Obs/scripts/Install-StandaloneObservability.ps1

##------------------------------------------------------------------
## <copyright file="Install-StandaloneObservability.ps1" company="Microsoft">
## Copyright (C) Microsoft. All rights reserved.
## </copyright>
##------------------------------------------------------------------

[CmdletBinding(SupportsShouldProcess = $true, ConfirmImpact = "Medium", PositionalBinding = $false, DefaultParameterSetName = "DefaultSet")]
param(
    [Parameter(Mandatory = $true)]
    [System.String] $ResourceGroupName,

    [Parameter(Mandatory = $true)]
    [System.String] $SubscriptionId,

    [Parameter(Mandatory = $true)]
    [System.String] $TenantId,

    [Parameter(Mandatory=$false)]
    [System.String] $RegistrationRegion = "eastus",

    [Parameter(Mandatory = $true, ParameterSetName = "DefaultSet")]
    [PSCredential] $RegistrationCredential,

    [Parameter(Mandatory = $true, ParameterSetName = "Interactive")]
    [Switch] $Interactive,

    [Parameter(Mandatory = $true, ParameterSetName = "PassThrough")]
    [Switch] $PassThrough,

    [Parameter(Mandatory = $true, ParameterSetName = "ServicePrincipal")]
    [PSCredential] $RegistrationSPCredential,

    [Parameter(Mandatory=$true)]
    [System.String] $FactoryLogShare,

    [Parameter(Mandatory=$false)]
    [System.String] $ClusterName,

    [Parameter(Mandatory=$false)]
    [System.String] $ObsRootFolderPath = "C:\StandaloneObservability",

    [Parameter(Mandatory=$false)]
    [Switch] $ParseOnce,

    [Parameter(Mandatory=$false)]
    [System.String] $Cloud = "AzureCloud",

    [Parameter(Mandatory=$false)]
    [System.String] $GcsRegion = "eastus"
)

    Import-Module "$PSScriptRoot\ExtensionHelper.psm1"
    Import-Module "$PSScriptRoot\StandaloneObservabilityHelper.psm1"
    Import-Module "$PSScriptRoot\StandaloneObservabilityConstants.psm1"

try {
    $ErrorActionPreference = "Stop"    
    $functionName = $MyInvocation.MyCommand.Name

    if ([string]::IsNullOrEmpty($ClusterName)) {
        Write-Host "ClusterName is empty. So setting it to computer name $($env:COMPUTERNAME)"
        $ClusterName = $env:COMPUTERNAME
    }

    if(-not (Test-Path -Path $ObsRootFolderPath -PathType Container))
    {
        Write-Host "ObsRootFolderPath: $ObsRootFolderPath is not present. So creating it"
        New-Item -Path $ObsRootFolderPath -ItemType Directory -Force
    }

    $transcriptFileName = "{0}.{1:yyyy-MM-dd-hh-mm-ss}.log" -f $functionName, $(Get-Date)
    $transcriptFilePath = Join-Path -Path $ObsRootFolderPath -ChildPath $transcriptFileName
    Start-Transcript -Path $transcriptFilePath -Append

    $gmaPackageContentPath = Get-GmaPackageContentPath
    Import-Module "$gmaPackageContentPath\GMATenantJsonHelper.psm1" -Force
    Add-Type -Path "$gmaPackageContentPath\Microsoft.AzureStack.Observability.ObservabilityCommon.dll"
    ## Create pre-requisites for Extension
    New-GmaStateFolders -ObsRootFolderPath $ObsRootFolderPath
    Set-HandlerEnvInfo -ObsRootFolderPath $ObsRootFolderPath -CloudName $Cloud -RegionName $RegistrationRegion

    $parsingEnginePath = Join-Path -Path $global:ObsArtifactsPaths.ObservabilityAgent -ChildPath "LogParsingEngine"
    $parsingEngineScript = Join-Path -Path $global:extensionRootLocation -ChildPath "scripts\Invoke-ParsingEngine.ps1"

    $gcsEnvironment = "Prod" ## default environment

    ## Check if the reg key created for CI exists or not, if yes then change the GCSEnvironment to point to PPE.
    if (Test-RegKeyExists -Path "HKLM:\Software\Microsoft\SQMClient\" -Name "IsCIEnv") {
        $gcsEnvironment = "Ppe"
    }
    elseif (Get-IsArcAEnvironment) {
        $gcsEnvironment = "ArcAPpe"
    }

