Private/Tests/Invoke-AvmBicepNativeTestCase.ps1
|
function Invoke-AvmBicepNativeTestCase { [CmdletBinding(SupportsShouldProcess)] [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAlignAssignmentStatement', '', Justification = 'Execution and cleanup-state fields intentionally preserve a stable serialized contract.')] [OutputType([pscustomobject])] param( [Parameter(Mandatory)] [pscustomobject] $Item, [Parameter(Mandatory)] [guid] $TenantId, [Parameter(Mandatory)] [string] $Location, [Parameter(Mandatory)] [string] $RepositoryRoot, [Parameter(Mandatory)] [string] $AzPath, [Parameter(Mandatory)] [hashtable] $CiInput, [string] $ManagementGroupId, [string] $SubscriptionCleanupManagementGroupId, [string] $ResourceGroupPrefix, [string] $ResourceLocation, [string] $StatePath, [ValidateSet('All', 'Deploy')] [string] $Phase = 'All', [ValidateRange(1, 3)] [int] $DeploymentRetryLimit = 3, [ValidateRange(1, 3)] [int] $ValidationRetryLimit = 3, [switch] $KeepResources ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if (-not $PSCmdlet.ShouldProcess($Item.Case.RelativeDirectory, 'Run native Bicep deployment test')) { return [pscustomobject]@{ Status = 'skipped'; AssertionResults = @(); PostResults = @(); Issues = @() CleanupPending = @(); CleanupDeferred = $false; StatePath = '' } } $executionOptions = @{ Location = $Location RepositoryRoot = $RepositoryRoot AzPath = $AzPath CiInput = $CiInput SubscriptionId = $Item.SubscriptionId TenantId = $TenantId ManagementGroupId = $ManagementGroupId ResourceGroupPrefix = $ResourceGroupPrefix SubscriptionCleanupManagementGroupId = $SubscriptionCleanupManagementGroupId ResourceLocation = $ResourceLocation; StatePath = $StatePath; Phase = $Phase DeploymentRetryLimit = $DeploymentRetryLimit; ValidationRetryLimit = $ValidationRetryLimit KeepResources = [bool]$KeepResources RecoveryDeadlineUtc = (Get-Date -AsUTC).AddSeconds($Item.RetryPolicy['observation']['coordinatorTimeoutSeconds']) } Invoke-AvmBicepAzureContext -SubscriptionId $Item.SubscriptionId -TenantId $TenantId -ScriptBlock { Assert-AvmBicepAzureIdentity -AzPath $executionOptions.AzPath -SubscriptionId $Item.SubscriptionId -TenantId $TenantId Write-AvmLog -Level Info -Message ( "Deploying test '$($Item.Case.RelativeDirectory)' at '$($Item.Scope)' scope.") $assertRegistrationIdentity = { Assert-AvmBicepAzureIdentity -AzPath $executionOptions.AzPath ` -SubscriptionId $executionOptions.SubscriptionId -TenantId $executionOptions.TenantId } foreach ($kind in @('Feature', 'Provider')) { $requirements = @(Get-AvmPropertyValue -InputObject $Item -Name "Required$($kind)s") if ($requirements.Count -eq 0) { continue } try { $null = Invoke-AvmSubscriptionRegistration -Cli (Resolve-AvmAzureCli) -Root $executionOptions.RepositoryRoot ` -SubscriptionId ([guid]$Item.SubscriptionId).ToString('D') -Kind $kind -Requirement $requirements ` -AssertIdentity $assertRegistrationIdentity -Confirm:$false } catch [AvmException] { $registrationIssues = [System.Collections.Generic.List[object]]::new() Add-AvmBicepTestIssue -Issues $registrationIssues -File $Item.Case.RelativePath ` -Code "$($kind.ToLowerInvariant())-registration-failed" -Message $_.Exception.Message return [pscustomobject]@{ Status = 'fail'; AssertionResults = @(); PostResults = @(); Issues = $registrationIssues.ToArray() CleanupPending = @(); CleanupDeferred = $false; StatePath = '' } } } foreach ($preparedInput in $Item.AttemptInputs) { $preparedInput.TemplateContent = Resolve-AvmBicepTestToken -Content $preparedInput.TemplateContent ` -SourcePath $Item.Case.Path -Tokens $preparedInput.Tokens -DeferResourceLocation } $Item.Template = ConvertFrom-AvmStrictJson -Json $Item.AttemptInputs[0].TemplateContent $environment = Get-AvmPropertyValue -InputObject (Get-AzContext -ErrorAction Stop) -Name 'Environment' $environmentName = [string](Get-AvmPropertyValue -InputObject $environment -Name 'Name') $handle = New-AvmBicepCleanupState -SubscriptionId $Item.SubscriptionId -TenantId $TenantId ` -Environment $environmentName -RunId $Item.RunId -Path $executionOptions.StatePath -Confirm:$false $state = $handle.State if (Get-AvmPropertyValue -InputObject $Item -Name 'IsolationBoundary') { $state['schemaVersion'] = 2 $state['isolationBoundary'] = $Item.IsolationBoundary } $state['attempts'] = @() $groupName = if ($Item.Scope -eq 'group') { '{0}-{1}' -f $executionOptions.ResourceGroupPrefix, $Item.RunId } else { '' } $state['case'] = [ordered]@{ path = $Item.Case.RelativePath scope = $Item.Scope resourceGroupName = $groupName managementGroupId = if ($Item.Scope -eq 'mg') { $executionOptions.ManagementGroupId } else { '' } subscriptionCleanupManagementGroupId = $executionOptions.SubscriptionCleanupManagementGroupId metadataLocation = $executionOptions.Location sourceHash = $Item.SourceHash completionStarted = $false } Save-AvmBicepCleanupState -State $state -Path $handle.Path -Confirm:$false Write-AvmLog -Level Info -Message "Saved clean-up state for '$($Item.Case.RelativeDirectory)' at '$($handle.Path)'." $issues = [System.Collections.Generic.List[object]]::new() $completion = $null $interrupted = $false $deployed = $null $diagnosticParameters = $Item.Parameters $validatingDeployment = $false try { $definitions = $Item.Template['definitions'] if ($null -eq $definitions) { $definitions = @{} } $declared = $Item.Template['parameters'] if ($null -eq $declared) { $declared = @{} } $ciParameters = [ordered]@{} foreach ($name in $declared.psbase.Keys) { if (-not $Item.Parameters.ContainsKey($name) -and -not $Item.ReferenceParameters.ContainsKey($name)) { $ciParameters[$name] = $declared[$name] } } $baseParameters = Get-AvmBicepCiParameter -TemplateParameters $ciParameters -TemplateDefinitions $definitions ` -Variables $executionOptions.CiInput.Variables -Secrets $executionOptions.CiInput.Secrets ` -KeyVaultName $executionOptions.CiInput.KeyVaultName -ModulePath $Item.Case.ModuleRoot $baseTime = [datetime]::UtcNow.ToString('u', [cultureinfo]::InvariantCulture) $unavailableRegions = @() $mode = 'Initial' $namingIndex = -1 $retryBlocked = $false $freshChangesRegion = $Item.RetryPolicy['modes']['Fresh']['location'] -ceq 'NextEligible' $attemptLimit = [Math]::Min($executionOptions.DeploymentRetryLimit, $Item.RetryPolicy['limits']['deploymentAttempts']) for ($attempt = 1; $attempt -le $attemptLimit; $attempt++) { Write-AvmLog -Level Info -Message "Preparing deployment attempt $attempt of $attemptLimit ($mode)." if ($mode -ne 'InPlace') { $namingIndex++ $attemptInput = $Item.AttemptInputs[$namingIndex] $parameters = $baseParameters.Clone() foreach ($key in $attemptInput.Parameters.psbase.Keys) { $parameters[$key] = $attemptInput.Parameters[$key] } if ($declared.Contains('resourceLocation') -and -not $parameters.ContainsKey('resourceLocation')) { $parameters['resourceLocation'] = '' } if ($declared.Contains('baseTime') -and -not $parameters.ContainsKey('baseTime')) { $parameters['baseTime'] = $baseTime } $references = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) $parameters = Resolve-AvmBicepParameterToken -Value $parameters -Tokens $attemptInput.Tokens ` -DeferResourceLocation -ReferencedTokens $references $parameters = Get-AvmBicepNativeParameter -Parameters $parameters foreach ($key in $attemptInput.ReferenceParameters.psbase.Keys) { $parameters[$key] = Resolve-AvmBicepParameterToken -Value $attemptInput.ReferenceParameters[$key] ` -Tokens $attemptInput.Tokens -DeferResourceLocation -ReferencedTokens $references } $diagnosticParameters = $parameters if ($null -ne $parameters['resourceLocation'] -and $parameters['resourceLocation'] -isnot [string]) { throw [AvmConfigurationException]::new('Regional placement requires a non-secure string resourceLocation value.') } $selectedLocation = $executionOptions.ResourceLocation if ($mode -eq 'Fresh' -and -not $freshChangesRegion) { $selectedLocation = $validated.Location } $groupCanRelocate = $false if ($Item.Scope -eq 'group') { $groupName = '{0}-{1}' -f $executionOptions.ResourceGroupPrefix, $attemptInput.NamingId $pinned = @(@($executionOptions.ResourceLocation, $Item.TokenResourceLocation, $parameters['resourceLocation']) | Where-Object { -not [string]::IsNullOrWhiteSpace([string]$_) -and $_ -cne '#_resourceLocation_#' } | ForEach-Object { ([string]$_ -replace '\s', '').ToLowerInvariant() } | Sort-Object -Unique) if ($pinned.Count -gt 1) { throw [AvmConfigurationException]::new('Conflicting resource locations were supplied by parameters, CI inputs or tokens.') } if ($mode -eq 'Fresh' -and -not $freshChangesRegion) { $selectedLocation = $validated.Location } elseif ($pinned.Count -eq 1) { $selectedLocation = $pinned[0] } else { $selection = Get-AvmBicepResourceLocation -ResourceType $Item.ResourceType ` -MetadataLocation $executionOptions.Location -UnavailableRegions $unavailableRegions $selectedLocation = $selection.Location $groupCanRelocate = -not $selection.IsGlobal } New-AvmBicepAttemptGroup -State $state -StatePath $handle.Path -Name $groupName ` -Location $selectedLocation -Confirm:$false } $options = @{ Scope = $Item.Scope; TemplatePath = $Item.TemplatePath; MetadataLocation = $executionOptions.Location DeploymentName = 'avm-e2e-{0}-t{1}' -f $Item.RunId, $attempt Parameters = $parameters; ResourceGroupName = $groupName; ManagementGroupId = $executionOptions.ManagementGroupId } $validatingDeployment = $true $validated = Test-AvmBicepNativeDeployment -DeploymentInput $options -SubscriptionId $Item.SubscriptionId ` -TemplateContent $attemptInput.TemplateContent -ResourceType $Item.ResourceType ` -ResourceLocation $selectedLocation -TokenResourceLocation $Item.TokenResourceLocation ` -ParameterResourceLocationToken:($references.Contains('resourceLocation')) ` -UnavailableRegions $unavailableRegions -RetryLimit $executionOptions.ValidationRetryLimit $validatingDeployment = $false Write-AvmLog -Level Info -Message "Validated deployment in resource location '$($validated.Location)'." $canFresh = -not $freshChangesRegion -or (($validated.CanRelocate -or $groupCanRelocate) -and $validated.AttemptedRegions.Count -lt $executionOptions.ValidationRetryLimit) } if ($state.Contains('isolationBoundary') -and $Item.Scope -eq 'group') { $groupId = '/subscriptions/{0}/resourceGroups/{1}' -f $Item.SubscriptionId, $groupName Assert-AvmBicepCleanupGroupOwnership -State $state -ResourceId $groupId -RequireExisting } $deployed = New-AvmBicepNativeDeployment -State $state -StatePath $handle.Path ` -DeploymentInput $validated.DeploymentInput -Attempt $attempt -Mode $mode -NamingId $attemptInput.NamingId ` -RecoveryDeadlineUtc $executionOptions.RecoveryDeadlineUtc ` -SensitiveValues @(Get-AvmBicepDiagnosticSecret -Parameters $validated.DeploymentInput.Parameters ` -SecretInputs $executionOptions.CiInput.Secrets) ` -ClassifyRetry:($attempt -lt $attemptLimit) -ShowProgress -ResourceLocation $validated.Location -Confirm:$false Write-AvmLog -Level Info -Message "Finished deployment attempt $attempt with '$($deployed.Outcome)'." if ($deployed.Status -eq 'pass' -or $attempt -eq $attemptLimit -or -not $deployed.RetryMode -or ($deployed.RetryMode -eq 'Fresh' -and -not $canFresh)) { break } # ARM can overwrite nested operation history even when the next root name changes. $snapshot = Get-AvmBicepDeploymentCleanupTarget -DeploymentIds @($deployed.DeploymentId) ` -RequireCompleteRemoval -SearchRetryLimit 1 -SearchRetryInterval 0 -IsolationState $state $state['resources'] = @(Get-AvmBicepCleanupResourceRecord -Existing $state['resources'] -ResourceIds $snapshot.ResourceIds) Save-AvmBicepCleanupState -State $state -Path $handle.Path -Confirm:$false if ($snapshot.Issues.Count -gt 0) { foreach ($issue in $snapshot.Issues) { Write-AvmLog -Level Warning -Message $issue.Message } Add-AvmBicepTestIssue -Issues $issues -File $Item.Case.RelativePath -Code 'retry-evidence-incomplete' ` -Message "The failed attempt's resource history could not be preserved completely; retry stopped. Cleanup state: '$($handle.Path)'." $retryBlocked = $true break } $mode = $deployed.RetryMode if ($mode -eq 'Fresh' -and $freshChangesRegion) { $unavailableRegions = $validated.AttemptedRegions } Write-AvmLog -Level Warning -Message "Retrying '$($deployed.DeploymentName)' in $mode mode ($attempt/$attemptLimit); all resources remain until finalization." Start-Sleep -Seconds $Item.RetryPolicy['limits']['delaySeconds'] } if ($deployed.Status -ne 'pass' -and -not $retryBlocked) { $authorizationDetail = if ($deployed.ErrorKind -eq 'Forbidden') { ' Submission returned HTTP 403; authorization failures never permit replay.' } else { '' } Add-AvmBicepTestIssue -Issues $issues -File $Item.Case.RelativePath -Code 'deployment-failed' ` -Message "Deployment '$($deployed.DeploymentId)' ended with '$($deployed.Outcome)' outcome.