Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1
|
function Get-AvmBicepDeploymentCleanupTarget { [CmdletBinding()] [OutputType([pscustomobject])] param( [AllowEmptyCollection()] [string[]] $DeploymentIds = @(), [string[]] $PreflightRejectedDeploymentIds = @(), [ValidateRange(1, 1000)] [int] $SearchRetryLimit = 40, [ValidateRange(0, 3600)] [int] $SearchRetryInterval = 60, # A retry snapshot requires terminal records and complete Create history, but deletes nothing. [switch] $RequireCompleteRemoval ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new( [System.StringComparer]::OrdinalIgnoreCase) foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) { if ($deployment.type -ine 'Microsoft.Resources/deployments') { throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)") } $records[$deployment.resourceId] = @{ Id = $deployment.resourceId Required = $true Depth = 0 PreflightRejected = $false Status = 'Pending' ErrorCode = '' ErrorMessage = '' References = 0 } } foreach ($rejectedId in $PreflightRejectedDeploymentIds) { if (-not $records.ContainsKey($rejectedId)) { throw [AvmConfigurationException]::new( 'Preflight rejection metadata contains IDs outside the attempted deployments.') } $records[$rejectedId].PreflightRejected = $true } $resources = [System.Collections.Generic.HashSet[string]]::new( [System.StringComparer]::OrdinalIgnoreCase) for ($round = 1; $round -le $SearchRetryLimit; $round++) { $queue = [System.Collections.Generic.Queue[string]]::new() foreach ($record in $records.Values) { if ($record.Status -eq 'Pending') { $queue.Enqueue($record.Id) } } while ($queue.Count -gt 0) { $record = $records[$queue.Dequeue()] $nextPath = $record.Id + '/operations?api-version=2025-04-01' $visitedPages = [System.Collections.Generic.HashSet[string]]::new( [System.StringComparer]::Ordinal) $operations = [System.Collections.Generic.List[object]]::new() $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) $exports = @{} try { if ($RequireCompleteRemoval) { Assert-AvmBicepCleanupDeploymentTerminal -Record $record if ($record.Status -eq 'RejectedWithoutRecord') { continue } } while (-not [string]::IsNullOrEmpty($nextPath)) { if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) { throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath") } $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' -Read { Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop } $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' ` -AllowedStatus @(200, 404) if ([int]$response.StatusCode -ne 200) { $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error' $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code') $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$' if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') { $record.Status = 'ContainerRemoved' break } if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') { if ($RequireCompleteRemoval) { throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)") } if ($visitedPages.Count -gt 1) { throw [AvmProcessException]::new( "Deployment record disappeared during pagination: $($record.Id)") } if ($record.PreflightRejected) { $record.Status = 'RejectedWithoutRecord' } elseif (-not $record.Required) { $record.Status = 'NestedRecordAbsent' Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning } $record.ErrorCode = 'DeploymentNotFound' break } throw [AvmProcessException]::new( "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.") } if ($document -isnot [System.Collections.IDictionary] -or -not $document.Contains('value') -or $document['value'] -isnot [array] -or @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) { throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)") } foreach ($operation in $document['value']) { $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate if ($properties -isnot [System.Collections.IDictionary]) { throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)") } if ($RequireCompleteRemoval -and ($properties['provisioningState'] -isnot [string] -or $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or $properties['provisioningOperation'] -isnot [string] -or [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) { throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)") } $operations.Add($properties) if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') { continue } $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate if ($null -eq $target -and -not $RequireCompleteRemoval) { continue } $targetId = $null if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] } if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) { if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) { continue } throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)") } foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) { if ($resource.type -ieq 'Microsoft.Resources/deployments') { if (-not $records.ContainsKey($resource.resourceId)) { $records.Add($resource.resourceId, @{ Id = $resource.resourceId Required = $false Depth = $record.Depth + 1 PreflightRejected = $false Status = 'Pending' ErrorCode = '' ErrorMessage = '' References = 0 }) $queue.Enqueue($resource.resourceId) } $child = $records[$resource.resourceId] $child.References++ $null = $children.Add($resource.resourceId) if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) { $child.PreflightRejected = $false if ($child.Status -eq 'RejectedWithoutRecord') { $child.Status = 'Failed' $child.ErrorCode = 'AmbiguousPreflightRejection' $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'." } } } else { $null = $resources.Add($resource.resourceId) } } } $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink ( Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate) if ([string]::IsNullOrEmpty($nextPath)) { $record.Status = 'Resolved' $record.ErrorCode = '' } } if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') { foreach ($childId in $children) { $child = $records[$childId] if (-not $child.Required -and $child.References -eq 1) { $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray() } } } } catch { if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') { throw } $record.Status = 'Failed' $record.ErrorCode = 'LookupFailed' $record.ErrorMessage = $_.Exception.Message Write-AvmLog -Message ( "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)" ) -Level Warning } } $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' }) if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) { break } Write-AvmLog -Message ( "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit." ) -Level Info Start-Sleep -Seconds $SearchRetryInterval } $issues = [System.Collections.Generic.List[object]]::new() foreach ($record in $records.Values) { if ($record.Status -eq 'Pending') { $record.Status = 'Missing' $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)" } $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved') if ($unresolved) { $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)" } if ($record.Status -in @('Missing', 'Failed') -or $unresolved) { $issues.Add([pscustomobject]@{ DeploymentId = $record.Id Code = $record.ErrorCode Message = $record.ErrorMessage }) } } [pscustomobject]@{ ResourceIds = [string[]]@($resources) Deployments = @($records.Values) Issues = $issues.ToArray() } } # SIG # Begin signature block # MIInRQYJKoZIhvcNAQcCoIInNjCCJzICAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDUPe/o3/C8wDe8 # VV6wD4KGq9yO8UolQTR0FXHtgq/hS6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnhMIIZ3QIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK # KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEICDXbV3H # LWPAxaUu4pqDsT3RkjKs6UdrXMNvkr1QcuT2MEIGCisGAQQBgjcCAQwxNDAyoBSA # EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w # DQYJKoZIhvcNAQEBBQAEggEArQu8WtQ1XUTwBv5dr3xvdZy3NS3q6OwJ9Un921Mm # SjshZOf6/QCYHvj0lizo3sLag7aO0AvN8pGSbZLRj4pOpwo4whxbDJVPDcy4gzZO # TOgdV6aQizcxIR4fHyqZi2Iws+dbQ7Sg44REq7RTC7OxoFLhXNUl0aKxhDAi9Ny9 # jMq8OE/gwwqVCoN56H5op00V/FmXCvgQxfaOQ0qeDhtjF62tYsdBFmDu0wS2m4wp # hru2C6+7wuwtaqeRXV2uCK7TMLWRJt6/hWtw9IZVcqAaQPgRez2Wf1BMeWreH6oD # 4qe+enWe+5gCSDlCK81b6wq/EeO9x0tr563sKyPVkcXgVqGCF5MwghePBgorBgEE # AYI3AwMBMYIXfzCCF3sGCSqGSIb3DQEHAqCCF2wwghdoAgEDMQ8wDQYJYIZIAWUD # BAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoD # ATAxMA0GCWCGSAFlAwQCAQUABCCXiVwwfsC0kJQH8hnucFyXkIJK1gEQUWhANCHz # mpI9CAIGaqqN92E0GBIyMDI2MTAyMTA4NTMyOS4yM1owBIACAfSggdGkgc4wgcsx # CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt # b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1p # Y3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNT # IEVTTjpGMDAyLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3Rh # bXAgU2VydmljZaCCEeowggcgMIIFCKADAgECAhMzAAACICTh5uAXubSOAAEAAAIg # MA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4X # DTI2MDIxOTE5Mzk1MloXDTI3MDUxNzE5Mzk1MlowgcsxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh # IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpGMDAyLTA1RTAt # RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIw # DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANFhjvKvuKNboJHXvy4q94gy5+61 # Y6JzGAnAo5x7/YY5Bx66zplZ9fXiLeM2Dck4/swYkyQ4C5zBYHCIDxRGn5liQaOl # WhWQZmxXbtaOovCl/YDCoGwn9POrATskUVrG6nct3GPwaN0nKYMVGt1U3+lgegEW # uMPUiQgO7xvUJafy2CiaIpFJj5JO8mr32ZWR2mEwEhQY56BCfLypF3bhUwTTGLw6 # iaSz1mr0SMN4ocam8BtdQRDqbdxE6gQ+FMT+aLB5Af1Oom3cg6yo+/cvy6uiMHvj # tcELbLQIMgeUotwuXdkbwPslcqdZMV6feaww8mly+tDfNQFUmsf+YjdHEeYKH2mk # M/S4bX48nCTof/H6x+gb2FbrjGheSnHoMR81k19xd0ptcXbxcRd0s2fOjdIs1XKZ # 5AmE2o5IqGdTzhCcqauMSTnjUmK6uUMKQJY72VQFQxv3HSfJ9dRs1E9UuA/49MxF # 1c6jAl1gLMJB83ZmovSzhgjbwXUNufsGDDYTg/UT26ey8zMke3OFLZOHdOkJ8Fs4 # ZqUiUX3H8Mln+yyb/LLNP1i0gV6qZ83EE9MTdo66HofGZMgLN9gABO9Y2EFujX1D # CyM94D0m+GpMsLYpQ2CteugbLh4NmjSfuMViNmRSKHVPL7wTqoS9XY1rpnmBTIPl # r60cYOarr0KZSId/AgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQU28ic4IiHEYDyZjuX # WDTtQe/I2DMwHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0f # BFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsG # AQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAx # MCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAO # BgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBAK0oYG2jUFK+bhYUj4nQ # 1LJWFTUscvsXd9uNnZ3sXkqf8UJMFlenOsNWXrcUtE1wgWmcnLj+eWDjevtPmwk9 # 2jgyzwANIdAQmcdK7fH1SmMLNEQE+L36ceG8OBHH/VaYEPqBBRkks6Fw3ZPFbgon # KGKcy2IEW2Q1Fna+ZnUwB01dObl3QvCTfDOP79/tUIJNYJclKio1rdVT/qwAIcj3 # sS9ufODxt3eHGt/PoJwJW5/vt6C9EeKe2Em7BJF48/tpWZx69vWdZQgAgJ0F5sdA # 6vM0h5YEhDC9wVpLdIVz7j2uqvBA4wUNHgVgHNLtvRB4FXEW4svaJW7goAcw1SEs # tIPiIosMUE1M61PNOWEa8yAbvsDVyN5CsMwdrqhF4wN5QOodSvG/yDshF0iH6HSA # MuTM3TEi7OWLQG/sm3JsYltXonFoMXgLNIIgxGkrn2cjqIqjguCdtAFklbv7pqRi # wob+lc+V/E2/YiekPXS1IKQK/D2SvpbX41E34S5lzNGADBaVwr1clne67+/+jEe0 # 7v+SZUiznUX2pXpjZA1d3q1Tjpg+sr3ybZAPKz6W8s2KYrR7XFntnUZrAqiEoa+U # sAtYOVlCqAd8nfUIHQuUgMjuIvJhOl3aLIqOqyRtCLIy0gIf5GYf+gKDsk4rRkDd # cgxtr1pJaAEXdBnqkbcQZ5CqMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAA # AAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh # c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD # b3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUg # QXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8 # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1N # aWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQAD # ggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2 # AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpS # g0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2r # rPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k # 45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSu # eik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09 # /SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR # 6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxC # aC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaD # IV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMUR # HXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMB # AAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQq # p1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ # 6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0 # cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRt # MBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBB # MAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP # 6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWlj # cm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2 # LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cu # bWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMu # Y3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2 # Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03d # mLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1Tk # eFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kp # icO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKp # W99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrY # UP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QB # jloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkB # RH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0V # iY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq # 0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1V # M1izoXBm8qGCA00wggI1AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEG # A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj # cm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBP # cGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUwLUQ5 # NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAH # BgUrDgMCGgMVAJMYD2+mwnqCWoIuYjSuCAbHhgQSoIGDMIGApH4wfDELMAkGA1UE # BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc # BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0 # IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQELBQACBQDugoJcMCIYDzIw # MjYxMDIxMDAxNDIwWhgPMjAyNjEwMjIwMDE0MjBaMHQwOgYKKwYBBAGEWQoEATEs # MCowCgIFAO6CglwCAQAwBwIBAAICHUIwBwIBAAICE6kwCgIFAO6D09wCAQAwNgYK # KwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQAC # AwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAAiM5C0E4PBsJjdpiEFGePMdvVtDjLKxO # 5tWgNl+6P6khk8NP0df/31DUJLuJjB6GTJJ6gY8m79dnp2/t4HaFkD42GdNspthY # HZ8XOf3uDfENIBqsB1ACwq1cBPykrLpmYp0Rq/hXDHkpq6mRtQ+Tf1EYZh3VziAa # 1ejm5YJuWS63FUyDgz6Hf99LK7cS+P+t6K/a/108zpoWXYR4OqxlPiWSvmaudRuO # phBfyY63FcgJ16scNVU6rIPIIHajuh7T03I1MCIJgzbioC0YKSssIkoRB5UUl9I7 # clhMgO9rCV9+aL4yTvYQrxj/NLMISgY/4Evjt1EGngJrIUQdTMVe/DGCBA0wggQJ # AgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAk # BgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACICTh5uAX # ubSOAAEAAAIgMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZI # hvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIF+lE9zhRkbrR373CCecHojvC1ARP7Jn # CRSgF2l8vxzmMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQg43u/I6U8DVWq # USnRAhUaU13xLlhYGcqP3su5NYdI7a8wgZgwgYCkfjB8MQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T # dGFtcCBQQ0EgMjAxMAITMwAAAiAk4ebgF7m0jgABAAACIDAiBCCQJolfDAyt1gAN # J7bpq25uGRQ+yFYHerxYT0pWG2pCuTANBgkqhkiG9w0BAQsFAASCAgDOfcKhHAXx # ZP7QaL1mVs+GhnRi/ypqgA8Q4C3+Ty57q33s/8r2xQ7x9zuHA6l+PCcphjU7FS5t # P7kSWSR99P6HGkO7NueFlrvMLeKHAMfO6qnieEcg6tG8IEEViKbFWbT07sGpiI1Y # MyrYj+j+XS7dhcyFHW+W1EanOuUChCRcoHtoIqB5n7r1Ra86gVTnT8Dt9Gq9uuwK # WRN5xbkh0P4GzQRN930/j8uqyNcLYfR2Nap9FjnUdETP3zrMFnwQldOJu8WYUmmx # Twajm87WKiUHszEfPr3dj3fQcwwcJ3FjjpZy7CgycfeDe6W1JW5LpKDXvlxmpH5y # qPtjuljlVFXB31Oxw811dhqe6ha/I5IIl2EKDEybmpBFZIzu/h+CM80NOFG5rGqJ # x3zlOc/Sz2ni9hnH01cg9804CJUAqlsnDMCJH3oDuwqDm6UCwU7mOiOgMwbrnXmP # W93on9/TqmSu6FwOHaCRuhg9WflQQ6QT1ds4uxWENKMSIkKCdHbcGBZGR//binR2 # 5P77gXWdv6BDksmM78Vj/fiSqV6tfsUjciNha7soOlwg5BwQZaKUrO+vI3A5QSwm # 3b6uIMRfEuAORRxZ7qWxVRi+0sU8KuwIG63QQd8KFVsq7iVtuW4tJ/+OzqV/S5F6 # DF7fxTVOdIj7wqckIHR8Q4Kgw0O4QnsCaQ== # SIG # End signature block |