Az.RedHatOpenShiftHcp

0.1.0

RedHatOpenShiftHcp.Autorest/custom/Update-AzRedHatOpenShiftHcpCluster.ps1

                                
# ----------------------------------------------------------------------------------

# Copyright (c) Microsoft Corporation. All rights reserved.

# Licensed under the Apache License, Version 2.0 (the "License"); see LICENSE for details.

# ----------------------------------------------------------------------------------

<#

.Synopsis

Update an ARO-HCP cluster, auto-wiring the identity list when operator identities change.

.Description

Wraps the generated cluster-update cmdlet (hidden via the README directive; still callable as

Az.RedHatOpenShiftHcp.internal\Update-AzRedHatOpenShiftHcpCluster, which also exposes the raw -InputObject

/ -Resource paths). When you change operator identities, this cmdlet GET-merges them with the current

cluster so you can rotate a single operator without re-listing all of them:

  * fetches the current cluster and merges your -UserAssignedIdentity*Operator maps into its existing ones,

  * resolves bare identity names to full resource IDs (using the cluster's subnet), and

  * recomputes -UserAssignedIdentity = control-plane operators + service MI (data-plane excluded, matching

    create).

`-UserAssignedIdentity` is therefore not exposed here. If no identity parameter is supplied, the request is

forwarded unchanged (no GET).

.Outputs

Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.IHcpOpenShiftCluster

#>

function Update-AzRedHatOpenShiftHcpCluster {

    [OutputType([Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.IHcpOpenShiftCluster])]

    [CmdletBinding(DefaultParameterSetName = 'UpdateExpanded', PositionalBinding = $false, SupportsShouldProcess, ConfirmImpact = 'Medium')]

    param(

        [Parameter(Mandatory)]

        [Alias('HcpOpenShiftClusterName')]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Path')]

        [System.String]

        # The name of the HcpOpenShiftCluster.

        ${Name},

        [Parameter(Mandatory)]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Path')]

        [System.String]

        # The name of the resource group. The name is case insensitive.

        ${ResourceGroupName},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Path')]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Runtime.DefaultInfo(Script = '(Get-AzContext).Subscription.Id')]

        [System.String]

        # The ID of the target subscription. The value must be an UUID.

        ${SubscriptionId},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.String]

        # version contains the version of the key to use.

        ${ActiveKeyVersion},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Int32]

        # maxNodeProvisionTimeSeconds. Default 900s.

        ${AutoscalingMaxNodeProvisionTimeSecond},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Int32]

        # maxNodesTotal.

        ${AutoscalingMaxNodesTotal},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Int32]

        # maxPodGracePeriod. Default 600s.

        ${AutoscalingMaxPodGracePeriodSecond},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Int32]

        # podPriorityThreshold. Default -10.

        ${AutoscalingPodPriorityThreshold},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Nullable[System.Boolean]]

        # Determines whether to enable a system-assigned identity for the resource.

        ${EnableSystemAssignedIdentity},

        [Parameter()]

        [AllowEmptyCollection()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.IImageDigestMirror[]]

        # imageDigestMirrors rules.

        ${ImageDigestMirror},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Int32]

        # nodeDrainTimeoutMinutes default for all NodePools.

        ${NodeDrainTimeoutMinute},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Runtime.Info(PossibleTypes = ([Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.ITrackedResourceTags]))]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Collections.Hashtable]

        # Resource tags.

        ${Tag},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Runtime.Info(PossibleTypes = ([Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.IUserAssignedIdentitiesProfileControlPlaneOperators]))]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Collections.Hashtable]

        # Control-plane operator identities to set/rotate: @{ '<operator-name>' = '<resource-id-or-bare-name>' }.

        ${UserAssignedIdentityControlPlaneOperator},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Runtime.Info(PossibleTypes = ([Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Models.IUserAssignedIdentitiesProfileDataPlaneOperators]))]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.Collections.Hashtable]

