Engines/Bicep/Invoke-AvmBicepTestE2e.ps1
|
function Invoke-AvmBicepTestE2e { [CmdletBinding(SupportsShouldProcess)] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [pscustomobject] $Context, [switch] $AllowPathFallback, [AllowEmptyCollection()] [string[]] $Example = @(), [switch] $List, [switch] $Recurse, [string] $SubscriptionId, [string] $TenantId, [string] $ManagementGroupId, [string] $Location, [string] $ResourceLocation, [string] $ResourceGroupPrefix, [string] $TokenFile, [System.Collections.IDictionary] $Tokens = @{}, [string] $ParameterFile, [System.Collections.IDictionary] $Parameters = @{}, [switch] $UseCiInputs, [string] $TestSubscriptionIds, [ValidateRange(0, [int]::MaxValue)] [int] $SubscriptionSelectionSeed = 0, [ValidateRange(0, [int]::MaxValue)] [int] $SubscriptionJobIndex = 0, [ValidateSet('All', 'Deploy', 'Complete')] [string] $Phase = 'All', [string] $CleanupStatePath, [switch] $KeepResources, [ValidateRange(1, 3)] [int] $DeploymentRetryLimit = 3, [ValidateRange(1, 3)] [int] $ValidationRetryLimit = 3 ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Context.Ecosystem -ne 'bicep') { throw [System.ArgumentException]::new('Bicep end-to-end tests require a Bicep module context.') } $discovered = @(Get-AvmBicepTestCase -Context $Context -Recurse:($Recurse -or $Phase -eq 'Complete')) if ($List) { $names = @($discovered | Where-Object { -not $_.Ignored } | ForEach-Object { $_.RelativeDirectory }) return ConvertTo-Json -InputObject $names -Compress } $state = $null if ($Phase -eq 'Complete') { if ([string]::IsNullOrWhiteSpace($CleanupStatePath)) { throw [AvmConfigurationException]::new('Bicep completion requires -CleanupStatePath.') } $state = Read-AvmBicepCleanupState -Path $CleanupStatePath if (-not $state.Contains('case')) { throw [AvmConfigurationException]::new('This cleanup state has no case to complete. Use avm test cleanup instead.') } $cases = @($discovered | Where-Object { $_.RelativePath -ceq $state['case']['path'] -and -not $_.Ignored }) if ($cases.Count -ne 1) { throw [AvmConfigurationException]::new('The saved case is missing or ignored in this checkout. Use avm test cleanup without running source.') } if ($Example.Count -gt 0 -or $UseCiInputs -or $Tokens.psbase.Count -gt 0 -or $Parameters.psbase.Count -gt 0 -or $TokenFile -or $ParameterFile -or $TestSubscriptionIds -or $ResourceLocation -or $ResourceGroupPrefix -or $ManagementGroupId) { throw [AvmConfigurationException]::new('Complete selects its case and deployment inputs from state; do not supply deployment-only options.') } if ($Location -and ($Location -replace '\s', '').ToLowerInvariant() -cne $state['case']['metadataLocation']) { throw [AvmConfigurationException]::new('The completion location must match the saved deployment location.') } $Location = $state['case']['metadataLocation'] } else { $cases = @(Select-AvmBicepTestCase -Cases $discovered -Example $Example) } $result = [ordered]@{ Engine = 'bicep'; Tool = 'Az.Resources'; ToolPath = $null; ToolSource = 'PowerShell module' BicepTool = $null; Phase = $Phase; Status = 'skipped'; FilesProcessed = 0 IgnoredFiles = @($discovered | Where-Object Ignored).Count RunsTotal = 0; RunsPassed = 0; RunsFailed = 0; RunsSkipped = $cases.Count AssertionResults = @(); PostResults = @(); CleanupPending = @(); CleanupStatePaths = @() CleanupDeferred = $false; WhatIfChanges = @(); Issues = @() } if ($cases.Count -eq 0) { Write-AvmLog -Level Warning -Message 'No runnable Bicep tests/e2e examples found.' return [pscustomobject]$result } if ($CleanupStatePath -and $cases.Count -ne 1) { throw [AvmConfigurationException]::new('An explicit -CleanupStatePath requires exactly one selected Bicep case.') } if ($ParameterFile -and $Parameters.psbase.Count -gt 0) { throw [AvmConfigurationException]::new('Use either -ParameterFile or -Parameters, not both.') } $ci = Get-AvmBicepWorkflowEnvironment -Enabled:$UseCiInputs if ([string]::IsNullOrWhiteSpace($SubscriptionId)) { $SubscriptionId = $ci.SubscriptionId if ([string]::IsNullOrEmpty($TestSubscriptionIds)) { $TestSubscriptionIds = $ci.PoolJson } } if ([string]::IsNullOrWhiteSpace($TenantId)) { $TenantId = $ci.TenantId } if ($UseCiInputs -and -not $PSBoundParameters.ContainsKey('ManagementGroupId')) { $ManagementGroupId = $ci.ManagementGroupId } $tenant = [guid]::Empty if (-not [guid]::TryParseExact($TenantId, 'D', [ref]$tenant) -or $tenant -eq [guid]::Empty) { throw [AvmConfigurationException]::new('Bicep e2e requires an explicit, nonempty GUID -TenantId.') } $repoRoot = Get-AvmBicepTestRepositoryRoot -Context $Context $registryLayout = $Context.Kind -eq 'bicep-monorepo' -or $repoRoot -cne $Context.Root $selections = @( for ($index = 0; $index -lt $cases.Count; $index++) { $selectionOptions = @{ PoolJson = $TestSubscriptionIds; FallbackSubscriptionId = $SubscriptionId RandomSeed = $SubscriptionSelectionSeed; CaseIndex = $SubscriptionJobIndex + $index } if ($registryLayout) { $modulePath = [System.IO.Path]::GetRelativePath( $repoRoot, $cases[$index].ModuleRoot).Replace('\', '/') $requiredTag = Get-AvmBicepTestSubscriptionTag -RepositoryRoot $repoRoot ` -ModulePath $modulePath if ($requiredTag -cne 'General') { throw [AvmConfigurationException]::new( "Native Bicep e2e cannot run reserved tag '$requiredTag'. Use the protected registry workflow, which holds the subscription environment lock across preparation, tests, and confirmed cleanup.") } } Select-AvmBicepWorkflowSubscription @selectionOptions } ) $selection = $selections[0] if ($null -ne $state -and ($state['subscriptionId'] -ine $selection.SubscriptionId -or $state['tenantId'] -ine $TenantId)) { throw [AvmConfigurationException]::new('Completion state does not match the explicitly selected subscription and tenant.') } $Location = ($Location -replace '\s', '').ToLowerInvariant() if ($Location -cnotmatch '^[a-z0-9]+$') { throw [AvmConfigurationException]::new('Bicep e2e requires an explicit Azure -Location for deployment metadata.') } if ($ResourceGroupPrefix -and ($ResourceGroupPrefix -cnotmatch '^[A-Za-z0-9][A-Za-z0-9_.-]{0,56}$' -or $ResourceGroupPrefix.EndsWith('.'))) { throw [AvmConfigurationException]::new('Bicep e2e requires a safe -ResourceGroupPrefix of at most 57 characters.') } if ($ManagementGroupId -and ($ManagementGroupId -cnotmatch '^[A-Za-z0-9_().