--- apiVersion: v1 items: - apiVersion: v1 data: cnibincopy.sh: |- #!/bin/bash set -e function log() { echo "$(date --iso-8601=seconds) [cnibincopy] ${1}" } DESTINATION_DIRECTORY=/host/opt/cni/bin/ # Perform validation of usage if [ -z "$RHEL8_SOURCE_DIRECTORY" ] || [ -z "$RHEL9_SOURCE_DIRECTORY" ] || [ -z "$DEFAULT_SOURCE_DIRECTORY" ]; then log "FATAL ERROR: You must set env variables: RHEL8_SOURCE_DIRECTORY, RHEL9_SOURCE_DIRECTORY, DEFAULT_SOURCE_DIRECTORY" exit 1 fi if [ ! -d "$DESTINATION_DIRECTORY" ]; then log "FATAL ERROR: Destination directory ($DESTINATION_DIRECTORY) does not exist" exit 1 fi # Collect host OS information . /host/etc/os-release rhelmajor= # detect which version we're using in order to copy the proper binaries case "${ID}" in rhcos|scos) RHEL_VERSION=$(echo "${CPE_NAME}" | cut -f 5 -d :) rhelmajor=$(echo $RHEL_VERSION | sed -E 's/([0-9]+)\.{1}[0-9]+(\.[0-9]+)?/\1/') ;; rhel|centos) rhelmajor=$(echo "${VERSION_ID}" | cut -f 1 -d .) ;; fedora) if [ "${VARIANT_ID}" == "coreos" ]; then rhelmajor=8 else log "FATAL ERROR: Unsupported Fedora variant=${VARIANT_ID}" exit 1 fi ;; *) log "FATAL ERROR: Unsupported OS ID=${ID}"; exit 1 ;; esac # Set which directory we'll copy from, detect if it exists sourcedir= founddir=false case "${rhelmajor}" in 8) if [ -d "${RHEL8_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL8_SOURCE_DIRECTORY} founddir=true fi ;; 9) if [ -d "${RHEL9_SOURCE_DIRECTORY}" ]; then sourcedir=${RHEL9_SOURCE_DIRECTORY} founddir=true fi ;; *) log "ERROR: RHEL Major Version Unsupported, rhelmajor=${rhelmajor}" ;; esac # When it doesn't exist, fall back to the original directory. if [ "$founddir" == false ]; then log "Source directory unavailable for OS version: ${rhelmajor}" sourcedir=$DEFAULT_SOURCE_DIRECTORY fi # Use a subdirectory called "upgrade" so we can atomically move fully copied files. # We now use --remove-destination after running into an issue with -f not working over symlinks UPGRADE_DIRECTORY=${DESTINATION_DIRECTORY}upgrade_$(uuidgen) rm -Rf $UPGRADE_DIRECTORY mkdir -p $UPGRADE_DIRECTORY cp -r --remove-destination ${sourcedir}* $UPGRADE_DIRECTORY if [ $? -eq 0 ]; then log "Successfully copied files in ${sourcedir} to $UPGRADE_DIRECTORY" else log "Failed to copy files in ${sourcedir} to $UPGRADE_DIRECTORY" rm -Rf $UPGRADE_DIRECTORY exit 1 fi mv -f $UPGRADE_DIRECTORY/* ${DESTINATION_DIRECTORY}/ if [ $? -eq 0 ]; then log "Successfully moved files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" else log "Failed to move files in $UPGRADE_DIRECTORY to ${DESTINATION_DIRECTORY}" rm -Rf $UPGRADE_DIRECTORY exit 1 fi rm -Rf $UPGRADE_DIRECTORY kind: ConfigMap metadata: annotations: kubernetes.io/description: | This is a