(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('KUBELET_TOKEN', {[ComSub (Pipeline (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "if="] [LIT_CHARS /dev/urandom] =} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 128] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) (Com {[LIT_CHARS base64]}) (Com {[LIT_CHARS tr]} {[LIT_CHARS -d]} {[DQ [LIT_CHARS "=+/"]]}) (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 32] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) )]})])
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('KUBE_PROXY_TOKEN', {[ComSub (Pipeline (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "if="] [LIT_CHARS /dev/urandom] =} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 128] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) (Com {[LIT_CHARS base64]}) (Com {[LIT_CHARS tr]} {[LIT_CHARS -d]} {[DQ [LIT_CHARS "=+/"]]}) (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 32] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) )]})])
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('known_tokens_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-apiserver/known_tokens.csv]]})])
  (If
    (DBracket {B! {B1 UNARY_FILE_f {[DQ [VarSub known_tokens_file]]}}})
    (List
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kube-apiserver]}      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('known_tokens_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-apiserver/known_tokens.csv]]})])
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_VAR_LIKE "u="] [LIT_CHARS rw] [LIT_COMMA ","] [LIT_VAR_LIKE "go="] =}          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub KUBELET_TOKEN][LIT_CHARS ",kubelet,kubelet"]]}
            <
            (FilenameRedirectNode filename={[VarSub known_tokens_file]} <REDIR_GREAT ">"> 1),
            >
          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub KUBE_PROXY_TOKEN][LIT_CHARS ",kube_proxy,kube_proxy"]]}
            <
            (FilenameRedirectNode filename={[VarSub known_tokens_file]} <REDIR_DGREAT ">>"> 1),
            >
          )
        )
      )
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kubelet]}      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('kubelet_auth_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kubelet/kubernetes_auth]]})])
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_VAR_LIKE "u="] [LIT_CHARS rw] [LIT_COMMA ","] [LIT_VAR_LIKE "go="] =}          )
          (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "{"][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS BearerToken][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS ": "][\ LIT_ESCAPED_CHAR "\\\""][VarSub KUBELET_TOKEN][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS ", "][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS Insecure][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS ": true }"]]}
            <
            (FilenameRedirectNode filename={[VarSub kubelet_auth_file]} <REDIR_GREAT ">"> 1),
            >
          )
        )
      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('kubelet_kubeconfig_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kubelet/kubeconfig]]})])
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kubelet]}      )
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_CHARS 077]}          )
          (Com {[LIT_CHARS cat]}
            <
            (FilenameRedirectNode filename={[DQ [VarSub kubelet_kubeconfig_file]]} <REDIR_GREAT ">"> 1),
            (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "apiVersion: v1\n"][LIT_CHARS "kind: Config\n"][LIT_CHARS "clusters:\n"][LIT_CHARS "- cluster:\n"][LIT_CHARS "    insecure-skip-tls-verify: true\n"][LIT_CHARS "  name: local\n"][LIT_CHARS "contexts:\n"][LIT_CHARS "- context:\n"][LIT_CHARS "    cluster: local\n"][LIT_CHARS "    user: kubelet\n"][LIT_CHARS "  name: service-account-context\n"][LIT_CHARS "current-context: service-account-context\n"][LIT_CHARS "users:\n"][LIT_CHARS "- name: kubelet\n"][LIT_CHARS "  user:\n"][LIT_CHARS "    token: "][VarSub KUBELET_TOKEN][LIT_CHARS "\n"]]} <REDIR_DLESS "<<"> 0),
            >
          )
        )
      )
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kube-proxy]}      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('kube_proxy_kubeconfig_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-proxy/kubeconfig]]})])
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_CHARS 077]}          )
          (Com {[LIT_CHARS cat]}
            <
            (FilenameRedirectNode filename={[DQ [VarSub kube_proxy_kubeconfig_file]]} <REDIR_GREAT ">"> 1),
