR6lXa87sYLE+j+ZOnhCQF+SVIeMdGzW 3WKLk6jxfTBujaYyshThmpLkYx/HHKoq2esi9iHhMm+fUbD8sRegec2kq1qO6WeO /ipqvHrA2KaPDCtZfmPVCXut/EzDy4LYgRCbW8saSkO/sazbQCCtuHxch7vWdC+n CWGmENqCgnxY30LnKVJHSuKr0mbbsFNeLauifpHV605N67ap+Q== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-03-08T03:46:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-03-08T03:46:04Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-03-08T03:47:44Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "6173" uid: d0bd5985-d481-4ecc-ae63-bff2406b4c8b - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2026-03-08T03:46:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"559bd479-9128-471f-9b3c-bfbb5f768480"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2026-03-08T03:46:06Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 559bd479-9128-471f-9b3c-bfbb5f768480 resourceVersion: "2987" uid: 6af2b84f-1408-4c7c-ab28-c27d82c24f44 kind: ConfigMapList metadata: resourceVersion: "47936"