(CommandList children: [ (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:KUBELET_TOKEN) op: Equal rhs: { (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (SimpleCommand words: [ {(dd)} {(Lit_VarLike 'if=') (/dev/urandom)} {(Lit_VarLike 'bs=') (128)} {(Lit_VarLike 'count=') (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [61] ) ] ) (C {(base64)}) (C {(tr)} {(-d)} {(DQ ('=+/'))}) (SimpleCommand words: [{(dd)} {(Lit_VarLike 'bs=') (32)} {(Lit_VarLike 'count=') (1)}] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [88] ) ] ) ] negated: False ) ] ) left_token: <Left_CommandSub '$('> spids: [49 90] ) } spids: [48] ) ] spids: [48] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:KUBE_PROXY_TOKEN) op: Equal rhs: { (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (SimpleCommand words: [ {(dd)} {(Lit_VarLike 'if=') (/dev/urandom)} {(Lit_VarLike 'bs=') (128)} {(Lit_VarLike 'count=') (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [105] ) ] ) (C {(base64)}) (C {(tr)} {(-d)} {(DQ ('=+/'))}) (SimpleCommand words: [{(dd)} {(Lit_VarLike 'bs=') (32)} {(Lit_VarLike 'count=') (1)}] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [132] ) ] ) ] negated: False ) ] ) left_token: <Left_CommandSub '$('> spids: [93 134] ) } spids: [92] ) ] spids: [92] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:known_tokens_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv))} spids: [136] ) ] spids: [136] ) (If arms: [ (if_arm cond: [ (Sentence child: (DBracket expr: (LogicalNot child: (BoolUnary op_id:BoolUnary_f child:{(DQ (${ VSub_Name known_tokens_file))}) ) ) terminator: <Op_Semi ';'> ) ] action: [ (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-apiserver)}) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:known_tokens_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv))} spids: [169] ) ] spids: [169] ) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(Lit_VarLike 'u=') (rw) (Lit_Comma ',') (Lit_VarLike 'go=')}) terminator: <Op_Semi ';'> ) (Sentence child: (SimpleCommand words: [{(echo)} {(DQ ($ VSub_Name '$KUBELET_TOKEN') (',kubelet,kubelet'))}] redirects: [ (Redir op_id: Redir_Great fd: 16777215 arg_word: {($ VSub_Name '$known_tokens_file')} spids: [193] ) ] ) terminator: <Op_Semi ';'> ) (SimpleCommand words: [ {(echo)} {(DQ ($ VSub_Name '$KUBE_PROXY_TOKEN') (',kube_proxy,kube_proxy'))} ] redirects: [ (Redir op_id: Redir_DGreat fd: 16777215 arg_word: {($ VSub_Name '$known_tokens_file')} spids: [206] ) ] ) ] ) spids: [175 209] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kubelet)}) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:kubelet_auth_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kubelet/kubernetes_auth))} spids: [220] ) ] spids: [220] ) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(Lit_VarLike 'u=') (rw) (Lit_Comma ',') (Lit_VarLike 'go=')}) terminator: <Op_Semi ';'> ) (SimpleCommand words: [ {(echo)} { (DQ ('{') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) (BearerToken) (EscapedLiteralPart token: <Lit_EscapedChar '\\"'> ) (': ') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) ($ VSub_Name '$KUBELET_TOKEN') (EscapedLiteralPart token: <Lit_EscapedChar '\\"'> ) (', ') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) (Insecure) (EscapedLiteralPart token: <Lit_EscapedChar '\\"'> ) (': true }') ) } ] redirects: [ (Redir op_id: Redir_Great fd: 16777215 arg_word: {($ VSub_Name '$kubelet_auth_file')} spids: [254] ) ] ) ] ) spids: [226 257] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:kubelet_kubeconfig_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kubelet/kubeconfig))} spids: [260] ) ] spids: [260] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kubelet)}) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(077)}) terminator: <Op_Semi ';'> ) (SimpleCommand words: [{(cat)}] redirects: [ (Redir op_id: Redir_Great fd: 16777215 arg_word: {(DQ (${ VSub_Name kubelet_kubeconfig_file))} spids: [283] ) (HereDoc op_id: Redir_DLess fd: 16777215 body: { (DQ ('apiVersion: v1\n') ('kind: Config\n') ('clusters:\n') ('- cluster:\n') (' server: https://') (${ VSub_Name KUBE_MASTER_IP) ('\n') (' insecure-skip-tls-verify: true\n') (' name: local\n') ('contexts:\n') ('- context:\n') (' cluster: local\n') (' user: kubelet\n') (' name: service-account-context\n') ('current-context: service-account-context\n') ('users:\n') ('- name: kubelet\n') (' user:\n') (' token: ') (${ VSub_Name KUBELET_TOKEN) ('\n') ) } do_expansion: True here_end: EOF was_filled: True spids: [291] ) ] ) ] ) spids: [274 321] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-proxy)}) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:kube_proxy_kubeconfig_file) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-proxy/kubeconfig))} spids: [333] ) ] spids: [333] ) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(077)}) terminator: <Op_Semi ';'> ) (SimpleCommand words: [{(cat)}] redirects: [ (Redir op_id: Redir_Great fd: 16777215 arg_word: {(DQ (${ VSub_Name kube_proxy_kubeconfig_file))} spids: [360] ) (HereDoc op_id: Redir_DLess fd: 16777215 body: { (DQ ('apiVersion: v1\n') ('kind: Config\n') ('clusters:\n') ('- cluster:\n') (' insecure-skip-tls-verify: true\n') (' name: local\n') ('contexts:\n') ('- context:\n') (' cluster: local\n') (' user: kube-proxy\n') (' name: service-account-context\n') ('current-context: service-account-context\n') ('users:\n') ('- name: kube-proxy\n') (' user:\n') (' token: ') (${ VSub_Name KUBE_PROXY_TOKEN) ('\n') ) } do_expansion: True here_end: EOF was_filled: True spids: [368] ) ] ) ] ) spids: [351 393] ) (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:service_accounts) op: Equal rhs: { (ArrayLiteralPart words: [ {(DQ ('system:scheduler'))} {(DQ ('system:controller_manager'))} {(DQ ('system:logging'))} {(DQ ('system:monitoring'))} {(DQ ('system:dns'))} ] ) } spids: [417] ) ] spids: [417] ) (ForEach iter_name: account iter_words: [ { (DQ (BracedVarSub token: <VSub_Name service_accounts> bracket_op: (WholeArray op_id:Lit_At) spids: [448 453] ) ) } ] do_arg_iter: False body: (DoGroup children: [ (Assignment keyword: Assign_None pairs: [ (assign_pair lhs: (LhsName name:token) op: Equal rhs: { (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (SimpleCommand words: [ {(dd)} {(Lit_VarLike 'if=') (/dev/urandom)} {(Lit_VarLike 'bs=') (128)} {(Lit_VarLike 'count=') (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [473] ) ] ) (C {(base64)}) (C {(tr)} {(-d)} {(DQ ('=+/'))}) (SimpleCommand words: [ {(dd)} {(Lit_VarLike 'bs=') (32)} {(Lit_VarLike 'count=') (1)} ] redirects: [ (Redir op_id: Redir_Great fd: 2 arg_word: {(/dev/null)} spids: [500] ) ] ) ] negated: False ) ] ) left_token: <Left_CommandSub '$('> spids: [461 502] ) } spids: [460] ) ] spids: [460] ) (SimpleCommand words: [ {(echo)} { (DQ (${ VSub_Name token) (',') (${ VSub_Name account) (',') (${ VSub_Name account) ) } ] redirects: [ (Redir op_id: Redir_DGreat fd: 16777215 arg_word: {(DQ (${ VSub_Name known_tokens_file))} spids: [521] ) ] ) ] spids: [457 530] ) spids: [446 455] ) ] spids: [16777215 158] ) ] spids: [16777215 532] ) (Assignment