(List
  (Com {[LIT_CHARS set]} {[LIT_CHARS -o]} {[LIT_CHARS errexit]}  )
  (Com {[LIT_CHARS set]} {[LIT_CHARS -o]} {[LIT_CHARS nounset]}  )
  (Com {[LIT_CHARS set]} {[LIT_CHARS -o]} {[LIT_CHARS pipefail]}  )
  (Com {[LIT_CHARS hostnamectl]} {[LIT_CHARS set-hostname]} {[VarSub MASTER_NAME]}  )
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('if_to_edit', {[DQ ]})])
  (If
    (DBracket {B2 BINARY_STRING_TILDE_EQUAL {[DQ [ComSub (Com {[LIT_CHARS grep]} {[SQ <LIT_CHARS VERSION_ID>]} {[LIT_CHARS /etc/os-release]})]]} {[LIT_OTHER "^"] [LIT_VAR_LIKE "VERSION_ID="] [LIT_CHARS 23]}})
    (List
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('NETWORK_CONF_PATH', {[LIT_CHARS /etc/sysconfig/network-scripts/]})])
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('if_to_edit', {[ComSub (Pipeline (Com {[LIT_CHARS find]} {[VarSub NETWORK_CONF_PATH] [LIT_CHARS ifcfg-] [LIT_OTHER "*"]}) (Com {[LIT_CHARS xargs]} {[LIT_CHARS grep]} {[LIT_CHARS -l]} {[LIT_CHARS VAGRANT-BEGIN]}) )]})])
      (For if_conf [{[VarSub if_to_edit]}])
        (List
          (AndOr OP_OR_IF
            (Com {[LIT_CHARS grep]} {[LIT_CHARS -q]} {[LIT_OTHER "^"] [LIT_VAR_LIKE "NM_CONTROLLED="]} {[VarSub if_conf]}            )
            (Com {[LIT_CHARS echo]} {[SQ <LIT_CHARS "NM_CONTROLLED=no">]}
              <
              (FilenameRedirectNode filename={[VarSub if_conf]} <REDIR_DGREAT ">>"> 1),
              >
            )
          )
          (Com {[LIT_CHARS sed]} {[LIT_CHARS -i]} {[SQ <LIT_CHARS "s/#^NM_CONTROLLED=.*/NM_CONTROLLED=no/">]} {[VarSub if_conf]}          )
        )
      )
      (Com {[LIT_CHARS systemctl]} {[LIT_CHARS restart]} {[LIT_CHARS network]}      )
    )
  )
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('NETWORK_IF_NAME', {[ComSub (Pipeline (Com {[LIT_CHARS echo]} {[VarSub if_to_edit]}) (Com {[LIT_CHARS awk]} {[LIT_CHARS -F-]} {[SQ <LIT_CHARS "{ print $3 }">]}) )]})])
  (If
    (DBracket {B1 UNARY_STRING_z {[DQ [VarSub NETWORK_IF_NAME]]}})
    (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('NETWORK_IF_NAME', {[VarSub DEFAULT_NETWORK_IF_NAME]})])
  )
  (ForExpr {A2 AS_OP_EQUAL {A Atom NODE_ARITH_WORD {[VarSub i]}} {A Atom NODE_ARITH_WORD {[AS_NUM_LITERAL 0]}}} {A2 AS_OP_LESS {A Atom NODE_ARITH_WORD {[VarSub i]}} {A Atom NODE_ARITH_WORD {[VarSub NODE_NAMES bracket_op=(Index {A Atom NODE_ARITH_WORD {AS_OP_AT "@"}}) transform_ops=[(#len)]]}}} {A1 AS_OP_DPLUS {A Atom NODE_ARITH_WORD {[VarSub i]}} }
    (List
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('node', {[VarSub NODE_NAMES bracket_op=(Index {A Atom NODE_ARITH_WORD {[VarSub i]}})]})])
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('ip', {[VarSub NODE_IPS bracket_op=(Index {A Atom NODE_ARITH_WORD {[VarSub i]}})]})])
      (If
        (Com {[LIT_DBRACKET_LIKE "["]} {[LIT_OTHER "!"]} {[DQ [ComSub (Pipeline (Com {[LIT_CHARS cat]} {[LIT_CHARS /etc/hosts]}) (Com {[LIT_CHARS grep]} {[VarSub node]}) )]]} {[LIT_DBRACKET_LIKE "]"]}        )
        (List
          (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "Adding "][VarSub node][LIT_CHARS " to hosts file"]]}          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub ip][LIT_CHARS " "][VarSub node]]}