script used to copy CNI binaries based on host OS release.openshift.io/version: 4.18.29 creationTimestamp: "2025-12-05T10:36:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:cnibincopy.sh: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"9a4a964c-76a7-4ffe-9157-a7d58f1c9b32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-12-05T10:36:18Z" name: cni-copy-resources namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9a4a964c-76a7-4ffe-9157-a7d58f1c9b32 resourceVersion: "2834" uid: 48b72ac5-8260-4e7d-980d-d21f24713f2e - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.29 creationTimestamp: "2025-12-05T10:36:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:allowlist.conf: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} f:release.openshift.io/version: {} manager: network-operator operation: Update time: "2025-12-05T10:36:18Z" name: cni-sysctl-allowlist namespace: openshift-multus resourceVersion: "2830" uid: 5b3f71e6-6ecb-4424-a54c-2b1d1a7e3765 - apiVersion: v1 data: allowlist.conf: |- ^net.ipv4.conf.IFNAME.accept_redirects$ ^net.ipv4.conf.IFNAME.accept_source_route$ ^net.ipv4.conf.IFNAME.arp_accept$ ^net.ipv4.conf.IFNAME.arp_notify$ ^net.ipv4.conf.IFNAME.disable_policy$ ^net.ipv4.conf.IFNAME.secure_redirects$ ^net.ipv4.conf.IFNAME.send_redirects$ ^net.ipv6.conf.IFNAME.accept_ra$ ^net.ipv6.conf.IFNAME.accept_redirects$ ^net.ipv6.conf.IFNAME.accept_source_route$ ^net.ipv6.conf.IFNAME.arp_accept$ ^net.ipv6.conf.IFNAME.arp_notify$ ^net.ipv6.neigh.IFNAME.base_reachable_time_ms$ ^net.ipv6.neigh.IFNAME.retrans_time_ms$ kind: ConfigMap metadata: annotations: kubernetes.io/description: | Sysctl allowlist for nodes. release.openshift.io/version: 4.18.29 creationTimestamp: "2025-12-05T10:36:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:allowlist.conf: {} f:metadata: f:annotations: f:kubernetes.io/description: {} f:release.openshift.io/version: {} f:ownerReferences: k:{"uid":"9a4a964c-76a7-4ffe-9157-a7d58f1c9b32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-12-05T10:36:18Z" name: default-cni-sysctl-allowlist namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9a4a964c-76a7-4ffe-9157-a7d58f1c9b32 resourceVersion: "2829" uid: 7ee0e645-a2c8-42b7-90e9-c5b7b3b947fe - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDMjCCAhqgAwIBAgIIYSziu4tvE18wDQYJKoZIhvcNAQELBQAwNzESMBAGA1UE CxMJb3BlbnNoaWZ0MSEwHwYDVQQDExhrdWJlLWFwaXNlcnZlci1sYi1zaWduZXIw HhcNMjUxMjA1MTAyMDUwWhcNMzUxMjAzMTAyMDUwWjA3MRIwEAYDVQQLEwlvcGVu c2hpZnQxITAfBgNVBAMTGGt1YmUtYXBpc2VydmVyLWxiLXNpZ25lcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALUvztpa2f4clmSKX4Jj0qOv9uvj0qou VKnKKevdKrq9fOd3b65+K25G4lC4L1yxFV3OHbe8V8MAl35SUXtsplx9Egza0ZIQ 