(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('MASTER_ADDRESS', {[VarSub 1 test_op=VS_TEST_COLON_HYPHEN {[DQ [LIT_CHARS 8.8.8.18]]}]})])
  (Com {[LIT_CHARS cat]}
    <
    (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "KUBE_LOGTOSTDERR="][RIGHT_D_QUOTE "\""][LIT_CHARS "--logtostderr=true"][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "KUBE_LOG_LEVEL="][RIGHT_D_QUOTE "\""][LIT_CHARS "--v=4"][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "KUBE_MASTER="][RIGHT_D_QUOTE "\""][LIT_CHARS "--master="][VarSub MASTER_ADDRESS][LIT_CHARS ":8080"][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "\n"][LIT_CHARS "# --root-ca-file="][RIGHT_D_QUOTE "\""][RIGHT_D_QUOTE "\""][LIT_CHARS ": If set, this root certificate authority will be included in\n"][LIT_CHARS "# service account's token secret. This must be a valid PEM-encoded CA bundle.\n"][LIT_CHARS "KUBE_CONTROLLER_MANAGER_ROOT_CA_FILE="][RIGHT_D_QUOTE "\""][LIT_CHARS "--root-ca-file=/srv/kubernetes/ca.crt"][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "\n"][LIT_CHARS "# --service-account-private-key-file="][RIGHT_D_QUOTE "\""][RIGHT_D_QUOTE "\""][LIT_CHARS ": Filename containing a PEM-encoded private\n"][LIT_CHARS "# RSA key used to sign service account tokens.\n"][LIT_CHARS "KUBE_CONTROLLER_MANAGER_SERVICE_ACCOUNT_PRIVATE_KEY_FILE="][RIGHT_D_QUOTE "\""][LIT_CHARS "--service-account-private-key-file=/srv/kubernetes/server.key"][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"]]} <REDIR_DLESS "<<"> 0),
    (FilenameRedirectNode filename={[LIT_CHARS /opt/kubernetes/cfg/kube-controller-manager]} <REDIR_GREAT ">"> 1),
    >
  )
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('KUBE_CONTROLLER_MANAGER_OPTS', {[DQ [LIT_CHARS "  "][\ LIT_ESCAPED_CHAR "\\$"][LIT_CHARS "{KUBE_LOGTOSTDERR} "][\ LIT_ESCAPED_CHAR "\\\\"][LIT_CHARS "\n"][LIT_CHARS "                                "][\ LIT_ESCAPED_CHAR "\\$"][LIT_CHARS "{KUBE_LOG_LEVEL}   "][\ LIT_ESCAPED_CHAR "\\\\"][LIT_CHARS "\n"][LIT_CHARS "                                "][\ LIT_ESCAPED_CHAR "\\$"][LIT_CHARS "{KUBE_MASTER}      "][\ LIT_ESCAPED_CHAR "\\\\"][LIT_CHARS "\n"][LIT_CHARS "                                "][\ LIT_ESCAPED_CHAR "\\$"][LIT_CHARS "{KUBE_CONTROLLER_MANAGER_ROOT_CA_FILE} "][\ LIT_ESCAPED_CHAR "\\\\"][LIT_CHARS "\n"][LIT_CHARS "                                "][\ LIT_ESCAPED_CHAR "\\$"][LIT_CHARS "{KUBE_CONTROLLER_MANAGER_SERVICE_ACCOUNT_PRIVATE_KEY_FILE}"]]})])
  (Com {[LIT_CHARS cat]}
    <
    (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "[Unit]\n"][LIT_CHARS "Description=Kubernetes Controller Manager\n"][LIT_CHARS "Documentation=https://github.com/kubernetes/kubernetes\n"][LIT_CHARS "\n"][LIT_CHARS "[Service]\n"][LIT_CHARS "EnvironmentFile=-/opt/kubernetes/cfg/kube-controller-manager\n"][LIT_CHARS "ExecStart=/opt/kubernetes/bin/kube-controller-manager "][VarSub KUBE_CONTROLLER_MANAGER_OPTS][LIT_CHARS "\n"][LIT_CHARS "Restart=on-failure\n"][LIT_CHARS "\n"][LIT_CHARS "[Install]\n"][LIT_CHARS "WantedBy=multi-user.target\n"]]} <REDIR_DLESS "<<"> 0),
    (FilenameRedirectNode filename={[LIT_CHARS /usr/lib/systemd/system/kube-controller-manager.service]} <REDIR_GREAT ">"> 1),
    >
  )
  (Com {[LIT_CHARS systemctl]} {[LIT_CHARS daemon-reload]}  )
  (Com {[LIT_CHARS systemctl]} {[LIT_CHARS enable]} {[LIT_CHARS kube-controller-manager]}  )
  (Com {[LIT_CHARS systemctl]} {[LIT_CHARS start]} {[LIT_CHARS kube-controller-manager]}  )
)