Chaos.Autorest/custom/Start-AzChaosScenarioRun.ps1
|
# ---------------------------------------------------------------------------------- # Copyright (c) Microsoft Corporation. All rights reserved. # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # http://www.apache.org/licenses/LICENSE-2.0 # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # ---------------------------------------------------------------------------------- <# .Synopsis Start a scenario run for a scenario configuration. .Description Start a scenario run for a scenario configuration. This is a workflow cmdlet: it validates the scenario configuration first and starts the run only if validation succeeds, mirroring the Azure Portal where validation precedes the Run action. Pass -SkipValidation to bypass the pre-flight check. For a catalog (non-custom) scenario the workspace must have been evaluated before a run can start; if it has not, the cmdlet fails with a friendly error and does not trigger evaluation as a side effect. .Example Start-AzChaosScenarioRun -ResourceGroupName rg -WorkspaceName ws -ScenarioName sc -Name cfg .Example Start-AzChaosScenarioRun -ResourceGroupName rg -WorkspaceName ws -ScenarioName sc -Name cfg -SkipValidation -NoWait .Outputs Microsoft.Azure.PowerShell.Cmdlets.Chaos.Models.IScenarioRun Microsoft.Azure.PowerShell.Cmdlets.Chaos.Runtime.PowerShell.AsyncOperationResponse .Link https://learn.microsoft.com/powershell/module/az.chaos/start-azchaosscenariorun #> function Start-AzChaosScenarioRun { [OutputType('Microsoft.Azure.PowerShell.Cmdlets.Chaos.Models.IScenarioRun', 'Microsoft.Azure.PowerShell.Cmdlets.Chaos.Runtime.PowerShell.AsyncOperationResponse')] [CmdletBinding(DefaultParameterSetName='StartExpanded', PositionalBinding=$false, SupportsShouldProcess, ConfirmImpact='Medium')] param( [Parameter(Mandatory, HelpMessage='Name of the scenario configuration to run.')] [Alias('ScenarioConfigurationName')] [System.String] ${Name}, [Parameter(Mandatory, HelpMessage='Name of the scenario.')] [System.String] ${ScenarioName}, [Parameter(Mandatory, HelpMessage='Name of the workspace.')] [System.String] ${WorkspaceName}, [Parameter(Mandatory, HelpMessage='Name of the resource group.')] [System.String] ${ResourceGroupName}, [Parameter(HelpMessage='The ID of the target subscription.')] [System.String] ${SubscriptionId}, [Parameter(HelpMessage='Bypass the pre-flight validation of the scenario configuration.')] [System.Management.Automation.SwitchParameter] ${SkipValidation}, [Parameter(HelpMessage='Run the command asynchronously and return before the scenario run completes.')] [System.Management.Automation.SwitchParameter] ${NoWait}, [Parameter(HelpMessage='The DefaultProfile parameter is not functional. Use the SubscriptionId parameter when available if executing the cmdlet against a different subscription.')] [Alias('AzureRMContext','AzureCredential')] [ValidateNotNull()] [System.Management.Automation.PSObject] ${DefaultProfile} ) process { # Emit errors through $PSCmdlet so PowerShell attributes them to the cmdlet and # the caller's own command line. A bare `throw` or `Write-Error` raised inside one # of the private helpers below reports this file's path, line number and the # private function's name instead -- none of which the caller can act on. See # DEV-040 in the deviation log. function New-AzChaosErrorRecord { param( [string]$Message, [string]$ErrorId, [System.Management.Automation.ErrorCategory]$Category = [System.Management.Automation.ErrorCategory]::InvalidOperation, [object]$TargetObject ) return [System.Management.Automation.ErrorRecord]::new( [System.InvalidOperationException]::new($Message), $ErrorId, $Category, $TargetObject) } function Get-AzChaosObjectPropertyValue { param( [object]$InputObject, [string[]]$Name ) if ($null -eq $InputObject) { return $null } foreach ($candidate in $Name) { $property = $InputObject.PSObject.Properties[$candidate] if ($null -ne $property) { return $property.Value } } $properties = $InputObject.PSObject.Properties['Properties'] if ($null -ne $properties -and $null -ne $properties.Value -and -not [object]::ReferenceEquals($InputObject, $properties.Value)) { foreach ($candidate in $Name) { $property = $properties.Value.PSObject.Properties[$candidate] if ($null -ne $property) { return $property.Value } } } return $null } function Get-AzChaosValidationErrorCollection { param( [object]$Validation, [string[]]$Name ) $errors = @(ConvertTo-AzChaosCollection -InputObject (Get-AzChaosObjectPropertyValue -InputObject $Validation -Name $Name) | Where-Object { $null -ne $_ }) if ($errors.Count -gt 0) { return $errors } $validationErrors = Get-AzChaosObjectPropertyValue -InputObject $Validation -Name @('ValidationErrors') if ($null -ne $validationErrors) { return @(ConvertTo-AzChaosCollection -InputObject (Get-AzChaosObjectPropertyValue -InputObject $validationErrors -Name $Name) | Where-Object { $null -ne $_ }) } return @() } function ConvertTo-AzChaosCollection { param([object]$InputObject) if ($null -eq $InputObject) { return @() } if ($InputObject -is [string]) { return @($InputObject) } if ($InputObject -is [System.Collections.IEnumerable]) { return @($InputObject) } return @($InputObject) } function Test-AzChaosErrorObjectHasContent { param( [object]$InputObject, [string[]]$Name ) if ($null -eq $InputObject) { return $false } foreach ($candidate in $Name) { $value = Get-AzChaosObjectPropertyValue -InputObject $InputObject -Name @($candidate) if ($value -is [System.Collections.IEnumerable] -and $value -isnot [string]) { if (@($value | Where-Object { -not [System.String]::IsNullOrWhiteSpace([string]$_) }).Count -gt 0) { return $true } } elseif (-not [System.String]::IsNullOrWhiteSpace([string]$value)) { return $true } } return $false } function Test-AzChaosValidationHasPermissionOnlyErrors { param([object]$Validation) $permissionErrors = @(Get-AzChaosValidationErrorCollection -Validation $Validation -Name @('ErrorPermission', 'ValidationErrorPermission', 'Permission') | Where-Object { Test-AzChaosErrorObjectHasContent -InputObject $_ -Name @('ResourceId', 'MissingPermission', 'MissingPermissions', 'RecommendedRole', 'RecommendedRoles') }) $resourceErrors = @(Get-AzChaosValidationErrorCollection -Validation $Validation -Name @('ErrorResource', 'ValidationErrorResource', 'Resource') | Where-Object { Test-AzChaosErrorObjectHasContent -InputObject $_ -Name @('ResourceId', 'ErrorMessage', 'Message') }) $operationErrors = @(ConvertTo-AzChaosCollection -InputObject (Get-AzChaosObjectPropertyValue -InputObject $Validation -Name @('Errors', 'Error')) | Where-Object { Test-AzChaosErrorObjectHasContent -InputObject $_ -Name @('ErrorCode', 'Code', 'ErrorMessage', 'Message') }) $retryableOperationErrorCodes = @( # Chaos.Workspaces.Worker/ErrorCodes.cs emits this as the typed summary for RBAC validation failures. 'ScenarioExecutionRbacValidationError' ) $blockingOperationErrors = @($operationErrors | Where-Object { $code = Get-AzChaosObjectPropertyValue -InputObject $_ -Name @('ErrorCode', 'Code') $code -notin $retryableOperationErrorCodes }) return ($permissionErrors.Count -gt 0 -and $resourceErrors.Count -eq 0 -and $blockingOperationErrors.Count -eq 0) } function Format-AzChaosValidationFailure { param( [string]$ScenarioConfigurationName, [object]$Validation ) $status = Get-AzChaosObjectPropertyValue -InputObject $Validation -Name @('Status') $details = @() foreach ($permissionError in @(Get-AzChaosValidationErrorCollection -Validation $Validation -Name @('ErrorPermission', 'ValidationErrorPermission', 'Permission'))) { $resourceId = Get-AzChaosObjectPropertyValue -InputObject $permissionError -Name @('ResourceId') $missingPermissions = @(Get-AzChaosObjectPropertyValue -InputObject $permissionError -Name @('MissingPermission', 'MissingPermissions')) $recommendedRoles = @(Get-AzChaosObjectPropertyValue -InputObject $permissionError -Name @('RecommendedRole', 'RecommendedRoles')) $details += "Permission error on '$resourceId'. Missing permissions: $($missingPermissions -join ', '). Recommended roles: $($recommendedRoles -join ', ')." } foreach ($resourceError in @(Get-AzChaosValidationErrorCollection -Validation $Validation -Name @('ErrorResource', 'ValidationErrorResource', 'Resource'))) { $resourceId = Get-AzChaosObjectPropertyValue -InputObject $resourceError -Name @('ResourceId') $message = Get-AzChaosObjectPropertyValue -InputObject $resourceError -Name @('ErrorMessage') $details += "Resource error on '$resourceId'. $message" } foreach ($operationError in @(Get-AzChaosObjectPropertyValue -InputObject $Validation -Name @('Errors', 'Error') | Where-Object { $null -ne $_ })) { $code = Get-AzChaosObjectPropertyValue -InputObject $operationError -Name @('Code', 'ErrorCode') $message = Get-AzChaosObjectPropertyValue -InputObject $operationError -Name @('Message', 'ErrorMessage') $details += "Operation error '$code'. $message" } if ($details.Count -eq 0) { $details += 'No detailed validation errors were returned.' } return "Validation for scenario configuration '$ScenarioConfigurationName' returned status '$status'. The scenario run was not started. $($details -join ' ') Fix the validation errors, or re-run with -SkipValidation to bypass the pre-flight check." } function Invoke-AzChaosScenarioConfigurationValidationWithRetry { param( [hashtable]$CommonParameter, [string]$ScenarioName, [string]$ScenarioConfigurationName ) # Keep status list in sync with generated\api\Models\ValidationProperties.cs:163. $knownStatuses = @('Resolving', 'Generating', 'Validating', 'Accepted', 'NotStarted', 'RequiresAttention', 'NoResolvedResources', 'Succeeded') $retryIntervalSeconds = 15 # 21 attempts: the initial validation plus twenty retries, so five minutes of # RBAC propagation. Sized from a measured worst case of 222 seconds between a # successful permission repair and validation clearing; the previous 90-second # budget was under half of that and failed a repair-then-run sequence that # would have succeeded. See DEV-041 in the deviation log. $maxAttempts = 21 for ($attempt = 1; $attempt -le $maxAttempts; $attempt++) { # Re-attribute plumbing failures to this cmdlet. Without the catch, PowerShell # names the internal generated cmdlet variant and this file's line, which points # the user at a command they did not call. See DEV-044. try { $validation = Test-AzChaosScenarioConfiguration @CommonParameter -ScenarioName $ScenarioName -Name $ScenarioConfigurationName -ErrorAction Stop } catch { $PSCmdlet.ThrowTerminatingError($_) } if ($validation -is [bool]) { if ($validation) { return $validation } $PSCmdlet.WriteError((New-AzChaosErrorRecord ` -Message "Validation failed for scenario configuration '$ScenarioConfigurationName'. The scenario run was not started. Fix the reported validation errors, or re-run with -SkipValidation to bypass the pre-flight check." ` -ErrorId 'ScenarioConfigurationValidationFailed' ` -TargetObject $ScenarioConfigurationName)) return $null } $status = Get-AzChaosObjectPropertyValue -InputObject $validation -Name @('Status') if ($status -eq 'Succeeded') { return $validation } if ([System.String]::IsNullOrEmpty($status) -or $status -notin $knownStatuses) { $PSCmdlet.ThrowTerminatingError((New-AzChaosErrorRecord ` -Message "Validation for scenario configuration '$ScenarioConfigurationName' returned unrecognized status '$status'. The scenario run was not started." ` -ErrorId 'ScenarioConfigurationValidationUnrecognizedStatus' ` -TargetObject $ScenarioConfigurationName)) } $permissionOnly = Test-AzChaosValidationHasPermissionOnlyErrors -Validation $validation $shouldRetry = ($status -in @('Resolving', 'Generating', 'Validating', 'Accepted', 'NotStarted')) -or ($status -eq 'RequiresAttention' -and $permissionOnly) if (-not $shouldRetry -or $attempt -eq $maxAttempts) { $PSCmdlet.WriteError((New-AzChaosErrorRecord ` -Message (Format-AzChaosValidationFailure -ScenarioConfigurationName $ScenarioConfigurationName -Validation $validation) ` -ErrorId 'ScenarioConfigurationValidationFailed' ` -TargetObject $ScenarioConfigurationName)) return $null } if ($status -eq 'RequiresAttention') { Write-Verbose "Validation for scenario configuration '$ScenarioConfigurationName' reported permission-only errors. Waiting $retryIntervalSeconds seconds for RBAC propagation before retrying validation." } else { Write-Verbose "Validation for scenario configuration '$ScenarioConfigurationName' returned status '$status'. Waiting $retryIntervalSeconds seconds before retrying validation." } Start-Sleep -Seconds $retryIntervalSeconds } } # Parameters common to every plumbing call. ScenarioName is added per call because # Get-AzChaosScenario exposes the scenario name as -Name, not -ScenarioName. $common = @{ ResourceGroupName = $ResourceGroupName WorkspaceName = $WorkspaceName } if ($PSBoundParameters.ContainsKey('SubscriptionId')) { $common['SubscriptionId'] = $SubscriptionId } if ($PSBoundParameters.ContainsKey('DefaultProfile')) { $common['DefaultProfile'] = $DefaultProfile } # Gate the entire mutating sequence, not just the execute call. Validation is a POST # that creates a server-side validation record -- the one Get-AzChaosScenarioConfigurationValidation # reads back -- so running it under -WhatIf both mutates and, with the RBAC propagation # budget, can block for five minutes. -WhatIf must be side-effect-free and prompt. # Reads may sit above ShouldProcess when they make the disclosure accurate (see # Initialize-AzChaosWorkspace); writes may not. See DEV-048. if (-not $PSCmdlet.ShouldProcess("Scenario configuration '$Name'", 'Start scenario run')) { return } # Step 1: validate the scenario configuration first, unless bypassed. if (-not $SkipValidation) { $validation = Invoke-AzChaosScenarioConfigurationValidationWithRetry -CommonParameter $common -ScenarioName $ScenarioName -ScenarioConfigurationName $Name if ($null -eq $validation) { return } } # Step 2: guard catalog (non-custom) scenarios that the workspace has not evaluated. # A catalog scenario carries a CreatedFrom template reference; a run needs a prior # workspace evaluation. Do not trigger evaluation here as a side effect. try { $scenario = Get-AzChaosScenario @common -Name $ScenarioName -ErrorAction Stop } catch { $PSCmdlet.ThrowTerminatingError($_) } if ($null -ne $scenario -and -not [System.String]::IsNullOrEmpty($scenario.CreatedFrom)) { $recommendationStatus = $scenario.RecommendationStatus if ([System.String]::IsNullOrEmpty($recommendationStatus) -or $recommendationStatus -eq 'NotEvaluated') { $PSCmdlet.ThrowTerminatingError((New-AzChaosErrorRecord ` -Message "Scenario '$ScenarioName' is a catalog scenario, but workspace '$WorkspaceName' has not been evaluated yet. Evaluate the workspace first with 'Invoke-AzChaosWorkspaceScenarioEvaluation -ResourceGroupName $ResourceGroupName -WorkspaceName $WorkspaceName', then start the run again." ` -ErrorId 'WorkspaceNotEvaluated' ` -TargetObject $ScenarioName)) } } # Step 3: execute the run. Already gated by the ShouldProcess check above. $executeParameters = @{} + $common if ($NoWait) { $executeParameters['NoWait'] = $true } try { $run = Invoke-AzChaosScenarioConfigurationExecution @executeParameters -ScenarioName $ScenarioName -ScenarioConfigurationName $Name } catch { $PSCmdlet.ThrowTerminatingError($_) } if ($NoWait) { return $run } # Keep failure statuses in sync with generated\api\Models\ScenarioRunProperties.cs:375. if ($run.Status -in @('Failed', 'Canceled')) { $PSCmdlet.WriteError((New-AzChaosErrorRecord ` -Message "Scenario run '$($run.RunId)' completed with status '$($run.Status)'." ` -ErrorId 'ScenarioRunDidNotSucceed' ` -TargetObject $run.RunId)) } return $run } } # SIG # Begin signature block # MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA6zO4yb874k6aa # a0RD1CNiJqWfwk6VakwZ8PyZtXbq/KCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK # KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIG7+sI+H # VMfcSI4Z/0IiW2NMEGqys6gLrFGb0V6fD2vBMEIGCisGAQQBgjcCAQwxNDAyoBSA # EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w # DQYJKoZIhvcNAQEBBQAEggEAPj8VZlmBZGZPEy/H8ZNBMEchdHC/8eNM5wQWVm0n # KqHdmB7IAlLZg7bQHEX1kiSe7WczYHlBvKG9Sd7gw7NA8SknJ1HQ+2nSyMBFEWm7 # MDy1guXwPcRVWyuNRDS8ATwHtx5w3jj6F7e+XV4f3R68wpl3K1k4qiSPm1eaa4Yi # FfdiP73GmrKjT1iDfl7Ud8BkyWw0ewrM24IwnR+nU+hix7Z3NZzwwp2ax00fQY+K # QhZLDB2kBnp3yB5cz/8dwZt3XVAXykTztrjomAU2ClFbeWglsXsEmBEv7rPDU3EV # D9I/tZzAzgB9+KXK3On3in6scYhQ1UwaqFIMUu3O6e1ek6GCF5cwgheTBgorBgEE # AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD # BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD # ATAxMA0GCWCGSAFlAwQCAQUABCDb4Bfo7Bj/O5dZ0tOZ0Ai2g2E7uI2NnlR5TLc4 # ee1gugIGaqqP1sv+GBMyMDI2MTAyODAwNDM1MC42NTZaMASAAgH0oIHRpIHOMIHL # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN # aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT # UyBFU046RjAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAiAk4ebgF7m0jgABAAAC # IDANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe # Fw0yNjAyMTkxOTM5NTJaFw0yNzA1MTcxOTM5NTJaMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RjAwMi0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi # MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDRYY7yr7ijW6CR178uKveIMufu # tWOicxgJwKOce/2GOQceus6ZWfX14i3jNg3JOP7MGJMkOAucwWBwiA8URp+ZYkGj # pVoVkGZsV27WjqLwpf2AwqBsJ/TzqwE7JFFaxup3Ldxj8GjdJymDFRrdVN/pYHoB # FrjD1IkIDu8b1CWn8tgomiKRSY+STvJq99mVkdphMBIUGOegQny8qRd24VME0xi8 # Oomks9Zq9EjDeKHGpvAbXUEQ6m3cROoEPhTE/miweQH9TqJt3IOsqPv3L8urojB7 # 47XBC2y0CDIHlKLcLl3ZG8D7JXKnWTFen3msMPJpcvrQ3zUBVJrH/mI3RxHmCh9p # pDP0uG1+PJwk6H/x+sfoG9hW64xoXkpx6DEfNZNfcXdKbXF28XEXdLNnzo3SLNVy # meQJhNqOSKhnU84QnKmrjEk541JiurlDCkCWO9lUBUMb9x0nyfXUbNRPVLgP+PTM # RdXOowJdYCzCQfN2ZqL0s4YI28F1Dbn7Bgw2E4P1E9unsvMzJHtzhS2Th3TpCfBb # OGalIlF9x/DJZ/ssm/yyzT9YtIFeqmfNxBPTE3aOuh6HxmTICzfYAATvWNhBbo19 # QwsjPeA9JvhqTLC2KUNgrXroGy4eDZo0n7jFYjZkUih1Ty+8E6qEvV2Na6Z5gUyD # 5a+tHGDmq69CmUiHfwIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFNvInOCIhxGA8mY7 # l1g07UHvyNgzMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud # HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js # L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr # BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv # bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw # MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw # DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQCtKGBto1BSvm4WFI+J # 0NSyVhU1LHL7F3fbjZ2d7F5Kn/FCTBZXpzrDVl63FLRNcIFpnJy4/nlg43r7T5sJ # Pdo4Ms8ADSHQEJnHSu3x9UpjCzREBPi9+nHhvDgRx/1WmBD6gQUZJLOhcN2TxW4K # JyhinMtiBFtkNRZ2vmZ1MAdNXTm5d0Lwk3wzj+/f7VCCTWCXJSoqNa3VU/6sACHI # 97Evbnzg8bd3hxrfz6CcCVuf77egvRHinthJuwSRePP7aVmcevb1nWUIAICdBebH # QOrzNIeWBIQwvcFaS3SFc+49rqrwQOMFDR4FYBzS7b0QeBVxFuLL2iVu4KAHMNUh # LLSD4iKLDFBNTOtTzTlhGvMgG77A1cjeQrDMHa6oReMDeUDqHUrxv8g7IRdIh+h0 # gDLkzN0xIuzli0Bv7JtybGJbV6JxaDF4CzSCIMRpK59nI6iKo4LgnbQBZJW7+6ak # YsKG/pXPlfxNv2InpD10tSCkCvw9kr6W1+NRN+EuZczRgAwWlcK9XJZ3uu/v/oxH # tO7/kmVIs51F9qV6Y2QNXd6tU46YPrK98m2QDys+lvLNimK0e1xZ7Z1GawKohKGv # lLALWDlZQqgHfJ31CB0LlIDI7iLyYTpd2iyKjqskbQiyMtICH+RmH/oCg7JOK0ZA # 3XIMba9aSWgBF3QZ6pG3EGeQqjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA # AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX # 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q # UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d # q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN # pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k # rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d # Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS # Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8 # QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm # gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF # ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID # AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU # KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1 # GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0 # bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA # QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL # j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p # Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w # Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3 # Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz # LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU # tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN # 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU # 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5 # KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy # qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6 # 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE # AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp # AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd # FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb # atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd # VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR # BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p # Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg # T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOkYwMDItMDVFMC1E # OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw # BwYFKw4DAhoDFQCTGA9vpsJ6glqCLmI0rggGx4YEEqCBgzCBgKR+MHwxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m # dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7ou83TAiGA8y # MDI2MTAyODAwMTQyMVoYDzIwMjYxMDI5MDAxNDIxWjB3MD0GCisGAQQBhFkKBAEx # LzAtMAoCBQDui7zdAgEAMAoCAQACAkB0AgH/MAcCAQACAhNcMAoCBQDujQ5dAgEA # MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI # AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAJxPt06azmt/6fgmC0LlNGPNXoYJ # wMW709jylYfcNjr/6eIGDFqGZQ6lZnpIiJ5PmiqjI9UjhaRM0BuzTVH4M9jF1zFr # tqaJV9vau9fvUBVuoS/TgCJ8LdGU6I4yOmv70gh0dKoaNkZuJpUoAmFxttvIycXm # 5X76+RGrvxMcDOSNMLjGtC7GN/RAXFo8iRqLGSSlbRNt9K/NYKQ7T9eGxiepUYD9 # t0rMFxiUHyukPvtA3Ov+awX0mHP7vm4Mw5oBlNOs1hq/LsD6t3Qoi9dcVtSX/qXT # 7ElFnjfRRRQ7FZk7NE6Bfpid5ME2BlnZFeT839ARHHHhCuUXvK5LNflMNBsxggQN # MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ # MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u # MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiAk # 4ebgF7m0jgABAAACIDANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G # CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCCxdgCpY0YMsHX8fVf0rOxew8kk # n3cR3aIvloel+8FZlzCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EION7vyOl # PA1VqlEp0QIVGlNd8S5YWBnKj97LuTWHSO2vMIGYMIGApH4wfDELMAkGA1UEBhMC # VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV # BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp # bWUtU3RhbXAgUENBIDIwMTACEzMAAAIgJOHm4Be5tI4AAQAAAiAwIgQgimcKJpq5 # pArqbXgP+Qd9auAEkjDN4sjnDRNjcHmn2MwwDQYJKoZIhvcNAQELBQAEggIAc4BS # AgXGTI0cg3LPd+XhMOf5UES8ERvLLvoafKjkWsvdMLfVRZBxBJBFCjPlGPNU3TkT # OcwqMFN3oLWy4SYwDOfGetq0R7o4UiAi6iF+1JgHaWBD4Fgy5z0V05sso8djRjUl # wIAk1xRQE4yKrc4Zj1akiA1txIPM56ixOyk19yWnhy0jOj1uDb0b91RNVrQVtzqo # L0uTnmhvT6IMw++DU2QeBPIJS20huZSSVxAEYiLRcgJCG2xrtm7XG1pH3RgIUT0M # YgtUmHGNpsVXF60blGzd914g9R6KcI/s78fV+e+hd+0jlHZMFIdxHJKhBUL34gZQ # g39acPmztlpQMN+fqxyZiEZAUcbmIYiG5cbCaFcY6Na8M6xZcN4JDbIlkdaOeTSM # uQlNsddwLtQKYGQregfB1E9va03ytEZmbZKLQ1a+tlHmFwh2hWURWaai9E/aQNvJ # LwZon1+3qTLuIK3BxbJGyGsUy4CiJwwqHvq0lh/7bJdHefWJmBSSsoPSrV/UshVr # AE/5IdaS7K14EQMFN3lSV7b0A6LDGUW+6zwMRGm3MF9n7FqjaVQ0RNqrPOLstAZw # waXhneDS3Na5bkaFYyA6IfQpsJkB7ypl5xA15d3nRwmoO3p00UtOIiuXEYbGnpFa # fI8g8Ji1Dq+jN/La3vh1XJM7m4vW0bu9nqaxTPU= # SIG # End signature block |