            <
            (FilenameRedirectNode filename={[LIT_CHARS /etc/hosts]} <REDIR_DGREAT ">>"> 1),
            >
          )
        )
      )
    )
  )
  (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "127.0.0.1 localhost"]]}
    <
    (FilenameRedirectNode filename={[LIT_CHARS /etc/hosts]} <REDIR_DGREAT ">>"> 1),
    >
  )
  (Com {[LIT_CHARS echo]} {[DQ [VarSub MASTER_IP][LIT_CHARS " "][VarSub MASTER_NAME]]}
    <
    (FilenameRedirectNode filename={[LIT_CHARS /etc/hosts]} <REDIR_DGREAT ">>"> 1),
    >
  )
  (Com {[LIT_CHARS enable-accounting]}  )
  (Com {[LIT_CHARS prepare-package-manager]}  )
  (If
    (Com {[LIT_DBRACKET_LIKE "["]} {[DQ [VarSub NETWORK_PROVIDER]]} {[LIT_NEQUAL "!="]} {[DQ [LIT_CHARS kubenet]]} {[LIT_DBRACKET_LIKE "]"]}    )
    (Com {[LIT_CHARS provision-network-master]}    )
  )
  (Com {[LIT_CHARS write-salt-config]} {[LIT_CHARS kubernetes-master]}  )
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('known_tokens_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-apiserver/known_tokens.csv]]})])
  (If
    (DBracket {B! {B1 UNARY_FILE_f {[DQ [VarSub known_tokens_file]]}}})
    (List
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kube-apiserver]}      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('known_tokens_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-apiserver/known_tokens.csv]]})])
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_VAR_LIKE "u="] [LIT_CHARS rw] [LIT_COMMA ","] [LIT_VAR_LIKE "go="] =}          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub KUBELET_TOKEN][LIT_CHARS ",kubelet,kubelet"]]}
            <
            (FilenameRedirectNode filename={[VarSub known_tokens_file]} <REDIR_GREAT ">"> 1),
            >
          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub KUBE_PROXY_TOKEN][LIT_CHARS ",kube_proxy,kube_proxy"]]}
            <
            (FilenameRedirectNode filename={[VarSub known_tokens_file]} <REDIR_DGREAT ">>"> 1),
            >
          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub KUBE_BEARER_TOKEN][LIT_CHARS ",admin,admin"]]}
            <
            (FilenameRedirectNode filename={[VarSub known_tokens_file]} <REDIR_DGREAT ">>"> 1),
            >
          )
        )
      )
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kubelet]}      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('kubelet_auth_file', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kubelet/kubernetes_auth]]})])
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_VAR_LIKE "u="] [LIT_CHARS rw] [LIT_COMMA ","] [LIT_VAR_LIKE "go="] =}          )
          (Com {[LIT_CHARS echo]} {[DQ [LIT_CHARS "{"][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS BearerToken][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS ": "][\ LIT_ESCAPED_CHAR "\\\""][VarSub KUBELET_TOKEN][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS ", "][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS Insecure][\ LIT_ESCAPED_CHAR "\\\""][LIT_CHARS ": true }"]]}
            <
            (FilenameRedirectNode filename={[VarSub kubelet_auth_file]} <REDIR_GREAT ">"> 1),
            >
          )
        )
      )
      (Com {[LIT_CHARS create-salt-kubelet-auth]}      )
