Private/Config/Merge-AvmTflintConfig.ps1
|
function Test-AvmHclTrivia { [CmdletBinding()] [OutputType([bool])] param( [Parameter(Mandatory)] [AllowEmptyString()] [string] $Text ) $withoutComments = $Text $withoutComments = [regex]::Replace($withoutComments, '(?m)(?:#|//)[^\r\n]*(?:\r?\n|$)', '') $withoutComments = [regex]::Replace($withoutComments, '(?s)/\*.*?\*/', '') return [string]::IsNullOrWhiteSpace($withoutComments) } function Get-AvmTflintOverrideBlock { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [string] $Path ) $text = [System.IO.File]::ReadAllText($Path) $pattern = '(?ms)^[ \t]*(?<type>[A-Za-z_][A-Za-z0-9_-]*)[ \t]+"(?<label>(?:\\.|[^"])*)"[ \t]*\{(?<body>[^{}]*)\}' $blockMatches = [regex]::Matches($text, $pattern) $blocks = New-Object System.Collections.Generic.List[object] $cursor = 0 foreach ($match in $blockMatches) { if (-not (Test-AvmHclTrivia -Text $text.Substring($cursor, $match.Index - $cursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported HCL before block '$($match.Groups['type'].Value)'.") } $body = $match.Groups['body'].Value $attributes = New-Object System.Collections.Generic.List[object] $attributePattern = '(?m)^[ \t]*(?<name>[A-Za-z_][A-Za-z0-9_-]*)[ \t]*=[ \t]*(?<value>[^\r\n]+?)[ \t]*(?:\r?$)' $attributeMatches = [regex]::Matches($body, $attributePattern) $bodyCursor = 0 foreach ($attributeMatch in $attributeMatches) { if (-not (Test-AvmHclTrivia -Text $body.Substring($bodyCursor, $attributeMatch.Index - $bodyCursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported nested HCL in block '$($match.Groups['type'].Value) ""$($match.Groups['label'].Value)""'.") } $attributes.Add([pscustomobject]@{ Name = $attributeMatch.Groups['name'].Value Value = $attributeMatch.Groups['value'].Value.Trim() }) $bodyCursor = $attributeMatch.Index + $attributeMatch.Length } if (-not (Test-AvmHclTrivia -Text $body.Substring($bodyCursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported nested HCL in block '$($match.Groups['type'].Value) ""$($match.Groups['label'].Value)""'.") } $blocks.Add([pscustomobject]@{ Type = $match.Groups['type'].Value Label = $match.Groups['label'].Value Attributes = $attributes.ToArray() Text = $match.Value.Trim() }) $cursor = $match.Index + $match.Length } if ($blocks.Count -eq 0 -or -not (Test-AvmHclTrivia -Text $text.Substring($cursor))) { throw [AvmConfigurationException]::new( "TFLint override '$Path' contains unsupported HCL; expected labelled blocks with direct attributes.") } return $blocks.ToArray() } function Get-AvmTflintOverrideWarning { [CmdletBinding()] [OutputType([object[]])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [AllowEmptyCollection()] [string[]] $OverridePaths ) $rootFull = (Resolve-Path -LiteralPath $Root).ProviderPath $warnings = [System.Collections.Generic.List[object]]::new() $seen = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::Ordinal) foreach ($overridePath in $OverridePaths) { $file = [System.IO.Path]::GetRelativePath($rootFull, $overridePath).Replace('\', '/') foreach ($block in (Get-AvmTflintOverrideBlock -Path $overridePath)) { if ($block.Type -cne 'rule') { continue } $enabled = @($block.Attributes | Where-Object { $_.Name -ceq 'enabled' } | Select-Object -Last 1) if ($enabled.Count -eq 0 -or $enabled[0].Value -cne 'false') { continue } $rule = [string]$block.Label $key = "$file`0$rule" if (-not $seen.Add($key)) { continue } $warnings.Add([pscustomobject][ordered]@{ File = $file Rule = $rule }) } } return $warnings.ToArray() } function Merge-AvmTflintBlock { [CmdletBinding()] [OutputType([string])] param( [Parameter(Mandatory)] [AllowEmptyString()] [string] $Text, [Parameter(Mandatory)] [AllowEmptyCollection()] [object[]] $Blocks ) $merged = $Text foreach ($overrideBlock in $Blocks) { $typePattern = [regex]::Escape($overrideBlock.Type) $labelPattern = [regex]::Escape($overrideBlock.Label) $blockPattern = "(?ms)^[ \t]*$typePattern[ \t]+`"$labelPattern`"[ \t]*\{(?