(CommandList
  children: [
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:KUBELET_TOKEN)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (Pipeline
                        children: [
                          (SimpleCommand
                            words: [
                              {(dd)}
                              {(Lit_VarLike 'if=') (/dev/urandom)}
                              {(Lit_VarLike 'bs=') (128)}
                              {(Lit_VarLike 'count=') (1)}
                            ]
                            redirects: [
                              (Redir
                                op_id: Redir_Great
                                fd: 2
                                arg_word: {(/dev/null)}
                                spids: [61]
                              )
                            ]
                          )
                          (C {(base64)})
                          (C {(tr)} {(-d)} {(DQ ('=+/'))})
                          (SimpleCommand
                            words: [{(dd)} {(Lit_VarLike 'bs=') (32)} {(Lit_VarLike 'count=') (1)}]
                            redirects: [
                              (Redir
                                op_id: Redir_Great
                                fd: 2
                                arg_word: {(/dev/null)}
                                spids: [88]
                              )
                            ]
                          )
                        ]
                        negated: False
                      )
                    ]
                  )
                left_token: <Left_CommandSub '$('>
                spids: [49 90]
              )
            }
          spids: [48]
        )
      ]
      spids: [48]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:KUBE_PROXY_TOKEN)
          op: Equal
          rhs: 
            {
              (CommandSubPart
                command_list: 
                  (CommandList
                    children: [
                      (Pipeline
                        children: [
                          (SimpleCommand
                            words: [
                              {(dd)}
                              {(Lit_VarLike 'if=') (/dev/urandom)}
                              {(Lit_VarLike 'bs=') (128)}
                              {(Lit_VarLike 'count=') (1)}
                            ]
                            redirects: [
                              (Redir
                                op_id: Redir_Great
                                fd: 2
                                arg_word: {(/dev/null)}
                                spids: [105]
                              )
                            ]
                          )
                          (C {(base64)})
                          (C {(tr)} {(-d)} {(DQ ('=+/'))})
                          (SimpleCommand
                            words: [{(dd)} {(Lit_VarLike 'bs=') (32)} {(Lit_VarLike 'count=') (1)}]
                            redirects: [
                              (Redir
                                op_id: Redir_Great
                                fd: 2
                                arg_word: {(/dev/null)}
                                spids: [132]
                              )
                            ]
                          )
                        ]
                        negated: False
                      )
                    ]
                  )
                left_token: <Left_CommandSub '$('>
                spids: [93 134]
              )
            }
          spids: [92]
        )
      ]
      spids: [92]
    )
    (Assignment
      keyword: Assign_None
      pairs: [
        (assign_pair
          lhs: (LhsName name:known_tokens_file)
          op: Equal
          rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv))}
          spids: [136]
        )
      ]
      spids: [136]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (DBracket
                  expr: 
                    (LogicalNot
                      child: (BoolUnary op_id:BoolUnary_f child:{(DQ (${ VSub_Name known_tokens_file))})
                    )
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-apiserver)})
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:known_tokens_file)
                  op: Equal
                  rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv))}
                  spids: [169]
                )
              ]
              spids: [169]
            )
            (Subshell
              child: 
                (CommandList
                  children: [
                    (Sentence
                      child: 
                        (C {(umask)} {(Lit_VarLike 'u=') (rw) (Lit_Comma ',') (Lit_VarLike 'go=')})
                      terminator: <Op_Semi ';'>
                    )
                    (Sentence
                      child: 
                        (SimpleCommand
                          words: [{(echo)} {(DQ ($ VSub_Name '$KUBELET_TOKEN') (',kubelet,kubelet'))}]
                          redirects: [
                            (Redir
                              op_id: Redir_Great
                              fd: 16777215
                              arg_word: {($ VSub_Name '$known_tokens_file')}
                              spids: [193]
                            )
                          ]
                        )
                      terminator: <Op_Semi ';'>
                    )
                    (SimpleCommand
                      words: [
                        {(echo)}
                        {(DQ ($ VSub_Name '$KUBE_PROXY_TOKEN') (',kube_proxy,kube_proxy'))}
                      ]
                      redirects: [
                        (Redir
