From 49c0663d1e9931992ae64acf6c140c2528b76f58 Mon Sep 17 00:00:00 2001 From: Pankaj Walke Date: Thu, 24 Jul 2025 18:24:19 -0700 Subject: [PATCH 1/8] Improved version of CNOE AWS Reference Implementation (#52) WIP: Improved version of CNOE AWS Reference Implementation - New directory structure - Leverages ArgoCD Application Sets - Deploy the IDP to a remote EKS cluster from a kind cluster (ie. idpbuilder) Fixes: #49 --------- Signed-off-by: Pankaj Walke Signed-off-by: Carlos Santana Co-authored-by: Carlos Santana Signed-off-by: Bowen Sun --- cluster/eksctl/README.md | 82 + cluster/eksctl/cluster-config-auto.yaml | 46 + cluster/eksctl/cluster-config.yaml | 69 + .../crossplane-permissions-boundry.json | 65 + cluster/iam-policies/external-secrets.json | 25 + cluster/terraform/README.md | 96 + cluster/terraform/main.tf | 242 + cluster/terraform/outputs.tf | 39 + cluster/terraform/variables.tf | 18 + cluster/terraform/versions.tf | 9 + config.yaml | 35 + .../examples/app-with-aws-resources.md | 0 docs/examples/demo.md | 43 + {examples => docs/examples}/spark/pi.yaml | 0 .../template-generation/data-on-eks.yaml | 0 docs/images/argocd-github-app.png | Bin 0 -> 48479 bytes docs/images/backstage-github-app.png | Bin 0 -> 74537 bytes docs/installation_flow.md | 88 + docs/installation_with_idpbuilder.md | 347 + docs/troubleshooting.md | 56 + packages/addons/path-routing-values.yaml | 47 + packages/addons/values.yaml | 274 + packages/appset-chart/.helmignore | 23 + packages/appset-chart/Chart.yaml | 24 + packages/appset-chart/README.md | 185 + .../templates/_application_set.tpl | 59 + .../appset-chart/templates/_git_matrix.tpl | 34 + packages/appset-chart/templates/_helpers.tpl | 48 + .../appset-chart/templates/_pod_identity.tpl | 35 + .../templates/application-set.yaml | 189 + packages/appset-chart/values.yaml | 32 + .../manifests}/appproject-cnoe.yaml | 0 .../manifests}/appproject-demo.yaml | 0 .../argo-cd/manifests/argo-cd-github-app.yaml | 53 + .../argo-cd/manifests/hub-cluster-secret.yaml | 88 + .../default-cert-external-secret.yaml | 33 + packages/argo-cd/values.yaml | 158 + .../base/kustomization.yaml | 3 - .../dev/kustomization.yaml | 4 - .../argo-workflows/dev/values-no-sso.yaml | 8 - .../manifests/external-secrets.yaml | 25 + .../manifests}/sa-admin.yaml | 0 .../default-cert-external-secret.yaml | 33 + packages/argo-workflows/{dev => }/values.yaml | 12 +- packages/argocd/base/install.yaml | 18234 ---------------- packages/argocd/base/kustomization.yaml | 3 - packages/argocd/dev/argocd-cmd-params-cm.yaml | 9 - packages/argocd/dev/cm-argocd-rbac-cm.yaml | 8 - packages/argocd/dev/kustomization.yaml | 13 - packages/argocd/dev/service-argogrpc.yaml | 19 - .../backstage/base/install-backstage.yaml | 42 - packages/backstage/base/kustomization.yaml | 3 - packages/backstage/dev/kustomization.yaml | 7 - .../dev/patches/deployment-backstage.yaml | 43 - packages/backstage/dev/sa-backstage.yaml | 54 - packages/backstage/dev/user-rbac.yaml | 36 - .../backstage/manifests/external-secrets.yaml | 133 + .../k8s-config-secret.yaml} | 3 +- .../default-cert-external-secret.yaml | 33 + packages/backstage/values.yaml | 132 + packages/bootstrap.yaml | 38 + packages/bootstrap/values-idpbuilder.yaml | 14 + packages/bootstrap/values.yaml | 34 + packages/cert-manager/base/crds.yaml | 4486 ---- .../path-routing/cluster-secret-store.yaml | 60 + packages/cert-manager/values.yaml | 38 + packages/crossplane-aws-upbound/values.yaml | 52 + .../kustomization.yaml | 7 + .../s3/definition.yaml | 63 + .../s3/general-purpose.yaml | 129 + .../s3/kustomization.yaml | 3 + packages/crossplane/dev/values.yaml | 3 - packages/crossplane/values.yaml | 2 + packages/external-dns/{dev => }/values.yaml | 0 .../manifests/cluster-secret-store.yaml | 9 + .../external-secrets/{dev => }/values.yaml | 0 packages/ingress-nginx/dev/values.yaml | 10 - packages/ingress-nginx/values.yaml | 15 + packages/keycloak/base/install.yaml | 49 - packages/keycloak/base/kustomization.yaml | 2 - .../dev-external-secrets/kustomization.yaml | 3 - packages/keycloak/dev/cm-config.yaml | 26 - packages/keycloak/dev/kustomization.yaml | 19 - packages/keycloak/dev/ns.yaml | 4 - packages/keycloak/dev/patches/deployment.yaml | 39 - packages/keycloak/dev/patches/service.yaml | 6 - .../keycloak/manifests/external-secrets.yaml | 95 + .../keycloak-cluster-secret-store.yaml | 60 + .../manifests/user-sso-config-job.yaml | 430 + .../default-cert-external-secret.yaml | 33 + packages/keycloak/values.yaml | 32 + private/argocd-github.yaml.template | 9 + private/backstage-github.yaml.template | 9 + scripts/cleanup-crds.sh | 91 + scripts/create-cluster.sh | 88 + scripts/create-config-secrets.sh | 92 + scripts/get-urls.sh | 37 + scripts/install-using-idpbuilder.sh | 69 + scripts/install.sh | 96 + scripts/template.sh | 56 + scripts/uninstall.sh | 78 + scripts/utils.sh | 192 + setups/argocd/application-set.yaml | 36 - setups/argocd/github-secret.yaml | 11 - setups/argocd/secret-argocd-secret.yaml | 8 - setups/argocd/uninstall.sh | 7 - .../cluster-workflow-data-on-eks-cleanup.yaml | 119 + .../base/cluster-workflow-data-on-eks.yaml | 72 + .../base/cluster-workflow-spark-rbac.yaml | 0 .../argo-workflow}/base/kustomization.yaml | 0 .../base/sa-backstage-scaffolder.yaml | 0 .../argo-workflow/base/sa-data-on-eks.yaml | 66 + .../argo-workflow}/dev/kustomization.yaml | 0 templates/backstage/README.md | 3 + .../skeleton/catalog-info.yaml | 48 + .../skeleton/docs/idpbuilder.md | 46 + .../skeleton/docs/images/cnoe-logo.png | Bin 0 -> 58052 bytes .../app-with-bucket/skeleton/docs/index.md | 16 + .../backstage/app-with-bucket/skeleton/go.mod | 3 + .../skeleton/kustomize/base/cm-nginx.yaml | 200 + .../kustomize/base/kustomization.yaml | 4 + .../skeleton/kustomize/base/nginx.yaml | 83 + .../kustomize}/dev/kustomization.yaml | 0 .../kustomize/prod/kustomization.yaml | 35 + .../app-with-bucket/skeleton/main.go | 5 + .../app-with-bucket/skeleton/mkdocs.yml | 6 + .../backstage/app-with-bucket/template.yaml | 144 + .../argo-workflows/skeleton/catalog-info.yaml | 40 + .../skeleton/docs/argo-workflows.md | 160 + .../skeleton/docs/images/cnoe-logo.png | Bin 0 -> 58052 bytes .../argo-workflows/skeleton/docs/index.md | 9 + .../skeleton/docs/spark-operator.md | 86 + .../skeleton/manifests/deployment.yaml | 109 + .../argo-workflows/skeleton/mkdocs.yml | 8 + .../backstage/argo-workflows/template.yaml | 62 + templates/backstage/basic/mkdocs.yml | 6 + .../basic/skeleton/catalog-info.yaml | 36 + .../basic/skeleton/docs/idpbuilder.md | 46 + .../basic/skeleton/docs/images/cnoe-logo.png | Bin 0 -> 58052 bytes .../backstage/basic/skeleton/docs/index.md | 11 + .../basic/skeleton/manifests/deployment.yaml | 24 + templates/backstage/basic/template.yaml | 58 + templates/backstage/catalog-info.yaml | 20 + templates/backstage/organization/guests.yaml | 15 + .../ray-serve/sample/pytorch-sample.py | 154 + .../ray-serve/skeleton/catalog-info.yaml | 18 + .../skeleton/manifests/ray-serve.yaml | 92 + .../ray-serve/template-ray-serve.yaml | 58 + terraform/backstage.tf | 80 - .../config-payloads/client-payload.json | 28 - terraform/scripts/argo-workflows/install.sh | 56 - .../scripts/argo-workflows/secret-sso.yaml | 9 - terraform/scripts/argo-workflows/uninstall.sh | 49 - .../config-payloads/client-payload.json | 28 - terraform/scripts/backstage/install.sh | 82 - .../scripts/backstage/secret-env-var.yaml | 16 - .../backstage/secret-integrations.yaml | 8 - terraform/scripts/backstage/uninstall.sh | 44 - terraform/scripts/crossplane/uninstall.sh | 11 - .../client-scope-groups-payload.json | 12 - .../config-payloads/group-admin-payload.json | 1 - .../group-base-user-payload.json | 1 - .../config-payloads/group-mapper-payload.json | 12 - .../config-payloads/realm-payload.json | 1 - .../config-payloads/user-password.json | 5 - .../keycloak/config-payloads/user-user1.json | 12 - .../keycloak/config-payloads/user-user2.json | 12 - terraform/scripts/keycloak/install.sh | 97 - terraform/scripts/keycloak/uninstall.sh | 15 - .../argo-workflows-sso-config.yaml | 22 - .../argocd-apps/argo-workflows-templates.yaml | 22 - .../templates/argocd-apps/argo-workflows.yaml | 34 - .../templates/argocd-apps/backstage.yaml | 29 - .../argocd-apps/crossplane-provider.yaml | 21 - .../templates/argocd-apps/crossplane.yaml | 29 - .../argocd-apps/external-secrets.yaml | 29 - terraform/templates/argocd-apps/keycloak.yaml | 22 - .../templates/manifests/cluster-issuer.yaml | 13 - .../manifests/ingress-argo-workflows.yaml | 24 - .../templates/manifests/ingress-argocd.yaml | 24 - .../manifests/ingress-backstage.yaml | 24 - 181 files changed, 6701 insertions(+), 24072 deletions(-) create mode 100644 cluster/eksctl/README.md create mode 100644 cluster/eksctl/cluster-config-auto.yaml create mode 100644 cluster/eksctl/cluster-config.yaml create mode 100644 cluster/iam-policies/crossplane-permissions-boundry.json create mode 100644 cluster/iam-policies/external-secrets.json create mode 100644 cluster/terraform/README.md create mode 100644 cluster/terraform/main.tf create mode 100644 cluster/terraform/outputs.tf create mode 100644 cluster/terraform/variables.tf create mode 100644 cluster/terraform/versions.tf create mode 100644 config.yaml rename setups/argocd/install-sso.sh => docs/examples/app-with-aws-resources.md (100%) create mode 100644 docs/examples/demo.md rename {examples => docs/examples}/spark/pi.yaml (100%) rename {examples => docs/examples}/template-generation/data-on-eks.yaml (100%) create mode 100644 docs/images/argocd-github-app.png create mode 100644 docs/images/backstage-github-app.png create mode 100644 docs/installation_flow.md create mode 100644 docs/installation_with_idpbuilder.md create mode 100644 docs/troubleshooting.md create mode 100644 packages/addons/path-routing-values.yaml create mode 100644 packages/addons/values.yaml create mode 100644 packages/appset-chart/.helmignore create mode 100644 packages/appset-chart/Chart.yaml create mode 100644 packages/appset-chart/README.md create mode 100644 packages/appset-chart/templates/_application_set.tpl create mode 100644 packages/appset-chart/templates/_git_matrix.tpl create mode 100644 packages/appset-chart/templates/_helpers.tpl create mode 100644 packages/appset-chart/templates/_pod_identity.tpl create mode 100644 packages/appset-chart/templates/application-set.yaml create mode 100644 packages/appset-chart/values.yaml rename packages/{argocd/dev => argo-cd/manifests}/appproject-cnoe.yaml (100%) rename packages/{argocd/dev => argo-cd/manifests}/appproject-demo.yaml (100%) create mode 100644 packages/argo-cd/manifests/argo-cd-github-app.yaml create mode 100644 packages/argo-cd/manifests/hub-cluster-secret.yaml create mode 100644 packages/argo-cd/path-routing/default-cert-external-secret.yaml create mode 100644 packages/argo-cd/values.yaml delete mode 100644 packages/argo-workflows-sso-config/base/kustomization.yaml delete mode 100644 packages/argo-workflows-sso-config/dev/kustomization.yaml delete mode 100644 packages/argo-workflows/dev/values-no-sso.yaml create mode 100644 packages/argo-workflows/manifests/external-secrets.yaml rename packages/{argo-workflows-sso-config/base => argo-workflows/manifests}/sa-admin.yaml (100%) create mode 100644 packages/argo-workflows/path-routing/default-cert-external-secret.yaml rename packages/argo-workflows/{dev => }/values.yaml (53%) delete mode 100644 packages/argocd/base/install.yaml delete mode 100644 packages/argocd/base/kustomization.yaml delete mode 100644 packages/argocd/dev/argocd-cmd-params-cm.yaml delete mode 100644 packages/argocd/dev/cm-argocd-rbac-cm.yaml delete mode 100644 packages/argocd/dev/kustomization.yaml delete mode 100644 packages/argocd/dev/service-argogrpc.yaml delete mode 100644 packages/backstage/base/install-backstage.yaml delete mode 100644 packages/backstage/base/kustomization.yaml delete mode 100644 packages/backstage/dev/kustomization.yaml delete mode 100644 packages/backstage/dev/patches/deployment-backstage.yaml delete mode 100644 packages/backstage/dev/sa-backstage.yaml delete mode 100644 packages/backstage/dev/user-rbac.yaml create mode 100644 packages/backstage/manifests/external-secrets.yaml rename packages/backstage/{dev/secret-k8s-config.yaml => manifests/k8s-config-secret.yaml} (96%) create mode 100644 packages/backstage/path-routing/default-cert-external-secret.yaml create mode 100644 packages/backstage/values.yaml create mode 100644 packages/bootstrap.yaml create mode 100644 packages/bootstrap/values-idpbuilder.yaml create mode 100644 packages/bootstrap/values.yaml delete mode 100644 packages/cert-manager/base/crds.yaml create mode 100644 packages/cert-manager/path-routing/cluster-secret-store.yaml create mode 100644 packages/cert-manager/values.yaml create mode 100644 packages/crossplane-aws-upbound/values.yaml create mode 100644 packages/crossplane-compositions/kustomization.yaml create mode 100644 packages/crossplane-compositions/s3/definition.yaml create mode 100644 packages/crossplane-compositions/s3/general-purpose.yaml create mode 100644 packages/crossplane-compositions/s3/kustomization.yaml delete mode 100644 packages/crossplane/dev/values.yaml create mode 100644 packages/crossplane/values.yaml rename packages/external-dns/{dev => }/values.yaml (100%) create mode 100644 packages/external-secrets/manifests/cluster-secret-store.yaml rename packages/external-secrets/{dev => }/values.yaml (100%) delete mode 100644 packages/ingress-nginx/dev/values.yaml create mode 100644 packages/ingress-nginx/values.yaml delete mode 100644 packages/keycloak/base/install.yaml delete mode 100644 packages/keycloak/base/kustomization.yaml delete mode 100644 packages/keycloak/dev-external-secrets/kustomization.yaml delete mode 100644 packages/keycloak/dev/cm-config.yaml delete mode 100644 packages/keycloak/dev/kustomization.yaml delete mode 100644 packages/keycloak/dev/ns.yaml delete mode 100644 packages/keycloak/dev/patches/deployment.yaml delete mode 100644 packages/keycloak/dev/patches/service.yaml create mode 100644 packages/keycloak/manifests/external-secrets.yaml create mode 100644 packages/keycloak/manifests/keycloak-cluster-secret-store.yaml create mode 100644 packages/keycloak/manifests/user-sso-config-job.yaml create mode 100644 packages/keycloak/path-routing/default-cert-external-secret.yaml create mode 100644 packages/keycloak/values.yaml create mode 100644 private/argocd-github.yaml.template create mode 100644 private/backstage-github.yaml.template create mode 100755 scripts/cleanup-crds.sh create mode 100755 scripts/create-cluster.sh create mode 100755 scripts/create-config-secrets.sh create mode 100755 scripts/get-urls.sh create mode 100755 scripts/install-using-idpbuilder.sh create mode 100755 scripts/install.sh create mode 100755 scripts/template.sh create mode 100755 scripts/uninstall.sh create mode 100755 scripts/utils.sh delete mode 100644 setups/argocd/application-set.yaml delete mode 100644 setups/argocd/github-secret.yaml delete mode 100644 setups/argocd/secret-argocd-secret.yaml delete mode 100755 setups/argocd/uninstall.sh create mode 100644 templates/argo-workflow/base/cluster-workflow-data-on-eks-cleanup.yaml create mode 100644 templates/argo-workflow/base/cluster-workflow-data-on-eks.yaml rename {packages/argo-workflows-templates => templates/argo-workflow}/base/cluster-workflow-spark-rbac.yaml (100%) rename {packages/argo-workflows-templates => templates/argo-workflow}/base/kustomization.yaml (100%) rename {packages/argo-workflows-templates => templates/argo-workflow}/base/sa-backstage-scaffolder.yaml (100%) create mode 100644 templates/argo-workflow/base/sa-data-on-eks.yaml rename {packages/argo-workflows-templates => templates/argo-workflow}/dev/kustomization.yaml (100%) create mode 100644 templates/backstage/README.md create mode 100644 templates/backstage/app-with-bucket/skeleton/catalog-info.yaml create mode 100644 templates/backstage/app-with-bucket/skeleton/docs/idpbuilder.md create mode 100644 templates/backstage/app-with-bucket/skeleton/docs/images/cnoe-logo.png create mode 100644 templates/backstage/app-with-bucket/skeleton/docs/index.md create mode 100644 templates/backstage/app-with-bucket/skeleton/go.mod create mode 100644 templates/backstage/app-with-bucket/skeleton/kustomize/base/cm-nginx.yaml create mode 100644 