Private/Tests/New-AvmBicepNativeDeployment.ps1
|
function New-AvmBicepNativeDeployment { [CmdletBinding(SupportsShouldProcess)] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [System.Collections.IDictionary] $State, [Parameter(Mandatory)] [string] $StatePath, [Parameter(Mandatory)] [hashtable] $DeploymentInput, [ValidateRange(1, 3)] [int] $Attempt = 1, [ValidateSet('Initial', 'InPlace', 'Fresh')] [string] $Mode = 'Initial', [string] $NamingId, [string] $ResourceLocation, [switch] $ClassifyRetry, [ValidateScript({ $_.Kind -eq [System.DateTimeKind]::Utc })] [datetime] $RecoveryDeadlineUtc ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $name = $DeploymentInput['DeploymentName'] if (-not $name) { $name = 'avm-e2e-{0}-t{1}' -f $State['runId'], $Attempt } $id = Get-AvmBicepScopedDeploymentId -Scope $DeploymentInput.Scope -SubscriptionId $State['subscriptionId'] ` -DeploymentName $name -ResourceGroupName $DeploymentInput['ResourceGroupName'] ` -ManagementGroupId $DeploymentInput['ManagementGroupId'] if (-not $PSCmdlet.ShouldProcess($id, 'Record and submit Bicep test deployment')) { return [pscustomobject]@{ Status = 'skipped'; DeploymentName = $name; DeploymentId = $id; Outputs = @{} } } $inputOptions = $DeploymentInput.Clone() $inputOptions.DeploymentName = $name $observationOptions = @{} if ($PSBoundParameters.ContainsKey('RecoveryDeadlineUtc')) { $observationOptions.RecoveryDeadlineUtc = $RecoveryDeadlineUtc } if ($DeploymentInput.Scope -in @('mg', 'sub')) { $submissionProfile = Get-AzContext -ErrorAction Stop $tenant = Get-AvmPropertyValue -InputObject $submissionProfile -Name 'Tenant' $tenantId = Get-AvmPropertyValue -InputObject $tenant -Name 'Id' -NoEnumerate if ($tenantId -isnot [string] -or [string]::IsNullOrWhiteSpace($tenantId)) { throw [AvmConfigurationException]::new('Submission requires an authenticated Azure tenant context.') } $inputOptions.DefaultProfile = $submissionProfile $observationOptions.DefaultProfile = $submissionProfile } $entries = @($State['deployments'] | Where-Object { $_['id'] -ieq $id }) if ($Mode -eq 'InPlace') { if ($entries.Count -ne 1 -or $entries[0]['status'] -cne 'Failed') { throw [AvmConfigurationException]::new('An in-place retry requires the exact previously failed deployment.') } $entry = $entries[0] $entry['status'] = 'Attempted' $entry['preflightRejected'] = $false } else { if ($entries.Count -ne 0) { throw [AvmConfigurationException]::new('A fresh deployment identity was already recorded.') } $entry = @{ id = $id; status = 'Attempted'; preflightRejected = $false } $State['deployments'] = @($State['deployments']) + @($entry) } if ($State.Contains('attempts')) { $State['case']['resourceGroupName'] = [string]$DeploymentInput['ResourceGroupName'] $State['attempts'] = @($State['attempts']) + @([ordered]@{ number = $Attempt; mode = $Mode; namingId = $NamingId; deploymentId = $id resourceGroupName = [string]$DeploymentInput['ResourceGroupName']; resourceLocation = $ResourceLocation }) } Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false $failure = $null $recoveryFailure = $null $kind = 'Other' $outputs = $null $submissionReturned = $false $failureQueryAllowed = $false $recoveredFailure = $false try { $response = Invoke-AvmBicepNativeArmOperation @inputOptions -Operation Create -Confirm:$false $submissionReturned = $true if ($null -eq $response -or $response -is [System.Collections.IList] -or (Get-AvmPropertyValue -InputObject $response -Name 'Id' -NoEnumerate) -isnot [string] -or (Get-AvmPropertyValue -InputObject $response -Name 'Id' -NoEnumerate) -ine $id -or $null -ne (Get-AvmPropertyValue -InputObject $response -Name 'Error' -NoEnumerate)) { throw [AvmProcessException]::new('The native deployment response did not identify the recorded deployment.') } $provisioningState = Get-AvmPropertyValue -InputObject $response -Name 'ProvisioningState' -NoEnumerate $entry['status'] = if ($provisioningState -is [string] -and $provisioningState -cin @('Succeeded', 'Failed')) { $provisioningState } else { 'Unknown' } $outputs = Get-AvmPropertyValue -InputObject $response -Name 'Outputs' -NoEnumerate if ($null -ne $outputs -and $outputs -isnot [System.Collections.IDictionary]) { throw [AvmProcessException]::new('The native deployment returned invalid outputs.') } } catch { $failure = $_ $kind = Get-AvmBicepDeploymentErrorKind -ErrorRecord $_ $failedPattern = "^(?:\d{2}:\d{2}:\d{2} - )?The deployment '$([regex]::Escape($name))' failed with error\(s\)\. " + '(?:Showing \d+ out of \d+ error\(s\)\. Status Message: (?:(?!