(List
  (Com {[LIT_CHARS set]} {[LIT_CHARS -o]} {[LIT_CHARS errexit]}  )
  (Com {[LIT_CHARS set]} {[LIT_CHARS -o]} {[LIT_CHARS nounset]}  )
  (Com {[LIT_CHARS set]} {[LIT_CHARS -o]} {[LIT_CHARS pipefail]}  )
  (FunctionDef create_token []
    (Com {[LIT_CHARS echo]} {[ComSub (Pipeline (Com {[LIT_CHARS cat]} {[LIT_CHARS /dev/urandom]}) (Com {[LIT_CHARS base64]}) (Com {[LIT_CHARS tr]} {[LIT_CHARS -d]} {[DQ [LIT_CHARS "=+/"]]}) (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 32] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) )]}    )
  )
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('EXTRA_SANS', {[VarSub 1]})])
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('DATA_DIR', {[LIT_CHARS /srv/kubernetes]})])
  (If
    (DBracket {B! {B1 UNARY_FILE_f {[VarSub DATA_DIR] [LIT_CHARS /ca.crt]}}})
    (List
      (Com {[LIT_CHARS groupadd]} {[LIT_CHARS -f]} {[LIT_CHARS -r]} {[LIT_CHARS kube-cert]}      )
      (Com {[LIT_CHARS /make-ca-cert.sh]} {[ComSub (Pipeline (Com {[LIT_CHARS hostname]} {[LIT_CHARS -I]}) (Com {[LIT_CHARS awk]} {[SQ <LIT_CHARS "{print $1}">]}) )]} {[VarSub EXTRA_SANS]}      )
      (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "Certificates created "][ComSub (Com {[LIT_CHARS date]})]]}      )
    )
    (ElseTrue)
    (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "Certificates already found, not recreating."]]}    )
  )
  (If
    (DBracket {B! {B1 UNARY_FILE_f {[VarSub DATA_DIR] [LIT_CHARS /basic_auth.csv]}}})
    (List
      (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "admin,admin,admin"]]}
        <
        (FilenameRedirectNode filename={[VarSub DATA_DIR] [LIT_CHARS /basic_auth.csv]} <REDIR_GREAT ">"> 1),
        >
      )
      (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "basic_auth.csv created "][ComSub (Com {[LIT_CHARS date]})]]}      )
    )
    (ElseTrue)
    (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "basic_auth.csv already found, not recreating."]]}    )
  )
  (If
    (DBracket {B! {B1 UNARY_FILE_f {[VarSub DATA_DIR] [LIT_CHARS /known_tokens.csv]}}})
    (List
      (Com {[LIT_CHARS echo]} {[DQ [ComSub (Com {[LIT_CHARS create_token]})][LIT_CHARS ",admin,admin"]]}
        <
        (FilenameRedirectNode filename={[VarSub DATA_DIR] [LIT_CHARS /known_tokens.csv]} <REDIR_DGREAT ">>"> 1),
        >
      )
      (Com {[LIT_CHARS echo]} {[DQ [ComSub (Com {[LIT_CHARS create_token]})][LIT_CHARS ",kubelet,kubelet"]]}
        <
        (FilenameRedirectNode filename={[VarSub DATA_DIR] [LIT_CHARS /known_tokens.csv]} <REDIR_DGREAT ">>"> 1),
        >
      )
      (Com {[LIT_CHARS echo]} {[DQ [ComSub (Com {[LIT_CHARS create_token]})][LIT_CHARS ",kube_proxy,kube_proxy"]]}
        <
        (FilenameRedirectNode filename={[VarSub DATA_DIR] [LIT_CHARS /known_tokens.csv]} <REDIR_DGREAT ">>"> 1),
        >
      )
      (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "known_tokens.csv created "][ComSub (Com {[LIT_CHARS date]})]]}      )
    )
    (ElseTrue)
    (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "known_tokens.csv already found, not recreating."]]}    )
  )
  (While
    (Com {[LIT_CHARS true]}    )
    (Com {[LIT_CHARS sleep]} {[LIT_CHARS 3600]}    )
  )
)