    $envInfoFilePath = "$gmaPackageContentPath\EnvironmentInfo.json"
    $tenantInfoContent = Get-Content $envInfoFilePath -Raw | ConvertFrom-Json
    $envInfo = $tenantInfoContent.$gcsEnvironment

    # Settings from EnvironmentInfo.json
    $gcsEndpoint = $envInfo.EndPoint
    $gcsAccount = $envInfo.Account
    $genevaConfigVersion = $envInfo.ConfigVersion

    ## Install Azure Connected Machine agent
    $StampId = Set-StampGuid
    $resourceName = "$(hostname)-$StampId"
    $skipArcForServer = Test-IsAzure
    if ($skipArcForServer -eq $false) {
        Write-Host "$functionName Azure identity is not enabled. Going to install Arc for server agent" -Verbose

        if(-not (Get-Module -Name Az.Accounts -ListAvailable)) {
            Install-Module -Name Az.Accounts -AllowClobber -Force
        }

        if ($PSCmdlet.ParameterSetName -eq "ServicePrincipal") {
            Connect-AzAccount -Credential $RegistrationSPCredential -ServicePrincipal -Environment $Cloud -Tenant $TenantId -Subscription $SubscriptionId
            Install-AzureConnectedMachineAgent -ResourceName $resourceName -ResourceGroupName $ResourceGroupName -TenantId $TenantId `
                                                -RegionName $RegistrationRegion -SubscriptionId $SubscriptionId -Cloud $Cloud `
                                                -StampId $StampId -RegistrationSPCredential $RegistrationSPCredential
        }
        elseif ($PSCmdlet.ParameterSetName -eq "Interactive") {
            Connect-AzAccount -UseDeviceAuthentication -Environment $Cloud -Tenant $TenantId -Subscription $SubscriptionId
            $token = Get-AzAccessToken
            Install-AzureConnectedMachineAgent -ResourceName $resourceName -ResourceGroupName $ResourceGroupName -TenantId $TenantId `
                                                -RegionName $RegistrationRegion -SubscriptionId $SubscriptionId -Cloud $Cloud `
                                                -StampId $StampId -AccessToken $token.Token
        }
        elseif ($PSCmdlet.ParameterSetName -eq "PassThrough") {
            $token = Get-AzAccessToken
            Install-AzureConnectedMachineAgent -ResourceName $resourceName -ResourceGroupName $ResourceGroupName -TenantId $TenantId `
                                                -RegionName $RegistrationRegion -SubscriptionId $SubscriptionId -Cloud $Cloud `
                                                -StampId $StampId -AccessToken $token.Token
        }
        else {
            Connect-AzAccount -Credential $RegistrationCredential -Environment $Cloud -Tenant $TenantId -Subscription $SubscriptionId
            $token = Get-AzAccessToken
            Install-AzureConnectedMachineAgent -ResourceName $resourceName -ResourceGroupName $ResourceGroupName -TenantId $TenantId `
                                                -RegionName $RegistrationRegion -SubscriptionId $SubscriptionId -Cloud $Cloud `
                                                -StampId $StampId -AccessToken $token.Token
        }
    }

    ## Start Pipeline installation using Extension Install interface
    $deviceArmResourceUri = $PipelineConstants.DeviceArmUriFormat -f $SubscriptionId, $ResourceGroupName, $resourceName
    $osBuild = Get-OSBuildVersion
    $logFile = Get-HandlerLogFile
    Set-StandaloneScenarioRegistry -LogFile $logFile -ErrorAction Stop
    $configTypes = @([Microsoft.AzureStack.Observability.ObservabilityCommon.TenantConfigGenerator.Contract.TenantConfigType]::Telemetry, [Microsoft.AzureStack.Observability.ObservabilityCommon.TenantConfigGenerator.Contract.TenantConfigType]::Diagnostics)
    foreach($configType in $configTypes)
    {
        $gcsNameSpace = $envInfo.Namespaces.$configType
        [Microsoft.AzureStack.Observability.ObservabilityCommon.TenantConfigGenerator.TenantConfigRegistrySetter]::Current.SetTenantConfigRegistryKeys(
        $configType,
        "1.0",
        "AuthMSIToken",
        $gcsEndpoint,
        $gcsAccount,
        $gcsNameSpace,
        $GcsRegion,
        $genevaConfigVersion,
        $LocalPath,
        "true",
        "true",
        $GcsRegion,
        $deviceArmResourceUri,
        $StampId,
        $ClusterName,
        $osBuild,
        "1.0",
        $resourceName,
        $deviceArmResourceUri,
        $ClusterName)
    }