templates/backstage/app-with-bucket/skeleton/kustomize/base/kustomization.yaml create mode 100644 templates/backstage/app-with-bucket/skeleton/kustomize/base/nginx.yaml rename {packages/crossplane => templates/backstage/app-with-bucket/skeleton/kustomize}/dev/kustomization.yaml (100%) create mode 100644 templates/backstage/app-with-bucket/skeleton/kustomize/prod/kustomization.yaml create mode 100644 templates/backstage/app-with-bucket/skeleton/main.go create mode 100644 templates/backstage/app-with-bucket/skeleton/mkdocs.yml create mode 100644 templates/backstage/app-with-bucket/template.yaml create mode 100644 templates/backstage/argo-workflows/skeleton/catalog-info.yaml create mode 100644 templates/backstage/argo-workflows/skeleton/docs/argo-workflows.md create mode 100644 templates/backstage/argo-workflows/skeleton/docs/images/cnoe-logo.png create mode 100644 templates/backstage/argo-workflows/skeleton/docs/index.md create mode 100644 templates/backstage/argo-workflows/skeleton/docs/spark-operator.md create mode 100644 templates/backstage/argo-workflows/skeleton/manifests/deployment.yaml create mode 100644 templates/backstage/argo-workflows/skeleton/mkdocs.yml create mode 100644 templates/backstage/argo-workflows/template.yaml create mode 100644 templates/backstage/basic/mkdocs.yml create mode 100644 templates/backstage/basic/skeleton/catalog-info.yaml create mode 100644 templates/backstage/basic/skeleton/docs/idpbuilder.md create mode 100644 templates/backstage/basic/skeleton/docs/images/cnoe-logo.png create mode 100644 templates/backstage/basic/skeleton/docs/index.md create mode 100644 templates/backstage/basic/skeleton/manifests/deployment.yaml create mode 100644 templates/backstage/basic/template.yaml create mode 100644 templates/backstage/catalog-info.yaml create mode 100644 templates/backstage/organization/guests.yaml create mode 100644 templates/backstage/ray-serve/sample/pytorch-sample.py create mode 100644 templates/backstage/ray-serve/skeleton/catalog-info.yaml create mode 100644 templates/backstage/ray-serve/skeleton/manifests/ray-serve.yaml create mode 100644 templates/backstage/ray-serve/template-ray-serve.yaml delete mode 100644 terraform/backstage.tf delete mode 100644 terraform/scripts/argo-workflows/config-payloads/client-payload.json delete mode 100755 terraform/scripts/argo-workflows/install.sh delete mode 100644 terraform/scripts/argo-workflows/secret-sso.yaml delete mode 100755 terraform/scripts/argo-workflows/uninstall.sh delete mode 100644 terraform/scripts/backstage/config-payloads/client-payload.json delete mode 100755 terraform/scripts/backstage/install.sh delete mode 100644 terraform/scripts/backstage/secret-env-var.yaml delete mode 100644 terraform/scripts/backstage/secret-integrations.yaml delete mode 100755 terraform/scripts/backstage/uninstall.sh delete mode 100755 terraform/scripts/crossplane/uninstall.sh delete mode 100644 terraform/scripts/keycloak/config-payloads/client-scope-groups-payload.json delete mode 100644 terraform/scripts/keycloak/config-payloads/group-admin-payload.json delete mode 100644 terraform/scripts/keycloak/config-payloads/group-base-user-payload.json delete mode 100644 terraform/scripts/keycloak/config-payloads/group-mapper-payload.json delete mode 100644 terraform/scripts/keycloak/config-payloads/realm-payload.json delete mode 100644 terraform/scripts/keycloak/config-payloads/user-password.json delete mode 100644 terraform/scripts/keycloak/config-payloads/user-user1.json delete mode 100644 terraform/scripts/keycloak/config-payloads/user-user2.json delete mode 100755 terraform/scripts/keycloak/install.sh delete mode 100755 terraform/scripts/keycloak/uninstall.sh delete mode 100644 terraform/templates/argocd-apps/argo-workflows-sso-config.yaml delete mode 100644 terraform/templates/argocd-apps/argo-workflows-templates.yaml delete mode 100644 terraform/templates/argocd-apps/argo-workflows.yaml delete mode 100644 terraform/templates/argocd-apps/backstage.yaml delete mode 100644 terraform/templates/argocd-apps/crossplane-provider.yaml delete mode 100644 terraform/templates/argocd-apps/crossplane.yaml delete mode 100644 terraform/templates/argocd-apps/external-secrets.yaml delete mode 100644 terraform/templates/argocd-apps/keycloak.yaml delete mode 100644 terraform/templates/manifests/cluster-issuer.yaml delete mode 100644 terraform/templates/manifests/ingress-argo-workflows.yaml delete mode 100644 terraform/templates/manifests/ingress-argocd.yaml delete mode 100644 terraform/templates/manifests/ingress-backstage.yaml diff --git a/cluster/eksctl/README.md b/cluster/eksctl/README.md new file mode 100644 index 0000000..23c8a48 --- /dev/null +++ b/cluster/eksctl/README.md @@ -0,0 +1,82 @@ +# EKS Cluster Setup with eksctl + +This directory contains the configuration to create an EKS cluster with pod identity associations for various AWS services. + +## Prerequisites + +- AWS CLI configured with appropriate permissions +- eksctl installed + +## Create Cluster +Run the following command and follow the instructions: + +```bash +export REPO_ROOT=$(git rev-parse --show-toplevel) +$REPO_ROOT/scripts/create-cluster.sh +``` + +## AWS Resources Created + +The cluster creation will provision the following AWS resources: + +### EKS Cluster +- EKS cluster with Kubernetes version 1.33 +- VPC with CIDR 10.0.0.0/16 +- Single NAT Gateway +- Public and private subnets across availability zones +- EKS cluster security groups +- OIDC identity provider + +### Managed Node Group _(For Non-Auto Mode cluster)_ +- Managed node group with 3-6 m5.large instances +- Desired capacity: 4 nodes +- 100GB EBS volumes per node +- Node IAM role with required policies + +### EKS Addons _(For Non-Auto Mode cluster)_ +- eks-pod-identity-agent +- aws-ebs-csi-driver with EBS CSI controller policies +- vpc-cni (default) +- coredns (default) +- kube-proxy (default) + +### Pod Identity Associations +- **crossplane-system/provider-aws**: AdministratorAccess + permissions boundary +- **external-secrets/external-secrets**: Secrets Manager access policies +- **kube-system/aws-load-balancer-controller**: AWS Load Balancer Controller policies +- **external-dns/external-dns**: Route 53 DNS management policies + +### IAM Resources +- IAM roles for pod identity associations +- IAM policies for service-specific permissions +- OIDC identity provider for the cluster + +## Cleanup + +> [!CAUTION] +> Ensure all workloads are removed from the cluster before destroying to avoid orphaned resources. + +To delete the cluster and all associated resources: + +```bash +# Delete the EKS cluster +export $CLUSTER_NAME="cnoe-ref-impl" +export AWS_REGION="us-west-2" +eksctl delete cluster --name $CLUSTER_NAME --region $AWS_REGION + +# Delete the permissions boundary policy +export AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text) +aws iam delete-policy --policy-arn arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary +``` + +This will automatically clean up the following: +- EKS cluster +- Managed node groups +- Pod identity associations +- IAM roles and policies created by eksctl +- VPC and networking resources (if created by eksctl) +- EKS addons +- Crossplane permissions boundary policy + +> [!NOTE] +> Manual cleanup may be required for any resources created outside of eksctl or if the deletion process encounters errors. diff --git a/cluster/eksctl/cluster-config-auto.yaml b/cluster/eksctl/cluster-config-auto.yaml new file mode 100644 index 0000000..ff9c19b --- /dev/null +++ b/cluster/eksctl/cluster-config-auto.yaml @@ -0,0 +1,46 @@ +apiVersion: eksctl.io/v1alpha5 +kind: ClusterConfig +metadata: + name: ${CLUSTER_NAME} + region: ${AWS_REGION} + version: "1.33" + tags: + githubRepo: "github.com/cnoe-io/reference-implementation-aws" + env: "dev" + project: "cnoe" +vpc: + cidr: "10.0.0.0/16" + nat: + gateway: Single +autoModeConfig: + enabled: true +iam: + withOIDC: true + podIdentityAssociations: + - namespace: crossplane-system + serviceAccountName: provider-aws + permissionPolicyARNs: + - "arn:aws:iam::aws:policy/AdministratorAccess" + permissionsBoundaryARN: "${CROSSPLANE_BOUNDARY_POLICY_ARN}" + - namespace: external-secrets + serviceAccountName: external-secrets + permissionPolicy: + Version: "2012-10-17" + Statement: + - Action: + - "secretsmanager:ListSecrets" + - "secretsmanager:BatchGetSecretValue" + Effect: "Allow" + Resource: "*" + - Effect: "Allow" + Action: + - "secretsmanager:GetResourcePolicy" + - "secretsmanager:GetSecretValue" + - "secretsmanager:DescribeSecret" + - "secretsmanager:ListSecretVersionIds" + Resource: + - "arn:aws:secretsmanager:us-west-2:${AWS_ACCOUNT_ID}:secret:cnoe-ref-impl/*" + - namespace: external-dns + serviceAccountName: external-dns + wellKnownPolicies: + externalDNS: true diff --git a/cluster/eksctl/cluster-config.yaml b/cluster/eksctl/cluster-config.yaml new file mode 100644 index 0000000..f5fcc5d --- /dev/null +++ b/cluster/eksctl/cluster-config.yaml @@ -0,0 +1,69 @@ +apiVersion: eksctl.io/v1alpha5 +kind: ClusterConfig +metadata: + name: ${CLUSTER_NAME} + region: ${AWS_REGION} + version: "1.33" + tags: + githubRepo: "github.com/cnoe-io/reference-implementation-aws" + env: "dev" + project: "cnoe" +vpc: + cidr: "10.0.0.0/16" + nat: + gateway: Single +managedNodeGroups: + - name: managed-ng-1 + instanceType: m5.large + minSize: 3 + maxSize: 6 + desiredCapacity: 4 + volumeSize: 100 + ssh: + allow: false + labels: + pool: system +addonsConfig: + autoApplyPodIdentityAssociations: true +addons: + - name: eks-pod-identity-agent + - name: aws-ebs-csi-driver + podIdentityAssociations: + - namespace: kube-system + serviceAccountName: ebs-csi-controller-sa + wellKnownPolicies: + ebsCSIController: true +iam: + withOIDC: true + podIdentityAssociations: + - namespace: crossplane-system + serviceAccountName: provider-aws + permissionPolicyARNs: + - "arn:aws:iam::aws:policy/AdministratorAccess" + permissionsBoundaryARN: "${CROSSPLANE_BOUNDARY_POLICY_ARN}" + - namespace: external-secrets + serviceAccountName: external-secrets + permissionPolicy: + Version: "2012-10-17" + Statement: + - Action: + - "secretsmanager:ListSecrets" + - "secretsmanager:BatchGetSecretValue" + Effect: "Allow" + Resource: "*" + - Effect: "Allow" + Action: + - "secretsmanager:GetResourcePolicy" + - "secretsmanager:GetSecretValue" + - "secretsmanager:DescribeSecret" + - "secretsmanager:ListSecretVersionIds" + Resource: + - "arn:aws:secretsmanager:us-west-2:${AWS_ACCOUNT_ID}:secret:cnoe-ref-impl/*" + - namespace: kube-system + serviceAccountName: aws-load-balancer-controller + wellKnownPolicies: + awsLoadBalancerController: true + - namespace: external-dns + serviceAccountName: external-dns + wellKnownPolicies: + externalDNS: true diff --git a/cluster/iam-policies/crossplane-permissions-boundry.json b/cluster/iam-policies/crossplane-permissions-boundry.json new file mode 100644 index 0000000..f7f6f3d --- /dev/null +++ b/cluster/iam-policies/crossplane-permissions-boundry.json @@ -0,0 +1,65 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "DenyPermBoundaryIAMPolicyAlteration", + "Effect": "Deny", + "Action": [ + "iam:DeletePolicy", + "iam:DeletePolicyVersion", + "iam:CreatePolicyVersion", + "iam:SetDefaultPolicyVersion" + ], + "Resource": [ + "arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary" + ] + }, + { + "Sid": "DenyRemovalOfPermBoundaryFromAnyUserOrRole", + "Effect": "Deny", + "Action": [ + "iam:DeleteUserPermissionsBoundary", + "iam:DeleteRolePermissionsBoundary" + ], + "Resource": [ + "arn:aws:iam::${AWS_ACCOUNT_ID}:user/*", + "arn:aws:iam::${AWS_ACCOUNT_ID}:role/*" + ], + "Condition": { + "StringEquals": { + "iam:PermissionsBoundary": "arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary" + } + } + }, + { + "Effect": "Deny", + "Action": [ + "iam:CreateUser", + "iam:AddUserToGroup", + "iam:AttachUserPolicy", + "iam:ChangePassword", + "iam:CreateAccessKey", + "iam:*AccountAlias", + "iam:CreateGroup", + "iam:*LoginProfile", + "iam:*IDConnectProvider*", + "iam:*SAMLProvider*", + "iam:CreateServiceSpecificCredential", + "iam:*MFA*", + "iam:UpdateUser" + ], + "Resource": [ + "*" + ] + }, + { + "Effect": "Allow", + "Action": [ + "*" + ], + "Resource": [ + "*" + ] + } + ] + } \ No newline at end of file diff --git a/cluster/iam-policies/external-secrets.json b/cluster/iam-policies/external-secrets.json new file mode 100644 index 0000000..0b28c75 --- /dev/null +++ b/cluster/iam-policies/external-secrets.json @@ -0,0 +1,25 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Action" : [ + "secretsmanager:ListSecrets", + "secretsmanager:BatchGetSecretValue" + ], + "Effect" : "Allow", + "Resource" : "*" + }, + { + "Effect": "Allow", + "Action": [ + "secretsmanager:GetResourcePolicy", + "secretsmanager:GetSecretValue", + "secretsmanager:DescribeSecret", + "secretsmanager:ListSecretVersionIds" + ], + "Resource": [ + "arn:aws:secretsmanager:us-west-2:${AWS_ACCOUNT_ID}:secret:cnoe-ref-impl/*" + ] + } + ] +} \ No newline at end of file diff --git a/cluster/terraform/README.md b/cluster/terraform/README.md new file mode 100644 index 0000000..926148a --- /dev/null +++ b/cluster/terraform/README.md @@ -0,0 +1,96 @@ +# EKS Cluster Setup with Terraform + +This directory contains Terraform configuration to create an EKS cluster with pod identity associations for various AWS services. The configuration supports both standard EKS clusters and EKS Auto Mode. + +## Prerequisites + +- AWS CLI configured with appropriate permissions +- Terraform >= 1.0 installed + +## Create Cluster +Run the following command and follow the instructions: + +```bash +export REPO_ROOT=$(git rev-parse --show-toplevel) +$REPO_ROOT/scripts/create-cluster.sh +``` + +## AWS Resources Created + +The Terraform configuration will provision the following AWS resources: + +### EKS Cluster +- EKS cluster with Kubernetes version 1.33 +- VPC with CIDR 10.0.0.0/16 +- Single NAT Gateway +- Public and private subnets across 3 availability zones +- EKS cluster security groups +- OIDC identity provider + +### Compute Resources + +#### Auto Mode (when `auto_mode = true`) +- EKS Auto Mode enabled with general-purpose node pools +- Automatic compute resource management + +#### Standard Mode (when `auto_mode = false`) +- Managed node group with 3-6 m5.large instances +- Desired capacity: 4 nodes +- 100GB EBS volumes per node +- Node IAM role with required policies + +### EKS Addons + +#### Auto Mode +- All addons managed automatically by EKS Auto Mode +- No explicit addon configuration required + +#### Standard Mode +- eks-pod-identity-agent +- aws-ebs-csi-driver with EBS CSI controller policies +- vpc-cni +- coredns +- kube-proxy + +### Pod Identity Associations + +#### Always Created (Both Modes) +- **crossplane-system/provider-aws**: AdministratorAccess + permissions boundary +- **external-secrets/external-secrets**: Secrets Manager access policies +- **external-dns/external-dns**: Route 53 DNS management policies + +#### Standard Mode Only +- **kube-system/aws-load-balancer-controller**: AWS Load Balancer Controller policies +- **kube-system/ebs-csi-controller-sa**: EBS CSI driver policies + +### IAM Resources +- IAM roles for pod identity associations +- IAM policies for service-specific permissions +- OIDC identity provider for the cluster +- Crossplane permissions boundary policy + +## Cleanup + +> [!CAUTION] +> Ensure all workloads are removed from the cluster before destroying to avoid orphaned resources. + +To delete the cluster and all associated resources: + +```bash +# Destroy the Terraform-managed resources +export REPO_ROOT=$(git rev-parse --show-toplevel) +export export TF_VAR_auto_mode="true" # set this to "false" if using non-auto mode +terraform -chdir=$REPO_ROOT/cluster/terraform destroy +``` + +This will clean up: +- EKS cluster +- Managed node groups (if using standard mode) +- Pod identity associations +- IAM roles and policies created by Terraform +- VPC and networking resources +- EKS addons +- Crossplane permissions boundary policy + +> [!NOTE] +> Manual cleanup may be required for any resources created outside of Terraform or if the deletion process encounters errors. \ No newline at end of file diff --git a/cluster/terraform/main.tf b/cluster/terraform/main.tf new file mode 100644 index 0000000..592fbd1 --- /dev/null +++ b/cluster/terraform/main.tf @@ -0,0 +1,242 @@ +provider "aws" { + region = var.region +} + +data "aws_eks_cluster_auth" "this" { + name = module.eks.cluster_name +} + +data "aws_caller_identity" "current" {} +data "aws_availability_zones" "available" {} + +data "template_file" "crossplane_boundary_policy" { + template = file("${path.module}/../iam-policies/crossplane-permissions-boundry.json") + vars = { + AWS_ACCOUNT_ID = data.aws_caller_identity.current.account_id + } +} + +data "template_file" "external_secret_policy" { + template = file("${path.module}/../iam-policies/external-secrets.json") + vars = { + AWS_ACCOUNT_ID = data.aws_caller_identity.current.account_id + } +} +locals { + name = var.cluster_name + region = var.region + + vpc_cidr = "10.0.0.0/16" + azs = slice(data.aws_availability_zones.available.names, 0, 3) + + tags = { + githubRepo = "github.com/cnoe-io/reference-implementation-aws" + env = "dev" + project = "cnoe" + } +} + +################################################################################ +# Cluster +################################################################################ + +module "eks" { + source = "terraform-aws-modules/eks/aws" + version = "~> 20.37" + + cluster_name = local.name + cluster_version = "1.33" + cluster_endpoint_public_access = true + + enable_cluster_creator_admin_permissions = true + + vpc_id = module.vpc.vpc_id + subnet_ids = module.vpc.private_subnets + + enable_irsa = true + + # EKS Auto Mode configuration + # When enabled, EKS automatically manages compute resources and core addons + # This eliminates the need for managed node groups and manual addon management + cluster_compute_config = var.auto_mode ? { + enabled = true + node_pools = ["general-purpose", "system"] + } : null + + # Only create managed node groups when not using Auto Mode + # Auto Mode handles compute resources automatically + eks_managed_node_groups = var.auto_mode ? {} : { + initial = { + instance_types = ["m5.large"] + + min_size = 3 + max_size = 6 + desired_size = 4 + + disk_size = 100 + + labels = { + pool = "system" + } + } + } + + # Conditional cluster addons based on Auto Mode + # Auto Mode automatically manages: CoreDNS, kube-proxy, VPC CNI, EBS CSI driver, AWS Load Balancer Controller, eks-pod-identity-agent + cluster_addons = var.auto_mode ? { + # Auto Mode manages all addons automatically - no explicit addon configuration needed + } : { + # Standard mode requires all addons to be explicitly managed + coredns = {} + eks-pod-identity-agent = {} + kube-proxy = {} + vpc-cni = {} + aws-ebs-csi-driver = {} + } + + tags = local.tags +} + + +################################################################################ +# IAM Policies +################################################################################ + +resource "aws_iam_policy" "crossplane_boundary" { + name = "crossplane-permissions-boundary" + policy = data.template_file.crossplane_boundary_policy.rendered + + tags = local.tags +} + +################################################################################ +# Pod Identity +################################################################################ + +# AWS Load Balancer Controller - Only needed when not using Auto Mode +module "aws_load_balancer_controller_pod_identity" { + count = var.auto_mode ? 0 : 1 + source = "terraform-aws-modules/eks-pod-identity/aws" + version = "~> 1.0" + + name = "aws_load_balancer_controller" + attach_aws_lb_controller_policy = true + associations = { + external_secrets = { + cluster_name = module.eks.cluster_name + namespace = "kube-system" + service_account = "aws-load-balancer-controller" + } + } + + tags = local.tags +} + +# External DNS - Required for both Auto Mode and standard mode +module "external_dns_pod_identity" { + source = "terraform-aws-modules/eks-pod-identity/aws" + version = "~> 1.0" + + name = "external-dns" + attach_external_dns_policy = true + external_dns_hosted_zone_arns = [ "*" ] + associations = { + external_secrets = { + cluster_name = module.eks.cluster_name + namespace = "external-dns" + service_account = "external-dns" + } + } + tags = local.tags +} + +# EBS CSI Driver - Only needed when not using Auto Mode +module "ebs_csi_driver_pod_identity" { + count = var.auto_mode ? 0 : 1 + source = "terraform-aws-modules/eks-pod-identity/aws" + version = "~> 1.0" + + name = "ebs-csi-driver" + attach_aws_ebs_csi_policy = true + associations = { + external_secrets = { + cluster_name = module.eks.cluster_name + namespace = "kube-system" + service_account = "ebs-csi-controller-sa" + } + } + tags = local.tags +} + +# Crossplane - Required for both Auto Mode and standard mode +module "crossplane_pod_identity" { + source = "terraform-aws-modules/eks-pod-identity/aws" + version = "~> 1.0" + + name = "crossplane-provider-aws" + + additional_policy_arns = { + admin = "arn:aws:iam::aws:policy/AdministratorAccess" + } + permissions_boundary_arn = aws_iam_policy.crossplane_boundary.arn + + associations = { + crossplane = { + cluster_name = module.eks.cluster_name + namespace = "crossplane-system" + service_account = "provider-aws" + } + } + + tags = local.tags +} + +# External Secrets - Required for both Auto Mode and standard mode +module "external_secrets_pod_identity" { + source = "terraform-aws-modules/eks-pod-identity/aws" + version = "~> 1.0" + + name = "external-secrets" + attach_custom_policy = true + override_policy_documents = [data.template_file.external_secret_policy.rendered] + associations = { + external_secrets = { + cluster_name = module.eks.cluster_name + namespace = "external-secrets" + service_account = "external-secrets" + } + } + + tags = local.tags +} + +################################################################################ +# VPC +################################################################################ + +module "vpc" { + source = "terraform-aws-modules/vpc/aws" + version = "~> 5.0" + + name = local.name + cidr = local.vpc_cidr + + azs = local.azs + private_subnets = [for k, v in local.azs : cidrsubnet(local.vpc_cidr, 4, k)] + public_subnets = [for k, v in local.azs : cidrsubnet(local.vpc_cidr, 8, k + 48)] + + enable_nat_gateway = true + single_nat_gateway = true + enable_dns_hostnames = true + enable_dns_support = true + + public_subnet_tags = { + "kubernetes.io/role/elb" = 1 + } + + private_subnet_tags = { + "kubernetes.io/role/internal-elb" = 1 + } + + tags = local.tags +} \ No newline at end of file diff --git a/cluster/terraform/outputs.tf b/cluster/terraform/outputs.tf new file mode 100644 index 0000000..0873d1f --- /dev/null +++ b/cluster/terraform/outputs.tf @@ -0,0 +1,39 @@ +output "cluster_name" { + description = "EKS cluster name" + value = module.eks.cluster_name +} + +output "cluster_endpoint" { + description = "Endpoint for EKS control plane" + value = module.eks.cluster_endpoint +} + +output "cluster_security_group_id" { + description = "Security group ids attached to the cluster control plane" + value = module.eks.cluster_security_group_id +} + +output "region" { + description = "AWS region" + value = var.region +} + +output "cluster_arn" { + description = "The Amazon Resource Name (ARN) of the cluster" + value = module.eks.cluster_arn +} + +output "oidc_provider_arn" { + description = "The ARN of the OIDC Provider if enabled" + value = module.eks.oidc_provider_arn +} + +output "auto_mode_enabled" { + description = "Whether EKS Auto Mode is enabled" + value = var.auto_mode +} + +output "configure_kubectl" { + description = "Configure kubectl: make sure you're logged in with the correct AWS profile and run the following command to update your kubeconfig" + value = "aws eks --region ${var.region} update-kubeconfig --name ${module.eks.cluster_name}" +} \ No newline at end of file diff --git a/cluster/terraform/variables.tf b/cluster/terraform/variables.tf new file mode 100644 index 0000000..446e13f --- /dev/null +++ b/cluster/terraform/variables.tf @@ -0,0 +1,18 @@ +variable "cluster_name" { + description = "Name of the EKS cluster" + type = string + default = "cnoe-ref-impl" +} + +variable "region" { + description = "AWS region" + type = string + default = "us-west-2" +} + +variable "auto_mode" { + description = "Enable EKS Auto Mode. When enabled, EKS automatically manages compute resources and many addons." + type = bool + default = false +} + diff --git a/cluster/terraform/versions.tf b/cluster/terraform/versions.tf new file mode 100644 index 0000000..4c65a71 --- /dev/null +++ b/cluster/terraform/versions.tf @@ -0,0 +1,9 @@ +terraform { + required_version = ">= 1.0" + required_providers { + aws = { + source = "hashicorp/aws" + version = ">= 5.0" + } + } +} \ No newline at end of file diff --git a/config.yaml b/config.yaml new file mode 100644 index 0000000..5924313 --- /dev/null +++ b/config.yaml @@ -0,0 +1,35 @@ +### Config for CNOE AWS Reference Implementation ### +# Source: "https://github.com/cnoe/reference-implementation-aws" + +# Details of your repository fork +repo: + url: "https://github.com/cnoe-punkwalker/reference-implementation-aws" # This is the GITHUB URL of the fork in Github Org that you have created. + revision: "HEAD" # Branch or Tag which should be used for Argo CD Apps + basepath: "packages" # Directory in which configuration of addons is stored + +# The name of the EKS cluster you are installing the reference implementation on. +cluster_name: "cnoe-ref-impl" +# Set this to "true" if EKS cluster is Auto Mode othewise "false" +# !!! Note: This is a string value as it is passed on to the Argo CD cluster secret as label +auto_mode: "true" +# AWS Region of the EKS cluster and cnoe-reference-implementation-aws config secret +region: "us-west-2" + +# Base Domain name used for exposing services. It should be a subdomain or main domain of the Route53 hosted zone. +domain: + +# Route53 hosted zone ID for configuring external-dns +route53_hosted_zone_id: + +# Set this to "true" if you want to enable path routing othewise "false" for domain based routing. +# When enabled, the exposed addons will be accessible at https:/// +# When disabled, the exposed addons will be accessible at https://. +# !!! Note: This is a string value as it is passed on to the Argo CD cluster secret as label +path_routing: "true" + +# Tags for AWS resources +tags: + githubRepo: "github.com/cnoe-io/reference-implementation-aws" + env: "dev" + project: "cnoe" + \ No newline at end of file diff --git a/setups/argocd/install-sso.sh b/docs/examples/app-with-aws-resources.md similarity index 100% rename from setups/argocd/install-sso.sh rename to docs/examples/app-with-aws-resources.md diff --git a/docs/examples/demo.md b/docs/examples/demo.md new file mode 100644 index 0000000..4bfe867 --- /dev/null +++ b/docs/examples/demo.md @@ -0,0 +1,43 @@ +## Backstage template generation + +Using the CNOE CLI, you can generate Backstage template input fields from Terraform modules, Kubernetes CRDs, and Crossplane XRDs. + +### Terraform (imperative) + +For example, to generate input field from a terraform module in the Data on EKS repository: + +```bash +git clone https://github.com/awslabs/data-on-eks.git /tmp/data-on-eks + +cnoe template tf -i /tmp/data-on-eks/analytics/terraform/spark-k8s-operator -o examples/template-generation -t examples/template-generation/data-on-eks.yaml -p '.spec.parameters[0].properties.tfVars' + +``` +The above command takes the terraform module available at `/tmp/data-on-eks/analytics/terraform/spark-k8s-operator` then inserts generated backstage fields into a partially configured template at `examples/template-generation/data-on-eks.yaml`. This partially configure template contains fields that are common to all modules in the Data on EKS repository. + +You can view what fields are generated by using `diff` and `yq`: + +```bash +diff <(yq -P 'sort_keys(..)' -o=props examples/template-generation/spark-k8s-operator.yaml) <(yq -P 'sort_keys(..)' -o=props examples/template-generation/data-on-eks.yaml) +``` + +The rest of this document assumes you've used the spark-k8s-operator module to generate input fields. + +Once the template is hydrated, it is ready to use. You can push it to a private git repository within your organization or push it to a public repository. +You can then register the template in the Backstage UI (`Create...` > `Register Existing Component`) or update your Backstage configuration. The main configuration file is a ConfigMap in the backstage namespace with the name `backstage-config`. + +You can use the template to create a EKS cluster with optimization for data workload using terraform. The example uses a custom Argo Workflows template to run the install script, add a IAM role to the admin group in the cluster, create a Backstage service account, then registers the cluster to Backstage for use. + +The Argo Workflows run is associated with the Backstage entity. So you can check on its status within Backstage. If you'd like to see detailed information about the run, you can click on it to go to the Argo Workflows UI. + +Once the new cluster is ready, you can submit a Spark Job to the new cluster through Backstage. + +### Terraform (declarative) + +You can also use the terraform controller or Crossplane terraform provider to deploy terraform modules. Examples of this will be included in the future. + + +### Crossplane and ACK + +When using Crossplane, the bulk of work is done by Crossplane providers. You can use GitOps tools like ArgoCD to deploy these manifests to the cluster using Backstage scaffolder templates. Examples of this will be included in the future. + + diff --git a/examples/spark/pi.yaml b/docs/examples/spark/pi.yaml similarity index 100% rename from examples/spark/pi.yaml rename to docs/examples/spark/pi.yaml diff --git a/examples/template-generation/data-on-eks.yaml b/docs/examples/template-generation/data-on-eks.yaml similarity index 100% rename from examples/template-generation/data-on-eks.yaml rename to docs/examples/template-generation/data-on-eks.yaml diff --git a/docs/images/argocd-github-app.png b/docs/images/argocd-github-app.png new file mode 100644 index 0000000000000000000000000000000000000000..8834ab6cb4a91558dcbbcf6dca910de14d5e026a GIT binary patch literal 48479 zcmZUa1z23Ywy<&6V#Qqw#ih7Qai_)I2X`+FMT@)B(hlzKPzEXPuElkrID`Dt@0@$@ z`S0D&lSy`DB|BNOce3&(T0>0%8-ol34h{}m@x81T92}wm92`6z8VW4Nf^ka*c4K5O zBcq`xBSWL%?qXvPu!e(UN%BgZVC!>xJ!ooaP>Yug?28W`&CUXDf6>6HPohS>Uh}Ch zbrKJHr^tR!&VU*McNP;X`wTCaI^*o_uF+o8l@Ez<+PS|v^SeHK3iS6c>@9thR)=_~ zGLEJm*PfpK!6=@DVo?^+mrtx5;p=3D?A_V5ZeU`?>{{aW!q%?C^La3YU+8qHRp`w7 zd2B(~<8A)jkC3RxHXe7gON_`S_u=2hTO2a!uhyFdHMa<2i-@{dZ1?)4whXtt#Y+3b zF@K)f#TArnc{*snEcY(2lTN&q{eBzepJkS;@5e#+Wi#d7C`D3;&Esws4LM5__eW-_ z7wTD~ma+5Bi0dQlbZl^11?z+^9$K0_9a9pZ|gJof9Fwy`G2oOnEPAiUp``T z1RN^t?iI}W79#vtZbX4X#QzGzAsp-`Bs|Y3*zOKQ%df{QI$B56Jm9g_E0ui}Sx_ z!-|UjjTP3g_q7J-%i24^`V3ZwIL|vC(SP#)pOpWp@jps_{GXD7JpW(G|48}YC3QWl z-DO;yU{!jG|Icv!yW0Ou{C7c7&c9FoA3gD}ZvH10*3aS?qMZLdX5tu77pocAFjCmd zs_Vdfn3DZ-MZtbqVD7IEbH4NSt7kB!m4s82mD2HrKQTrPB4*QxoXM6kM=hgo)XedCxsHd$k7EZwg12z3 zK2nk}!AS7`mpDm0mMb*0+Ba7T8qWWJ6aLA?a7<4!ujY^D$2 zo)qF|7MIv2Y_xZlk+DLR4Ht^*epuQ)RUz`(KHVfXp8>8q$=d~r?-p4MlIwD8Dp!dA z1SDg~L`oW|5K<~iNQG8}BpQjwk2`89^Z$+%VtYe>X>~vb=ATo2t3bkEEmN#k0Ga@C zfJRf6Xe&3W>K=55wG%*%bNmWw`m)UR>PyxmmkrZXNuH0g=?)6{rWJT5G}TZOsnG9E zd91S~4sybQk4R5#W~x&5=?z72^my(T+I3cnWqO@BjJoAgj7q76mI?`zfBHQzxR5?~ z+efqeYo1<0yxWt2Ir}q5rY7FX5;^GVMt<@Biq=+n-$f*z*h@gN3gOzHd1{Y<&6k@= zpN>lKNR+3xwmdUYx$aDjzB9ZKo3?&MO^c5y>m5> z1f6;0Ab&rw`(^ZoY8)2&-iK_yp&$= zet;PoO46iDKufB>bTxS}sWu&+_Ezd0*9Abch)4Geo7`QTWc-EM!^Yg3tIO57@Y~dP zt%dqdM;nzthW|_+bla&fYq~7WwMwo_bsEfX3kYcMo+7x%#c3c&ZLE zm1PIWs}&ZJX0=vML;moyGEF+|H-6vwb3sT-HNbGmM=6-B#=GELM4crVlPg7&+2sTB zd_LJC(QP!!ZChOL8w{h{!!@4I3Mq;%JNcv@JXR1fqKmG{HNt*I-(#^o$h zbg`1p#rI$I8;_@l4NAB+uB1aEC4%@l5xQ)X+d<=QuTgR zIv=}2F5ihhZ2Y)dsEdPtCl#gIlSl+bprsY4{h_3tap|x5E7{!n6Gp8YkYR#AcwHi0 zDMAjTwpL0wQR=hmg>=r<)Tecw2vsMw9lPO2N(xV>k9lWjQ+jK+?|9Rv3X}zQNKrDg zBAA?aZ-V&z?wJY}@GZ6pzDeh8b(v6>1m%?-QBgfVa4rW8H4A_X$m7v4i`36LbnKB5 zsd;~Ce{crHwd2--XyOeP)V?vzv6fz;cK@kjEYog%du>CYgf`k_CcLYR;D<^?Vga<} zao^lk)8Y+y63Fg1$o?MA<4NQg`!(lD^@Kcm7CUB{;zYyr57lR?!8mmhm3> z`%n`~-J+1(_L$&2NO#_!fTsXWp__nErx)YCkfIaqXRU7?gYTnM*DV8^s^DH?63z}( z8SgeC)=IA)6K166Q_Ds8K;oxlWe@WZaY@elrJ_dDzN_61CjP_D4H*}CO4!h~;E~_q zuLU||UaQztttk~ecJ|zNl-ItQVS8s(_<%4P38Cbl@>BE15J31!BY+IW`Qe3(ADW1l zGwp^x+aM=m(C+YtQncp7+P=`fslnT5)m`pxK2hA4h&v2Yue8<@qXUuax1L;C!LHZZ~FC)3o1ul;VMt zf|6t(%HLlLN$gPPFTHc>*|KsRKiDc-{A$9VMiOEsfn(@D`m9oKWP9Hv*5JGkZ@X@g zHmr4Qpm?PJ_|vK|Xsrw>StIVWTlU- zgevIzvm;JK$Im6c^|jI59;rEd{nEW?rvC9emovq*ZRM$7+QkP|>Vw*PO(8f#V@tQ2 zTO(~HBMGK0^OiNJi$AyT`L+u2TvJUuEhWZ2*6WU$G;b}r3~h`Ev>KBDKL}nKTC+jV zE6lW|M9`b43#-haRA;z|DnqN-D{J{uOIqCH(4Num!