                          op_id: Redir_DGreat
                          fd: 16777215
                          arg_word: {($ VSub_Name '$known_tokens_file')}
                          spids: [206]
                        )
                      ]
                    )
                  ]
                )
              spids: [175 209]
            )
            (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kubelet)})
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:kubelet_auth_file)
                  op: Equal
                  rhs: {(DQ (/srv/salt-overlay/salt/kubelet/kubernetes_auth))}
                  spids: [220]
                )
              ]
              spids: [220]
            )
            (Subshell
              child: 
                (CommandList
                  children: [
                    (Sentence
                      child: 
                        (C {(umask)} {(Lit_VarLike 'u=') (rw) (Lit_Comma ',') (Lit_VarLike 'go=')})
                      terminator: <Op_Semi ';'>
                    )
                    (SimpleCommand
                      words: [
                        {(echo)}
                        {
                          (DQ ('{') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) (BearerToken) 
                            (EscapedLiteralPart
                              token: <Lit_EscapedChar '\\"'>
                            ) (': ') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) ($ VSub_Name '$KUBELET_TOKEN') 
                            (EscapedLiteralPart
                              token: <Lit_EscapedChar '\\"'>
                            ) (', ') (EscapedLiteralPart token:<Lit_EscapedChar '\\"'>) (Insecure) 
                            (EscapedLiteralPart
                              token: <Lit_EscapedChar '\\"'>
                            ) (': true }')
                          )
                        }
                      ]
                      redirects: [
                        (Redir
                          op_id: Redir_Great
                          fd: 16777215
                          arg_word: {($ VSub_Name '$kubelet_auth_file')}
                          spids: [254]
                        )
                      ]
                    )
                  ]
                )
              spids: [226 257]
            )
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:kubelet_kubeconfig_file)
                  op: Equal
                  rhs: {(DQ (/srv/salt-overlay/salt/kubelet/kubeconfig))}
                  spids: [260]
                )
              ]
              spids: [260]
            )
            (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kubelet)})
            (Subshell
              child: 
                (CommandList
                  children: [
                    (Sentence
                      child: (C {(umask)} {(077)})
                      terminator: <Op_Semi ';'>
                    )
                    (SimpleCommand
                      words: [{(cat)}]
                      redirects: [
                        (Redir
                          op_id: Redir_Great
                          fd: 16777215
                          arg_word: {(DQ (${ VSub_Name kubelet_kubeconfig_file))}
                          spids: [283]
                        )
                        (HereDoc
                          op_id: Redir_DLess
                          fd: 16777215
                          body: 
                            {
                              (DQ ('apiVersion: v1\n') ('kind: Config\n') ('clusters:\n') 
                                ('- cluster:\n') ('    server: https://') (${ VSub_Name KUBE_MASTER_IP) ('\n') ('    insecure-skip-tls-verify: true\n') 
                                ('  name: local\n') ('contexts:\n') ('- context:\n') ('    cluster: local\n') ('    user: kubelet\n') 
                                ('  name: service-account-context\n') ('current-context: service-account-context\n') ('users:\n') ('- name: kubelet\n') ('  user:\n') 
                                ('    token: ') (${ VSub_Name KUBELET_TOKEN) ('\n')
                              )
                            }
                          do_expansion: True
                          here_end: EOF
                          was_filled: True
                          spids: [291]
                        )
                      ]
                    )
                  ]
                )
              spids: [274 321]
            )
            (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-proxy)})
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:kube_proxy_kubeconfig_file)
                  op: Equal
                  rhs: {(DQ (/srv/salt-overlay/salt/kube-proxy/kubeconfig))}
                  spids: [333]
                )
              ]
              spids: [333]
            )
            (Subshell
              child: 
                (CommandList
                  children: [
                    (Sentence
                      child: (C {(umask)} {(077)})
                      terminator: <Op_Semi ';'>
                    )
                    (SimpleCommand
                      words: [{(cat)}]
                      redirects: [
                        (Redir
                          op_id: Redir_Great
                          fd: 16777215
                          arg_word: {(DQ (${ VSub_Name kube_proxy_kubeconfig_file))}
                          spids: [360]
                        )
                        (HereDoc
                          op_id: Redir_DLess
                          fd: 16777215
                          body: 
                            {
                              (DQ ('apiVersion: v1\n') ('kind: Config\n') ('clusters:\n') 