    Write-Host "Starting Install-Extension script with DeviceArmResourceUri: $deviceArmResourceUri StampId: $StampId ClusterName: $ClusterName CloudName: $Cloud RegistrationRegion: $RegistrationRegion"

    & "$PSScriptRoot\Install-Extension.ps1" `
                       -ErrorAction Stop
    if($LASTEXITCODE -ne 0) {
        Write-Error "Error during Extension installation $LASTEXITCODE"
    }

    & "$PSScriptRoot\Enable-Extension.ps1"
    if($LASTEXITCODE -ne 0) {
        Write-Error "Error during Extension enable $LASTEXITCODE"
    }

    # Sleep for sometime and check for GCS Config
    Wait-ForGcsConfigSync -TimeInSeconds 180 -LogFile $logFile

    $transcriptFolderPath = Join-Path -Path $(Get-LogFolderPath) -ChildPath $PipelineConstants.TranscriptsFolderName

    if($ParseOnce)
    {
        ## Run ParsingEngine with given log location
        Write-Host "Starting Parser scripts arguments: $parsingEngineScript -FactorySharePath $FactoryLogShare -ParsingEnginePackagePath $parsingEnginePath -GmaPackageContentPath $gmaPackageContentPath -TranscriptFolderPath $transcriptFolderPath"
        & $parsingEngineScript -FactorySharePath $FactoryLogShare `
                                -ParsingEnginePackagePath $parsingEnginePath `
                                -GmaPackageContentPath $gmaPackageContentPath `
                                -TranscriptFolderPath $transcriptFolderPath `
                                -ParseOnce `
                                -ErrorAction Stop
    }
    else
    {
        ## Create ParsingEngine scheduled tasks
        $scriptArguments = "-TaskName $($PipelineConstants.ParserScheduledTaskName) -FactorySharePath $FactoryLogShare -ParsingEnginePackagePath $parsingEnginePath -GmaPackageContentPath $gmaPackageContentPath -TranscriptFolderPath $transcriptFolderPath"
        Write-Host "Creating Parser scheduled task with arguments: $scriptArguments"

        New-ScheduledTaskForObservability -TaskName $PipelineConstants.ParserScheduledTaskName `
                                    -TaskPath $PipelineConstants.ParserScheduledTaskPath `
                                    -Description $PipelineConstants.ParserScheduledTaskDescription `
                                    -ScriptPath $parsingEngineScript `
                                    -ScriptArguments $scriptArguments `
                                    -DisableOnRegistration `
                                    -ErrorAction Stop

        Enable-ScheduledTask -TaskPath $PipelineConstants.ParserScheduledTaskPath `
        -TaskName $PipelineConstants.ParserScheduledTaskName `
        -ErrorAction Stop
    }

    Set-Status -Name $functionName `
                -Operation "Enabling succeeded" `
                -Message "$functionName : Successfully enabled Standalone Observability pipeline components." `
                -Status "success" `
                -Code 0

    Write-Host "Standalone Observability pipeline installation complete."
    Stop-Transcript -ErrorAction SilentlyContinue
}
catch {
    if ($null -eq (Get-Command -Verb Get -Noun ExceptionDetails) -and (-not [System.String]::IsNullOrEmpty($gmaPackageContentPath))) {
        Import-Module "$gmaPackageContentPath\GMATenantJsonHelper.psm1" -Force

        $exceptionDetails = Get-ExceptionDetails -ErrorObject $_

        $errorMessage = "$functionName : Failed to enable Standalone Observability pipeline components. Exception is as follows: $exceptionDetails."
        Set-Status -Name $functionName `
                    -Operation "Enabling failed" `
                    -Message $errorMessage `
                    -Status "error" `
                    -Code 1
        Write-Error $errorMessage
        Stop-Transcript -ErrorAction SilentlyContinue
    }
    else {
        Write-Error $_
    }
}

