Engines/Bicep/Invoke-AvmBicepTestE2e.ps1
|
function Invoke-AvmBicepTestE2e { [CmdletBinding(SupportsShouldProcess)] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [pscustomobject] $Context, [switch] $AllowPathFallback, [AllowEmptyCollection()] [string[]] $Example = @(), [switch] $List, [switch] $Recurse, [string] $SubscriptionId, [string] $TenantId, [string] $ManagementGroupId, [string] $Location, [string] $ResourceLocation, [string] $ResourceGroupPrefix, [string] $TokenFile, [System.Collections.IDictionary] $Tokens = @{}, [string] $ParameterFile, [System.Collections.IDictionary] $Parameters = @{}, [switch] $UseCiInputs, [string] $TestSubscriptionIds, [ValidateRange(0, [int]::MaxValue)] [int] $SubscriptionSelectionSeed = 0, [ValidateRange(0, [int]::MaxValue)] [int] $SubscriptionJobIndex = 0, [ValidateSet('All', 'Deploy', 'Complete')] [string] $Phase = 'All', [string] $CleanupStatePath, [switch] $KeepResources, [ValidateRange(1, 3)] [int] $DeploymentRetryLimit = 3, [ValidateRange(1, 3)] [int] $ValidationRetryLimit = 3 ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Context.Ecosystem -ne 'bicep') { throw [System.ArgumentException]::new('Bicep end-to-end tests require a Bicep module context.') } $discovered = @(Get-AvmBicepTestCase -Context $Context -Recurse:($Recurse -or $Phase -eq 'Complete')) if ($List) { $names = @($discovered | Where-Object { -not $_.Ignored } | ForEach-Object { $_.RelativeDirectory }) return ConvertTo-Json -InputObject $names -Compress } $state = $null if ($Phase -eq 'Complete') { if ([string]::IsNullOrWhiteSpace($CleanupStatePath)) { throw [AvmConfigurationException]::new('Bicep completion requires -CleanupStatePath.') } $state = Read-AvmBicepCleanupState -Path $CleanupStatePath if (-not $state.Contains('case')) { throw [AvmConfigurationException]::new('This cleanup state has no case to complete. Use avm test cleanup instead.') } $cases = @($discovered | Where-Object { $_.RelativePath -ceq $state['case']['path'] -and -not $_.Ignored }) if ($cases.Count -ne 1) { throw [AvmConfigurationException]::new('The saved case is missing or ignored in this checkout. Use avm test cleanup without running source.') } if ($Example.Count -gt 0 -or $UseCiInputs -or $Tokens.psbase.Count -gt 0 -or $Parameters.psbase.Count -gt 0 -or $TokenFile -or $ParameterFile -or $TestSubscriptionIds -or $ResourceLocation -or $ResourceGroupPrefix -or $ManagementGroupId) { throw [AvmConfigurationException]::new('Complete selects its case and deployment inputs from state; do not supply deployment-only options.') } if ($Location -and ($Location -replace '\s', '').ToLowerInvariant() -cne $state['case']['metadataLocation']) { throw [AvmConfigurationException]::new('The completion location must match the saved deployment location.') } $Location = $state['case']['metadataLocation'] } else { $cases = @(Select-AvmBicepTestCase -Cases $discovered -Example $Example) } $result = [ordered]@{ Engine = 'bicep'; Tool = 'Az.Resources'; ToolPath = $null; ToolSource = 'PowerShell module' BicepTool = $null; Phase = $Phase; Status = 'skipped'; FilesProcessed = 0 IgnoredFiles = @($discovered | Where-Object Ignored).Count RunsTotal = 0; RunsPassed = 0; RunsFailed = 0; RunsSkipped = $cases.Count AssertionResults = @(); PostResults = @(); CleanupPending = @(); CleanupStatePaths = @() CleanupDeferred = $false; WhatIfChanges = @(); Issues = @() } if ($cases.Count -eq 0) { Write-AvmLog -Level Warning -Message 'No runnable Bicep tests/e2e examples found.' return [pscustomobject]$result } if ($CleanupStatePath -and $cases.Count -ne 1) { throw [AvmConfigurationException]::new('An explicit -CleanupStatePath requires exactly one selected Bicep case.') } if ($ParameterFile -and $Parameters.psbase.Count -gt 0) { throw [AvmConfigurationException]::new('Use either -ParameterFile or -Parameters, not both.') } $ci = Get-AvmBicepWorkflowEnvironment -Enabled:$UseCiInputs if ([string]::IsNullOrWhiteSpace($SubscriptionId)) { $SubscriptionId = $ci.SubscriptionId if ([string]::IsNullOrEmpty($TestSubscriptionIds)) { $TestSubscriptionIds = $ci.PoolJson } } if ([string]::IsNullOrWhiteSpace($TenantId)) { $TenantId = $ci.TenantId } if ($UseCiInputs -and -not $PSBoundParameters.ContainsKey('ManagementGroupId')) { $ManagementGroupId = $ci.ManagementGroupId } $tenant = [guid]::Empty if (-not [guid]::TryParseExact($TenantId, 'D', [ref]$tenant) -or $tenant -eq [guid]::Empty) { throw [AvmConfigurationException]::new('Bicep e2e requires an explicit, nonempty GUID -TenantId.') } $repoRoot = Get-AvmBicepTestRepositoryRoot -Context $Context $registryLayout = $Context.Kind -eq 'bicep-monorepo' -or $repoRoot -cne $Context.Root $selections = @( for ($index = 0; $index -lt $cases.Count; $index++) { $selectionOptions = @{ PoolJson = $TestSubscriptionIds; FallbackSubscriptionId = $SubscriptionId RandomSeed = $SubscriptionSelectionSeed; CaseIndex = $SubscriptionJobIndex + $index } if ($registryLayout) { $modulePath = [System.IO.Path]::GetRelativePath( $repoRoot, $cases[$index].ModuleRoot).Replace('\', '/') $requiredTag = Get-AvmBicepTestSubscriptionTag -RepositoryRoot $repoRoot ` -ModulePath $modulePath if ($requiredTag -cne 'General') { throw [AvmConfigurationException]::new( "Native Bicep e2e cannot run reserved tag '$requiredTag'. Use the protected registry workflow, which holds the subscription environment lock across preparation, tests, and confirmed cleanup.") } } Select-AvmBicepWorkflowSubscription @selectionOptions } ) $selection = $selections[0] if ($null -ne $state -and ($state['subscriptionId'] -ine $selection.SubscriptionId -or $state['tenantId'] -ine $TenantId)) { throw [AvmConfigurationException]::new('Completion state does not match the explicitly selected subscription and tenant.') } $Location = ($Location -replace '\s', '').ToLowerInvariant() if ($Location -cnotmatch '^[a-z0-9]+$') { throw [AvmConfigurationException]::new('Bicep e2e requires an explicit Azure -Location for deployment metadata.') } if ($ResourceGroupPrefix -and ($ResourceGroupPrefix -cnotmatch '^[A-Za-z0-9][A-Za-z0-9_.-]{0,56}$' -or $ResourceGroupPrefix.EndsWith('.'))) { throw [AvmConfigurationException]::new('Bicep e2e requires a safe -ResourceGroupPrefix of at most 57 characters.') } if ($ManagementGroupId -and ($ManagementGroupId -cnotmatch '^[A-Za-z0-9_().