        # Data-plane operator identities to set/rotate: @{ '<operator-name>' = '<resource-id-or-bare-name>' }.

        ${UserAssignedIdentityDataPlaneOperator},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.String]

        # The service managed identity (resource ID or bare name).

        ${UserAssignedIdentityServiceManagedIdentity},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.String]

        # ChannelGroup (e.g. stable / fast).

        ${VersionChannelGroup},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Body')]

        [System.String]

        # ID is the desired X.Y version of the cluster control plane.

        ${VersionId},

        [Parameter()]

        [Alias('AzureRMContext', 'AzureCredential')]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Azure')]

        [System.Management.Automation.PSObject]

        # The DefaultProfile parameter is not functional. Use SubscriptionId instead.

        ${DefaultProfile},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Run the command as a job.

        ${AsJob},

        [Parameter(DontShow)]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Wait for .NET debugger to attach.

        ${Break},

        [Parameter(DontShow)]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Runtime.SendAsyncStep[]]

        # SendAsync Pipeline Steps to be appended to the front of the pipeline.

        ${HttpPipelineAppend},

        [Parameter(DontShow)]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Runtime.SendAsyncStep[]]

        # SendAsync Pipeline Steps to be prepended to the front of the pipeline.

        ${HttpPipelinePrepend},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Run the command asynchronously.

        ${NoWait},

        [Parameter(DontShow)]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [System.Uri]

        # The URI for the proxy server to use.

        ${Proxy},

        [Parameter(DontShow)]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [System.Management.Automation.PSCredential]

        # Credentials for a proxy server to use for the remote call.

        ${ProxyCredential},

        [Parameter(DontShow)]

        [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Use the default credentials for the proxy.

        ${ProxyUseDefaultCredentials}

    )

    process {

        $identityPassed =

            $PSBoundParameters.ContainsKey('UserAssignedIdentityControlPlaneOperator') -or

            $PSBoundParameters.ContainsKey('UserAssignedIdentityDataPlaneOperator') -or

            $PSBoundParameters.ContainsKey('UserAssignedIdentityServiceManagedIdentity')

        if ($identityPassed) {

            # GET current cluster to merge against (so a single-operator rotation doesn't drop the others).

            $getParams = @{ ResourceGroupName = $ResourceGroupName; Name = $Name }

            if ($PSBoundParameters.ContainsKey('SubscriptionId')) { $getParams['SubscriptionId'] = $SubscriptionId }

            if ($PSBoundParameters.ContainsKey('DefaultProfile')) { $getParams['DefaultProfile'] = $DefaultProfile }

            # Forward any HTTP pipeline steps so caller-injected steps (and the test record/playback mock,

            # attached via -HttpPipelinePrepend) propagate into this nested child-cmdlet call.

            if ($PSBoundParameters.ContainsKey('HttpPipelinePrepend')) { $getParams['HttpPipelinePrepend'] = $HttpPipelinePrepend }

            if ($PSBoundParameters.ContainsKey('HttpPipelineAppend')) { $getParams['HttpPipelineAppend'] = $HttpPipelineAppend }

            # Get-Cluster is NOT hidden (it lives in exports/, not the internal module), so call the exported

            # cmdlet by plain name -- an 'internal\' qualifier does not resolve it.

            $current = Get-AzRedHatOpenShiftHcpCluster @getParams

            if (-not $current) { throw "Cluster '$Name' not found in resource group '$ResourceGroupName'." }

            $cj = $current.ToJsonString() | ConvertFrom-Json

            $oa = $cj.properties.platform.operatorsAuthentication.userAssignedIdentities

            $subnetId = $cj.properties.platform.subnetId

            $resolver = [Microsoft.Azure.PowerShell.Cmdlets.RedHatOpenShiftHcp.Custom.IdentityResolver]

            # Merged control-plane map = current + user overrides (bare names resolved).

            $cp = @{}

            if ($oa -and $oa.controlPlaneOperators) {

                foreach ($p in $oa.controlPlaneOperators.PSObject.Properties) { $cp[$p.Name] = [string]$p.Value }