# SIG # Begin signature block
# MIInvgYJKoZIhvcNAQcCoIInrzCCJ6sCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAxxSQwoBtYO+yo
# juUoPn/p0ZQEHr41AZV+rhvLHYgGyqCCDXYwggX0MIID3KADAgECAhMzAAADTrU8
# esGEb+srAAAAAANOMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjMwMzE2MTg0MzI5WhcNMjQwMzE0MTg0MzI5WjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDdCKiNI6IBFWuvJUmf6WdOJqZmIwYs5G7AJD5UbcL6tsC+EBPDbr36pFGo1bsU
# p53nRyFYnncoMg8FK0d8jLlw0lgexDDr7gicf2zOBFWqfv/nSLwzJFNP5W03DF/1
# 1oZ12rSFqGlm+O46cRjTDFBpMRCZZGddZlRBjivby0eI1VgTD1TvAdfBYQe82fhm
# WQkYR/lWmAK+vW/1+bO7jHaxXTNCxLIBW07F8PBjUcwFxxyfbe2mHB4h1L4U0Ofa
# +HX/aREQ7SqYZz59sXM2ySOfvYyIjnqSO80NGBaz5DvzIG88J0+BNhOu2jl6Dfcq
# jYQs1H/PMSQIK6E7lXDXSpXzAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUnMc7Zn/ukKBsBiWkwdNfsN5pdwAw
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMDUxNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAD21v9pHoLdBSNlFAjmk
# mx4XxOZAPsVxxXbDyQv1+kGDe9XpgBnT1lXnx7JDpFMKBwAyIwdInmvhK9pGBa31
# TyeL3p7R2s0L8SABPPRJHAEk4NHpBXxHjm4TKjezAbSqqbgsy10Y7KApy+9UrKa2
# kGmsuASsk95PVm5vem7OmTs42vm0BJUU+JPQLg8Y/sdj3TtSfLYYZAaJwTAIgi7d
# hzn5hatLo7Dhz+4T+MrFd+6LUa2U3zr97QwzDthx+RP9/RZnur4inzSQsG5DCVIM
# pA1l2NWEA3KAca0tI2l6hQNYsaKL1kefdfHCrPxEry8onJjyGGv9YKoLv6AOO7Oh
# JEmbQlz/xksYG2N/JSOJ+QqYpGTEuYFYVWain7He6jgb41JbpOGKDdE/b+V2q/gX
# UgFe2gdwTpCDsvh8SMRoq1/BNXcr7iTAU38Vgr83iVtPYmFhZOVM0ULp/kKTVoir
# IpP2KCxT4OekOctt8grYnhJ16QMjmMv5o53hjNFXOxigkQWYzUO+6w50g0FAeFa8
# 5ugCCB6lXEk21FFB1FdIHpjSQf+LP/W2OV/HfhC3uTPgKbRtXo83TZYEudooyZ/A
# Vu08sibZ3MkGOJORLERNwKm2G7oqdOv4Qj8Z0JrGgMzj46NFKAxkLSpE5oHQYP1H
# tPx1lPfD7iNSbJsP6LiUHXH1MIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGZ4wghmaAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAANOtTx6wYRv6ysAAAAAA04wDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIG/tpGXGzOFV6Co2LiAjhFtw
# uYQ4tAaVNkcPHixlD4NJMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAUO3UF1ArKAwVQaxpdYtlZinvsdOYssSXhwnjZTxmmWmjwcRg+33QIH6S
# g/L3giahES/RQxKwj91KhcC2znqPIQ6Pk5u+46gGS6Uiv0ll7sX5NS3FbfMxDIBJ
# 2TbelcwJ2sgzYaNnFRyWT1yWq9CbNK1kFsHcAb0SvaEZ1M7tq1sLUcpelXW0Dhsg
# 5ku9uVQvEdEH3ixeAhJhfb9tcPC37CcgKkFkLj5RvE6GIzxZh5FoqILXgQ0UY676
# Xx5JH82ZO2XSFtzWh6lo6VSXmkI/aT1yEzP2osx+qIEkUyYjTNY4WoOFaNHHBcHf
# Nr8sTA0OwnBaHf54d3ZAhWAqOzfXoqGCFygwghckBgorBgEEAYI3AwMBMYIXFDCC
# FxAGCSqGSIb3DQEHAqCCFwEwghb9AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsq
# hkiG9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCBn3wkWS85HTIt99sOa6hCB1STIQv6R91TwkSWtGr3l/QIGZQr18e/9
# GBMyMDIzMDkyMjA4MzIxMS45NTRaMASAAgH0oIHYpIHVMIHSMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNO
# OjA4NDItNEJFNi1DMjlBMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBT
# ZXJ2aWNloIIRdzCCBycwggUPoAMCAQICEzMAAAGybkADf26plJIAAQAAAbIwDQYJ
# KoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjIw
# OTIwMjAyMjAxWhcNMjMxMjE0MjAyMjAxWjCB0jELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3Bl
# cmF0aW9ucyBMaW1pdGVkMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjowODQyLTRC
# RTYtQzI5QTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCC
# AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMqiZTIde/lQ4rC+Bml5f/Wu
