---
Function {
 argument: Destructured {
  identifier: None,
  arguments: [
   DestructuredArgument {
    identifier: "config",
    default: None,
   },
   DestructuredArgument {
    identifier: "lib",
    default: None,
   },
   DestructuredArgument {
    identifier: "pkgs",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: LetIn {
   bindings: [
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "top",
        position: (6, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (6, 9),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "services",
         position: (6, 16),
        },
        Raw {
         content: "kubernetes",
         position: (6, 25),
        },
       ],
      },
      default: None,
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfg",
        position: (7, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "top",
       position: (7, 9),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "pki",
         position: (7, 13),
        },
       ],
      },
      default: None,
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "csrCA",
        position: (9, 3),
       },
      ],
     },
     to: FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "pkgs",
        position: (9, 11),
       },
       attribute_path: AttributePath {
        parts: [
         Raw {
          content: "writeText",
          position: (9, 16),
         },
        ],
       },
       default: None,
      },
      arguments: [
       String {
        parts: [
         Raw {
          content: "kube-pki-cacert-csr.json",
          position: (9, 27),
         },
        ],
        position: (9, 26),
       },
       Parentheses {
        expression: FunctionApplication {
         function: PropertyAccess {
          expression: Variable {
           identifier: "builtins",
           position: (9, 54),
          },
          attribute_path: AttributePath {
           parts: [
            Raw {
             content: "toJSON",
             position: (9, 63),
            },
           ],
          },
          default: None,
         },
         arguments: [
          Map {
           bindings: [
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "key",
                position: (10, 5),
               },
              ],
             },
             to: Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "algo",
                   position: (11, 9),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "rsa",
                   position: (11, 17),
                  },
                 ],
                 position: (11, 16),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "size",
                   position: (12, 9),
                  },
                 ],
                },
                to: Int {
                 value: 2048,
                 position: (12, 16),
                },
               },
              ],
              recursive: false,
              position: (10, 11),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "names",
                position: (14, 5),
               },
              ],
             },
             to: FunctionApplication {
              function: Variable {
               identifier: "singleton",
               position: (14, 13),
              },
              arguments: [
               PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (14, 23),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "caSpec",
                   position: (14, 27),
                  },
                 ],
                },
                default: None,
               },
              ],
             },
            },
           ],
           recursive: false,
           position: (9, 70),
          },
         ],
        },
        position: (9, 53),
       },
      ],
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "csrCfssl",
        position: (17, 3),
       },
      ],
     },
     to: FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "pkgs",
        position: (17, 14),
       },
       attribute_path: AttributePath {
        parts: [
         Raw {
          content: "writeText",
          position: (17, 19),
         },
        ],
       },
       default: None,
      },
      arguments: [
       String {
        parts: [
         Raw {
          content: "kube-pki-cfssl-csr.json",
          position: (17, 30),
         },
        ],
        position: (17, 29),
       },
       Parentheses {
        expression: FunctionApplication {
         function: PropertyAccess {
          expression: Variable {
           identifier: "builtins",
           position: (17, 56),
          },
          attribute_path: AttributePath {
           parts: [
            Raw {
             content: "toJSON",
             position: (17, 65),
            },
           ],
          },
          default: None,
         },
         arguments: [
          Map {
           bindings: [
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "key",
                position: (18, 5),
               },
              ],
             },
             to: Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "algo",
                   position: (19, 9),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "rsa",
                   position: (19, 17),
                  },
                 ],
                 position: (19, 16),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "size",
                   position: (20, 9),
                  },
                 ],
                },
                to: Int {
                 value: 2048,
                 position: (20, 16),
                },
               },
              ],
              recursive: false,
              position: (18, 11),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "CN",
                position: (22, 5),
               },
              ],
             },
             to: PropertyAccess {
              expression: Variable {
               identifier: "top",
               position: (22, 10),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "masterAddress",
                 position: (22, 14),
                },
               ],
              },
              default: None,
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "hosts",
                position: (23, 5),
               },
              ],
             },
             to: BinaryOperation {
              operator: Concatenation,
              operands: [
               List {
                elements: [
                 PropertyAccess {
                  expression: Variable {
                   identifier: "top",
                   position: (23, 14),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "masterAddress",
                     position: (23, 18),
                    },
                   ],
                  },
                  default: None,
                 },
                ],
                position: (23, 13),
               },
               PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (23, 36),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "cfsslAPIExtraSANs",
                   position: (23, 40),
                  },
                 ],
                },
                default: None,
               },
              ],
              position: (23, 33),
             },
            },
           ],
           recursive: false,
           position: (17, 72),
          },
         ],
        },
        position: (17, 55),
       },
      ],
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfsslAPITokenBaseName",
        position: (26, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "apitoken.secret",
        position: (26, 28),
       },
      ],
      position: (26, 27),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfsslAPITokenPath",
        position: (27, 3),
       },
      ],
     },
     to: String {
      parts: [
       Interpolation {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "config",
          position: (27, 26),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "services",
            position: (27, 33),
           },
           Raw {
            content: "cfssl",
            position: (27, 42),
           },
           Raw {
            content: "dataDir",
            position: (27, 48),
           },
          ],
         },
         default: None,
        },
       },
       Raw {
        content: "/",
        position: (27, 56),
       },
       Interpolation {
        expression: Variable {
         identifier: "cfsslAPITokenBaseName",
         position: (27, 59),
        },
       },
      ],
      position: (27, 23),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "certmgrAPITokenPath",
        position: (28, 3),
       },
      ],
     },
     to: String {
      parts: [
       Interpolation {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "top",
          position: (28, 28),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "secretsPath",
            position: (28, 32),
           },
          ],
         },
         default: None,
        },
       },
       Raw {
        content: "/",
        position: (28, 44),
       },
       Interpolation {
        expression: Variable {
         identifier: "cfsslAPITokenBaseName",
         position: (28, 47),
        },
       },
      ],
      position: (28, 25),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfsslAPITokenLength",
        position: (29, 3),
       },
      ],
     },
     to: Int {
      value: 32,
      position: (29, 25),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "clusterAdminKubeconfig",
        position: (31, 3),
       },
      ],
     },
     to: With {
      expression: PropertyAccess {
       expression: Variable {
        identifier: "cfg",
        position: (31, 33),
       },
       attribute_path: AttributePath {
        parts: [
         Raw {
          content: "certs",
          position: (31, 37),
         },
         Raw {
          content: "clusterAdmin",
          position: (31, 43),
         },
        ],
       },
       default: None,
      },
      target: FunctionApplication {
       function: PropertyAccess {
        expression: Variable {
         identifier: "top",
         position: (32, 5),
        },
        attribute_path: AttributePath {
         parts: [
          Raw {
           content: "lib",
           position: (32, 9),
          },
          Raw {
           content: "mkKubeConfig",
           position: (32, 13),
          },
         ],
        },
        default: None,
       },
       arguments: [
        String {
         parts: [
          Raw {
           content: "cluster-admin",
           position: (32, 27),
          },
         ],
         position: (32, 26),
        },
        Map {
         bindings: [
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "server",
              position: (33, 9),
             },
            ],
           },
           to: PropertyAccess {
            expression: Variable {
             identifier: "top",
             position: (33, 18),
            },
            attribute_path: AttributePath {
             parts: [
              Raw {
               content: "apiserverAddress",
               position: (33, 22),
              },
             ],
            },
            default: None,
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "certFile",
              position: (34, 9),
             },
            ],
           },
           to: Variable {
            identifier: "cert",
            position: (34, 20),
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "keyFile",
              position: (35, 9),
             },
            ],
           },
           to: Variable {
            identifier: "key",
            position: (35, 19),
           },
          },
         ],
         recursive: false,
         position: (32, 42),
        },
       ],
      },
      position: (31, 28),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "remote",
        position: (38, 3),
       },
      ],
     },
     to: With {
      expression: PropertyAccess {
       expression: Variable {
        identifier: "config",
        position: (38, 17),
       },
       attribute_path: AttributePath {
        parts: [
         Raw {
          content: "services",
          position: (38, 24),
         },
        ],
       },
       default: None,
      },
      target: String {
       parts: [
        Raw {
         content: "https://",
         position: (38, 35),
        },
        Interpolation {
         expression: PropertyAccess {
          expression: Variable {
           identifier: "kubernetes",
           position: (38, 45),
          },
          attribute_path: AttributePath {
           parts: [
            Raw {
             content: "masterAddress",
             position: (38, 56),
            },
           ],
          },
          default: None,
         },
        },
        Raw {
         content: ":",
         position: (38, 70),
        },
        Interpolation {
         expression: FunctionApplication {
          function: Variable {
           identifier: "toString",
           position: (38, 73),
          },
          arguments: [
           PropertyAccess {
            expression: Variable {
             identifier: "cfssl",
             position: (38, 82),
            },
            attribute_path: AttributePath {
             parts: [
              Raw {
               content: "port",
               position: (38, 88),
              },
             ],
            },
            default: None,
           },
          ],
         },
        },
       ],
       position: (38, 34),
      },
      position: (38, 12),
     },
    },
   ],
   target: Map {
    bindings: [
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "options",
         position: (42, 3),
        },
        Raw {
         content: "services",
         position: (42, 11),
        },
        Raw {
         content: "kubernetes",
         position: (42, 20),
        },
        Raw {
         content: "pki",
         position: (42, 31),
        },
       ],
      },
      to: With {
       expression: PropertyAccess {
        expression: Variable {
         identifier: "lib",
         position: (42, 42),
        },
        attribute_path: AttributePath {
         parts: [
          Raw {
           content: "types",
           position: (42, 46),
          },
         ],
        },
        default: None,
       },
       target: Map {
        bindings: [
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "enable",
             position: (44, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkEnableOption",
            position: (44, 14),
           },
           arguments: [
            String {
             parts: [
              Raw {
               content: "easyCert issuer service",
               position: (44, 30),
              },
             ],
             position: (44, 29),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "certs",
             position: (46, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (46, 13),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (47, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "List of certificate specs to feed to cert generator.",
                  position: (47, 22),
                 },
                ],
                position: (47, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (48, 7),
                 },
                ],
               },
               to: Map {
                bindings: [],
                recursive: false,
                position: (48, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (49, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "attrs",
                position: (49, 14),
               },
              },
             ],
             recursive: false,
             position: (46, 22),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "genCfsslCACert",
             position: (52, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (52, 22),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (53, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Whether to automatically generate cfssl CA certificate and key,\nif they don't exist.\n",
                  position: (54, 1),
                 },
                ],
                position: (53, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (57, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "true",
                position: (57, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (58, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "bool",
                position: (58, 14),
               },
              },
             ],
             recursive: false,
             position: (52, 31),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "genCfsslAPICerts",
             position: (61, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (61, 24),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (62, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Whether to automatically generate cfssl API webserver TLS cert and key,\nif they don't exist.\n",
                  position: (63, 1),
                 },
                ],
                position: (62, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (66, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "true",
                position: (66, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (67, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "bool",
                position: (67, 14),
               },
              },
             ],
             recursive: false,
             position: (61, 33),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "cfsslAPIExtraSANs",
             position: (70, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (70, 25),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (71, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Extra x509 Subject Alternative Names to be added to the cfssl API webserver TLS cert.\n",
                  position: (72, 1),
                 },
                ],
                position: (71, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (74, 7),
                 },
                ],
               },
               to: List {
                elements: [],
                position: (74, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "example",
                  position: (75, 7),
                 },
                ],
               },
               to: List {
                elements: [
                 String {
                  parts: [
                   Raw {
                    content: "subdomain.example.com",
                    position: (75, 20),
                   },
                  ],
                  position: (75, 19),
                 },
                ],
                position: (75, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (76, 7),
                 },
                ],
               },
               to: FunctionApplication {
                function: Variable {
                 identifier: "listOf",
                 position: (76, 14),
