Engines/Bicep/Invoke-AvmBicepTestE2e.ps1
|
function Invoke-AvmBicepTestE2e { [CmdletBinding(SupportsShouldProcess)] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [pscustomobject] $Context, [switch] $AllowPathFallback, [AllowEmptyCollection()] [string[]] $Example = @(), [switch] $List, [switch] $Recurse, [string] $SubscriptionId, [string] $TenantId, [string] $ManagementGroupId, [string] $Location, [string] $ResourceLocation, [string] $ResourceGroupPrefix, [string] $TokenFile, [System.Collections.IDictionary] $Tokens = @{}, [string] $ParameterFile, [System.Collections.IDictionary] $Parameters = @{}, [switch] $UseCiInputs, [string] $TestSubscriptionIds, [ValidateRange(0, [int]::MaxValue)] [int] $SubscriptionSelectionSeed = 0, [ValidateRange(0, [int]::MaxValue)] [int] $SubscriptionJobIndex = 0, [ValidateSet('All', 'Deploy', 'Complete')] [string] $Phase = 'All', [string] $CleanupStatePath, [switch] $KeepResources, [ValidateRange(1, 3)] [int] $DeploymentRetryLimit = 3, [ValidateRange(1, 3)] [int] $ValidationRetryLimit = 3 ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Context.Ecosystem -ne 'bicep') { throw [System.ArgumentException]::new('Bicep end-to-end tests require a Bicep module context.') } $discovered = @(Get-AvmBicepTestCase -Context $Context -Recurse:($Recurse -or $Phase -eq 'Complete')) if ($List) { $names = @($discovered | Where-Object { -not $_.Ignored } | ForEach-Object { $_.RelativeDirectory }) return ConvertTo-Json -InputObject $names -Compress } $state = $null if ($Phase -eq 'Complete') { if ([string]::IsNullOrWhiteSpace($CleanupStatePath)) { throw [AvmConfigurationException]::new('Bicep completion requires -CleanupStatePath.') } $state = Read-AvmBicepCleanupState -Path $CleanupStatePath if (-not $state.Contains('case')) { throw [AvmConfigurationException]::new('This cleanup state has no case to complete. Use avm test cleanup instead.') } $cases = @($discovered | Where-Object { $_.RelativePath -ceq $state['case']['path'] -and -not $_.Ignored }) if ($cases.Count -ne 1) { throw [AvmConfigurationException]::new('The saved case is missing or ignored in this checkout. Use avm test cleanup without running source.') } if ($Example.Count -gt 0 -or $UseCiInputs -or $Tokens.psbase.Count -gt 0 -or $Parameters.psbase.Count -gt 0 -or $TokenFile -or $ParameterFile -or $TestSubscriptionIds -or $ResourceLocation -or $ResourceGroupPrefix -or $ManagementGroupId) { throw [AvmConfigurationException]::new('Complete selects its case and deployment inputs from state; do not supply deployment-only options.') } if ($Location -and ($Location -replace '\s', '').ToLowerInvariant() -cne $state['case']['metadataLocation']) { throw [AvmConfigurationException]::new('The completion location must match the saved deployment location.') } $Location = $state['case']['metadataLocation'] } else { $cases = @(Select-AvmBicepTestCase -Cases $discovered -Example $Example) } $result = [ordered]@{ Engine = 'bicep'; Tool = 'Az.Resources'; ToolPath = $null; ToolSource = 'PowerShell module' BicepTool = $null; Phase = $Phase; Status = 'skipped'; FilesProcessed = 0 IgnoredFiles = @($discovered | Where-Object Ignored).Count RunsTotal = 0; RunsPassed = 0; RunsFailed = 0; RunsSkipped = $cases.Count AssertionResults = @(); PostResults = @(); CleanupPending = @(); CleanupStatePaths = @() CleanupDeferred = $false; WhatIfChanges = @(); Issues = @() } if ($cases.Count -eq 0) { Write-AvmLog -Level Warning -Message 'No runnable Bicep tests/e2e examples found.' return [pscustomobject]$result } if ($CleanupStatePath -and $cases.Count -ne 1) { throw [AvmConfigurationException]::new('An explicit -CleanupStatePath requires exactly one selected Bicep case.') } if ($ParameterFile -and $Parameters.psbase.Count -gt 0) { throw [AvmConfigurationException]::new('Use either -ParameterFile or -Parameters, not both.') } $ci = Get-AvmBicepWorkflowEnvironment -Enabled:$UseCiInputs if ([string]::IsNullOrWhiteSpace($SubscriptionId)) { $SubscriptionId = $ci.SubscriptionId if ([string]::IsNullOrEmpty($TestSubscriptionIds)) { $TestSubscriptionIds = $ci.PoolJson } } if ([string]::IsNullOrWhiteSpace($TenantId)) { $TenantId = $ci.TenantId } if ($UseCiInputs -and -not $PSBoundParameters.ContainsKey('ManagementGroupId')) { $ManagementGroupId = $ci.ManagementGroupId } $tenant = [guid]::Empty if (-not [guid]::TryParseExact($TenantId, 'D', [ref]$tenant) -or $tenant -eq [guid]::Empty) { throw [AvmConfigurationException]::new('Bicep e2e requires an explicit, nonempty GUID -TenantId.') } $repoRoot = Get-AvmBicepTestRepositoryRoot -Context $Context $registryLayout = $Context.Kind -eq 'bicep-monorepo' -or $repoRoot -cne $Context.Root $selections = @( for ($index = 0; $index -lt $cases.Count; $index++) { $selectionOptions = @{ PoolJson = $TestSubscriptionIds; FallbackSubscriptionId = $SubscriptionId RandomSeed = $SubscriptionSelectionSeed; CaseIndex = $SubscriptionJobIndex + $index } if ($registryLayout) { $modulePath = [System.IO.Path]::GetRelativePath( $repoRoot, $cases[$index].ModuleRoot).Replace('\', '/') $requiredTag = Get-AvmBicepTestSubscriptionTag -RepositoryRoot $repoRoot ` -ModulePath $modulePath if ($requiredTag -cne 'General') { throw [AvmConfigurationException]::new( "Native Bicep e2e cannot run reserved tag '$requiredTag'. Use the protected registry workflow, which holds the subscription environment lock across preparation, tests, and confirmed cleanup.") } } Select-AvmBicepWorkflowSubscription @selectionOptions } ) $selection = $selections[0] if ($null -ne $state -and ($state['subscriptionId'] -ine $selection.SubscriptionId -or $state['tenantId'] -ine $TenantId)) { throw [AvmConfigurationException]::new('Completion state does not match the explicitly selected subscription and tenant.') } $Location = ($Location -replace '\s', '').ToLowerInvariant() if ($Location -cnotmatch '^[a-z0-9]+$') { throw [AvmConfigurationException]::new('Bicep e2e requires an explicit Azure -Location for deployment metadata.') } if ($ResourceGroupPrefix -and ($ResourceGroupPrefix -cnotmatch '^[A-Za-z0-9][A-Za-z0-9_.-]{0,56}$' -or $ResourceGroupPrefix.EndsWith('.'))) { throw [AvmConfigurationException]::new('Bicep e2e requires a safe -ResourceGroupPrefix of at most 57 characters.') } if ($ManagementGroupId -and ($ManagementGroupId -cnotmatch '^[A-Za-z0-9_().