(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('cert_dir', {[VarSub CERT_DIR test_op=VS_TEST_COLON_HYPHEN {[LIT_SLASH /] [LIT_CHARS srv] [LIT_SLASH /] [LIT_CHARS kubernetes]}]})])
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('cert_group', {[VarSub CERT_GROUP test_op=VS_TEST_COLON_HYPHEN {[LIT_CHARS kube-cert]}]})])
  (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[DQ [VarSub cert_dir]]}  )
  (Com {[LIT_CHARS openssl]} {[LIT_CHARS req]} {[LIT_CHARS -new]} {[LIT_CHARS -newkey]} {[LIT_CHARS rsa] [LIT_OTHER ":"] [LIT_CHARS 4096]} {[LIT_CHARS -days]} {[LIT_CHARS 365]} {[LIT_CHARS -nodes]} {[LIT_CHARS -x509]} {[LIT_CHARS -subj]} {[DQ [LIT_CHARS "/CN=kubernetes.invalid/O=Kubernetes"]]} {[LIT_CHARS -keyout]} {[DQ [VarSub cert_dir][LIT_CHARS /server.key]]} {[LIT_CHARS -out]} {[DQ [VarSub cert_dir][LIT_CHARS /server.cert]]}  )
  (Com {[LIT_CHARS chgrp]} {[VarSub cert_group]} {[DQ [VarSub cert_dir][LIT_CHARS /server.key]]} {[DQ [VarSub cert_dir][LIT_CHARS /server.cert]]}  )
  (Com {[LIT_CHARS chmod]} {[LIT_CHARS 660]} {[DQ [VarSub cert_dir][LIT_CHARS /server.key]]} {[DQ [VarSub cert_dir][LIT_CHARS /server.cert]]}  )
)