                },
                arguments: [
                 Variable {
                  identifier: "str",
                  position: (76, 21),
                 },
                ],
               },
              },
             ],
             recursive: false,
             position: (70, 34),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "genCfsslAPIToken",
             position: (79, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (79, 24),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (80, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Whether to automatically generate cfssl API-token secret,\nif they doesn't exist.\n",
                  position: (81, 1),
                 },
                ],
                position: (80, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (84, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "true",
                position: (84, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (85, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "bool",
                position: (85, 14),
               },
              },
             ],
             recursive: false,
             position: (79, 33),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "pkiTrustOnBootstrap",
             position: (88, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (88, 27),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (89, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Whether to always trust remote cfssl server upon initial PKI bootstrap.",
                  position: (89, 22),
                 },
                ],
                position: (89, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (90, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "true",
                position: (90, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (91, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "bool",
                position: (91, 14),
               },
              },
             ],
             recursive: false,
             position: (88, 36),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "caCertPathPrefix",
             position: (94, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (94, 24),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (95, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Path-prefrix for the CA-certificate to be used for cfssl signing.\nSuffixes \".pem\" and \"-key.pem\" will be automatically appended for\nthe public and private keys respectively.\n",
                  position: (96, 1),
                 },
                ],
                position: (95, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (100, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Interpolation {
                  expression: PropertyAccess {
                   expression: Variable {
                    identifier: "config",
                    position: (100, 20),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "services",
                      position: (100, 27),
                     },
                     Raw {
                      content: "cfssl",
                      position: (100, 36),
                     },
                     Raw {
                      content: "dataDir",
                      position: (100, 42),
                     },
                    ],
                   },
                   default: None,
                  },
                 },
                 Raw {
                  content: "/ca",
                  position: (100, 50),
                 },
                ],
                position: (100, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "defaultText",
                  position: (101, 7),
                 },
                ],
               },
               to: FunctionApplication {
                function: Variable {
                 identifier: "literalExpression",
                 position: (101, 21),
                },
                arguments: [
                 String {
                  parts: [
                   Raw {
                    content: "\"",
                    position: (101, 41),
                   },
                   Raw {
                    content: "$",
                    position: (101, 42),
                   },
                   Raw {
                    content: "{config.services.cfssl.dataDir}/ca\"",
                    position: (101, 45),
                   },
                  ],
                  position: (101, 39),
                 },
                ],
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (102, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "str",
                position: (102, 14),
               },
              },
             ],
             recursive: false,
             position: (94, 33),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "caSpec",
             position: (105, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (105, 14),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (106, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Certificate specification for the auto-generated CAcert.",
                  position: (106, 22),
                 },
                ],
                position: (106, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (107, 7),
                 },
                ],
               },
               to: Map {
                bindings: [
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "CN",
                     position: (108, 9),
                    },
                   ],
                  },
                  to: String {
                   parts: [
                    Raw {
                     content: "kubernetes-cluster-ca",
                     position: (108, 15),
                    },
                   ],
                   position: (108, 14),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "O",
                     position: (109, 9),
                    },
                   ],
                  },
                  to: String {
                   parts: [
                    Raw {
                     content: "NixOS",
                     position: (109, 14),
                    },
                   ],
                   position: (109, 13),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "OU",
                     position: (110, 9),
                    },
                   ],
                  },
                  to: String {
                   parts: [
                    Raw {
                     content: "services.kubernetes.pki.caSpec",
                     position: (110, 15),
                    },
                   ],
                   position: (110, 14),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "L",
                     position: (111, 9),
                    },
                   ],
                  },
                  to: String {
                   parts: [
                    Raw {
                     content: "auto-generated",
                     position: (111, 14),
                    },
                   ],
                   position: (111, 13),
                  },
                 },
                ],
                recursive: false,
                position: (107, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (113, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "attrs",
                position: (113, 14),
               },
              },
             ],
             recursive: false,
             position: (105, 23),
            },
           ],
          },
         },
         Binding {
          from: AttributePath {
           parts: [
            Raw {
             content: "etcClusterAdminKubeconfig",
             position: (116, 5),
            },
           ],
          },
          to: FunctionApplication {
           function: Variable {
            identifier: "mkOption",
            position: (116, 33),
           },
           arguments: [
            Map {
             bindings: [
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "description",
                  position: (117, 7),
                 },
                ],
               },
               to: String {
                parts: [
                 Raw {
                  content: "Symlink a kubeconfig with cluster-admin privileges to environment path\n(/etc/&lt;path&gt;).\n",
                  position: (118, 1),
                 },
                ],
                position: (117, 21),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "default",
                  position: (121, 7),
                 },
                ],
               },
               to: Variable {
                identifier: "null",
                position: (121, 17),
               },
              },
              Binding {
               from: AttributePath {
                parts: [
                 Raw {
                  content: "type",
                  position: (122, 7),
                 },
                ],
               },
               to: FunctionApplication {
                function: Variable {
                 identifier: "nullOr",
                 position: (122, 14),
                },
                arguments: [
                 Variable {
                  identifier: "str",
                  position: (122, 21),
                 },
                ],
               },
              },
             ],
             recursive: false,
             position: (116, 42),
            },
           ],
          },
         },
        ],
        recursive: false,
        position: (42, 53),
       },
       position: (42, 37),
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "config",
         position: (128, 3),
        },
       ],
      },
      to: FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (128, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (128, 17),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "enable",
            position: (128, 21),
           },
          ],
         },
         default: None,
        },
        Parentheses {
         expression: LetIn {
          bindings: [
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "cfsslCertPathPrefix",
               position: (130, 5),
              },
             ],
            },
            to: String {
             parts: [
              Interpolation {
               expression: PropertyAccess {
                expression: Variable {
                 identifier: "config",
                 position: (130, 30),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (130, 37),
                  },
                  Raw {
                   content: "cfssl",
                   position: (130, 46),
                  },
                  Raw {
                   content: "dataDir",
                   position: (130, 52),
                  },
                 ],
                },
                default: None,
               },
              },
              Raw {
               content: "/cfssl",
               position: (130, 60),
              },
             ],
             position: (130, 27),
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "cfsslCert",
               position: (131, 5),
              },
             ],
            },
            to: String {
             parts: [
              Interpolation {
               expression: Variable {
                identifier: "cfsslCertPathPrefix",
                position: (131, 20),
               },
              },
              Raw {
               content: ".pem",
               position: (131, 40),
              },
             ],
             position: (131, 17),
            },
           },
           Binding {
            from: AttributePath {
             parts: [
              Raw {
               content: "cfsslKey",
               position: (132, 5),
              },
             ],
            },
            to: String {
             parts: [
              Interpolation {
               expression: Variable {
                identifier: "cfsslCertPathPrefix",
                position: (132, 19),
               },
              },
              Raw {
               content: "-key.pem",
               position: (132, 39),
              },
             ],
             position: (132, 16),
            },
           },
          ],
          target: Map {
           bindings: [
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "services",
                position: (136, 5),
               },
               Raw {
                content: "cfssl",
                position: (136, 14),
               },
              ],
             },
             to: FunctionApplication {
              function: Variable {
               identifier: "mkIf",
               position: (136, 22),
              },
              arguments: [
               Parentheses {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "top",
                  position: (136, 28),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "apiserver",
                    position: (136, 32),
                   },
                   Raw {
                    content: "enable",
                    position: (136, 42),
                   },
                  ],
                 },
                 default: None,
                },
                position: (136, 27),
               },
               Map {
                bindings: [
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "enable",
                     position: (137, 7),
                    },
                   ],
                  },
                  to: Variable {
                   identifier: "true",
                   position: (137, 16),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "address",
                     position: (138, 7),
                    },
                   ],
                  },
                  to: String {
                   parts: [
                    Raw {
                     content: "0.0.0.0",
                     position: (138, 18),
                    },
                   ],
                   position: (138, 17),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "tlsCert",
                     position: (139, 7),
                    },
                   ],
                  },
                  to: Variable {
                   identifier: "cfsslCert",
                   position: (139, 17),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "tlsKey",
                     position: (140, 7),
                    },
                   ],
                  },
                  to: Variable {
                   identifier: "cfsslKey",
                   position: (140, 16),
                  },
                 },
                 Binding {
                  from: AttributePath {
                   parts: [
                    Raw {
                     content: "configFile",
                     position: (141, 7),
                    },
                   ],
                  },
                  to: FunctionApplication {
                   function: Variable {
                    identifier: "toString",
                    position: (141, 20),
                   },
                   arguments: [
                    Parentheses {
                     expression: FunctionApplication {
                      function: PropertyAccess {
                       expression: Variable {
                        identifier: "pkgs",
                        position: (141, 30),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "writeText",
                          position: (141, 35),
                         },
                        ],
                       },
                       default: None,
                      },
                      arguments: [
                       String {
                        parts: [
                         Raw {
                          content: "cfssl-config.json",
                          position: (141, 46),
                         },
                        ],
                        position: (141, 45),
                       },
                       Parentheses {
                        expression: FunctionApplication {
                         function: PropertyAccess {
                          expression: Variable {
                           identifier: "builtins",
                           position: (141, 66),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "toJSON",
                             position: (141, 75),
                            },
                           ],
                          },
                          default: None,
                         },
                         arguments: [
                          Map {
                           bindings: [
                            Binding {
                             from: AttributePath {
                              parts: [
                               Raw {
                                content: "signing",
                                position: (142, 9),
                               },
                              ],
                             },
                             to: Map {
                              bindings: [
                               Binding {
                                from: AttributePath {
                                 parts: [
                                  Raw {
                                   content: "profiles",
                                   position: (143, 11),
                                  },
                                 ],
                                },
                                to: Map {
                                 bindings: [
                                  Binding {
                                   from: AttributePath {
                                    parts: [
                                     Raw {
                                      content: "default",
                                      position: (144, 13),
                                     },
                                    ],
                                   },
                                   to: Map {
                                    bindings: [
                                     Binding {
                                      from: AttributePath {
                                       parts: [
                                        Raw {
                                         content: "usages",
                                         position: (145, 15),
                                        },
                                       ],
                                      },
                                      to: List {
                                       elements: [
                                        String {
                                         parts: [
                                          Raw {
                                           content: "digital signature",
                                           position: (145, 26),
                                          },
                                         ],