*=V3MYE<0(flBQUT5+jT*E#= z)vZS;F7*em{eJ39BQJZ6JO^DRnnz-_n(AR3f!gejKzgTDkI9?lbFolUT_7tFOEeU6 zL68+=WQGzHaAe-hL(;gpVdF{2zS0(1xK*C z!279>)iW_0=!%a4O&IHP-s4ZLeyIAFW+x(186??7 zFr;kv5m13(^mCD!c*2Qyf6C&zwint&={TOu24;I{>wnXpDj>Iy+ppJMq>+)wImH{) zUK;%Qa^i_=t`ag(=VHPcJRyC4wlui$DznL}s-U8a-TtwwU;<*4x%r#iTuJ6^|1NHJ zOA@AD_l88!sU(zY7#`JVFk|#%=iKRS+=feJ+g$1ZQa58J1H?vx=P`Z% zvU%bxs1Sm`5Nm041$o_-awm`(wr_5$vXX({4B=VaQULjbsx!z!lpq$kxwtkO!O6`fPQ@Xymg_u^oRt%?FA)5m@q z2e-@i;fm30w-7%) z0ZQyGcX62;{6GcIy9>(at>@kqv>h4ox6E31XLf-(3E1(2A)QeJ;{6MAEswMczLkxv-?Wc zJi(EmH$i%9A5RVa%e;esO~4_((v}R4ygB=xZ1S`#ks+1HBw(0X5xPT{_~}j04gbw` z9Zv43Xzy8H^^u-8U_tF--XB!C^DKU?5;EwwdOY)?K-srS4<7%{c>v?V@|S;xc78rO z3dZYP8k%t8kVicY8zkt@uWQdc3tq?U!(KbM?@-QMr6YS(un3qkb6X(4aaf&pZ#u6+ zx{=OoZ$l`;Wkh7lW89y8F{l!Ad=mAEyNxU7xTVu$X zj*sZJH4qwOpTZ#AT@+83%7%nC9CgFv_OaO}Ushh5d5r8Kpr!VeShjus%|u>4fG2^faAP{*6enqpP1Sj|RD<=zS-HVU+BN%e!iecqtz zOzH?=}ELfQA; zqL_*EOuyo7fmgWCxym4r7H**%&O)hH)t4D&1p5`=frht^@vcron-ffbzFea>y4()( z5nb|~*Rn+>ykVjfzC3A9lk9>*0R}Dh8Dv*x=ZI2wR(6XBL=Dv@$=gfjO;o|=c(O9AMGF}8{iWFk z6Z^%M*4u-TrVEV%p*P@9R;~8hQC~ZJC^F5A-+b_n)xvQ$7-iYlj`gB_Img?`Ug5k` zQept>`d0LHq$K9&UNR)Vul7>!%{MW|!ihyJikRQJva1-Jhx-@$=dKUUu)5n8#aqtWS*V#s+wM&v>^%cdw-@g0{T!cV>4`Q*f0t zhc-JWlcVFCzH>7>Tm<<+nquc}jZ6_Itn7!Weu8Cd$b5}6sw?rxP0^5j#Z$p38R9*T zQx(uBcHz7ro?=GE5~Z9G`q~DgzpFb~}q3lLOp53xta%XB#*5-=h+8D6}&$sJR zB!k#Sg%N69-bG^vgVp1*P6E06b};q`e77tj5WkjR1CXmC;qN{J@{#=@2|^8@R8LfT zPsB``)@_c)GVq5{lmO?+{<{xUM|G|PPj=IR_2?$I1zl}9Jhy!#2kV;M<=0{r$XsxD zrtu(zE)346t7`ux+JgI}-df69skS%wL`2vNSl=O^V;0}8)kV?=Kg#7RKP&0f z20unEK0uTIdbHQ*eJqt^5pKu%w&z^6M9b+bFEXp6Qf}>3#UV5ScwkQmLNK8>0EZYKMzEXGz*67?SxiCF7L6?ghxSrEn!rPV8P(Gdk9 zr4^H47wJvtjdRH0CVco3*@2`)#ws59<8#4taM=tWGBC5*x$C|Cmg|{w{@Y$8DQ6^* ze{~%(R#-49Hb{5WC(Bq?Ic2f%?fEANp-pU~Sre(#{KR9PA*bGVLVGmM>aj%gt}7YzaL677t7$4d747kFn`F$v7Bc=5E*GP%o-gm70{d&t{p)s}#s=%1WNv@>N zADL~W?^R}zAMa9f98qR&uRhYnE_`o$vW%R=Yxw=T+YB)C(&zSttQ3MW`aw0>0tN4< z%a+&tvx6$b`oe^1fcVxesvm;o_uO5YbDY6ob*K-*{X<6Y z-}7SydO?{XY|DvBR*U|RdM)1L9P~2VY(mi7jhW+`*Xam_gX!_!lHIQ$1dLUUS2yof z1B1aPTlH@ra~?KUGrn&ORH|8{&0(9CcaE^Zx`2(#T4Tbi}BfU}W3 zFPPySX9-W>8~tQPg@|3Mn|~URKmC!GlA+fK6*D-%pR0VNa;0%YF~&2y6&tp&ep?%g zzS+#1o|93$Uwv40vUd8A5X{j^E8yK7A{%;~QG|VU^VXQ`XcsOV5uzL=RLB!+_Ue7g zt`q9CuQZ^}&j7ok;SCu|({0dA`@+6W*Y-&l|M^q4rQ%dYs)U&Gv%$(qS_CG zU-d$T*f5Q44Ht&ZBM<#IIWL(AbRNAWGru~8hse?J-2J{$y9CTUu2j%>N5z#+)z^n} zsTLLL2B$wYG=%@jIuH(Wx;)Cxf5?BfZ&dAu`NKvxxp8)aXGW%fS=|aCcryTcPLGKDiqPB$|dDoP}AT+bzu-i^@-2 z?U{wcW)Wm+dj_5%^Mi{9PdK9iMdq~r6dNHt3(L7L%f>5w zGSI66yH>W9(%~0`G=)jWsJb{=7p4Or@yw8qIWQ6b7jikXK467-xfN zGDj_ij=c_lu_5*PK0x0bCHp61Aib7CP^v*0WkrKSzOYhq*c+6Uhs}gE&>mv1PitWsuB~tAJn_oFK^{#od2nzdpps_|IRmYjx z%JJYL^Dryujj0r!K3~*tOiM$|^>loA4esA8x66 z3z~yYA!ZMk`cGY+es%{YmLef&bdH@oXQn|)PO92`#|$aT1Gzx9v4MpfaI66j>1M|GpzRGkNo#v@175jk(2>ct>4)AM=oryiJqwmJZTn|3*=2# z+B#D*5Qew{jj!(?=>)hYq`@jtYt3Yb1~TxKXO#f|AB>r{7AU(@*LTa==A*z?P?bbx zS8;Tl0ExWuxjqmy!odB~-ar72W-J}bq7m7LH4s7L*AdIJyJu%|Op7Ti-JO{!x6J8{DlQ(#|iK%S9)3v}9w4i7$Uk1I^F- z?bXFP&@cSdQn8onFG+qN^1gXx6-5T1(k*UECL>ES6Dn{HHK^Z)%WPA`*QzN@I@Zy+Ab9hHVd&jk4s+{G=iFMJ(2kh5N?i5R3H z=zWDO#S(_T_w87qSsI|iCtb5)e*T)M5zBG0;^AH>gRGCvvb3*rql_=)r`W{P0m`sA z{vB2o9y!UPG0xSekp*SS&nj_|DqBEH4RbdI8GjOaklcUN#IoGw(27XVE5dqy01+B6P`i;5DUz`iBjr`~uyR*Ut>W z#$Ji(WZC=%k&=5NTfO<05`e0sq29yzbvZ8fktAVVfW9S8Z4=`nd}Z0_AJ|;T^2QNq zuSaAlXYSLP#GP0#1F5wN>1@g`SuxZs!4>d8u53M2uV{@cO_qUcHGxz>ICTOH9$X2o zS-@(7AS(k#Z^P$U`&XW__RWyPeu-3U*{I3W;&$<8V)bRe&u1zcZF^iJvDoI+3f^-J znXto1;E)--asK{eL-ata%+o^5A^3@$m7OzMHL`buyEW$P)vQy)-3ZiZdGpY0D3LZb zF|kn1GIV^wG$e0&WKNH4tT(s z7;k(a6FKZo>oCVFCw9t@=UOs2u*Gvxg+hIk!eDPnXamL{&m@ti1_{3*nmM~w)}brlfd&8&bhn55-1M=#k zi}<>ux#EMNs5I+Qag<4e6&K1B@>CWIJhRboFLu0gguo`8ZW8S)6`tvnZz`~*)u_+A zzd@G0e$B<>9pu8a!akDTrBS6 zi^l3FyvlI!+sOBk=ZE3G{t`#Gsa|v(i;ytCC&^o2r%g=|=SK@5bQ(TSG%I&yO=N&N z^UJ}n*muW`U{CQ5AN)GX@ByWCul!Z#&x!tSS8`8&7J!W zb;-X6ui_1v9tJ9U#N%MLdZrx;+v~)eEv{v*6z)br|4_AA$5#^VB_^;pIBer+H)7Fl zERQmjSJkHj_Q6Kh8Y`snCW|%8&m;XcAq_rv9MSyykk)&S%mp+niA6`0mA@-E z4Q;;F8IOhBeIt)kp?Ic!dv_vBG$(O@{MVV5o>4+8`JC;;tB%EpFN?B+V6D<=w{d|c zyR~RKx}t*}MUzq6-mFIQcuFx9(!{RMG#c{uhGYY}! zoh9D4?YWf`$`;ztu=Y2#t(F?-W17R=rdsmZeNDWVL-2bd#kr@GBA=rdGda2M@M$Qx zr6>Hg%a5V6_(iUd+qt^KAOcOT6EH=~_9M8zqlLU08ak0F~dEG|aiVKlJ|7^Qx)W`8iu zQ{$pfjrtbu-gR2kFr?fp3j2sx5p5YGu*@d@<~_QoZqTMF_Z}$3 zL|5fia_kH8`&x^>Lzzl$VTpn_Wq|&gUz(tT{{7Z-Cq8+ug1)R5IAGXl=4XLdgvL5G zH&kdn_M-aT9ILaQdrZ(2s6tWO%R5tPN~r0Vy{#`s@4%a?v1%5H91R~R6K3lo!wnf}*bApU7v zmICyu(*&e|F*9g>@E~jsG78(c&+gq>H!37O);OGmay|;G;!~>v@Oo@8Bx0ju=U1ve z@8jzA?x2&_maY_%&XsO}ZOH{HjMc~&TC?5n-s(j0fKw}_D<48ULH+&$k*Imh>J&fD zSq3GUIHR!x{g$yG!(bcB`SuFq>oL^%-}_e9E;v=dD9ztgeOH|m2~-9pkNu8SQvBB2 zSV|ND=e7Mgnx^pdIoql{-{w%#a+X1RR@&^*yBCZJbY;&8cr z!3CWmzQ#LPd|Z#h9+oeU5Paz3e#Dg?3%ta~o~N&pq?A`aUwL=^zc zs2+A2AguJwxxBdYy3<0<`zzME-(58n4yE$WMiTb!bD5YsTPam#(d`$1&UDlaeY9Yw zf69?B5X%Z$-hHx`XPVL7-)k>CM)M>;;Rl`u_`k)+s_pH}3T1G`0;pSAx5wEx$fIVD z_$%&qa7f1c|51{b2OQ11D0z|dT`!GaJEl*8uFC`W*hWcT<=lQ>-pAeH9Lnl-(eo!` zhwjljcnqR>IodV|RrzGY$Q`9K&rYRWC@m`P5SCgyk$#&ff6Em1)EH^wDb&fwUr2qOKL*U7elVxHv3eCW>k6Wv%lqn&1|}AuSL;MV>IA9 z3!t!>DRy_1f5#lB)b{{-0WQBj$@kr}Nz_2`3WfyS0^M`EgZ@~CBa&`Es$H0^-fJHbSGn%olQmVAKyN9>&xyZ5 z`cw_At~K+=M)pqeT?xu7v&F~4LS4Hw*^^xczfM;OYyym-vI|59#M#Nm_nppNwwkDq z;duGv5CM_iLgHWpJjW>O_D5mt?q2~*=v_kHeOyBD6h2f|r`QU{GX#itrv`nK(gD%P zqGRY7v(Xxd=L=JywE3okXM)jN^^7^E+a`W!zCh4bI`zJIK~pBEV(}#T6eXDW0BG|9 z-`XpJ3$do;$2Q+}Q}+(job0FIA#=>=@mqb|TgE5X*0%akkY!^$42S>rVyz)rS9F0J z;1pUCtvA(za;Z|`bsv!XZ+q!atX3WQEfNC7}x021lSW*JP z31_Q-sZ-Ir3q~&Wk^ySt4m<90ROrSj1(nXqw+B`T#INJTlY#28Xiwemls*jF9=kw) zPUJPBoyVpBb5oMwwb;SW$VsDjJ=*s_6LGLH^b8{QESA#6%G8mjo$zd-g4=)M`JqX&THx+ zb3_hJAd^SXXUQWpIg?H8dJFxs@!NJ_-;(pXM--~lGkZ9B%<;Y#<$*`0*ykHhQcj*+ z@749Ic|(yx{8HoA+#}TIj@yp8-3cMPKaxYWpN?q;POt- z^4rgi=&rC}7rTw6lK|g>*|O9g%%*fr16LJk=tKU_JCHQs54l^b$yceK_(j6m0Y_C5 zlvT9hO+`dAr;w5CXe0vED9#x{M}5;l>e@a|n*+0CfxG&RAnT0Fek^#^K)03i{iPuw z6TVa-4UO5uE5AP>Y-p#c0)G)l5d>+#Dt8j0lq9W2W)ybVE7{MH+N?R~$UH?T*s^gL z@mw2Gi^!F#G}FzN1SXv=VOkfQs!K&SZQMnO^_BCD$vV2;w3dji5j*VJXgz@?Mu#8g z_DAj9L!cJ8GEZl%!;o>XdIh@-xTg z$zJt_LTERseIYr*a96j=p1sQOhLFr|Z~Z zx55m9)n*(DbdFc{Ut9IYuQ`cq*Y23?(Hz-8VElQ&XA37%fVS zfC(ao=ayq@NKhl=_}g9oA>)5BtznWTbTILpQ)zAg2Wq7;#ly2m;p7^T`#&ry4JWMq zDH#V!YyY(2zY$s3T_PupdHqF_xl8wdlQRA$DSQ5K{y(Jb5DDxlb}&cX@&9j<^4}!J zHm&CWgmM27zJrP2Ck^=d^Jf$c4?Rg?zT9QP_#>wjp`aC4)yyJ#QAlvC%t`IAuSUDraBQ)XH(Pekca=XElvI$H$)-9H*NkzKXGwU@>mx z(6tY0^~WM-4pCXkIz&E9dT)pn`U(GFszRW#%DBIBb;9Gr6bx{4J`|=ErprA$o(q+T zW%Nv5K2sG@GF37Boveq4yF6bi9apCJy>C!`vKn)q5X_|XSJfr)H2xxZ;gONr7IS1e zmHw2h1SIN=$~?8^LSC#n@f6~+j(Qv*nNp~(fg6+nKS%QP>{)v4CjF)BJ0<1-(R;LS zzgh9$E5N1_)|Bca^#bzgtjbQ1hte8+6X^Jq)0UCQR3 z)Vx|;XN{${K*y}_SH5!#?PE-Fx~W}7BvlXx2bWsG6a>$QIHS{35eGqp$1 z-bghT4K~p*c)E0^*nYp4-p_w2lH*vK-9g8@eZW?mWM(!kXKmU`TDsKkVY5m3>Z?b< zi7YWT1^2pNE{RB?mhMP@Y1u86xO^6KJ!03WOorDUR87YkHSmvP&n~7#=wF`jOx585 zupBOTd@#XCo_kLP@xa;EAMgtly<|B39o*~{LRPujl`((9l5a`LOjAdXmTQe9Ee#O% zJe5MXX7lY#8zWzsY|}*!u^B#AMRKd7!L=J(Ipp&FLMIT}^!BT+goJHA#$j-DjceKR zjgoDiB0J~TsKvS++*-wwsbnSQd2MTY<%}ZmUgvCZFkTK*kZIxF&YlWj+WxHOIPdh< zrZ%K-HLT5>(;^h(k3ZGG0Z8rxY8PldC0>Ud>5H(E(0U)Qd zI^~hxC3^41mxT{sa?){8uRtxCEI|iN#*IPLLFfBM!r4iO-fFL4>PiE_M?&0xglrJyBmMZCSZwx;hT)(_$Bto&!PJ~JU?vHeSI8ifq>>f1~ zpO;J@`MxZ_9O!tbFH1D}@SYl+yqvhhTD~t(Cgo!?IS@_cz5W!0!@jC>x8XSFtM`&T zA0Lgl`r+6>w?sz=$=iPX;WRbvH1lwyjx&ylU5po4$&=eJajys%T~SeCQFU4MOj7zI z2N-o<3^^+ED3waX_#Cn5>1d>FUxq_D;!3(>2r1{HY%bSMGniBI6litqJJJbzk-B{6 zajIwgaN@OMe?KoaZmA03D!sU^Q`Jd|wzQBYEu%1vQQFHS%NO;Ei3q-DhUfhIQX4Y; zt9h`+LD|sg`kKh9LBU7HEQ5x_Z_~Gs6;;fA6^{{mbX#iJ2XMVW%9&qa-I4R7ZH@_) zCuNMOOw&W6L)>m7^V@qse#;+xf3GFt`gjxf5uzJvD<=wy5j-v)E0!AxvW!nNlM&hfyDT1_PF z{%j%won?gl6W;`8F&H5%MHBLO$S>x0Fau1B9-ZrW)F)FFk!J?M3t~v_T{`^+gr-HG z4U>T6`<@O6X|RpisrY*dO_f#$ov*eXsMwu~ab628uyH18;C zfE;qf3CEVP?!t3N1(lfNPl^zaZMBaET0MoKqdl^w>I=G!Pje@WWb#>qTK15b5YM`0 zs^z*x`57JQ#>&7a4#Jc~S^OWbSS}Bwh$!Ii&8PPgb}|M~y2Oac^AxPh_`a94#2lF< zP%kPe_*54Kl^55$OqplwN%v{RaZhQrE`1)hI=eaqEOSGc^D3HrK~Oz)55+zyt|!S4 zT47JKtnVO-Zn|WpU7u`AS7N+Z(4&y@p-Fj;EKX32GxdFq*5%WdKwaUc5X@5(o~b>d zwgp0#S}8LmBN6ddQn_@F>W8CsUF}j8i=gg6z{Aa{GVDZ48STMKkwStVndxo%ZV<*J zzVK|hd|a9C_lYH!pM<&4-|K8dS^90(xM}h6W~MprCQmpV_PPlcbo6%o(BD1XTO9+9 zC4SdRWup#F{RMRv^_7P@>;gUx#;`v;Zg5t2#PUL=lIv!bo_M|%3>3C>7OTS3}Zp^C`Q^43&1 zLXFEUTyZJJDZqYy*~!^P?7_dJhFhZiL2*}i?d9#pPBKY7WP7jG@z>VnbebyU$gTB{ zwZ&al`uEdP`v&_7sr$g5o8un zcHE9R=BUrBd98Xfc<~AP$kbS)?C5j0zrTHi_`4LBP6MIJ31hVU*|@V`rEYC-v&#c$ zW!*$VNvgJjOR?ujU1)z2X=U4h?nE2xlej@#@q_iGFH9V%yP80s*&aKi-(%E9^}UIr zb2RqyXCEXL-J(S+qCef$OjF{|YcgkMst}8Oq&FDL#$Gai6!2II(RMIvTQ`%tL}5Gb zSy`lfUej5m@dz=BRXMu#D^3*HM;Oii9mu#P(|Z_YerHZ)qkE`SRH^46MY_`_iAtAUV1CcGS zYFRA(OW+~{k5oxeubB6kj(u?*ul@A|Cksy@uiW4V(0p@1!ZhfTE)ykH=f&Q=_}`mD2dzAaxom`<3+4I&SOow%v> zZiw`x*YNyPb@yHu82)_&7L{n`4aA2s@X*7rvA^PGSF|Rg03F4{y9@Wc+IPo2^2YCO z=d%uzaB>x7T800xl^QfHPeo|BJ3>L1S_esV-;6h7Pk57g9dy4R(h4ZcQd#hH__hoL zw~{xlz)1a#7NEEpb8vg;H)U%nDkN#ZRUzIpvUOG_Lv2>Nu4tBHFT+8X$!QvCVk1^O z?j_bkXF928kXZZUd_zv;(@C;t@Qi`yieIJC^eCce%Ddp4Qnc(W=d}r3m?7D)Vqsy> z(x$R7`ef5NX8!HJ>CM>m?G#=l-pt<;yf=Qb*XHDJeS zipbl9gO$$_+wND1o%>-&l-M>noL(KK(`KNzsUw%yPGvwAew5A>V1%M}?e8N_T?0#0 zZQTXUw}e*|v5gY|uvs#VAkv@Qe@xHKR2k*-r|Ye0=^VL4M#`9)rGLCcG%YYA>unU{ z`Sh4dLmfK1!6;c@N#C#3>DW6C&)E-7B~c=Fv-5UY#Kj*+3U?W3JGhT2ACa;604C&# zo&`nQutZiCeq`3orOpq0u_OA>n1p$+WuA)vP2^JWhm$erXgcJkGOKF%*b*S}ud^wv z*b^5)Zz`gfdu59W)2y-Kt1uN;+EVqNuPT;rub3sGROh@u2uVBhz7cG*1v(u6`a(}= z_!TtGbI`>8?9TP0*!e@Gxn`{nHAU?!Y~-vMIz;;_Xy7MqQsej~sWs$+2pu7Q($9=p9|k(h`cSx;~&S$3wxL zcF~(Z;N@{TRu6M(fJMrc`z4M;DWlfMOzA~Mhgr@bspj(@5+sbUhpi1bDV;LUJ}VsF z$G+#>;_*X?jHXic1uuu;@N+&VnAyOaQuteg=o}3G=atEWOu0PYkXf@!M8)}G%dUrc z@AV{kvJM)6nkc*tpq_zG8$2Z4#h4#g5S&nv$f&{{A_`xeEKj4~y!M5Nd(Nt8L2-?y zHLu+$BzdEINV}rq6v;v%b?gC$chM?dL3Y1rX!z0on8hdp665!AohaYK@r7(LQW79+ zOqhH{3)L6UfoA*eq%Rguh_Bp=&b^(Xz}CFrLunf`{FozTzGaX-A`Y+(CVHs&N0(p! z)#V01BX{K3BeR9M;$F#IL*s%wnR0y?yXAb z4t^s6NZRj)IucxLQd;P%^uH86(g+A=FOPo~E%_bV`6kK}<%Kj#x7>Pfq%t9{`>AJ^ zgK~Ko|0vi$KWFQ1r(f4mS{2F@x(hF)fcMUQF~GJaa>FZ&hixTfr^Ov>U@Rzb@CP87SkZov*Y4c5TLkg}@|SRkwM@=1 zU3%Ob6k_w@CW*sF@%sy*QY8LNe;LaOC<|rEO_d^6t4pVyef75X-eruK?0G`k*5hpd z+ORM!v_mMEn0@WHZ}rw|ChuG0Rrq#3%Q3wN81Cd?`U2ndx{%&Clo@??P+ma*3ZwH$ zc%mQ7=ObLZ@a%>wzQ4~Ky0=WmQD0`^?QX5EZJfc%zIT0DsJp@0i<ZSR6d9P!LejaNM0rf5M%Y{3#nVAeFZ% zLGy*H_0emKY&qnvMJ>G&wn#?`mCS#Y17@8Qa+S25s|X4Z(m7cT0oqw?ar}mSnr9FY zA$d}IGb7>Cda<|A{Z*RMk}|Ee@1ZrF3Dg+N0<`I#* z-))-6=)%4oQ4xyC%)f9gwhxzuJJ)(R=g9a;BfZ@Ow*x%uMg+Q}RLh_HQX{ZQ3SR6( zOtcRY9Yv~w^MCuTkq%8)N7gmj)nCGP)hCx}85-^D&_W7`-*p!Kan2VQcJ$;8iH-~Q zE}4yQ@qGPA8HwjJTDFq6fIWe$-N2Q9AtzgJa&l?GpMszn>N2oHlp`uU)Q7q`NA6$3 zl(S{3%07-4ALjY#n5UmX;Py-I=I@u#-u04zDh)*KN7qE6lDHUBKP#4t$tuwOU}qf4{Pe~U9tE9G=e6=My(cMIYBfnN|0sw=uGpWB zTHH$kMvs?Hb7*5LnS6vpU<;}g!k;SBZS$Ip^JSg=;S>m_Als!t?N~*Cq+oYmtxEe)0gNwD=;9{p;Vqc3+9+_$EI;LEm|!jbl}K$kf%h9PoV_sQL0*6ujJ(9 zghqZhhoe3Gmm7bJ0 z_56TFQ`MQBZutue58Ue5yoQb&xppxIL%M;AF9>m@V_hRdvA)*KTrpfmEiCwA%=_Ym z;O!7$unZVjwy5%(EaJ6PUq4#0nKz^!K_3xq?ySlzQBv>fkp2zTtxj?hV(gKN@oL+V zPq7E;Z zy<4%eD~!y?MYQQq`vV!;J^5EC_{*0D9UFKhCcO(3%gJz_WkxSr3J1VlxACaUHoM)) z9;i-m{_wIX=Y4u=)A{Hi-w){NJ=%IXFQroo4OIu*?x3OHcY*J0ht-=eSb^Kt{f%F{ z{wYz|J)pa?E1_H4d2cQxtpvFCxPb-sJ90duY7X*9yMu3=5s<|wjE3_q$0f)I;>XS@ zz9sCDF~4M4pqK@|QML}5wl0~(1f~xz8m?o_*4z<<9WJPJ==B*~p=941A0wb=eJS>D zF4*L>q<7FE~l+;ymje&uIM-_k*y-dT6+JJGs{5<6POI z=ZM|=FXs^^4k)1UyjCf1=YRMnfTsHzE~&?SUBb6AQiUQ{ies)pl+L1XXh8S6@8nyt zcPgO|jwX;;D7cP!6S$MMUKB()BNVG0qklrFZ4{h-7-cU2Qa}I^@6k|E#nQ%`6SH&h zz*qh33Z`FMn}cb`KonTWZfkvlU>~|fXA-~w3}31XCLjNKH~)f>0?LhfcP=ta2(3#r zC_DYms_jLzF8auR$TgPb8*#caKyD+cwMfN7T^6bv`M~KzhloKf6GLsflNRka8DZfIhW4U=1NfQWjMr2 z%DY{$L_MJBdPTysKuW=%>&iqAe3~!ugBsaPk4OwdVs|Ia81?MZUEZOlmHeP_%7RWG z<|{5Cp&Ck)D>M)Fdf7VQ{`x`vgFp%|b-KmOzBMR_NFm{ zp2@Fl3c;#U@@%^U&;VB zy^5zu>aXNFJ5H7cFo;F#k+0g>FR9KkC3G|LZREO1y$g-Dr zFJ7({8L^Q7itWQ5xd(Z9P83@md0Bo$6ugol7hQq6I#D-8po8H< zg9wDV>%1}bpRPr6z=zW5$c)d7JbmA657>~Y5k~o7kF}>0Un~fz-aJk}-Ey>pka(`` zO4wX7Ms`NBAvIDKUYJlwiE?d~&X$HqJ}k6>pCQ+sS) z3kS_b9P!<21$$ohjJWj50FJm%N{=|g2{pYj@I7J*=N|}^61!E|pQwZG?M+Z9`%&jc zWGSIa@GB(vN6<4lK>1#6?UwN=mb7S_EGMASk*qga7|&c!Kg`N7LG?-b7xu&)r}YQ2 zx+Y2V8(|Ap^loi)4nU){>R)0V_9A`NX}pg}MXfy<4zI7mo5pgOEc8NPC$d zy~%rGKee>U7d&~$E>TqUkoTJs$j$PjfTMdpc_SID5AF?w0_q*avs z@xuf5Ud&er8Kst5P*aG6{AC4y>(61q+qbu1gVt*VeyVM{jB>f7dJL)_sq!8jG zaLP1S9%{UXb0T^r-+q-=vl$a_Wz)mkINjI%ER|**-7zR?8xv+db16}AzI~hi_)!b%F2jz8 zG%@+cN;4z*0<3k;35l3|lPwe$<*!sP-n*Iv49Y~kf)lk$TeR6|)2xK)mH%v`xhg8v z2`B^(4aNwiN~ZX8c+-+W4H%OPQO`C>GGtM`s9nfS!hGe1LGk){vW)!L7>UYWq<rPVHVI3E0&K9y3}UjVhk~ zBvCT=45Qu+TS#OddstUX2-Kf5U&4C=BG(S$9R9fIjxj^Tsc8c^g|2r%qbo(%Wo)xm zF)~&~_f-yjIb_&ZFKEnW(~BXHo0LQtb-!2liq)|xg(hLI2!b(E5nZus#18xct#8DW zvF+Ok$p|JesrEt2BJ%EmpkNY83n(07x@mMX&KNXW4{mzh;}qk-SjWoBLtlfngbfgd zuS>Pm1Ml~^$K^jJHavJ@y=vvLtyf#o%&4)-LKGzB3dB=A1XjUnPS$&Ko`ozB#sI2> zNK5+LUPR-r_96}$o}=@|jgRxCP8$R6OSg+Gt-EA#1QZQpkN&qbZy`Cpd5gQ2(K)RhVkQ#xV~^6b z$FQ_;MhB=wQX%wu;FgHB02KB!5;e?P5fCF?x52@9CMcCJ9{^`QVUfb6T(`v{x-rcw zetu`l+_4b=Mmun5OJCe8A?Fvw5#EZLLT&jZJ8Jhxk`m0`V0zgf8&#hWaeSeO6~^~^ z3(ic#Ea*!Ac8UsS>+>cBszp&=2`ZZJiGm`^pun&_Kk*bUb@=LnjE%nbfFfZ%+smG) z7kh&}tW8t1(TO?3HQrndcE}=Ak8Yf?%2`TvSx`bXAF}>Jr4j=gUZ-nKZ$0p0CdnP@ zRCnzoOqYNsrqX?EE2$7hShr=lNa<9YUIiwV}xF=sO(#bPJ3Z5jZwux1Gp083?S?#;{r%+zl?6eFqp4@~LryK#ud{(7re~Iv2wT`a}wv0R?4z zJy3=j2g6yfc5}r^Lm_jUcfZZ&iWQYjzc|d$PiG+PNFHAe_d~fOzz>*pp5eY~b$Ix0 z0KsU3v08+nkvrU5d2|6v(v*2%#I>bS`_&%`W^s|nKVWx0;5ZgK1XV5+zrQYg@!v&H zu3WXmP@|Bvk+h|r_aX?Wp0=^})U+Sqfe$?xt%bJ_PEWHI%r0>p1NCD)IZW1_;Mdq} zkJ*c=2cI#{=8CBD@wWWo z+f9xS0XBAzqTK`KthPD=@1k7jt%-SIq~{;HyO~S}i5}EEm1L0ojR-Y4KbmY&4(;A% zRiU6d)_)MEs>&=oHSQ`rO-u_UVsHa!*@UH50Wy|^>d&s?B7O-kga1Q}2uhF?Ed)Z7 zU?MvxZtht35ov`SUJ1}~jCcg0G0aYTXd3l(@mtutX5|$nC`$XKx+g+sj5?#hIVa^L zmu>7DIqI1qj`-n8>E#UTt{WhIKQU^M(gU|6ODxwJUYRB1j2Fwcf9bT6QXsZ=(7AaG z5P92)7Di45Cj;c$aZ^J8DnCqs>*OwKA|K?pfLQIUzW~$MZ3nsGEDC6T`Vc5E$lzT_ zp)y7p%JX*t3tljXkUVk;7~Ef(-5R9X8kP_yCA-^9=b$#7-kIw(UnI9Ye@Pd*L>ivh zpMqTPEB)BePsiiONUdLU$@8aQLQGG$_q8Jp$l-p}d>6F=N5YoTblhDkyB=JFzs_1p zN7U1o7Wu={_fw}_-A^HT;YT$GvOwaR;b_*4=0~QGLhnUMmv=k{;Tg(%L3XtUSy+S< zs;(_rZ3cuYl~~u`jKE#2^N){kmNYDzdSohI9F-fh((U8KTpj-SkxmiZ_J|WOh*zPo z1l>F_{N?jm;u~`SB>q;77^rZTjjd^&&7_3QS!P^AORBQSZFcA0r-9eb8*ZQuyj!7+J>XeE3B0*EY2K-#FlCw^*^2G1ePInWEj z!`5s1Dm{rg2N&i`-Ie-IYT!W6pOYRyH(Wik`>aUM@4GMuIJ7O1;gN^!vyBy+kenHW zjq@gOKX#Y}1573e#igWX3&szXkrx;fkH>Y>c@Fj@*AOiG{Qb@Kd?H6C0$B>>J9j+d zuSOo!w~QMR9VPX^uZo{I2E6b`vcVAgvMejh?>6L}y`b|Qht%boQR>xdD(#1@@~W!i z=gHM~Gx40&&S~zvuGAY7KORCfF}D{XyT0CY`w1lqe*kKkHh$mm36K4kE@~U(Hxv*1M-l zolBm8gRyYi?r=z3rqIDlR{Bq#m8R7MA5a)#%2|Hcvd1^4e(9W5Ybe<2w1^I@^L7hj z{oth)BAOtSf|7>>flHpnH>!DZ>pJIb_>Q!4j^KaSbYfE|Uq=RGKn$kMDD9%n&_f)$ zP}JHFC-H`?mM!3$pLFK`F0N9XQ%eiV+fV5N6oyL756pLs;N6B8yuFKNvdSbZ2L-GS zk=++R!2y|q9F!9(1WyeBP`L`0(rqRX^K6F?Q<3fVzGH@zS@@FdgbJ>(AcLJpCE7 zTSipW+MiEahI*L6E?3z|*D0L1=V05W-RX);eff@%nw9DBzwHT|@E&QNBe|szK3}^= z-NJ(2{2KzG#p{N%@{~NNVozxRV-gkyV&DMQ!WZt-2L>e#LM*XoMdJO1WfBYlA<`x`sp|f7`YH%lwS|bsLGc$hiw@-; z#2??e<}-eAd<5b4+s&DBewY&Aw8Kk?{B;4)Y|l&tp|tW7d4Dxp{`;qYsRCwF5`p$m z@<=se{@*?S@0|C3i=^lwr{PW&XUL?GNvFxL#5e=e{R`R!rn|KrLB++~`u)QvG#n{i zU9yAysI8AHGK0}%R9SAgd3pF*$H&KBL+PUIe+Wu;(7z)) zHqnL@>aZOOH6Fx2qp1gr$9^ay;shbNpuGc3R}S;+b=Iufu}PCIk-ZPotTTs3>8_nS z@vc1c(?a^5Mhcio>yD-Bn%0VtFvFWdq;XeEWYTUdAH)rd*3uFb;;@5?X@@aOvlzQQ z>nv3c{>a;3%8`IU$x&kMT3XN9GVrA*V z#hI|CelmSc0aO6RwcXE2@WgpaW8AII+%J`jJ8uN$=+?gHtm1De8x34J$;KVVtxS#j zQlS}5W$;Nc$7tNrH&x>}v}GbTaHV&3;hprooGvzMYuer2GLK(osX)o+Yp!?`qI}Yu&a{;%RxQYyKeAeDic+RaJ7bMV9npq(PZtl(pKV@c zHz!EuN-2omgSz7LH@%oxjimDSC%9rIK2lo$3H!CPCHpG3RUoOk2se) zJ)52_n}!@5MR?2!r>fUFuj{iZY$@NQn$D%2@xH_vNolQ1dYsfyP}bXrUM&E}g8j@7 zrsvyk3{Q(z%O}N zDSo9lZ&lG_#EzEYJ2mv#d?i>aw%P*+k1ttz6v&$GPkYE&@^lcgX1a7%lh&WSfXfvv zP1#^~WX0*WPswUI?RCgjBqhffMQv>)g27{d6cT!8YOH!BZJ-G8vQ|hzNzAnDJcL;_ z$mr6u2?{Bk7m?y0jCIw})|)m!Z))nx8c94()Fj`I~>>JwTySWs*!vTdbp| zYol@CY$)KY^E{(dW4{~mTBK{wP2+*!T)pFoLx{*Oy=F-U<>3X`ax+m=fc_eyWn64Z zcQwZS9?9&EOeD2E9rk;yW%=g7P3~3Q%vN6goW5C#h#p zGzA89k?2!d0^x?f1IwO`KAF{KD^M^WoZq6?x-OCqal3TXmnMPKGpVrf#RwTM21hBY z?VUli5wa6a*0>?kxx3;1eCxHg&jbV&$sfvk_a}3xzJ9$9Kb%MU6Kcj8?t(41p z;bO%jAKbbqMTAF@;_(Uib+KaU&(a7R?Fh!w;Wk2C$`GZZa z_Up@*6)5+fkW#4T8bAOE6Pk85?0r*Xdg43ZsHQTVCoSZm2hY^!bS4r^l`%4Qh@?Q_ z{-Us$RQvN-!QSAGGtHnG(RaaXpcVv?2@a$^Ql8I>6^@mysT04$;9mbrEG|5=!0>#% zv)1#?!#&X$2r7c!wYh3RLV3mO?}v>)tgPakHAZtfI<4!o>QBe5J6#V>iQ-hkqtW=L>Ru?le?>>0U{>#F%fC$z4v?o7S89axq38JvcBdgC4;sW z+935jWg!#6&6_xfghS&BcB!2$&PYb<`*}rGOhcQC|CLB3{RBRG*-01g9@Bxx*Zt@!rK%so;dD3(t(PN0avLPY)nCj-$9k( zH_`q(Yq@jb9&*_uAYXoE;1|bZUNJlWo1E!I<2e|nASn<)v39pXMTz5?@o0tj40?(4 z3TKbwC>#Xv`Bw4{GS~zGu%?FyG8~na>Q3Smw^G&9`i0{bxNpY56&s7YZC?{AC?