(command.CommandList children: [ (command.ShAssignment left: <Id.Lit_VarLike 'KUBELET_TOKEN='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'KUBELET_TOKEN='> lhs: (sh_lhs_expr.Name left:<Id.Lit_VarLike 'KUBELET_TOKEN='> name:KUBELET_TOKEN) op: assign_op.Equal rhs: { (CommandSub left_token: <Id.Left_DollarParen '$('> child: (command.Pipeline children: [ (command.Simple blame_tok: <dd> more_env: [] words: [ {<dd>} {<Id.Lit_VarLike 'if='> <'/dev/urandom'>} {<Id.Lit_VarLike 'bs='> <128>} {<Id.Lit_VarLike 'count='> <1>} ] redirects: [ (Redir op: <Id.Redir_Great '2>'> loc: (redir_loc.Fd fd:2) arg: {<'/dev/null'>} ) ] do_fork: T ) (command.Simple blame_tok: <base64> more_env: [] words: [{<base64>}] redirects: [] do_fork: T ) (command.Simple blame_tok: <tr> more_env: [] words: [{<tr>} {<-d>} {(DQ <'=+/'>)}] redirects: [] do_fork: T ) (command.Simple blame_tok: <dd> more_env: [] words: [{<dd>} {<Id.Lit_VarLike 'bs='> <32>} {<Id.Lit_VarLike 'count='> <1>}] redirects: [ (Redir op: <Id.Redir_Great '2>'> loc: (redir_loc.Fd fd:2) arg: {<'/dev/null'>} ) ] do_fork: T ) ] ops: [<Id.Op_Pipe _> <Id.Op_Pipe _> <Id.Op_Pipe _>] ) right: <Id.Eof_RParen _> ) } ) ] redirects: [] ) (command.ShAssignment left: <Id.Lit_VarLike 'KUBE_PROXY_TOKEN='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'KUBE_PROXY_TOKEN='> lhs: (sh_lhs_expr.Name left:<Id.Lit_VarLike 'KUBE_PROXY_TOKEN='> name:KUBE_PROXY_TOKEN) op: assign_op.Equal rhs: { (CommandSub left_token: <Id.Left_DollarParen '$('> child: (command.Pipeline children: [ (command.Simple blame_tok: <dd> more_env: [] words: [ {<dd>} {<Id.Lit_VarLike 'if='> <'/dev/urandom'>} {<Id.Lit_VarLike 'bs='> <128>} {<Id.Lit_VarLike 'count='> <1>} ] redirects: [ (Redir op: <Id.Redir_Great '2>'> loc: (redir_loc.Fd fd:2) arg: {<'/dev/null'>} ) ] do_fork: T ) (command.Simple blame_tok: <base64> more_env: [] words: [{<base64>}] redirects: [] do_fork: T ) (command.Simple blame_tok: <tr> more_env: [] words: [{<tr>} {<-d>} {(DQ <'=+/'>)}] redirects: [] do_fork: T ) (command.Simple blame_tok: <dd> more_env: [] words: [{<dd>} {<Id.Lit_VarLike 'bs='> <32>} {<Id.Lit_VarLike 'count='> <1>}] redirects: [ (Redir op: <Id.Redir_Great '2>'> loc: (redir_loc.Fd fd:2) arg: {<'/dev/null'>} ) ] do_fork: T ) ] ops: [<Id.Op_Pipe _> <Id.Op_Pipe _> <Id.Op_Pipe _>] ) right: <Id.Eof_RParen _> ) } ) ] redirects: [] ) (command.ShAssignment left: <Id.Lit_VarLike 'known_tokens_file='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'known_tokens_file='> lhs: (sh_lhs_expr.Name left:<Id.Lit_VarLike 'known_tokens_file='> name:known_tokens_file) op: assign_op.Equal rhs: {(DQ <'/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv'>)} ) ] redirects: [] ) (command.If if_kw: <Id.KW_If if> arms: [ (IfArm keyword: <Id.KW_If if> cond: (condition.Shell