-]{1,90}$' -or $ManagementGroupId.EndsWith('.') -or $ManagementGroupId -in @('.', '..'))) { throw [AvmConfigurationException]::new('Bicep e2e -ManagementGroupId must be a safe group name, not an ARM resource ID.') } $requirementsByModule = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) if ($Phase -ne 'Complete') { foreach ($case in $cases) { if ($requirementsByModule.ContainsKey($case.ModuleRoot)) { continue } $caseContext = [pscustomobject]@{ Root = $case.ModuleRoot; Ecosystem = 'bicep' } $requirementsByModule.Add($case.ModuleRoot, [pscustomobject]@{ Features = @(Get-AvmContextRequiredRegistration -Context $caseContext -Kind Feature) Providers = @(Get-AvmContextRequiredRegistration -Context $caseContext -Kind Provider) }) } } if (-not $PSCmdlet.ShouldProcess( "$($cases.Count) Bicep case(s) in the explicitly selected test targets", "Run Bicep e2e phase $Phase")) { return [pscustomobject]$result } Assert-AvmBicepAzureDependency $az = Get-Command -Name az -CommandType Application -ErrorAction Stop | Select-Object -First 1 if ($Phase -eq 'Complete') { $item = [pscustomobject]@{ Case = $cases[0]; Scope = $state['case']['scope'] AssertionFiles = [string[]]@(Get-AvmBicepE2eAssertionFile -CasePath $cases[0].Path) } $runs = @(Complete-AvmBicepTestCase -Item $item -StatePath $CleanupStatePath ` -SubscriptionId $selection.SubscriptionId -TenantId $tenant -RepositoryRoot $repoRoot ` -AzPath $az.Source -KeepResources:$KeepResources -Confirm:$false) } else { $retryPolicy = Get-AvmBicepRetryPolicy $DeploymentRetryLimit = [Math]::Min($DeploymentRetryLimit, $retryPolicy['limits']['deploymentAttempts']) $ValidationRetryLimit = [Math]::Min($ValidationRetryLimit, $retryPolicy['limits']['regionAttempts']) $bicep = Resolve-AvmTool -Name bicep -ModuleRoot $Context.Root -AllowPathFallback:$AllowPathFallback $result.BicepTool = "bicep/$($bicep.Version)" $runDirectory = Join-Path ([System.IO.Path]::GetTempPath()) ('avm-bicep-e2e-{0}' -f [guid]::NewGuid().ToString('N')) $null = New-Item -ItemType Directory -Path $runDirectory -ErrorAction Stop if (-not $IsWindows) { [System.IO.File]::SetUnixFileMode($runDirectory, [System.IO.UnixFileMode]::UserRead -bor [System.IO.UnixFileMode]::UserWrite -bor [System.IO.UnixFileMode]::UserExecute) } $prepared = [System.Collections.Generic.List[object]]::new() $runs = [System.Collections.Generic.List[object]]::new() try { for ($index = 0; $index -lt $cases.Count; $index++) { $case = $cases[$index] $subscription = $selections[$index] $requirements = $requirementsByModule[$case.ModuleRoot] $runId = [guid]::NewGuid().ToString('N') $tokenMap = Get-AvmBicepTestTokenMap -Root $Context.Root -SubscriptionId $subscription.SubscriptionId ` -TenantId $TenantId -ManagementGroupId $ManagementGroupId -RunId $runId ` -TokenFile $TokenFile -Tokens $Tokens -DefaultTokens $ci.Tokens $tokenLocation = if ($tokenMap.ContainsKey('resourceLocation')) { $tokenMap['resourceLocation'] } else { '' } $null = $tokenMap.Remove('resourceLocation') $templatePath = Join-Path $runDirectory ("$index.json") $template = New-AvmBicepTestTemplate -SourcePath $case.Path -DestinationPath $templatePath ` -BicepPath $bicep.Path -Tokens $tokenMap -DeferTokens -Confirm:$false if ($template.Scope -eq 'group' -and [string]::IsNullOrWhiteSpace($ResourceGroupPrefix)) { throw [AvmConfigurationException]::new('Resource-group Bicep e2e cases require -ResourceGroupPrefix.') } if ($template.Scope -eq 'mg' -and [string]::IsNullOrWhiteSpace($ManagementGroupId)) { throw [AvmConfigurationException]::new('Management-group Bicep e2e cases require -ManagementGroupId.') } $attemptInputs = [System.Collections.Generic.List[object]]::new() for ($namingIndex = 0; $namingIndex -lt $DeploymentRetryLimit; $namingIndex++) { $namingId = if ($namingIndex -eq 0) { $runId } else { [guid]::NewGuid().ToString('N') } $attemptTokens = if ($namingIndex -eq 0) { $tokenMap } else { Get-AvmBicepTestTokenMap -Root $Context.Root -SubscriptionId $subscription.SubscriptionId ` -TenantId $TenantId -ManagementGroupId $ManagementGroupId -RunId $namingId ` -TokenFile $TokenFile -Tokens $Tokens -DefaultTokens $ci.Tokens } $null = $attemptTokens.Remove('resourceLocation') $parameterPath = New-AvmBicepTestParameterFile -Root $Context.Root ` -DestinationPath (Join-Path $runDirectory ("$index-$namingIndex-parameters.json")) -Tokens $attemptTokens ` -ParameterFile $ParameterFile -DeferTokens -Confirm:$false $nativeParameters = Get-AvmBicepNativeParameter -ParameterPath $parameterPath -Parameters $Parameters $references = @{} foreach ($key in @($nativeParameters.psbase.Keys)) { if ($nativeParameters[$key] -is [hashtable] -and $nativeParameters[$key].ContainsKey('reference')) { $references[$key] = $nativeParameters[$key] $nativeParameters.Remove($key) } } $attemptInputs.Add([pscustomobject]@{ NamingId = $namingId; Tokens = $attemptTokens; TemplateContent = $template.CompiledContent Parameters = $nativeParameters; ReferenceParameters = $references }) } $resourceType = '' $metadataPath = Join-Path $case.ModuleRoot 'metadata.json' if (Test-Path -LiteralPath $metadataPath -PathType Leaf) { $metadata = ConvertFrom-AvmMetadataJson -Json (Read-AvmMetadataJson -Path $metadataPath) if (Test-AvmMetadataResourceType -CanonicalType ([string]$metadata['canonicalType'])) { $resourceType = $metadata['canonicalType'] } elseif ($metadata['canonicalType'] -cne 'helper' -and (Get-AvmMetadataModuleType -Context $Context -Path $case.ModuleRoot -Metadata $metadata) -eq 'resource') { throw [AvmConfigurationException]::new("Resource module metadata has an invalid canonicalType: $metadataPath") } } $prepared.Add([pscustomobject]@{ Case = $case; Scope = $template.Scope; SubscriptionId = $subscription.SubscriptionId RunId = $runId; TemplatePath = $templatePath; Template = $template.Template TemplateContent = [System.IO.File]::ReadAllText($templatePath) Parameters = $attemptInputs[0].Parameters; ReferenceParameters = $attemptInputs[0].ReferenceParameters AttemptInputs = $attemptInputs.ToArray(); RetryPolicy = $retryPolicy RequiredFeatures = $requirements.Features; RequiredProviders = $requirements.Providers Tokens = $tokenMap; TokenResourceLocation = $tokenLocation; ResourceType = $resourceType SourceHash = Get-AvmBicepTestSourceHash -Case $case AssertionFiles = [string[]]@(Get-AvmBicepE2eAssertionFile -CasePath $case.Path) }) } $registeredFeatures = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) $registeredProviders = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) foreach ($item in $prepared) { $item.RequiredFeatures = @($item.RequiredFeatures | Where-Object { -not $registeredFeatures.Contains("$($item.SubscriptionId):$($_.FullName)") }) $item.RequiredProviders = @($item.RequiredProviders | Where-Object { -not $registeredProviders.Contains("$($item.SubscriptionId):$($_.FullName)") }) $run = Invoke-AvmBicepNativeTestCase -Item $item -TenantId $tenant -Location $Location ` -RepositoryRoot $repoRoot -AzPath $az.Source -CiInput $ci -ManagementGroupId $ManagementGroupId ` -ResourceGroupPrefix $ResourceGroupPrefix -ResourceLocation $ResourceLocation -StatePath $CleanupStatePath ` -Phase $Phase -DeploymentRetryLimit $DeploymentRetryLimit -ValidationRetryLimit $ValidationRetryLimit ` -KeepResources:$KeepResources -Confirm:$false $runs.Add($run) if (-not @($run.Issues | Where-Object { $_.Code -in @('avm.bicep.e2e-feature-registration-failed', 'avm.bicep.e2e-provider-registration-failed') })) { foreach ($requirement in $item.RequiredFeatures) { $null = $registeredFeatures.Add("$($item.SubscriptionId):$($requirement.FullName)") } foreach ($requirement in $item.RequiredProviders) { $null = $registeredProviders.Add("$($item.SubscriptionId):$($requirement.FullName)") } } if ($run.CleanupPending.Count -gt 0) { break } } } finally { foreach ($file in @(Get-ChildItem -LiteralPath $runDirectory -File -Force)) { Remove-Item -LiteralPath $file.FullName -Force -ErrorAction Stop } Remove-Item -LiteralPath $runDirectory -Force -ErrorAction Stop } } $result.FilesProcessed = $runs.Count $result.RunsTotal = $runs.Count $result.RunsPassed = @($runs | Where-Object Status -EQ 'pass').Count $result.RunsFailed = @($runs | Where-Object Status -EQ 'fail').Count $result.RunsSkipped = $cases.Count - $runs.Count $result.AssertionResults = @($runs | ForEach-Object { $_.AssertionResults }) $result.PostResults = @($runs | ForEach-Object { $_.PostResults }) $result.CleanupPending = @($runs | ForEach-Object { $_.CleanupPending } | Select-Object -Unique) $result.CleanupStatePaths = @($runs | ForEach-Object { $_.StatePath }) $result.CleanupDeferred = @($runs | Where-Object CleanupDeferred).Count -gt 0 $result.Issues = @($runs | ForEach-Object { $_.Issues }) $result.Status = if ($result.RunsFailed -gt 0 -or $result.CleanupPending.Count -gt 0) { 'fail' } else { 'pass' } return [pscustomobject]$result } # SIG # Begin signature block # MIInUAYJKoZIhvcNAQcCoIInQTCCJz0CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBDI7CezzRu3IlB # kwWbKxEbYTL9T20FGGFgmVcR/EE7v6CCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIMQxCLxjqVU1T8wTGVTYWyeZlEJE # iTTgTHv4Jo1jEqVJMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEADm0OcP1mh9XHL4sF6D7VcyPaNqokrd5/tthREnziN6Y6ibJ3ZpP0C/v/ZnYg # LmY7WEIwwwYVXsnNaYXHGBiw4gq7CwqZqNUQ++y6mqeFyztI9rvMNu9w2sfUsPeL # 2KoXXBcaJ7+eI94VD2ll6ciEs8dzUc11btKq/DE5vzrzEpAcVXdfgPx4kK/6boWO # oLgRvaP+/iyByP6W+EPmAI2iout/Q1UkIrQDlIFxmJhCIQNJE9mKy2cq+NAEnwPW # /bHpQDpxw+OxDNIoL7lyhvUSpdp4618rZcJap4dOpGnKanAfyF3tU0rthLPvjtHR # k9NgCzaCIoQr38SaKd9DS67TK6GCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UG # CSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG # 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCB5W9r/VTnFEtsS/1le1G9zBK99CqQVDTlQWf7xkDpAlwIGaq5jKmOmGBMy # MDI2MTAyMDE0MTIxNS4wMTVaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0 # QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaCCEfswggcoMIIFEKADAgECAhMzAAACGCXZkgXi5+XkAAEAAAIYMA0GCSqG # SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgx # NDE4NDgyNVoXDTI2MTExMzE4NDgyNVowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh # dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjRDMUEtMDVF # MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC # IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsdzo6uuQJqAfxLnvEBfIvj6k # nK+p6bnMXEFZ/QjPOFywlcjDfzI8Dg1nzDlxm7/pqbvjWhyvazKmFyO6qbPwClfR # nI57h5OCixgpOOCGJJQIZSTiMgui3B8DPiFtJPcfzRt3FsnxjLXwBIjGgnjGfmQl # 7zejA1WoYL/qBmQhw/FDFTWebxfo4m0RCCOxf2qwj31aOjc2aYUePtLMXHsXKPFH # 0tp5SKIF/9tJxRSg0NYEvQqVilje8aQkPd3qzAux2Mc5HMSK4NMTtVVCYAWDUZ4p # +6iDI9t5BNCBIsf5ooFNUWtxCqnpFYiLYkHfFfxhVUBZ8LGGxYsA36snD65s2Hf4 # t86k0e8WelH/usfhYqOM3z2yaI8rg08631IkwqUzyQoEPqMsHgBem1xpmOGSIUnV # vTsAv+lmECL2RqrcOZlZax8K0aiij8h6UkWBN2IA/ikackTSGVRBQmWWZuLFWV/T # 4xuNzscC0X7xo4fetgpsqaEA0jY/QevkTvLv4OlNN9eOL8LNh7Vm0R65P7oabOQD # qtUFAwCgjgPJ0iV/jQCaMAcO3SYpG5wSAYiJkk4XLjNSlNxU2Idjs1sORhl7s7LC # 6hOb7bVAHVwON74GxfFNiEIA6BfudANjpQJ0nUc/ppEXpT4pgDBHsYtV8OyKSjKs # IxOdFR7fIJIjDc8DvUkCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBQkLqHEXDobY7dH # uoQCBa4sX7aL0TAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV # HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny # bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI # KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy # MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI # MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAnkjRhjwPgdoIpvt4 # YioT/j0LWuBxF3ARBKXDENggraKvC0oRPwbjAmsXnPEmtuo5MD8uJ9Xw9eYrxqqk # K4DF9snZMrHMfooxCa++1irLz8YoozC4tci+a4N37Sbke1pt1xs9qZtvkPgZGWn5 # BcwVfmAwSZLHi2CuZ06Y0/X+t6fNBnrbMVovNaDX4WPdyI9GEzxfIggDsck2Ipo4 # VXL/Arcz7p2F7bEZGRuyxjgMC+woCkDJaH/yk/wcZpAsixe4POdN0DW6Zb35O3Dg # 3+a6prANMc3WIdvfKDl75P0aqcQbQAR7b0f4gH4NMkUct0Wm4GN5KhsE1YK7V/wA # qDKmK4jx3zLz3a8Hsxa9HB3GyitlmC5sDhOl4QTGN5kRi6oCoV4hK+kIFgnkWjHh # SRNomz36QnbCSG/BHLEm2GRU9u3/I4zUd9E1AC97IJEGfwb+0NWb3QEcrkypdGdW # wl0LEObhrQR9B1V7+edcyNmsX0p2BX0rFpd1PkXJSbxf8IcEiw/bkNgagZE+VlDt # xXeruLdo5k3lGOv7rPYuOEaoZYxDvZtpHP9P36wmW4INjR6NInn2UM+krP/xeLnR # bDBkm9RslnoDhVraliKDH62BxhcgL9tiRgOHlcI0wqvVWLdv8yW8rxkawOlhCRqT # 3EKECW8ktUAPwNbBULkT+oWcvBcwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ # AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK # V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0 # IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0 # ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa # MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT # HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF # AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1 # V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9 # alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv # Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928 # jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t # pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe # HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o # ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C # vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug # poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps # xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C # AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE # FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT # NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo # dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o # dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD # AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW # y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t # aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt # MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y # My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc # FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT # Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j # VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3 # +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR # sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw # ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b # RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx # aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX # HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0 # W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0 # HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0 # QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaIjCgEBMAcGBSsOAwIaAxUAnWtGrXWiuNE8QrKfm4CtGr57z+mggYMwgYCk # fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF # AO6BvLkwIhgPMjAyNjEwMjAxMDExMDVaGA8yMDI2MTAyMTEwMTEwNVowdDA6Bgor # BgEEAYRZCgQBMSwwKjAKAgUA7oG8uQIBADAHAgEAAgIf9zAHAgEAAgITcDAKAgUA # 7oMOOQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAID # B6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQCzgPp7rLl6O0Ut3usS # tbwCkadA1jCB3pvEj54geF5h7LBVuw9UGlIxrtNppDqYat5FTJROwZ2Bk9dRqjAb # UfsjLIq9ULjo+GXdAO0kaSiZArUq1yCJ1oqK5xK60iaLiv9k6rqRJPLZTVKbyopr # KZvlTJ2IAGPaAOe0yUE8/JrDvkGFSsVdDlro1xoiQXWYaeLiuR3QqB32qQpfh+Y0 # XAnaA3uq5RFGvP3pZL+DoP/aiPPKht7pLl7fFIuEF83sFY1RJyITej/In3sNX5NZ # VUDkr/CuHtIDupQPPNSAyiATyvoiAUFfyAJZu0M4eQuRQEMWxeljOO4SZJEkh3Ag # csfOMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC # EzMAAAIYJdmSBeLn5eQAAQAAAhgwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3 # DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgKeC69aJXVJSvqwP+ # fDPy3u5C0MYVYd7K+iIb+zB74YEwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9 # BCCZE9yJuOTItIwWaES6lzGKK1XcSoz1ynRzaOVzx9eFajCBmDCBgKR+MHwxCzAJ # BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv # c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACGCXZkgXi5+XkAAEAAAIYMCIE # IJgan+7po+qJjKJ6T9/oq7kmwP/sZnXlPuUPRIqPX3B5MA0GCSqGSIb3DQEBCwUA # BIICAHwBymiBMvYq0wgeuLprvzyldjhDKiLc/LugwgNAbLAFyYHs01PCP4+5txu+ # 1mFNFDcbafGWdv5aT1utueyDfA0q8NKvcSNiQK+8us0v5J9g2DebGLjIQGYhMoGo # 3hEKd+AdvOdnvsjxpkZX8146CiQAmoK2XSjl6TA4u6UqfxkkRhWtH0zRNnRQMcGe # iZRP3ezFb8VzQWcjSbjT06KT+EEqRGPQFPoFmBrO3zNuYK6PFPccH8uOH0G58OrH # Jt2/OTcDH5YdWhR+bARgl+XwgDJHrKesyGzxlPitszC6NFyJEnx1v2TXvVY99B86 # zrinoYQ63vDt+DCXkw2zq/A+IpFz5K1jUcsKshL2VhJxf2Srdd/OCyfRolG3iTqp # cMPK0f20okNTgDhcK2zxuN96mwK3tDo9QQ8Y5YDUpvdqv3QeEvb2Ueq+NK0JdaAK # 0cWnC5zTPF/7OZqPIUTTME5l+divemzD6H4aY61pviwnzM+uDRL2bLTKeG0Up1Q6 # dsDRp1Eut7zxn8SiC1GZi0o0dLVuHPyYaEKX3CeaGKFasX1YHbKhGEdVT2VCuYfN # wsK33kfJBegitHZo5oyM+GyjUEEWbPTGnH9Ckmq9Yct+CZvZ3KPb8BPTCyb0pIIZ # mnyCQdt52ehDQcaWDYZS9nobjBqqrWte3gXLTeQtR/K2nc71 # SIG # End signature block |