                                         position: (145, 25),
                                        },
                                       ],
                                       position: (145, 24),
                                      },
                                     },
                                     Binding {
                                      from: AttributePath {
                                       parts: [
                                        Raw {
                                         content: "auth_key",
                                         position: (146, 15),
                                        },
                                       ],
                                      },
                                      to: String {
                                       parts: [
                                        Raw {
                                         content: "default",
                                         position: (146, 27),
                                        },
                                       ],
                                       position: (146, 26),
                                      },
                                     },
                                     Binding {
                                      from: AttributePath {
                                       parts: [
                                        Raw {
                                         content: "expiry",
                                         position: (147, 15),
                                        },
                                       ],
                                      },
                                      to: String {
                                       parts: [
                                        Raw {
                                         content: "720h",
                                         position: (147, 25),
                                        },
                                       ],
                                       position: (147, 24),
                                      },
                                     },
                                    ],
                                    recursive: false,
                                    position: (144, 23),
                                   },
                                  },
                                 ],
                                 recursive: false,
                                 position: (143, 22),
                                },
                               },
                              ],
                              recursive: false,
                              position: (142, 19),
                             },
                            },
                            Binding {
                             from: AttributePath {
                              parts: [
                               Raw {
                                content: "auth_keys",
                                position: (151, 9),
                               },
                              ],
                             },
                             to: Map {
                              bindings: [
                               Binding {
                                from: AttributePath {
                                 parts: [
                                  Raw {
                                   content: "default",
                                   position: (152, 11),
                                  },
                                 ],
                                },
                                to: Map {
                                 bindings: [
                                  Binding {
                                   from: AttributePath {
                                    parts: [
                                     Raw {
                                      content: "type",
                                      position: (153, 13),
                                     },
                                    ],
                                   },
                                   to: String {
                                    parts: [
                                     Raw {
                                      content: "standard",
                                      position: (153, 21),
                                     },
                                    ],
                                    position: (153, 20),
                                   },
                                  },
                                  Binding {
                                   from: AttributePath {
                                    parts: [
                                     Raw {
                                      content: "key",
                                      position: (154, 13),
                                     },
                                    ],
                                   },
                                   to: String {
                                    parts: [
                                     Raw {
                                      content: "file:",
                                      position: (154, 20),
                                     },
                                     Interpolation {
                                      expression: Variable {
                                       identifier: "cfsslAPITokenPath",
                                       position: (154, 27),
                                      },
                                     },
                                    ],
                                    position: (154, 19),
                                   },
                                  },
                                 ],
                                 recursive: false,
                                 position: (152, 21),
                                },
                               },
                              ],
                              recursive: false,
                              position: (151, 21),
                             },
                            },
                           ],
                           recursive: false,
                           position: (141, 82),
                          },
                         ],
                        },
                        position: (141, 65),
                       },
                      ],
                     },
                     position: (141, 29),
                    },
                   ],
                  },
                 },
                ],
                recursive: false,
                position: (136, 50),
               },
              ],
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "systemd",
                position: (160, 5),
               },
               Raw {
                content: "services",
                position: (160, 13),
               },
               Raw {
                content: "cfssl",
                position: (160, 22),
               },
               Raw {
                content: "preStart",
                position: (160, 28),
               },
              ],
             },
             to: With {
              expression: Variable {
               identifier: "pkgs",
               position: (160, 44),
              },
              target: With {
               expression: PropertyAccess {
                expression: Variable {
                 identifier: "config",
                 position: (160, 55),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (160, 62),
                  },
                  Raw {
                   content: "cfssl",
                   position: (160, 71),
                  },
                 ],
                },
                default: None,
               },
               target: FunctionApplication {
                function: Variable {
                 identifier: "mkIf",
                 position: (160, 78),
                },
                arguments: [
                 Parentheses {
                  expression: PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (160, 84),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "apiserver",
                      position: (160, 88),
                     },
                     Raw {
                      content: "enable",
                      position: (160, 98),
                     },
                    ],
                   },
                   default: None,
                  },
                  position: (160, 83),
                 },
                 Parentheses {
                  expression: FunctionApplication {
                   function: Variable {
                    identifier: "concatStringsSep",
                    position: (161, 6),
                   },
                   arguments: [
                    String {
                     parts: [
                      Raw {
                       content: "\n",
                       position: (161, 24),
                      },
                     ],
                     position: (161, 23),
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: "set -e",
                         position: (162, 8),
                        },
                       ],
                       position: (162, 7),
                      },
                      Parentheses {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "optionalString",
                         position: (163, 8),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (163, 23),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "genCfsslCACert",
                             position: (163, 27),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "if [ ! -f \"",
                            position: (164, 1),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (164, 22),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "caCertPathPrefix",
                                position: (164, 26),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: ".pem\" ]; then\n  ",
                            position: (164, 43),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfssl",
                             position: (165, 13),
                            },
                           },
                           Raw {
                            content: "/bin/cfssl genkey -initca ",
                            position: (165, 19),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "csrCA",
                             position: (165, 47),
                            },
                           },
                           Raw {
                            content: " | \\\n    ",
                            position: (165, 53),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfssl",
                             position: (166, 15),
                            },
                           },
                           Raw {
                            content: "/bin/cfssljson -bare ",
                            position: (166, 21),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (166, 44),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "caCertPathPrefix",
                                position: (166, 48),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: "\nfi\n",
                            position: (166, 65),
                           },
                          ],
                          position: (163, 42),
                         },
                        ],
                       },
                       position: (163, 7),
                      },
                      Parentheses {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "optionalString",
                         position: (169, 8),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (169, 23),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "genCfsslAPICerts",
                             position: (169, 27),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "if [ ! -f \"",
                            position: (170, 1),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "dataDir",
                             position: (170, 22),
                            },
                           },
                           Raw {
                            content: "/cfssl.pem\" ]; then\n  ",
                            position: (170, 30),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfssl",
                             position: (171, 13),
                            },
                           },
                           Raw {
                            content: "/bin/cfssl gencert -ca \"",
                            position: (171, 19),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (171, 45),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "caCertPathPrefix",
                                position: (171, 49),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: ".pem\" -ca-key \"",
                            position: (171, 66),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (171, 83),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "caCertPathPrefix",
                                position: (171, 87),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: "-key.pem\" ",
                            position: (171, 104),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "csrCfssl",
                             position: (171, 116),
                            },
                           },
                           Raw {
                            content: " | \\\n    ",
                            position: (171, 125),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfssl",
                             position: (172, 15),
                            },
                           },
                           Raw {
                            content: "/bin/cfssljson -bare ",
                            position: (172, 21),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfsslCertPathPrefix",
                             position: (172, 44),
                            },
                           },
                           Raw {
                            content: "\nfi\n",
                            position: (172, 64),
                           },
                          ],
                          position: (169, 44),
                         },
                        ],
                       },
                       position: (169, 7),
                      },
                      Parentheses {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "optionalString",
                         position: (175, 8),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (175, 23),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "genCfsslAPIToken",
                             position: (175, 27),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "if [ ! -f \"",
                            position: (176, 1),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfsslAPITokenPath",
                             position: (176, 22),
                            },
                           },
                           Raw {
                            content: "\" ]; then\n  head -c ",
                            position: (176, 40),
                           },
                           Interpolation {
                            expression: FunctionApplication {
                             function: Variable {
                              identifier: "toString",
                              position: (177, 21),
                             },
                             arguments: [
                              Parentheses {
                               expression: BinaryOperation {
                                operator: Division,
                                operands: [
                                 Variable {
                                  identifier: "cfsslAPITokenLength",
                                  position: (177, 31),
                                 },
                                 Int {
                                  value: 2,
                                  position: (177, 53),
                                 },
                                ],
                                position: (177, 51),
                               },
                               position: (177, 30),
                              },
                             ],
                            },
                           },
                           Raw {
                            content: " /dev/urandom | od -An -t x | tr -d ' ' >\"",
                            position: (177, 56),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfsslAPITokenPath",
                             position: (177, 100),
                            },
                           },
                           Raw {
                            content: "\"\nfi\nchown cfssl \"",
                            position: (177, 118),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfsslAPITokenPath",
                             position: (179, 24),
                            },
                           },
                           Raw {
                            content: "\" && chmod 400 \"",
                            position: (179, 42),
                           },
                           Interpolation {
                            expression: Variable {
                             identifier: "cfsslAPITokenPath",
                             position: (179, 60),
                            },
                           },
                           Raw {
                            content: "\"\n",
                            position: (179, 78),
                           },
                          ],
                          position: (175, 44),
                         },
                        ],
                       },
                       position: (175, 7),
                      },
                     ],
                     position: (161, 28),
                    },
                   ],
                  },
                  position: (161, 5),
                 },
                ],
               },
               position: (160, 50),
              },
              position: (160, 39),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "systemd",
                position: (182, 5),
               },
               Raw {
                content: "services",
                position: (182, 13),
               },
               Raw {
                content: "kube-certmgr-bootstrap",
                position: (182, 22),
               },
              ],
             },
             to: Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "description",
                   position: (183, 7),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "Kubernetes certmgr bootstrapper",
                   position: (183, 22),
                  },
                 ],
                 position: (183, 21),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "wantedBy",
                   position: (184, 7),
                  },
                 ],
                },
                to: List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "certmgr.service",
                     position: (184, 21),
                    },
                   ],
                   position: (184, 20),
                  },
                 ],
                 position: (184, 18),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "after",
                   position: (185, 7),
                  },
                 ],
                },
                to: List {
                 elements: [
                  String {
                   parts: [
                    Raw {
                     content: "cfssl.target",
                     position: (185, 18),
                    },
                   ],
                   position: (185, 17),
                  },
                 ],
                 position: (185, 15),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "script",
                   position: (186, 7),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "concatStringsSep",
                  position: (186, 16),
                 },
                 arguments: [
                  String {
                   parts: [
                    Raw {
                     content: "\n",
                     position: (186, 34),
                    },
                   ],
                   position: (186, 33),
                  },
                  List {
                   elements: [
                    String {
                     parts: [
                      Raw {
                       content: "set -e\n\n# If there's a cfssl (cert issuer) running locally, then don't rely on user to\n# manually paste it in place. Just symlink.\n# otherwise, create the target file, ready for users to insert the token\n\nmkdir -p \"$(dirname \"",
                       position: (187, 1),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (193, 32),
                       },
                      },
                      Raw {
                       content: "\")\"\nif [ -f \"",
                       position: (193, 52),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "cfsslAPITokenPath",
                        position: (194, 20),
                       },
                      },
                      Raw {
                       content: "\" ]; then\n  ln -fs \"",
                       position: (194, 38),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "cfsslAPITokenPath",
                        position: (195, 21),
                       },
                      },
                      Raw {
                       content: "\" \"",
                       position: (195, 39),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (195, 44),
                       },
                      },
                      Raw {
                       content: "\"\nelse\n  touch \"",
                       position: (195, 64),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (197, 20),
                       },
                      },
                      Raw {
                       content: "\" && chmod 600 \"",
                       position: (197, 40),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (197, 58),
                       },
                      },
                      Raw {
                       content: "\"\nfi\n",
                       position: (197, 78),
                      },
                     ],
                     position: (186, 39),
                    },
                    Parentheses {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "optionalString",
                       position: (200, 8),
                      },
                      arguments: [
                       Parentheses {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "cfg",
                          position: (200, 24),
                         },
                         attribute_path: AttributePath {
                          parts: [
                           Raw {
                            content: "pkiTrustOnBootstrap",
                            position: (200, 28),
                           },
                          ],
                         },
                         default: None,
                        },
                        position: (200, 23),
                       },
                       String {
                        parts: [
                         Raw {
                          content: "if [ ! -f \"",
                          position: (201, 1),
                         },
                         Interpolation {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "top",
                            position: (201, 22),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "caFile",
                              position: (201, 26),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: "\" ] || [ $(cat \"",
                          position: (201, 33),
                         },
                         Interpolation {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "top",
                            position: (201, 51),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "caFile",
                              position: (201, 55),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: "\" | wc -c) -lt 1 ]; then\n  ",
                          position: (201, 62),
                         },
                         Interpolation {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "pkgs",
                            position: (202, 13),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "curl",
                              position: (202, 18),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: "/bin/curl --fail-early -f -kd '{}' ",
                          position: (202, 23),
                         },
                         Interpolation {
                          expression: Variable {
                           identifier: "remote",
                           position: (202, 60),
                          },
                         },
                         Raw {
                          content: "/api/v1/cfssl/info | \\\n    ",
                          position: (202, 67),
                         },
                         Interpolation {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "pkgs",
                            position: (203, 15),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "cfssl",
                              position: (203, 20),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: "/bin/cfssljson -stdout >",
                          position: (203, 26),
                         },
                         Interpolation {
                          expression: PropertyAccess {
                           expression: Variable {
                            identifier: "top",
                            position: (203, 52),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "caFile",
                              position: (203, 56),
                             },
                            ],
                           },
                           default: None,
                          },
                         },
                         Raw {
                          content: "\nfi\n",
                          position: (203, 63),
                         },
                        ],
                        position: (200, 49),
                       },
                      ],
                     },
                     position: (200, 7),
                    },
                   ],
                   position: (186, 38),
                  },
                 ],
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "serviceConfig",
                   position: (207, 7),
                  },
                 ],
                },
                to: Map {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "RestartSec",
                      position: (208, 9),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "10s",
                      position: (208, 23),
                     },
                    ],
                    position: (208, 22),
                   },
                  },
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "Restart",
                      position: (209, 9),
                     },
                    ],
                   },
                   to: String {
                    parts: [
                     Raw {
                      content: "on-failure",
                      position: (209, 20),
                     },
                    ],
                    position: (209, 19),
                   },
                  },
                 ],
                 recursive: false,
                 position: (207, 23),
                },
               },
              ],
              recursive: false,
              position: (182, 47),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "services",
                position: (213, 5),
               },
               Raw {
                content: "certmgr",
                position: (213, 14),
               },
              ],
             },
             to: Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "enable",
                   position: (214, 7),
                  },
                 ],
                },
                to: Variable {
                 identifier: "true",
                 position: (214, 16),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "package",
                   position: (215, 7),
                  },
                 ],
                },
                to: PropertyAccess {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (215, 17),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "certmgr-selfsigned",
                    position: (215, 22),
                   },
                  ],
                 },
                 default: None,
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "svcManager",
                   position: (216, 7),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "command",
                   position: (216, 21),
                  },
                 ],
                 position: (216, 20),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "specs",
                   position: (217, 7),
                  },
                 ],
                },
                to: LetIn {
                 bindings: [
                  Binding {
                   from: AttributePath {
                    parts: [
                     Raw {
                      content: "mkSpec",
                      position: (219, 11),
                     },
                    ],
                   },
                   to: Function {
                    argument: Simple {
                     identifier: "_",
                    },
                    definition: Function {
                     argument: Simple {
                      identifier: "cert",
                     },
                     definition: Map {
                      bindings: [
                       Inherit {
                        from: Some(
                         Variable {
                          identifier: "cert",
                          position: (220, 22),
                         },
                        ),
                        attributes: [
                         Raw {
                          content: "action",
                          position: (220, 28),
                         },
                        ],
                       },
                       Binding {
                        from: AttributePath {
                         parts: [
                          Raw {
                           content: "authority",
                           position: (221, 13),
                          },
                         ],
                        },
                        to: Map {
                         bindings: [
                          Inherit {
                           from: None,
                           attributes: [
                            Raw {
                             content: "remote",
                             position: (222, 23),
                            },
                           ],
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "file",
                              position: (223, 15),
                             },
                             Raw {
                              content: "path",
                              position: (223, 20),
                             },
                            ],
                           },
                           to: PropertyAccess {
                            expression: Variable {
                             identifier: "cert",
                             position: (223, 27),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "caCert",
                               position: (223, 32),
                              },
                             ],
                            },
                            default: None,
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "root_ca",
                              position: (224, 15),
                             },
                            ],
                           },
                           to: PropertyAccess {
                            expression: Variable {
                             identifier: "cert",
                             position: (224, 25),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "caCert",
                               position: (224, 30),
                              },
                             ],
                            },
                            default: None,
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "profile",
                              position: (225, 15),
                             },
                            ],
                           },
                           to: String {
                            parts: [
                             Raw {
                              content: "default",
                              position: (225, 26),
                             },
                            ],
                            position: (225, 25),
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "auth_key_file",
                              position: (226, 15),
                             },
                            ],
                           },
                           to: Variable {
                            identifier: "certmgrAPITokenPath",
                            position: (226, 31),
                           },
                          },
                         ],
                         recursive: false,
                         position: (221, 25),
                        },
                       },
                       Binding {
                        from: AttributePath {
                         parts: [
                          Raw {
                           content: "certificate",
                           position: (228, 13),
                          },
                         ],
                        },
                        to: Map {
                         bindings: [
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "path",
                              position: (229, 15),
                             },
                            ],
                           },
                           to: PropertyAccess {
                            expression: Variable {
                             identifier: "cert",
                             position: (229, 22),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "cert",
                               position: (229, 27),
                              },
                             ],
                            },
                            default: None,
                           },
                          },
                         ],
                         recursive: false,
                         position: (228, 27),
                        },
                       },
                       Binding {
                        from: AttributePath {
                         parts: [
                          Raw {
                           content: "private_key",
                           position: (231, 13),
                          },
                         ],
                        },
                        to: PropertyAccess {
                         expression: Variable {
                          identifier: "cert",
                          position: (231, 27),
                         },
                         attribute_path: AttributePath {
                          parts: [
                           Raw {
                            content: "privateKeyOptions",
                            position: (231, 32),
                           },
                          ],
                         },
                         default: None,
                        },
                       },
                       Binding {
                        from: AttributePath {
                         parts: [
                          Raw {
                           content: "request",
                           position: (232, 13),
                          },
                         ],
                        },
                        to: Map {
                         bindings: [
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "hosts",
                              position: (233, 15),
                             },
                            ],
                           },
                           to: BinaryOperation {
                            operator: Concatenation,
                            operands: [
                             List {
                              elements: [
                               PropertyAccess {
                                expression: Variable {
                                 identifier: "cert",
                                 position: (233, 24),
                                },
                                attribute_path: AttributePath {
                                 parts: [
                                  Raw {
                                   content: "CN",
                                   position: (233, 29),
                                  },
                                 ],
                                },
                                default: None,
                               },
                              ],
                              position: (233, 23),
                             },
                             PropertyAccess {
                              expression: Variable {
                               identifier: "cert",
                               position: (233, 36),
                              },