            }

            if ($PSBoundParameters.ContainsKey('UserAssignedIdentityControlPlaneOperator')) {

                foreach ($k in $UserAssignedIdentityControlPlaneOperator.Keys) {

                    $cp[$k] = $resolver::Resolve([string]$UserAssignedIdentityControlPlaneOperator[$k], $subnetId)

                }

            }

            # Merged data-plane map.

            $dp = @{}

            if ($oa -and $oa.dataPlaneOperators) {

                foreach ($p in $oa.dataPlaneOperators.PSObject.Properties) { $dp[$p.Name] = [string]$p.Value }

            }

            if ($PSBoundParameters.ContainsKey('UserAssignedIdentityDataPlaneOperator')) {

                foreach ($k in $UserAssignedIdentityDataPlaneOperator.Keys) {

                    $dp[$k] = $resolver::Resolve([string]$UserAssignedIdentityDataPlaneOperator[$k], $subnetId)

                }

            }

            # Service MI (overridden if supplied, else keep current).

            if ($PSBoundParameters.ContainsKey('UserAssignedIdentityServiceManagedIdentity')) {

                $service = $resolver::Resolve([string]$UserAssignedIdentityServiceManagedIdentity, $subnetId)

            }

            elseif ($oa -and $oa.serviceManagedIdentity) { $service = [string]$oa.serviceManagedIdentity }

            else { $service = $null }

            # Recompute the flat ARM identity list = control-plane operators + service MI (NOT data-plane).

            $flat = [System.Collections.Generic.List[string]]::new()

            foreach ($v in $cp.Values) { $flat.Add([string]$v) }

            if ($service) { $flat.Add($service) }

            # Send the complete merged desired state.

            $PSBoundParameters['UserAssignedIdentityControlPlaneOperator'] = $cp

            if ($dp.Count -gt 0) { $PSBoundParameters['UserAssignedIdentityDataPlaneOperator'] = $dp }

            if ($service) { $PSBoundParameters['UserAssignedIdentityServiceManagedIdentity'] = $service }

            if ($flat.Count -gt 0) { $PSBoundParameters['UserAssignedIdentity'] = @($flat | Select-Object -Unique) }

        }

        Az.RedHatOpenShiftHcp.internal\Update-AzRedHatOpenShiftHcpCluster @PSBoundParameters

    }

}

# SIG # Begin signature block

# MIInbgYJKoZIhvcNAQcCoIInXzCCJ1sCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCjKnEfMIIw9HXV

# dMpDneyczcXrgnmRUVEtipf0bSw9F6CCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn7MIIZ9wIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEIHRh1xEiAdqG/LMeya+Lwzweh8DxKaTjJPZeUystneSCMEIGCisG

# AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAb/DRp9LsYcGa65UL761L

# 4D7a5xZjJU45zVETqZqvLNWYmRKBNakNFknCPx1Bmvy4lOoOqwbeKiS0ArFLfiUy

# OqNwIYWhdnF0rsRBDHgX7Pb3i6MRzBVyubLQipAWXeh9Muf1i+VvnmfAtDHrMpVM

# b6PyrMEE8qCUJYE2BRRNzPcJMl3VqvHZCTkyyGb2IMIO3lEEzovMJR1HSGOVCA8n

# hgXpn6XBIq+ZzP9H5xKPcjPxNv3c+/XACK3k3mGMVZYgFUxroi9aW5g5Zli8yYK8

# TgKNIGG5Mt7cATZRDXVAVCOtOk1Smqjlx1cJ5aokenetB8gJEKsAh6DNF3iw0rzB

# 9KGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheC

# AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIB

# QQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDFWXJZOQ3mLFWF/BdE

# bv7oPtsxCG/86WRW8FxNPIys6AIGat4AZp0tGBMyMDI2MTAyODAwNDM1MS4xNzJa

# MASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2NTFBLTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKAD

# AgECAhMzAAACFRgD04EHJnxTAAEAAAIVMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgyMFoXDTI2MTExMzE4

# NDgyMFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTAr

# BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUG

# A1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxN

# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC

# Ag8AMIICCgKCAgEAw3HV3hVxL0lEYPV03XeNKZ517VIbgexhlDPdpXwDS0BYtxPw

# i4XYpZR1ld0u6cr2Xjuugdg50DUx5WHL0QhY2d9vkJSk02rE/75hcKt91m2Ih287

# QRxRMmFu3BF6466k8qp5uXtfe6uciq49YaS8p+dzv3uTarD4hQ8UT7La95pOJiRq

# xxd0qOGLECvHLEXPXioNSx9pyhzhm6lt7ezLxJeFVYtxShkavPoZN0dOCiYeh4Kg

# oKoyagzMuSiLCiMUW4Ue4Qsm658FJNGTNh7V5qXYVA6k5xjw5WeWdKOz0i9A5jBc

# bY9fVOo/cA8i1bytzcDTxb3nctcly8/OYeNstkab/Isq3Cxe1vq96fIHE1+ZGmJj

# ka1sodwqPycVp/2tb+BjulPL5D6rgUXTPF84U82RLKHV57bB8fHRpgnjcWBQuXPg

# VeSXpERWimt0NF2lCOLzqgrvS/vYqde5Ln9YlKKhAZ/xDE0TLIIr6+I/2JTtXP34

# nfjTENVqMBISWcakIxAwGb3RB5yHCxynIFNVLcfKAsEdC5U2em0fAvmVv0sonqnv

# 17cuaYi2eCLWhoK1Ic85Dw7s/lhcXrBpY4n/Rl5l3wHzs4vOIhu87DIy5QUaEupE

# syY0NWqgI4BWl6v1wgse+l8DWFeUXofhUuCgVTuTHN3K8idoMbn8Q3edUIECAwEA

# AaOCAUkwggFFMB0GA1UdDgQWBBSJIXfxcqAwFqGj9jdwQtdSqadj1zAfBgNVHSME

# GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l

# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG

# AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB

# Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN

# BgkqhkiG9w0BAQsFAAOCAgEAd42HtV+kGbvxzLBTC5O7vkCIBPy/BwpjCzeL53hA

# iEOebp+VdNnwm9GVCfYq3KMfrj4UvKQTUAaS5Zkwe1gvZ3ljSSnCOyS5OwNu9dpg

# 3ww+QW2eOcSLkyVAWFrLn6Iig3TC/zWMvVhqXtdFhG2KJ1lSbN222csY3E3/BrGl

# uAlvET9gmxVyyxNy59/7JF5zIGcJibydxs94JL1BtPgXJOfZzQ+/3iTc6eDtmaWT

# 6DKdnJocp8wkXKWPIsBEfkD6k1Qitwvt0mHrORah75SjecOKt4oWayVLkPTho12e

# 0ongEg1cje5fxSZGthrMrWKvI4R7HEC7k8maH9ePA3ViH0CVSSOefaPTGMzIhHCo

# 5p3jG5SMcyO3eA9uEaYQJITJlLG3BwwGmypY7C/8/nj1SOhgx1HgJ0ywOJL9xfP4

# AOcWmCfbsqgGbCaC7WH5sINdzfMar8V7YNFqkbCGUKhc8GpIyE+MKnyVn33jsuaG

# AlNRg7dVRUSoYLJxvUsw9GOwyBpBwbE9sqOLm+HsO00oF23PMio7WFXcFTZAjp3u

# jihBAfLrXICgGOHPdkZ042u1LZqOcnlr3XzvgMe+mPPyasW8f0rtzJj3V5E/EKiy

# QlPxj9Mfq2x9himnlXWGZCVPeEBROrNbDYBfazTyLNCOTsRtksOSV3FBtPnpQtLN

# 754wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB

# CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD

# VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe

# Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm

# TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H

# ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc

# wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A

# W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w

# jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG

# MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ

# 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP

# 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz

# ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz

# NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3

# xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG

# AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/

# LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG

# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB

# BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G

# A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw

# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j

# cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF

# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL

# BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC

# cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF

# vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l

# 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn

# 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m

# O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx

# TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4

# S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9

# y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM

# +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw

# RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4C

# AQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2NTFBLTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIa

# AxUAj6eTejbuYE1Ifjbfrt6tXevCUSCggYMwgYCkfjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO6LIaAwIhgPMjAyNjEwMjcx

# MzEyMDBaGA8yMDI2MTAyODEzMTIwMFowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA

# 7oshoAIBADAHAgEAAgIG/zAHAgEAAgIS7TAKAgUA7oxzIAIBADA2BgorBgEEAYRZ

# CgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0G

# CSqGSIb3DQEBCwUAA4IBAQCESHK0tcWmBG2xqV7U682l982/lLTXBHDvArhD0IcG

# fsQI1QP9DxRrSXlEXZkDgUckrhbyZ160Tu7+SAxpZwovyQffJE4VqZe3HORc0HCJ

# NDPU8JsLgkqmxgDu6CQYmgPjrevmA8TuVSKpIRgCeds/s+WEEQsLBHTVudC0jwKj

# xRCahIJji9kraGR1rLuBL2P6Z5jqdobOSc1nFYVnFiK4Ysrj4vX+793WbutCRHc+

# yNHi4tLw/QNJZmdBiRN9gaZ6PYKKaPsi1gHw2FdVkoVmYNp5nILTPdOkokB6i3ey

# MIzfA2YYX7RAIzUexUZ8Ke2MV109aXz9tEH3zouQP+/fMYIEDTCCBAkCAQEwgZMw

# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIVGAPTgQcmfFMAAQAA

# AhUwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRAB

# BDAvBgkqhkiG9w0BCQQxIgQgxPNet9Bwd2SVWBnWNImeNvcZTjOwjhHDzhf3XDv3

# mGIwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBwEPR2PDrTFLcrtQsKrUi7

# oz5JNRCF/KRHMihSNe7sijCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD

# QSAyMDEwAhMzAAACFRgD04EHJnxTAAEAAAIVMCIEIBtTgnp8LtW8Onf8zJ/izhDK

# GakM1C1psxiljt27h+fTMA0GCSqGSIb3DQEBCwUABIICACh86/QK3YNkclYnP7XY

# ZWaycV3+70YeQoJ33eGNVgndb8H9sNmLJopJprf66JO9gmu3QH6YoECt33DQ6Llk

# 30L/VPbtDBKtF0cQt3qPB12JshCWHoIurgA58n8yFvADCGnD2gKxuJDV17sz6oon

# cNWGJS7PphVQ6R+EoRtwAaFE3vUhABcrjqVePZT28X/ho/6ckMiNklGmmdMIudVk

# E6zYZ4WKg/HAIN0nB4zyrX+fhQyZtK8EQD3W84kgr2KrVS6bcJsOIEWHnDu05pbf

# /Fpy9j9H1i2yvCtgLNDuSl9MB5hwcu6kfTKoKtiu00BGos428NtVfY/Wi2EQpZQA

# eHa5G7QFXuC32L7+NAfx3vlI7T0cel4qk4YYEIU0RwgcaEQxcWhLqdGZoJYm0Ulp

# 9t416SUh2WnmFXJNKaLzdhtD1ALsZ6gVbDWvkAiuSOXdd1vOP+OqGn2dy6hSW/Jh

# Po85MUbhPVJrMagr4bq/dqA5MFbuoLXHNyBzHSX/cJoV7grw3ELYRumH2zEr/218

# 9uW9YH1sc5I0/wTeMyIDDdqqFaqQTwUMgsuPpX+jHNJnqSHUiL7ijwT7lQLG+Tuc

# fKmfTzZeIWW2HK/BbT1Gtdss4pVUU9g5Hg/L3/apyvwg6lXglUXufqsGQhGSU8YW

# eh+irXbPHkoHWm1nMeyR13gQ

# SIG # End signature block