code: func (o AggregatorOptions) RunAggregator(stopCh <-chan struct{}) error {
  	// TODO have a "real" external address
  	if err := o.RecommendedOptions.SecureServing.MaybeDefaultWithSelfSignedCerts("localhost", nil, nil); err != nil {
  		return fmt.Errorf("error creating self-signed certificates: %v", err)
  	}
  
  	serverConfig := genericapiserver.NewRecommendedConfig(aggregatorscheme.Codecs)
  
  	if err := o.RecommendedOptions.ApplyTo(serverConfig); err != nil {
  		return err
  	}
  	if err := o.APIEnablement.ApplyTo(&serverConfig.Config, apiserver.DefaultAPIResourceConfigSource(), aggregatorscheme.Scheme); err != nil {
  		return err
  	}
  	serverConfig.LongRunningFunc = filters.BasicLongRunningRequestCheck(
  		sets.NewString("watch", "proxy"),
  		sets.NewString("attach", "exec", "proxy", "log", "portforward"),
  	)
  
  	serviceResolver := apiserver.NewClusterIPServiceResolver(serverConfig.SharedInformerFactory.Core().V1().Services().Lister())
  
  	config := apiserver.Config{
  		GenericConfig: serverConfig,
  		ExtraConfig: apiserver.ExtraConfig{
  			ServiceResolver: serviceResolver,
  		},
  	}
  
  	var err error
  	config.ExtraConfig.ProxyClientCert, err = ioutil.ReadFile(o.ProxyClientCertFile)
  	if err != nil {
  		return err
  	}
  	config.ExtraConfig.ProxyClientKey, err = ioutil.ReadFile(o.ProxyClientKeyFile)
  	if err != nil {
  		return err
  	}
  
  	server, err := config.Complete().NewWithDelegate(genericapiserver.NewEmptyDelegate())
  	if err != nil {
  		return err
  	}
  	return server.GenericAPIServer.PrepareRun().Run(stopCh)
  }
docs: // RunAggregator runs the API Aggregator.