                              attribute_path: AttributePath {
                               parts: [
                                Raw {
                                 content: "hosts",
                                 position: (233, 41),
                                },
                               ],
                              },
                              default: None,
                             },
                            ],
                            position: (233, 33),
                           },
                          },
                          Inherit {
                           from: Some(
                            Variable {
                             identifier: "cert",
                             position: (234, 24),
                            },
                           ),
                           attributes: [
                            Raw {
                             content: "CN",
                             position: (234, 30),
                            },
                           ],
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "key",
                              position: (235, 15),
                             },
                            ],
                           },
                           to: Map {
                            bindings: [
                             Binding {
                              from: AttributePath {
                               parts: [
                                Raw {
                                 content: "algo",
                                 position: (236, 17),
                                },
                               ],
                              },
                              to: String {
                               parts: [
                                Raw {
                                 content: "rsa",
                                 position: (236, 25),
                                },
                               ],
                               position: (236, 24),
                              },
                             },
                             Binding {
                              from: AttributePath {
                               parts: [
                                Raw {
                                 content: "size",
                                 position: (237, 17),
                                },
                               ],
                              },
                              to: Int {
                               value: 2048,
                               position: (237, 24),
                              },
                             },
                            ],
                            recursive: false,
                            position: (235, 21),
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "names",
                              position: (239, 15),
                             },
                            ],
                           },
                           to: List {
                            elements: [
                             PropertyAccess {
                              expression: Variable {
                               identifier: "cert",
                               position: (239, 25),
                              },
                              attribute_path: AttributePath {
                               parts: [
                                Raw {
                                 content: "fields",
                                 position: (239, 30),
                                },
                               ],
                              },
                              default: None,
                             },
                            ],
                            position: (239, 23),
                           },
                          },
                         ],
                         recursive: false,
                         position: (232, 23),
                        },
                       },
                      ],
                      recursive: false,
                      position: (219, 29),
                     },
                     position: (219, 23),
                    },
                    position: (219, 20),
                   },
                  },
                 ],
                 target: FunctionApplication {
                  function: Variable {
                   identifier: "mapAttrs",
                   position: (243, 11),
                  },
                  arguments: [
                   Variable {
                    identifier: "mkSpec",
                    position: (243, 20),
                   },
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (243, 27),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "certs",
                       position: (243, 31),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                 position: (218, 9),
                },
               },
              ],
              recursive: false,
              position: (213, 24),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "systemd",
                position: (251, 7),
               },
               Raw {
                content: "services",
                position: (251, 15),
               },
               Raw {
                content: "kube-addon-manager",
                position: (251, 24),
               },
              ],
             },
             to: FunctionApplication {
              function: Variable {
               identifier: "mkIf",
               position: (251, 45),
              },
              arguments: [
               PropertyAccess {
                expression: Variable {
                 identifier: "top",
                 position: (251, 50),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "addonManager",
                   position: (251, 54),
                  },
                  Raw {
                   content: "enable",
                   position: (251, 67),
                  },
                 ],
                },
                default: None,
               },
               Parentheses {
                expression: FunctionApplication {
                 function: Variable {
                  identifier: "mkMerge",
                  position: (251, 75),
                 },
                 arguments: [
                  List {
                   elements: [
                    Map {
                     bindings: [
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "environment",
                          position: (252, 9),
                         },
                         Raw {
                          content: "KUBECONFIG",
                          position: (252, 21),
                         },
                        ],
                       },
                       to: With {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "cfg",
                          position: (252, 39),
                         },
                         attribute_path: AttributePath {
                          parts: [
                           Raw {
                            content: "certs",
                            position: (252, 43),
                           },
                           Raw {
                            content: "addonManager",
                            position: (252, 49),
                           },
                          ],
                         },
                         default: None,
                        },
                        target: FunctionApplication {
                         function: PropertyAccess {
                          expression: Variable {
                           identifier: "top",
                           position: (253, 11),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "lib",
                             position: (253, 15),
                            },
                            Raw {
                             content: "mkKubeConfig",
                             position: (253, 19),
                            },
                           ],
                          },
                          default: None,
                         },
                         arguments: [
                          String {
                           parts: [
                            Raw {
                             content: "addon-manager",
                             position: (253, 33),
                            },
                           ],
                           position: (253, 32),
                          },
                          Map {
                           bindings: [
                            Binding {
                             from: AttributePath {
                              parts: [
                               Raw {
                                content: "server",
                                position: (254, 13),
                               },
                              ],
                             },
                             to: PropertyAccess {
                              expression: Variable {
                               identifier: "top",
                               position: (254, 22),
                              },
                              attribute_path: AttributePath {
                               parts: [
                                Raw {
                                 content: "apiserverAddress",
                                 position: (254, 26),
                                },
                               ],
                              },
                              default: None,
                             },
                            },
                            Binding {
                             from: AttributePath {
                              parts: [
                               Raw {
                                content: "certFile",
                                position: (255, 13),
                               },
                              ],
                             },
                             to: Variable {
                              identifier: "cert",
                              position: (255, 24),
                             },
                            },
                            Binding {
                             from: AttributePath {
                              parts: [
                               Raw {
                                content: "keyFile",
                                position: (256, 13),
                               },
                              ],
                             },
                             to: Variable {
                              identifier: "key",
                              position: (256, 23),
                             },
                            },
                           ],
                           recursive: false,
                           position: (253, 48),
                          },
                         ],
                        },
                        position: (252, 34),
                       },
                      },
                     ],
                     recursive: false,
                     position: (251, 84),
                    },
                    Parentheses {
                     expression: FunctionApplication {
                      function: Variable {
                       identifier: "optionalAttrs",
                       position: (260, 10),
                      },
                      arguments: [
                       Parentheses {
                        expression: BinaryOperation {
                         operator: NotEqualTo,
                         operands: [
                          PropertyAccess {
                           expression: Variable {
                            identifier: "top",
                            position: (260, 25),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "addonManager",
                              position: (260, 29),
                             },
                             Raw {
                              content: "bootstrapAddons",
                              position: (260, 42),
                             },
                            ],
                           },
                           default: None,
                          },
                          Map {
                           bindings: [],
                           recursive: false,
                           position: (260, 61),
                          },
                         ],
                         position: (260, 58),
                        },
                        position: (260, 24),
                       },
                       Map {
                        bindings: [
                         Binding {
                          from: AttributePath {
                           parts: [
                            Raw {
                             content: "serviceConfig",
                             position: (261, 11),
                            },
                            Raw {
                             content: "PermissionsStartOnly",
                             position: (261, 25),
                            },
                           ],
                          },
                          to: Variable {
                           identifier: "true",
                           position: (261, 48),
                          },
                         },
                         Binding {
                          from: AttributePath {
                           parts: [
                            Raw {
                             content: "preStart",
                             position: (262, 11),
                            },
                           ],
                          },
                          to: With {
                           expression: Variable {
                            identifier: "pkgs",
                            position: (262, 27),
                           },
                           target: LetIn {
                            bindings: [
                             Binding {
                              from: AttributePath {
                               parts: [
                                Raw {
                                 content: "files",
                                 position: (264, 13),
                                },
                               ],
                              },
                              to: FunctionApplication {
                               function: Variable {
                                identifier: "mapAttrsToList",
                                position: (264, 21),
                               },
                               arguments: [
                                Parentheses {
                                 expression: Function {
                                  argument: Simple {
                                   identifier: "n",
                                  },
                                  definition: Function {
                                   argument: Simple {
                                    identifier: "v",
                                   },
                                   definition: FunctionApplication {
                                    function: Variable {
                                     identifier: "writeText",
                                     position: (264, 43),
                                    },
                                    arguments: [
                                     String {
                                      parts: [
                                       Interpolation {
                                        expression: Variable {
                                         identifier: "n",
                                         position: (264, 56),
                                        },
                                       },
                                       Raw {
                                        content: ".json",
                                        position: (264, 58),
                                       },
                                      ],
                                      position: (264, 53),
                                     },
                                     Parentheses {
                                      expression: FunctionApplication {
                                       function: PropertyAccess {
                                        expression: Variable {
                                         identifier: "builtins",
                                         position: (264, 66),
                                        },
                                        attribute_path: AttributePath {
                                         parts: [
                                          Raw {
                                           content: "toJSON",
                                           position: (264, 75),
                                          },
                                         ],
                                        },
                                        default: None,
                                       },
                                       arguments: [
                                        Variable {
                                         identifier: "v",
                                         position: (264, 82),
                                        },
                                       ],
                                      },
                                      position: (264, 65),
                                     },
                                    ],
                                   },
                                   position: (264, 40),
                                  },
                                  position: (264, 37),
                                 },
                                 position: (264, 36),
                                },
                                PropertyAccess {
                                 expression: Variable {
                                  identifier: "top",
                                  position: (265, 15),
                                 },
                                 attribute_path: AttributePath {
                                  parts: [
                                   Raw {
                                    content: "addonManager",
                                    position: (265, 19),
                                   },
                                   Raw {
                                    content: "bootstrapAddons",
                                    position: (265, 32),
                                   },
                                  ],
                                 },
                                 default: None,
                                },