<body>[^{}]*)\}" $baseMatches = [regex]::Matches($merged, $blockPattern) if ($baseMatches.Count -eq 0) { $merged = $merged.TrimEnd() + "`n`n" + $overrideBlock.Text + "`n" continue } $baseMatch = $baseMatches[$baseMatches.Count - 1] $body = $baseMatch.Groups['body'].Value foreach ($attribute in $overrideBlock.Attributes) { $attributePattern = '(?m)^(?<indent>[ \t]*)' + [regex]::Escape($attribute.Name) + '[ \t]*=[^\r\n]*(?:\r?$)' $attributeMatches = [regex]::Matches($body, $attributePattern) $replacement = if ($attributeMatches.Count -gt 0) { $indent = $attributeMatches[$attributeMatches.Count - 1].Groups['indent'].Value "$indent$($attribute.Name) = $($attribute.Value)" } else { " $($attribute.Name) = $($attribute.Value)" } if ($attributeMatches.Count -gt 0) { $attributeMatch = $attributeMatches[$attributeMatches.Count - 1] $body = $body.Remove($attributeMatch.Index, $attributeMatch.Length).Insert($attributeMatch.Index, $replacement) } else { $body = $body.TrimEnd() + "`n$replacement`n" } } $replacementBlock = $baseMatch.Value.Substring(0, $baseMatch.Groups['body'].Index - $baseMatch.Index) + $body + '}' $merged = $merged.Remove($baseMatch.Index, $baseMatch.Length).Insert($baseMatch.Index, $replacementBlock) } return $merged } function Merge-AvmTflintConfig { [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Low')] param( [Parameter(Mandatory)] [string] $BasePath, [Parameter(Mandatory)] [string] $OverridePath, [Parameter(Mandatory)] [string] $DestinationPath ) $baseText = [System.IO.File]::ReadAllText($BasePath) $overrideBlocks = @(Get-AvmTflintOverrideBlock -Path $OverridePath) $merged = Merge-AvmTflintBlock -Text $baseText -Blocks $overrideBlocks $plugins = [regex]::Matches($merged, '(?ms)^[ \t]*plugin[ \t]+"avm"[ \t]*\{(?<body>[^{}]*)\}') $currentPlugin = $false if ($plugins.Count -eq 1) { $body = $plugins[0].Groups['body'].Value $currentPlugin = [regex]::Matches($body, '(?m)^\s*(?:version|source|enabled)\s*=').Count -eq 3 -and $body -cmatch '(?m)^\s*version\s*=\s*"1\.0\.0"\s*$' -and $body -cmatch '(?m)^\s*source\s*=\s*"github\.com/Azure/tflint-ruleset-avm"\s*$' -and $body -cmatch '(?m)^\s*enabled\s*=\s*true\s*$' } if ($currentPlugin) { $legacyRules = [ordered]@{ required_output_rmfr7 = 'avm_output_resource_id_required' terraform_output_separate = $null } foreach ($legacyName in $legacyRules.Keys) { $legacyPattern = '(?ms)^[ \t]*rule[ \t]+"' + [regex]::Escape($legacyName) + '"[ \t]*\{(?<body>[^{}]*)\}' $legacy = @($overrideBlocks | Where-Object { $_.Type -ceq 'rule' -and $_.Label -ceq $legacyName }) if ([regex]::IsMatch($baseText, $legacyPattern) -or $legacy.Count -ne 1 -or $legacy[0].Attributes.Count -ne 1) { continue } $attribute = $legacy[0].Attributes[0] $disabled = $attribute.Name -ceq 'enabled' -and $attribute.Value.StartsWith('false', [System.StringComparison]::Ordinal) -and (Test-AvmHclTrivia -Text $attribute.Value.Substring(5)) if (-not $disabled) { continue } $replacementName = $legacyRules[$legacyName] if ($replacementName) { $replacementPattern = '(?ms)^[ \t]*rule[ \t]+"' + [regex]::Escape($replacementName) + '"[ \t]*\{(?