my-cloud-config

#cloud-config
ssh_authorized_keys:
 - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmG4qzyRHyCmkoQw6SucjpRodNg9zEp3Czo2JmNoAMEOO8zYsR+ajn8mMeGMCAfdxjhq4ozcGZjjDW1EU1le3+M6Ah8nqd3C65CmmfWmWu9d8ejwa/3HXSXdRKJj63ogqLago6fUkbPUdVtOI2SM69Fggj8sWVCvQctfoeR4sZ+4Z07bUC9QbjYNsT6Uq0kghilIcAdDctGWMemVevvZOKQFBxLFBVcdndQD0pNcra3lp821QnVJVZo/yswuv8hsm9sc2dj6t/QekZdWFOhdbGJSRGWYOG4eiBmJQxgkGxz+rImxNB5FdYcmukzK0QG/M36St6qfF0c2noWfEGDacF root@localhost

write_files:
 - path: /etc/systemd/system/fleet.socket.d/30-ListenStream.conf
   owner: root:root
   permissions: 0644
   content: |
     [Socket]
     ListenStream=0.0.0.0:49153

 - path: /run/systemd/system/etcd.service.d/30-certificates.conf
   permissions: 0644
   content: |
     [Service]
     # Client Env Vars
     Environment=ETCD_CA_FILE=/home/core/ca.crt
     Environment=ETCD_CERT_FILE=/home/core/key.crt
     Environment=ETCD_KEY_FILE=/home/core/key.key
     # Peer Env Vars
     Environment=ETCD_PEER_CA_FILE=/home/core/ca.crt
     Environment=ETCD_PEER_CERT_FILE=/home/core/key.crt
     Environment=ETCD_PEER_KEY_FILE=/home/core/key.key

 - path: /run/systemd/system/fleet.service.d/30-certificates.conf
   permissions: 0644
   content: |
     [Service]
     # Client auth certs
     Environment=FLEET_ETCD_CAFILE=/home/core/ca.crt
     Environment=FLEET_ETCD_CERTFILE=/home/core/key.crt
     Environment=FLEET_ETCD_KEYFILE=/home/core/key.key

