4flannel.sh

#!/bin/bash

# 把master节点证书拷贝到node节点
# scp /opt/kubernetes/ssl/*.pem root@172.31.173.43:/opt/kubernetes/ssl/

#ETCD_IP=addr:172.17.0.38
/opt/kubernetes/bin/etcdctl \
--ca-file=/opt/kubernetes/ssl/ca.pem --cert-file=/opt/kubernetes/ssl/etcd.pem --key-file=/opt/kubernetes/ssl/etcd-key.pem \
--endpoints="https://ETCD_IP:2379" \
set /coreos.com/network/config  '{ "Network": "162.12.0.0/16", "Backend": {"Type": "vxlan"}}'

 wget https://github.com/coreos/flannel/releases/download/v0.10.0/flannel-v0.10.0-linux-amd64.tar.gz
 tar zxvf flannel-v0.10.0-linux-amd64.tar.gz
 mv flanneld mk-docker-opts.sh /opt/kubernetes/bin

cat >> /opt/kubernetes/cfg/flanneld << "EOF" 
FLANNEL_OPTIONS="--etcd-endpoints=https://ETCD_IP:2379 -etcd-cafile=/opt/kubernetes/ssl/ca.pem -etcd-certfile=/opt/kubernetes/ssl/etcd.pem -etcd-keyfile=/opt/kubernetes/ssl/etcd-key.pem"
EOF

mkdir  /usr/lib/systemd/system
cat >> /usr/lib/systemd/system/flanneld.service << "EOF" 
[Unit]
Description=Flanneld overlay address etcd agent
After=network-online.target network.target
Before=docker.service

[Service]
Type=notify
EnvironmentFile=/opt/kubernetes/cfg/flanneld
ExecStart=/opt/kubernetes/bin/flanneld --ip-masq $FLANNEL_OPTIONS
ExecStartPost=/opt/kubernetes/bin/mk-docker-opts.sh -k DOCKER_NETWORK_OPTIONS -d /run/flannel/subnet.env
Restart=on-failure

[Install]
WantedBy=multi-user.target
EOF

cat >> /usr/lib/systemd/system/docker.service  << "EOF" 
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target

[Service]
Type=notify
EnvironmentFile=/run/flannel/subnet.env
ExecStart=/usr/bin/dockerd $DOCKER_NETWORK_OPTIONS
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s

[Install]
WantedBy=multi-user.target
EOF

 systemctl daemon-reload
 systemctl start flanneld
 systemctl enable flanneld
 systemctl restart docker