#!/bin/bash # Copyright 2014 The Kubernetes Authors. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. ETCD_SERVERS=${1:-"http://8.8.8.18:2379"} FLANNEL_NET=${2:-"172.16.0.0/16"} CA_FILE="/srv/kubernetes/etcd/ca.pem" CERT_FILE="/srv/kubernetes/etcd/client.pem" KEY_FILE="/srv/kubernetes/etcd/client-key.pem" cat </opt/kubernetes/cfg/flannel FLANNEL_ETCD="-etcd-endpoints=${ETCD_SERVERS}" FLANNEL_ETCD_KEY="-etcd-prefix=/coreos.com/network" FLANNEL_ETCD_CAFILE="--etcd-cafile=${CA_FILE}" FLANNEL_ETCD_CERTFILE="--etcd-certfile=${CERT_FILE}" FLANNEL_ETCD_KEYFILE="--etcd-keyfile=${KEY_FILE}" EOF cat </usr/lib/systemd/system/flannel.service [Unit] Description=Flanneld overlay address etcd agent After=network.target Before=docker.service [Service] EnvironmentFile=-/opt/kubernetes/cfg/flannel ExecStartPre=/opt/kubernetes/bin/remove-docker0.sh ExecStart=/opt/kubernetes/bin/flanneld --ip-masq \${FLANNEL_ETCD} \${FLANNEL_ETCD_KEY} \${FLANNEL_ETCD_CAFILE} \${FLANNEL_ETCD_CERTFILE} \${FLANNEL_ETCD_KEYFILE} ExecStartPost=/opt/kubernetes/bin/mk-docker-opts.sh -d /run/flannel/docker Type=notify [Install] WantedBy=multi-user.target RequiredBy=docker.service EOF # Store FLANNEL_NET to etcd. attempt=0 while true; do /opt/kubernetes/bin/etcdctl --ca-file ${CA_FILE} --cert-file ${CERT_FILE} --key-file ${KEY_FILE} \ --no-sync -C ${ETCD_SERVERS} \ get /coreos.com/network/config >/dev/null 2>&1 if [[ "$?" == 0 ]]; then break else if (( attempt > 600 )); then echo "timeout for waiting network config" > ~/kube/err.log exit 2 fi /opt/kubernetes/bin/etcdctl --ca-file ${CA_FILE} --cert-file ${CERT_FILE} --key-file ${KEY_FILE} \ --no-sync -C ${ETCD_SERVERS} \ mk /coreos.com/network/config "{\"Network\":\"${FLANNEL_NET}\"}" >/dev/null 2>&1 attempt=$((attempt+1)) sleep 3 fi done wait systemctl daemon-reload