anchor.diff:      # legacy ports can be omitted if your application doesn't depend on them
       listen-client-urls: http://0.0.0.0:2379,http://0.0.0.0:4001
       listen-peer-urls: http://$private_ipv4:2380,http://$private_ipv4:7001
  -  fleet:
  -    public-ip: $public_ipv4
  -  flannel:
  -    interface: $public_ipv4
     units:
     - name: etcd2.service
       command: start
  
positive.code: 
        [Install]
        WantedBy=sockets.target
  write_files:
    - path: /etc/ssh/sshd_config
      permissions: "0600"
  
negative.code: coreos:
    update:
      group: beta
      reboot-strategy: off
    etcd2:
      #generate a new token for each unique cluster from https://discovery.etcd.io/new
      #discovery: https://discovery.etcd.io/<token>
  