-]{1,90}$' -or $ManagementGroupId.EndsWith('.') -or $ManagementGroupId -in @('.', '..'))) { throw [AvmConfigurationException]::new('Bicep e2e -ManagementGroupId must be a safe group name, not an ARM resource ID.') } $requirementsByModule = [System.Collections.Generic.Dictionary[string, object]]::new([System.StringComparer]::Ordinal) if ($Phase -ne 'Complete') { foreach ($case in $cases) { if ($requirementsByModule.ContainsKey($case.ModuleRoot)) { continue } $caseContext = [pscustomobject]@{ Root = $case.ModuleRoot; Ecosystem = 'bicep' } $requirementsByModule.Add($case.ModuleRoot, [pscustomobject]@{ Features = @(Get-AvmContextRequiredRegistration -Context $caseContext -Kind Feature) Providers = @(Get-AvmContextRequiredRegistration -Context $caseContext -Kind Provider) }) } } if (-not $PSCmdlet.ShouldProcess( "$($cases.Count) Bicep case(s) in the explicitly selected test targets", "Run Bicep e2e phase $Phase")) { return [pscustomobject]$result } Assert-AvmBicepAzureDependency $az = Get-Command -Name az -CommandType Application -ErrorAction Stop | Select-Object -First 1 if ($Phase -eq 'Complete') { $item = [pscustomobject]@{ Case = $cases[0]; Scope = $state['case']['scope'] AssertionFiles = [string[]]@(Get-AvmBicepE2eAssertionFile -CasePath $cases[0].Path) } $runs = @(Complete-AvmBicepTestCase -Item $item -StatePath $CleanupStatePath ` -SubscriptionId $selection.SubscriptionId -TenantId $tenant -RepositoryRoot $repoRoot ` -AzPath $az.Source -KeepResources:$KeepResources -Confirm:$false) } else { $retryPolicy = Get-AvmBicepRetryPolicy $DeploymentRetryLimit = [Math]::Min($DeploymentRetryLimit, $retryPolicy['limits']['deploymentAttempts']) $ValidationRetryLimit = [Math]::Min($ValidationRetryLimit, $retryPolicy['limits']['regionAttempts']) $bicep = Resolve-AvmTool -Name bicep -ModuleRoot $Context.Root -AllowPathFallback:$AllowPathFallback $result.BicepTool = "bicep/$($bicep.Version)" $runDirectory = Join-Path ([System.IO.Path]::GetTempPath()) ('avm-bicep-e2e-{0}' -f [guid]::NewGuid().ToString('N')) $null = New-Item -ItemType Directory -Path $runDirectory -ErrorAction Stop if (-not $IsWindows) { [System.IO.File]::SetUnixFileMode($runDirectory, [System.IO.UnixFileMode]::UserRead -bor [System.IO.UnixFileMode]::UserWrite -bor [System.IO.UnixFileMode]::UserExecute) } $prepared = [System.Collections.Generic.List[object]]::new() $runs = [System.Collections.Generic.List[object]]::new() try { for ($index = 0; $index -lt $cases.Count; $index++) { $case = $cases[$index] $subscription = $selections[$index] $requirements = $requirementsByModule[$case.ModuleRoot] $runId = [guid]::NewGuid().ToString('N') $tokenMap = Get-AvmBicepTestTokenMap -Root $Context.Root -SubscriptionId $subscription.SubscriptionId ` -TenantId $TenantId -ManagementGroupId $ManagementGroupId -RunId $runId ` -TokenFile $TokenFile -Tokens $Tokens -DefaultTokens $ci.Tokens $tokenLocation = if ($tokenMap.ContainsKey('resourceLocation')) { $tokenMap['resourceLocation'] } else { '' } $null = $tokenMap.Remove('resourceLocation') $templatePath = Join-Path $runDirectory ("$index.json") $template = New-AvmBicepTestTemplate -SourcePath $case.Path -DestinationPath $templatePath ` -BicepPath $bicep.Path -Tokens $tokenMap -DeferTokens -Confirm:$false if ($template.Scope -eq 'group' -and [string]::IsNullOrWhiteSpace($ResourceGroupPrefix)) { throw [AvmConfigurationException]::new('Resource-group Bicep e2e cases require -ResourceGroupPrefix.') } if ($template.Scope -eq 'mg' -and [string]::IsNullOrWhiteSpace($ManagementGroupId)) { throw [AvmConfigurationException]::new('Management-group Bicep e2e cases require -ManagementGroupId.') } $attemptInputs = [System.Collections.Generic.List[object]]::new() for ($namingIndex = 0; $namingIndex -lt $DeploymentRetryLimit; $namingIndex++) { $namingId = if ($namingIndex -eq 0) { $runId } else { [guid]::NewGuid().ToString('N') } $attemptTokens = if ($namingIndex -eq 0) { $tokenMap } else { Get-AvmBicepTestTokenMap -Root $Context.Root -SubscriptionId $subscription.SubscriptionId ` -TenantId $TenantId -ManagementGroupId $ManagementGroupId -RunId $namingId ` -TokenFile $TokenFile -Tokens $Tokens -DefaultTokens $ci.Tokens } $null = $attemptTokens.Remove('resourceLocation') $parameterPath = New-AvmBicepTestParameterFile -Root $Context.Root ` -DestinationPath (Join-Path $runDirectory ("$index-$namingIndex-parameters.json")) -Tokens $attemptTokens ` -ParameterFile $ParameterFile -DeferTokens -Confirm:$false $nativeParameters = Get-AvmBicepNativeParameter -ParameterPath $parameterPath -Parameters $Parameters $references = @{} foreach ($key in @($nativeParameters.psbase.Keys)) { if ($nativeParameters[$key] -is [hashtable] -and $nativeParameters[$key].ContainsKey('reference')) { $references[$key] = $nativeParameters[$key] $nativeParameters.Remove($key) } } $attemptInputs.Add([pscustomobject]@{ NamingId = $namingId; Tokens = $attemptTokens; TemplateContent = $template.CompiledContent Parameters = $nativeParameters; ReferenceParameters = $references }) } $resourceType = '' $metadataPath = Join-Path $case.ModuleRoot 'metadata.json' if (Test-Path -LiteralPath $metadataPath -PathType Leaf) { $metadata = ConvertFrom-AvmMetadataJson -Json (Read-AvmMetadataJson -Path $metadataPath) if (Test-AvmMetadataResourceType -CanonicalType ([string]$metadata['canonicalType'])) { $resourceType = $metadata['canonicalType'] } elseif ($metadata['canonicalType'] -cne 'helper' -and (Get-AvmMetadataModuleType -Context $Context -Path $case.ModuleRoot -Metadata $metadata) -eq 'resource') { throw [AvmConfigurationException]::new("Resource module metadata has an invalid canonicalType: $metadataPath") } } $prepared.Add([pscustomobject]@{ Case = $case; Scope = $template.Scope; SubscriptionId = $subscription.SubscriptionId RunId = $runId; TemplatePath = $templatePath; Template = $template.Template TemplateContent = [System.IO.File]::ReadAllText($templatePath) Parameters = $attemptInputs[0].Parameters; ReferenceParameters = $attemptInputs[0].ReferenceParameters AttemptInputs = $attemptInputs.ToArray(); RetryPolicy = $retryPolicy RequiredFeatures = $requirements.Features; RequiredProviders = $requirements.Providers Tokens = $tokenMap; TokenResourceLocation = $tokenLocation; ResourceType = $resourceType SourceHash = Get-AvmBicepTestSourceHash -Case $case AssertionFiles = [string[]]@(Get-AvmBicepE2eAssertionFile -CasePath $case.Path) }) } $registeredFeatures = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) $registeredProviders = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) foreach ($item in $prepared) { $item.RequiredFeatures = @($item.RequiredFeatures | Where-Object { -not $registeredFeatures.Contains("$($item.SubscriptionId):$($_.FullName)") }) $item.RequiredProviders = @($item.RequiredProviders | Where-Object { -not $registeredProviders.Contains("$($item.SubscriptionId):$($_.FullName)") }) $run = Invoke-AvmBicepNativeTestCase -Item $item -TenantId $tenant -Location $Location ` -RepositoryRoot $repoRoot -AzPath $az.Source -CiInput $ci -ManagementGroupId $ManagementGroupId ` -ResourceGroupPrefix $ResourceGroupPrefix -ResourceLocation $ResourceLocation -StatePath $CleanupStatePath ` -Phase $Phase -DeploymentRetryLimit $DeploymentRetryLimit -ValidationRetryLimit $ValidationRetryLimit ` -KeepResources:$KeepResources -Confirm:$false $runs.Add($run) if (-not @($run.Issues | Where-Object { $_.Code -in @('avm.bicep.e2e-feature-registration-failed', 'avm.bicep.e2e-provider-registration-failed') })) { foreach ($requirement in $item.RequiredFeatures) { $null = $registeredFeatures.Add("$($item.SubscriptionId):$($requirement.FullName)") } foreach ($requirement in $item.RequiredProviders) { $null = $registeredProviders.Add("$($item.SubscriptionId):$($requirement.FullName)") } } if ($run.CleanupPending.Count -gt 0) { break } } } finally { foreach ($file in @(Get-ChildItem -LiteralPath $runDirectory -File -Force)) { Remove-Item -LiteralPath $file.FullName -Force -ErrorAction Stop } Remove-Item -LiteralPath $runDirectory -Force -ErrorAction Stop } } $result.FilesProcessed = $runs.Count $result.RunsTotal = $runs.Count $result.RunsPassed = @($runs | Where-Object Status -EQ 'pass').Count $result.RunsFailed = @($runs | Where-Object Status -EQ 'fail').Count $result.RunsSkipped = $cases.Count - $runs.Count $result.AssertionResults = @($runs | ForEach-Object { $_.AssertionResults }) $result.PostResults = @($runs | ForEach-Object { $_.PostResults }) $result.CleanupPending = @($runs | ForEach-Object { $_.CleanupPending } | Select-Object -Unique) $result.CleanupStatePaths = @($runs | ForEach-Object { $_.StatePath }) $result.CleanupDeferred = @($runs | Where-Object CleanupDeferred).Count -gt 0 $result.Issues = @($runs | ForEach-Object { $_.Issues }) $result.Status = if ($result.RunsFailed -gt 0 -or $result.CleanupPending.Count -gt 0) { 'fail' } else { 'pass' } return [pscustomobject]$result } # SIG # Begin signature block # MIInKAYJKoZIhvcNAQcCoIInGTCCJxUCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBDI7CezzRu3IlB # kwWbKxEbYTL9T20FGGFgmVcR/EE7v6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIMQxCLxjqVU1T8wTGVTYWyeZlEJEiTTgTHv4Jo1jEqVJMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAA4OcitTG7rJCaFbo # B3Icj7lrekiqL04j3+pI12WdiRjb6TiSWfdkwKntGJ/ORSSx47EiUao36EgJZvmA # Z4dsOzyNxwninOoEJxLxXWIzLp0wI/V4kgvb3Dec6oPDF1czR2XJp8LUamQd0hl9 # kgl1Ftp+nw93WlrNanMioxuOsZrLaGL3zO4lQAWEsT9TYBMWK3cHRzHdw+DtGFqY # DSODAdHXXlmUamKGGpVN2AVByisa0cGPgd0g3d1ySRysAVMyjlI0vexp/ZI/v9Ap # yxRRk4oV2foUmrXrgEHaDYrTiILtmstHq02OeWNGBZ33QMhH6uqY86r5W2tKPS9l # 3Z7BI6GCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wGCSqGSIb3DQEHAqCCF20w # ghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9 # MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDVwQUpLwuzjAsB # p+BNvSENLQV+iGjEtCqCTnWXz3FNjgIGaqqpa2V0GBMyMDI2MTAyMTE3MTA1Mi40 # NzRaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RTAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHqMIIHIDCCBQigAwIBAgIT # MwAAAikO1WQqtJfyGgABAAACKTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMDdaFw0yNzA1MTcxOTQwMDda # MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL # ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk # IFRTUyBFU046RTAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l # LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCe # ItFq4z1oCYSmUZmpYDsbJWEu++1bbc/Mz7Pa3I0ZX5EON+WirB0FvnGlyFRUylzO # 5TJXZfU8QFPOU95P1Y1OZ8J+quA5G+AWSBOr/48scl0s9RBpqgTMq/lbyqBz4CMm # vVR2QevAgVp4a1hbmOm9G7YWey68N5F5rSDYV0wMlg4Iy8YRuFgRN2eBpVXt9IvF # aFmBnQLZfo22KZ3L8PWEHUhXU5dLOSZoTfqqQ/B+deW56ACMnnHjPxZu+szHhZML # UrMWTgs9J7Cn8DtelcKj9aM+0Zq7tkSDHCrwo6eCSfw3clktXRRrdmsccal8RCDi # NFFgZsypwF2aGAF6kg41+Ql+thXpnOMUH4mPCAJZWp0zDWowsK/Yo5jHL1pT/Agb # L3FoAy4cbhOI4Pb1eQFG+jT7skS2F/b+ZACUA1EDZ830K+Bu0yw+FpSGy8tpd1sz # k3cUYjIpzIG4z3oFNmiSJN8YdNd4SHsER5Dks5bxiKbpvmfrOA39jTb7EW2TT7yS # WgJISfvTezuLmQsTVSzNsvapVlHhE2zBqDw409nvOtitCFbnhhXNfatzb2+Gf2tX # 2s6YBa151CC/8+emJvvegXbWNudzYt8cFRom0PZ+fJRhhBfdSqCqr8QeOGJ8VYlm # xFXqx1SdDSkTCSgpsskGqZwh/6umA1g4L7zeGBNngQIDAQABo4IBSTCCAUUwHQYD # VR0OBBYEFCdNRaSL9AW8QvaQ21WjRAXKN4M7MB8GA1UdIwQYMBaAFJ+nFV0AXmJd # g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6 # Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l # AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA # A4ICAQA9wc72lf/czDhp09T3PGAMOQhxl/x04jpE7t39FeqQSn2Up6DVzhgwnzCq # Y3NIhLtUaWrd7NxvrhZDca+J4xzvrRQNPHeRQpnJVeHsyTu53gTBlUB1TRI6OnZt # /AVmR9oMJ/NBOqB+d+SOb8Px6zRgRwk62sFkOkB5lig/DMnYEeR/amW9Hdo8vXcK # maa/DbSOAHSdfZFt+iqMZfNlkEOn71/RAKTNv4Qpq/2FhcjMMmSkIhshBdBVB0Vj # mkwFfhVUf5TTuLJ9sDR4EyCvOZJ3B6g7Iw6WjQxycjwkfzsVMTpfusJ5SwdOHL8y # GPWZOePjwa8ISXWs6kiVK/6S0/JVb1LpxpyYKREQjnU/5OecKt2OXlHdwFWZrwAi # 98RPZa6EExcb/LGLf10tNHju1eTlohY0jzNZQ0BDgSuMZgMU+8EEjtMQMIDnlPGE # UON7LHXHH0KL0FA01PEWVZKrr/LUOuuDTNFzw543FPMp4gkCIFlKdRuciR1IXOk+ # Xse6rj9tJFYgVn+44BHou2XQe5RX30ef3AQWa0mxyGDqJzGsV3X5+bNQeMV88iWu # lJPq5sgnGG9O/H1/HH4HsO9ZKGX/WrJpQmFuQrTOR49XjveaC0xaFmGsNg+RhbtD # 5qTkn+ISDvw0IJ/E/VXNdz/yWgol6r507hT8sAMupnhkF2uw1DCCB3EwggVZoAMC # AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m # dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy # NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9 # DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2 # Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N # 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc # ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ # j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk # lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy # L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M # 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX # pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU # HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode # 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA # ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE # FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB # MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE # AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB # /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug # SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG # AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv # b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt # 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP # MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++ # Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9 # QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2 # wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR # AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z # bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx # t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3 # Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN # uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z # cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIICNQIBATCB+aGB0aSBzjCB # yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc # TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU # U1MgRVNOOkUwMDItMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T # dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQC3v9iSO22xob7ZxN5dXCEq+9Iv # /6CBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3 # DQEBCwUAAgUA7oNGkTAiGA8yMDI2MTAyMTE0MTEyOVoYDzIwMjYxMDIyMTQxMTI5 # WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDug0aRAgEAMAcCAQACAjA9MAcCAQAC # AhIuMAoCBQDuhJgRAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKg # CjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAKqr9mNu # SKvLNwfz7wr0iaRpxrVQOtfV/sBbnMx5+RqrL82zyqOW7teNbqVR8Lo1GD3SMmYr # IJb0lfAq2dAHRYNFIJ6DIq8ysYYtnpLzwDQSis5u2AAFtia7T+ErvVGhmQVTyBTH # QE1Vn6lk7QWlHowoJvyj1PoypJxJsmfyXMMSHoKY1iDDrEwhHa7qrErHdpkWBUJv # AjboeDb53+JYdvtbq3worS19r0kEFAqVFxGycFtkyz7eS1vPiGl1fowQN8ALuuMB # vlBslBf1rJJUY0TJsBCVNg5mdgRRPCcdqLdPKB0uS3JL26dv68IA8rpmoFfClYCS # Pnvpg6IEmK0BKU4xggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UE # CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z # b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ # Q0EgMjAxMAITMwAAAikO1WQqtJfyGgABAAACKTANBglghkgBZQMEAgEFAKCCAUow # GgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCByTlf/ # GvgtXHegATxIREpqFxigxyLhfM8SEK+eXy50JDCB+gYLKoZIhvcNAQkQAi8xgeow # gecwgeQwgb0EILfKPfEitvD/lSvEumxqPkkeOEtgkmKFEVMuel9oOrqSMIGYMIGA # pH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT # B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE # AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIpDtVkKrSX8hoA # AQAAAikwIgQgzWeIOsjtCFgHh2hpy8ySRZ7R7kPjFfud1sXctvLcT88wDQYJKoZI # hvcNAQELBQAEggIAhGnSACKsXzJ5tOs2Xes1h46uOpDTEibMiS72lo6lp6dGsyog # ZQHwRTT0rs2FZ7bcn8rnpOR3gR6VEu+4kumnrxjofNTY/c/d5X2fWIDfw6BoBiNG # oiihtJaQSkTTWyrW+dJc77F7WZo/I6ICotnyJIPojQTuH3MN8IHr/mkhq1MLY03T # nXzncb/aDT9Mu5c0/COgk6jFDq+ZZovKets2olDrYmIbGYTulCFPzyeMpxwpoMJr # B2xlGPqNWyX4JhjXBi8T61mTWOZ/Gk61Sm7YUwQ9TlS2qwyOmUdMOSt7GrPESc3i # 0k9wSH9kDH0ven++sCax5k9Nhb0Zharc1D/HqU1aSSnvxOGxw2V4FL8VBV+f4ZrN # aeVKiNYwA+b4+itK3iA0rOKyb3DrexAuka24itI+rQhKW4IEKxyqHViNjBS7Doss # Cl8oro+QNXK1ZZ1IYWVA3gVsJTwdQ8bPjZHMjw6KjSFt+QGWioam5/cnJ5VOaF+a # g51D07xtbBvey/96IqbwtP5zg9JI06fYD89PqeKmtKL9tmSQ9GNG4USpU4eP2U2k # OBWB+4d2xpOnfZs1mKKxT8zBiIPKw9jkHc3DJZFAJ+jsCN1JREnAybsaCm1EUwYB # 3et+yBm++Gf/btTQCKYSMf3zAqH9hNCWuXBjxAbx4wo8sNTDwImtRch0K+Q= # SIG # End signature block |