 - path: /home/core/ca.crt
   permissions: 0644
   content: |
     -----BEGIN CERTIFICATE-----
     MIIFNDCCAx6gAwIBAgIBATALBgkqhkiG9w0BAQswLTEMMAoGA1UEBhMDVVNBMRAw
     DgYDVQQKEwdldGNkLWNhMQswCQYDVQQLEwJDQTAeFw0xNTA1MDQwNzE1MjdaFw0y
     NTA1MDQwNzE1NDJaMC0xDDAKBgNVBAYTA1VTQTEQMA4GA1UEChMHZXRjZC1jYTEL
     MAkGA1UECxMCQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCrY0Ky
     Bo25Crk59Thnj9Jl9MvC1Tlz+bF0rg+YzWJvYK2S2NSZSdwiq/BccF9SxcogW5Br
     +BdNs/cWhR+28cqeniF4sPvYNh4bd1RZRUcCjplPJzdJ8v8xXGkMRqVYTSIXnfCF
     +uY39HgcV82Qn9j5OOcIFiJyspgirZ9erIX3jgGDGhl7NGp9sYzOSM5Vu5IcmzHY
     iV3W+gqMSHiXUGBPLyktDGQAFq8CGBx0Iz6ovV+HGnAB1CbwrW8s///7GeJdYahj
     DAOIxPd4xf1hUHxF9ii6EUexkTGMouimsSQF4CG1XlZBl0JGdfB2z5jvwNQjcRbE
     Qoo1x0kq+eOMDssv1sR0sO8PxkK34BGqvuZuKQFisJoQZ7tOGyXr0YjWqe4etBqG
     jpAHolU1a+iLFaHDP0PUAG0hlfYtDI8Ts29N4p/4uKmnTmACOdMwDpnWpl8Q88bh
     yun62iTE354REU9MZpi+0tYMEBZq5dNadrzxOy+W29bLUdW/Jsd0XBkW/fbnJK9L
     V/5BMZK5TPfXlSbfi54W7aE/wBSCJwTfmQb5LaaR7Xx5VSa3jKGBekrWWqtKsngQ
     Z4NOiB3CJtVGa0aWppU1CtFfBUErZb2Igbq+wSjemHRZ99BF+S3trpxzIB+ZHQGo
     nodhgB8e6A0qCCW/mkAhKsoHatJ+O39fel74SwIDAQABo2MwYTAOBgNVHQ8BAf8E
     BAMCAAQwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU8GzlWmJFG9666ql+slb5
     jjh6TikwHwYDVR0jBBgwFoAU8GzlWmJFG9666ql+slb5jjh6TikwCwYJKoZIhvcN
     AQELA4ICAQAGst1o2RfgzAsdhlBn5em34q6zVvOYMfLeuIkvIAr1LHF9dv/EDQa+
     /bwRyEEirdBXAA9C8a/18tcbGAnih9t9axzjZqhbTnFT01rVO0DEvQlsUXNORDYk
     n4XLBIRdBNyh9lZHZ98Ma6uN/0Z2snamnMD5Y6tYMl9CUxNGzM7doJfRI2EWsX+V
     5TCHmWUipx2e0sFfDMEg4lJXvTaNaVvooAiUNg2HPh5hDXwN0Sa0pq1tu0tH2KLR
     gwSfqV8I+Tee8ZGB/IO/TUCnpS1qxBGHmGvvmyOPWkBWoKWq4X9NdrXN2yKo8b3a
     j4/r1hdqgSXYKXEwCPRGbeXJme7P7iRGLhdZG8URk3Jq0SPe/jUeWQGtTQ9Tad0x
     VGnwbr5rY8Dt5yKs1OMQ1sVhujv9PzA+PFXILM7oYaHaflszQG8PEZVJ19nnyDFJ
     31V4AkfcfPlzUZ3fxuixMVf/XKExkKbUfnPjRUfvvZq4t6RDahGpbpKzunVkMXLP
     NojFg+Y3DGDB4KnBaL8mz6hy/fgHz3qX7urM2upc7AhcUYixXzD4Ur9WC2Bj8cNW
     mpWEsOYu1EGc3iOY7e81QKCDP5ybR/WPo0Z4I4c4N3/lhvgGOl0MZeVXbXAI0EmI
     z0UEmuXC+MLBgTnII8PUEDuJqTdBupPnb0PKDnIl4R9YjTobsUGY3w==