                               ],
                              },
                             },
                            ],
                            target: String {
                             parts: [
                              Raw {
                               content: "export KUBECONFIG=",
                               position: (268, 1),
                              },
                              Interpolation {
                               expression: Variable {
                                identifier: "clusterAdminKubeconfig",
                                position: (268, 33),
                               },
                              },
                              Raw {
                               content: "\n",
                               position: (268, 56),
                              },
                              Interpolation {
                               expression: Variable {
                                identifier: "kubernetes",
                                position: (269, 15),
                               },
                              },
                              Raw {
                               content: "/bin/kubectl apply -f ",
                               position: (269, 26),
                              },
                              Interpolation {
                               expression: FunctionApplication {
                                function: Variable {
                                 identifier: "concatStringsSep",
                                 position: (269, 50),
                                },
                                arguments: [
                                 String {
                                  parts: [
                                   Raw {
                                    content: " \\\n -f ",
                                    position: (269, 68),
                                   },
                                  ],
                                  position: (269, 67),
                                 },
                                 Variable {
                                  identifier: "files",
                                  position: (269, 79),
                                 },
                                ],
                               },
                              },
                              Raw {
                               content: "\n",
                               position: (269, 85),
                              },
                             ],
                             position: (267, 11),
                            },
                            position: (263, 11),
                           },
                           position: (262, 22),
                          },
                         },
                        ],
                        recursive: false,
                        position: (260, 65),
                       },
                      ],
                     },
                     position: (260, 9),
                    },
                   ],
                   position: (251, 83),
                  },
                 ],
                },
                position: (251, 74),
               },
              ],
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "environment",
                position: (273, 7),
               },
               Raw {
                content: "etc",
                position: (273, 19),
               },
               Interpolation {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (273, 25),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "etcClusterAdminKubeconfig",
                    position: (273, 29),
                   },
                  ],
                 },
                 default: None,
                },
               },
               Raw {
                content: "source",
                position: (273, 56),
               },
              ],
             },
             to: FunctionApplication {
              function: Variable {
               identifier: "mkIf",
               position: (273, 65),
              },
              arguments: [
               Parentheses {
                expression: UnaryOperation {
                 operator: Not,
                 operand: FunctionApplication {
                  function: Variable {
                   identifier: "isNull",
                   position: (273, 72),
                  },
                  arguments: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (273, 79),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "etcClusterAdminKubeconfig",
                       position: (273, 83),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                 position: (273, 71),
                },
                position: (273, 70),
               },
               Variable {
                identifier: "clusterAdminKubeconfig",
                position: (274, 9),
               },
              ],
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "environment",
                position: (276, 7),
               },
               Raw {
                content: "systemPackages",
                position: (276, 19),
               },
              ],
             },
             to: FunctionApplication {
              function: Variable {
               identifier: "mkIf",
               position: (276, 36),
              },
              arguments: [
               Parentheses {
                expression: BinaryOperation {
                 operator: LogicalOr,
                 operands: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (276, 42),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "kubelet",
                      position: (276, 46),
                     },
                     Raw {
                      content: "enable",
                      position: (276, 54),
                     },
                    ],
                   },
                   default: None,
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (276, 64),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "proxy",
                      position: (276, 68),
                     },
                     Raw {
                      content: "enable",
                      position: (276, 74),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (276, 61),
                },
                position: (276, 41),
               },
               List {
                elements: [
                 Parentheses {
                  expression: FunctionApplication {
                   function: PropertyAccess {
                    expression: Variable {
                     identifier: "pkgs",
                     position: (277, 8),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "writeScriptBin",
                       position: (277, 13),
                      },
                     ],
                    },
                    default: None,
                   },
                   arguments: [
                    String {
                     parts: [
                      Raw {
                       content: "nixos-kubernetes-node-join",
                       position: (277, 29),
                      },
                     ],
                     position: (277, 28),
                    },
                    String {
                     parts: [
                      Raw {
                       content: "set -e\nexec 1>&2\n\nif [ $# -gt 0 ]; then\n  echo \"Usage: $(basename $0)\"\n  echo \"\"\n  echo \"No args. Apitoken must be provided on stdin.\"\n  echo \"To get the apitoken, execute: 'sudo cat ",
                       position: (278, 1),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (285, 59),
                       },
                      },
                      Raw {
                       content: "' on the master node.\"\n  exit 1\nfi\n\nif [ $(id -u) != 0 ]; then\n  echo \"Run as root please.\"\n  exit 1\nfi\n\nread -r token\nif [ ",
                       position: (285, 79),
                      },
                      Raw {
                       content: "$",
                       position: (295, 14),
                      },
                      Raw {
                       content: "{#token} != ",
                       position: (295, 17),
                      },
                      Interpolation {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "toString",
                         position: (295, 31),
                        },
                        arguments: [
                         Variable {
                          identifier: "cfsslAPITokenLength",
                          position: (295, 40),
                         },
                        ],
                       },
                      },
                      Raw {
                       content: " ]; then\n  echo \"Token must be of length ",
                       position: (295, 60),
                      },
                      Interpolation {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "toString",
                         position: (296, 43),
                        },
                        arguments: [
                         Variable {
                          identifier: "cfsslAPITokenLength",
                          position: (296, 52),
                         },
                        ],
                       },
                      },
                      Raw {
                       content: ".\"\n  exit 1\nfi\n\necho $token > ",
                       position: (296, 72),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (300, 25),
                       },
                      },
                      Raw {
                       content: "\nchmod 600 ",
                       position: (300, 45),
                      },
                      Interpolation {
                       expression: Variable {
                        identifier: "certmgrAPITokenPath",
                        position: (301, 21),
                       },
                      },
                      Raw {
                       content: "\n\necho \"Restarting certmgr...\" >&1\nsystemctl restart certmgr\n\necho \"Waiting for certs to appear...\" >&1\n\n",
                       position: (301, 41),
                      },
                      Interpolation {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "optionalString",
                         position: (308, 11),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "top",
                           position: (308, 26),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "kubelet",
                             position: (308, 30),
                            },
                            Raw {
                             content: "enable",
                             position: (308, 38),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "while [ ! -f ",
                            position: (309, 1),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (309, 26),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "certs",
                                position: (309, 30),
                               },
                               Raw {
                                content: "kubelet",
                                position: (309, 36),
                               },
                               Raw {
                                content: "cert",
                                position: (309, 44),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: " ]; do sleep 1; done\necho \"Restarting kubelet...\" >&1\nsystemctl restart kubelet\n",
                            position: (309, 49),
                           },
                          ],
                          position: (308, 45),
                         },
                        ],
                       },
                      },
                      Raw {
                       content: "\n\n",
                       position: (312, 12),
                      },
                      Interpolation {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "optionalString",
                         position: (314, 11),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "top",
                           position: (314, 26),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "proxy",
                             position: (314, 30),
                            },
                            Raw {
                             content: "enable",
                             position: (314, 36),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "while [ ! -f ",
                            position: (315, 1),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (315, 26),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "certs",
                                position: (315, 30),
                               },
                               Raw {
                                content: "kubeProxyClient",
                                position: (315, 36),
                               },
                               Raw {
                                content: "cert",
                                position: (315, 52),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: " ]; do sleep 1; done\necho \"Restarting kube-proxy...\" >&1\nsystemctl restart kube-proxy\n",
                            position: (315, 57),
                           },
                          ],
                          position: (314, 43),
                         },
                        ],
                       },
                      },
                      Raw {
                       content: "\n\n",
                       position: (318, 12),
                      },
                      Interpolation {
                       expression: FunctionApplication {
                        function: Variable {
                         identifier: "optionalString",
                         position: (320, 11),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "top",
                           position: (320, 26),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "flannel",
                             position: (320, 30),
                            },
                            Raw {
                             content: "enable",
                             position: (320, 38),
                            },
                           ],
                          },
                          default: None,
                         },
                         String {
                          parts: [
                           Raw {
                            content: "while [ ! -f ",
                            position: (321, 1),
                           },
                           Interpolation {
                            expression: PropertyAccess {
                             expression: Variable {
                              identifier: "cfg",
                              position: (321, 26),
                             },
                             attribute_path: AttributePath {
                              parts: [
                               Raw {
                                content: "certs",
                                position: (321, 30),
                               },
                               Raw {
                                content: "flannelClient",
                                position: (321, 36),
                               },
                               Raw {
                                content: "cert",
                                position: (321, 50),
                               },
                              ],
                             },
                             default: None,
                            },
                           },
                           Raw {
                            content: " ]; do sleep 1; done\necho \"Restarting flannel...\" >&1\nsystemctl restart flannel\n",
                            position: (321, 55),
                           },
                          ],
                          position: (320, 45),
                         },
                        ],
                       },
                      },
                      Raw {
                       content: "\n\necho \"Node joined succesfully\"\n",
                       position: (324, 12),
                      },
                     ],
                     position: (277, 57),
                    },
                   ],
                  },
                  position: (277, 7),
                 },
                ],
                position: (276, 82),
               },
              ],
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "services",
                position: (331, 7),
               },
               Raw {
                content: "etcd",
                position: (331, 16),
               },
              ],
             },
             to: With {
              expression: PropertyAccess {
               expression: Variable {
                identifier: "cfg",
                position: (331, 28),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "certs",
                  position: (331, 32),
                 },
                 Raw {
                  content: "etcd",
                  position: (331, 38),
                 },
                ],
               },
               default: None,
              },
              target: Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "listenClientUrls",
                    position: (332, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "https://127.0.0.1:2379",
                      position: (332, 30),
                     },
                    ],
                    position: (332, 29),
                   },
                  ],
                  position: (332, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "listenPeerUrls",
                    position: (333, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "https://127.0.0.1:2380",
                      position: (333, 28),
                     },
                    ],
                    position: (333, 27),
                   },
                  ],
                  position: (333, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "advertiseClientUrls",
                    position: (334, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "https://etcd.local:2379",
                      position: (334, 33),
                     },
                    ],
                    position: (334, 32),
                   },
                  ],
                  position: (334, 31),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "initialCluster",
                    position: (335, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Interpolation {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "top",
                        position: (335, 30),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "masterAddress",