>bp zjM&c>mmAkF%V)~X;dks5;$O^upyogzy>5xTnVR2120Rz6y7TX(F?r+oJEs~h_?}zpC<@-EMj~D=7fC0BT%4x}kc54w| zWSC#mjZ%+iaW9pDCWj0QRj&i- zJ256(d<0z9qojmS^P`y#XlwTA-O?bD#n|Pl3~?aCf%~mt(k8d{rxa&`HAxEQaQ5*y zO1bEFwOm$+4PGBG5cZ;084k0GgbokNv*3GT!Bvy3-|S~Zb0Faqw!s<*B;EyncBuXn zsP}@!{2QBzU*YQYD%}T)`>FG-P;jTZ)L}4F)Y?;Z_JF>M3Qb$QjKj|6jR+6}pVL!} zPSvJ?W!#KX_~9db?YAoBz0ry>6op&@4*SrY>@p>^&$L_sqHXW{qloJ=&Sf*s{iKtk%y`*?9 z{C@w4jEqd~a{%OgbaZsK)0KS+4nYcMm|3OJ8=iQ|PwJ=7JY4s*oc0}8f+-9~zx&8j zyIK2t6CC|r`Ve1VhCQ!=4W5n5N012)dAw|Qil!MYoN9iWecqs~R3}t@>DpL(74s5z ztfi-wMAN})iBgK~b0>U8iR{<{eYd5HVNcG264-QAf`8i?3m15ib5ggK`OmAR9D+t+ z$!Wu?lbKe;6&o3XID>}1h$NN&nT79`MFB9{LbfRmeEmxEtmys(9jz{bpxWAt#EbxQ-et+WfiRoBos6=+)Y!4I9cw3X_blm>4)SqEPF33sBEIG6L(wqnmXE5c< z_{M(q3s|JYm-Ko!rAZy)EJeD%Zw13?fzrqTP8SsoV)$ z;}IsVVqO(*%;U_ATy^m=c6d%(Z+c_ZnksaD^upj#x%nwAcHjue9}Iep`R{?Gt%JhD z>Dm_=!-f@j8A{9Dr6dF)ILAYy;FTgUu8P$ z`K33uOymcF@z@g*VyvnhD5%(toR?CJX47Lf7(fyKuJcBM!JgRuS4Gdtn!JF?Z(oKm z-{i}AcM^g0L*yIzXiim5-(E4<2I|JUr!D40BH$F4S>0g}JGN7h;VdwQ1~#E4lKg(L zCnRK1O;QaG++PQ)_Y3U-XeKMXL6^%>fhK1bsm_}z%BP@$f@v%{&k$9NOu!w1!m zrrwfI?f|0enza4ONs~4GhIYaJh@F?3TJwP1|E|UOFTN3y_K>t)bn(hC{j#${Co9VeqAxa@UDxNbGP zoP>tSpA+FxIjNXv6sL-6Uk=0-WZ0)yC(>G3{rwg{nLzNIX+67DZ?8dRD6&h1{bLR2 zqR;?RQh&Jl%4X-wGVc&{Ontkf?^B;%3xUXR#0Br}Hf@nzZ!b>{ zAhI;I>*fHj8vCVmUBz2s4>{M>pG()l??53Cx_D-@uYrn_SI$uL3ivg)$u^x%q-v++ zt5mpj;k-Fail|?aFgM$?gHh*Tjw_&Adn`!@Dk^Un4P)O|he$qgOqWPLGI^J+C99UB zY3#S41$INJ=ni$f(r9pS5UGhMVSqgHG-yRq;{L44ZR|JQuyer%1xlO5&2rq=N#Y)L zK8GrOetTgZ#}Ye!HMTBTLM)yR7Cth$jrGGNcWy4O5x*I-H*LqCsg(lXyWvKKH105qgR}ra|;EFNw5m8fKCZe7y5uc-XG4ENjmfgf}CJ zYUMK)_p1wbC1|>^+uN4n6f@!7AR3q4x8c~dw6y7B<`hwmLczM^aF5%aC%%c_Si@tf zu{{5D1(zSaBT;d*EqQu9@ZO}7zGEF2<7T_ZQCaM52u)k9CycRbOn4wXZxC!P$T+26 ziCgFl`^4coyCzFhRcBGJ^C=_3PJv1xS81Hizfnf`L(=N=1%03`)wL-MEbixg>}HjwGv;mD?Jpwu0Uol|qFxkEc{-mn2Os z=97z$6;qSA#-1QQC1sXWV0ouPzrs(@dOVT8XvFXd^zQs&*O!v1?*8a$EciXe8TAHX za=g}SJrg+_#|(@4nJxKY+|7M|nK&8vm4raWndjkvoq0I?pTU^3FUVLCE#6WZPQRg3 zli6h_C5>hY9<28h@?HHv37<(>IG%<=h_h6P_Z&J8UupJuQw?t-=blmfwnnK-h@)1jE@27-yhTco% z#es&loIE>~A{v)0G3$q$#{R^GeM+M}?KwZXrcDiMbj%W&W{VmonW@~2f{V8Ux`S0D zV$i%g!EH}Hu{gX*?wx_}fe7(GWSE+3s*Kz}XKTw_0p6*}a70wCA`;iA9`UIh8iy2*8 zl_fVZG_T*~WJ-eBSaRO$3A=IFWUmxZbTb6=e$O-LbA@rNoS;w53f$ZqK9* zYijXoo#tP;eTbU3ByhsiLjgn{mXG^sLXb(ki zsN0H{h`E>7`1W4XjQ@LE15oB(!2myR`MnDJKUZ~ozp7hC>vH4&-Shv>A(Z`BAM7OI zyr-sEn^pxCvms72Ig-LpR_u3kk72<)2+uo&k!8RAfOx6DXH#o%O(P&94f$tZ8e_hP z(1_R#xxsNIgoDnxEhu8q{B(q8(|zs1TlUQb*TLNAM3BM)>C~CT#7U-xM#^&tJ0%Iyi`|p82dq+c`D$CWKl_y9 zRj-*8rb*578{$o+0=?+9ej|UTBgB-ufFnlU7;C?~!F_$&jM9)gd!4^bcYodESevYS z9dEt6W1Gdoy$o&Zv_DVxTjfbRTt(r8^AiO>G^a=2!f_>rUmo0u>INO|6>k@2(?o-O&5@E>b?dv*E{FdyYaJ5+6)Hj! zYiRKyEF|TR3`F~YdB;iv!KiB09!|$OZR4-|0I%^5_Qv4j!)!@*b@!R#wur=v0&RxW zk_x|^=Jr}M73#+bX{hTDv-n?s#{@9Nn%T|<-UWlV2UcBctZ=*ax+=xUb{0kRD31q# z+wy3rPzmT+h4rChkEiJL@$TKm6oruy{o=%lo5#e#qGoSY2E|k4BR6OJ5icG%6~p*-JdFdgh-$KU$q~ zJA3+~_Ai(JYisK;5KXBI8ay6Mznq^0O~p_@@1Fd|u}%^hKcVR%H=Pt&D$PLs*0Ey! z;m;pOwkIpv(Xhz&4d=qD92QnWQ~!nYu}nr+-ehQ7;STp-3yZX!}`!E<#s&cDVGtweM`+A$3%= zs*e5VVD0VZ6EpI6o#zvV{UwfgP0Ll4-Iou-d@Y8v{subyQ<5bvr6%m|2$ukEXhc>e zvu0X7G{zlRfzUp=jK1WpO5<5K6RTpC{sAcJ5#iOxQ1Rc}fZ7tsDyrv4B?dr-LJEU% zfpLZaarP(-)>k6|yDil^DaPlnXu`{S<;qNnq{T$d^vX1HB*LtUN~Gw=!B5mdJLR5G3>4p}{>Yu; zuq9b(err}~|6YB9inIJ{3ko;HKy`d028*we_RmA5GMd&nj#jpOZW`0eL%kkL2&2AB-wH<1WMxdkshd4 z3_tC*Y!C1CsyqI-NvEmS*0;QbAVf!QTS`16w`Rpl7!yJU4{F@Cx002}`tagxGVbbN zz}}ytzR@~EteSNNxMo2am`^y3z8Y+p;h4`B-B-EZ8+WuhmCVQ1*3;pZX@gahE)PP_ z;Afvu1)cYgXG6ZhsIy878Lt0%A~KmF7@&K&(We}LOtnZdSa+q)g~xGfyYtdSsKOIV zBklq@AJidB`XYSFu#m4kV}cvrD96--ix>hc7kbrlv4pmrF2o-DJWDsP8pSFe8p4Ho zo7@{&sBg+<)NteQ7?fpYD&&B&AC(go0ovATAI~56yNsW`d$CHY28W*Opzup~pfR0ZSsa zJ-q9~q=f&5!w&;JeE|QmV$hW;l1KYUwOXspuU};LM~flc=J&LWGU9ZrF9BVZ%@_)C zdGiuTH{G%gH59`$Spu-0EO?pJW^nD#1*6Z{$0I!=exZo}_UP}9eMvY|B2bEdjqpp9 z&XDTD>o9pCW8y2tN>UIa9Q5()Icf>Am%&Fd@Lg>S&y{W6NUp)2-E$eL%yB@}w?-LP zN6{ce|HiOn^P!YZ(mSD)RoQ~@d{ zq~Pf)eo^k{&GS83iS30X206?Gv$UkI15bniL%p&o)f$MIk zqT5@GWo{C<$pqrxqv7uL_C>{k8p1uYR{_CSjL-{5VaGin*)0B`$P0?0vz7w|H_E5+bH zbQdpCe~&+=@^SEApmYbSNmxl}$4lz!GgWnJ?sXOb}u71p) zU~`@VSd0X8O#m7Rs|0@g9G(6GhYdxQowV$E87@lU-Q!|!Arr>GY_3XLc(&q&;R&f^zd<8edZ2~xSTo{O zEK?dl=9S#Jzh=u@UKRh6i45GYX|G!pE&5hup}9n{IcI_qoDY136*JN2<8WSMdLRJG zxe*!lm6*Wk`Z5tYwE9@M@==~>m=dY3u-%fwv~I{@|K0@qBfXIOfWlx;JbUt}Q;uR# zSk1OWR%WbcC$_QIi}fBL{TI%~{`^Ao$On}Qc81)*<$#_a1_JP+XGXfByWeKm-d zIGvk@7U8)j+Sy)b7{1Gdc;n0H7cQ(h!HgbDqy2Iz!lATTnyyB4mR56WDhq)%mQI7t zG!4(mwIh5q-m{x6FbdE3@31nIACu_4Stk52zQVl=Zn%oyr_EN15MiZ+x>ecdXL5t# z7jW&9RH%EP^1PW)Yw~z7*zt4a_{e*}?O3=^fe0`oJ*3NQ*(SuUAwm4?1I0*AB8x-EH&8JY*ua@t@-B z0}<;>0!-m>kbyM!6=FLGKs{qRR0C=-sSFuF4G+%aiKOsuE2#79|za>fiUrxwsj!{!b5QL6D$7>1I?|02R&pJXb~YW^;?nE z7%F3YTdoP7wuSYpSz&Tv*}@h2etkublW<&}?leZpS)k7nF`)bO5&G91fr#BveMO!| zdOj!kiux;|bB7HJTN#DlK-}5#_akZuC@~V3phv_EK@N7Z_VO&MB@)2p13NoExm|TN zR&f#DXM9YAc?EHqb{)=y0s5abX~GI6e1$AYn&@B!iqu4&L#?e}(QsS`YU0v1Jn^{?XDQlU9)m1~IGgqfEdleNWmA5A2 zqKcB$l3Z+7v(#wr>g{cV1DD=2`x9V;Rcr?4$Vd)zuT0$u{=Hgsw7ej8Y+Mr2V3D7X zspy?mv>(Bnw$0jV;p8cK(c~?88jJDz*^Yrolly{0^Uvv1`GPCW^8VByXaH@zcDu_` z63w3GU1)6iB28kO@vNjO<73`>TdQ1)9-gVou(@M&Dz~kq{8aFM?MP^MwAvrvRV|(k zsl|t*?Z_6Rf^R#IQ`@@&8awpH`FxshX9IUjYmcuO-2Hn@= z_KR?c^zn}ge1#2cWA}=H@fXfq>0?E6_p+I$eLz~e!{wh5*9MtLu2aZUu?gw4=$NEK zHHFzaax%ym%(p#Mjuv;N_hv0!QWvdMSu>bkU?LBLIGH|A8vrer1F|C38l&^`1Z@v0 zkdAumOD6)aRSR%WQxiDBA!ImIO~pGmQvBTu;$It~H4N!aUZt3P*KYN6mk}@?vHHG1 z)!7c+R%_WJB+Kz0gPAB2dn@%f}RHH7|U6O&2PmgtL%u(y0YO~fT*Cqg682d<)^M!x*jn?;=B>0CF|P2B(pa&JRUo@98h}!<@E6v~*e3cB z)Deso<)rtKI-A3HSp!A(hMbwR*T}JI-KG9&!`E{iN7o$TH39itd-SwgryC1Z-b252 z-P(&~tq2LVN%>BenvauB)-N*EMw|SD+>QgJ0d7Jw^)KzZoF_e#;7n&}K%wvepz}p9 zW}b4HT4#5+KVr;A_X?0;WP2LQFHD9|6%jV_!(SVJ8|r|9Zj7}Gswf2GQsg>)cwdOQP-{NGtLc0)~O_U8m*2~ znS1)24%4Ms)uy+yqT%^E|LU9=>b@CZ&nsqn8l-e97c&KV84 zCP|0HX5UQ5GSz=iFK<2wQdw+1oK{+r@`L@oSwT=*EEjGQhjo!-p2Nw?NhW>OD6Uqt zwrh>$XwGY^c0a<{Hw_H3N%{;3vPoDF`9%2f?=9tnUzk*PfF&Fb0U?GL^%5UD@isNe zw$6s=-QY#HtKig@LqHd~))@j&_+PgoMG61lC&kW$KMh=Yiz6i~7&=9tHrQEE;hF2w z3zF`D!TF}jRc)8%fx(1yDw#N(T`88R-s>Oz?-r(lTG%b>4e^~2$6M5eo7j}flu54> zMzzVow0=wS-_P}l(EAq&s4J|Ud{2n}^{oGT=mEx$a4EPX`v3du|G(q6rtun|FNYnZ zw)(=ZibRx!{@uvGI~L_D=vF_(ga<`+(I8QfWB%QScT3{O|CCvI0ZaG4#`V_`zX~DTqr%~^QA?8i^Fh6zi9q|%jNx!H_^Yx1GYs$lob!8i^?|cA5Pt?(DJF{i&yzd| zf%Z|1eFpG)8?gRo)ZhPE_Xdq1w277Qy8$qal1HY-lJ$l>IuY;=FZ#?=lR|>+Y{;?2Fs*p%F4|~uYULB}Gsw66Xl4awP4$KhoM5uWG{p_U z)W^)cNf*7HaJfl}jHuJ`720J~i>GPlWG}DO#l>y5HU0$RKioOlU3a#xOo+jgA6qQh z@vna20@h7zsc4h#j8oI~Gs_I2y$!xtU%cX5=6UQ?6YULgI*8xm^HOsm<3@?Km&V1Z z-}&M;I7QD$M_}v?ppPC&1ZDfN;NXhl0dEQ78%qGgP9e&}a%7HOi#{r~(-yXF2l1Lr zHqR|Ksyqb=vU=BkYud?W&#+`2x47a7Cx>eNv>Ie7clZc{cFr{}Kl7S+firo7AIU77 z@VJRX=ByKnB<6tuK0vK>AL+2M_#--#!lQe=zE4SwdJ2`idwmiOTI9WOc|&a^{o6&l zYh1_@;y)je0O^7XzRL0}+sXij$KN_^8vOCLLH5LZda#7S@ zMtJbbO)+=z!AFgmhA(P#Gg8MU6U%4;<%Z%Zi$f689zrCw+vK`0<3l@XtYQ&UhnPBC;Sl2`baGtaoK5*Jvjvup6=Vs zA#w!z(w|(4`S00JTAN*{yc3FJT-$HLu57~Zv=7{q6seVn^%@I0b=Z(We75YI$4|5I z;I_YYQLP@NTQDno2eIdeC%1XBdM6t2O#5?pkN2-(@#6Zp<~Mq4nX}RY`2+5|q!7%*qzAPUK_AT7k3{fMZ@l z9H%p6d^;=2d*`sywHx3CXf6&hvuS)9@kg3URZ@re4S_d-v^OW8o%sj5N|l~K@_{N5 z^vT9(v(GsmHtoHON_oFFSX%ki!*teZ*(|!t!I@t7W?g_(786Jf4d>2O7Lw}0=yas4 zLvgW7=;BB98~PiMmX}NWs-5l@-1dfCrdrLx(n8RfIhZvwI41_I^0EbbSdH5)OF!e2 zlQF~=>@9vsoE}dx<*t5z5MtWZ=|7#o|ISDL2e~r37p|l}e)eusF(4|eVh`eVY_SV! zKEO32pYu;#+!u=(0(d6aL6&t!nZyF?EqGTWQu(HG*x{CiCB2 z>MSy+35$u!)BGp@D4X?60Z2rSSz!D`Sg9Ap4xMR9QA8LtfZ2$kXhF!yqcGhWMpk`c zM6*ViX{H8cj8{G<`yO$xj~EuG1^3r&pR|05+xntrt9!*KcRmPF#gn~`lcrZ9oJ7@ExsMeA+ z365L2R$ovUeiv}3mB)4a6pkAQJ*$2kqq_KFwv?eDq}AM+0LSGCh;dxEqJ?Tp_BSzLdFAe1L2Hd^66>a12F&Q3kfj zoW@iHM3=rumzrpGI;i^g2+HvUCyA(JuD$bi$@QFQ#Ya`)SUPAym$RK3E3{Il2t z+ON7FoV6kgnF@$L1mjGzK^|HT`If^nx;|IgHU82#$6;qi!_TZA339KBRU-McR|E=> zGnysaCQx7YuRphB#L)`|5t|PEf8CvBP+Uvb?~|Z`0D%C(-4iUp;I4rT1h*g) z2s*eE++BhMhd^)}g1aWT+u#t~2?V#hNzQYgJm(;jQ=ERPCAByVvesz1I5w zx_dGQ+7TU+lGeTwnJs=1PG^j>QYhD-!;NP? z_2-PqC*JDwh&w~Rx4-wMbrKZR9JyDoB}{$bU#Az2%exEZdV8|7&$ns#s;oisd{`g1 zYd6t0{;LNS8u6v(+$Xo3o2##%7dP^1ziFf)#7v%BaQNTCv(k}rqN&oaPuH>Insi8W ze@C2mG1hXpc9jw?Xez1$EJg!C5Ds^`JRP&T7_c~Hf-YV~a<{_{5M6gAMaB9j7`jmGD^X|h3Kn* z>z37~`F!wx55D64`}5o62mC&sqocQ}I7+lvkj1A6$$2>$?r+bX62sh8TEbY?QQUkf ze%`_xi_OekuIo3BP7W5wp2sYlr<$~_HCbBt+<#1Q!ZzZ+87&{W%4;28cDief=qsmUCapEy}mr{3aEUxVrX>Y$uOH7n~;wS`tg1t z4A#2Qy_~Kvg27yr`B_!Hi6W@S@Je)zVIjEs+aSiBR~}-&wVAqDWPgt!gpgoo^{9!9 zK+tQ|(G~ohR7)E!@L38yEUSLBnzq?LT#&hktc)?+O?iIH$$!lk)dZCV)Gka(TpWk^(UtW&;2vCW-_G$4eZ^#NJhVt{l!&9j!dcTLndg;?oio+hjd+Zu5g60 zkz`ne@p^d0Zb}HUFuz2MFR4oNlC+8lrXPtD$0e^u4%I=U#dWduny~#(=L4i*UgUIk z*w;M5oZIUk?fX97NC!#}?jy`1#xV|B{R(ZpHxS*Pf-G|-7QG~ojJwiwKFNQ!ba}!B zq$wWzDcGQBt)OV%YWhBmACNMB`{j`d*;Ychz2XZkQzmYY#FtjHSd1IS zAhzSh&Sm=vQO_Esz!iVrTQ5ojYP`W=_ImMcP@CU|)4?E{Bd{Gn;Dj^|C{FHUlqW-= zjYO|c>!(@fl^UTup|>uWujYwo(#aoj?1n|1vaVkG$k@w!zEH-ej0hJ=se}49luEV3 znucba5dHF$uaa#~s?{L|lS{J$yRq`h>C8|Hmc?zuN27-aBmsa8Q9pKmZhm2w;~HOn z``&2|X}x>AcyN3QdYf%6O7hD6itbmk5ESlJ+O{_I>DpF*fs8jTno=?p?;~1VA!F`* z%LYc9ph7CA(u)ZH+d%3nx=v#jwB)k}Ruk3dZODpYj|(O}47OC^30*3dsh#l-1$o?6 z-J%)?p{*6!)|4Rzz<{F$JqF>$#T*v)Xc7j<7$DI1jn25xLSLVU6yNW3mPme<%h&15 zZ_(Gk+0fvsd{d<5**Rc*Xdp|Gv+2h3PBDn!MJG1Lt*3+>(B&Y_2AbzsP{@#B)JlLOv?O$HUws)D_)@p z7}7f4VK49rh@hA-53wfLKFD^-Ej7i#HvPB5=ew`x2bMJ}z-4(OF+vJSW2Y^C8Cs=O zX1hp!qr+d-qhKdanv})O&TgB+2=T3yKznvmMwGd?NUmf5;71OxnmEdp2baTx(Q2|? z2gRbV_D#WZ6J1^B&jz}9hwo8C59r93ydWDZOU373*T*sCCB^+%USY8tp%Xus=W#m5 zw_{kjT*)tr@@EJi5~*O}U$OkablmM_F5dIDlT6iyEDRX91IFn2^d*~l*HqREY+644 z7)MHQo|$m>pnHCURqgsS=a0LK-j`pDRK84IME&Sa^2zfylS+azDb*sO$=~!1+k1%z znLoVAcJ1qumm7o@m#8N&nfdapZ$Om67La8}t=UphS$nZZlI6f8P>*R>x+~+QA@ij9 zJ;4LK4C;MOjt>FrIfFCQKGeq7tQPs=vDCu&PLg9V>orw)1FvO7(nzA981aB_e%b)i z>-JP(r8>d4zHT+@sO%AosBA@yex^p2M#3m({1@jH2cZ^i&D|a^-%c6}=gL&4L-@&W zZr+SDvDF#mN>6*(U6EW@cWpPL2RjbPJa-O5lv(tQ0n$%89KN75ITmH}XAIFXaSlp! z5$7+IPW%KNbNs?LD>~5z?B~HKbQ88+fs7!GG2*S}Jb63$z9K9;x`ALvA}L4uK}%tL zD$Z@oM`;xzIm`;|!y1 zUb}7v#}MJG4+ZaJO>Q5N1cqzYCbGZl zrCzVYTTblzn#fjxBFw%9i55Jc;x{2h zh-TO`y`bw4w!9wR0r|~T`D6IeUb$|mu~47dTNH(2 zo8kvCBI|f-xiA|v9sz3By!^LD;qlg1pB=>C2o14+BVtXc zLJ+sUXU_wvYDPIpEv#wx>`0jL`LL!T-_+=6vilwy_&z`nqfKYB@QoU`!I%%8&mwO0 z^W3%^)wu%O<`5&~_Bx@nYeI6GSE27!ByVhqq*!l zM{!y*$J&({Ogs78Eb(?@ZM87oLek!O#lLlV z+n=Hu1yezH9;jrmyh`}Bv_SQxfK9tzpMZk5qZ4}G^wI)4DdU3EXW+*tL@NL^} z@mo;aw{W!4yAnIaDWV%T=%rcG13s{&T3t~Hk^NHk#nA9i>ciy~MawB1p}QEy3c?97 z7<^XUKIMuBqJUgZT^%GIB3w%w!kKv=$NQ|#WGLX05=w>K=oulwN+t?{qSzn9GJU;S3571)d;D5AOr?f`Y(Q<(*8B~P*yvIdgIU(YM zTD}?rys#97pR!Twu z?!dd+EhINQK54vo3x)XJL$xNrG!D9FBpuS0>3Kc&Hi*q0hV6E5yP`#tU@3uo*Wr^2 z6P`5{H>uOg*I0rhHIhs2JnjoTIsDF?6PvbVLxL+3n3iB4GgFd~^##KA2ZCGFm^AV> zdD-_t!qriACwWtmAtZqoY;9q&tcmkK$?$5J5fB==~Swgqvo?=Hd$?)cOi3^ z;9cZWoyIL`(H*gy{BF2mN7*(L|5enZyObj<3>G}mwp5Vi!`Au@3NaXIb8qJ*R?dN5 zUQ32M@EGu8kcvI|fxfvhyO5g_7;e`v_v1@1Z}qMS>abrp>DuI2j9we^c0&S#t5LKh zHBip!tB%1KNk6v@DN@YBV5@%uy`0Uf zm=d|o{i(K50Oh2%zlxBT^YWxZC?>$_2|JbrtX*Kn1vYm(qQ}wzJ+cTmh|*&P=7`@CSno ze+vP6sAp7At?K>f?|PBuVSL(gE-#ehnKdc2xr^<{m|kDr*@VCSA+dyqPdiA;L|taPoTWB#@{L z559;XJ&F=|n|nX%Q5c#Hc@3{oybII*XxR!Da4nrj z8GeTNVf@bvQC=tya6x1lwRoTY_8xz$XI3?WRQNoCaD)7%acpr*l5&3M&YJIO%o@cl@KTcuUYPCd2Y4Gs?yUbEDV1v6GI?)w_VLc4-+IU&_WaJ>xQ; zjFCh)>d{3@mhd!!d;Ia+`#3@TcWTGV3hw5}wN~rtkL6ColgKBl8^hF;06=E9HI^S$ z;ZxC$o$O=J4b+DJC8h!&f~A0QqFnCiZVIo-ZaPU{yJDz!v;=cv)>^XqgG;c#Jot|r z9lQd*KDyS%qLc$g;jZb%4E(D*M?v97R zlY9Dde5*41?dsNtoHjvnz8VF`{b`nD?xL6WYS=RhkSEw!SbyuMzeY(K&VeM{zVSQq zu3kC#VKN$CAtK;?nT4J8OZ(CVRU^0Hn@I1H+j25yU+SX#(Vs-9aJnjCFXiRqOVqDe zR;ICb7M{&iL5Hx17d@3LG;G}6dUG5Odoy_{UC?_l{lTKOF%6i1G}T*zCdwS*E6G!D z-^}8?%kKn@2KGKiI;C`D*|L{>J$uDts!|nX+S>Q9K@<|x!W{{w|JR@g`lgKYgIatL z#Zd7&SoATlxHr~7derw4o~N}8HJ#mgkXmJOV?R}9Vb}G;2PO_te!NFj3h2cDW*!vp zELZolMpsE$2?^a!p5*8q2;Vr4iF%jcadfjVo;4oWhSI1vX5%5ylRQwS{_G9j5_F3| ztOU=_O*0Gl%9|TT9vv=S_MP^#`1&)4i#o2}ciAB+YD3S-{JD9mzkp~Z$URPKL2*5VUBD4ube==9VPC>06th(LiHSr49!RH&^kirdgE`^{d@=Pi2FgtLTi%cO@U`;#=C z`m)<@m`KSa%?vEw$d2L5qLXP=c+@xWxf)rg6aU#uX`;yQZi>gG8iQ}aw{gPqJ31pD zIgtX-$Q&m**iX+A#=KjY*P-l0Z<7}QmJqt?Fo4a}(7p?}UitkbC((hwDe&vx#e{I^ zcM4=tuX}fssi(_9kD}!E|CP zbMfV4845;5&C+)UIO~IHRPP;k+3JzDlH2I4`5B>TV+Q@9|8`>Dew2VuXvO=;s4klH z%qB)H&l=S$EG)~+B6-tR|28e^r%%NbthN9l5YlGw_sTzg=E|M(`IbV^mZP%y#r1Tk z_4z!eNOo-i0V| z{R2~=@YVpP=nh#XSs}D!1~2D?KSrn*;$hUCQLO*pCOLk8u#{AQ0$2Hef)NznCcvDP zi5>ET#~&P)k?@ac)$8t#um7)i)XKzRP-6gpS&1b9&I-u;*y8v%&T$oqediTrWj~xQ zceZG6eYZEK=!WO< zbFJ>>!$pqoYAeN+8~GiVWY2FtI=Eiep%28!hnposZND4F@9m1)tj8pamfWuH9n0PpkKlJo8Y`fwc7W31$>PVXj5e<; z7i3>XlEnBITsfhucb{AbrhfIg#L^v>-%?}BI{j!lMT^imh)#B7o+S}2cG$Mh+OI}R zu+JOI0vrVvZBvl?3vN)Z7c+IKF}{rA+#%t&QCc9L{m3p{ta3T!|He%A%hh&O@AyIu z^s6||PymWBS?(ww7oT=XJ;lKzcXor|zBgrzG^LG4BgG$ImWkzmQLynagP)#IHl}_^ zp(*{jM`v0<3d25%@BK_`4wO)A%me90syv{BwTywrE1wj;6&nBiTv4Q~dZ9bgM-p;& zy@VBN*g9Q|eI&u}>=7Pf>olpxr_CefucW-vZO$({g(KyetVg%W=!2k`8!|z8$fXc z7?ecZS#IKwT*c2C70{D|LnpiFg>QLwt=O}8vxY3+HV zm0j2|uSn}xVyCWNYGVdS!Y{~S(c}C7203)|P@XmkYkkSM_g9Q*qX4`HWNI!f;VYQP zqF?!1fAY4t=2p1T{)}ty%VS4a2H~%Y!e4s)oB5vP3D3{-5_)qNvyUOZ1`4-MAw@H_ zgNCCEWvIkq11(I21DbIowD!5O^m&ooP07qhlPi10)%m^nAcE9ZRK=vN7F8BiF(Nfq z)|XqJY(dGw9zRnJ3l=ij!&rW9+h1@O@LBhcnV`?x?hCr9n5i<*?hfWt0&v3znYJ8* zb}d`ukMTLO*VlD8__gkZDf4N^2+4? zG;8t+BI4GMz8IhNPB7&`nPTj)Nugc4} zEKtFy^6+f~<9uW1yzX59QoM$y+|&2b(p= zkNuKA9CdJ!R)~nulUYpMe15XWbsdOOT$+ZpZlV;gOF z*sV*Y8_2>2M&j3-Ub;ttQ4l|ADqJ{l`^-#&IR(j zKt>>1mX5%Gbi}P!AYt$_)jpDlkjHJO#$Ch8paM1PQ36iTc3|V}wSrGUC=v&f60ZGc28qtUK{{R|pP=QhEvX!6vSusoMq9@&DjZm}6&E-n*;FBbf z_=)soG1*c>7r7yB#3`wxDQLuYE>ej43yd#brKNZPQfFRaXp+&``cF>kGlm9pFyp0R z3zw?|iU*yiDrsX15nm?xoKrYHhww8!KOD)C*i!IR5H%jJU|=`7T;Pc+?RTd5M`5!9 zXWcwg?rb^$E;FVh8-CU>zK`Zk6s9s)DplF0S=9E8jP%TC?*(DWO*zK*{jAH9iJkV; zqn(gBSZA{IxC$iImM-xfeYr& z)k#%9ZkAId6T8);QIc?Hzpls?Wuu;hzvvDR)RlbLOF6k11)*~Zg>xANg^wQB7hebC zE@yFo+}Zm=L&p+eWA?;b^qD4cxUyHXtvrw74w#?=iZ@RcQcs#&ICJQ4ICv-3iNSFF zIy^)?=xUYV;q0XHF-W4D9-(A>=77HDvQg2MpPszR#4GDq)68&v4V`$KDaES8PN`IT z9sowLbf)B!CQC9yn{%YX@C%};>%#}IiS5X!4=9W-F^C`^%H2Depdoo)_x6vm&PX9d z)Hxi}$esjeUt6H$%=}nVXLTuh()19C^~kxIg6OhCSNr0@nRZ|0@|_najzD33W)l4^ z7VDGQ2YeleByf_HnG=q~{r$Br0WQgL{M+ap9lq`Fzi~2=tH%K0Y}d~<*%i(`pI7SG z=J)W0VOP{yt!=tCkoR-ECNC`a$C$q%hO)P zbbg)EYPisx1L;EH<}307Q?Q37fI7@bKR6}E9?5)|d}!7)(JZepg~sjrwuDj*;(KK@ z{Ul{DRqS)=q4`$PRkHpP;-dDoYu@l@Dpw++2iow_uexMh)H`D$I{6pCJ6r6#UH)>M zlN4ojwyIC`&a$5u593Du;M9jykI>MP>qo7BLHYn9`W8(*O;MN%L zE2<8bU{BD(BDwGt3xUSHHvBtQK@}cz@Vne1^5)KJM+5x(GMgj!*9U>ayLwxFKT&Ed z`*g&teOF{{8lNw7qAH6lX2TTNtd*x!aJjI~HLPnESh1 z{qHTAKfv;feDJTtc_rEv5Rd~+dE|-36BaGO+lj!bH@>%MH@@kQI&^6`+EB4`UezrB zSCqn*zN- z_lr_MH+rOepOURT@fvW81|v(XNX?A7l+XDe__zGV6H-=d6@DdxkAWR1U%|&pbhLGy zmyq1QYF9y{g|9aiemETqRRJ1`bb^q2oHpcW_iFVpFX_dY2AI@G{KB0)Y}~5I4k$b4 z;(v5q*T=Ku{)i5lZZk>_+3@F{M^*D0DAPnhTu;iL*eBqDkb!)W*U#xo8#T66S%_b8 z5ZBBD#P5cQ-asWJDi@#@4+lrLd*Gw_JBlRlV|&N8k7xFVEETEQ^#&iF6}L#Qz2TDV z#VilsluR%}ESH831xsm4*h|!+^^kWK%^)~>Dq=2cOwy*TO2FZ6JB-$j&d?_jaF?b+ zmE23$@$-Pjyc`j#x~F|%-}NQ#4-ZpmW}*_WbMZ*yrFH@wpi5sZxjcL^4NK)ggY%Ne zYmC@Xkk)!p^5tJKrzFLoU%x@5ARS%b(fj>I`WX84`ACYUA^)niS3teGf+>XvRh4*} z>QqqTqE-0khV%Db$D#nty=${NDF?jP&0*d9&0ZS4@^8LKNe$@PNDTyo04A>A#x9nj zo6H66oUIW#)oDEl!w;;AH-Gw7yN)V3p?bX*8&u_c>CW_m$WO+y4d6}ch zu&DnLcVhN>=He`pyVP3yQ4-Igsk2jZxFB_t*i1fTEYu-8r zB)hfg4k{SUztEdj;!Dw%Gw!^Q4I;uHXh0)=es8N`a*c#u;hkxj`AMV43^gbZ;gm@; z7>X$E1?i`K#bF149W4tLgSpH$y*Z^Lj)yaqHgdw5Ujzu7{1Wklms7-dDhO)@{h<({2}=xgRp|C3^e%V&@y*_vSxn zYMDyJ0ew@ao_t+093DkL0ZMXhZ2~N%2T6~;Egbv>F#xz_y(HG9^18EmvcD`adnlj$C)fs${ zM$3|1z0?s}E9z4bzx(rJH!JM#%c6tAV{ zdpyuN=^o)A{?(^{Q3b5`l_}Wywm_}`&ta*IV}U$e1w2P(gd0Kk0!Ehi`Lz=k_Q4Kg z=5Pr@Czt}U^p=GuH+yX*rEKLL*|J;PGWXuY^{3KdO3+?*)}Jyb}Dl#DQyn`d@?0#Lw84GIg0i$ zI}bE43M-qfd$U^)x`SLn;Pdw_P*1EKes!C`+aUI8B-;M66gNOk4S0g^a%*K$JJj$k zq=!CGicDu9A7-jrT`*gknb-;g2u<{FC=Znv$W)`7QyhP|RIXyBYHzIc6%{=$L!vaw zc`B967st@H_N+2$tJ+Ldm4FJF%9a8;V74m#Sqd!`(9W$VeBI0CUw?MU9_UyQl;}5K z$OzDmY0rTel28^j-qc4W+XYzQV*M)S3gL7;fgG(RTgm#P;r)Ck@T23&7suUcw}#Ig zb_E=?(1E^jx(Q9d9yMm=8B~19dWFLz<*&1L^>D!OmRtmMqqdZ7lMM+h@+Civ0-qWe zbxEOiT=K9Y3N-CHv|W=@Cb`hrQ5SOE?ZYU)MkvQmYe=7FFT82frTb-rXM zC|((25UC64nHoxz^D$p@E9A@6>mOj@On;q~Nx&8Q75Nb%HOk0b?hCpQm^VCNBS4g` z*@f>d;mO=y;3S~p@iOB>mY=t~|0wz&d*> zGV~V}aM<}U>|%*8C4kZ5u_O#n+o=~=I53<@+j$9~0f5Ts9`0z*U5&h^0?)vtPGRfE zP$sr%*0&55d5hcq+&N^^M)_lj^u*&r#gf=XO+O6PCQ*a7Gi2IKSS#0*d5<9ja!`@+ zWw$ec@>h>CKvN`YeocA7axG4fqZR}#nVBkY)2GzZ5wWaIXH+(uD;cY}AYQMyLCtGi zkV)O{nH3AI8U!Kt$NT!qi6(l2<61eexZQ<%0-xO>DWKpRwgd};&zo8%m*-DAQQgq= zHzWp>MenyEvB7*9-8dbhU#Uf`CS;zp3O4?9kidEH?IS9+q&v#Z+P(A`^YSCt-61JJ zLG9ElZKmOQH~4(VG<^p89vjrC#T7+7jqJAyoL%))$3H2+Zk zuFX@%=`RaHM*KDIJIxL&jEo|L64LSH=Jn^ofhrh~d)l?7a0u zFhap%JJ+7bFQD>3>ZpH-P7k#fLVe1U&;43)!%Y3GzqEVM1TyT0G40~JDtG8hgmfly z{;CzZz(G+Kmzl;+-D23hrbUy~B48hX;=Cr)MV}OZWoMT$5cSOaYU$C^7iviZboBxG>a5Hu<>6Ok71w&zPNUxmO-mzFnb9YZ&!z|O z`zVJc5TjmN04SHUE;tX$KL=HY6X5)UJH0#T7YkvVWBD<&4wE`bJr~E@z)|$%3T|TT zy7%wOn*$;sZMX!#pqnUD921!$JR<_A3%yqC3_&aeOzA^dgb}9eCS*~DkF91~0y4k` z9aOgFVWbQW6G|C!pG}Lv^=TbvfL_Af_ZcfWyN!