commands: [ (command.Sentence child: (command.DBracket left: <Id.KW_DLeftBracket '[['> expr: (bool_expr.LogicalNot child: (bool_expr.Unary op_id: Id.BoolUnary_f child: {(DQ (${ Id.VSub_Name known_tokens_file))} ) ) right: <Id.Lit_DRightBracket ']]'> redirects: [] ) terminator: <Id.Op_Semi _> ) ] ) then_kw: <Id.KW_Then then> action: [ (command.Simple blame_tok: <mkdir> more_env: [] words: [{<mkdir>} {<-p>} {<'/srv/salt-overlay/salt/kube-apiserver'>}] redirects: [] do_fork: T ) (command.ShAssignment left: <Id.Lit_VarLike 'known_tokens_file='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'known_tokens_file='> lhs: (sh_lhs_expr.Name left: <Id.Lit_VarLike 'known_tokens_file='> name: known_tokens_file ) op: assign_op.Equal rhs: {(DQ <'/srv/salt-overlay/salt/kube-apiserver/known_tokens.csv'>)} ) ] redirects: [] ) (command.Subshell left: <Id.Op_LParen _> child: (command.CommandList children: [ (command.Sentence child: (command.Simple blame_tok: <umask> more_env: [] words: [ {<umask>} {<Id.Lit_VarLike 'u='> <rw> <Id.Lit_Comma ','> <Id.Lit_VarLike 'go='>} ] redirects: [] do_fork: T ) terminator: <Id.Op_Semi _> ) (command.Sentence child: (command.Simple blame_tok: <echo> more_env: [] words: [ {<echo>} {(DQ ($ Id.VSub_DollarName KUBELET_TOKEN) <',kubelet,kubelet'>)} ] redirects: [ (Redir op: <Id.Redir_Great '>'> loc: (redir_loc.Fd fd:1) arg: {($ Id.VSub_DollarName known_tokens_file)} ) ] do_fork: T ) terminator: <Id.Op_Semi _> ) (command.Simple blame_tok: <echo> more_env: [] words: [ {<echo>} {(DQ ($ Id.VSub_DollarName KUBE_PROXY_TOKEN) <',kube_proxy,kube_proxy'>)} ] redirects: [ (Redir op: <Id.Redir_DGreat '>>'> loc: (redir_loc.Fd fd:1) arg: {($ Id.VSub_DollarName known_tokens_file)} ) ] do_fork: T ) ] ) right: <Id.Right_Subshell _> redirects: [] ) (command.Simple blame_tok: <mkdir> more_env: [] words: [{<mkdir>} {<-p>} {<'/srv/salt-overlay/salt/kubelet'>}] redirects: [] do_fork: T ) (command.ShAssignment left: <Id.Lit_VarLike 'kubelet_auth_file='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'kubelet_auth_file='> lhs: (sh_lhs_expr.Name left: <Id.Lit_VarLike 'kubelet_auth_file='> name: kubelet_auth_file ) op: assign_op.Equal rhs: {(DQ <'/srv/salt-overlay/salt/kubelet/kubernetes_auth'>)} ) ] redirects: [] ) (command.Subshell left: <Id.Op_LParen _> child: (command.CommandList children: [ (command.Sentence child: (command.Simple blame_tok: <umask> more_env: [] words: [ {<umask>} {<Id.Lit_VarLike 'u='> <rw> <Id.Lit_Comma ','> <Id.Lit_VarLike 'go='>} ] redirects: [] do_fork: T ) terminator: <Id.Op_Semi _> ) (command.Simple blame_tok: <echo> more_env: [] words: [ {<echo>} { (DQ <'{'> (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\"'> ch:'"') <BearerToken> (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\"'> ch:'"') <': '> (word_part.EscapedLiteral