How to setup HA for official CoreOS + Kubernetes Step By Step guide?

[brant4test]

Hi, Team,
I'm build 3 master + 3 slave coreos k8s following guide here on AWS https://coreos.com/kubernetes/docs/latest/deploy-master.html#set-up-the-kube-apiserver-pod
I notices this line.
"
High-availability is achieved by repeating these instructions for each master node. Each of the master components is safe to run on multiple nodes.
"
But to create a aws elb with health check on "HTTP:8080/healthz", I need to change livenessProbe to be on host: 0.0.0.0, but failed.
Because the port 8080 is still on 127.0.0.1 ($ netstat -anp|grep 8080)
livenessProbe:
      httpGet:
        host: 0.0.0.0
        port: 8080
        path: /healthz
So that my aws elb is always: 0 of 3 instances in service

What have I missed here? and what's your recommended way to set up aws elb for master nodes in the official "CoreOS + Kubernetes Step By Step"? Can you elaborate on it's corresponding HA guide? Thanks!

FYI,
$ curl  http://127.0.0.1:8080/healthz
ok

vi /etc/kubernetes/manifests/kube-apiserver.yaml
--------------------------------------
apiVersion: v1
kind: Pod
metadata:
  name: kube-apiserver
  namespace: kube-system
spec:
  hostNetwork: true
  containers:
  - name: kube-apiserver
    image: quay.io/coreos/hyperkube:v1.6.4_coreos.0
    command:
    - /hyperkube
    - apiserver
    - --bind-address=0.0.0.0
    - --etcd-servers=http://10.3.0.11:2379,http://10.3.0.12:2379,http://10.3.0.13:2379
    - --allow-privileged=true
    - --service-cluster-ip-range=10.3.0.0/24
    - --secure-port=443
    - --advertise-address=10.3.0.11
    - --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota
    - --tls-cert-file=/etc/kubernetes/ssl/apiserver.pem
    - --tls-private-key-file=/etc/kubernetes/ssl/apiserver-key.pem
    - --client-ca-file=/etc/kubernetes/ssl/ca.pem
    - --service-account-key-file=/etc/kubernetes/ssl/apiserver-key.pem
    - --runtime-config=extensions/v1beta1/networkpolicies=true
    - --anonymous-auth=false
    livenessProbe:
      httpGet:
        host: 0.0.0.0
        port: 8080
        path: /healthz
      initialDelaySeconds: 15
      timeoutSeconds: 15
    ports:
    - containerPort: 443
      hostPort: 443
      name: https
    - containerPort: 8080
      hostPort: 8080
      name: local
    volumeMounts:
    - mountPath: /etc/kubernetes/ssl
      name: ssl-certs-kubernetes
      readOnly: true
    - mountPath: /etc/ssl/certs
      name: ssl-certs-host
      readOnly: true
  volumes:
  - hostPath:
      path: /etc/kubernetes/ssl
    name: ssl-certs-kubernetes
  - hostPath:
      path: /usr/share/ca-certificates
    name: ssl-certs-host