#!/bin/bash
##
## Script to provide commands to run on all worker nodes
##
. .worker_variables
echo "Setting up the Kubernetes repo:"
cat > /etc/yum.repos.d/kubernetes.repo << EOM
[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg
       https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
EOM

yum install -y conntrack-tools kubelet docker socat containernetworking-plugins
systemctl start docker && sudo systemctl enable docker

sed -i s/SELINUX=enforcing/SELINUX=permissive/g /etc/selinux/config
sudo setenforce 0

mkdir -p /etc/cni/net.d
cat > /etc/cni/net.d/10-bridge.conf << EOM
{
    "cniVersion": "0.3.1",
    "name": "bridge",
    "type": "bridge",
    "bridge": "cnio0",
    "isGateway": true,
    "ipMasq": true,
    "ipam": {
        "type": "host-local",
        "ranges": [
          [{"subnet": "$KUBE_POD_ADDR/$KUBE_NODE_POD_PREFIX"}]
        ],
        "routes": [{"dst": "0.0.0.0/0"}]
    }
}
EOM
cat > /etc/cni/net.d/99-loopback.conf << EOM
{
  "cniVersion": "0.3.1",
  "type": "loopback"
}
EOM

###########################
# Configuring the Kubelet #
###########################
curl https://storage.googleapis.com/kubernetes-release/release/vKUBE_VERSION/bin/linux/amd64/kubelet -o /usr/local/bin/kubelet
chmod 755 /usr/local/bin/kubelet

mkdir -p /etc/kubernetes
mkdir -p /var/lib/kubelet
mkdir -p /var/lib/kubernetes
cat > /etc/systemd/system/kubelet.service << EOM
[Unit]
Description=kubelet: The Kubernetes Node Agent
Documentation=http://kubernetes.io/docs/

[Service]
EnvironmentFile=-/etc/kubernetes/kubelet
ExecStart=/usr/local/bin/kubelet \$KUBELET_ARGS
Restart=always
StartLimitInterval=0
RestartSec=10

[Install]
WantedBy=multi-user.target
EOM

cat > /etc/kubernetes/kubelet << EOM
KUBELET_ARGS="--cni-bin-dir=/usr/libexec/cni --cgroup-driver=systemd --config=/var/lib/kubelet/kubelet-config.yaml --docker-endpoint=unix:///var/run/docker.sock --image-pull-progress-deadline=2m --kubeconfig=/var/lib/kubelet/kubeconfig --network-plugin=cni --v=2"
EOM

cat > /var/lib/kubelet/kubelet-config.yaml << EOM
kind: KubeletConfiguration
apiVersion: kubelet.config.k8s.io/v1beta1
authentication:
  anonymous:
    enabled: false
  webhook:
    enabled: true
  x509:
    clientCAFile: "/var/lib/kubernetes/ca.pem"
authorization:
  mode: Webhook
clusterDomain: "cluster.local"
clusterDNS:
  - "10.32.0.10"
podCIDR: "$KUBE_POD_ADDR/$KUBE_NODE_POD_PREFIX"
runtimeRequestTimeout: "15m"
tlsCertFile: "/var/lib/kubelet/${HOSTNAME}.pem"
tlsPrivateKeyFile: "/var/lib/kubelet/${HOSTNAME}-key.pem"
EOM

mv ${HOSTNAME}-key.pem ${HOSTNAME}.pem /var/lib/kubelet/
mv ${HOSTNAME}.kubeconfig /var/lib/kubelet/kubeconfig
mv ca.pem /var/lib/kubernetes/

systemctl daemon-reload
systemctl enable kubelet 
sudo systemctl start kubelet