4wU9aeZ67c5I3DVFBqGwEmC7eoE8JGm1gbPWGJF0bOhdr15Gq92ZNHuLhFBs0rGt zXeR/poe6bzUAUlF0NPpf+Aof7QhKA0GrGwxoAQoGjxrNtYG3g+zfz9fBa444lEn iDkHyeM9Z439zzjl5oln0W3HPIH4GSgbAKGzuj+eDfFcFJRRgkiA7up97urpgjBl 3OO9uB0+x4RD79O5N5Vw7F8j3KHWrHyXwIr06ugY/UerWHuZdT2PElUCAwEAAaNC MEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHTJ nXhS9XKeQqnI39lKQL0c6lhKMA0GCSqGSIb3DQEBCwUAA4IBAQAcr7jRTVe0WWnw kjrPyIY4IPi7DUIhzD8S5sJenjxIT0kH1TPCbGL+iRxAx5KOeStqO26ay2lLMFhO h0WmryDRwGT/dCW8IE5ewIMkCVZ69CLF4JpAGn5Q8ksnPafMcnv0YjBnH+c5mD9e eHs8lCHTfPBfn6eEp9RtekfAXiO9/aJPPfszuNP3DF+e/jM8MRN5jqoOaXDse5HH Kd9Vo+vU/3kkyEAW7rklv04pQI8GlPVJdLkurPsBprebfFCXmmDut7Dx4XfnAJ13 UZ//FsPCPY/qBzTEH1spuXZlsy3GvoF9jyx961WGnL8j89ulKPtXVzSvq/6aA8hF 7PjDDW/S -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDQDCCAiigAwIBAgIINJ6n5AO7R+IwDQYJKoZIhvcNAQELBQAwPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMB4XDTI1MTIwNTEwMjA1MFoXDTM1MTIwMzEwMjA1MFowPjESMBAGA1UE CxMJb3BlbnNoaWZ0MSgwJgYDVQQDEx9rdWJlLWFwaXNlcnZlci1sb2NhbGhvc3Qt c2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIiK6KUGzchD FInAIc6W84BQi8cSwmLGk8OD9rueJ0MoppHAXOBO7VHSeM/xx2djZIhfHVJhvGNp 92S1quVj+ePmPdkWGdfQ/UpyV5PIfRzNWC2JFSPUsKHo2g6L9geL4d8aIGGyH4QL gLvUs7e+UH0OUwxb05msJnmKqzWtfx0XFXIZoCtREVi/Iim12YBBXmibSEYx8DGy tw0rza+UAFlOlK59ArgWcIlGgtnl69sY9wfc7ijBgkRteAuT2pWDYnbbA20/dUk+ P2jYi0gFOWl7vawOWVGGuHkYaUwdZzHulGgdThMi1pT2Sol2NpLysxamDuO8Nz+e GYgvp8M3kwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUO1bMAuZ12qojNwdOn1rSs0Jmt64wDQYJKoZIhvcNAQELBQAD ggEBAIag8R6umBLluK1VXt0jqLUbgEhiBOGoddHnjJ8f6+fPyaSX7yj50fCGhn7j nNVs7/SPacR/LZsjLKGQc4q2kp3rA7Yn9PiB/KMm6ztMG/ZkcpxB5Jj6Z7ErLWvO yFQ1TrXMcDzNGE45Zxu3bNN6pUCZTtfU6Gva/hjSDBIUV7a78Fzw8LtJsW9fz2P/ 4XUc6gVatcEj7WmHlg9drNoGJYhrPecwhGJyGVc6tcziSt7c3zjehLzg9S1vJ2iH 3KMO65ogWmR9gYhDdHpOuuQTMeg2iLSq4dobK5F56pZhR4aK5pOivayrrPuX8Kn3 xTv0VV3kEWtYoWsWj2KhE4P8Ay4= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDTDCCAjSgAwIBAgIIHgpG1E1MUxIwDQYJKoZIhvcNAQELBQAwRDESMBAGA1UE CxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2aWNlLW5l dHdvcmstc2lnbmVyMB4XDTI1MTIwNTEwMjA1MFoXDTM1MTIwMzEwMjA1MFowRDES MBAGA1UECxMJb3BlbnNoaWZ0MS4wLAYDVQQDEyVrdWJlLWFwaXNlcnZlci1zZXJ2 aWNlLW5ldHdvcmstc2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3odS6N4tmxw2vfsc6rEpQGGZKfWQSnBqyOA5jMzyHFRTGl71nqxnPgazDti S2Fk2TvMGUGbb6ThE0gZEzwl+o7dbMIRhZEbwvqGJ3vu+PfcjPPD5zfFLggcH30M OmgsGad0+4rCRGaN7riPTPghSVqRjKBpr/Oz2KlIWWxHkY6KH05qFTL1FRFcxRVv G3EKv3teHcdBNG8fyP9qwxSp1qbBg5zaOpgWM9dOaXQhlQfR66SxX9h24h8IIBVN M8tge7sYfGuTTM/7+9nm6O0zgec+ja985emmvbMV+poxDbuXeOoBB/00btunQAIj 65/OHn7JaewueGxB6DP9M6GSPwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAqQwDwYD VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQULWIKML2oxR5MZOFkOet6E2g2kegwDQYJ KoZIhvcNAQELBQADggEBAE1sTHJ7NHWZvKKaY8ipZzzPfF55xSfT8HrbeiecVCsh rmb1x401PzNhXyfvKasDBFvfXvQo75UYP6HEYqkq/+b5jEahwqc7H6SGuANgJAfe u30Eyfg5aCylICsm7ZpU1v1fZLfnDCSSOakj5Y13OYyhqIJO805sHUGOrJlsJJaV J0IfJnl1+xdZAKjTbBM/bSArZX3Y9Zav1ZnKY6J4TDMMK7VoDjS8/FNc9ctTCw4q VYWly6lfmgYGoPVUrtaGIQZaSVQ8ETGTI9HkR8gJDdQIbK71cHWoU53qBylmG2Oa Eysk0xWJn2ZhzMTfl9mlrzA7PLG2WtWarJoPaVyVh9c= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDlzCCAn+gAwIBAgIIINqHvIqixlMwDQYJKoZIhvcNAQELBQAwWTFXMFUGA1UE AwxOb3BlbnNoaWZ0LWt1YmUtYXBpc2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1y ZWNvdmVyeS1zZXJ2aW5nLXNpZ25lckAxNzY0OTMxMDUzMB4XDTI1MTIwNTEwMzcz MloXDTM1MTIwMzEwMzczM1owWTFXMFUGA1UEAwxOb3BlbnNoaWZ0LWt1YmUtYXBp c2VydmVyLW9wZXJhdG9yX2xvY2FsaG9zdC1yZWNvdmVyeS1zZXJ2aW5nLXNpZ25l ckAxNzY0OTMxMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/nd mTQ4NQvG5YE7dzWIcScmzQZ7ud8kZN0ye/ZA9xvRmDYPTO1qyfeZbmACO0Xy5Qf1 sUrWWCstUJ1t9tterKUTUmvebW+hqmzyjTs41SmgsGXN5mZCLeJW/NMaU3J8AEct mLn178VRcpOel2bkXU0ezOIcNLVHJhNO3/FeFVBJhrbWm3pqTz05Cf6p7FB2KQPC DqfXPXB3A5pqrUebuw+nAMDkqGwk6iJrbxMuaV9UU4AVStJC3aRdsPKijUPd+glx epiiOKATr3NSikF9EBJoBnae9LAH5XatDlnUNSbbLOWVLQpbGy911NSXLJkWNQiq /xiFARhbxg97digeawIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/ BAUwAwEB/zAdBgNVHQ4EFgQUx02U5KVBy4CEM5HPoXQlPuebHJ8wHwYDVR0jBBgw FoAUx02U5KVBy4CEM5HPoXQlPuebHJ8wDQYJKoZIhvcNAQELBQADggEBAEOHKrEf KTlx7F0psVTmtxp6oWRz5l0j4H56ymt9kGwzplkgW+JILNRUeUf+D9AGzN0h02V7 Ln+2valijhqGj/1GiUqKf/UtF2UWfj9DAp+xYwGafGOq5DH903mozweZX2qNkMI2 J4vSqWOojTVSCqNHeG+09aL7X+5EpBVCYlIv+41Qm0fPWe7LQ09v13PZWcK3XAJ2 P4CNuebbZyGm8tPX3v3OK/2saAf/egVYMV+poukBFS9rcnptu8pEJzABnnDccotc gi5Zj6dWij3D85uZUWDOnarlo7tHn2s0fp77Su8f0SoyzsE6TldSSIc2Uohx6U8f ibnh1GLAOSY7X/Q= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDZzCCAk+gAwIBAgIIEVjZmE8iR7MwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UE AwwbaW5ncmVzcy1vcGVyYXRvckAxNzY0OTMxMDc3MB4XDTI1MTIwNTEwMzc1N1oX DTI3MTIwNTEwMzc1OFowIzEhMB8GA1UEAwwYKi5hcHBzLnNuby5vcGVuc3RhY2su bGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bEDNxiTv5rm568I 8CmMZGYAgHVliOAk0d+EPrm0RAlo9WRHlOGZb+H8JoNzLDA54ZVjlx0vUwKoSDci A7NkO/ny9XFrf88WolKgDHtYBu+vJDLPs24qUSJUxK2w79aNV4SVo4ax21bfihPA MmCrcGTP2ZXQcRzqy2/BWssJ/xznm2XV0+gfmfz2Q0wMoKSWfS7cVzLb+vd+aaik Ltk+06SmZrSy4m4xGJtvXtBsunNhO36kpBOnn9XHi5UobMfj/hr9HDGZMwflvgGk jE33Ucv9vmPiH8tioVUOX1z5py8ljTQGauUxpw4crHCZMFnsBeZkbZldIz6bY7Lr sRNLiwIDAQABo4GbMIGYMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSG7IGE/Vg8/ztWDPfGrIwiP/m8 JDAfBgNVHSMEGDAWgBTlC8tMc0W9zl1Jy/XuFlC8L/e2ODAjBgNVHREEHDAaghgq LmFwcHMuc25vLm9wZW5zdGFjay5sYWIwDQYJKoZIhvcNAQELBQADggEBAICbTYDe b8HQtCnQeMhQULGA+jJGkcIDKpMT1dARAIewcTOIjoht/ElBaY84fiv3EfEX2wmT UlUXle3XV6UMVvnBXW8kM65R/x+myPI/Eyh5KOW7tVlgHh6Ke5Tn09bqdhHpp/qn