-]{1,90}$' -or $ManagementGroupId.EndsWith('.') -or $ManagementGroupId -in @('.', '..'))) { throw [AvmConfigurationException]::new('Bicep e2e -ManagementGroupId must be a safe group name, not an ARM resource ID.') } $requirementsByModule = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) if ($Phase -ne 'Complete') { foreach ($case in $cases) { if ($requirementsByModule.ContainsKey($case.ModuleRoot)) { continue } $caseContext = [pscustomobject]@{ Root = $case.ModuleRoot; Ecosystem = 'bicep' } $requirementsByModule.Add($case.ModuleRoot, [pscustomobject]@{ Features = @(Get-AvmContextRequiredRegistration -Context $caseContext -Kind Feature) Providers = @(Get-AvmContextRequiredRegistration -Context $caseContext -Kind Provider) }) } } if (-not $PSCmdlet.ShouldProcess( "$($cases.Count) Bicep case(s) in the explicitly selected test targets", "Run Bicep e2e phase $Phase")) { return [pscustomobject]$result } Assert-AvmBicepAzureDependency $az = Get-Command -Name az -CommandType Application -ErrorAction Stop | Select-Object -First 1 if ($Phase -eq 'Complete') { $item = [pscustomobject]@{ Case = $cases[0]; Scope = $state['case']['scope'] AssertionFiles = [string[]]@(Get-AvmBicepE2eAssertionFile -CasePath $cases[0].Path) } $runs = @(Complete-AvmBicepTestCase -Item $item -StatePath $CleanupStatePath ` -SubscriptionId $selection.SubscriptionId -TenantId $tenant -RepositoryRoot $repoRoot ` -AzPath $az.Source -KeepResources:$KeepResources -Confirm:$false) } else { $retryPolicy = Get-AvmBicepRetryPolicy $DeploymentRetryLimit = [Math]::Min($DeploymentRetryLimit, $retryPolicy['limits']['deploymentAttempts']) $ValidationRetryLimit = [Math]::Min($ValidationRetryLimit, $retryPolicy['limits']['regionAttempts']) $bicep = Resolve-AvmTool -Name bicep -ModuleRoot $Context.Root -AllowPathFallback:$AllowPathFallback $result.BicepTool = "bicep/$($bicep.Version)" $runDirectory = Join-Path ([System.IO.Path]::GetTempPath()) ('avm-bicep-e2e-{0}' -f [guid]::NewGuid().ToString('N')) $null = New-Item -ItemType Directory -Path $runDirectory -ErrorAction Stop if (-not $IsWindows) { [System.IO.File]::SetUnixFileMode($runDirectory, [System.IO.UnixFileMode]::UserRead -bor [System.IO.UnixFileMode]::UserWrite -bor [System.IO.UnixFileMode]::UserExecute) } $prepared = [System.Collections.Generic.List[object]]::new() $runs = [System.Collections.Generic.List[object]]::new() try { for ($index = 0; $index -lt $cases.Count; $index++) { $case = $cases[$index] $subscription = $selections[$index] $requirements = $requirementsByModule[$case.ModuleRoot] $runId = [guid]::NewGuid().ToString('N') $tokenMap = Get-AvmBicepTestTokenMap -Root $Context.Root -SubscriptionId $subscription.SubscriptionId ` -TenantId $TenantId -ManagementGroupId $ManagementGroupId -RunId $runId ` -TokenFile $TokenFile -Tokens $Tokens -DefaultTokens $ci.Tokens $tokenLocation = if ($tokenMap.ContainsKey('resourceLocation')) { $tokenMap['resourceLocation'] } else { '' } $null = $tokenMap.Remove('resourceLocation') $templatePath = Join-Path $runDirectory ("$index.json") $template = New-AvmBicepTestTemplate -SourcePath $case.Path -DestinationPath $templatePath ` -BicepPath $bicep.Path -Tokens $tokenMap -DeferTokens -Confirm:$false if ($template.Scope -eq 'group' -and [string]::IsNullOrWhiteSpace($ResourceGroupPrefix)) { throw [AvmConfigurationException]::new('Resource-group Bicep e2e cases require -ResourceGroupPrefix.') } if ($template.Scope -eq 'mg' -and [string]::IsNullOrWhiteSpace($ManagementGroupId)) { throw [AvmConfigurationException]::new('Management-group Bicep e2e cases require -ManagementGroupId.') } $attemptInputs = [System.Collections.Generic.List[object]]::new() for ($namingIndex = 0; $namingIndex -lt $DeploymentRetryLimit; $namingIndex++) { $namingId = if ($namingIndex -eq 0) { $runId } else { [guid]::NewGuid().ToString('N') } $attemptTokens = if ($namingIndex -eq 0) { $tokenMap } else { Get-AvmBicepTestTokenMap -Root $Context.Root -SubscriptionId $subscription.SubscriptionId ` -TenantId $TenantId -ManagementGroupId $ManagementGroupId -RunId $namingId ` -TokenFile $TokenFile -Tokens $Tokens -DefaultTokens $ci.Tokens } $null = $attemptTokens.Remove('resourceLocation') $parameterPath = New-AvmBicepTestParameterFile -Root $Context.Root ` -DestinationPath (Join-Path $runDirectory ("$index-$namingIndex-parameters.json")) -Tokens $attemptTokens ` -ParameterFile $ParameterFile -DeferTokens -Confirm:$false $nativeParameters = Get-AvmBicepNativeParameter -ParameterPath $parameterPath -Parameters $Parameters $references = @{} foreach ($key in @($nativeParameters.psbase.Keys)) { if ($nativeParameters[$key] -is [hashtable] -and $nativeParameters[$key].ContainsKey('reference')) { $references[$key] = $nativeParameters[$key] $nativeParameters.Remove($key) } } $attemptInputs.Add([pscustomobject]@{ NamingId = $namingId; Tokens = $attemptTokens; TemplateContent = $template.CompiledContent Parameters = $nativeParameters; ReferenceParameters = $references }) } $resourceType = '' $metadataPath = Join-Path $case.ModuleRoot 'metadata.json' if (Test-Path -LiteralPath $metadataPath -PathType Leaf) { $metadata = ConvertFrom-AvmMetadataJson -Json (Read-AvmMetadataJson -Path $metadataPath) if (Test-AvmMetadataResourceType -CanonicalType ([string]$metadata['canonicalType'])) { $resourceType = $metadata['canonicalType'] } elseif ($metadata['canonicalType'] -cne 'helper' -and (Get-AvmMetadataModuleType -Context $Context -Path $case.ModuleRoot -Metadata $metadata) -eq 'resource') { throw [AvmConfigurationException]::new("Resource module metadata has an invalid canonicalType: $metadataPath") } } $prepared.Add([pscustomobject]@{ Case = $case; Scope = $template.Scope; SubscriptionId = $subscription.SubscriptionId RunId = $runId; TemplatePath = $templatePath; Template = $template.Template TemplateContent = [System.IO.File]::ReadAllText($templatePath) Parameters = $attemptInputs[0].Parameters; ReferenceParameters = $attemptInputs[0].ReferenceParameters AttemptInputs = $attemptInputs.ToArray(); RetryPolicy = $retryPolicy RequiredFeatures = $requirements.Features; RequiredProviders = $requirements.Providers Tokens = $tokenMap; TokenResourceLocation = $tokenLocation; ResourceType = $resourceType SourceHash = Get-AvmBicepTestSourceHash -Case $case AssertionFiles = [string[]]@(Get-AvmBicepE2eAssertionFile -CasePath $case.Path) }) } $registeredFeatures = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) $registeredProviders = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) foreach ($item in $prepared) { $item.RequiredFeatures = @($item.RequiredFeatures | Where-Object { -not $registeredFeatures.Contains("$($item.SubscriptionId):$($_.FullName)") }) $item.RequiredProviders = @($item.RequiredProviders | Where-Object { -not $registeredProviders.Contains("$($item.SubscriptionId):$($_.FullName)") }) $run = Invoke-AvmBicepNativeTestCase -Item $item -TenantId $tenant -Location $Location ` -RepositoryRoot $repoRoot -AzPath $az.Source -CiInput $ci -ManagementGroupId $ManagementGroupId ` -ResourceGroupPrefix $ResourceGroupPrefix -ResourceLocation $ResourceLocation -StatePath $CleanupStatePath ` -Phase $Phase -DeploymentRetryLimit $DeploymentRetryLimit -ValidationRetryLimit $ValidationRetryLimit ` -KeepResources:$KeepResources -Confirm:$false $runs.Add($run) if (-not @($run.Issues | Where-Object { $_.Code -in @('avm.bicep.e2e-feature-registration-failed', 'avm.bicep.e2e-provider-registration-failed') })) { foreach ($requirement in $item.RequiredFeatures) { $null = $registeredFeatures.Add("$($item.SubscriptionId):$($requirement.FullName)") } foreach ($requirement in $item.RequiredProviders) { $null = $registeredProviders.Add("$($item.SubscriptionId):$($requirement.FullName)") } } if ($run.CleanupPending.Count -gt 0) { break } } } finally { foreach ($file in @(Get-ChildItem -LiteralPath $runDirectory -File -Force)) { Remove-Item -LiteralPath $file.FullName -Force -ErrorAction Stop } Remove-Item -LiteralPath $runDirectory -Force -ErrorAction Stop } } $result.FilesProcessed = $runs.Count $result.RunsTotal = $runs.Count $result.RunsPassed = @($runs | Where-Object Status -EQ 'pass').Count $result.RunsFailed = @($runs | Where-Object Status -EQ 'fail').Count $result.RunsSkipped = $cases.Count - $runs.Count $result.AssertionResults = @($runs | ForEach-Object { $_.AssertionResults }) $result.PostResults = @($runs | ForEach-Object { $_.PostResults }) $result.CleanupPending = @($runs | ForEach-Object { $_.CleanupPending } | Select-Object -Unique) $result.CleanupStatePaths = @($runs | ForEach-Object { $_.StatePath }) $result.CleanupDeferred = @($runs | Where-Object CleanupDeferred).Count -gt 0 $result.Issues = @($runs | ForEach-Object { $_.Issues }) $result.Status = if ($result.RunsFailed -gt 0 -or $result.CleanupPending.Count -gt 0) { 'fail' } else { 'pass' } return [pscustomobject]$result } # SIG # Begin signature block # MIInUQYJKoZIhvcNAQcCoIInQjCCJz4CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBDI7CezzRu3IlB # kwWbKxEbYTL9T20FGGFgmVcR/EE7v6CCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghneMIIZ2gIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIMQxCLxjqVU1T8wTGVTYWyeZlEJE # iTTgTHv4Jo1jEqVJMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEADm0OcP1mh9XHL4sF6D7VcyPaNqokrd5/tthREnziN6Y6ibJ3ZpP0C/v/ZnYg # LmY7WEIwwwYVXsnNaYXHGBiw4gq7CwqZqNUQ++y6mqeFyztI9rvMNu9w2sfUsPeL # 2KoXXBcaJ7+eI94VD2ll6ciEs8dzUc11btKq/DE5vzrzEpAcVXdfgPx4kK/6boWO # oLgRvaP+/iyByP6W+EPmAI2iout/Q1UkIrQDlIFxmJhCIQNJE9mKy2cq+NAEnwPW # /bHpQDpxw+OxDNIoL7lyhvUSpdp4618rZcJap4dOpGnKanAfyF3tU0rthLPvjtHR # k9NgCzaCIoQr38SaKd9DS67TK6GCF64wgheqBgorBgEEAYI3AwMBMYIXmjCCF5YG # CSqGSIb3DQEHAqCCF4cwgheDAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFYBgsqhkiG # 9w0BCRABBKCCAUcEggFDMIIBPwIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCB5W9r/VTnFEtsS/1le1G9zBK99CqQVDTlQWf7xkDpAlwIGargIjDfRGBEy # MDI2MTAyMDIyMjA1NC45WjAEgAIB9KCB2aSB1jCB0zELMAkGA1UEBhMCVVMxEzAR # BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p # Y3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQg # T3BlcmF0aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046NTIx # QS0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZp # Y2WgghH+MIIHKDCCBRCgAwIBAgITMwAAAhdx+y6lrwEd6gABAAACFzANBgkqhkiG # 9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G # A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYw # JAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNTA4MTQx # ODQ4MjNaFw0yNjExMTMxODQ4MjNaMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMK # V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0 # IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRp # b25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1MjFBLTA1RTAt # RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIw # DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDPNrBMPt/b2Ee4hgiBQ52DYUTP # gcxdgGIquXVKWaSRT0YwnIqUOkVGyPkQGDUQKRMcecoK122lrbsL6rKgFUlm1P1u # n3nLo4yC5D6p/aZ4LVkZH0IG2IL2lwC5ej2Nsjh/X+9jA/ugMsUHp0qQDHVM2P0J # P47Y7B3RV1QXvrbIZSJEidxmcPFVSqk4NxmRJc7cGyVjba4QRL4X+mp8THoEDCT+ # 7TvPwSeyE7OPwFdw9m7/Hh5PNWPnzpkPJkOtVi6tsCLb5cyE+W83pSvS7xMnH+cd # ZV8QMBMOWu3aUvgik2p4bb/kNpsHmwMm43/YqOJOPLLU2qta7XKzog8HXalZtUvX # vIdU7M1xc4yy7xPRJo5zXyHsLGPkQoVGh52OBRcMCRJxL/yUu+qB09KBncu/ietH # xjpewNVKFMgJIaW9gY2vksEiIh20OBQ8iYi5Wena2WfODKCfOdiUsTNIQYxjuhWZ # TzvIrjcpOvNA4vFZ20jaSHSTfg4ZXqXk1DAQx6gpndJlVkVmT5tab4Lcvd2rDbfz # YOqOJtnZ6KFjnTN8irCWlo8h6onPYH062QTPjwl6nk2jtaBImkPoeMNJx1XVfl0r # yNptcjeIom6o5uRz2gDtzifjpjS37TVZq+GelNk+qSHCwcrKCnA1LwqsnF4+Av/p # 9ShQaQxnQzMPYJrvAgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQUUKzfY5cDTqHhOWUK # pxecfEtWyUMwHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0f # BFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsG # AQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAx # MCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAO # BgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBAEZoBXYQe8SACBxBIOSP # +UvoMeu2kekYlvGQMLRN5s/KNHcp/qSD/pYnTUdSCkENK/kY2ICPXGepm7wMr4d3 # tqvwVfK4xxN7nfT8mMqt9nrhYHWd71+G+UF3j1paQQGK3c4kdu6x8+lsKR+XWbEs # qW1wwW0JFpDZeoPNsk8twGwWyg1wXc8WbBGrmjqZWrSuxK+HYYJSgXsfCUNnTEpE # mcHgjQ16nfa//VtlXUWbAySj/13OFMkJVbG6AaLSrWBElxZI8EdR1bB/kNAuvfze # Qj/06t2ICNbm+G/ftzCRSloSVwnCRhWZHC8FJmMKBYNVy6OwyyXRo6yB9Y7CNjRV # yRUB3n+gHUXtREb2EHqrcqwb8SL0fj//NxTWMs8dOIp1E/UxdgMEzrqggumeu6Dc # EeKRBCcgCBERL5HYY431nILJP5xk5X2obzWP0jh6zUSqOPSg5XHDc0QiUMkPg+fa # +/6nmzUskD038CPfvoxGNEP1FilTS4YqOeRmAbHiffbOzc5HcTq/VH7aefexxKL2 # wOvahpWdzqVBNx9UQRg1afxbzNrl07pvC6zJD18eQKf5GzwErAvY7vaDAntiBFzt # kng9Wg9yKrwDnRxSh4Nb6Wz1EElm+oNsXwVd9MBXKmj2IM3G8T1j8maivkvJe88O # uGjuYZie3kMKDH07tFWsuq+PMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAA # AAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh # c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD # b3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUg # QXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8 # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1N # aWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQAD # ggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2 # AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpS # g0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2r # rPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k # 45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSu # eik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09 # /SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR # 6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxC # aC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaD # IV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMUR # HXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMB # AAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQq # p1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ # 6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0 # cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRt # MBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBB # MAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP # 6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWlj # cm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2 # LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cu # bWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMu # Y3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2 # Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03d # mLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1Tk # eFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kp # icO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKp # W99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrY # UP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QB # jloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkB # RH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0V # iY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq # 0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1V # M1izoXBm8qGCA1kwggJBAgEBMIIBAaGB2aSB1jCB0zELMAkGA1UEBhMCVVMxEzAR # BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p # Y3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQg # T3BlcmF0aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046NTIx # QS0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZp # Y2WiIwoBATAHBgUrDgMCGgMVAGmygBWirdoWlHapB3xWMwM34EjLoIGDMIGApH4w # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQELBQACBQDu # gihJMCIYDzIwMjYxMDIwMTc1MDAxWhgPMjAyNjEwMjExNzUwMDFaMHcwPQYKKwYB # BAGEWQoEATEvMC0wCgIFAO6CKEkCAQAwCgIBAAICG2ECAf8wBwIBAAICEzUwCgIF # AO6DeckCAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoDAqAKMAgCAQAC # AwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAEq0FyIDXoF+h3Km5 # 7n070sLp/Kj5HKUvXHioNQoqo7C65NcQmbgtjKhCe2ZGqr+zIZKhn5plHfLNcEqQ # uLl4IKhqebD8riaoQTFCXmGznjYrsFOjRUqyMePbmbqocyaFTj41XtHu5DV4dBwL # qyVJEoU5VajFkbKgx5IDZGvIIpaIRMnywneqXflHMR4f0g2o3n9bhJvpSuA3Txrk # CB/q5X0hEMNGMPQSy8VfW9g/BzeuXTfVdUBJUR2znmsXad6FvVh6KeNT0NVAI5by # ceS8Qmb5O8YuP8Vh6JUc+4+NjBxAgljeOV8r8PVzj+ZHBfBmRItiOQ6TOGlWB0Qj # 84zH2jGCBA0wggQJAgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo # aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y # cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw # AhMzAAACF3H7LqWvAR3qAAEAAAIXMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG # 9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIJmY/WyEfinActKk # OY8FV39uRtZm3KVncfqcfBMer8ogMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCB # vQQg0PJQYD5dt8mdEs1EreaYTiHoBz8sK5DcHr8XtpPkWlswgZgwgYCkfjB8MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNy # b3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAhdx+y6lrwEd6gABAAACFzAi # BCAC1GPO9nOu8ct4i1Xd9Cwf2CDAC2jVmiD7oA4CEazVAjANBgkqhkiG9w0BAQsF # AASCAgCP7E+0xfSgyBEKTBlrnWQ8EiKPX4iPVDz/7I9Q+YRQEybjehk0pkZBgZR5 # IoIwaq3RwYvTqCB/pKXUyxjUGNNXWc+t+CkeIsUhKe2M9swS4Z+2I/L1VogNaXSA # zngKm++T0FHGisoWm6/M/UV/Bbaj1cPtEInuABUIFfxdXlrJSPxUDExCM+uV2ShX # QaS/AxNtLNSzJkYeK0pDsKdtosWmNL+Tx8yFPAbB+h0cr5CPUfvUA6jUZL6ua3bB # Wo8J2N4KQQl4chmAnt1ISeUgIYZvvvGQMBHjY5eAocl5fZdLSP8x/XIIUpfn3210 # qml0OtnfGL8bhxJichgGVCvNSFkIyOc+hH9oTb2RqRZBviLs393O5B07nbtDJgNR # kpncRgwwR/NJsAx7+89G4fzEFmmWc5KP7X+L0Hwrp7RxUWHquCboj1UcQeuSd/QE # ThoxDcv6DHYNruxSohbtWJjGB37fJwFHCx7HrT93Jg0K7ka0AcNLu7TvHRtKj4fV # ZBAQYF6LQJFpM56pAqtEBjtyfJDkARaOYX76OuaDyiC0HtVbPREr0m3G4xstsF0M # p5xVbxooeXTZMCXyWt42BUP6gpxoLr0zzW1x7KhMbc8vsKGuW2A2fFpAC2iJQmj/ # 7Jnuufxak2W/tBrUW05LAaDUqL+4kWbPvtp2hqg6/sclwuCq+A== # SIG # End signature block |