                                ('- cluster:\n') ('    insecure-skip-tls-verify: true\n') ('  name: local\n') ('contexts:\n') ('- context:\n') 
                                ('    cluster: local\n') ('    user: kube-proxy\n') ('  name: service-account-context\n') 
                                ('current-context: service-account-context\n') ('users:\n') ('- name: kube-proxy\n') ('  user:\n') ('    token: ') (${ VSub_Name KUBE_PROXY_TOKEN) ('\n')
                              )
                            }
                          do_expansion: True
                          here_end: EOF
                          was_filled: True
                          spids: [368]
                        )
                      ]
                    )
                  ]
                )
              spids: [351 393]
            )
            (Assignment
              keyword: Assign_None
              pairs: [
                (assign_pair
                  lhs: (LhsName name:service_accounts)
                  op: Equal
                  rhs: 
                    {
                      (ArrayLiteralPart
                        words: [
                          {(DQ ('system:scheduler'))}
                          {(DQ ('system:controller_manager'))}
                          {(DQ ('system:logging'))}
                          {(DQ ('system:monitoring'))}
                          {(DQ ('system:dns'))}
                        ]
                      )
                    }
                  spids: [417]
                )
              ]
              spids: [417]
            )
            (ForEach
              iter_name: account
              iter_words: [
                {
                  (DQ 
                    (BracedVarSub
                      token: <VSub_Name service_accounts>
                      bracket_op: (WholeArray op_id:Lit_At)
                      spids: [448 453]
                    )
                  )
                }
              ]
              do_arg_iter: False
              body: 
                (DoGroup
                  children: [
                    (Assignment
                      keyword: Assign_None
                      pairs: [
                        (assign_pair
                          lhs: (LhsName name:token)
                          op: Equal
                          rhs: 
                            {
                              (CommandSubPart
                                command_list: 
                                  (CommandList
                                    children: [
                                      (Pipeline
                                        children: [
                                          (SimpleCommand
                                            words: [
                                              {(dd)}
                                              {(Lit_VarLike 'if=') (/dev/urandom)}
                                              {(Lit_VarLike 'bs=') (128)}
                                              {(Lit_VarLike 'count=') (1)}
                                            ]
                                            redirects: [
                                              (Redir
                                                op_id: Redir_Great
                                                fd: 2
                                                arg_word: {(/dev/null)}
                                                spids: [473]
                                              )
                                            ]
                                          )
                                          (C {(base64)})
                                          (C {(tr)} {(-d)} {(DQ ('=+/'))})
                                          (SimpleCommand
                                            words: [
                                              {(dd)}
                                              {(Lit_VarLike 'bs=') (32)}
                                              {(Lit_VarLike 'count=') (1)}
                                            ]
                                            redirects: [
                                              (Redir
                                                op_id: Redir_Great
                                                fd: 2
                                                arg_word: {(/dev/null)}
                                                spids: [500]
                                              )
                                            ]
                                          )
                                        ]
                                        negated: False
                                      )
                                    ]
                                  )
                                left_token: <Left_CommandSub '$('>
                                spids: [461 502]
                              )
                            }
                          spids: [460]
                        )
                      ]
                      spids: [460]
                    )
                    (SimpleCommand
                      words: [
                        {(echo)}
                        {
                          (DQ (${ VSub_Name token) (',') (${ VSub_Name account) (',') 
                            (${ VSub_Name account)
                          )
                        }
                      ]
                      redirects: [
                        (Redir
                          op_id: Redir_DGreat
                          fd: 16777215
                          arg_word: {(DQ (${ VSub_Name known_tokens_file))}
                          spids: [521]
                        )
                      ]
                    )