B4euc7VNP5C0pRH/9adWi6nc6ceVAYtRLgCmrz6QhItcXf/wckV+u9V8A4x5nOaB UTD180yq9/FRvBNIAgQxeL0FDlUt5ozprx02Dq8wWyza4frqb1k2WHvur75WoLzC ypQwHAYkxDaeENvybvhPZgAqCleT7ArNy8Btg/M9CxgjbYALiyKRDxKxcqZ4xC7W NriXQElLzEn2tq8= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDDDCCAfSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBtpbmdy ZXNzLW9wZXJhdG9yQDE3NjQ5MzEwNzcwHhcNMjUxMjA1MTAzNzU3WhcNMjcxMjA1 MTAzNzU4WjAmMSQwIgYDVQQDDBtpbmdyZXNzLW9wZXJhdG9yQDE3NjQ5MzEwNzcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZqHKAZk9nqsIlIefr2EF 74kg2jrtcLm+47WAMorFuRmbrIefoKcFjYT/4cQ0R/Qq8X5EsBGhhnnqjzMwk+QJ +4EkLJPWzwv9nbtyBsW0OX85S0rII5yO6VR7MMTinwSHDBhbukKWebPvlXm7njtT tUqqswu2mT7KXXQhdyX2VYhHR/bxbkTdfR5EqtEuwVl5Pubq0aE1owYipk1DEgJ3 sCuh7QpElJwmPJUFbKONjjmCv4/7UR9scsYVoDq0GZoRUEcGXrOq/Tfg51hlkmds mw+op+BoNzNAV97PrtE9ZEvqjGST7hMxOnaJJCgQdEaFaBxyppD88I5GoqltPMJ7 AgMBAAGjRTBDMA4GA1UdDwEB/wQEAwICpDASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdDgQWBBTlC8tMc0W9zl1Jy/XuFlC8L/e2ODANBgkqhkiG9w0BAQsFAAOCAQEA KW5mAXbEDXejd5hiErkwL5HtNeQdlHKkYnFxCXCUdkWlHSBiQ+OID5GQypZoRHS1 f55TWJwOwO4G9UGn4fYdedXhDzR7YZJJGal3Sxd1U93JcIGB+Xvjv81pF3nfYeRM Xf5DvX0w1ap6tgoyJmm+SU2ly+9rHLB8jQq0RdPC+RVerxj1QLyjqTwJfTCNAZNL veu03efxc9GYvlpPu3R251qLgPEIF26fx0KSign2HUHOn4fmzJ5sypVk4RnI5LZS YO/ef1SqYQ7V3AamKlRrk0z5WaRL0Ar9jh9G2PCL1G04VmNhbXD3rJWimMgNdWQr mJv79e8viv/2w56hs9UIig== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2025-12-05T10:36:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2025-12-05T10:41:57Z" name: kube-root-ca.crt namespace: openshift-multus resourceVersion: "10295" uid: d3ec7441-19cd-4d90-9bb4-abefda16ba9d - apiVersion: v1 data: daemon-config.json: | { "cniVersion": "0.3.1", "chrootDir": "/hostroot", "logToStderr": true, "logLevel": "verbose", "binDir": "/var/lib/cni/bin", "perNodeCertificate": { "enabled": true, "bootstrapKubeconfig": "/var/lib/kubelet/kubeconfig", "certDir": "/etc/cni/multus/certs", "certDuration": "24h" }, "cniConfigDir": "/host/etc/cni/net.d", "multusConfigFile": "auto", "multusAutoconfigDir": "/host/run/multus/cni/net.d", "namespaceIsolation": true, "globalNamespaces": "default,openshift-multus,openshift-sriov-network-operator,openshift-cnv", "readinessindicatorfile": "/host/run/multus/cni/net.d/10-ovn-kubernetes.conf", "daemonSocketDir": "/run/multus/socket", "socketDir": "/host/run/multus/socket", "auxiliaryCNIChainName": "vendor-cni-chain" } kind: ConfigMap metadata: creationTimestamp: "2025-12-05T10:36:18Z" labels: app: multus tier: node managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:daemon-config.json: {} f:metadata: f:labels: f:app: {} f:tier: {} f:ownerReferences: k:{"uid":"9a4a964c-76a7-4ffe-9157-a7d58f1c9b32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-12-05T10:36:18Z" name: multus-daemon-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9a4a964c-76a7-4ffe-9157-a7d58f1c9b32 resourceVersion: "2836" uid: 80cec1ba-a7df-4603-8d50-85abf78ab141 - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIOlPvRPLJOzgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc2NDkzMTA1ODAe Fw0yNTEyMDUxMDM3MzhaFw0yODAyMDMxMDM3MzlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3NjQ5MzEwNTgwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0ZaAaZWegV7a/u417v+Nc4rmlRgQTM7z HxLazRgs9UkmwpeUDXuWCOT3243H57eZmDP97M3QrP9kUA5eTTlONoGdxN6bcsaZ iW5EDXJ2EqYl0lFixbpZZCuxb0HOUOlMV+Cc5GvPMxvqw2Aw5al6N+2i9fI4leF8 Ku56LcMgWVwFlPWviwehgTqYb1YsHkAqph4tbP6UYi4ceB4zKCLS/DjgSSfPhHLo qKC9sGAvXRJqb9q4b5QaI+O3rqfjT8zl3x2FYCg31ZDg/mALqQ90dJ3zxHHoT2Ay UG6+ekHybj7GDgIcqoEDPl0eAtl02it9ak25glYZ8o+vruKBFA3vAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHMDSJ 9VYBjcn3nNY+3qiicZjnJjAfBgNVHSMEGDAWgBTHMDSJ9VYBjcn3nNY+3qiicZjn JjANBgkqhkiG9w0BAQsFAAOCAQEAxkSm1hYPj4pKk3hq2mw0jJ+30sILN+lFfAQf zU/8f+02gcKi1xfoe1r0EwCGYJKfWi9zQXBIalWIlxxya+F9dsIf+fTWdcQv6m/l MNvjz4Igi03j8qBLJe1ri9wy3PNODzgbiV6GtKaLlhp3ngz5pvuB/RGPd9KlbulC FaUR/Nno8mNZGcmOABimwtuctxrvIEet3B2ujmY3SqhR52d2CUBXYFvqJO2jqTzI P46u2ElPiNtZ/1eUv4gMuw+zfjxjaHcld0ErmyUk6Di+0sdunEkYyX4ndNlDPPQl BbYAABarbJE+zoMmBhF1JOfuyzTQugsUTL90wPuDvsldJOxxQg== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2025-12-05T10:36:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2025-12-05T10:36:16Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2025-12-05T10:37:51Z" name: openshift-service-ca.crt namespace: openshift-multus resourceVersion: "5398" uid: e1123030-0544-42be-b171-434b817a0513 - apiVersion: v1 data: whereabouts.conf: | { "datastore": "kubernetes", "kubernetes": { "kubeconfig": "/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig" }, "reconciler_cron_expression": "30 4 * * *", "log_level": "debug", "log_file": "/tmp/whereabouts.log", "configuration_path": "/etc/kubernetes/cni/net.d/whereabouts.d" } kind: ConfigMap metadata: creationTimestamp: "2025-12-05T10:36:18Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:whereabouts.conf: {} f:metadata: f:ownerReferences: k:{"uid":"9a4a964c-76a7-4ffe-9157-a7d58f1c9b32"}: {} manager: cluster-network-operator/operconfig operation: Apply time: "2025-12-05T10:36:18Z" name: whereabouts-config namespace: openshift-multus ownerReferences: - apiVersion: operator.openshift.io/v1 blockOwnerDeletion: true controller: true kind: Network name: cluster uid: 9a4a964c-76a7-4ffe-9157-a7d58f1c9b32 resourceVersion: "2835" uid: 38f86867-5dad-40b5-aefa-1bb2bc238e26 kind: ConfigMapList metadata: resourceVersion: "51846"