token: <Id.Lit_EscapedChar '\\"'> ch: '"' ) ($ Id.VSub_DollarName KUBELET_TOKEN) (word_part.EscapedLiteral token: <Id.Lit_EscapedChar '\\"'> ch: '"' ) <', '> (word_part.EscapedLiteral token:<Id.Lit_EscapedChar '\\"'> ch:'"') <Insecure> (word_part.EscapedLiteral token: <Id.Lit_EscapedChar '\\"'> ch: '"' ) <': true }'> ) } ] redirects: [ (Redir op: <Id.Redir_Great '>'> loc: (redir_loc.Fd fd:1) arg: {($ Id.VSub_DollarName kubelet_auth_file)} ) ] do_fork: T ) ] ) right: <Id.Right_Subshell _> redirects: [] ) (command.ShAssignment left: <Id.Lit_VarLike 'kubelet_kubeconfig_file='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'kubelet_kubeconfig_file='> lhs: (sh_lhs_expr.Name left: <Id.Lit_VarLike 'kubelet_kubeconfig_file='> name: kubelet_kubeconfig_file ) op: assign_op.Equal rhs: {(DQ <'/srv/salt-overlay/salt/kubelet/kubeconfig'>)} ) ] redirects: [] ) (command.Simple blame_tok: <mkdir> more_env: [] words: [{<mkdir>} {<-p>} {<'/srv/salt-overlay/salt/kubelet'>}] redirects: [] do_fork: T ) (command.Subshell left: <Id.Op_LParen _> child: (command.CommandList children: [ (command.Sentence child: (command.Simple blame_tok: <umask> more_env: [] words: [{<umask>} {<077>}] redirects: [] do_fork: T ) terminator: <Id.Op_Semi _> ) (command.Simple blame_tok: <cat> more_env: [] words: [{<cat>}] redirects: [ (Redir op: <Id.Redir_Great '>'> loc: (redir_loc.Fd fd:1) arg: {(DQ (${ Id.VSub_Name kubelet_kubeconfig_file))} ) (Redir op: <Id.Redir_DLess '<<'> loc: (redir_loc.Fd fd:0) arg: (redir_param.HereDoc here_begin: {<EOF>} here_end_tok: <Id.Undefined_Tok ''> stdin_parts: [ <'apiVersion: v1\n'> <'kind: Config\n'> <'clusters:\n'> <'- cluster:\n'> <' server: https://'> (${ Id.VSub_Name KUBE_MASTER_IP) <'\n'> <' insecure-skip-tls-verify: true\n'> <' name: local\n'> <'contexts:\n'> <'- context:\n'> <' cluster: local\n'> <' user: kubelet\n'> <' name: service-account-context\n'> <'current-context: service-account-context\n'> <'users:\n'> <'- name: kubelet\n'> <' user:\n'> <' token: '> (${ Id.VSub_Name KUBELET_TOKEN) <'\n'> ] ) ) ] do_fork: T ) ] ) right: <Id.Right_Subshell _> redirects: [] ) (command.Simple blame_tok: <mkdir> more_env: [] words: [{<mkdir>} {<-p>} {<'/srv/salt-overlay/salt/kube-proxy'>}] redirects: [] do_fork: T ) (command.ShAssignment left: <Id.Lit_VarLike 'kube_proxy_kubeconfig_file='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'kube_proxy_kubeconfig_file='> lhs: (sh_lhs_expr.Name left: <Id.Lit_VarLike 'kube_proxy_kubeconfig_file='> name: kube_proxy_kubeconfig_file ) op: assign_op.Equal rhs: {(DQ <'/srv/salt-overlay/salt/kube-proxy/kubeconfig'>)} ) ] redirects: [] ) (command.Subshell left: <Id.Op_LParen _> child: (command.CommandList children: [ (command.Sentence child: (command.Simple blame_tok: <umask> more_env: [] words: [{<umask>} {<077>}] redirects: [] do_fork: T ) terminator: <Id.Op_Semi _> ) (command.Simple blame_tok: <cat> more_env: [] words: [{<cat>}] redirects: [ (Redir op: <Id.Redir_Great '>'> loc: (redir_loc.Fd fd:1) arg: {(DQ (${ Id.VSub_Name kube_proxy_kubeconfig_file))} ) (Redir op: <Id.Redir_DLess '<<'> loc: (redir_loc.Fd fd:0) arg: (redir_param.HereDoc here_begin: {<EOF>} here_end_tok: <Id.Undefined_Tok ''> stdin_parts: [ <'apiVersion: v1\n'> <'kind: Config\n'> <'clusters:\n'> <'- cluster:\n'> <' insecure-skip-tls-verify: true\n'> <' name: local\n'> <'contexts:\n'> <'- context:\n'> <' cluster: local\n'> <' user: kube-proxy\n'> <' name: service-account-context\n'> <'current-context: service-account-context\n'> <'users:\n'> <'- name: kube-proxy\n'> <' user:\n'> <' token: '> (${ Id.VSub_Name KUBE_PROXY_TOKEN) <'\n'> ] ) ) ] do_fork: T ) ] ) right: <Id.Right_Subshell _> redirects: [] ) (command.ShAssignment left: <Id.Lit_VarLike 'service_accounts='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'service_accounts='> lhs: (sh_lhs_expr.Name left: <Id.Lit_VarLike 'service_accounts='> name: service_accounts ) op: assign_op.Equal rhs: { (ShArrayLiteral left: <Id.Op_LParen _> words: [ {(DQ <'system:scheduler'>)} {(DQ <'system:controller_manager'>)} {(DQ <'system:logging'>)} {(DQ <'system:monitoring'>)} {(DQ <'system:dns'>)} ] right: <Id.Right_ShArrayLiteral _> ) } ) ] redirects: [] ) (command.ForEach keyword: <Id.KW_For for> iter_names: [account] iterable: (for_iter.Words words: [ { (DQ (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name service_accounts> var_name: service_accounts bracket_op: (bracket_op.WholeArray op_id:Id.Lit_At) right: <Id.Right_DollarBrace '}'> ) ) } ] ) semi_tok: <Id.Op_Semi _> body: (command.DoGroup left: <Id.KW_Do do> children: [ (command.ShAssignment left: <Id.Lit_VarLike 'token='> pairs: [ (AssignPair left: <Id.Lit_VarLike 'token='> lhs: (sh_lhs_expr.Name left:<Id.Lit_VarLike 'token='> name:token) op: assign_op.Equal rhs: { (CommandSub left_token: <Id.Left_DollarParen '$('> child: (command.Pipeline children: [ (command.Simple blame_tok: <dd> more_env: [] words: [ {<dd>} {<Id.Lit_VarLike 'if='> <'/dev/urandom'>} {<Id.Lit_VarLike 'bs='> <128>} {<Id.Lit_VarLike 'count='> <1>} ] redirects: [ (Redir op: <Id.Redir_Great '2>'> loc: (redir_loc.Fd fd:2) arg: {<'/dev/null'>} ) ] do_fork: T ) (command.Simple blame_tok: <base64> more_env: [] words: [{<base64>}] redirects: [] do_fork: T ) (command.Simple blame_tok: <tr> more_env: [] words: [{<tr>} {<-d>} {(DQ <'=+/'>)}] redirects: [] do_fork: T ) (command.Simple blame_tok: <dd> more_env: [] words: [ {<dd>} {<Id.Lit_VarLike 'bs='> <32>} {<Id.Lit_VarLike 'count='> <1>} ] redirects: [ (Redir op: <Id.Redir_Great '2>'> loc: (redir_loc.Fd fd:2) arg: {<'/dev/null'>} ) ] do_fork: T ) ] ops: [<Id.Op_Pipe _> <Id.Op_Pipe _> <Id.Op_Pipe _>] ) right: <Id.Eof_RParen _> ) } ) ] redirects: [] ) (command.Simple blame_tok: <echo> more_env: [] words: [ {<echo>} { (DQ (${ Id.VSub_Name token) <','> (${ Id.VSub_Name account) <','> (${ Id.VSub_Name account) ) } ] redirects: [ (Redir op: <Id.Redir_DGreat '>>'> loc: (redir_loc.Fd fd:1) arg: {(DQ (${ Id.VSub_Name known_tokens_file))} ) ] do_fork: T ) ] right: <Id.KW_Done done> ) redirects: [] ) ] spids: [141 158] ) ] else_action: [] fi_kw: <Id.KW_Fi fi> redirects: [] ) (command.Simple blame_tok: <readonly> more_env: [] words: [ {<readonly>} {<Id.Lit_VarLike 'BASIC_AUTH_FILE='> (DQ <'/srv/salt-overlay/salt/kube-apiserver/basic_auth.csv'>) } ] redirects: [] do_fork: T ) (command.If if_kw: <Id.KW_If if> arms: [ (IfArm keyword: <Id.KW_If if> cond: (condition.Shell commands: [ (command.Sentence child: (command.DBracket left: <Id.KW_DLeftBracket '[['> expr: (bool_expr.LogicalNot child: (bool_expr.Unary op_id: Id.BoolUnary_e child: {(DQ (${ Id.VSub_Name BASIC_AUTH_FILE))} ) ) right: <Id.Lit_DRightBracket ']]'> redirects: [] ) terminator: <Id.Op_Semi _> ) ] ) then_kw: <Id.KW_Then then> action: [ (command.Simple blame_tok: <mkdir> more_env: [] words: [{<mkdir>} {<-p>} {<'/srv/salt-overlay/salt/kube-apiserver'>}] redirects: [] do_fork: T ) (command.Subshell left: <Id.Op_LParen _> child: (command.CommandList children: [ (command.Sentence child: (command.Simple blame_tok: <umask> more_env: [] words: [{<umask>} {<077>}] redirects: [] do_fork: T ) terminator: <Id.Op_Semi _> ) (command.Simple blame_tok: <echo> more_env: [] words: [ {<echo>} { (DQ (${ Id.VSub_Name KUBE_PASSWORD) <','> (${ Id.VSub_Name KUBE_USER) <',admin'> ) } ] redirects: [ (Redir op: <Id.Redir_Great '>'> loc: (redir_loc.Fd fd:1) arg: {(DQ (${ Id.VSub_Name BASIC_AUTH_FILE))} ) ] do_fork: T ) ] ) right: <Id.Right_Subshell _> redirects: [] ) ] spids: [544 561] ) ] else_action: [] fi_kw: <Id.KW_Fi fi> redirects: [] ) (command.Simple blame_tok: <mkdir> more_env: [] words: [{<mkdir>} {<-p>} {<'/srv/salt-overlay/pillar'>}] redirects: [] do_fork: T ) (command.Simple blame_tok: <cat> more_env: [] words: [{<cat>}] redirects: [ (Redir op: <Id.Redir_DLess '<<'> loc: (redir_loc.Fd fd:0) arg: (redir_param.HereDoc here_begin: {<EOF>} here_end_tok: <Id.Undefined_Tok ''> stdin_parts: [ <'instance_prefix: \''> (CommandSub left_token: <Id.Left_DollarParen '$('> child: (command.Pipeline children: [ (command.Simple blame_tok: <echo> more_env: [] words: [{<echo>} {(DQ ($ Id.VSub_DollarName INSTANCE_PREFIX))}] redirects: [] do_fork: T ) (command.Simple blame_tok: <sed> more_env: [] words: [{<sed>} {<-e>} {(DQ <'s/\'/\'\'/g'>)}] redirects: [] do_fork: T ) ] ops: [<Id.Op_Pipe _>] ) right: <Id.Eof_RParen _> ) <'\'\n'> <'node_instance_prefix: '> ($ Id.VSub_DollarName NODE_INSTANCE_PREFIX) <'\n'> <'service_cluster_ip_range: '> ($ Id.VSub_DollarName SERVICE_CLUSTER_IP_RANGE) <'\n'> <'enable_cluster_monitoring: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name ENABLE_CLUSTER_MONITORING> var_name: ENABLE_CLUSTER_MONITORING suffix_op: (suffix_op.Unary op:<Id.VTest_ColonHyphen _> arg_word:{<none>}) right: <Id.Right_DollarBrace '}'> ) <Id.Right_DoubleQuote '"'> <'\n'> <'enable_cluster_logging: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name ENABLE_CLUSTER_LOGGING> var_name: ENABLE_CLUSTER_LOGGING suffix_op: (suffix_op.Slice begin:($ Id.Lit_ArithVarLike false)) right: <Id.Arith_RBrace _> ) <Id.Right_DoubleQuote '"'> <'\n'> <'enable_cluster_ui: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name ENABLE_CLUSTER_UI> var_name: ENABLE_CLUSTER_UI suffix_op: (suffix_op.Slice begin:($ Id.Lit_ArithVarLike true)) right: <Id.Arith_RBrace _> ) <Id.Right_DoubleQuote '"'> <'\n'> <'enable_node_logging: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name ENABLE_NODE_LOGGING> var_name: ENABLE_NODE_LOGGING suffix_op: (suffix_op.Slice begin:($ Id.Lit_ArithVarLike false)) right: <Id.Arith_RBrace _> ) <Id.Right_DoubleQuote '"'> <'\n'> <'logging_destination: '> ($ Id.VSub_DollarName LOGGING_DESTINATION) <'\n'> <'elasticsearch_replicas: '> ($ Id.VSub_DollarName ELASTICSEARCH_LOGGING_REPLICAS) <'\n'> <'enable_cluster_dns: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name ENABLE_CLUSTER_DNS> var_name: ENABLE_CLUSTER_DNS suffix_op: (suffix_op.Unary op:<Id.VTest_ColonHyphen _> arg_word:{<false>}) right: <Id.Right_DollarBrace '}'> ) <Id.Right_DoubleQuote '"'> <'\n'> <'dns_server: '> ($ Id.VSub_DollarName DNS_SERVER_IP) <'\n'> <'dns_domain: '> ($ Id.VSub_DollarName DNS_DOMAIN) <'\n'> <'e2e_storage_test_environment: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name E2E_STORAGE_TEST_ENVIRONMENT> var_name: E2E_STORAGE_TEST_ENVIRONMENT suffix_op: (suffix_op.Unary op:<Id.VTest_ColonHyphen _> arg_word:{<false>}) right: <Id.Right_DollarBrace '}'> ) <Id.Right_DoubleQuote '"'> <'\n'> <'cluster_cidr: '> <Id.Right_DoubleQuote '"'> ($ Id.VSub_DollarName NODE_IP_RANGES) <Id.Right_DoubleQuote '"'> <'\n'> <'allocate_node_cidrs: '> <Id.Right_DoubleQuote '"'> (BracedVarSub left: <Id.Left_DollarBrace '${'> token: <Id.VSub_Name ALLOCATE_NODE_CIDRS> var_name: ALLOCATE_NODE_CIDRS suffix_op: (suffix_op.Unary op:<Id.VTest_ColonHyphen _> arg_word:{<true>}) right: <Id.Right_DollarBrace '}'> ) <Id.Right_DoubleQuote '"'> <'\n'> < 'admission_control: Initializers,NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,ResourceQuota\n' > ] ) ) (Redir op: <Id.Redir_Great '>'> loc: (redir_loc.Fd fd:1) arg: {<'/srv/salt-overlay/pillar/cluster-params.sls'>} ) ] do_fork: T ) ] )