Skip to content

Commit 8dfbe8c

Browse files
committed
fix(user-data): use $private_ipv4 for etcd/fleet
All etcd/fleet communication should be private, so have etcd/fleet only listen on private IPs. Remote fleetctl still works, as it uses an SSH tunnel. There's really no reason to ever use $public_ipv4.
1 parent 9502968 commit 8dfbe8c

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

contrib/coreos/user-data

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ coreos:
55
# generate a new token for each unique cluster from https://discovery.etcd.io/new
66
# uncomment the following line and replace it with your discovery URL
77
# discovery: https://discovery.etcd.io/12345693838asdfasfadf13939923
8-
addr: $public_ipv4:4001
8+
addr: $private_ipv4:4001
99
peer-addr: $private_ipv4:7001
1010
units:
1111
- name: docker.service
@@ -44,7 +44,7 @@ coreos:
4444
Description=fleet
4545

4646
[Service]
47-
Environment=FLEET_PUBLIC_IP=$public_ipv4
47+
Environment=FLEET_PUBLIC_IP=$private_ipv4
4848
ExecStart=/usr/bin/fleet
4949
- name: stop-reboot-manager.service
5050
command: start
@@ -56,7 +56,7 @@ coreos:
5656
Type=oneshot
5757
ExecStart=/usr/bin/systemctl stop update-engine-reboot-manager.service
5858
ExecStartPost=/usr/bin/systemctl mask update-engine-reboot-manager.service
59-
- name: stop-reboot-manager.service
59+
- name: stop-update-engine.service
6060
command: start
6161
content: |
6262
[Unit]

0 commit comments

Comments
 (0)