# q/xKTxrfbG23HofmQ+qZAN4GyO73PF3y9OAfpt7Qf2jcldWOGUB+HzBuwllYyP3f
# x4MY8zvuAuB37FvoytnNC2DKnVrVlHOVcGUL9CnmhDNMA2/nskjIf2IoiG9J0qLY
# r8duvHdQJ9Li2Pq9guySb9mvUL60ogslCO9gkh6FiEDwMrwUr8Wja6jFpUTny8tg
# 0N0cnCN2w4fKkp5qZcbUYFYicLSb/6A7pHCtX6xnjqwhmJoib3vkKJyVxbuFLRhV
# XxH95b0LHeNhifn3jvo2j+/4QV10jEpXVW+iC9BsTtR69xvTjU51ZgP7BR4YDEWq
# 7JsylSOv5B5THTDXRf184URzFhTyb8OZQKY7mqMh7c8J8w1sEM4XDUF2UZNy829N
# VCzG2tfdEXZaHxF8RmxpQYBxyhZwY1rotuIS+gfN2eq+hkAT3ipGn8/KmDwDtzAb
# nfuXjApgeZqwgcYJ8pDJ+y/xU6ouzJz1Bve5TTihkiA7wQsQe6R60Zk9dPdNzw0M
# K5niRzuQZAt4GI96FhjhlUWcUZOCkv/JXM/OGu/rgSplYwdmPLzzfDtXyuy/GCU5
# I4l08g6iifXypMgoYkkceOAAz4vx1x0BOnZWfI3fSwqNUvoN7ncTT+MB4Vpvf1QB
# ppjBAQUuvui6eCG0MCVNAgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQUmfIngFzZEZlP
# kjDOVluBSDDaanEwHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYD
# VR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j
# cmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwG
# CCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIw
# MjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcD
# CDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBANxHtu3FzIabaDbW
# qswdKBlAhKXRCN+5CSMiv2TYa4i2QuWIm+99piwAhDhADfbqor1zyLi95Y6GQnvI
# WUgdeC7oL1ZtZye92zYK+EIfwYZmhS+CH4infAzUvscHZF3wlrJUfPUIDGVP0lCY
# Vse9mguvG0dqkY4ayQPEHOvJubgZZaOdg/N8dInd6fGeOc+0DoGzB+LieObJ2Q0A
# tEt3XN3iX8Cp6+dZTX8xwE/LvhRwPpb/+nKshO7TVuvenwdTwqB/LT6CNPaElwFe
# KxKrqRTPMbHeg+i+KnBLfwmhEXsMg2s1QX7JIxfvT96md0eiMjiMEO22LbOzmLMN
# d3LINowAnRBAJtX+3/e390B9sMGMHp+a1V+hgs62AopBl0p/00li30DN5wEQ5If3
# 5Zk7b/T6pEx6rJUDYCti7zCbikjKTanBnOc99zGMlej5X+fC/k5ExUCrOs3/VzGR
# CZt5LvVQSdWqq/QMzTEmim4sbzASK9imEkjNtZZyvC1CsUcD1voFktld4mKMjE+u
# DEV3IddD+DrRk94nVzNPSuZXewfVOnXHSeqG7xM3V7fl2aL4v1OhL2+JwO1Tx3B0
# irO1O9qbNdJk355bntd1RSVKgM22KFBHnoL7Js7pRhBiaKmVTQGoOb+j1Qa7q+ci
# xGo48Vh9k35BDsJS/DLoXFSPDl4mMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJ
# mQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNh
# dGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1
# WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEB
# BQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjK
# NVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhg
# fWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJp
# rx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/d
# vI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka9
# 7aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKR
# Hh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9itu
# qBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyO
# ArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItb
# oKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6
# bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6t
# AgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQW
# BBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacb
# UzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYz
# aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnku
# aHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIA
# QwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2
# VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwu
# bWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEw
# LTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93
# d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYt
# MjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/q
# XBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6
# U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVt
# I1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis
# 9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTp
# kbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0
# sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138e
# W0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJ
# sWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7
# Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0
# dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQ
# tB1VM1izoXBm8qGCAtMwggI8AgEBMIIBAKGB2KSB1TCB0jELMAkGA1UEBhMCVVMx
# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT
# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9zb2Z0IElyZWxh
# bmQgT3BlcmF0aW9ucyBMaW1pdGVkMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjow
# ODQyLTRCRTYtQzI5QTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy
# dmljZaIjCgEBMAcGBSsOAwIaAxUAjhJ+EeySRfn2KCNsjn9cF9AUSTqggYMwgYCk
# fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQUFAAIF
# AOi3bmowIhgPMjAyMzA5MjIwOTM3NDZaGA8yMDIzMDkyMzA5Mzc0NlowczA5Bgor
# BgEEAYRZCgQBMSswKTAKAgUA6LduagIBADAGAgEAAgFlMAcCAQACAhRiMAoCBQDo
# uL/qAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMH
# oSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQEFBQADgYEApC9XNPqDY0huGxN+PBHJ
# yLTxWLjVM73f/dotvupO/g0nInapT4q7BoONwMSS8ueL+bEL4cHOVZjDoeWV0eRI
# 1crmWwk96vrxBxq9NDxZbZgbfilKNa28VzLSBzjjYw+ACtCzrX5JzV6EwK+mqNDC
# bDnOLLlXMouQmgYTJU0omXQxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzET
# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV
# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T
# dGFtcCBQQ0EgMjAxMAITMwAAAbJuQAN/bqmUkgABAAABsjANBglghkgBZQMEAgEF
# AKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEi
# BCDRkcpM1Xg51X/e3BFwRL5G9X/Nc6pYg/f6RNucflYaoDCB+gYLKoZIhvcNAQkQ
# Ai8xgeowgecwgeQwgb0EIFN4zjzn4T63g8RWJ5SgUpfs9XIuj+fO76G0k8IbTj41
# MIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm
# MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAGybkAD
# f26plJIAAQAAAbIwIgQgUJ01CNs15HXo5B55Nvrjm0jjn8iH8oSRGqAC4edRqR0w
# DQYJKoZIhvcNAQELBQAEggIAukGYGB7P+KqBvhB2OViCM6A+k2BmIuKpzDLMtmTv
# YcbsmUfmR9sOVRJjxxo83Rr7tudTVZ/omXQxUmr/64l6tqd/ASn58Jm7hbCGxzOs
# NhTJqcBePUE3bZDLtUpm1LmNWF3LIYY3wYkb/GukTSFb+R1/rcoPhN8X54hAix8y
# K9IbKW0JtQRnwDzJgvOvDDCRAvGnBcuyQZWUSZd+ajNFe1wTVgdiqfp+t/9PAecq
# ViJmrQHrd5RiE0s/N+oqK5Vhi6y9pJg8kDmRI/T8eOZz3M16v3OwZZQQhDwUb7LX
# 9h5gCv1TuVOAB+WIZmj3wVF7S/2H7JKWPUG4Yo/nR7wRH3P5J9wuEe59mOIxLQ5A
# Mozb6eVQwcFw59zPRpp04+VMTVwH8oryFJLhunqciskx5EIbjyyeCcniEm+4XyOa
# ARV+IeuSFaolp7uEN7B+Wy+krlRSIP2Kf5CH6kkgBHytfEGVIRYd0WClurOoPXCU
# DPLUIKv2SZbnzk0hXqVhVN9hN/YCtm2L1yqd1o+0ez2pV2zaZY6rKm0Fu7nlSBQp
# VO18WMf4/G4odq/hTp/pf0RO4apcTNyfgy5HXYVbmvU8Ru3Lpdro4+0Hk0YbxBkf
# NwRkVD1Tyh1dxJhjenuUOjSb811BJHtskWoZ3CdfdZduEUyyMi5YvOp0WR29JutD
# ZRI=
# SIG # End signature block