<body>[^{}]*)\}' $replacementMatches = [regex]::Matches($merged, $replacementPattern) $replacementOverrides = @($overrideBlocks | Where-Object { $_.Type -ceq 'rule' -and $_.Label -ceq $replacementName }) if ($replacementMatches.Count -gt 1 -or $replacementOverrides.Count -gt 1) { continue } if ($replacementOverrides.Count -eq 1) { $enabled = @($replacementOverrides[0].Attributes | Where-Object { $_.Name -ceq 'enabled' }) if ($enabled.Count -ne 1 -or -not $enabled[0].Value.StartsWith('false', [System.StringComparison]::Ordinal) -or -not (Test-AvmHclTrivia -Text $enabled[0].Value.Substring(5))) { continue } } $replacement = [pscustomobject]@{ Type = 'rule' Label = $replacementName Attributes = $legacy[0].Attributes Text = $legacy[0].Text.Replace('"' + $legacyName + '"', '"' + $replacementName + '"') } $merged = Merge-AvmTflintBlock -Text $merged -Blocks @($replacement) $message = "tflint: migrated disabled rule '$legacyName' to '$replacementName' from '$OverridePath'; rename the authored override for AVM ruleset 1.0.0." } else { $message = "tflint: omitted obsolete disabled rule '$legacyName' from '$OverridePath'; AVM ruleset 1.0.0 removed it without a replacement. Remove that override." } $merged = [regex]::Replace($merged, $legacyPattern, '') Write-AvmLog $message -Level Warning | Out-Null } } if (-not $PSCmdlet.ShouldProcess($DestinationPath, 'Write merged TFLint config')) { throw [System.OperationCanceledException]::new('TFLint config staging was not approved.') } [System.IO.File]::WriteAllText( $DestinationPath, ($merged -replace "`r`n", "`n"), [System.Text.UTF8Encoding]::new($false)) } function Get-AvmTflintScopeOverridePath { [CmdletBinding()] [OutputType([string])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [string] $RelPath ) $segments = @($RelPath -split '[\\/]') if ( $segments.Count -ne 2 -or $segments[0] -notin @('modules', 'examples') -or ($segments | Where-Object { [string]::IsNullOrWhiteSpace($_) -or $_ -in @('.', '..') }) ) { throw [AvmConfigurationException]::new( "TFLint scope '$RelPath' cannot be mapped to a per-scope override path.") } $rootFull = [System.IO.Path]::GetFullPath($Root) $candidate = $rootFull foreach ($segment in $segments) { $candidate = Join-Path $candidate $segment } $candidate = [System.IO.Path]::GetFullPath( (Join-Path $candidate 'avm.tflint.override.hcl')) $relativeCandidate = [System.IO.Path]::GetRelativePath($rootFull, $candidate) $relativeSegments = @($relativeCandidate -split '[\\/]') $outsideRoot = ( [System.IO.Path]::IsPathRooted($relativeCandidate) -or @($relativeSegments | Where-Object { $_ -eq '..' }).Count -gt 0 ) if ($outsideRoot) { throw [AvmConfigurationException]::new( "TFLint scope '$RelPath' resolves outside the repository root.") } if (Test-Path -LiteralPath $candidate -PathType Leaf) { return $candidate } return $null } function New-AvmTflintConfigSet { [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Low')] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [string] $Root, [Parameter(Mandatory)] [string] $BaseConfigDir, [object[]] $Scopes = @() ) $names = @( $Scopes | ForEach-Object { [System.IO.Path]::GetFileName([string]$_.Config) } | Sort-Object -Unique ) $overrides = @{} $overridePaths = [System.Collections.Generic.List[string]]::new() foreach ($name in $names) { $overrideName = $name -replace '\.hcl$', '.override.hcl' $overridePath = Join-Path $Root $overrideName