     -----END CERTIFICATE-----
     -----BEGIN CERTIFICATE-----
     MIIFNDCCAx6gAwIBAgIBATALBgkqhkiG9w0BAQswLTEMMAoGA1UEBhMDVVNBMRAw
     DgYDVQQKEwdldGNkLWNhMQswCQYDVQQLEwJDQTAeFw0xNTA1MDQwNzE1MjdaFw0y
     NTA1MDQwNzE1NDJaMC0xDDAKBgNVBAYTA1VTQTEQMA4GA1UEChMHZXRjZC1jYTEL
     MAkGA1UECxMCQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCrY0Ky
     Bo25Crk59Thnj9Jl9MvC1Tlz+bF0rg+YzWJvYK2S2NSZSdwiq/BccF9SxcogW5Br
     +BdNs/cWhR+28cqeniF4sPvYNh4bd1RZRUcCjplPJzdJ8v8xXGkMRqVYTSIXnfCF
     +uY39HgcV82Qn9j5OOcIFiJyspgirZ9erIX3jgGDGhl7NGp9sYzOSM5Vu5IcmzHY
     iV3W+gqMSHiXUGBPLyktDGQAFq8CGBx0Iz6ovV+HGnAB1CbwrW8s///7GeJdYahj
     DAOIxPd4xf1hUHxF9ii6EUexkTGMouimsSQF4CG1XlZBl0JGdfB2z5jvwNQjcRbE
     Qoo1x0kq+eOMDssv1sR0sO8PxkK34BGqvuZuKQFisJoQZ7tOGyXr0YjWqe4etBqG
     jpAHolU1a+iLFaHDP0PUAG0hlfYtDI8Ts29N4p/4uKmnTmACOdMwDpnWpl8Q88bh
     yun62iTE354REU9MZpi+0tYMEBZq5dNadrzxOy+W29bLUdW/Jsd0XBkW/fbnJK9L
     V/5BMZK5TPfXlSbfi54W7aE/wBSCJwTfmQb5LaaR7Xx5VSa3jKGBekrWWqtKsngQ
     Z4NOiB3CJtVGa0aWppU1CtFfBUErZb2Igbq+wSjemHRZ99BF+S3trpxzIB+ZHQGo
     nodhgB8e6A0qCCW/mkAhKsoHatJ+O39fel74SwIDAQABo2MwYTAOBgNVHQ8BAf8E
     BAMCAAQwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU8GzlWmJFG9666ql+slb5
     jjh6TikwHwYDVR0jBBgwFoAU8GzlWmJFG9666ql+slb5jjh6TikwCwYJKoZIhvcN
     AQELA4ICAQAGst1o2RfgzAsdhlBn5em34q6zVvOYMfLeuIkvIAr1LHF9dv/EDQa+
     /bwRyEEirdBXAA9C8a/18tcbGAnih9t9axzjZqhbTnFT01rVO0DEvQlsUXNORDYk
     n4XLBIRdBNyh9lZHZ98Ma6uN/0Z2snamnMD5Y6tYMl9CUxNGzM7doJfRI2EWsX+V
     5TCHmWUipx2e0sFfDMEg4lJXvTaNaVvooAiUNg2HPh5hDXwN0Sa0pq1tu0tH2KLR
     gwSfqV8I+Tee8ZGB/IO/TUCnpS1qxBGHmGvvmyOPWkBWoKWq4X9NdrXN2yKo8b3a
     j4/r1hdqgSXYKXEwCPRGbeXJme7P7iRGLhdZG8URk3Jq0SPe/jUeWQGtTQ9Tad0x
     VGnwbr5rY8Dt5yKs1OMQ1sVhujv9PzA+PFXILM7oYaHaflszQG8PEZVJ19nnyDFJ
     31V4AkfcfPlzUZ3fxuixMVf/XKExkKbUfnPjRUfvvZq4t6RDahGpbpKzunVkMXLP
     NojFg+Y3DGDB4KnBaL8mz6hy/fgHz3qX7urM2upc7AhcUYixXzD4Ur9WC2Bj8cNW
     mpWEsOYu1EGc3iOY7e81QKCDP5ybR/WPo0Z4I4c4N3/lhvgGOl0MZeVXbXAI0EmI
     z0UEmuXC+MLBgTnII8PUEDuJqTdBupPnb0PKDnIl4R9YjTobsUGY3w==
     -----END CERTIFICATE-----