            (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "apiVersion: v1\n"][LIT_CHARS "kind: Config\n"][LIT_CHARS "clusters:\n"][LIT_CHARS "- cluster:\n"][LIT_CHARS "    insecure-skip-tls-verify: true\n"][LIT_CHARS "  name: local\n"][LIT_CHARS "contexts:\n"][LIT_CHARS "- context:\n"][LIT_CHARS "    cluster: local\n"][LIT_CHARS "    user: kube-proxy\n"][LIT_CHARS "  name: service-account-context\n"][LIT_CHARS "current-context: service-account-context\n"][LIT_CHARS "users:\n"][LIT_CHARS "- name: kube-proxy\n"][LIT_CHARS "  user:\n"][LIT_CHARS "    token: "][VarSub KUBE_PROXY_TOKEN][LIT_CHARS "\n"]]} <REDIR_DLESS "<<"> 0),
            >
          )
        )
      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('service_accounts', {[Array {[DQ [LIT_CHARS "system:scheduler"]]} {[DQ [LIT_CHARS "system:controller_manager"]]} {[DQ [LIT_CHARS "system:logging"]]} {[DQ [LIT_CHARS "system:monitoring"]]} {[DQ [LIT_CHARS "system:dns"]]}]})])
      (For account [{[DQ [VarSub service_accounts bracket_op=(Index {A Atom NODE_ARITH_WORD {AS_OP_AT "@"}})]]}])
        (List
          (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('token', {[ComSub (Pipeline (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "if="] [LIT_CHARS /dev/urandom] =} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 128] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) (Com {[LIT_CHARS base64]}) (Com {[LIT_CHARS tr]} {[LIT_CHARS -d]} {[DQ [LIT_CHARS "=+/"]]}) (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 32] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) )]})])
          (Com {[LIT_CHARS echo]} {[DQ [VarSub token][LIT_CHARS ","][VarSub account][LIT_CHARS ","][VarSub account]]}
            <
            (FilenameRedirectNode filename={[DQ [VarSub known_tokens_file]]} <REDIR_DGREAT ">>"> 1),
            >
          )
        )
      )
    )
  )
  (= scope=<EAssignScope.GLOBAL 1> flags=2 words=[] bindings=[('BASIC_AUTH_FILE', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-apiserver/basic_auth.csv]]})])
  (If
    (DBracket {B! {B1 UNARY_FILE_e {[DQ [VarSub BASIC_AUTH_FILE]]}}})
    (List
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kube-apiserver]}      )
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_CHARS 077]}          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub KUBE_PASSWORD][LIT_CHARS ","][VarSub KUBE_USER][LIT_CHARS ",admin"]]}
            <
            (FilenameRedirectNode filename={[DQ [VarSub BASIC_AUTH_FILE]]} <REDIR_GREAT ">"> 1),
            >
          )
        )
      )
    )
  )
  (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/pillar]}  )
  (Com {[LIT_CHARS cat]}
    <
    (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "instance_prefix: '"][ComSub (Pipeline (Com {[LIT_CHARS echo]} {[DQ [VarSub INSTANCE_PREFIX]]}) (Com {[LIT_CHARS sed]} {[LIT_CHARS -e]} {[DQ [LIT_CHARS "s/'/''/g"]]}) )][LIT_CHARS "'\n"][LIT_CHARS "node_instance_prefix: "][VarSub NODE_INSTANCE_PREFIX][LIT_CHARS "\n"][LIT_CHARS "service_cluster_ip_range: "][VarSub SERVICE_CLUSTER_IP_RANGE][LIT_CHARS "\n"][LIT_CHARS "enable_cluster_monitoring: "][RIGHT_D_QUOTE "\""][VarSub ENABLE_CLUSTER_MONITORING test_op=VS_TEST_COLON_HYPHEN {[LIT_CHARS none]}][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "enable_cluster_logging: "][RIGHT_D_QUOTE "\""][VarSub ENABLE_CLUSTER_LOGGING transform_ops=[Slice {A Atom NODE_ARITH_WORD {[VarSub false]}} None]][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "enable_cluster_ui: "][RIGHT_D_QUOTE "\""][VarSub ENABLE_CLUSTER_UI transform_ops=[Slice {A Atom NODE_ARITH_WORD {[VarSub true]}} None]][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "enable_node_logging: "][RIGHT_D_QUOTE "\""][VarSub ENABLE_NODE_LOGGING transform_ops=[Slice {A Atom NODE_ARITH_WORD {[VarSub false]}} None]][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "logging_destination: "][VarSub LOGGING_DESTINATION][LIT_CHARS "\n"][LIT_CHARS "elasticsearch_replicas: "][VarSub ELASTICSEARCH_LOGGING_REPLICAS][LIT_CHARS "\n"][LIT_CHARS "enable_cluster_dns: "][RIGHT_D_QUOTE "\""][VarSub ENABLE_CLUSTER_DNS test_op=VS_TEST_COLON_HYPHEN {[LIT_CHARS false]}][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "dns_replicas: "][VarSub DNS_REPLICAS test_op=VS_TEST_COLON_HYPHEN {[LIT_CHARS 1]}][LIT_CHARS "\n"][LIT_CHARS "dns_server: "][VarSub DNS_SERVER_IP][LIT_CHARS "\n"][LIT_CHARS "dns_domain: "][VarSub DNS_DOMAIN][LIT_CHARS "\n"][LIT_CHARS "federations_domain_map: ''\n"][LIT_CHARS "e2e_storage_test_environment: "][RIGHT_D_QUOTE "\""][VarSub E2E_STORAGE_TEST_ENVIRONMENT test_op=VS_TEST_COLON_HYPHEN {[LIT_CHARS false]}][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "cluster_cidr: "][RIGHT_D_QUOTE "\""][VarSub NODE_IP_RANGES][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "allocate_node_cidrs: "][RIGHT_D_QUOTE "\""][VarSub ALLOCATE_NODE_CIDRS test_op=VS_TEST_COLON_HYPHEN {[LIT_CHARS true]}][RIGHT_D_QUOTE "\""][LIT_CHARS "\n"][LIT_CHARS "admission_control: NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,DefaultStorageClass,ResourceQuota\n"]]} <REDIR_DLESS "<<"> 0),
    (FilenameRedirectNode filename={[LIT_CHARS /srv/salt-overlay/pillar/cluster-params.sls]} <REDIR_GREAT ">"> 1),
    >
  )
)