|+)la-C@kSiXu3eIo1T_0WyTi&{ zkH1_wFkbk!97%y{%1U(>QWKwR&fcsqF<*0;#%KR$sVQKJ`^JrQ0-Sr%q-#@&rMKC| zD)9A|*l(gw*1P-gl2bGfq2BU{A|jV|2Eg0gYWlLuYim${bZq*V*TM@eJgww`C45k{ z0we+#i3;REOSU#lkiY9!!O|`25Z?{sN;9Mhb?4=9Zo`S9+3WU?GCaVl##2kd+44rt zVpZN8WU4LoY$e(;Eldo1k8192o}o_==FNrdcQE<)m9CfJ_1)GI4}<0cBf7rLp{S~S z(G$yjlPFMozE_;NOu0p}Q)@Mbc50>w=H8ykueG?j`F$D#|FLWS$N*QK5Qd{Mo)ude^+mz7MQAr3kQ~eF ziwB|b?w|$w%gZ;9YOQ$v!Fz;X0yyOEndhn~en(F2dTYjYl8O@1g^x!@VopB%Z$XM; z9;nfu*#|QGHxZk^18W*x{;{T!CW;#<>$`oI1=d5#{A1-M8R~1ev)7uM-`{xBzg0j_ z;M!S7;{Q>0377o09e(}ldnmAA)ol)|>OX0Mf649|e*d9h$WSx^H|UtW);Ish|NO=e t{-^!DRlX|Dy?gf*?oKQI|7NH&&-^oZgIgB&5b)RcUP{VKl!)p3{4eUtwiEyW literal 0 HcmV?d00001 diff --git a/docs/images/backstage-github-app.png b/docs/images/backstage-github-app.png new file mode 100644 index 0000000000000000000000000000000000000000..1bc87dfc6f10e65a2dd9420dbd49a9f7bab75754 GIT binary patch literal 74537 zcmdS>gmnek~OS{bcAff(^} z*`vP9PSB4_hVhnw0x+c0pSlVtj_Pxk;59D2iFbOn8Z>sAx+#WYgkbQIPEkR+dU#{dTZ_i zWqrXY-A9%&xut8a)@siST?>#mV+`Vj*Wun7?-O;rn8>16lemW8CIpy2Y-NxT&@{f& zrWQ%emPhPWDGWy$ix=ttq&F9)#csWPca2(M*pBnPx1my_%@HvhBC_Z*v(NWwROBlY z&B(YvlMVesy$yLga#Ob0RG?KmV^9IHY+UiJzkOyAxutJV#X7anqRAJJJ{eD_xFgN9 zWy}>6VCbOF02l;Ve3%!|Cs^nu2utwaXGvHZ82G=!;b36GtY8rSiK7U;|Ng~8uit6@ zzQZSm!XQH5Frk;{XSn~whS&WJ|DR`AS?D(y5j8Ox8R%Wj#M#Wu-o?_v^^zjl92$V+ zD6QiH1A|NX`+}8Gr8t4+|IPd|>!Jd7+PXX09Jd zJnd}lU3fhO$o`7K3w{0_%uGh|R}@zp0Wxg`WfCz5XEPE`CKe_ZGC^b#5)yuAQ*&Nb zamjy@L*E3*EL~k4d6}6#JUo~@*q9ugEtuc&@bECRurjlwZ`KMDDnf4BS(N&GG5ze1sM7DVP}{%@ZNB9Az;*+IMU zt(CZvI`j@5WPkmNpnqwg*Y7*@0$av@y?zY?BMc)WE~4%UdtiX*tKK);wwr>U~r0yJ2k0M1?> zT!kuJHS%wi=#TUm@AJ20*_#<9SHF|4;^N@+5mgd|30)8W5$W$-DS@z5x|AnHXUVT& zB|l=kNBH-)`kky(eE<9USR31a3ja@4gptHQMrb1Wmhn^mpF|%qzSaU*CR%E5T#o+} z`@i*9hJ)5i1I~y}DdK-h`dzL)1DrhAp5bYU@6Xo$l|`~JLb_#2XPT~hF}8LUuLS2I zV;I&qQ?f17GuUXDo}QjhvLOiLedjWY9pxWYpEkF*CDRgBv#T~DgLcl(%miV(akQNY z{;iFp3#qcD_|Wol4xMJXOi*~MpnHJ1bCxD8HBoUt)gf=CWQ1$dajI0qVDD$e zCx+w0ea5F(8FkFR42!4btS+vr_Xt+e7!hMd; zy6{CvYQBi^7aRo6_9wyQtR%T#8_eTp0Y4`LP<|3@O^=|MgsOSovRv+*w3r=^!fhPX zh>V*4(aWF1$yS~7x7K!LQs`zsmvihVl!TSMJG{71*R8dzIvwVcKn&CsFe^3~}7k0>j9JSQJ`}W#*9Kt(p-mF zkx=0&(BItZipbp_BDLasQ_yCsXz^!Ddr4MR^S6kB(ucg4Bpx37FDS7p^Y3$zDkefj zD;il|zBVjj>k4tcbwYPuF`@pR2P&0bMZA=eck-jQv(J~VZidqJuT5j4E$ zN}kx<%DEN`63EASjV)|K6+_15ktBx<$}`Zrnu;JVDbqK7V?9^LbbEIRuno^-QzCUX5W8?V)@(>UFW-W&DTIJg%6i~dTP6!RXwk@U;-X8H3kqWCdr%X=gRL@%>u$buisScHAV_a{n@3$_ml z1_c`{7tPpOfgc*1o14wK@9%Dvy>&x%GQCSzzHp)v%qR(hV&pzIV78&L$) z8Qb89;%_MSs+I69{NR@oNBI!X9Q}rB$bdUd`q^g>%Ov1u4!Uc>ksse+D>%uHtUln~Qam<87^w^EZF2UNjhhugR7#UWOm=Y>>eC#8DrSAfBnvd42M}%(U9y# z{qvDd?5?}KiRzg(WoI%&Tb3J~FnVlccRqwS|6qT1aaGd0!AC3bPVwj)a)iBT^L$3K zt1)%op|)^F+UVk!3ToVB%Vr;MENKl#b@(&1R|SPh-)Q`=S?O?8rpg3#uOU9nFAx!j zNQFH=++FM@r=%324^UoTqaR6VSZgHu1jiEbivZJa-Vf5(*;zzrUbdv{W^f@6@vit^ zu%UXLe(-XLvJ|;kPug{mPJ~sxn(VyRXGLdcJu2ZcqcPSr=X_itcgSeCpF~s&7YdMZ z1`R}{mD*Haxq3Vw)kTx%UvBQes+TyS>ew&f)em1ew_T6WAS0tDdyzOYzw*ptWjhOy zBJuPi{wDTQug#Ktr84RNrDwHG(6)r z66dsR`Us?E<=jL+y0~fh$NnMZ^v*+ftpLjs+;82az zxEH|dag^=N0Jaf{z{S3Sg6a@WC> zfzm3T`}k1&O3L-S+$O_>s!yeGA;{-OVQ^p|VWR=Zna6EOet|BS@vOe-yO2^*kHUSg zB>HW<@Wb4{8WO7P-TRP>CuFyRMcQ_KsK$HnsF`o0LjX~NI~=!kB$}CpP!%1 zD_DkFxAdc*Dju3cDul(e1vrVw*I>p(sPj$(Qh_c3o_4wGQ%m+VPCF^pDDDI#mB1b5 zjV;+Oey}Rl1Ln{8{=nYt6BUT>?=|707@*f^$4z`ik0iby*zYsYCae79<2I)~C_UyV z4YuE(O7Iq#RxmzUlfx?fDv`vAx(Q(jegWcfOWl5IjR!{l`jQd@NFsZiVv|0N=HVb9 zjJ5LI^})>|0{2H&SV@>V$6Jmc6r->&x;?1dE#rAhf!$9xPOyv_-v&Q)yxu1;;-?>a zA2-i8=6_VfZ^8P9ZJ?a^w=~%5te6L76$JFv~wzN8vX=5^id1MiWy%NcC8PY9?!b? zWqM+=>@oi}PZ34Q!j}rn97A?zind?R| zqg_^dXe|3cdoN(z1zk0X^V0M-V`a2JBkC-zK+9yC{!go>j}U5fajl|yd)}&6U=*{Z zjrKBpp6kPkQP~OJS$fg{KRZkXY2k!hpOZ*5_$vz%>7Rtmp){zQWnfgIV%@8`d)FoW z+TK>I%ze`Eq~brvX?9Gtq^&08t(7R$jk%FX6!p2acI+c{Jqa*+B2K{&r@mC>jlnlv zut_1Fz`y-29JCH%jW2IoL#`5@y{lHTLTf^8KMMUhX=v7<79!my-Yb#t&!u;p1gfCc5UI!|dBRZ5cLQa5 ziL^PEhZ*Ob2EhAl*K;J~67x^g0~Bvbd|fpR=hDwCMF1v4(`()wUPi}|rjYj`%AHvB zPaL_IwS!tnqnMT3aZ0IV#8=ZuHdnrZgVVOmSq&1s>H%9rY1G8TYSQ?Vv2S_u>yR(^ z4u}|YN_Qr=Z!s#LeWZSTu`%7NxGqM@cNSd9AfjF7&AT?l4Li>D5Z#0Ft?#nQIIu0>mKZF>u8iv##!YI5>x)x~A3Y+>LH;!JF&oSMPgR0AHQ`G*Ese_N=!Q6?vhHogn|@lDRSu0bP}qg z+hDJRJaD~edX{<|s&?1MJw$dkuaiG>rBgeOYYLlqxftL(TFzKXZ7f)`E(<0i^5<&U zos=K_urYXOexJu5;)sBD7D8I+*b|^ibEGBUV?9=BBYH=bc zN_yV~whGwSC4NG8)5MKjZLJ8d$2&}QPqp;BI@e27-rn9shC5_h%z9iF0vkW+daX2D z=y`F!BibI*l{|@^XU$#I7P-r=$KyG zC>CV5#3u*V6}V*c3U~Q-5JIPU$RAABd#n3f02lCKs2|@h?F5(EI5_#wkT09uLI*Wiy!=6aG)k(=b=g}k&lrAXTZ}PgXXr+wRPn+-+YA$To(ub%8)+UC zFlcW6TH$syQ+)#d4|^WE9mW-dtltFBHU*~3)vz*(gT;oCPvHMt9Jyej8$skX%6(FA z8=-Gfp7hQm-bm%zaeFHknCgz=U}HR`&us6uqs~IfSMnE~&ah(Xb~5 zN56^_P^I(Bc=yNL2QZ-t#-GzJ{B#}M z+a}{SiZS7RHE%&nK_RZ$7uaXgA6o=wU;Gf`eLw4cEWbk%t{QekRh?`W0C+qixdau4|AnbuW)*d zLhe>%^WZGUpcAs%mp_P%J|$^HxcjNHq<`Y}hCgm^5zFxNIBOT{^9V+6=GLxXz*!H$ z=HWhNn=3O)hG#Hg-Mc@utz$iDr+5Vr;yJtpFmQjj))6%LwNQjLjH#XEE3JRrKe@8G3{rN$ArcI=(%lK%oV#e!3MbygVl%)x0Z zV8zB{_y@*>XkJp*_V`4KQ24hY^(ud^a`%0J4j1_?gB^%p9BPf_SZCeT#yifN1L~c6K=F+b$Y70W_75b8R;acWyec`FeP%5yQ_Z<;$8;M(=7mNPNEl0I) zQ>2f(=5^?&42-?-PZ=V0_<|1!7w%=<5+Rl|cKTum5y&Y$qUqVlhu_lU#ZmnA@e)#D?H${p?LGY$gcOYuY1~iAs!50LUM)F^< zr%q5#aNuy$}SQdTN+}He;v~+h~0Ejfi+n$DnJj z`6dsA?%WA{T>MwVVtpBZQ~33s$xp$qIhJM4>%oY2e~TXh<|+oeBnES8bES34~} z6^jkEa|~7cF9MLOXGf2uQXaq>CLCx_JOdd2Oh=WGp1VzXrQW{|D{*; z759W$En{!#k?uB`&W1B&I2j@G)(o42kX?m{$d-1Zssiok@m!#M#wMAe1i#C_RKNv- zLl^oJ1SbI=FHQ@HuN9J=X@lYm6qc!EukXCH%D+_Z?^Xs(tZgM#*5xl=WhKc8&SZ#ml=(Z>9dm;2={7Yz7FzeU!Zr~g2_r> zlSRg2YVrrhvT82Txh1}D{$di+ijj&3G}Q0}Ptu%fM{|E0boyGT2>$7J`|;I^*rV`i zz}fC&viDPZTh*($pSO<{5?|M)SWQ{L&T12q#U$oC-%iAl9NV?xfqN%NOj0DSzc0ZCR`C^o5ZJ51+15{~u)ZGdDDYitx6EQciRgb(<+3 z@%{EzqoZnQsdk_Y#t^pALp_=M=iA#Mapdm6r3n&r5Ir)cyaIBoDsf`)@1$E%0O1 zZ&=${xS8kwi1v4$>6WJ+|F=timy1WPTq-^U#fX25#5mX08}QrOkK)3m@S%}8JOf)C zJ+X3@?{h23IH$Vz-HPI6V`#{EK(SSK6XqHD$=X$2cG&v0f@VdOlWSXQk(1+JzN^yJ zp+Prgopb_gtGbbkwVia2l2qz(Gzv`|UnHB;n5U-A^k~`meo3N*-J2s+@xgg;R?6fB z`n#@PcVOQQ^;VA;)tg6a3P@p`;}D^KZh<=Q>vpj&6;v8(`k0?_0Y7%Vxys*vLWEEQ z)0eX4b+7v#6;XSb*%S9xo1}^NTatpppM`@ZNX96cm z5j753hszg2dI+q>h>K6P%^;tHiDGQVdkzVHK&1Sy(GBEfm`|jA+xW}mX#-?_DjG;L zDL=A`JZ;iHp~=V&#XsYfI=^E&VDgW~KX>FpzBtWqD;b@*3E<)u$Qr#YS6olTy)+;biq2n*NXs^88*dFM{POMphxu-Y?X;8?W-8TDXVeDv41Ej_E<(H_OI z!+p{=8et$fIhq0g>5#u<-$`TCj+QBC?5rhfo6FuWq*!VU*Hmc<+GLRskt1@JbV=Bk|^fi8+$O>ZEbT>hr zS;9sRnJ1n~&REZc(NKKYoS7MOV_oE*Ne^{zK|A~wb?YbSdcaRlC*uv+wJZA}5^v~1 z)=t7Qoh4kQkaDvlgSXDg;p_sn5Q?tuuB)8K%L3GcHSH8hkd8ot$<9=%n8veF0@?(2 z#syfFJ#rmIjD=>6g7Y= zd%k(D90XEs(UlWz`&g%8dRBDv$@mMw?s@{F_qz%oW>N^OQpSJL`l?WNSauH#hr4 z{?f$OtPr>jNygLen}8YudTmmElY4|Xy#+IQVu4(A*%g6#<7nHhkx>;b5D~&j$us54YC1GMo?P) z#dw#*nsPzw=Ql6LZhy)HRK525aM{$^^bHHkjvb>nxW&r^8fkIQhdi>Ru|+VZ=vcTw@*3`eY0w(3Z+sQ_}JBn$wzC0bFu*#ka%PWLvVqjy)h zGYSwyeiNs+E?-vjiixj}6}N)mY4qOnUSxSCr)*@y$n@+uUl=n_p=+IU9v2wR9(A+W z>Y7^8wiL*qMgouuNlq2jdih`_35=B{Q+rBi`KXWm$~}UvadVSJ1tbKxP8Cy+c}3~3 ziHht|%Vo1w5RYd;?-3wzzQpU_lttc$Jbj$VC#*$ta>HV?G@{P5mPk!Frc?va_I)?_ z{4Bl_Qv3XBqgCRNUdN85Xpo^7DXiJBVydLVcFG=0?)^l$7I|= zcrcnVep2IBuBRh-j7LV;*lsbW73%SdkMT;fYCb?8;sJC)K}U`cxH=J- zSZQD&5zN$xN!H%*a*}7DEH=mfCU_72LjHUt{WV!~$bBBItuIa(RuFO)hV&k`!XWR} zOvP)aW3590Nej%%=aC2|EcuaYPkfBYh~sx(xG!lDhlzjN;bOqARpJ%yM}~uB(j_QFTn>6taXuI=6;+!1ql}G^aOc0vWFPZuZBrGQPve;bAWK zS`$wlLXGmc2;*7S*F*}W6ET%%@s3ZOx(m-^{jNHId~N(~t#8-#i8b2WTjmzyM?4NF zL6&VF!BSvh=q`vo6|TEtV0#p)?pwf9$r%KPs1j-nA;0KCH1pBx2uQ@gd>%$NF+IB3 zl4!y95KgUsP(Cgt5w|&*t5q*kr7S4ZsW+c+=y){e|F$PdtvmI+sQBn$Wje!-%gQWo zWGM+Ke$^4xDxlEKrHR9Uc^CJ*EIo10hIzR3(NjUErSC^2CXuYe%8HJlgMf2praF_u zW?7btvD5S2a1kfo6=QF=m1$h+|PSGREC6)_k{)&{$o^%JZdRGSpE_^=`G2 zG}&0A4LeE-G-e)pSx)={8Z8K{NrLHZ=OsmqJ9KL%NGG%|$A2~%2ax%j!pL~p6CYaMeS2eaXZ++{-*_n` zb(65xZ1pTVX6dwl9%5)mxz@Ky#W*id-xtT+vWA#)zc`&FbK|sH@q()B%|i{#_FC21 zabWMXtM|6gu+VWBV)(r;&kkBQPQcF-j}@I$c!d8QruO1Pvtzlu?)!|?Z#?#1+pXxc za@}zfvxc<7_x#5H7dRi^gfZg~edhJ(pc*=OIt*||`!-JaiTO|^F@tfQ43mD^c(lgKFVC<(&iWK zL3i=8)zM*b9r1o+uS^pBBb(U;)~0PwD9BNJDWHJqZCWKmtFeZ{E_BJK7NDAb#*A_PS}Oq-zJbC5;=o}Voh$ia zxJU#3iPB%z`6*tzt-fQ*g7O`Xna=fW1I!Gv-jl}W(fOupDfMR1#oR4Fq}Jp^pwZ>p zh_z}FzgJ5Z?kL;rQDFz?F;_8{FpyQ+xF^3ms3`2^^$A^(*)|3Y!+Tc=0S0F`OqgRB z(UM8l`c0xY;JjBvR1DZDyC~u*p?yyJ#>gCBuod%Qi%+w$QD)QZ81$*pxfpF#@XSbl z#oS7UyudI$VlFb9ObU?)L%cpmT~NF~<@cR5N~YUBjNWx=qWJ9n$cr;Lxg$tuin;C1 z{S@@TL49r6a>H&AGY`Uu&`U~dV&wc@JcT4qh)!;$)KtpZiohPn)l%FcB@fU@LV~`@5`m#-P zDh>qHWsvz=p_4r7_`ScloRR6qSik$)NH7-~h1%mzjrYpCJMRgq0y`frKfRfvZ+huh zEbwygt*v-T$B{4wch_3>UqrkP2oW#kGz5aiB)j2}r%rpg`%y4q9bUH+&*9-RKRwXU zEBfvA0$nDMF!)uE`R63swd4+1v~r^NC|-GyJl!aEo-my%rr$(e(rhj)wvHLr*6^Id%BgvG=}=C^Y+Po zwMIqia;N)xR#Z^Qaz}@m=cmH{?X|d=lUAs`jT3wnJ`twdOAbrwa{{2PnA`JL{ScE1 z;moltGU8`MA`6FSXtl>Hhdf$&1yGsikuYOz3JAK^1+!H)`adU&tO7CTTvrj!POhlC zFe?E`isO#BxcuIOs~kbsfMTB_^>)gMAd8v_@{J!_!N*-dCQsKbb`5<)0|oH-ju(b% z^K-5e`&fP!K<_}|*HtAM@SR>UL`8*KS6ev_6G4KpwFYmezTZAA3MV*O;JF7*Z;DOt z0;hQIvmz%;{6P0&gYh*650&Rj2quIn7@-?-P*BJj7=Iq?%+U4jKOp(N~Vc1uUnBwdB!N3OHs{0gl7!i(BzX7?c!l!xBTTM^Xb}R_MBU zKje-XNo5%;W#EWOlZrBlSSIhDci)GJKSu>|b6_JN7uURX@{zOFXvQspa0VT|&gDjS83M1Op}Ycq-~oODu=(o~u?~Rl6wh zzMDT=#zI(!tC%^LaK;N>o!%CT85f9$Kd>5<7L?1PMo-w%eRUt(`XCk(M)8SL{(xD4 zl67NHO1aNl{ki>mQ|%vuPK<3sxKwws3_LB{R!~A%)=zQ^S!OJLrTzY_@K=*=`3>i@ zTD|_Y0@9pcM%e1jJdN^Cz8+$NxXd(o1(?FubIwjzgP5U21=SSFYLWz!q?(O=^YPP$ zVip3hhWU!7rY zx7IZyPR~Xu@}B=kdF}(|G#}lbxXn`|{Ka|s>-ybRHzSL3T_$z!uS9rzo{jR)Zjas= zjKL4l>DKMSebsZvf^!;Z6O%Rt%tRPfVKr?*nTpcNO`pa0x4tbB5P^bLgZ(tMfAnw? z@=D}B*DFF6@5bAh#(afxfma#1yXUGOKnYWuL1SFzD%u)LWBQ{fQmHU}~cnd$H z^QrA^NQWMouGV+&Pfhc0lu6@ANaJF2$rsP?h*BJSZ#8PfESSch%^8!f?+{~Ob$Xy& z<;6dFm_H{QuFU&DeO{v0wagftR|=_vwVZ5(=Z+kw)kY|&kj1u@98s?X{1Mt0M^Qp^#{E(4jwKTg1{Mf`OA%DRH z$>+M>AJwD?_z<9v?)#JY2MPeCf2}*GEBa*(%cnG@H~jd66?u~f2Bh{U87JeN$lm62 zF2+Vc(cSlBQSf#t{VG)2zWj4l?ZA2#jKV2Vx`&b!J_?bE>(AQi@A%!czY5)@>=M$e z7Ikdg6Y6vi-&pg!# z1+#8Ai00L@48O@Q!a{$K@XEEv1O6WO!)?NAH#Gciv)b9wR?0SwsWwHxg}$fRT8^73 zNm%MVlLAGzuTi2IL0_fP<6~*_<~5PBB6UGI5#&%#NcT8G?RHN$`%e9DqJcg!0&%3OoUXuutM6Jfzqz8VykGZEv31wzRiO@nqE#Vyhjuzg zJLSYXo8MPP_Et$-9$^CK1z7#=m7b+&Ps5^FUrw;9%5z!aDTbfM)JSs(v}9WHEQFc4 zz-VF4@X-M#oTowb=dSseOX$y&&4udq+r-BU(Y%H#mTC~Rdbss9Ng(5pG8+dKWkBo+ z)6k>lV154JdZbu@$J?kR5I=)3%8;Zh-Ukn@X6%9wYUv!OTxPSg2PJG+*`syp`(q!r`QD=rtZ+kzZ z*FBM4ik4MsFw9>fg$8mpcAaapW zG+UB^R+Q(#;R44!>U``|-Z9eDfE>|;EEZ`9`mV-in*fxOw4;88M#H!{rDpZ0g|0Uv z7KE>MCxO9wmt)lq_2vvH%We|u-Zh-OdW_OztC*`}*07#6Dn5LARA3u$Wy_}o@QX6n z8oe?fs|W!q1Y38ndoUJ%Lg^p!d4!jZ`@pgAgCZxqoV8_d^?NlUz#-EG#Z-e>D?|!v zt<2FI%Wy{0O=LD2XC>p$I(>hnhHsIxvdL!SxY-vPsjH3KZH;AIHLEn_6+31R49s#-Ip* zvL^r=dE)HkqL8!6wdCVRRp(8<#xF%v)P(&YJP3Amz)-@-aq%D_Q4*mEvpRITlY06o zMzM4wkKB(#sZ=43V!_xWAIn!mk>Y;T0b@UMy?Uv0;V0VNMpBG>no8 zuUCN8YHXmM-F#Gb$aZq(joo1wxZIHv7Uga%geHc!NioGG6u5d{d1Y4SeN%rL(Ct$R z>5!eR?yDU8b!;maLoc zuiG&}AESBsjb6NK2p=1$JIt`A!A5}}ia_03PaEdQ{ScQrP?c&avI-BOO=mnsU5S@2 z;}3se6pM>NWIe6lu9j8r32V5G5g1hgHgAEhTAu zebwfxPMSlfWUznf7ZpU$kr-#w@l{I=i#=srKvzo+ocsf^@SsVNpsdB+^Kh|=nZt6t zljai}*x1-O+Cpo2C+}0$iRELi@}sK7C^ws=1o(ha@siUuKg0zr_-IoJVx0cI1TcKT z(C*Z^qgS7nwYBIY%>CAXCUhRlRTxynExJ1Y}`b07;f04@q(xRKm^i_eA zALg^kWaySvy$y@_TFN=!hM1SPMOya%%*8UO=>E zp^C_(w_cDWGk#u;XU`gJa7JDLRR}{~=WNi9#}@nzjnCaIwJKQ95t<`!EOc1#5eixw zIhCE1cx-qp2O|}}6sli;OY5mB%t9hnb#QVvAiD6td`W}8q+wym!+V3PdYl>tL!Te= z-F?J622<&Pec|!~>2s=5Ccl)jXfRoR9dyc*#6x{$i6c9ROcm~=DCjtnb6p{#DUMno zy1Z^!2umpF<2xx-ybzYScECE(lLXVN>ZO(Fk;>8~bEqgSkE1dcf&t*S- z7D4=DO6x70jm207eYj>)e>npB#;$vEidDm1~X8jI_7rTTPVv zi{l2c27`MxM?(qn`$!ii{`ck9^w)58OSGE4lf`N#nb0~tpz54NW>?Ur|kNL>cb(_Z~QRMEKXYIZ0pl=;hky+PcHCk zI>WIr5_EFRejDME2~4!QOXs+>YA0C5luU zG-n3uwrmoThanbF9dOBWF7VIXmj#ooq0xHG6>W+yH2GvL>m*-1>e78tg#Da+Zhh?^ zBCBOnlsLf3pm+@@!oBe^ULnjlm-V?uR=sws4eD+n>>KvXAo0zUr`A2OhEj69psF(& zd)spQ*aV~MHEq<<^Dh&xpGoB&4dN)K=y|cqcnD7Mrq0L6^S0tWN9qj~5yKf*j+a=w zUWNHkUS4mrp)~pK+T!UD&2Avvgw@T7)Fy!~@}u%#Ox~?PeCcD>B&e2+OnvKk zrtX;`IeZc#l|VNRGAhZW9CP&Ew z?&ZmsKtN|j2v1pkiMpSZRy5vy`ukXla>m7vCxN*Do?zJ(_cf=UT)}Ag`-b>1pVb1> zpDIQp`_|#Od;2Iq3DCS6=!zk5|6Tnpl?G)Yx$pXo4e|5Z2bUlcB z_JB#Hx|{@8woq(FV|E{kD_#lzU?JXp1R~C_3)`g=fh?3{PB@%W)6eSW?nJ~!q&oIc zyu%y$8LyPfk1PFGYb(z|7i{_dx(%P6mfe*(QFZ*ni{2BFOvIuwFzxvT$(NtkohTaS zl43Jf`v$D~`9FeUoktsglroLQiv1M2F-d`KL&lN_qI|<>?}wkXP5|{$ey#fLn0DKR zgtfNzZh#vygIN;m{^}K$wW7T5?)sC$f2j7W}5Gp zHxG00aDQ3yQs!8`&?ptVJPt4tb#&gawwQYAVs_FyRTu7&+R}M zsN4973niMN)ucOcXjkiE;H1W4B=x`<*W zd5Ip?6XB*>yw{Bd7)zjZ(!8ZRP!jlct$1-htWM~omE&2?dP5`vgAnDod=gu00rWv- zJbZ(pxu_pJ+r26hiKV@1aR*}Yxqm6*C<6FMAWh6)Oj5c*bjY*Yj2=tw)!;@{KmDj8ftN!2yEhXPJ6t( z@pOkr)H_6<5DCThwI2}$b^j3=NA)zndmMGkoAX)r2H>q2!e@++P+3tzs%iCL75u9uebFZb3Hc~#9m9Sb5 z!Z1Pbu)u?YdNb|uIAY&03PJAV+rxQ!TbvE{e`q0?!7x~rm=~;GbkUt7K_40OHPnAq zjmiZj^LCGA&sT>w3+Ln4O|T3Bg))8+_aVb>VSN9Lva$2g_{B@~)ZdJ;z$}E{2TKN` zwyjv>{yzOHfds9Y#ID_m_Uk}`j~@%f-aB+UewF(-xAzFL z2v81>Y_H9x3=5oATxX}E!lp=t)(YJ0f9O(?fM}q_C(2^oTofJb{y`IC1X;4*N!InY zc;3Oi5QZK}hV5L>|BFP1O%AO-PC;6q7-PckY9>^tQ1=12<6y$jc;j%={yYKOsRND5 z6NUZ%!TFQyl==M)2^;VKgF^TJN9mwwpqHn2V%BRJclXBnjWuVuK4c=DJ2aM=1 zS7TNEP}fT(B7Vx3`LhtDV6FT)x9LV?XK+Qs_*DtBVLmGKwCsZ&BCSGvwR2bCMSke+ z*>YIl!?oTe;$Pbk@fLzZAwLimBg9nWC6Y&^|KiWc{P1|y?|dVpBSrA}qsP#r43MN> z(cXDb_Wme*&er+avXoULN#%=oMh;51M46hjO8yW-Ney3Ov>chwGxxDk*Iskd*Vrqy zPVn|=p7uPxnZ-9gh?&f=3X+)%>HT^Y91tL36}$^epp!0vlnfN`}q%<|5Q#GvfyLJ@ z++L&^hEG-rr(ag4tCT|x4_%@_rsw|uc%-ttprFf-r&ZWm3lk_=G2O)Cz$}SPyuzST z)?9q3?j6Ili003T7cBzkjvgh)x!`9|Zq5~RP7_IrArTS#Re~Or9=T7tv&WX*oPdvH1w#hdg_*|717+j zqBj6yjcyF<+(+Cn$bE07C>w{^|7M?(uIJMdoNpk+Z`LGqhg1!A2LA?I2K(`fK6J_o z`!jZ2FC$SZuKtanzPC31^3dscMgXT>q}HOF+NtYH^^~#eTJ*kr&5Pcv$l3ODsrffR z%mWR@Obftf&@8I6rKQ{S5G*JtjA@KUOJE?C+T5kb(+fFGn^#&X`N0F-F)uiP#B|0M z_#T>wBm)waF<*HrC+a<{u%|oR$+RF*1ac~&=kD&EkxMWPje%Skv6cN_WTc0H1-}PW zhMV)Qgn0z~QJEeKMSGb_C67}C0IJuevBviJS7SP9B;Y|5IMs3bCH=)7cVk-$TL%6s zT7vn(i1++-kU#BgUK@8#uaio#>x=aZuMyT4dId&f5o{{#Fw6N^dE@>kZss6ZG z(%a^g6+-J$L7;||q*wXy`y+>+Q@y0D>ytQ?+}alxRxyH0;a;fM5@SQWdayhZSKUJf zxX|mS`0X)*T#EozbaMT8Y^r)fcRQ&0pYt#KH^pBz0W(fF0v5~Y z3T0%Im?Z3;Gy^mKsah$eCs4V>eaJfyertSsxo+&8$csH&AP^pQ@a6E`swhz4`)>Q& zRDl=v=2%!!-B&s{JKuB1+}q;AA z3(ksb)Dp0pKv!_uV;F;kUe-dJBMdcck{_K^7F-ePN#k<(qod5jf(Ncw{Xt}WB4!dN zU@0(3bqs$Zo8jLBUk}0Q5!!Z>1BiT+7e5qZ&rQh8c5On90`CSA)+?ReDFSN2%A$aM zY`D=&W-$Zc!two1eCMu^_rIxdYJ6}3z2e0OT*R=xy1Ofgh~NZtTui)#B_(^W&A*-ThxL42Ei;>_c zcw$Z%OONa2&zs;xfVeSs;MS03 zp*QP3)JfojAq$T}1oPR!%RF67Rw4w_q~X;ZCZiZrrP?)&?RL)ai=#v}q)6_$R~#9p zMb733B@sI0OfdZ5QjUHwG>NoAkz-L>k=q zGZrq=E+YunH|%B{V(0|V!Ep(?Tw64|`wMOcdp@4DhW8skeC2RUCtURoqiiiccQg|x z=G+A-{l$?&@UIW6I4hE|B5g27`;BW4@9IDm#O8GJtyHZfPT6~|T zHrwL0w6=hj=3Pqh-joTa%m|?eBifT|Kt_j51nlFYAbfnWnPdME&vIif9hoa{o}`b6 z7LwPl{F(Z6&p)_z=t7d|>)H}l?_jiP_cpt$i_PJzANqjLr9ER>!{bSa>0u^yzz44@ z&9@zSuo4GF;efg6g+AP+$Fw_LD-GHRe6iagwkyAoiF!FBP1|lraH*HHP}-+qAH}i~ zpA^S!tDcRPVUWvJuk*lbUu(=eIeK`MJe*a1y-N6dFZf#_`4ozvgPXg1x-H9f%$bj* zTnM|pxgZ4czQ2nLDOyZ-!1VdxQUxYq&?v5}sFixigJBg|Yw=^C{b=XWqeC=UY5;I{ zSxGW)*$C@Qd{O}n27FncT5NaC zG3K9&!|s#5I`oW>b@}Wz`!~dA_uqZx(vXYfSvE?4Fl-|Z^M)^_B;Lg`SQ(Y);QYn6 z-q`HPKg!lC#~;WQh%PpPYjiu3WPbooUH2d-Ddec9$totAH-5sXxb#1ZDfKq@U6U_< z6mpXqJI`}1GaFF07emT0Wx_r35ec~v`9_yh9xS8*Ex<)yyxmR1yz<53_ZpSakH7=J zt1m+IUx)^E#6IZ76YR>4&?_COe#ZjuOp}v%);u!wKBKwN65TV0**umGtvXEHDir?Kc|yzx^}Oub;Cg!QhHQ zs~sATFC7v`x>_n*uuIj(h`aF@b@ieu=wU%Iye^JT?{_rRnF}QbF`6!|9)6Tmi0mVi zB;a!zRJv2%=3XJ7pIc2p0~wH4=9T@6@LFxK?Zv+!onKIhPwNl_+@b`BfE{S!sHc{| zVE}&bNy#uWz?8?JAzP3VUq09NQ%Koq;PdTL9=Jhiv&*MNg|i@F+-4YHwWZ5N%&UxP z@S&j?Tv^=g_&%YW+Gbey(e=T+I`q@Rl6xK&6JlE=TEGX2lQFw!TyZ1}00IQEHEyYx*G(p z5zgP;#^}NL#!}U+ACxdWN8a2Ql))eEEF^}&^&3opx1`7Lnoajy22}B%hT+NkpD#Ow zc11Ew7YTo5>M7;ko>s5z9Pb{+ohJ*UcKizl3ZsAu6bGTxxGZO&eH*(!Nl^t^P1BPn z1KS^0N`JB`7K70h7fUyZb-WEv(il!W&!xs{3zEq0B>rjLQ2RelY~k*78o z?obk}i-E1u1POY2$z$f4fjzxVYCq41eflL=LA^Bw7Tk~5*}}zX9FoY-5jX?C0Yj|} zHvYS7OzoZ~=ekm$ASa8@#OBf?*0fA(a^N)lm@@(xXaMfz+%&{k%qO6z=fzmBe=?lu z)NYUuf}>c)nQEy3aviaZ1LBK%J`F|>OzJ3%+pCpm}O=rq0ZvH9gmSm$h^B^A% z4dI$?9~HzW7*#d}w#6CVp1UXc(a+&3q>q5^!rcQkM;Zuzc-b>s=3+DUe^ZRWhGPrc zQ5An28{?#R3@Izpr^7hYRHPAK*?L&g-)UC>DcC%xp|U*Bsa+16EG`k3e2(7VQ5_vk zl3I2jyPEC2B?BOol!MEbCx0|Ta$1WTd9#i+Q_e&FCqyKDczAd;RiL@++WnS4(DBrJ z0Xo?Eal;aR*u=Y`nW6w9BZEXk@_G<$GLRxa_j2Dp3c7hb@*FrgmP%7oPZi!GaXm*; z=hehu@~oP29%;nvxx1=+0n7c{26`b@qK;_K6^u+0F$`LytF_?^NZ4kQRfC?80UB(@14KnZ>yPJ;$}@|(VN_^vK(aPlv` zrq|}yI#Qq;j;g;=E?(#122C~6Jg|qxa?a92O^Aenp3V?h_T;-+%sYR~CDvex!8FrZ z)_lQ>gbCf-{GApn&XVL?#Px3yO9n3o3~u*T>nHnPr=&!Nkm1o5)Brd81&(>S!GXpy zY$>HWHEzwpqY2EbC)Ny8-4WluyF1g8m=V8_v|`);bu?Q4JsJx{%@!*e0uz}TNRyb7 zB~ntT@8{(lX|VFgcsvEZi79PZ0I~jpGY~wxFi{Z^T`-^y2AN4#f#@_Dro;g5(5;4) zvJ!0S+`zg9vUJGh%WGtZ!%?v^vj(px&63n_A44<-!1Sg|X8Bz_jPb%jbWG924Iy8k z_Y}waMAH2OcrwU|P(Y^%_0(tRdt*r^nJXau&cK2Eut}eLI}WWIA(7~)a$w2}K8W44 zfqoGl^y8SS`_3rXP(-mgzBh#kTmgqB(cKK(W~MfD_g*UL_*@zR&VPGXS_2UV8XRJ@qHehFnkwfg#|KWVD9{Fr9fsSrho3vfAihu}g*>YCgeK zy+lvC7%laV%ko=$05jFj`>}&9Z0FFA?I9Kr#qOTrpB9$0&Lgvr+*3$Z%YmiNJf{`4 z*ed&`8(_^)%q8D^o_5FKZqzl68KF;1*5WyRC|vbp$lQT&;}?AA5w;~a61H0#89A<3 z)6EZ4=34Dgk!