 - path: /home/core/key.crt
   permissions: 0644
   content: |
     -----BEGIN CERTIFICATE-----
     www.sansa1.com.crt
     MIIFaDCCA1KgAwIBAgIBAjALBgkqhkiG9w0BAQswLTEMMAoGA1UEBhMDVVNBMRAw
     DgYDVQQKEwdldGNkLWNhMQswCQYDVQQLEwJDQTAeFw0xNTA1MDQwNzE4MjBaFw0y
     NTA1MDQwNzE4MjNaMFIxDDAKBgNVBAYTA1VTQTEQMA4GA1UEChMHZXRjZC1jYTEX
     MBUGA1UECxMOd3d3LnNhbnNhMS5jb20xFzAVBgNVBAMTDjE5Mi4xNjguNTYuMTAy
     MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxLSVf7bo9mYeUdnhLkey
     j+LTpq7E9iCwgY2rgNH8MgEvUpqdlK1XNHJUJB4T5Uv9gCyJaWOI5xczP0ioEN2L
     xUQx0az4JQN3Op6Hzh6nE5Pye9JDTgHx3f0OKgYX0Ra2kEl0wDFhrFBhR2d8x5BJ
     1bTq/FpRuSLIOXCJFXmnXCTJqB0IDNSyiUkkUdjYHPMYrOTfPfHS2h8RS72TeVim
     B0pfVVOLa6rP3XLeXin3wvvsYmQWg+0tcIX8iTDP3LQjbXPkItn3TeDh1z5O7tpd
     vMlZjET6zLNBmjM9ATcMea/2UdTgiFGLm43oVPo+bZIKQyFY0lLu9PWqo0XHU0YB
     kaBAFEfnCeWisqp5ytsu0EbHV1hK3nrclKbEABQAC8gp7qBADTS6z+TgWBTAIx8O
     BXbNW8xGPko42e7L2rLgH5fE2+nsSaVWdwLxamV03l3BccmPo+JdABjtdurG8Iqa
     ClOHR7HJEfpBInQZh8k2t7svMoRfdV4PzIN4FMaFG6VwDhjQuFbY0OkawjXI8W78
     br3ef2IcYBTSvql/Y2E1uX3+sdk+63jXMzHZD8+VD9avnwaHsFeVmVQQMp7ET2Vy
     pMpfzqKmGvQB+H5xtG1bmPInKv9WyVbKH6KAVIEQowGU/gws571eh7w49f6E2oaD
     O3dp2YoU44yJ0/4+SMvFq68CAwEAAaNyMHAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
     CCsGAQUFBwMCMB0GA1UdDgQWBBQakjdYa/Lny4fGtu7lpgTrKiv2LzAfBgNVHSME
     GDAWgBTwbOVaYkUb3rrqqX6yVvmOOHpOKTAPBgNVHREECDAGhwTAqDhmMAsGCSqG
     SIb3DQEBCwOCAgEADCV485dMHqGlyRNUWLJs0StMzwA+lU0bbuKsMJ7pLfwwzfn+
     qkwAzSzGronrYX8pjFLJtVLtx07Z0EfrUdGLhl0FOOyfvyM1qsEwN8avNlclE93W
     0mWUsppzlKKejrpVIFFARXMLav5/7N1ufq8bKO2ZbRZiKyMaPLS821t0dE/gDEnO
     eny/I2nciMq+rcC+ckNegFSYDiE89VwbcIVVBMzr7Bz4weORr5vA5Jt3RZkkC4q0
     brIYJNFUibf7FZT2itSOdFnzuNDUdh1x9GapNa5qTPVB36pXTgPVa1WJGCquy/aP
     oR0EgAGWBQGpDAKJ8e7+zvgAoVYyxobgNRMzqUu0AWUBftefdgmeDUzXME4/IMN5
     JMwwq8T0i91sNXPaWAPCLQ1klR/Njz034tW7deBbEubkJsW12L8vEbf0Und7lDAv
     1VSVHjl//2xPkesXgBCtfp+KQEaBlIxxDBWYhy57nuhsWTINccAC4QzFUuWcIWSj
     FvqfMXIt0i7Ld3CPZlHkYZt0G2ycaqAPEjfi5V38rKy3ualkjJ+wo2QU96Tj+les
     tCR97Z8Om2Z0pt6pphEdaze6raqfA+DndC5copUL7w0NMkpgMSG2sFo7GRrIZENP
     /ODG2TOHFOqhoWEhuKH2jbBSHTCoBTqvDLzSsXRNSDlmyfvGOHOzlJQanwk=
          -----END CERTIFICATE-----