                  ]
                  spids: [457 530]
                )
              spids: [446 455]
            )
          ]
          spids: [16777215 158]
        )
      ]
      spids: [16777215 532]
    )
    (Assignment
      keyword: Assign_Readonly
      pairs: [
        (assign_pair
          lhs: (LhsName name:BASIC_AUTH_FILE)
          op: Equal
          rhs: {(DQ (/srv/salt-overlay/salt/kube-apiserver/basic_auth.csv))}
          spids: [537]
        )
      ]
      spids: [535]
    )
    (If
      arms: [
        (if_arm
          cond: [
            (Sentence
              child: 
                (DBracket
                  expr: 
                    (LogicalNot
                      child: (BoolUnary op_id:BoolUnary_e child:{(DQ (${ VSub_Name BASIC_AUTH_FILE))})
                    )
                )
              terminator: <Op_Semi ';'>
            )
          ]
          action: [
            (C {(mkdir)} {(-p)} {(/srv/salt-overlay/salt/kube-apiserver)})
            (Subshell
              child: 
                (CommandList
                  children: [
                    (Sentence
                      child: (C {(umask)} {(077)})
                      terminator: <Op_Semi ';'>
                    )
                    (SimpleCommand
                      words: [
                        {(echo)}
                        {(DQ (${ VSub_Name KUBE_PASSWORD) (',') (${ VSub_Name KUBE_USER) (',admin'))}
                      ]
                      redirects: [
                        (Redir
                          op_id: Redir_Great
                          fd: 16777215
                          arg_word: {(DQ (${ VSub_Name BASIC_AUTH_FILE))}
                          spids: [589]
                        )
                      ]
                    )
                  ]
                )
              spids: [569 596]
            )
          ]
          spids: [16777215 559]
        )
      ]
      spids: [16777215 598]
    )
    (C {(mkdir)} {(-p)} {(/srv/salt-overlay/pillar)})
    (SimpleCommand
      words: [{(cat)}]
      redirects: [
        (HereDoc
          op_id: Redir_DLess
          fd: 16777215
          body: 
            {
              (DQ ("instance_prefix: '") 
                (CommandSubPart
                  command_list: 
                    (CommandList
                      children: [
                        (Pipeline
                          children: [
                            (C {(echo)} {(DQ ($ VSub_Name '$INSTANCE_PREFIX'))})
                            (C {(sed)} {(-e)} {(DQ ("s/'/''/g"))})
                          ]
                          negated: False
                        )
                      ]
                    )
                  left_token: <Left_CommandSub '$('>
                  spids: [627 643]
                ) ("'\n") ('node_instance_prefix: ') ($ VSub_Name '$NODE_INSTANCE_PREFIX') ('\n') 
                ('service_cluster_ip_range: ') ($ VSub_Name '$SERVICE_CLUSTER_IP_RANGE') ('\n') ('enable_cluster_monitoring: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name ENABLE_CLUSTER_MONITORING>
                  suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(none)})
                  spids: [653 657]
                ) (Right_DoubleQuote '"') ('\n') ('enable_cluster_logging: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name ENABLE_CLUSTER_LOGGING>
                  suffix_op: (Slice begin:(ArithVarRef name:false))
                  spids: [662 666]
                ) (Right_DoubleQuote '"') ('\n') ('enable_cluster_ui: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name ENABLE_CLUSTER_UI>
                  suffix_op: (Slice begin:(ArithVarRef name:true))
                  spids: [671 675]
                ) (Right_DoubleQuote '"') ('\n') ('enable_node_logging: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name ENABLE_NODE_LOGGING>
                  suffix_op: (Slice begin:(ArithVarRef name:false))
                  spids: [680 684]
                ) (Right_DoubleQuote '"') ('\n') ('logging_destination: ') ($ VSub_Name '$LOGGING_DESTINATION') ('\n') 
                ('elasticsearch_replicas: ') ($ VSub_Name '$ELASTICSEARCH_LOGGING_REPLICAS') ('\n') ('enable_cluster_dns: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name ENABLE_CLUSTER_DNS>
                  suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(false)})
                  spids: [695 699]
                ) (Right_DoubleQuote '"') ('\n') ('dns_server: ') ($ VSub_Name '$DNS_SERVER_IP') ('\n') ('dns_domain: ') 
                ($ VSub_Name '$DNS_DOMAIN') ('\n') ('e2e_storage_test_environment: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name E2E_STORAGE_TEST_ENVIRONMENT>
                  suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(false)})
                  spids: [710 714]
                ) (Right_DoubleQuote '"') ('\n') ('cluster_cidr: ') (Right_DoubleQuote '"') ($ VSub_Name '$NODE_IP_RANGES') 
                (Right_DoubleQuote '"') ('\n') ('allocate_node_cidrs: ') (Right_DoubleQuote '"') 
                (BracedVarSub
                  token: <VSub_Name ALLOCATE_NODE_CIDRS>
                  suffix_op: (StringUnary op_id:VTest_ColonHyphen arg_word:{(true)})
                  spids: [724 728]
                ) (Right_DoubleQuote '"') ('\n') 
                (
'admission_control: Initializers,NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,ResourceQuota\n'
                )
              )
            }
          do_expansion: True
          here_end: EOF
          was_filled: True
          spids: [620]
        )
        (Redir
          op_id: Redir_Great
          fd: 16777215
          arg_word: {(/srv/salt-overlay/pillar/cluster-params.sls)}
          spids: [623]
        )
      ]
    )
  ]
)