`D>!MS$)s#SaB*)T@RRu_vqJAS+*gEE1lKj5Vk?*hf|nE2A};p|?j zIYpK2>u)PYh4h`}&RQC!&$qMsK7bymp%5jX8~6ghJX-|TN47N1W>uPwBxPx3VH3FK zkFC+&2RhO__3n1V&;l#Ybm_sPlLk=$3MR6E=Ot$Q&9=Cvod5sGQ(=sM--cOq%yad! zG;u5L3T=h`iGFM?gGxt(diQp@g0jZMG0RN$c=ouhs?wpWNOzTlaS20RcXFFM0;kW8 zlVIkU`O5l7Bp36MEC<6r=eyK88E39389@?>R^v|V+2}kNligMSJOY(=_w_{iML{ga z{5CZbNl0nQGMn{|nQY%fblvzqd;l98Ta#l7Fnr}+)9W#KBd~yI46}NI$qT>O{rN{?7s=~r$Y5>CJ%jc6>Kll&s_3`=O9r!|6%)B}ad9U0A z)d=~QX}haFEe4Jj-~?h+Ag`P?bPgZeGCbbkIUX4t zOuPE$Q~`WdOTbIKne6^Aw?}%gc}b;NRi7%oBq1ZSoTQ?XU+mK-47(sxu^?h#6t5}X zS|bV;Ne)=0EVCtpG;&l%)5Q3T`uWRnqr!)!V+!Gu1?9JFVTlY0eLD=b1sNUvtg|k4 zbdMY6YLYMHqX5ircYXIn!%@2<%Qi53a#e~s^|I>6)cOt1VM=lAb{MQi>a5*Q|uMkOOjulvul1zUOz3*p8iYo65%Qb~x3T4Yi{3b|>GgY42WWT#?I z@D1x!p+@o8m*E-oJ;05s=K~W;KzZ$gfFrno5$jkl$)GYgulW(rn%Cuzscffjgvic% zyW~S2v$Fm-$uh^tup7gB9J_ZyaiA>?!1!(!5$5oE!~I`L;S=Qs`(H_6v+=GidK{5u z_L34FVc*CozbF*8Em+A6IS)(#R575N-lC>s^PPLsyz2c7mPaLp#R}1BPP}`3JNZ(~ zuAU*9FH^TJRz_tJQPCLhE`nZKLdiA+D}SZEWj|zu2P6Y4Eg1w}<5tg;z#~e6ZI|sV zGtCwx;+>Fpn{>&3)S%Pq$_ibRibN^6?0^(eY>fkVNS|x;i8G8Oy5cbuOuou5pOIYb zybUG{oDIk=XdR`eL?zeA?0s0>QktXGHsT+DQZaEW;m+nqxE1@h67}d{Iz(mboZ{dp zxwC4T%asf61W@A?vW75jSkh_-1=__ZB|y^=2-;SDu$>N_tHiqG^e!`FAsF|d$Hn}T z@q3M>z7tszCdcu~uhID$;Glo(Rx6NB3(IGh&IZf(lW{F)1|C*OdRu%KY|^G9HhjHN zRdzX|M^bJ7T_b|b%!_Z{_`kiDqSumQG z$7=i_0*uJpqMOegsh}8b;1$Up(&D|CIJr{BGOXfUNXh#GcCXT@_>^tWwh#&iO1?HG zQ^s!!@AVS+6yp3~-qaj+z^kpnrrAcL$duYz__q*}Be>n(bKS@Pw{L4TawOs985 z%uk*`$J{k=udt^sL5f6=1}$Gk`&mmrPYe7R?g}B8xyXr*aJnUosRZBrBdCbdSKM~w zwilT}nZ~=?l7^vv%t4ew$m*lH)rb6B(+U7cZ(L{%i zOy}ywKUx6^2%Cmcmf(w<--#9Z>T`ZbqTYm^$Dq6N31k?SyRU<)q^x3Zd&Lv@u0nIs z9K$jt{#pdX7c~Dlg?dVyzs<1f_Vg2C4!y}@m5~q_Zo(f`Nw21Y!PH)Eq(9i3Vy1{( zl|ivwNda){JR&i?qs@s4y>9)NBo5tC@g9LL{1X!-EL-$<@{!<&ZqcTv2^&kkw5$U}ce=v2ZiRZ+_c(bN37Ou+80v zV3_;P0&?=-qkqVF-WNrV584)f<;&q_E1BI@%51e+jeYWim*I)PIQ_1OBd7qckTqYo z+n#h0hjy}(oShE8WoVX6iHgxc4IACA_R7zhuOW_3wIFgX4bzS?YIF66$w5sA7$ffe z{5F2Imbt?>zV-Co08I;yw5abvzqY36gUS`ljkWA7rA!)z=8SLfB^vqb+x*_EOT2No zTB)G6rW9zS!cR&1$0oj-doSZiZ}>y6_wv|y?VnJbHtTaFHgwtP-LoV_Y$+EZU<<9r zEM%-eQo8uSIQ3Lj&vS8^Nh$l^ZqR?BKEMM#GbMmuw4>uKz(35>!?Tazj=i8zC+@vB z&9RQ)j^{Bcv`}<&cNk~Wzr+MhbtzC)3KR9*M+t-Gn?Jf+GFWB7Y#EJ5ma;3?6!>)B z#fnri6T%)hq5Nk^*VuicvSBRl+r<3xFY^Qz%3hRBD?XY#f8W86*w7esEIae$BdC5( z;sKE2@jdvxTHlMqxi^OVF-gXI>_GRUDNY$o{z{_+yS)f1`((yX-P7X@n{s@`uifB0 zY{3)1<7V6kF2_RQq<^;*Jl`^jY^9L7S(HGFf1QVaBNtTj+}M|3RN*BmAXlA+&!WLHggm^*_(Ye*n9{2@&^$b^rcx|9Re*;;(5>al`KN z>HmHy@K68${Btu(;7Q8Q!*94mdivIm`84Am5?t?2EfR3CyT2&}Uy4FjRz7*nW6Fez z>|{G!j`au%wRzAnFqJ$g_(?NkeA?ZYz}H%gPsvc-!npkDoCiT_BO^2N)2$NhAwF!& zmEdbB%qznx^9ax;)!HFNRUE`Imj#7g%=WJ88XT#U$;~>1Z9B6}&TGH84$(~t+}`}8 z)n`#`i9dVkq(;gsYuB^Nn!obwT&l?>>0fRz{-_T2YQ?tBsTLk(%{cAH6kKi2q1SU{ zwuw=NZ!5#*-a?#3v{AVU$$T0U1ZOU z`n|q-F?pZs2AegPhZEl3ch@Uyw4hf290^qy?PBf9ixf!;7G7H`9apGZyuj&v8Z;a4 zGCu1UH&NfgfFy5(dT?gia{pl1%)xG&sEj*Y+)q*I0XsMTi&jaf0?H5%Rh+p4=~u{2 zZ~}k&292D4&#>@MU*0mE^|ObJU`KCBgN!vf&lOsD+_bEsAmx{qYviZnz_0Ug>Lv1# zVQS5m2#+CsS+yrCI{aSDv4xDQ;?jLwA{IP9AkGH-rw$W<} zdRwFt(%j$_JHI3OqA>>JZ<6yr@nC1Oz`$ESPwu-p|7+_j*=xOPXKYYf3-*XgbU&Bj zqo{}t80*n($D&^dQ*!|}57hjptjw=b+nNJliKtXtAOtT zo;duW`+GT8-*=>N`CEm5#wTK4V3|NtK2Z6_VEIW+h(fNR(dpgx$?DZQ&C0*Lp%Oz1 z46Mit1G?J(?zvV0(7e_giHzZH*Vo6lC7!R=F1BNRIdPEY>ebO)3W)suHMMH`^3srs<~vm6Yu&u&q+>!02-muMb$Vi^m&ZP z6@DnHb%!1()Cq~gy<+dE6I@zB%>_4?c=j%rMhhI+s9yoWDK@X-w1Av~5tR`q-ALcx z8T_A@d8*hlANvV>|J%SHMF0b{#juZtpTYbcKx8s`=p1+jo8F(>0HD9eLV1*~^7l~8 zzOemw1JQL${tgCe8C=ZgJMJCnD41S;W41%^V5^1?gnQs4ng?Moo7zUy^WbN?Jm;0kGlX)v0hUak;4^51w=acdxdP)83qp2e5_%LbBRuk7BMKSLwwnEm!b zh_7i~_}-X-a~4uB*HO5Cu>s+hFCk&B(%hycupFJ46TM%-Evt$a?PMvpdZjhmM_Vu{ zE5eK!KBuEDuUEC(>ddqbT_+Y2?E5`-O)7@gh-`waE-~o*ImUXd#Qz)bQr*OURi1oJ z(P%BDIMiXUS0e$kUEL@H8iNyQ&d`=Liss_%oh#G2vu5P$Dts&ETX~PD8){}VnP4|x zoZ#j;#p;=jYP4G@smsY?hw46+Z}klU&=#e(vdyUBXxsgH>n89@8e8Z+k$=h#SXrdC z=FR5aPUS{Vyq-aN_1KDR_*#!Id(cE?5ha(!F{oQk_HfY^aufjD@O0Uq;#~3s$p`(l z&g6Y!O{>dF-O$_PASV6{Cnn~jGP;}^y5nj8Z-Aq&#cOMs#qkkAINm}{WoX3$Bt?M( z_`6IVMb=$;lU(=O6-AoD*Ls8Ro1M>AQkw1e$J5tKzBVendp$jt$VQ|2P}`rR@0M9{ z?fnh9{el3N}hZRKK*i(7wBPe}SBg8)>`WXqHYh-yL~S@5`XfwySUS zdBm*}q+?dB{pIb&IrAcDp^u@?`#na$VlV_)47#wes~fHOt90Nzsvz$HO&9P|Q}%!5G-a zXOHdYDF#dtEi@&Tkbj^E2zc1j?EI8X?RFKnU6GPJw)46;EsET4@W;$S+woMsc4 zTDsI`grm{qk{dmH z2?{-Xlc`m|nVFV5MtR%pe7v5E4rR*tQ!!mtq*XDz_pZP{L(?f@9@duk+wtMv*e>%F z;P840f1Vk>o6$xE#W*Vc$c)`JJ%KCqn921#$GyvbPB*zkW4t4xkX9ts|B9N}Y?M37 zBojeePKY$}6dTgQU1q`p*};-{_tX<8c~31nvG4IyXPIViR07baexC*bkWXy{e*?q0 z4R^V|#T}jMxUc~XXlu=W_?M24#&FL&n7RlBA|RQXSF`afw|WFAl5mgEcx!Lag@tpY zSJxZ9;KEkEW@6sKWy9vRYK>C$97IR}QZudY>yp-p*_wSGli4L%vA%4u4yZ!Z6#3$G zLDxk&Aj-=}LlZ2YnC^QF@!~>AGnO)w$Eq6-$?rF5$pb0g(0@=EvuInr(Ho=7=t>=V zmL%ti0x>(a6^_iuLYks*P~hYcufyCY`2S?~B)?1fBsUzHvP}szT6{o{#IVnU7kLn~ z89Bs_fnD%p_3c$d$3g=yNd7h>Xw|Qxzunn|U%bT2uDbZ7wF=|Cg!GfelkD)_kwEOk z@Yb(H3}oF7YVu!ueQ>r7MAz4xA`CPFhDNq#kGI2QIlVI5Phirbg_|xA@v<|zJ(Fvk zmODFy6gipwN6knk=l)rEMT?;L#Yt8nFJ;9v7Rzy41Smk!(LYrrEFh7c10g-^D~KGks6r`J2x){%5#4q)rn zVsu<8ld(4KbuaAd@)AwHTczZw9Ia4VJpx0-TWdc6udC1SrJR|~;G*rJqq)$dc@+Fc zpnuV2A;|EEVPGZT_Ut&kH)~U3SmwXtA|*@r08P|5y-9Xur|z_qm_nAf5ILovuIH?K z8}mCye)aN-2Jc9nGS_E?a`pX%@eiXXD-C^?0KN%EOp)B%aOBjGCVzHtXHhW$uF#_$ zk8&rm&bol+kB zBeAC2qOqRDW-Yz_=m6hIT@ypMB)9<{MMuNQyfbR(C`6D7bD^KD*Q)2oqL|3vupQA@ zu?d}6jY@fH-b@J-M_Cz6K5#IYL|vrOc&>NHS71QX_Q@pi%mQw!UFVpS4d%w9llGWM z1d6*_r=VJ$zyPUb77bK0eXqxY6e0Hpy*G6)U^Xd+nP5Qs{p&eOR9RA}ear*bCFxEriON5P6n6>&rDDaWosMkPs&!>a-+d3ZJQCa3Q?-`#RpX=vj8;@m! z>=*-v=0fVm&c}LFWX(hB=kWf0)JqB91CbZM_@^)saVH!C8Em%7AE{LP{0Cg2ORpZ$ z4~*8yLfplGZiqF6B?$Y6f-f7dcj;7nSrF24n6VALgWWn}Lq3UPF*_3(MWoiR?}Jdi zNZYBX1qAMk5zw7_RCCFaUJh<%kMH-6^8sf}7@x@uehyV!-{x#1KX|mbuKoxRMexr~>cp)xxWrK1 zT9zuSoN1L%UFP=C?!fq^nk0-~5i5YRVsTc3%x=u2YxH*4KYwNC2f+9=KZZ5}vWv{l&RIH7SSd4kCoI=%yX6}O zGOAohKGN&Vl&8PtEw(w8wB@bAURi$Qo{n(cZ6V7r4U>0YHT1QJIUp*>%;tLReI8>G zaIy#hq}vtI>C@7{+Sdk=D7f7-*O|`^PFkP|Uig$~^YmN(+8pCq=d|f0et(m&8U2wv zQe8kvJ@U~MgAIA829Eq9Eh;*|W;hAOKN6asfa*X5v;Kr~s$VPd+jxP^;9h_0H)`NxH$(v2gl|x&tC7e=Tb#r2gMF1hbeBx3EbEsfk!v72A_u8s z%kHsl?PaAa-aKx|Vy5{a=j!Y2>w?Z{W!i+uoj>r?uYGTKH+^_E=(fED|C5p`VpSBB z^@TpgGww@Dj%y6#{uq|zZo!yyB&Z#9#zE?&%`upmR){DcdJ(xrlpWo%Fm25R+m`i( zL(G#x&DLZxv|oDq#R;+*rm9l``MHwathHLWFD-wx!lTTl7t&X$;jAyMdfS$1A&A5@ z9{N2Z+p^|`6uHlL2~97@gq$A{oht7K${G$8YsVX~#N;WyTeoai*dQZ_VeZljWjy+L zl)~<5ODs4oi7|N*ik4Zw(iFNf#Lk?r06R!-DqmlPpeg{w3hcKnnG>xI0e47Qxw+IM zfC`CA_Jn{bVk4S%_abAui!{2)(wU~Z5-(9XWTkK7nMoBG_A~Nuph=KJ+ldr1jA_^2 zEV7gYhu)G_|H<+}7uhP$ti5j{x5sKOopHEilSG+DxteQQ1dhoIVWTO|R5DjIwEr_V zrYZt(Fa)p3_{@5UpT~fp>HE^;#@Zh38y5u0&FT)?StK-pSbvPaW!A4;By2i!)V3FF zLXf}xvc}YRtL3Jpr=T1waR#2P5@GI0L1ysu)?g+-$zpnOz>q7ESgzFTH#NngPq;GI zpeUkR`du!r$#cZ5&V28SE$^CHmj1I--we6&u=G2^+2*QdF`;%y_@KM`WS_ullb{zx z7RN(D0AT!`ds5tdd}ovbTIlLB8rDP6FL=!{W_+vge&Zx+x)n1U>79gvSe3_^6G$U6 zY>+4BcSs$#ZWqeR?Y&EI{T4!}L6~QB#Nx$OTG6zbFd?TpwX*RekQ?}F919BXoa+Mq z5>T^v)>iTtG?XfCLCbS4JSky_aRZ|JFdc4*rTAo@U|3CQ6a+xgYo? z$k#7cC6#W8lPW3RS0A5@GGP(e;gcwge2&zWf?B|FSBnpCz3MG;%Q~$DDmEwh{OQtA zR91d$vi8Hn6|KG6aS$AeD&3SZGbSR_>tpvIT@J*DY}f~1YuD3ovIWRgjojneGM#R{ zYx%J+RP1ZNdTuNvl{yeXf@M;zy*yB4Mshm0E7DL%4GVS;zhpDS$j8M>FDtcduvGya zEC_oJwID}d(=TPnUse_SNhUVIWXNu1&$J6ONmi&!>y<9_pP_O=&9}~$5GKHoyhJ>d_#WgkWgN` zp4626q869aEgGX_uFGo&b(=0jy-w4QrVj7<~ zzE?Q7uW(&m2OlX=Oi$@-V{N19B=0q%~Az|PV+pu*r@UE!iUbG)ll6ei74pn z^lx71+m9+W!y%-IcPhRjhvV=N)&V##xvm57XQd>$p34O}s}@`UYMFS>)hK?kJ&Kr42CP|nvt z^O1!rzx+=tSl5w1w_$zsf5eYHX2n{mv8uy=`^^Vged#+Fk9NkxP&go}oYNyE7c85J zfv!B2c-z}cJ7n`f8y_02@yK5xAFg_auoR4AR^cN)dH_MJ&GS3$3oQOF+46pVL{P9U z1wm_OL(^=XH~X)(R_(Q8RQGXGknZzs+nSu$d1gKV)79BZ&8(c;epJ(?XwwtY?Q(M8 zcP|8>d8w})f~v@6MkoC3RAa@2+oS;v66AP~oPho1)Kk4L4)V(4_ZFxhnw>IIBa92d zzeIYeO@DV%g=x^snAlFUJJf6n%K7`KUBj@&UV6sFchA|q=&!qG99M#p0~zI(Q2no$ zHZJELS6P19--z>MEJ!8i^dxp0*{VT(TD@9Ivi%Tc!5^Z9y2r=dO!K2-F(;L)S(xlW zwmV`=_QLN0S%)qhdxxc*nXH%b$oD?zBSN)LLpXx}J3gieY0K#d{3J!&4PC}vV_#G} z1Vl8_H?%ynmOJ&+2S2Usm*pn1nxDl*{ZZH^=O0NK#&IssHN!>09 z{t0LQW1patG)VaHbcI-ANgN4L^*ne6U8%5L+v<6Ym{xSxj;<+T43|J)JBK25~Z>E~Tr* zTV*gOi<$1EMLyjg2~Z3Da_nZI&8QzFt^)eLy}w)p z2Xsuo30b>(Qpbb|pqYYIUoqi@(%yZjsUurr85rKW6tqu@V%QMp>{Bgu(fNh8o>j1b zQvpYggt9r-PX_3nlI6XZu$Xo7P*ONO7H9)cC&JD_?a`{}jy0)r+wuMZ*wr_Y zw|~fJz2oTrMNYe|Cza6@zr+hzodT+12*wca`B1k5MVjC8r8;3HG=o!gHfHF0^m}YF z&&P^H3l-n~5j49lA;uQqrsEXOs?bF%)MzpxRH~^l>mYOUo(gN2d7|GAn%Sp(Pye}y zgKy~WtJU9t*Qk$svS+!6vPY*VW^Y5-rZu>KJWWW=Qoi8LGDvOb#(8%lE=IIl_Cww# zGU}-jZMbV?bE;8z-I8+laMR*X+O3B+5Th^_dLeMOp6iR?c?(NaJx)2Tuxvi5*A*PT z&~UJ+PRf&FPIkj;S>po-7U#Zdr9?TOO$|B_G5GBAVu3gI=4+I_ECl8F$&WepEKRoCGq#hpel_L%Ny zxmI7K7X3(==4TtGH9Xi=l^Yz5p+I)v>FBQY2PKB69dy-(K+t1_Y{#Qva#clI*0#f* zkPk*I+oiI0t(!l#_11JT1{ocE%s38YNr;ccJMX?}n*4mY+Wo`)<7b2$Xlf+p_%RP3 z#l%Y0O4rg>lJf-7GV@zNq18Y#OAp#Q3j6Wg@BHFU>Fn97nO3>xrSHO&SnHDm3PZ_k z^W9BFz8bD(KakBB0_c`o0>Ag5WBr8vCs;6y(z zjJ_P1xu*}2!UB?spk`EJp#(rV3?>L14aXTjvt-Ebt%&O0^*aq)@So3*kw2y&PnIg> z_-%In+3E`)+Z#)}jO>0cVw=F0|mbwgj zn#T{R>3135*d?DRyPN@%k&Nf_&GPz7KeHVm==fRk%W8F`K#4zsKkJ++O=-wZMjyPm zj4Yn{s7QR%=NS$NWXUGIyLP{3fgA~rR=&c$z#;ysECg`LI^u{Fs?IsHi;h5R80}!Qkvy#?X^b~pk2o(PmLc<% z6~Y^QEq+$`1Pyn1&K`7Q0TBZHo^P-Ye+&a7>Yu$0dx~hVxC%iSNecLJPbhKxMMS&< zF->0Xigua5eo$^e;J&0eKJ|yWR>})__2|(2x_s+L!?OGt=xOvu@h2n5xyVZnoo!hS z>H;(3^F6wupyf*K>CNLXQaJ_pNz25SB@Boik~r|HaMILa8l z7$WCSn0W*VMcyaFc&39KIZjtay`_;#U~jQmn?)|(at&%9FDvDICL@D`^drsHdoG{dE)jmlCQiF z)nR~w9Pd3zU)$1un6I=s8MUe-h|BC66%)$r(54=Gbm;_#GFkYr>@1Y|YQ*MB$vd;* zGXg-#TC6sO_#$qNpEvIjK>Rva<=yZMy8TO0wJ{>@1g04Akdf*wAj>~I#!E%f3n$Ez zsjsK@#+!=g1K9rFnssZ93m`i%;R>?TQ}l&_A#+J|bdx>5CvJO@7zSX!0Ow!99vdd!Z`#K6_gR$iSMFmz z<#lUJds-+6(T>p6J$vtI-4&fsW=JX>pRL5CL)%>Rp|dw>A6$`I!f*skAv{vKYi6wL za5Wfv`DXf*&vlMz$&t+gEU=!r;VJGYK?DOvctUtKJTIWsK46`Q)XQ8*&mI)CX78@_ z$RAMxuN3RmLn0Go5X8}armG~Y^#!iMiJ|yngizy)@f__B!H#a16y* zf>-Mjc7C7b0@8N30K9|wpiQzK1YXDYnDiRQ2NS-n{-_vYE^RY2A0aw+X+=0XL69}QN^1Z}t{ z!H7|iKowpSa0Nhh5r{LMWi{;;?#-`zn+l`w$tZ6tkgfYr_!@iy-?pTi6hi~}RK>f( z5e?V@LME0F$vW9w*T+TB?-cFt^H2Z)X{UTt^XHc|)Vi+^;hQ{gyI1M6%S0vwBu*tv zCSj6~_Wt$@zd7GNO#-+q0$@Z!Q(mZBA|Yrh#zX4er%NBXRe-r|`8Im(ybcr9?f9mb zI;?(*AsRu5Ld5+-t9>Zm33HeL+#bX6gstV@jPFfy0VByR+}EKvEJowHrz-qolco+k zDB2-f8zGW#22v^tkM>Db3Gzw2#{zsq{)O= z1YHPur*MC&@i|_8p-lRHeLbejm0I7u--0I_%tuU#5^6k=+}^0 zc$mz^r-MjD)q_xa`A5glb6|5&kNDZIvsAH`4k-dPA3{+c^ zZ|EQfVSIi}zlU%vmr^RV-FQl+Nwa{IivB7}f(=3Dll-Zpkbx>B-h5W!qc`AF3QNV< z#_Ly3(qcshaW#F3Wvh2L$c?<{OEaSm`2owhGU3x{amS+>W#j;m4bsR$_0U`4*Sa}i zlK8Y&EbMk2nm$_loi-R9V+$kva9J~5>yI^e5qvrS(d1(tgMF z)d=Cy>4JdZB>E~TrWR_aPURv!8W7t)?B#VCedlWDsxW^tiG~wrZ9)egDpOs8tfAP^9g$3Ds*aa)HOhr37I|3-3othCIW`ko|7u3NsQq$<^tamfy)g)?j?- z`C204xc!V~IyqFho&l_&TtZ4y;yfg59Ygr7+epciDK~LHZu_WeHI5}EKepdC z@GvVM|LVGKRw&da%?KZIgn$8p?N-8Tz9!EO=9;9=)Oz&;FVxUIXyOrTp`obWr36Or z!ucyWFj>INfPlvW8z6Gm3%>2v&O?0DZa|1zZD2x3#BiI|%Un2l0ADC3Bi!y(7H6Ey zG!)e&C|0>*LYyZbc;2hJ3hRcDyGeDexF_k zA5mPDQI-lHXR=YA9s|oPF`5NwftzS;Tk6`VX();w`*#s(1y(ZfrpirwXvpkw*1OCH z>94ETLG9yz3VtaHFM`bLpWThoDr~p=3*6n;u7nr~amuPBNL!0k+jN_?m0QBokUdnS zaO_7E9X))LuS#yFV1<}_69yMGvp7_J>@G1*<#|FW;9ifXflhh5YNtE=UIe(ZJM4p8 zx?3v=snEk0d0lc}hhRT+;EZ{~d%GQ~ww6?^B@NjWijJTpMXKIq)Y8gUVoG|_f&^w4 z?6a7rcnw%e3%?g)f9?xdR5~U1M9ofRG%kFg5g-0(d*VkvP7VS-K#5m=#c?csm!QZ( z<}qIgRBXeAF(6BZU1I+93&Fm5#*9JsigwXOlQs2gvT0|jj&GuN=5gAgd6rK9wGiU* zTVjCo{ZQoH0o?pl^+70ST6~^yVTx%2o6xl9tp`fudV{4{v;eaQWTbwucjn(kQsGgF zd?t7>5&Kq0&F@?f3Wbv2abL60tx9d)e2}pG6?f_wGDPW>qeL$neG9FDuC%bSYYzNp zVfcG(Wff%4YMi`?`4{iqKz#Ekfk(|sXWgo@x0nldg$4`(F5GXXO6RV=Odk~E{mP2q zGf}KKP3xtGyeT0Z7gQySN1dcl<28=5l@K% zF!-pH8o?^PQfuA3SnXhJ$~}KFzWRe6e4)#QX7OG;^X|V?oX`i}6KpR~LoD7g5mJ|s zg%@?v>1NM9jl#>N96c{?g~EK59Av#(4^0cU0ITTBG)%)sLiU77KRpp8>PZGcur3_J1haI+@KHcTsFIC3GGIpw{F!mlgX zMSkWETM@w5Scgz;?jFGStk|)nVTV)@$EBDnm@5%Wjj_TTVW`{^b~DYRe7hVP$rKo zj2ICud=7f~x|_F~Y7t~6rAsph`&fyeXQ5Iozaezf*;M42<(2Gx^~q(EH#VMBwBajf z!4vGRib<_)ta)2&7fmcgptEMV=_VNh;>4~>hYyYdICZncbR$qgxp{ZKSRb5KR`0O9 z>F3e7?)c7ig=rP<*`ouc#(_h|jcFobJLoOVJ@qKzldg)ov|gCML?lc&2|fKhYSeD! zO*K8vD<38>TBv|D2xDs0%KV$lVg75SD6)N5T88}oxyQaXhvQ~gQ)z9=ecYJt$1@~d z9sP->u-)I-FfZ;GP5+0kuZ(K@+1AFjcyTR7io1J(7Fyh03j`~rxI2{M#e%zAf#8zj z7Tld8p+IpB65jmJd++^l?ztbb)~wjbZ}!YQdq2bcdmo+@d;tceF zJ%0Kn6nXgHd1<3plO#+}bRlE}lW=XIi`<<|{qNKGnykM*72kzyHcP1cqa1B!@M3Bx zDOXX|WF~!cV5wt2@urT|bfNE~C0E7r3*XLfG>| zyUGyZevxl)|3qm{-iXlQVR@6;HjdRU1k>Nz1*`1T(xejI!3=L%1rZ3c z|8~x&gjk?D^vb()AccJdxVg)4Fnzu4l34nz@qrFVOhycuT1)H*PVOacIwj!?0y3yT zW`w9YmqOYOW@}UlfAc_`j^`%0Lf>cs#|e)KBT*}up@Nl7ZUMP-#i8ZOydzHKDmh41 zh$U)CDx{SjCz-uByYW|ms6%B2+XFz8&TolO2Z;eS;+o@tswd8x!cW-m6Uo%7+6i4a zmO6;ALxnL3XPH`2zKW#cxYAlYI?_oyL~3+tv0}S+zi0A@czQuDrk@F2TcyO+Z5ff? zQ|g#4>vdkequZxP=_QC))|DegJ!a|&U+TYXBD^UEq$3*xND|Gh$|Ixpt{SoZhc}V` zB1Im|YwPv%vN^FzwIt|_WJc8}=|dmH-eCWy>rv=uP|aV(chcXGUf#Lp_$YBKFWv9t zyEN7aES|@o67=FjtX>H=Asl=2H|T6N3PwQ#)0it)JT~3fMJgeBc_+?JeCDw^Y}D`T zlD}1y;K?bd$+SkGlbT#LiGb9@u)fefr|oycm+z|>kXm<#Jxkq^#ZA~5EDpIIzUHt$ zxXB?|Ly4g1SmVF0Q5tm4w(p~@CYGB6@dONRYI>ubyRn#%hIGf$`G#WX^Cluvc2GPf z0!A^eT7&nGup9qg-tVzUOqQyRx*d50tP{_tjDI z9lo26>+gf!IPFW_=zl75^2dl$H@Dc=`xJ{M^f26>pM^=15-qD4jTUn+4b8Cs2|W|Hj?9(;vP!_t1(WzI6ow?ERHIzagzzs3${?jM zzRk9PEVQd{d|xw#uac6l$&z{UbxVCoX73?EXnXCL!L^j;{YaPx2&cGY_*6?J5i5~w z56iT)4I)1JZq`gh*}V_w6R(==>oxq~{s8FL4!A%8y~&drUW(ylFy6G)E-vp(Hie)q z{;=;nbeEou>>(Kag3p52`5GxktwHLsDVQuNSBr>+cd<+G&6n)?$In+1s<;n$xVI3d z_$#$O4mbKhf)~u_UWmOt^(JCoo(e*M+m3=f9wi9>oMfe+`t&iy!la3N<`G?&oN7Gp z4|&Z?;R`t2IFJJH3|H{`l0<;gJTem~iY52)b zLNhog!<5P25@c0E`WTZ!XD?O!dlwhV4&;{=wto6NL*s{>pL+by(*M#)my;RckxsAT z+ReV55X`sbEsj91`65!sLI9a=K9<-~arBnam%4Qgas3#`NYD-;ymcXs)S&deFkya3 zVf(fxnI-NEI#C<5noaM<4B~;-V%I(My$yqkukW!vr5|isnJVQ*kcAGeMB7-VAII0 zp}zFMw9XpD^%b?~&PNRMY>nkK>A_^wbK?^Hu|-7+`p|uJeEOHB&i;gF+Nn;8dk|9< z2%f`XTR(#H1$=iYc)+uws=17M2#7@H0!uziPT%kE&t7hFPO&o`-WU1h+UB`Uhl<($ zRp;w)3pm@naGCyL;{-Un@Gv6vhB#*}EJC zoFIbNZk|&9t@X+yhQ(O*TNai^)#h=is73jr{ZWJR=68Zcw@jv$_Vo}}+raDMzkH;p z-p2KEn6r=l2%Z(T%Z9^00h_fW`jnbw6Gqfr>(K=#vS5viJ6T-qQSlsgo<#LA`J*A| z6k?~Kw1bu}!p5(}*8QpkC3IBY)`5%|MQHH@5HuU-{Ft0oudFP4Iw4w!U@Q95O!e)! z>#6A&8mLG&>)hv=30fARGJeDFDXuivptZMsFHAYr{tSOm?ee__v0vUF)n$dCTKjRK zM~l(Tk&t9|zxNPq;z*6NCTlWad7M<#db}st*-=@&^5ux8@h(yzR8a&de16HWO`;+* zb4TY)MOsczcy;i{eqmGbw2v3q38XBrgMg^`WnJbteZ}kB9&D+vY}e>EnqMa{`Le~R&nAMV2a?E zwZ(`1^epu0@5jIqz?<`%%Dqqvh@`QNP_1Y(7nA`5+~Ub<77q$xZasBS%NKZws?9_I zCdS|`#X|I(BOA%soW?na_O<#f)tt6?FK3C<8>4f5ZLa##%NTq6prmrv6{bZYdbg&r z&y*+i)UrLQQAz%0peUqtg>cV|fNv(23D5!c@4+mUH8bvkmIlidoyIY~=uobWAvKzn>h^=*gYl+80c$9VNT**n6xF!}ZZ=(HozFKhkYF(OasO8TeELJ# zEAX`>usIdMluaSxTJ+?Dt+qO)A>hyN=Ur>^&9XuuwlE)%?z3TIKT3NIwce9@Q!1QO zw?2)H4MD^(r}R@s#8k{zIt+N#ReIAad)g%J>Sy*;4bKbMSpu5u=TVLXN^J`&4#%P5 zEX6jJLc%3CHTKQ5$#$k~40Gz7Sq;ytw?BW*|M=O!`wpn}>znmT=u36g{2O;_OAIR9 ze9Ny<*jXL^9)NY;L=Q!4c?pi;!5-dpx3rpOqVySO4qFR_AH5LQp2{ZMo0)m+o(yS` zV`~E9L&ebd&s(okvE~i}K;-$6BXm!(Fq+Ip6)b3DM0n7k6H(b;_q=3r?}e3%Y(U%8 z#W<;elKEwtvhhWZ$ZCChf@|Vfd1>Pd`&zuq?lRQG;Aiygw{*jN##W3H_=fr7%~; zxPpji!v?>dWN;&cyjcOWcY{l^UQN!iPu(_uK%gta-#%}mpqYmcjwnht%6+2XE%H1{M znbthgx8Yj)9P##GLTY70Wf5$$npOAkIzP28H+D4Im*Fs^9J7$_+rJe&uVv9dg$0Dy zvU8}K1PW6BUf6BJWXw<9$B+9S^KZZWpZ{XaCyo1$|NXCTOiB?V*GPH+bWHwp1&At< zYXC3)cg_Fxj?YO57GSSUzG(Y@D*X2X7C_PZ|L9&J-LM;hf-J`*Efp#G|J6st=T!f( z^Z#l>t{(%6kigjT zG5!itiTiZlg7tDG1lhU&^CLvm6s#wR@jn&*dqMIR@rWZ zYV5k5z$8lx;m;$VXeNhSC=f8*a%?SJg7A|TK=tV;Gg`w z+`R6zp1bUy_%Ww#W3@EUW48Dmvo_)uN{PTXJoDa@O%q+m@J^JPfYB5IX9-W`6-?un z&q94s{z-!B?tC3|qJIuWRDLrKjE`pYjql!`D0d{1m95#2F5268I<0<+yp|9+et;WO z8s`Mou^BhEEw@=$!4Pgxey4Y@w5$4}OG_Vl^cu43*S@Emjqyl8pt`u@7Zvi5Ud_`i z1ZTt6;KYSP0tsYLaly|boW4B&rS+UC9R+sd>6a+k3q1j!>xMg?DXu@r`0k$FK4b_ z)$J8V-R@I*8{@#Xj}WjlrQQ~u$nSiXCe^wdRj-g?bI7LIv-m5*TD|UAv1Vs$H;W=8 zIk46OVn&RsAcvrKKPsak9j$L4pTnD~ux2;<1uOOVPNX+RMz6CVj`D*Uzh}u`woa-B zM|T+9NAi!Rb5oiaHM%y!+#&8hb=qNq_!pXG#umo`V;Na$e+sp0+pe$cAcuHaVVu0D z38r66zDTtuZf%WBzRx^ISxTP%%|#8Ap;=n9HDva9(mlLl%d?*3dib*t_hM7(sw`bv zXl&0>#UwN6V&Y60T6NwS zy6c}1=Dwfrv^j#;MZkB>o=&im_jd~c2Y15#-Vd*B7(x^787bK7KVl6$t+Y%AUMFX~ z4tNAB1wZ;tO1@nHHK1qSmXX_Z)~!ly;C@OB*SVBik~%2OnX1na`*1HzYxMJLPTTGJ z>Fh|RM=oNvshP&BtN_hFS>FBaTTF&VbK5Q=mc9=gE)g+gBF+zzpFgD3{1Dth zIN^mj%2@4ce~_I~w=Qj`NTB(*Y&ib%Vljm~qHRVZ2XHGSJ1fb{Z5%hRRheZ`dak`%xnty`4LbK^I0eihasUpx1Y7jiiV_Z6|!z}B+8guPx6RT zP9bJa@$5p0qX>}N9A*OAlXzlbmQ+UvOk7&MdV*<5Qp4szC5&t7!Nw)iErY#?P4#XLab0_hdm@sM#X zuxl%Th~F#aiBys$KccqR1;GTS4Nfp#@#5zwTu3S2`}KC(=p99fy<7ne7V^pNV0AI5 zWZ+sT%X8fK4|JjY3JLe`k3~m$yJ)mE>jM@Sp3F0+Qn(5JS|RY}(_)XSa~4p5z@9Yy zFDh3qQk?Q{)6!hm46ht_XT3?fo+VSxe71~(V=n$1ULrk2pkt5!21NIyih$bU_`IhQ zg*Nh4rf_9hC`gf`8e8yfQtojk+FLw96@+%IR#h36g#&2Y#I`=G!fvca`csUWg>HR1 z(E=9IE|EfzYTsHv?10W-*aavn4kiBaVJc7tbfb)J62WI7d64+MB(0)f4a+P%8*OTv zDwGwHS+BKaO81Y@PV*Iug}jCPWtBNFqH4iD>6rw4n-h>y!8|$cKfiw-;(DZ4iBT#* zU(Eh``T7RW5r}xPKxPaO%!Qy$YO#UNYwPVMHp^F(CQH_`jzA!0tyzXQ(L{cn=7Qiq zN3&>&N{!!)rI+(AhT1(fNBTg`Ni&DQWy2}__79En#L z+Oi)h*4>~gr`YxGu}OS|61zrB4{!B|krI0NbOXGJO0v;C~#Um9yX zxSWFTROsj*x1z#z+k?l0xSv_b0TK3zkB`w4buw@ZN0j01pl(k1$goZC6w?MAx`^)o zI|{(3p$ z&j^mQ6+)kazrp}eN_6{V<4Pk}Dh&tV_)VA`x+CmQdS%}L_v#E=eijWTJJ!Yew>2KH zcOtff+V+bxAQ{UA1|rE4UZjK%CWm$XsGhyemOH+zz_s7xRu8FcHQvxvdTB6tb- zP2krB;JuW~h($bp#NMLZV7J}j3vD2&{_?