 - path: /home/core/key.key
   permissions: 0644
   content: |
     -----BEGIN RSA PRIVATE KEY-----
     MIIJKAIBAAKCAgEAxLSVf7bo9mYeUdnhLkeyj+LTpq7E9iCwgY2rgNH8MgEvUpqd
     lK1XNHJUJB4T5Uv9gCyJaWOI5xczP0ioEN2LxUQx0az4JQN3Op6Hzh6nE5Pye9JD
     TgHx3f0OKgYX0Ra2kEl0wDFhrFBhR2d8x5BJ1bTq/FpRuSLIOXCJFXmnXCTJqB0I
     DNSyiUkkUdjYHPMYrOTfPfHS2h8RS72TeVimB0pfVVOLa6rP3XLeXin3wvvsYmQW
     g+0tcIX8iTDP3LQjbXPkItn3TeDh1z5O7tpdvMlZjET6zLNBmjM9ATcMea/2UdTg
     iFGLm43oVPo+bZIKQyFY0lLu9PWqo0XHU0YBkaBAFEfnCeWisqp5ytsu0EbHV1hK
     3nrclKbEABQAC8gp7qBADTS6z+TgWBTAIx8OBXbNW8xGPko42e7L2rLgH5fE2+ns
     SaVWdwLxamV03l3BccmPo+JdABjtdurG8IqaClOHR7HJEfpBInQZh8k2t7svMoRf
     dV4PzIN4FMaFG6VwDhjQuFbY0OkawjXI8W78br3ef2IcYBTSvql/Y2E1uX3+sdk+
     63jXMzHZD8+VD9avnwaHsFeVmVQQMp7ET2VypMpfzqKmGvQB+H5xtG1bmPInKv9W
     yVbKH6KAVIEQowGU/gws571eh7w49f6E2oaDO3dp2YoU44yJ0/4+SMvFq68CAwEA
     AQKCAgBKVKcNnNPJkGsyqO+jqmo6Xw91tCMvksjAHAXL5w2y46m7QDv928bRRcav
     40HHawC/N5UxYvBvyt+NsWn4/Y78mzlsLz2R1w5t80wEQqcGCekeiyTtzGRWa3K3
     xJepZjjUqz1YBxEOqU0pS1zmmIqeHACUHZk2KYOZ2QGkQNVSR4CAa4AIQTO6Fw6H
     czavMdmIM/B8Gu5/iC/j/B5HQ41xwdPmjWxo4iIsX2TSFm/OmZ4IzCOJ9M0v8SGt
     wek6UEP2700tMkp2fl05Fg2DyraTSU7yZ3qSccZ/e48471FihnDBGX1DZfUoceZy
     fiGrC/2ewnIrADXWESNLEWox+IlMkbYIOs9SWHjzJ5W4eTkY/yaCIASRlYRUF17y
     IepSWtWIgDpSPfx0H+YEFGFqgvjOBsQHFhvwBIoED3j4PymXY3v51Dz2fe+rjlK2
     TaY20gA0G05vqhwYlnvCZSoey352enzDs4+/VJq9mobVx+i1plgBR4vxIr9RowZw
     rIUlidw4vAvaqo1V1uDi6BcGCQRWtDg/6/86sL1Va4DaN7mgm/QBzj3qqfi56uy6
     XPo/XZ5XPQwCS1nvQNAxGCTWx0rKDdHKfuuXzs3/qg7fsfgDP7a4HgOcU3NuvcbW
     DHwY2+wy47KOUXndqYA32vzxtcaBzDSsT63Y0dV8FZvFngIICQKCAQEA4AAbSLN1
     xoXKYytrIfbNRjyYl2+ULSCtdnPPQEDkBQYB6khoC78eHB8LYwywMtqRbEgRRLXV
     Iix5VWYHiCnyz9Y8tDnCLP8sR9Iqo8z0dmeR3nZeFWbNLOOYL4kjOcirVmiQV89T
     jPibJzAVd1e1pr88+aKB8AE7GUfpQh3lI3uTBghV8B5NrN35+MMOqWEAcFa6RTB+
     rYcA8QC9NGKpxC8NgNT+erhPLDUYnhAvJNIP0lvA051z9V4k5nXy76GfTL8CuQnz
     xotcD/X9zm5urJXUTFFqYzKoEI83WZpbP5xlOg/Jxon7DghbwWsXf2kWv5/Uozs6
     cMUWYpFdVbrzNQKCAQEA4M5GVLRwrXE95/e8zMqfHIpG8KtPKUaUi9FGrmzBRILb
     lae75hBBAytBfAvCriTI7I16zX6rvlm2vn9e9HwIce71tX96CGXp9vtaF4LW+WD8
     TIgBNTbsTYZZ+3X+yxqZj0ZTiEqyAiCinmp7deQehvTBGyqu6HRimsMAk7bhgUka