                          position: (335, 34),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Raw {
                      content: "=https://etcd.local:2380",
                      position: (335, 48),
                     },
                    ],
                    position: (335, 27),
                   },
                  ],
                  position: (335, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "initialAdvertisePeerUrls",
                    position: (336, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   String {
                    parts: [
                     Raw {
                      content: "https://etcd.local:2380",
                      position: (336, 38),
                     },
                    ],
                    position: (336, 37),
                   },
                  ],
                  position: (336, 36),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "certFile",
                    position: (337, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: Variable {
                   identifier: "mkDefault",
                   position: (337, 20),
                  },
                  arguments: [
                   Variable {
                    identifier: "cert",
                    position: (337, 30),
                   },
                  ],
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "keyFile",
                    position: (338, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: Variable {
                   identifier: "mkDefault",
                   position: (338, 19),
                  },
                  arguments: [
                   Variable {
                    identifier: "key",
                    position: (338, 29),
                   },
                  ],
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "trustedCaFile",
                    position: (339, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: Variable {
                   identifier: "mkDefault",
                   position: (339, 25),
                  },
                  arguments: [
                   Variable {
                    identifier: "caCert",
                    position: (339, 35),
                   },
                  ],
                 },
                },
               ],
               recursive: false,
               position: (331, 44),
              },
              position: (331, 23),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "networking",
                position: (341, 7),
               },
               Raw {
                content: "extraHosts",
                position: (341, 18),
               },
              ],
             },
             to: FunctionApplication {
              function: Variable {
               identifier: "mkIf",
               position: (341, 31),
              },
              arguments: [
               Parentheses {
                expression: PropertyAccess {
                 expression: Variable {
                  identifier: "config",
                  position: (341, 37),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "services",
                    position: (341, 44),
                   },
                   Raw {
                    content: "etcd",
                    position: (341, 53),
                   },
                   Raw {
                    content: "enable",
                    position: (341, 58),
                   },
                  ],
                 },
                 default: None,
                },
                position: (341, 36),
               },
               String {
                parts: [
                 Raw {
                  content: "127.0.0.1 etcd.",
                  position: (342, 1),
                 },
                 Interpolation {
                  expression: PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (342, 26),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "addons",
                      position: (342, 30),
                     },
                     Raw {
                      content: "dns",
                      position: (342, 37),
                     },
                     Raw {
                      content: "clusterDomain",
                      position: (342, 41),
                     },
                    ],
                   },
                   default: None,
                  },
                 },
                 Raw {
                  content: " etcd.local\n",
                  position: (342, 55),
                 },
                ],
                position: (341, 66),
               },
              ],
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "services",
                position: (345, 7),
               },
               Raw {
                content: "flannel",
                position: (345, 16),
               },
              ],
             },
             to: With {
              expression: PropertyAccess {
               expression: Variable {
                identifier: "cfg",
                position: (345, 31),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "certs",
                  position: (345, 35),
                 },
                 Raw {
                  content: "flannelClient",
                  position: (345, 41),
                 },
                ],
               },
               default: None,
              },
              target: Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "kubeconfig",
                    position: (346, 9),
                   },
                  ],
                 },
                 to: FunctionApplication {
                  function: PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (346, 22),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "lib",
                      position: (346, 26),
                     },
                     Raw {
                      content: "mkKubeConfig",
                      position: (346, 30),
                     },
                    ],
                   },
                   default: None,
                  },
                  arguments: [
                   String {
                    parts: [
                     Raw {
                      content: "flannel",
                      position: (346, 44),
                     },
                    ],
                    position: (346, 43),
                   },
                   Map {
                    bindings: [
                     Binding {
                      from: AttributePath {
                       parts: [
                        Raw {
                         content: "server",
                         position: (347, 11),
                        },
                       ],
                      },
                      to: PropertyAccess {
                       expression: Variable {
                        identifier: "top",
                        position: (347, 20),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "apiserverAddress",
                          position: (347, 24),
                         },
                        ],
                       },
                       default: None,
                      },
                     },
                     Binding {
                      from: AttributePath {
                       parts: [
                        Raw {
                         content: "certFile",
                         position: (348, 11),
                        },
                       ],
                      },
                      to: Variable {
                       identifier: "cert",
                       position: (348, 22),
                      },
                     },
                     Binding {
                      from: AttributePath {
                       parts: [
                        Raw {
                         content: "keyFile",
                         position: (349, 11),
                        },
                       ],
                      },
                      to: Variable {
                       identifier: "key",
                       position: (349, 21),
                      },
                     },
                    ],
                    recursive: false,
                    position: (346, 53),
                   },
                  ],
                 },
                },
               ],
               recursive: false,
               position: (345, 56),
              },
              position: (345, 26),
             },
            },
            Binding {
             from: AttributePath {
              parts: [
               Raw {
                content: "services",
                position: (353, 7),
               },
               Raw {
                content: "kubernetes",
                position: (353, 16),
               },
              ],
             },
             to: Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "apiserver",
                   position: (355, 9),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "mkIf",
                  position: (355, 21),
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (355, 26),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "apiserver",
                      position: (355, 30),
                     },
                     Raw {
                      content: "enable",
                      position: (355, 40),
                     },
                    ],
                   },
                   default: None,
                  },
                  Parentheses {
                   expression: With {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (355, 53),
                     },
                     attribute_path: AttributePath {
                      parts: [
                       Raw {
                        content: "certs",
                        position: (355, 57),
                       },
                       Raw {
                        content: "apiServer",
                        position: (355, 63),
                       },
                      ],
                     },
                     default: None,
                    },
                    target: Map {
                     bindings: [
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "etcd",
                          position: (356, 11),
                         },
                        ],
                       },
                       to: With {
                        expression: PropertyAccess {
                         expression: Variable {
                          identifier: "cfg",
                          position: (356, 23),
                         },
                         attribute_path: AttributePath {
                          parts: [
                           Raw {
                            content: "certs",
                            position: (356, 27),
                           },
                           Raw {
                            content: "apiserverEtcdClient",
                            position: (356, 33),
                           },
                          ],
                         },
                         default: None,
                        },
                        target: Map {
                         bindings: [
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "servers",
                              position: (357, 13),
                             },
                            ],
                           },
                           to: List {
                            elements: [
                             String {
                              parts: [
                               Raw {
                                content: "https://etcd.local:2379",
                                position: (357, 25),
                               },
                              ],
                              position: (357, 24),
                             },
                            ],
                            position: (357, 23),
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "certFile",
                              position: (358, 13),
                             },
                            ],
                           },
                           to: FunctionApplication {
                            function: Variable {
                             identifier: "mkDefault",
                             position: (358, 24),
                            },
                            arguments: [
                             Variable {
                              identifier: "cert",
                              position: (358, 34),
                             },
                            ],
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "keyFile",
                              position: (359, 13),
                             },
                            ],
                           },
                           to: FunctionApplication {
                            function: Variable {
                             identifier: "mkDefault",
                             position: (359, 23),
                            },
                            arguments: [
                             Variable {
                              identifier: "key",
                              position: (359, 33),
                             },
                            ],
                           },
                          },
                          Binding {
                           from: AttributePath {
                            parts: [
                             Raw {
                              content: "caFile",
                              position: (360, 13),
                             },
                            ],
                           },
                           to: FunctionApplication {
                            function: Variable {
                             identifier: "mkDefault",
                             position: (360, 22),
                            },
                            arguments: [
                             Variable {
                              identifier: "caCert",
                              position: (360, 32),
                             },
                            ],
                           },
                          },
                         ],
                         recursive: false,
                         position: (356, 54),
                        },
                        position: (356, 18),
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "clientCaFile",
                          position: (362, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (362, 26),
                        },
                        arguments: [
                         Variable {
                          identifier: "caCert",
                          position: (362, 36),
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "tlsCertFile",
                          position: (363, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (363, 25),
                        },
                        arguments: [
                         Variable {
                          identifier: "cert",
                          position: (363, 35),
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "tlsKeyFile",
                          position: (364, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (364, 24),
                        },
                        arguments: [
                         Variable {
                          identifier: "key",
                          position: (364, 34),
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "serviceAccountKeyFile",
                          position: (365, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (365, 35),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (365, 45),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "certs",
                             position: (365, 49),
                            },
                            Raw {
                             content: "serviceAccount",
                             position: (365, 55),
                            },
                            Raw {
                             content: "cert",
                             position: (365, 70),
                            },
                           ],
                          },
                          default: None,
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "serviceAccountSigningKeyFile",
                          position: (366, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (366, 42),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (366, 52),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "certs",
                             position: (366, 56),
                            },
                            Raw {
                             content: "serviceAccount",
                             position: (366, 62),
                            },
                            Raw {
                             content: "key",
                             position: (366, 77),
                            },
                           ],
                          },
                          default: None,
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "kubeletClientCaFile",
                          position: (367, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (367, 33),
                        },
                        arguments: [
                         Variable {
                          identifier: "caCert",
                          position: (367, 43),
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "kubeletClientCertFile",
                          position: (368, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (368, 35),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (368, 45),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "certs",
                             position: (368, 49),
                            },
                            Raw {
                             content: "apiserverKubeletClient",
                             position: (368, 55),
                            },
                            Raw {
                             content: "cert",
                             position: (368, 78),
                            },
                           ],
                          },
                          default: None,
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "kubeletClientKeyFile",
                          position: (369, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (369, 34),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (369, 44),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "certs",
                             position: (369, 48),
                            },
                            Raw {
                             content: "apiserverKubeletClient",
                             position: (369, 54),
                            },
                            Raw {
                             content: "key",
