#cloud-config
#Assume a 5 node cluster - 2 managers, three workers
coreos:
  etcd2:
    discovery: https://discovery.etcd.io/f70b79fa26fa9f8ab26e311574574efa
    advertise-client-urls: http://$private_ipv4:2379, http://$private_ipv4:4001
    initial-advertise-peer-urls: http://$private_ipv4:2380
    listen-client-urls: http://0.0.0.0:2379,http://0.0.0.0:4001
    listen-peer-urls: http://$private_ipv4:2380
  units:
    - name: etcd2.service
      command: start
    - name: fleet.service
      command: start
ssh_authorized_keys:
  - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUVSAaQuRlnd1rI0J3YwdRsEGPiDvbGvXBlX6c6nqtWKMY+/nN5uL7YuO40OJFLCJkRoeS5/iwmqp4g1pLdINUpCiSy+F3H0KeuPGUqJ09id+j5omST2mwFoVirxKffRZwD+xrlpIE/8FgOdAwnXgn/yUQ0vpqjfQjVEYxoxmLdmUNOftGgNwc7KBSyWn4ZQ3cey0PMnXc693wdroRJp434StxBFIaWtXa7MtX7oNKKtqM5bmn8qs0w5i9xzyrhr2bTobHfsorWeZhIjRW8Db0mmDlA0w1DqGt4bq40mBpk02pZoP4s4nFdJPKsG3gZ5smEsiBQvmplaVtRXK+Bo4H
  - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/OSIFE5cAvB9+xdoH5qbyKJ44paTiMHf/q+e/WaaSmM2dFds9YoT/5JPz+xpEJeu5h0UojOcV2iMnhljTQB8owznajTh1sz9TfRRK9o4j4J4wn5PEmCrnXdu2chbyUMSnNRaR7Nup0+ts56QPLXkzs9BUmUqPvAhEV8pmeX8N/MXNApmIqk777noe9v9hY/+R7OPZBpL5Lxk9c1+X0ADFbhpRADwCR7mSnZ5wIVJnkrdOp+LSvVrK92lWaZqfNdmTeQPPyUJYMyPsFJ4t1+hveU5NJ3lrYe2OiOdng7UVjlrGV78VozNXdQQrGV6kNCMI0o4l+8V97Ca0cHeqxeDkQ92+UgOw1kLfzRTDZLoiiYA9lzr5DPXQi5gWUFVV34uoacXZMYXTjEpcVMpdtXOh/3Xzfix0rHZLXK7kKwMRCriTWBJAgc4bhlD8Yc/Bsx0zfxUYqb3EdQvw6Bx7guakoqohmr7qDNp0MYlA/lSSmOCdiOiyj/RW7HmVpYh6GY1AqyrZehj4bhWjWVFJhu2n5JJWJTC7Yc9zL1Lv5HbBKaPS4AqC9lmItFZlRWFfOKFA0rT3fy3P9BuJpW7AYUlgdHIHhu1t71xOQuG/1w27vyOX92+IWR6WQ9qyxKWAX7PzOU5KamNsE9NjS+VYPrwI3zgl+IN/rC1HMTozypLXLw== kube-internal


write_files:
  - path: /etc/ssh/sshd_config
    permissions: 0600
    owner: root:root
    content: |
      # Use most defaults for sshd configuration.
      UsePrivilegeSeparation sandbox
      Subsystem sftp internal-sftp

      PermitRootLogin no
      AllowUsers core
      PasswordAuthentication no
      ChallengeResponseAuthentication no
      GatewayPorts yes