\(Code:)[^\r\n])* )?\(Code: DeploymentFailed\)(?:\s|$)' if (Test-AvmBicepDeploymentPreflightRejection -ErrorRecord $_ -DeploymentName $name) { $entry['status'] = 'Rejected' $entry['preflightRejected'] = $true } elseif (-not $submissionReturned -and $kind -eq 'Other' -and $_.Exception.Message -cmatch $failedPattern) { $entry['status'] = 'Failed' } else { $entry['status'] = 'Unknown' } $failureQueryAllowed = -not $submissionReturned -and $kind -eq 'Other' -and -not $entry['preflightRejected'] if ($kind -eq 'Cancellation') { Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false throw } $canObserve = Test-AvmBicepRetryErrorRecord -ErrorRecord $_ -Kind MetadataTimeout if (-not $submissionReturned -and $DeploymentInput.Scope -eq 'mg' -and $kind -eq 'Forbidden') { $canObserve = $true } if (-not $submissionReturned -and $DeploymentInput.Scope -eq 'sub' -and $kind -eq 'Other') { $canObserve = Test-AvmBicepNestedDeploymentReadFailure -ErrorRecord $_ -DeploymentId $id -DefaultProfile $submissionProfile } if ($canObserve -and $entry['status'] -eq 'Unknown') { Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false Write-AvmLog -Level Warning -Message "Request for deployment '$name' returned $kind; watching it without resubmitting." try { $recovered = Wait-AvmBicepNativeDeployment -DeploymentId $id @observationOptions $entry['status'] = $recovered.State $failureQueryAllowed = $false if ($kind -eq 'Forbidden' -and $recovered.State -ne 'Succeeded') { throw [AvmProcessException]::new("The original management-group deployment '$id' failed after HTTP 403.") } $outputs = $recovered.Outputs $recoveredFailure = $recovered.State -eq 'Failed' } catch { $recoveryFailure = $_ if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation') { Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false throw } Write-AvmLog -Level Warning -Message "Status recovery for '$name' did not confirm success; outcome '$($entry['status'])'." } } } $retryMode = '' if ($ClassifyRetry -and $kind -ne 'Forbidden' -and $null -eq $recoveryFailure -and ($entry['status'] -eq 'Failed' -or $failureQueryAllowed)) { $classificationFailure = $failure if ($recoveredFailure) { $classificationFailure = $null } elseif ($null -ne $failure -and $failure.CategoryInfo.Category -eq 'OperationStopped') { $classificationFailure = [System.Management.Automation.ErrorRecord]::new( $failure.Exception, 'AvmBicepConfirmedDeploymentFailure', [System.Management.Automation.ErrorCategory]::InvalidResult, $null) } try { $retryKind = Get-AvmBicepDeploymentRetryKind -DeploymentId $id -SubscriptionId $State['subscriptionId'] ` -ResourceLocation $ResourceLocation -Failure $classificationFailure $retryMode = switch ($retryKind) { 'Regional' { 'Fresh' } 'Transient' { 'InPlace' } default { '' } } if ($retryMode) { $entry['status'] = 'Failed' } } catch { if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation') { Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false throw } $recoveryFailure = $_ Write-AvmLog -Level Warning -Message "Failure evidence for '$name' could not be confirmed; no retry is permitted." } } Save-AvmBicepCleanupState -State $State -Path $StatePath -Confirm:$false if ($null -eq $outputs) { $outputs = @{} } return [pscustomobject]@{ Status = if ($entry['status'] -eq 'Succeeded') { 'pass' } else { 'fail' } DeploymentName = $name; DeploymentId = $id; Outputs = $outputs; Attempt = $Attempt RetryMode = $retryMode; ErrorKind = $kind; Outcome = $entry['status'] ErrorRecord = $failure; RecoveryErrorRecord = $recoveryFailure } } # SIG # Begin signature block # MIInQQYJKoZIhvcNAQcCoIInMjCCJy4CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDMFNPJWW/vHbw+ # dO4NGy+/jP4ht5fp+1Up+HMj6oZv8KCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIAyxiMELrK81qjGz3/MqVDdjg5e1Of48wwpGYAuhDXOrMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAKycIn5uBTtHx9Z/8 # 7Mq3YGRaugXlIxNAuzFWKbZZg9kxFSbfcCP5Wi12gulIGFJLCMZ4vVsK1T3rnHlp # mYv7QK+PlclIAUeTs5Gnw3Pini9XgivJTxkxq268NbTDwarocasB1pABJOcfK6BH # OLkaWm1DPHdg1v+r/mDiosjyInH+lVowmdXrwDbLyik5HcBdoN+hWfQGdpT3Io+C # 1pMDhAqy4Qm7X4Lch+O4oYQo+soNrIWKkq2oYbVgBynn//Iq1KmJDQNSeJcEqHN0 # lHFilnh2JIczkMEofiO/q9WrFMjz5zghuCxy0K6reVMXL0CgvNAB8q+SPF49Ujnd # nVp7LqGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4Yw # gheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF # MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCCq6/E2nkENLhir # eyAdRGqkNC2twXUj/dlfND2+JbzU7QIGaq3Kifj7GBMyMDI2MTAyMTE3MTExMi4y # MDFaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp # bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyRDFBLTA1RTAtRDk0NzEl # MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIF # EKADAgECAhMzAAACEtEIBjzKGE+qAAEAAAISMA0GCSqGSIb3DQEBCwUAMHwxCzAJ # BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv # c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxNVoXDTI2MTEx # MzE4NDgxNVowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn # MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjJEMUEtMDVFMC1EOTQ3MSUwIwYDVQQD # ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF # AAOCAg8AMIICCgKCAgEAr0zToDkpWQtsZekS0cV0quDdKSTGkovvBaZH0OAIEi0O # 3CcO77JiX8c4Epq9uibHVZZ1W/LoufE172vkRXO+QYNtWWorECJ2AcZQ10bpAltk # hZNiXlVJ8L3QzhKgrXrmMkm2J+/g81U23JPcO4wXHEftonT3wpd//936rjmwxMm7 # NkbsygbJf+4AVBMNr4aMPQhBd76od0KMB6WrvyEGOOU0893OFufS5EDey4n44Wga # xJE0Vnv3/OOvuOw5Kp1KPqjjYJ+L9ywLuBMtcDfLpNQO/h1eFEoMrbiEM67TOfNl # XfxbDz4MlsYvLioxgd2Xzey1QxrV1+i+JyVDJMiSe9gKOuzpiQQFE19DUPgsidyj # LTzXEhSVLBlRor0eCVf7gC6Rfk8NY3rO2sggOL79vU5FuDKTh/sIOtcUHeHC42jB # GB+tfdKC1KOBR+UlN9aOzg8mpUNI2FgqQvirVP9ppbeMUfvp2wA9voyTiRWvDgzC # xo8xlJ1nscYTHIQrmkF9j/Ca0IDmt8fvOn64nnlJOGUYZYHMC1l0xtgkYTE1ESUq # qkawKk7iqbxdnLyycS+dR+zaxPudMDLrQFz8lgfy9obk0D8HC2dzhWpYNn5hdkoP # EzgCqQUOp8v3Qj/sd4anyupe5KoCkjABOP3yhSQ4W9Z+DrJnhM/rbsXC7oTv26cC # AwEAAaOCAUkwggFFMB0GA1UdDgQWBBRSBblSxb5cYKYOwvd/VfoXOfu33jAfBgNV # HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o # dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU # aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG # CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz # L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV # HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH # gDANBgkqhkiG9w0BAQsFAAOCAgEAXnSAkmX79Rc7lxS1wOozXJ7V0ou5DntVcOJp # lIkDjvEN8BIQph4U+gSOLZuVReP/z9YdUiUkcPwL1PM245/kEX1EegpxNc8HDA6h # KCHg0ALNEcuxnGOlgKLokXfUer1D5hiW8PABM9R+neiteTgPaaRlJFvGTYvotc0u # qGiES5hMQhL8RNFhpS9RcIWHtnQGEnrdOUvCAhs4FeViawcmLTKv+1870c/MeTHi # 0QDdeR+7/Wg4qhkJ2k1iEHJdmYf8rIV0NRBZcdRTTdHee35SXP5neNCfAkjDIuZy # cRud6jzPLCNLiNYzGXBswzJygj4EeSORT7wMvaFuKeRAXoXC3wwYvgIsI1zn3DGY # 625Y+yZSi8UNSNHuri36Zv9a+Q4vJwDpYK36S0TB2pf7xLiiH32nk7YK73Rg98W6 # fZ2INuzYzZ7Ghgvfffkj4EUXg1E0EffY1pEqkbpDTP7h/DBqtzoPXsyw2MUh+7yv # Wcq2BGZSuca6CY6X4ioMuc5PWpsmvOOli7ARNA7Ab8kKdCc2gNDLacglsweZEc9/ # VQB6hls/b6Kk32nkwuHExKlaeoSVrKB5U9xlp1+c8J/7GJj4Rw7AiQ8tcp+WmfyD # 8KxX2QlKbDi4SUjnglv4617R8+a/cDWJyaMt8279Wn7f2yMedN7kfGIQ5SZj66Rd # hdlZOq8wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3 # DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G # A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw # MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx # MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA # 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/ # XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1 # hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7 # M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K # Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy # 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80 # 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc # NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha # YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL # iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV # 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG # CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp # zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT # MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv # c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI # KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG # MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a # GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br # aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG # AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN # AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1 # OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA # A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz # aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L # GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m # Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0 # SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko # JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm # PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482 # 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7 # vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCC # Aj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp # bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyRDFBLTA1RTAtRDk0NzEl # MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO # AwIaAxUA5VHBr4h00EN7jUdQ33SE+qbk/8CggYMwgYCkfjB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO6DHg0wIhgPMjAyNjEw # MjExMTE4MzdaGA8yMDI2MTAyMjExMTgzN1owdDA6BgorBgEEAYRZCgQBMSwwKjAK # AgUA7oMeDQIBADAHAgEAAgIweDAHAgEAAgITdjAKAgUA7oRvjQIBADA2BgorBgEE # AYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYag # MA0GCSqGSIb3DQEBCwUAA4IBAQBEq538fZNuovru1jEBpt/VXxf3YNtOqwNMJDxu # jSAkDoaey/y1AxKJRJ4r+IL+9cSsoL5m/zAmACmcLJtI5Y7+RgxTIWFt6h7tOD1f # u6bxZ3PZXt+ygs05xj7b9RqXvr88SidlkcNL1vWNzgOmxEPPX9+stNcaUDuAEE1m # ezbEjDiUUS3u8NJrctuqkVxnibswhF9kUIrbOFdLeGrOTJW/EWRi7oOQ3C0Yzj+2 # vIn8MVnwcOjkKvqLWIgROH6AkvcGJFeUwSGfD7nsEt9HS0yeWmD5e0HZ5bnzRaRg # IZaFH+lTLYTb1in7n4c1hup4Jka1n/3IIQRf2TdAl5YLSbI3MYIEDTCCBAkCAQEw # gZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT # B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE # AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIS0QgGPMoYT6oA # AQAAAhIwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0B # CRABBDAvBgkqhkiG9w0BCQQxIgQgIHiOZmuYMl1pOawf15RTruayFCsn8H4mHSwv # NBUK1mEwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBz+X5GvO7WngknH4BZ # eYU+BzBL1Jy5oJ8wVlTNIxfYgzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w # IFBDQSAyMDEwAhMzAAACEtEIBjzKGE+qAAEAAAISMCIEIP4q4GI1tApBuKni4iAa # lgwLveOHNwYnDXUdYAmoW9CLMA0GCSqGSIb3DQEBCwUABIICAEyJgDU0+FvJeDIk # cUblb1pC70MAD4h6ozcTB+D36oSCx7O/UakD1QLY4mtTrVeEE3dguBfmRw9weDJq # 8C/4+T1OGw8tKtNz9NeRz1e88uCktz0MWUwbmMmdJNuyUCeqycu7ku4jz6DfnpXC # UpclmonXX8lfhknGnoY5MDguR5b9ytLgBZNCq6DxzTn2MLaXKc6cIYc3h8SiZMDO # glPqvkycCbUF2PS65oU9ZTC+c5wrQBV3d7SZ4yUzhTT3ORvDO4fDH4K/XwbOIAS9 # qFiJrGv107lNx5R5W00ThwerdOeITChYKZ6sQIk6yzd8F8Y3BhHBpC8ny9MJI9m4 # XWoePZ1cHAMuwoazks9LdmtfCAn31tLw57f/ZL+Ak1M2xJAOD6E5kfFjNyP9IIgm # +92qz1/kwu6tKedLyufhQGh/gIBa4lFxLY51wDZ+g57fip+apuGmPvFt48yB/unM # mUkL1z4uivhhEUKiuO1pthmRLdpcJs0R/SEECzECMNUOOmmp+hOVK71ct8WxOtlt # NRLvekdHpD0IVxbXlaxM9Wb5MQ9z89UFIx0BUT7nd2U/y6SXkjjWwb9T2jZ/IWMb # jSwAeIgMBag2VLwHh2Ocjs5C3oRpbiTNnkJHxAIvbtEW9lO+wO0Say6BDJdIcGbU # vttccSJj9TxG2AyrY/rTaEyQBmjN # SIG # End signature block |