$authorizationDetail Cleanup state is retained at '$($handle.Path)'." } } catch { if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') { $interrupted = $true throw } if ($validatingDeployment) { $null = Write-AvmBicepDeploymentDiagnostic -DeploymentId 'validation' -Failure $_ ` -SensitiveValues @(Get-AvmBicepDiagnosticSecret -Parameters $diagnosticParameters ` -SecretInputs $executionOptions.CiInput.Secrets) } $detail = if ($_.Exception -is [AvmConfigurationException]) { $_.Exception.Message } else { $codes = @(Get-AvmBicepSafeErrorCode -ErrorRecord $_) $codeText = if ($codes.Count -gt 0) { " Azure error codes: $($codes -join ', ')." } else { '' } "Native preparation, validation or submission failed.$codeText Raw parameters and Azure responses are not logged." } Add-AvmBicepTestIssue -Issues $issues -File $Item.Case.RelativePath -Code 'native-execution-failed' ` -Message "$detail Cleanup state: '$($handle.Path)'." } finally { if ($executionOptions.Phase -eq 'All' -and -not $interrupted) { $completion = Complete-AvmBicepTestCase -Item $Item -StatePath $handle.Path ` -SubscriptionId $Item.SubscriptionId -TenantId $TenantId -RepositoryRoot $executionOptions.RepositoryRoot ` -AzPath $executionOptions.AzPath -KeepResources:$executionOptions.KeepResources -Confirm:$false } } if ($null -ne $completion) { foreach ($issue in $completion.Issues) { $issues.Add($issue) } } $passed = $null -ne $deployed -and $deployed.Status -eq 'pass' -and $issues.Count -eq 0 -and ($executionOptions.Phase -eq 'Deploy' -or ($null -ne $completion -and $completion.Status -eq 'pass')) [pscustomobject]@{ Status = if ($passed) { 'pass' } else { 'fail' } AssertionResults = @(if ($null -ne $completion) { $completion.AssertionResults }) PostResults = @(if ($null -ne $completion) { $completion.PostResults }) CleanupPending = @(if ($null -ne $completion) { $completion.CleanupPending }) CleanupDeferred = $executionOptions.Phase -eq 'Deploy' -or $executionOptions.KeepResources -or ($null -ne $completion -and $completion.CleanupDeferred) StatePath = $handle.Path Issues = $issues.ToArray() } } -Confirm:$false } # SIG # Begin signature block # MIInQwYJKoZIhvcNAQcCoIInNDCCJzACAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD7wpTptHOW/rbz # Wai9DrqJxvVANliB2DUp100KWeZ1J6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnfMIIZ2wIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIOTIXliQG8riwfeiELEe3y/qfdU4Bw1wVTbwJGa93CpHMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAI6oC+JICjXvUhcMo # xsiFW3loJp2ghzTVCfl1jkaFWfJRS1VhKRLa1JRaBVHUAqr6bqAcGUHlT5R/kceh # /xwNzGthWjV4pti2U6S9nyYOjaeVLW8FF4zTkyvehB9fLgMHqlwRFVMShCnHLnR0 # ComsDBAQsVkdBhQnJCb9QbLCltLRc78AAtrWBaCUXJuuk3deFzOAEHsvWXxoSAyd # ENOJbm6zWSKxrRbhPqedxJnzE7dmG6OeVJKWWuNV+IrzxrsAM2T1tlQEx+StwmDF # CO+I7pVOIYwnUHNv3ENflYgHC6uIIvtE3/Nsfe9cuTN9b71TsHEM5MbuMel+KBNX # f3l1SKGCF68wgherBgorBgEEAYI3AwMBMYIXmzCCF5cGCSqGSIb3DQEHAqCCF4gw # gheEAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG9w0BCRABBKCCAUgEggFE # MIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDw/b82z2uIS5jK # I08yzqalJzpJr7HsuH9xDfKaLxiC/gIGauvclmI0GBIyMDI2MTExMDExMjEyMy4w # M1owBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt # aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjMyMUEtMDVFMC1EOTQ3MSUw # IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR/jCCBygwggUQ # oAMCAQICEzMAAAIsPmW6OMVDMCwAAQAAAiwwDQYJKoZIhvcNAQELBQAwfDELMAkG # A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx # HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z # b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjYxMDE1MTgzNzMwWhcNMjgwMTEx # MTgzNzMwWjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO # BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEt # MCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzIxQS0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDmCbpcnqTRTWBmsQi1esnDqF5BTw91zw3716Ek6g8X/dta # 2OOKqKGK54v/h8BycTpSzDL0F3qnsHsOPVE3+oTu/I7VXi2nhWPO/ZhdhnoY6pPp # aamBCJrl748z7ZnrmK/1ccIf/m09MXvbkE8Kx38VML7f3FtWURVsrdjy+NVPpdxJ # ZwHuH1jeVm+gaQM1iDFk8ZrFqwDY6+fOzc16hklUbSRTvrz7ABWWqBh2qE4OgkGy # NouGQpozj/Me8yoPfOmL//LlXr9F0HIn8dCSzhzx0L/qrhkByI9yY7wCvzbbcJHI # cdupptTly8ACXp+FojLqXM4QaQUyf8kqA+UoXJOtBBwsgUNCoXNH1Cvhe6YN25YT # DH26S9dfY0UiMzU4QLu2OLR8qGrtR1XC+xh0yZBeElPWIU+IK94FdHRYfxhtNKX6 # g1Xm0IEz6JISw6LiFpX5a450wtRdrJmrb7B78e/3mVrEZW92mabiAIimpJXQhtpl # HOPHeDSURMGbtALuB/CQEE9ia2vgiUZrj640anLsgekYDoz6hijkk0O5lj/h3d3N # pQL/qO7jUHN76zslbgtXKqHWz54vQCXEdGCmgBGgbMzw4X8K9pbG4geOGj1k5351 # qugXEx1BdgljeheDAAvG7VEjWskFFutmf6mhbcdd9qkDohQi9u25ad0N5bRPAQID # AQABo4IBSTCCAUUwHQYDVR0OBBYEFCdDBLBzftZymjilJrahdeF84HoBMB8GA1Ud # IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp # bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI # KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA # MA0GCSqGSIb3DQEBCwUAA4ICAQAEHPX5mEvrILin0YpR15ZqvNNnXEO+RioCeFZm # KEl22QV1oz3F3lbHIrb8njarWboUMIHKYFj++B+MpYDb8ToJp+iEkd80bzd92V4g # L6rg/vELDddjn6tzNHrK1m8cAO45KUbJq2OJ27OipOAJPzrgviJmkD2dBKHxxsSA # DUw08sUrreBlrGw+R/HoLEQTgsEFzm5/i67wsJvgZCtg/5/nYM2iWduqxCDT+rt3 # xy6Pyeosid0bWCMosjtEULPAr9MZ4sCHOfLMPrtPlPsG6DQppuHX8iPlP3CVJt/4 # TMpZktvCLkcAOeNW9S4IEkxLaF2yRBGb3150YVJe0T20z51oWNvvR1qLAYWRbpmv # k1axed9NOJ91aHDkcm4go6AgrsZNkhq4k9jXIcbxRpHcdN/I3Av0U06l9Z/ZEvZf # uMQgRLUrHHBkrnX2KSmEobqU/9zei4gVgSMiSKbdreb8ypRasRmV+e/8VeRrlZ9Z # q3TcqJvI321nNTW+4d05GtNR+2zxnmpImY2d2h7SxeqhIWigtpDDQsY3SfGjHmb1 # 8/MwP3Kq/NDISb3Tuc8AOqhkuhZuOxqk0VvzaDhb6hksJ00LmNrPjtMvaz7kSoTk # gkMbjF/pnIqeqDC36CdPLDZyeNHdgXg7y0DxFnPo3YSKQ/zXqJO5KwBp14sdhAjr # OkF9UzCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN # AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw # BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw # MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx # EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT # FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt # U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk # 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c # T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG # UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz # rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2 # LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV # wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd # EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0 # gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph # AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ # YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb # GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ # KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP # EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw # UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr # BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw # DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY # xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp # L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB # BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v # cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B # AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5 # 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD # sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo # 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ # iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK # PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI # LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk # ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9 # af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba # ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/ # OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNZMIIC # QQIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt # aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjMyMUEtMDVFMC1EOTQ3MSUw # IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4D # AhoDFQAeF5rbi1QnJJPHrWIhlMUnaRegU6CBgzCBgKR+MHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7pzx/TAiGA8yMDI2MTEx # MDAxMjkzM1oYDzIwMjYxMTExMDEyOTMzWjB3MD0GCisGAQQBhFkKBAExLzAtMAoC # BQDunPH9AgEAMAoCAQACAhxZAgH/MAcCAQACAhKSMAoCBQDunkN9AgEAMDYGCisG # AQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMB # hqAwDQYJKoZIhvcNAQELBQADggEBAKASAoWFY9NPh9ZDxr1d4HZC6Pk6DK28xpVI # 1XxxX3g1Bc9UiW7ur0Z6GJQ1jvkJyMo6J6absqPrzhBzwY83cZYhzRWdCxSTOiSk # I2GayAWMA5Sn1M35lNVluFiCTueKpHhqH6OGX8GN3nqd1HN7OnQgRj6ZEJ0i0+0V # 86y9CfaPsX6ueUKTdPS/S/tTtYa7mSfYjCz4Av3dhBB4Sk9PSE06N7tm5gL9TYP5 # Dfv8oyitfEcaMXf7S2f6S2kvwz4v1Pm2lHyDehqimkGxdRacS2IWJbilPpoV8c/x # mbKX7MDhj/rbpDakYyUvKC9KvNKpxNe6vEf8AkYqw4CI88+2F6kxggQNMIIECQIB # ATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD # VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiw+Zbo4xUMw # LAABAAACLDANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3 # DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCDlZ3pc7nl3orgvJ1h6hv4rDmvc6PrcS0oI # ulnB55q20DCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIPXuqzVsx2R1r2+h # 7hCi26D25b0oEBQc0PwemO+O2WE+MIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzAR # BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p # Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh # bXAgUENBIDIwMTACEzMAAAIsPmW6OMVDMCwAAQAAAiwwIgQg8DYoFGq0dYsfzV5q # zqKtG4fG1McnHuKiaH8El4Lc/wIwDQYJKoZIhvcNAQELBQAEggIAEa5y/ytBGrEd # yOUUws6o5/e25IcXHf82a3HMzBrMN2zyktxaZcGfPCdj6oWfwG+k5Ohe1Ojf/Vvi # uaFqK08Tru3flXId01EIpCr6PYoBW/VuahjP2BXlAv6z+Bq2tJzrpBcA19kEg7J4 # LzPsazbeLMtUzJXsNOjFrk2u5+AR1Byj6h5ZJvAgNHSTu8u3WiJ9zmztveEEIuSd # ibVHfBWQGhxGX7hWOzpL4YEzMxz0R+UADH2V0PwZjEMPC866w6svRbUJq5ZgHkeA # jsuZQKZR0PZOo/FI3JjDeVhlE0h2HIKapxFXlUhLEoPTzGtkz0u4N6TFfmDJnaiF # oajd0ABnmw0KSyW0rqtCSl/EiVWZOqp8AX/lp2ZvURimQWvK+jIge4ds1qXM/V18 # TEPRbLarp+xn6p2aNdlDsNYhLwxelvc7Sb+Iv1ihcGdr5bu5fyFWTQdiPAuNBKHm # 1j81SQDbEIIv2Duilww21xVSInCZPAHKM0i7bx+piGYvZe6wDFvWrwwKhehkvx2N # ImJsoYtXhoL5ibdn0erFOwUCozRUo6zakoTCKWSLLfw+Ejuzc135tnuO2Vg8GLHs # /JOTsMBZaAauaHaDw+rNeAFyC4MB9YKUqB3vN6qIYBct1u3/0D145xlLJDu/Wddi # FKyjqBn1GOyef0IUjeuGHZmlwnz2pTM= # SIG # End signature block |