      (Com {[LIT_CHARS create-salt-kubeproxy-auth]}      )
      (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('service_accounts', {[Array {[DQ [LIT_CHARS "system:scheduler"]]} {[DQ [LIT_CHARS "system:controller_manager"]]} {[DQ [LIT_CHARS "system:logging"]]} {[DQ [LIT_CHARS "system:monitoring"]]} {[DQ [LIT_CHARS "system:dns"]]}]})])
      (For account [{[DQ [VarSub service_accounts bracket_op=(Index {A Atom NODE_ARITH_WORD {AS_OP_AT "@"}})]]}])
        (List
          (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('token', {[ComSub (Pipeline (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "if="] [LIT_CHARS /dev/urandom] =} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 128] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) (Com {[LIT_CHARS base64]}) (Com {[LIT_CHARS tr]} {[LIT_CHARS -d]} {[DQ [LIT_CHARS "=+/"]]}) (Com redirects=[(FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT "2>"> 2)]{[LIT_CHARS dd]} {[LIT_VAR_LIKE "bs="] [LIT_CHARS 32] =} {[LIT_VAR_LIKE "count="] [LIT_CHARS 1] =}) )]})])
          (Com {[LIT_CHARS echo]} {[DQ [VarSub token][LIT_CHARS ","][VarSub account][LIT_CHARS ","][VarSub account]]}
            <
            (FilenameRedirectNode filename={[DQ [VarSub known_tokens_file]]} <REDIR_DGREAT ">>"> 1),
            >
          )
        )
      )
    )
  )
  (= scope=<EAssignScope.GLOBAL 1> flags=2 words=[] bindings=[('BASIC_AUTH_FILE', {[DQ [LIT_CHARS /srv/salt-overlay/salt/kube-apiserver/basic_auth.csv]]})])
  (If
    (Com {[LIT_DBRACKET_LIKE "["]} {[LIT_OTHER "!"]} {[LIT_CHARS -e]} {[DQ [VarSub BASIC_AUTH_FILE]]} {[LIT_DBRACKET_LIKE "]"]}    )
    (List
      (Com {[LIT_CHARS mkdir]} {[LIT_CHARS -p]} {[LIT_CHARS /srv/salt-overlay/salt/kube-apiserver]}      )
      (Subshell
        (List
          (Com {[LIT_CHARS umask]} {[LIT_CHARS 077]}          )
          (Com {[LIT_CHARS echo]} {[DQ [VarSub MASTER_PASSWD][LIT_CHARS ","][VarSub MASTER_USER][LIT_CHARS ",admin"]]}
            <
            (FilenameRedirectNode filename={[DQ [VarSub BASIC_AUTH_FILE]]} <REDIR_GREAT ">"> 1),
            >
          )
        )
      )
    )
  )
  (If
    (List
      (Fork
        (Pipeline!
          (Com {[LIT_CHARS which]} {[LIT_CHARS /usr/libexec/cockpit-ws]}          )
        )
      )
      (Com 
        <
        (FilenameRedirectNode filename={[LIT_CHARS /dev/null]} <REDIR_GREAT ">"> 1),
        >
      )
    )
    (List
      (Com {[LIT_CHARS pushd]} {[LIT_CHARS /etc/yum.repos.d]}      )
      (Com {[LIT_CHARS curl]} {[LIT_CHARS -OL]} {[LIT_CHARS https] [LIT_OTHER ":"] [LIT_CHARS //copr.fedorainfracloud.org/coprs/g/cockpit/cockpit-preview/repo/fedora-23/msuchy-cockpit-preview-fedora-23.repo]}      )
      (Com {[LIT_CHARS dnf]} {[LIT_CHARS install]} {[LIT_CHARS -y]} {[LIT_CHARS cockpit]} {[LIT_CHARS cockpit-kubernetes]} {[LIT_CHARS docker]} {[LIT_CHARS socat]} {[LIT_CHARS ethtool]}      )
      (Com {[LIT_CHARS popd]}      )
      (Com {[LIT_CHARS systemctl]} {[LIT_CHARS enable]} {[LIT_CHARS cockpit.socket]}      )
      (Com {[LIT_CHARS systemctl]} {[LIT_CHARS start]} {[LIT_CHARS cockpit.socket]}      )
    )
  )
  (Com {[LIT_CHARS install-salt]}  )
  (Com {[LIT_CHARS run-salt]}  )
)