     4hv5RKBQb62SwQzPeNRB1kAPP6R0MQ518OmEhYomYP+EEfVgCUKWCsLUVEbR9JMC
     WxlN88DLZdV64yeDz/35Znl12Sb76ZTFI4XbTx28u0mpmIeVr6sq8ECRMiYvMkYD
     kuMS3JpcNKWLD8ONjnRsHqZB7cOgfZYEepEm3Fo70wKCAQBLXX3QjiDYNHeNujQH
     b2RNd2HXwcDXFiGGsxxOAAc38Xd/ffET0q+swn0wTDqUQZmgFvdIaO1W3CPOqc9q
     7sI1T12JPc2pGgmp+HpENlch52LauHSbOsVZjxHLHJbvgCa1oeS+xpDT42lAXBs8
     1hPWEI3RZ+3T9HYP4XQHvMs1jwQ+iVtwuKFlwiGyot4x+uMM6QEu+kwE0mFstNTz
     5SY9TZ97cy5T1+M7ennX5JYYC10rZ5ePG3DCY3SC3bhpC7XvOm0OGN0eNhE5hYhp
     hhpSku6k5temnIqTV7xFt3twAYzFZj57QD1p0UId54w2YAM5YetHKExXWNhZPZNr
     nsTpAoIBAQCD+VTcoVmM2PAo4A1chI9IJ/1hiJBegOrv8hn2iC4l1FSo1OHAPEaO
     X7R/6D+QEFRMWvp+7SBSDUT1LL1H9hDXIhvpQz8W8w2ZSxImv08I8+Dp5OYgoW+0
     S21D7I96GNGRhQ3A82jxSsttCMIWAafSPpmnIzWvjbPdeyE5lqFoTsyTdSyvFxZh
     mZqP7r9WBfXom47YI+l6ayzeE5kS9Hl3dEnKaSzKAucmxh30o+baF/vIE2Dp+oLt
     85fDBw2g606g1ClVJEe7ZvUc15ZaKfEEWkhQHTjI+kmo5Z7XvAb1EplCgEAwdgYv
     egfbZ0gRG1Pl4mDN/oyXbZyPf+s6bVa1AoIBACeG0QWCqZYbJrZoPoatR6RXLxYd
     MQqoJwtXe6C20GJChz3F0kWYyDEHRvufred8rVLV2JU2G5DwLLQ1aaAsiov96BIG
     mFJEloyx/VHDKEAk/0KtR6Y/3PKe4AVpUL9uff8I0uxcfNZkrdv205o8Icq4MMmf
     tNHuV6Re2tiEFXBgQWu73KuljhFhIwCJ2jj33nHIJlGqMq6nuWSaYP0BYx59HlLS
     PWSmllvfbkh+VMSDNoywHolWfavc/9rBBZdaTbvnLWwPMupQIRb+kRVDv/8DXuFe
     XhHWEyhxZSFqrE5NuU9MiUd8CdHKH9jPFCo9AITn5Q2Cgb1MwteYcy3W+ig=
     -----END RSA PRIVATE KEY-----

users:
   - name: core
     passwd:

coreos:
  etcd:
    name: www.sansa1.com
    # generate a new token for each unique cluster from https://discovery.etcd.io/new
    discovery: https://discovery.etcd.io/3837af24dc48c9b612159640cfedb5dd
    # multi-region and multi-cloud deployments need to use $public_ipv4
    addr: $public_ipv4:4001
    peer-addr: $private_ipv4:7001

  fleet:
      public-ip: $public_ipv4
      verbosity: 0

  flannel:
      etcd_prefix: /coreos.com/network2

  units:
    - name: flanneld.service
      drop-ins:
        - name: 50-network-config.conf
          content: |
            [Service]
            ExecStartPre=/usr/bin/etcdctl set /coreos.com/network/config '{ "Network": "10.1.0.0/16" }'
      command: start
    - name: etcd2.service
      command: start
    - name: fleet.service
      command: start

  update:
    reboot-strategy: etcd-lock