keyword: Assign_Readonly pairs: [ (assign_pair lhs: (LhsName name:BASIC_AUTH_FILE) op: Equal rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/basic_auth.csv))} spids: [537] ) ] spids: [535] ) (If arms: [ (if_arm cond: [ (Sentence child: (DBracket expr: (LogicalNot child: (BoolUnary op_id:BoolUnary_e child:{(DQ (${ VSub_Name BASIC_AUTH_FILE))}) ) ) terminator: <Op_Semi ';'> ) ] action: [ (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-apiserver)}) (Subshell child: (CommandList children: [ (Sentence child: (C {(umask)} {(077)}) terminator: <Op_Semi ';'> ) (SimpleCommand words: [ {(echo)} {(DQ (${ VSub_Name KUBE_PASSWORD) (',') (${ VSub_Name KUBE_USER) (',admin'))} ] redirects: [ (Redir op_id: Redir_Great fd: 16777215 arg_word: {(DQ (${ VSub_Name BASIC_AUTH_FILE))} spids: [589] ) ] ) ] ) spids: [569 596] ) ] spids: [16777215 559] ) ] spids: [16777215 598] ) (C {(mkdir)} {(-p)} {(/srv/salt-overlay/pillar)}) (SimpleCommand words: [{(cat)}] redirects: [ (HereDoc op_id: Redir_DLess fd: 16777215 body: { (DQ ("instance_prefix: '") (CommandSubPart command_list: (CommandList children: [ (Pipeline children: [ (C {(echo)} {(DQ ($ VSub_Name '$INSTANCE_PREFIX'))}) (C {(sed)} {(-e)} {(DQ ("s/'/''/g"))}) ] negated: False ) ] ) left_token: <Left_CommandSub '$('> spids: [627 643] ) ("'\n") ('node_instance_prefix: ') ($ VSub_Name '$NODE_INSTANCE_PREFIX') ('\n') ('service_cluster_ip_range: ') ($ VSub_Name '$SERVICE_CLUSTER_IP_RANGE') ('\n') ('enable_cluster_monitoring: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_MONITORING> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(none)}) spids: [653 657] ) (Right_DoubleQuote '"') ('\n') ('enable_cluster_logging: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_LOGGING> suffix_op: (Slice begin:(ArithVarRef name:false)) spids: [662 666] ) (Right_DoubleQuote '"') ('\n') ('enable_cluster_ui: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_UI> suffix_op: (Slice begin:(ArithVarRef name:true)) spids: [671 675] ) (Right_DoubleQuote '"') ('\n') ('enable_node_logging: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name ENABLE_NODE_LOGGING> suffix_op: (Slice begin:(ArithVarRef name:false)) spids: [680 684] ) (Right_DoubleQuote '"') ('\n') ('logging_destination: ') ($ VSub_Name '$LOGGING_DESTINATION') ('\n') ('elasticsearch_replicas: ') ($ VSub_Name '$ELASTICSEARCH_LOGGING_REPLICAS') ('\n') ('enable_cluster_dns: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name ENABLE_CLUSTER_DNS> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(false)}) spids: [695 699] ) (Right_DoubleQuote '"') ('\n') ('dns_server: ') ($ VSub_Name '$DNS_SERVER_IP') ('\n') ('dns_domain: ') ($ VSub_Name '$DNS_DOMAIN') ('\n') ('e2e_storage_test_environment: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name E2E_STORAGE_TEST_ENVIRONMENT> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(false)}) spids: [710 714] ) (Right_DoubleQuote '"') ('\n') ('cluster_cidr: ') (Right_DoubleQuote '"') ($ VSub_Name '$NODE_IP_RANGES') (Right_DoubleQuote '"') ('\n') ('allocate_node_cidrs: ') (Right_DoubleQuote '"') (BracedVarSub token: <VSub_Name ALLOCATE_NODE_CIDRS> suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(true)}) spids: [724 728] ) (Right_DoubleQuote '"') ('\n') ( 'admission_control: Initializers,NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,ResourceQuota\n' ) ) } do_expansion: True here_end: EOF was_filled: True spids: [620] ) (Redir op_id: Redir_Great fd: 16777215 arg_word: {(/srv/salt-overlay/pillar/cluster-params.sls)} spids: [623] ) ] ) ] )