if (Test-Path -LiteralPath $overridePath -PathType Leaf) { $overrides[$name] = $overridePath $overridePaths.Add($overridePath) } } $scopeOverrides = [System.Collections.Generic.Dictionary[string, string]]::new( [System.StringComparer]::Ordinal) $scopeByPath = [System.Collections.Generic.Dictionary[string, object]]::new( [System.StringComparer]::Ordinal) foreach ($scope in $Scopes) { $relPath = [string]$scope.RelPath $scopeByPath.Add($relPath, $scope) if ($relPath -eq '.') { continue } $overridePath = Get-AvmTflintScopeOverridePath -Root $Root -RelPath $relPath if ($overridePath) { $scopeOverrides.Add($relPath, $overridePath) $overridePaths.Add($overridePath) } } if ($overrides.Count -eq 0 -and $scopeOverrides.Count -eq 0) { return [pscustomobject]@{ ConfigDir = $BaseConfigDir OverridePaths = @() ScopeConfigNames = @{} StageDir = $null } } $stageRoot = Join-Path (Get-AvmFolder -Kind Cache -NoCreate) 'tflint-config-stage' if (-not $PSCmdlet.ShouldProcess($stageRoot, 'Stage TFLint config overrides')) { throw [System.OperationCanceledException]::new('TFLint config staging was not approved.') } $null = Get-AvmFolder -Kind Cache if (-not (Test-Path -LiteralPath $stageRoot)) { New-Item -ItemType Directory -Path $stageRoot -Force | Out-Null } $stageDir = Join-Path $stageRoot ([Guid]::NewGuid().ToString('N')) New-Item -ItemType Directory -Path $stageDir -Force | Out-Null try { foreach ($name in $names) { $basePath = Join-Path $BaseConfigDir $name $destinationPath = Join-Path $stageDir $name if ($overrides.ContainsKey($name)) { Merge-AvmTflintConfig ` -BasePath $basePath ` -OverridePath $overrides[$name] ` -DestinationPath $destinationPath } else { Copy-Item -LiteralPath $basePath -Destination $destinationPath } } $scopeConfigNames = [System.Collections.Generic.Dictionary[string, string]]::new( [System.StringComparer]::Ordinal) foreach ($relPath in ($scopeOverrides.Keys | Sort-Object)) { $scope = $scopeByPath[$relPath] $baseName = [System.IO.Path]::GetFileName([string]$scope.Config) $scopeHash = [Convert]::ToHexString( [System.Security.Cryptography.SHA256]::HashData( [System.Text.Encoding]::UTF8.GetBytes($relPath))).ToLowerInvariant() $scopeConfigName = ( '{0}.scope-{1}.hcl' -f [System.IO.Path]::GetFileNameWithoutExtension($baseName), $scopeHash.Substring(0, 16)) Merge-AvmTflintConfig ` -BasePath (Join-Path $stageDir $baseName) ` -OverridePath $scopeOverrides[$relPath] ` -DestinationPath (Join-Path $stageDir $scopeConfigName) $scopeConfigNames.Add($relPath, $scopeConfigName) } return [pscustomobject]@{ ConfigDir = $stageDir OverridePaths = $overridePaths.ToArray() ScopeConfigNames = $scopeConfigNames StageDir = $stageDir } } catch { Remove-Item ` -LiteralPath $stageDir ` -Recurse ` -Force ` -ErrorAction SilentlyContinue ` -ProgressAction SilentlyContinue throw } } # SIG # Begin signature block # MIInNwYJKoZIhvcNAQcCoIInKDCCJyQCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAjr9+HLod0CpL8 # 89Saqz4cluweYXYxcv4hZEIGwT6iwKCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEICjDGvZMABkR2Q0FIOW63bab3x2Q # N4SUfyQ0IiISbR0kMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEACew/ON+gfN49qJALxi7tOpYALFn216iqx4jousxv09uVNRq82QoNfz1MSdTm # 13aOjxXyfDqx/aVyjfepbgGGsk/hwrlMONlQMoulzvCKYeYit9gDhfiODFQM4aTk # H3ko4cE7vbMHhvBTFZETiKcmp4XWoFq7S+wMDCHnNeBAqkGnRLT59ISAKdzAWj7V # i0b+nYNX74c0MglRsUnjZAwbq6PteeimSjsYPSAO5TK6nQqa+1p5n3wyjWKzYzBy # WaMtP03hAhG5sDeVrWkVUrCNUzs3jthzWOpQ6edRB5TX10//NM6xqPmvbk8H9bkL # mD03SoMIBaf22d0t/W77F92/5aGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wG # CSqGSIb3DQEHAqCCF20wghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG # 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCAW+WJSwBDq6bmvZS4wU3WdXtsEl89sWfQY3g/kdHsnWQIGaqlt1+L+GBMy # MDI2MTAwNzE1Mzg0My4yMjhaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTIwMC0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHq # MIIHIDCCBQigAwIBAgITMwAAAiNP2WAkU8/+KwABAAACIzANBgkqhkiG9w0BAQsF # ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTda # Fw0yNzA1MTcxOTM5NTdaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTIwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQCK6Q2nk5WUdKzSCSafp+UjUARsWxHKS63rJhFC/zSabFum # TBuaJ0QNrmqevub5Db7fSj5qtwwKnjIO92+HXF67192fujL7DFot5WEj/AtEZ/Xr # zFHimKlN1h6gEQwP5I67wizaPW5ZzSBNpaLBg5oHvASPOZtwdNUoZ+DQKF3hJl1K # ZuoIlVK+qi7cLjgak6s5oOZcRCMrKnuC3aoVa6wRDbYvKUuj7rkFx9KO0PsHJ/k+ # LnZMggRheh4AVdawyh+oOzKPjlQGUNfSeWUgym2U9CLa8tt0mQX4DxDz6+ram50g # j1oAfyQ6TQ7r96PADFOKBgaU7+cpHnaZG89dTegQ6ydBRGIycOw1dRX2eKDRRzzi # K3cn0WaIm/7OeGsyQKjIzEQuUTDv0Jj/9zQ7truLOOpJD98BJVOK7je84Sz2hb3H # vUST7j1j2N8peD6olkpFHR/1Z8Jz4F+mkrUF7MmPAirYHRzunbIg3HrDMNwFYN7y # BkDA4/VMo9CY0y9oGUoq2yjbCwTibz9VYl93nB3QQiTCT9nW3M+TOWB+PMrZpExq # 1BSHmKPzIqehKqrUDoM33PK+dEKwpYLET6uXq4HuQRMXWT//sPubUnQAaaUMfQhA # ZSy23HtxwtN3eK9+T4wCav2wQFt57eUOwUW5/DCzMF9tua5He1hNvgcAXaiG1wID # AQABo4IBSTCCAUUwHQYDVR0OBBYEFNbAh89v29nPY9bwQb1QYCzxVgeXMB8GA1Ud # IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp # bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI # KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA # MA0GCSqGSIb3DQEBCwUAA4ICAQCHQwe7z5tp4NZwAf1cB+4c9J4svw3P6WqGBMxt # qznS6DdzUzStXHCaPZhM41g1iKHNnmcnLjwLujOEaNjhSnUDiAZqQjW5ZapOBxgc # 7Egghh9k+r78qWAe3rJ4QohBbhSGdZtKivTRaeRqmnhy8+ThrKhzCeEwaarXJimZ # wSpdQQUDbheWHeyAxASqultd5KO0m/UFvO03tfepqGXA4tCg/WGECwKqOjJzpRAf # PIB6y1HyVrk+vmL5rpEbTwwLOtX7WxFGG8+cYLk9HjaDkxraA/HYlKQRx1sdza+w # /gulLwgOnByRJKF2rr8M7FNIlwoi6ywFpaNc8A7HewaGjgw/tfcE260I1XekGluA # NI9HnONOYWlI7BKBQbWE2teo6vsQ1Vg8B8rTZSePVdmXL1PPqqs3KVdFKM5kYocP # CDM+6VL32IV96sESf2T7DjxanpCg2D2UYj4Z1i7cy8U1LLDGg55KWs4af2RRBjH2 # MulHgAmW5obKxiZCDQjRaroJ2XElXUhigE9BzvhCFbT/HDY2vpVpl5HnSpcCSxmL # 5i5lIT/xbAQMI7Luh75Xrm+IslfFWOGOGMlCp+24qEJEglXEP7xwsolNdBNndXih # hyIefVGlI1DR7xGELiJrk8ifVWYo9XEbEXv/lbvp6F2R2UsnweWckvq0y1HWnLHD # qH6dPjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN # AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw # BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw # MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx # EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT # FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt # U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk # 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c # T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG # UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz # rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2 # LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV # wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd # EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0 # gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph # AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ # YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb # GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ # KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP # EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw # UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr # BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw # DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY # xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp # L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB # BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v # cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B # AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5 # 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD # sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo # 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ # iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK # PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI # LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk # ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9 # af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba # ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/ # OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIIC # NQIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0 # b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh # dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG # A1UECxMeblNoaWVsZCBUU1MgRVNOOjkyMDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN # aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQA4RWFs # +kTiZnoZiAj1BtYj8zCNaqCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7nBBHDAiGA8yMDI2MTAwNzAzNTUwOFoY # DzIwMjYxMDA4MDM1NTA4WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDucEEcAgEA # MAcCAQACAi+tMAcCAQACAhKoMAoCBQDucZKcAgEAMDYGCisGAQQBhFkKBAIxKDAm # MAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcN # AQELBQADggEBABNalhQWiegWvip1mhXgAdnnge/MuftBU5fc4JLyNGgjIKCbdnC8 # +WNX+M4D01FdvLieYJ5igjeWI0w0x0d4GO9nj+wt7z354gYRZ9eTM6RfhNeADrwo # OiCNJF5ROLUGdEYvLJUgT9+8WzEgZbVQVLnXj1Gp0cNcg9i9sMNrXd7JTmvqSuGM # PiFTIvAQLa/yyKDHl7jgQl+YYDyF7B+UoFt6DL1kZIeSR8FuPkw3jPkMvR1wohw1 # /F6vSFmVZs5geWu8li7qIXTeLK0WZs45KZnt4wqrV3KjJeic6KxZYUIVSjTHwD0b # vRpkpdbrhUpfy/Z2AIxlY7fZTTcqurBJte0xggQNMIIECQIBATCBkzB8MQswCQYD # VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe # MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3Nv # ZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiNP2WAkU8/+KwABAAACIzANBglg # hkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqG # SIb3DQEJBDEiBCA0m6EUxGQxI39XqA6FdlMx5OOPy2IG3XWrXTNy0sXF0jCB+gYL # KoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIJbwMywRbvcGiynjnwjAqcaD47yYvebK # ZRAvtEAR5u6zMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC # EzMAAAIjT9lgJFPP/isAAQAAAiMwIgQghFmYOkbfTqt44CeyDU34hg8B4ajHsEK3 # F3jJAeR+pXEwDQYJKoZIhvcNAQELBQAEggIAIrhsmDAEi+Vlg+iwCq1bsmiXd71l # 5mBHsA6us6ZrlOmMHzROXYrULotCJANxPSqOg9PKAlDsULLE7gPDCPodKgebaHBe # yjoRCrevJrte1r4GDHbtypsft9/s9OePQYQktoaRMFIM8p3PDOfaeKCk7j7oRJVA # 3BuVnByXHBNZ+ExKhZt4XS3lCdiNfZHq6sIxxYHGj8rzllrXBhWnScJkCapuhkvc # JlX5wcywIadkkB+p6/+Gg7kk+1nCJXjbRZdgTW+Ov8sdYStSDEKJpKuPYpRsJQs+ # n/mjYV6IQvV9wDIHs0QDvd2BzuxuFAT5ej9OkdzG8CTt2YO7DtFIqcV0BC2OFRZM # n1yb+JOK72ArzK9qgcaypNOmV6Z5n+4IWiab1nz53+etyXfEl7WXmHoAP+3xmw85 # QCcxCDSyocn9xALqvQbH8nRmHmJTNNAn6K2ME9RvTAVs3STiFKFdeB3fdsVq6KAB # dgDHGaqZf3PitGBqLw1xPB2j23/SMlO0IU/JFPz+YUHNqfWWomAY3hgx6LjYpbq4 # oFppJ/LetFPV/6JApjYfbEtJe0Hz5hbazJQPXsBuzjxlX1EG0f64N+WFbWqjJnIy # SYPRGFebIN7xC5mXf7BSn+Ujrzw2fKz6fOT9tg0VKIKLBszHdxxxYZ+/FIjiPWo9 # xO4izktuvAuEQ3M= # SIG # End signature block |