flannel: add restart policy