                             position: (369, 77),
                            },
                           ],
                          },
                          default: None,
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "proxyClientCertFile",
                          position: (370, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (370, 33),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (370, 43),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "certs",
                             position: (370, 47),
                            },
                            Raw {
                             content: "apiserverProxyClient",
                             position: (370, 53),
                            },
                            Raw {
                             content: "cert",
                             position: (370, 74),
                            },
                           ],
                          },
                          default: None,
                         },
                        ],
                       },
                      },
                      Binding {
                       from: AttributePath {
                        parts: [
                         Raw {
                          content: "proxyClientKeyFile",
                          position: (371, 11),
                         },
                        ],
                       },
                       to: FunctionApplication {
                        function: Variable {
                         identifier: "mkDefault",
                         position: (371, 32),
                        },
                        arguments: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (371, 42),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "certs",
                             position: (371, 46),
                            },
                            Raw {
                             content: "apiserverProxyClient",
                             position: (371, 52),
                            },
                            Raw {
                             content: "key",
                             position: (371, 73),
                            },
                           ],
                          },
                          default: None,
                         },
                        ],
                       },
                      },
                     ],
                     recursive: false,
                     position: (355, 74),
                    },
                    position: (355, 48),
                   },
                   position: (355, 47),
                  },
                 ],
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "controllerManager",
                   position: (373, 9),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "mkIf",
                  position: (373, 29),
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (373, 34),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "controllerManager",
                      position: (373, 38),
                     },
                     Raw {
                      content: "enable",
                      position: (373, 56),
                     },
                    ],
                   },
                   default: None,
                  },
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "serviceAccountKeyFile",
                        position: (374, 11),
                       },
                      ],
                     },
                     to: FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (374, 35),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (374, 45),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "certs",
                           position: (374, 49),
                          },
                          Raw {
                           content: "serviceAccount",
                           position: (374, 55),
                          },
                          Raw {
                           content: "key",
                           position: (374, 70),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "rootCaFile",
                        position: (375, 11),
                       },
                      ],
                     },
                     to: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (375, 24),
                      },
                      attribute_path: AttributePath {
                       parts: [
                        Raw {
                         content: "certs",
                         position: (375, 28),
                        },
                        Raw {
                         content: "controllerManagerClient",
                         position: (375, 34),
                        },
                        Raw {
                         content: "caCert",
                         position: (375, 58),
                        },
                       ],
                      },
                      default: None,
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "kubeconfig",
                        position: (376, 11),
                       },
                      ],
                     },
                     to: With {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (376, 29),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "certs",
                          position: (376, 33),
                         },
                         Raw {
                          content: "controllerManagerClient",
                          position: (376, 39),
                         },
                        ],
                       },
                       default: None,
                      },
                      target: Map {
                       bindings: [
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "certFile",
                            position: (377, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (377, 24),
                          },
                          arguments: [
                           Variable {
                            identifier: "cert",
                            position: (377, 34),
                           },
                          ],
                         },
                        },
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "keyFile",
                            position: (378, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (378, 23),
                          },
                          arguments: [
                           Variable {
                            identifier: "key",
                            position: (378, 33),
                           },
                          ],
                         },
                        },
                       ],
                       recursive: false,
                       position: (376, 64),
                      },
                      position: (376, 24),
                     },
                    },
                   ],
                   recursive: false,
                   position: (373, 63),
                  },
                 ],
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "scheduler",
                   position: (381, 9),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "mkIf",
                  position: (381, 21),
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (381, 26),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "scheduler",
                      position: (381, 30),
                     },
                     Raw {
                      content: "enable",
                      position: (381, 40),
                     },
                    ],
                   },
                   default: None,
                  },
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "kubeconfig",
                        position: (382, 11),
                       },
                      ],
                     },
                     to: With {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (382, 29),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "certs",
                          position: (382, 33),
                         },
                         Raw {
                          content: "schedulerClient",
                          position: (382, 39),
                         },
                        ],
                       },
                       default: None,
                      },
                      target: Map {
                       bindings: [
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "certFile",
                            position: (383, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (383, 24),
                          },
                          arguments: [
                           Variable {
                            identifier: "cert",
                            position: (383, 34),
                           },
                          ],
                         },
                        },
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "keyFile",
                            position: (384, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (384, 23),
                          },
                          arguments: [
                           Variable {
                            identifier: "key",
                            position: (384, 33),
                           },
                          ],
                         },
                        },
                       ],
                       recursive: false,
                       position: (382, 56),
                      },
                      position: (382, 24),
                     },
                    },
                   ],
                   recursive: false,
                   position: (381, 47),
                  },
                 ],
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "kubelet",
                   position: (387, 9),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "mkIf",
                  position: (387, 19),
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (387, 24),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "kubelet",
                      position: (387, 28),
                     },
                     Raw {
                      content: "enable",
                      position: (387, 36),
                     },
                    ],
                   },
                   default: None,
                  },
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "clientCaFile",
                        position: (388, 11),
                       },
                      ],
                     },
                     to: FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (388, 26),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (388, 36),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "certs",
                           position: (388, 40),
                          },
                          Raw {
                           content: "kubelet",
                           position: (388, 46),
                          },
                          Raw {
                           content: "caCert",
                           position: (388, 54),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "tlsCertFile",
                        position: (389, 11),
                       },
                      ],
                     },
                     to: FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (389, 25),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (389, 35),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "certs",
                           position: (389, 39),
                          },
                          Raw {
                           content: "kubelet",
                           position: (389, 45),
                          },
                          Raw {
                           content: "cert",
                           position: (389, 53),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "tlsKeyFile",
                        position: (390, 11),
                       },
                      ],
                     },
                     to: FunctionApplication {
                      function: Variable {
                       identifier: "mkDefault",
                       position: (390, 24),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (390, 34),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "certs",
                           position: (390, 38),
                          },
                          Raw {
                           content: "kubelet",
                           position: (390, 44),
                          },
                          Raw {
                           content: "key",
                           position: (390, 52),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "kubeconfig",
                        position: (391, 11),
                       },
                      ],
                     },
                     to: With {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (391, 29),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "certs",
                          position: (391, 33),
                         },
                         Raw {
                          content: "kubeletClient",
                          position: (391, 39),
                         },
                        ],
                       },
                       default: None,
                      },
                      target: Map {
                       bindings: [
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "certFile",
                            position: (392, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (392, 24),
                          },
                          arguments: [
                           Variable {
                            identifier: "cert",
                            position: (392, 34),
                           },
                          ],
                         },
                        },
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "keyFile",
                            position: (393, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (393, 23),
                          },
                          arguments: [
                           Variable {
                            identifier: "key",
                            position: (393, 33),
                           },
                          ],
                         },
                        },
                       ],
                       recursive: false,
                       position: (391, 54),
                      },
                      position: (391, 24),
                     },
                    },
                   ],
                   recursive: false,
                   position: (387, 43),
                  },
                 ],
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "proxy",
                   position: (396, 9),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "mkIf",
                  position: (396, 17),
                 },
                 arguments: [
                  PropertyAccess {
                   expression: Variable {
                    identifier: "top",
                    position: (396, 22),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "proxy",
                      position: (396, 26),
                     },
                     Raw {
                      content: "enable",
                      position: (396, 32),
                     },
                    ],
                   },
                   default: None,
                  },
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "kubeconfig",
                        position: (397, 11),
                       },
                      ],
                     },
                     to: With {
                      expression: PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (397, 29),
                       },
                       attribute_path: AttributePath {
                        parts: [
                         Raw {
                          content: "certs",
                          position: (397, 33),
                         },
                         Raw {
                          content: "kubeProxyClient",
                          position: (397, 39),
                         },
                        ],
                       },
                       default: None,
                      },
                      target: Map {
                       bindings: [
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "certFile",
                            position: (398, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (398, 24),
                          },
                          arguments: [
                           Variable {
                            identifier: "cert",
                            position: (398, 34),
                           },
                          ],
                         },
                        },
                        Binding {
                         from: AttributePath {
                          parts: [
                           Raw {
                            content: "keyFile",
                            position: (399, 13),
                           },
                          ],
                         },
                         to: FunctionApplication {
                          function: Variable {
                           identifier: "mkDefault",
                           position: (399, 23),
                          },
                          arguments: [
                           Variable {
                            identifier: "key",
                            position: (399, 33),
                           },
                          ],
                         },
                        },
                       ],
                       recursive: false,
                       position: (397, 56),
                      },
                      position: (397, 24),
                     },
                    },
                   ],
                   recursive: false,
                   position: (396, 39),
                  },
                 ],
                },
               },
              ],
              recursive: false,
              position: (353, 29),
             },
            },
           ],
           recursive: false,
           position: (134, 3),
          },
          position: (129, 4),
         },
         position: (129, 3),
        },
       ],
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "meta",
         position: (405, 3),
        },
        Raw {
         content: "buildDocsInSandbox",
         position: (405, 8),
        },
       ],
      },
      to: Variable {
       identifier: "false",
       position: (405, 29),
      },
     },
    ],
    recursive: false,
    position: (40, 1),
   },
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}