(CommandList children: [ (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:KUBELET_TOKEN) op: Equal rhs: { (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (SimpleCommand words: [ {(dd)} {(Lit_VarLike "if=") (/dev/urandom)} {(Lit_VarLike "bs=") (128)} {(Lit_VarLike "count=") (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [61] ) ] ) (C {(base64)}) (C {(tr)} {(-d)} {(DQ ("=+/"))}) (SimpleCommand words: [{(dd)} {(Lit_VarLike "bs=") (32)} {(Lit_VarLike "count=") (1)}] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [88] ) ] ) ] negated: False ) ] ) left_token: <Left_CommandSub "$("> spids: [49 90] ) } spids: [48] ) ] spids: [48] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:KUBE_PROXY_TOKEN) op: Equal rhs: { (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (SimpleCommand words: [ {(dd)} {(Lit_VarLike "if=") (/dev/urandom)} {(Lit_VarLike "bs=") (128)} {(Lit_VarLike "count=") (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [105] ) ] ) (C {(base64)}) (C {(tr)} {(-d)} {(DQ ("=+/"))}) (SimpleCommand words: [{(dd)} {(Lit_VarLike "bs=") (32)} {(Lit_VarLike "count=") (1)}] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [132] ) ] ) ] negated: False ) ] ) left_token: <Left_CommandSub "$("> spids: [93 134] ) } spids: [92] ) ] spids: [92] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:known_tokens_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv))} spids: [136] ) ] spids: [136] ) (If arms: [ (if_arm cond: [ (Sentence child: (DBracket expr: (LogicalNot child: (BoolUnary op_id:BoolUnary_f child:{(DQ (${ VSub_Name known_tokens_file))}) ) ) terminator: <Op_Semi ";"> ) ] action: [ (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-apiserver)}) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:known_tokens_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv))} spids: [169] ) ] spids: [169] ) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(Lit_VarLike "u=") (rw) (Lit_Comma ",") (Lit_VarLike "go=")}) terminator: <Op_Semi ";"> ) (Sentence child: (SimpleCommand words: [{(echo)} {(DQ ($ VSub_Name "$KUBELET_TOKEN") (",kubelet,kubelet"))}] redirects: [ (Redir op_id: Redir_Great fd: -1 arg_word: {($ VSub_Name "$known_tokens_file")} spids: [193] ) ] ) terminator: <Op_Semi ";"> ) (SimpleCommand words: [ {(echo)} {(DQ ($ VSub_Name "$KUBE_PROXY_TOKEN") (",kube_proxy,kube_proxy"))} ] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {($ VSub_Name "$known_tokens_file")} spids: [206] ) ] ) ] ) spids: [175 209] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kubelet)}) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:kubelet_auth_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kubelet/kubernetes_auth))} spids: [220] ) ] spids: [220] ) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(Lit_VarLike "u=") (rw) (Lit_Comma ",") (Lit_VarLike "go=")}) terminator: <Op_Semi ";"> ) (SimpleCommand words: [ {(echo)} { (DQ ("{") (EscapedLiteralPart token:<Lit_EscapedChar "\\\"">) (BearerToken) (EscapedLiteralPart token: <Lit_EscapedChar "\\\""> ) (": ") (EscapedLiteralPart token:<Lit_EscapedChar "\\\"">) ($ VSub_Name "$KUBELET_TOKEN") (EscapedLiteralPart token: <Lit_EscapedChar "\\\""> ) (", ") (EscapedLiteralPart token:<Lit_EscapedChar "\\\"">) (Insecure) (EscapedLiteralPart token: <Lit_EscapedChar "\\\""> ) (": true }") ) } ] redirects: [ (Redir op_id: Redir_Great fd: -1 arg_word: {($ VSub_Name "$kubelet_auth_file")} spids: [254] ) ] ) ] ) spids: [226 257] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:kubelet_kubeconfig_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kubelet/kubeconfig))} spids: [260] ) ] spids: [260] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kubelet)}) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(077)}) terminator: <Op_Semi ";"> ) (SimpleCommand words: [{(cat)}] redirects: [ (Redir op_id: Redir_Great fd: -1 arg_word: {(DQ (${ VSub_Name kubelet_kubeconfig_file))} spids: [283] ) (HereDoc op_id: Redir_DLess fd: -1 body: { (DQ ("apiVersion: v1\n") ("kind: Config\n") ("clusters:\n") ("- cluster:\n") (" server: https://") (${ VSub_Name KUBE_MASTER_IP) ("\n") (" insecure-skip-tls-verify: true\n") (" name: local\n") ("contexts:\n") ("- context:\n") (" cluster: local\n") (" user: kubelet\n") (" name: service-account-context\n") ("current-context: service-account-context\n") ("users:\n") ("- name: kubelet\n") (" user:\n") (" token: ") (${ VSub_Name KUBELET_TOKEN) ("\n") ) } do_expansion: True here_end: EOF was_filled: True spids: [291] ) ] ) ] ) spids: [274 320] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-proxy)}) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:kube_proxy_kubeconfig_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-proxy/kubeconfig))} spids: [332] ) ] spids: [332] ) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(077)}) terminator: <Op_Semi ";"> ) (SimpleCommand words: [{(cat)}] redirects: [ (Redir op_id: Redir_Great fd: -1 arg_word: {(DQ (${ VSub_Name kube_proxy_kubeconfig_file))} spids: [359] ) (HereDoc op_id: Redir_DLess fd: -1 body: { (DQ ("apiVersion: v1\n") ("kind: Config\n") ("clusters:\n") ("- cluster:\n") (" insecure-skip-tls-verify: true\n") (" name: local\n") ("contexts:\n") ("- context:\n") (" cluster: local\n") (" user: kube-proxy\n") (" name: service-account-context\n") ("current-context: service-account-context\n") ("users:\n") ("- name: kube-proxy\n") (" user:\n") (" token: ") (${ VSub_Name KUBE_PROXY_TOKEN) ("\n") ) } do_expansion: True here_end: EOF was_filled: True spids: [367] ) ] ) ] ) spids: [350 391] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:service_accounts) op: Equal rhs: { (ArrayLiteralPart words: [ {(DQ ("system:scheduler"))} {(DQ ("system:controller_manager"))} {(DQ ("system:logging"))} {(DQ ("system:monitoring"))} {(DQ ("system:dns"))} ] ) } spids: [415] ) ] spids: [415] ) (ForEach iter_name: account iter_words: [ { (DQ (BracedVarSub token: <VSub_Name service_accounts> bracket_op: (WholeArray op_id:Lit_At) spids: [446 451] ) ) } ] do_arg_iter: False body: (DoGroup children: [ (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:token) op: Equal rhs: { (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (SimpleCommand words: [ {(dd)} {(Lit_VarLike "if=") (/dev/urandom)} {(Lit_VarLike "bs=") (128)} {(Lit_VarLike "count=") (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [471] ) ] ) (C {(base64)}) (C {(tr)} {(-d)} {(DQ ("=+/"))}) (SimpleCommand words: [ {(dd)} {(Lit_VarLike "bs=") (32)} {(Lit_VarLike "count=") (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [498] ) ] ) ] negated: False ) ] ) left_token: <Left_CommandSub "$("> spids: [459 500] ) } spids: [458] ) ] spids: [458] ) (SimpleCommand words: [ {(echo)} { (DQ (${ VSub_Name token) (",") (${ VSub_Name account) (",") (${ VSub_Name account) ) } ] redirects: [ (Redir op_id: Redir_DGreat fd: -1 arg_word: {(DQ (${ VSub_Name known_tokens_file))} spids: [519] ) ] ) ] spids: [455 528] ) spids: [444 453] ) ] spids: [-1 158] ) ] spids: [-1 530] ) (Assignment keyword: Assign_Readonly pairs: [ (assign_pair lhs: (LhsName name:BASIC_AUTH_FILE) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/basic_auth.csv))} spids: [535] ) ] spids: [533] ) (If arms: [ (if_arm cond: [ (Sentence child: (DBracket expr: (LogicalNot child: (BoolUnary op_id:BoolUnary_e child:{(DQ (${ VSub_Name BASIC_AUTH_FILE))}) ) ) terminator: <Op_Semi ";"> ) ] action: [ (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-apiserver)}) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(077)}) terminator: <Op_Semi ";"> ) (SimpleCommand words: [ {(echo)} {(DQ (${ VSub_Name KUBE_PASSWORD) (",") (${ VSub_Name KUBE_USER) (",admin"))} ] redirects: [ (Redir op_id: Redir_Great fd: -1 arg_word: {(DQ (${ VSub_Name BASIC_AUTH_FILE))} spids: [587] ) ] ) ] ) spids: [567 594] ) ] spids: [-1 557] ) ] spids: [-1 596] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/pillar)}) (SimpleCommand words: [{(cat)}] redirects: [ (HereDoc op_id: Redir_DLess fd: -1 body: { (DQ ("instance_prefix: '") (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (C {(echo)} {(DQ ($ VSub_Name "$INSTANCE_PREFIX"))}) (C {(sed)} {(-e)} {(DQ ("s/'/''/g"))}) ] negated: False ) ] ) left_token: <Left_CommandSub "$("> spids: [625 641] ) ("'\n") ("node_instance_prefix: ") ($ VSub_Name "$NODE_INSTANCE_PREFIX") ("\n") ("service_cluster_ip_range: ") ($ VSub_Name "$SERVICE_CLUSTER_IP_RANGE") ("\n") ("enable_cluster_monitoring: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_MONITORING> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(none)}) spids: [651 655] ) (Right_DoubleQuote "\"") ("\n") ("enable_cluster_logging: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_LOGGING> suffix_op: (Slice begin:(ArithVarRef name:false)) spids: [660 664] ) (Right_DoubleQuote "\"") ("\n") ("enable_cluster_ui: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_UI> suffix_op: (Slice begin:(ArithVarRef name:true)) spids: [669 673] ) (Right_DoubleQuote "\"") ("\n") ("enable_node_logging: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name ENABLE_NODE_LOGGING> suffix_op: (Slice begin:(ArithVarRef name:false)) spids: [678 682] ) (Right_DoubleQuote "\"") ("\n") ("logging_destination: ") ($ VSub_Name "$LOGGING_DESTINATION") ("\n") ("elasticsearch_replicas: ") ($ VSub_Name "$ELASTICSEARCH_LOGGING_REPLICAS") ("\n") ("enable_cluster_dns: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_DNS> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(false)}) spids: [693 697] ) (Right_DoubleQuote "\"") ("\n") ("dns_server: ") ($ VSub_Name "$DNS_SERVER_IP") ("\n") ("dns_domain: ") ($ VSub_Name "$DNS_DOMAIN") ("\n") ("e2e_storage_test_environment: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name E2E_STORAGE_TEST_ENVIRONMENT> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(false)}) spids: [708 712] ) (Right_DoubleQuote "\"") ("\n") ("cluster_cidr: ") (Right_DoubleQuote "\"") ($ VSub_Name "$NODE_IP_RANGES") (Right_DoubleQuote "\"") ("\n") ("allocate_node_cidrs: ") (Right_DoubleQuote "\"") (BracedVarSub token: <VSub_Name ALLOCATE_NODE_CIDRS> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(true)}) spids: [722 726] ) (Right_DoubleQuote "\"") ("\n") ( "admission_control: Initializers,NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,ResourceQuota\n" ) ) } do_expansion: True here_end: EOF was_filled: True spids: [618] ) (Redir op_id: Redir_Great fd: -1 arg_word: {(/srv/salt-overlay/pillar/cluster-params.sls)} spids: [621] ) ] ) ] )