#(Xs?lez(&29JKI(1<7}fdB>UdfXY&~^ zXuEaLmsLHc2_-Pg(k(t+=tR)`QqH7+GS^}tKeUEpH;3WVYVu12NVxsH9yZy)OdM-9 zJNl)=re!qq*f$HoLkA*spPBP++vKt+Iyz2Eav&~MmEVQTkVs|$$S7rBKc-{2vBHDDem;SekOQ%HKcE6d6{~a_#(OR1Ch+N&R5o72<#~HAR&eHNv+9SDV@{aAi7>#le;Ch0VkV?87rSiFToogNo27{JsILQyS~egOA5X*%hkx&P@D?Vm zLg;+H1A0|~L6>Vx#%mQ;IBJ!!)Ay<#A=*wONN0OXInRsFc-nFh>(XdgA7RqZNWR|B zuaNMoR0*}40tT?XyMaxrW(+^f&V{h7A?tom)`GmeeN$tbG1&2F&PwULO;&vB{R&$6 zQ0Y513qAdhz*15xc0SYGOEX_1_%v`lR2{pW|#vJ`2I!tCT0Z`NS=AOnAeC2cU~AX+g)Q!BiqemhSI5phXcq7vWg7&a`^xNO zHz|sucouXg187Xft{F6Q0^5L`{P-5bY2Om)GsWI$=X=caVXow}uf+tBZ+cPiu@I6W z)mmtHs4(5XYoPTr61k>j-l3ycfud}zTTGAk4l`d&&-nEPx=~`r(w{_4eUF4a6kxk> z1a~(h>HAkteJ&hO-7T8G9me;B=c}M`Ah9!}Yh|N4Ji%n^_DKLGRG7;Xa`!5h;N|XQ zgeI3Soqm3rEQ8GeMMLH*obSfWpXfBm<%_|rlM%}iy$F(L`>^OwInGhy{=%P-ILGS9 zfNuux!jTD(S^_&#rV*;Ej+-qz*m(ak6MA_5nPs)TuS0l>K?GevsYo>=^c&_3TDd4Scw@F1S`P~iA$)5nSa-bV$KWiX%fa>$E0$&n ziouJKP2(++bUC#&by}y=z^nW`PNbi$_6rYW+687=D2qx4e9q+=_vc{+E3b3w3{SxZ zXIq<{ZVzMvu3NMygt(RNB*qRmY7rP$zt55~LlBBG zu1?kiQk%VERkkdm7*svH;``Zd zDs^UEp&w_<)J0l0d>y~!o}$uxZBS!S@+Nb)HJ@Z;B1s1gL@$_p`-Mj?@uGPlE)AV99~ziB!2^~2 zhg97fjFLK*Dol_^ZoEcfk7qJCwx}b;F=I?Isk4jOH=MRy!)P1y{PGg)KJ0a&U!zl+ z&r)6Mk2tGj0z_VcgL)6=1cQZlg3Zkx@GpbLluex%p1;vU-WLXpVKP_Ea?z8N%h1h^ z@c-t8m(k8KS}gD*8~N`~ng)gj4C(}HJ_#V*00@x?gHNT9K}dRc0_{DDSFoWE45SeC zS27flQ0#|sPa2Ihj*8o+>8sxe6e7&!pwFejWr0f~GW@JImw?6KfshcQx~b}0m!YFz ztRXSOFpLgj!<_aR0wRBIBA|;DF=t^s8dnH+5VTL!Qrkf4GnH)4EjDvzOrznm30EH1 z+CyLaS;B1;P#HIE!1NWxq@n5dc+d{NC@Xwv_Tw@Hvzk?(ewFPf#Z8@HQrK701< z#!r`Y{GML%Ntip&`W@I`bp~39>=0-bi=A_Ky*puL(x&Q-yD zVEk()&7*!K#cO@{PgR)T=%R!yD0F*^12$FI4w4&v%R%uDEIie&t5TZz{orLd8EVZ8 z%CwOVdE9K^c1Nhr>aDS6e#!CBGjM#nuHEp6?9clKo?Z{Fb+tm;WDWP`Myq>xdYG5=QKcml$M5 z*vVc+3jJD)lO{(k@{3Z(l+1kD?jVJgp!2zOl@HzMX9QJAG!91 zwdGl)Wl0o^tFobbAz461Dq-=c1?F$(0+eQ z@PS%#9jyjh_Po2iZn`UIMKV3YdKkx?I%Lx%pCn{KDpUnBl`>KUK;F+go%>A>N*|-W za~=Qa;=L#EP?H}$K=A3wcKUwQn?lq{E4!3uQT#fPg6SS;4l3hO{uN&3`%RA>H!kgg zW(1|)qSvPbz+QkEZulwtIyso)0HsD{kj~=`)^CbeV`$To`9gy(6D2CadjBX`v=WIh z*y}{wi+bn@-VTSeAU#WYP3&Y6fIuqHHiYOboYS+`-voq$b23lk{wuu*;x*BXhXVp~ zoNMlN$W#2HQMJH&rf!O0g(Xjj4twH%(5kru+uS-A!Xl@(HsMf_8_^sYz!ZG0v2i}} z$8%Cb5D4A{?^>=7x=YE~Xe-HiZO3KEmGo)R5XnGaFdIRH{Y*@vxya)L&P;XM)$WS- z;dW#`+D982ia$~h;;WS9jdj`&!|c~FeNDYRBxw{(x>FHXo#P;tg!RqAc-{QE4qan= zU)j(v^M+yy$5Awd_gw;wl^&-tjVDYbso8w;NOkY2{Tqf|2j%@AHs!nux!V|(xaOf% zNqKsyWrqM>F2}EsCSkns*?uoL9U!cF5L%6idfAE44{`*5_SA?%@P{P<;VBMY;^XCp zMRm?@Aqxm_!6_Ra9mOlggamRMnkG`0fU;T^1bz=C+Hd|XJaCq95j97bQ zgLuyRC-S#wlFYf=w=WXM(D+Z{jL|gIa4I?UJ0k3T98|KR+77+j=-w^g1D-Nv$Iyv+ zkz2aXRkJfJG_m==zzdw6?%YE)-n7ZaDAFr;yi@A!KUhd6Xu|#GauUim)VF{8bCI{E zRnfn2?QE`A_321HLi48AM*F#7{K!y%h9Z8Yut!5{IxQl5B&&*q*kRDD zFYV|ZvSX@?)+fv~ogHUKLbta(te#DlBLO7hA_PO+^3n<@7Of$QYn@1EQOxb8?4zUr zWPD^aEDUe+MeI8~+ysbU*Fisb?-p6}uUyw+g}_4oLj#ue`Ly1pNc+Hw)25!Can_=~ z@pOS2?Nvl_W#=Os#&OJF4pct;(*U-|gP*>;pcOJvommWt`HHLQSw`uXmZd{`!ZNCUh@K zE4Y1Ktym9j8^$!MgrSFTa6&{BfPvvuyxly*be8%!!IA!if4fDpdL9In(X0XUFtgcL zEu9FaIu~oQ*l^dR)Wl5=(j6~b1pNBoXYnczA!!O1i$UX|eg%bH2(Jk!&eB-rQwQAD zT%HJY*7X1l0Qw0;y{-5alZoHRx{ay~p>npocn^M3fugEx)aM6d0YlFeitHK7A0O<2 z^+PEH)kDBume+%v*5pT=QfX zu=l3Za_7OKcei;LJ~{C5>T!=)=M@W)%gQB&wgFNP!aa>%>KBaapE<=I>kB1bU5F3J zYw6|#P9PAXNmbJq`d*t9@|e1DNF63xx@o@9#Q`p40k105k%s1KXt5>@dwlk1ARmK# zJ1%Gtd`>!TyxQbB z+;YTR`SlVBM5LZur-%X0sr4Oq(CJ00!UesPTpj|6oob$+epj}F;svN4`bxbSl0u?r zmOi2n(VOaeCj}HMM8CY9LYUysXu&}5skK*iKv>`A*D6&X1n5LWNHdev&4E{Rp+16Q zH{w~CG9cb@Z6wh>i3)?F=d zJ>X|GYhE`=WSr;6Ca|^luGCCbWMRg=Z|fV$Q!>TcWpTOCsJN6K=#JTr!iOuX!4e$suC{tmDg6uvnRSxHkMjj6>f=A=O71)uEcgH(H z4}8~(B0rz`aO^(m5x{WF^9*Nvt=es@RyyQ^Zlu^RSECU9!?uWgftI9q;TWG^w`vIT zJB`Z_5J&|#Ep=Y!xFF}yRTISFS#F+qyti-kz8bP>XPvm&Hb!k@vBHTpnH5K8;Dw_l zCuRsRqz0aHAUK29A4{|9pSz`7YxfE&C}EHRxpul%qhfkGY2_c*dEL06K<_&R#9mRD z)bnXtBx=pvKbQR*522tAg{S%J@B@Y|{I9CC*f`U_XZD@j>zEs(FWw7D=zFb&8Ogynkz0j*MvRSB(#$@UlpdpwmW+p0E*6G9r-Cw0!un|LkF_ZVV zPHfgjH4L}4n;h_d={7=R3n<_Ad%cZ^@^vD1av0_A zyNWTd-pIDzmrnFa!}8IxMO|-#++V4dOm9p5^r<8E3)O7?f%}F82DUc~bVD|BQo@@G z*NU@|wqbm6!Oa&{#VGB8gEifmAL2fQLPbulV%d#0TeaKm7;L*Vn3J)f?6(BQu^lHU z|A9AU)#r$Jbn;+)==KXDW=1@yLnD7`*M?^+TuIE!2fI+;Pgv`9lYx*j&;8g`=lnLFKBdU zqWfd(^*8ogzZr1`IuvJxM!kWwKH;)f%F0?ig>T`TY{Dfbp#v5gIHUs_klZ7snu)D ze!+LU`uPzAggr$54&Dmp+FjT6!aj42=}T|iv)@cz2$}i@J;Y!d#7&p#;#T|QmsV{O zOUuhhduFl>J+Ujf%Dtlg?SS@6EX$@!b8ZuCtYa55!x=F5=BAecwBqjy&Qn7Fnn@#PD0nazpjuiu+_e`uol zw=@r=vG-%^lqu?6e~Npv&fe^f?gG|p1qF5ASO%Qv$d09s79lfe8R@&E!3A2b6jsLaTLt#D+QvmZS+yN>MUT4;sUsFtrm-7qKudusrH~dajWe>g!4s6uN zNRIj4lt~8#-1|#+eEW_k!OlKYd`sqgN{doJ!jOsvzg*wL_p)F(DNk+TY& z@M7(_&C>p?fLP!rwDFazZcHouBiIie8cQG5>?TX0Q>kt@{Bcp8Z<(uFisuA|0I>aA z%__fl8U?msK(+Ko*zCc=Ub&xX*3$ct1f=1{Vm&B zO-G~gz8Db|2L(pzmhD)B%i%k>H6?h~=FJx#g$ug3nk9Oua|fC9a5d~GuS)l1YO^BZ z`Ap6GWv1_xu2r?4X;;^t#Yo@i#s5(2pQ)TqFoHSLKYqU;XHz|>h<(aP;M9RyVcnk8MTCZp0>Ih#93)0pB0j(BdYCQ zEuH`Ioflt!J1@RbsFoh!OP-@DUJ~<2XS@NECgnEPP95N;K5B{2pltD^LL|>}vaR^1 zPkVNSZ94+LXBnadK9I2~(c>ML)wX{bGrM=czsP@oc7dm_)%D%x&7Kq0`t!1Po+n;a zN=cB}qUv6PadSps%yRk6CO$Zx@eW)(*C=S6v+pugb{-My_E>Yj`UCGJB;9eRa_%h;;PY=qdiK*UkHqD$C;yS9h6oCWPv#b&fY;O8@p2W3QS5kFvHoJ3G5ZQZR+pr%O(Y6|YjGuzWPD-Bx0NwX}TS z?lvje?D|T1A7lPc(#G-J!Q;3eU@n%leOP>f-Tb>*S4D^T5KYbM(Nln@>BGC1v>6E# z=Pmvb<;Tt)AN+UOxl&I7KlcHWU81(7>iVdw!uiw^!kRGkK#76<(~lxp*J9tc z@XgxKOe4Fq&*U<4tu4OX4t2YkWaQ;MUkISVEPIUVd>#&ydT?YUi|(ky{rR0KxmMcM zOF9Ir)d;Q~s%ADJra8a8iYkZcy`j9^O8KW!DVUcu`MIWVpYU-!)V@4fJxWPkbUV&# z#OJCNvx3h}Hvi>Z_NsJJ%IGeH_y2`9WIY^u(?5 zb7E>H$*a6Q35M&oPOp2v)I0#PDU5Qjh-Hu#tWcJ0kJ1aeZB>u))t6D*qw)z%w36;l zjSjc_O@hez>-r#}Q|wPG9wePZ2A1jH_Z|N8xGS1U4|btV2B+(^E5TOgwr{+2eV=E{ z?N58@bygnB*PoCpmu4<)nl7rM-iX1sttOa^sDmEJbK+M&Fa$6NCSHT#$!f=&7M|of z?dKjm+9R1Yx~A*z_4fOjmOn~&vX#36Q&kE{1%8Z}f4{X_s*Z6FgHLK@_~z)`{7Cp* z>SoV&!!DPz?^zg;HHDkQg&98s4$32+3n=)(Vx)#U*6hJPyR+!7^JHlmh5iCfCijkL z0OewuhqXeoMf$3X21?%<!@4( zxp)rbZklpn{iz#E@#L!49gAlT^Ad&bBH^@j#u6TK$y&hu_3`@p02OsE0X+LwvjrQG zu#@O=IV?9_jrx|p;5jy{uH$Dsi!yAhjv3@1bx9Cl8%;KhOeV>|)LNz=m?O{NU+`TS zM{chEON6_lP8i*v<##2=xPa6VdIN}sCTg4AE`3UT3!2=wS)uDj8U^x7oMDPVs5*ok zV-n7rgMSt}#tn@j^2?Zo9X$rrXMjaQiOTF;UdqVab-3SWbyXST_7;+ED}WjfR-(j=aO+{{W#=!nB)1sAfotX>R?5OA=G|)V zCdH@ac!T@1I-u-0N?JxSmw-3=UqO-xu@4||&tp~Q4{4fxS;7b8;*%~)7lkj`O;e55 zrQWWugrx3Nd_4+r|9bmjMao66sq;wwgLrqsg(A6*Q6Wi(-c+e;oguHguRo{aZcJgn zwO=Z9j2(-yAUZACwi4#-qCJh{5uHKA<@+pNHKY+u2GW{RlS@mW`cQ$rfg2IZ%%Oc$ z@LCsEa6M~3bd{hh{^PW(?~IQiIo$Ws8OaUO1P5{d^@U9+lv5 zW%t*;4^%RNogOE)+sO|P+S8%1)SGR&1vBqw6H#+z60W(kGJC#gG_sclXtMCr!4sX1 zw`@(k-M7iEay&}9J4p0Nk7?e5j!q2T9Jeo%$+a)uD^|9Q+r*ISErWU16@t#dvY{<^ ziAyx0vwOhk4=aNz7Afm_Pv zB--8w7Iwli#cuZ91PCD)fWXWy?llON;bAJxIUeuxbX}dDOs4e{;KK{9b-Jp`xi|Vh z-~ny~sgVm8N6S@zRS&v4>R2R=f$EZrJ>O@A-mk4DoI&oBLt#ZJ7z8#9&j+0tch(2C z_m0=Xd50x2WQ7DLZSVFlGriV!WDEuVFd3o7eg$AKFc?iK*f53UO4Ure^&Sr#b!di- z+RQUQ64g{oV)osGiqx*FD!N++Xp0sHC-Cl`yjYXFrOB1@z;-Yr7K|2Nx!|SfG#~mq z;~@Vlb2F+{5knHafdpY)53;QypE#VWE2PPL%ZbSKtG&OefsU9DGJO4JlJ)6^C7OGBU`~k0`FlvcwumUB#HU{IbJwB#! zf26HFE00blCIM_fu-o6L(_L@V6h|IU16EUR4~9#{zFPzX0Lw!AxZ9?>*bMxZ6r=uhtV%>bKCVJ>J4RfC4u&sZ> zA4Z&1K#1%@=Y`q)WREThU@@DgMmni{^_Gu)bLsLmIAA5p-Mf#oiberfRF)dUZNSZ* zd|Z?f_owYC5go^lr!ZS?T7YlMJU(_1B299s{cgol90;CHo>+tCt?M8qYZ)NDUc|U) zbHB75e_O89W^_2m6mOW3jHBwOnX}QSo5vdzPFXAy&2A7o^CMt$!8Q$$vC=D0ePH}B zD*)#%yLgn6Z~rQl+wqkg`g!ENh|hRJ?arz95UrQSGyJKh@OZUlHioAgkkgUjeX*i8 z*RIDrUy>Y&iCglg+}}*blLcWxGq;yro25abS5)k}#fe5}GIx~E8W#kV{Y*TRNwg;V z&u_?VXFG~h8sl*b~REFm-k#!iNkEIiWY z9Y23j*7Y<`Y8YrH5Hu5a&4_ z#6k#b!1W7tPv|w9vzzKgt;u%oB8TPVDxx86sU!soK0g(3!!cNlGQV{SxDwTD98XIZ z(6jd7qSt7G7Lk1@dt3@E2T}P{FIIjeusWvlIw6x*U0O_TsEoY$QqaX8>0uo-Wcqg zqp(7x9+1ZTGsdJk^`Z0XQe_BCI~N7AY+PVn>LlGxnCt8_iod8nMi>uSxAnOxZoOmf zC>c++AXBUQgOzB}DJkGj6XgMUqn>zXfX$xRFvLqk52_H-M_+17Xj|la0;8ePio!Db9w9I$DZz!DuNZ2DJKcq2GFKvpYDB2TN)25#CgM&!I+%2U+Jjhw2|&`dzC1bK(Kh69i+Lh(bN~G z(;}D;HEGnt=6Fx`ddT=WLu=AS3E%e6ugxUs{NW0mV z()@ItYtw94u47X9<+$!psY`npPMp1S^c6ebbe*?TDh=*cX3t z=>E2Qlkn`l5q;*-QdyR(@;6{}yBvX@JQbxu`u>-3&)58^GI-7UDLjUeO z+;fl!gR)w!sxCHX(2#cy#sZbQvgY*yalo86z&dbb6P9UjoeLOvVCs7o= zGGoGCNghu(nw&WgUfU1725dtAUuxOPi~u}ek-Bl*F{(GvqwKP%`qAS)0tT>!6yW0xmxhO7tQX8L$s9o;*Jt zfi{Sm{0<9xI2MJ;hWEnkg_HF$6GTX^I#Y+^y_c6`g-U?NVjgt=-Axm~!OmUXD}BSs+#JsJ0Gp53v;uBVYS-C)lNhHtattR2 z8>2I!%x9b8D)rYfY#v02={PC(^IvC6>+;b>GU-CX2d_3mf&&h!pDxCy!XVGdSJ!^^ z`%0Y`)?AvcNFKjW4Gr{uwGg6gzTR^D@CF>jFnGGY=Tncewwe2L>OPR)yzsYpTL|E{ z$X1Zom1axaY4xNn=k5JOcpX<@-`NFpzTWMTnD3G@*afN|2)bvfT~6{uEDp3=e1_#zrNrjD~Flu zx)%`VzJP-ggs!hNjo<^QCRW_^IYLH%%4J>g9b8W%^2uUX4^Q(L?yBtzBgD@*b-gaA ztJAGOVqROGSnvx^0KQ0c`e`1;$xjlMP-tytP^vWJQ3_L$_c!gq+9r89tLY zX(D$id|dxs#TkSDc+;o7(6lJRAJCNB+FW$~RDN{$S|!;s-rnKkc~|V|zHI2}kDzDa z$!U;S)ql_CfFN(!#X;E9|6}hh!>Zi2uwm(vF6k1GZji18NOvt-1QsA6-6<_44N{A4 zkp&1!D(WP`XV#c=jQhUFn1r$_fypjLp~b8E7yIq*_4-VSi{hgM1is7PsF_DjXTz>uDT-G$BlI6qpQZ~{pgGF6 zak}{WcbPV0D=Ffg1#%UBQr;w1F2`MafW5T-u5{Y_0k+l1Q6CF+aR zH3m*OPh4Ch+^94Bz0+Fr>sK7kJj$?`!|-J!Cm7+BWW6+Rd$j*|1-DVb{n%9kQ8n8) zIB4(2A+aQ%4)En5s-$QBol!$HRN&hFJ%5XIPFfQTqSGU@5x5sFVliEH9EBAL3+G(1 zptSQvC)(1&24kD{ck5Mzxbd+zPGdj6{1(=9S=QLWfe@3l1HH{luGWiPIJ&%$f z^~UTQZ~t@Wxzo=WaJrmfgQvdZ8?Ve5(0FG}t54}$j@`U0m%WesTG^A`#@=E$j}I1B zEg?^G>FlXn&&Z7_Dke+CpY@#WwSvoOU%M1^|OU4X?g1%v-8bZ4=7tui%<7tt(>q-T5`D< zN}C^wg@wwQo^mt}%p-5Jd_u-A_R`NcoX$pvO|$RNo#%6Avs)2*F&zBi^R&A=1R9@m z6O`Yg*5?tn)Js2H_XTPB{U=iwB`rlWCt8$k_2^Lg^sg<2o*jU3rRrtUgYHJvk%O(t6ew8xqIe|V3oevQDKqDL za^3|v5?1KNN-ycEOG*ro&m2f22X8Y@2@PEWU`L2DJj*+LtjYd-y6q`3!q?)dVqdr! zsU<>sCvu?W>k6yIu@U9k3PSIwQ+q@8!st4aO7o9G&RHXrepXxG^5tNCDT&dN_&MA(EUkldv%8g%j;k{>}q1Q(G5}==xfcCT# z<@5{pPjn`Yckeq&f}iXlrH;DJb$5BUpuY_bq*B9)d^rJof#3P0(4W&R(9?*7pH0~D zmbYztVbMTapfgM?ClDdo(GMlJ6`PL8{G3X)zS8OtWl&l4UJ_+E)Wkr=Xi_XjVpH#B zYZcNnN$&u`_YO)qA*s_;S+0FdSshdOMUac-1d_V`9lrkE%?THsY*8FdR^;AlYohkv zS-$0l{pPac3mv0-_Nf8?(LkklchO{vD9U;@*r(b)KLAkk(UpJtIP zCu@6Bv@9E*aTvdu=DTb-rZi*(HykrqCMs7Mnt2m0!;t-7Am}8L;z03 zCy+rU{r@~l0aA)!>`~Uq83h0M7GmHhkVLqS3Y2XU?|&Zk!UGLS`N`X>jQ(H!0(vQ- zLQ4%|VH{4jMf>NYR*OKOA-%8D*BOxht6xALs2Oo_ph*dk-rE1}GVrIRFA@^r6BbY>!#_qeE&&*=9(mY0_QhsLcE6-rHpu^d4F7n2w>&Uf>(6JL*#76yS5};E zTqq%7X7)fq(J*ia8asxXbFcD7RF5iOvOm!2F1!m|S!dz~ZsbsoEUJk(p62fSIBuZUWSgbt zdzdAh9`iP9*E!Qi9jSO*xk@wewS~y<4PW4b$o}IJcR>puw?V5Nx2_)_a;GyaO;qaH zFPQ(f0wj`gx{09LE$=W&wTt3cTa!7ml)GXmomf-g-EmNfq2p$k&tzaK2l~on{{BBR zGXRRIayUuraEDR*U?F62_`aaUb38o!12oyaSv5pKTl?zRdvYjr@qS%<(@6vu>MA(U zI9K!60{` zEFhLirI4qfzs#fkDV%PEPP0$^*lGGMTG!av8!)$n5IsG;ha`Nv>-~3D((M z;YhWOpr2*DIyG?~F4z@U%ZDymCV1gEXu}_i{$_%RfkQZsNf4l|v7~&qd9q))Eh#Ak zeW+pT>w!8+vsi`2w;@b^i(U#bv3cnIUYfs1E4B>5%$YMSSt}DN1wgn=eh32y5v@Xd zIT?kEu3IVGE9m8S01+4pK~E~rzZUswgV#1UkVw03qaH!Z*2kJ8R&CBipLvuS`(@5# znR}dx?dmCop5Q`J=0Nd`AF8CZ+r|-=P_wA4)hSodVHr|ViGK*Gu1ow!9}`BcrRW52 zovRPnnD0albrlH@glU6*dA7e3`tBDxpd)v-oFBoW)mXYyq*oByQ^kC|WgHnhFA+AO zWH$F5q3UHC7C-4NUQ+40r)7dFW&Zf0Xyrz?ElwwzPm{v9y`l`ugr>)H^4B76KZcGo zdq04)-mFg`FqN9BD~OTEg$WFtFkQR>snx~^oZfEa@r2bmn<)D3xbDv+?MzlVtPg$? zOmI6~u*)MC^{m$PfySHah2hQUs0)LA z#<+VwOPI#`L~yxtrXzZ&di|lfR`WY-ZM*f!j#Prnk6dw)8};|9&#+c5L%E-?#gMu4&2Nr?TBs2OH` z$MKM#I4W1}ptZ0h8DUI?*kxUs z2n`PN)wXVyIZmg)4fM!*ExRDQUD6C^+B3Ef!bBD+OW!lOX4yBo47RtYSoGRuD>ZIv zbiLoLY8i28@w`dZ4`F9~4{3N>?85k$g{NS`1Ae}J6S79GR0z{StMSa2cYNBF;DjFC za)n{?g}bv7e3!FVhe=Z#F;7nLHAAHmZ~As+voU zP{vI1{{ykwGgk5L)7l4>NgSh>TkNft^bTX``rV-x6g@9>_NS^iATdMgd8H`W@x!KJ zBwdn>$f)?ejnms*sTuBH(y!vpj7QNPECn9IBDK#EWAv|oWtQuU>^pnXfW_ioh5ogf zp~5#%KJF}swhmhN`Y1qMOcs-0=)3k%N9OyNY$n{g)=ho4-;?!GXh=Z@~2 zr1tD$&Oj#Y8N;yDPxD#g(TQJ&&qxzcOXn=9DdxYl4kL0+6$kHA-pj@#v7S^<)hl+j z+?DsOSGsE^)lHV1Wg#tU?0s3(o_Q|%RaF^Y{p;=N4LKJ`@KqreGhT}Wo1E;e zxS}+1+kJSygEVzCxVWbNJ@1wIE6krQtp}I*uYd&YFx``3@{DjqcppJ{O+@f9Vh^tNc z&4IYW#P0gagRd8#kzx2t!c*4PT(qD?!tVAjs)y$dRtXSE1DFp1j3+I@G$L7E1qZc# zZt5$jc4KTURChe&g8eqD0~(9zg|klT^y;^*2+g>_{V{XqT+@idEP#n$Pm0M{?0VmR zoA7yfPES6)KF+9gEA;e1KFv-l3f1{lxIFAT>CrFT1uC1_MC`rk3D0j~&4pX-1&JHD z&S>JonvuG8QpyfKMi$exL50=~O85yehxO??*6vMK($)jh05{iiuV2gx>J3uD`@8e; z9y z-59T)-ntVt9S*lX(%QAo6IKNE8yqz+i(LTx-ZH|D>Qdu(L=NU`kssvuqT|wOzS7N0 zt8GU2;v5p4+@$cF5!YFk3Y9iILVbfZnlWld8J02aS^%nLcfb=Fv@v6NL>BSIEHs|I zt1d#t>Vsoa&nw_Ad#}H|av?gHp9yI*#GiQ)XVeXlI&Ve?ely!WY~3Q>kkNuS8h9C` zdtdrihc;VUV;RCrN<`I)i&<#D(EGw&ODUw0Ig4hLaU;G-O}S1GXmB#zuS4byee>(% zdw=lC%E}8tfFVq)T%Az&fz3&2T;u-7l??2~gqsW}3fL8H#s3bs-N4hS>GZLFP;uR+ zwpd^Byvt0#$p?-?$m4jwxu;K>Djkv;Io};fVtmw41Beg?z{v;9;v1_5zVP&^px%S9 z_0cqGSzxI84Y2RtqdW0RBL;_)4^m)eGe7bj5E z?VUygZnV#_O|ys+e+KQlRe~a!)Q>NUsr+P~sOPmm!ZtXc78RQ*h5y;>twh+bf{?$g zilPb9lz>Tmb)2WC3R25t1S!3By+GAwv)?y?Id525CKx6VL6d9?rI2a=+KJ6V1Ij>U zRxM;Nn7JcAs~?}qw_Ho8mxGvg<|?Xs7VA9O_UGz`i&Tt%4S_H=oH#RT6f=!G%1xiL zwD{?TJQ3JU1=&s)xmQOlGd(T|%W$IGbWE<5Xjn_}+UmYh_#PdLekcFI2ZbyS9tz2pblUx8xh&X5~= z=KZrkwS%y?G&?N(hl;h{V$gJIJ>*Kw`awtL#r%{WgX47sa?`bN&6E^glkf@p5EFLx zzYWTV$3Za|gzMqO$sioe5*k2BZkLJFn54{ty!+<%wy=Ucjk79}0gQUsybiKiuTXdlVP6Qm8cB*>L)aDMe2JE^T#H8l#Ap%QD{Bd0SPY zDslSsp)^vt#~D03`JE$1nB!o1D@grn?bz7N>gA`0nd~eY3e)G?mtt5f5A}U+Y39E} zAnVV@oM`?ED!R>4zXF$PyKi+4BeSrC7b@STO>Sll&5+iNSoCOq8xS4a4z2AyaVd5O zHUo5@?QUUS#EI(lO!D|x>G+OAt78-ay(^*kQ4q$Y-JdcWixnb3lo$Ebly3RbcNfwz zm2x&zZa#a{l5_jBr?fxe?kab@aYqcRLrh{EI}{>l)YVAM_&J-neYNAk=2w^iQ;kH; z9Me7srbe}VWP5RRIo#&rbY*qnv0pU4eO%q+!+ktu%rEHEw~YsPN@jQin;9cXGL?;> zCW)gMmAizrY6Tv1z3IlWnJ7<73KoS;R2W$Ozq@eSl~RN@^UY=Lw)3U*E~XFm9DC_7 zh^ltkq>iT|@jyO)mvd1=;$)7r$S`2M`(ipnP?+}?*?3KY?5YM%#fh>Pvp>tzJ%F7~ zo?hHQdoW87TznC)!z*?!8hN!v#2~&oCc2C;{O~!gdf|;A&hW_lev?a&vJMP1=e!l) zD1WH0qFk`u=v_Zmr6bx6RN!tf_>^` zDK@gwk99HQidY=(;|L+6(bJf9JYOT^X>hX4^GkNg_IzO%x8b2qLyk0iorah z*v@@fvELIa&^d0lwX;XQ{1BS`vRDo}W7q&hbp{vVjR5sBO7@`qvy5Mc?_d>W9m9>E z%Q$mZT*A^+?3s2>F}L*xqx+1;N(L?J>LIAM&9v&3vqUK$_XY6d@2n8oH~$A8BjGh=%mw zul?vrr5e3;S-vrjF|E(01kj%=^`6kzY){2YU-PO`Dnkn#aH7tDVDyaXuw-p78y|hR zbZUi^KhV2-M_dh_?9l$%%@@_APHE#@AczHDb=9%GZpp7Ncjn0rGUK%7MJjZUA4bw9 z>SG|JS*Zc0sxW{P?Tit%HBf@QkebzRmFD5gZK+!5?#3z`vguASz1y@NdNL$8x}l1Y z7LgX+>>6qDs||$%O^R7j%S$|X zG++{%=j;E~Q!zvUw)y%~!=gu>g~4F>isK{tT2cP<;{`Cri~BXMPaD?2I`tNnA!b(r zg2m%T6VTKw?*U>iLQyRS944Qc+SfF<<8#Fx51UnL0R(D>YG}7$TNJKiUmy_o;gPcFF14>a2*!BQK-ng;^_hX!|zjK zrh-niY;Gzuy!SV=d>1THXNk5`(b5eMM%wc{4`h)>1K#FWxD*?dGU1$GJ=-&M*gjM* zw{E^@R6}D?Wt4!bI==q}nC^+Od68?~BUBdDYxeMki=?h$j1WM#c1YrO z{}v*CrH!iqu^39eGoN#VuFGbR$a&BW?PTF<6>Dj)8xWoT+E3PhZQsm718(qid-L|M zX^zWy#F~_A=s+wP0hl%RW-EFD2-#WyFMlXFAsc=Fqmr=aEibvfOt{X=zKz zTEwh_3tkyH+0n0rtB}>e=my9eZi2rK8XQC?fk#a7;;(2fM)gzSTfIBY3!NeBOES0E<1G-WUWU0fAp#y=kc?u>Hn9X9TJ%`Y7R$b*5DM+R8ja9?4I)5fZ4eC z34LK!0qo3K|4_;6?+EP@9?cT-aN|m;?TaAd__prraW0pWAJwL%q1qI{8gy@5Xs+QP z{19_Svh?c*L8S1zbW6J_89)Sj%;cc?jT^J6v_Q4FG^A~zR zM;sX!v-B`<>d!dveDteDhBcPS&G+F_>)Mku$HO|=n1{8A;I6HXme*R#5A#z-xGz8L z2@|PODH*TS4?72cQ=5J*^Ma2p)A-UlbWtenm(O<-xl-L~m~Mje=HTctkG#uEu|Ui6 zMR^14mk$-IWO*jL*DiKtURp3UzYt6zX(|-etlWax^HGzsdQH3p4n|Kv6oqb(=Q zimr&=xs=q&Po1I5VPT@T=uV&EeU}QO2KnM{qV_E0;aJnywbEWc<@)q4t-W6MSP2&U zNg-$a+bZOsbKbH#32R+&YayQqb9?C3@8i{WR~V#MtW4Z{r9${xZTVK+g_b7G_}VkM zDV6qA2It-$N_SeqEmFoav42+LE;qR`R&A`EeJerIx^%dxQc$zK?c$xXF;?Q|xSxGx zCPZKOQXC_&vZPnZFq5-~icp@zcrjXmm@Pj&S|650^mai}WiaqyR)l?_G22h?bMnk& zg_OIiZEhry-Mk#2xw6tZRajii5Ux8l?N;WB2Y^~GimiF3B`KKaQ^#^(61kyEU#Ctdsi@d z&3+P99Y9m{n%kzdn6;JGGhQO!kmoGVG=**XuM(du`aSo(mhgx7>^Qx;a3~y6XV`Qr z>2wa-mBLF^!n%14opg_HYX0=+p|EC;Xh;XRDPEWvC}WWE(p}Hq^yDnrn)~bMfz>2S zO8iGFl;Rr>VzA=3jiW~Lh&QhEFtgDr_#~r2WIwH#tzu$758wjlH-*^M9L|hCgCrgrYjJeK08DgJlKReP|7B zU^tPn&UY_o_fqwV(>?oG;eqEaF$M4Vvl09+EMjc$nmdwZhkaCX1s?{#URi1j2vHsJ_}f z>9?%YC1p^;)Z;<+G$pWw)9@vR0=WW>93Rr;Z&JzAKN^8B9Ci*#kHb8fWEg7QkdO-b zX+K7^PIe$OLEq8RL}abi-)?XE+ABok8TrEe7*iRMsE5U! zBL9NHGeOATjwiv2{j+51LfY5vvIhBXWmYBV?`x`4i1VI$8AadFLQ@$BVb3AWaGpM$ z&}gi6mOW0Nb3h{}ww=a!o|#uNpBjoDzD0_F{eA&(_Y9R;|F5()EpNi>lVwQ-3;P;c=w=->|E^KTzTKPrDE;>ctmlgw2=03`Tu111?5?b$3;00x2 zq)eyXujI)?ET`I|xXeu3I7LOfBHN{{&*3uT`4FEroU6q3m)fzH)-tB zPq0h@m#h2yE<9i+W2mmLp(294xzA$qHuw}qH_V+qF1_b`aU09Sx?kPgWtxRxH0j67 z74opmv*_LDr#^Ul@0otO`ql7H>WTV0F2EupJyaOq*_%4&yps7W0Xr!LsLCcDvT#V- z;ARa9$_u+!q_)}zH*2cB0<>Dt5K|%#XRIr~dvNa$4ubbV`lhx}r06*({+68|>D1lg z%^5odm_2~HO9IW;U`*Sb>&~oC;F82zM9W;9s(-3#ljQs`klIm#YXWE9ONPhQe)3sy zAFB^yO)I}L&7wv04D&=e(g?)tC8t4%4iK3V}Bput@<%$D8bQ&PNuf+mhs=BK?iGSi-(KTzB1cO8%doB;c$HO2L?Q zDrMPbJcy*pCM$A$ztykXYklDqq59Vw{qn3T)z=dX6`$M0d zH<56;mhh1#KmuR%&BA7xdGL<}0|!HiE-fX$!T%~1)Z)Z=n*h1XtYs2%44xNYE{aID z?zFUlDSUPq4fht^_z}(-Zb~wHi+DKXaV?x4wTdFAY>NN=#r0B_t(G<@{x)4%bp9i- zstRKeq{hV{jIWt0&6n=^$ezn|eEWv2TM3r)64u|gsc(64D{!46A40P?p72b) zZp}^|Y-5OVysADn0&YGKVjA}{%j;coMtz&B{k~zt+~mOmsi##D53%(~?#RXaKgNjt zID|qj+cNZup0|pY_k77CBR-3Gq1bN%<(NS%oMI_owD2n=%mXafSFIJBd~*7bEOY8! z@Z??k{-Ij`floTqH&~4Azn(@9KH}n8{FKqG4(M=kNFUI!il4LvJuDA0da)%ges2=c zZorwwbj^{MaFI-ft6UAYgW$iCttP^|R}Nn~UlY*O8dp6ytder1GyQo~H8+}-f$`R# z^d%_ey?<=-x0g^lS*mb|HmiQ3@#YiMa9I?|07QR-r^QnDs2hSqt_}xtW9Tdnu@YC5 zH!3tEdGl22^)j!VmGw65XQWL&*Wuh``1)jrJ)1R=-E!OD(t=u?o2gojBkEpQ;jzV0 zT=rN8lF(;KGje4k6bT7E0Lht``sY~iL0@PnNJp34FtzzcANrYIL>#Eb{M&O2k*LG3 z2nsJChU=0cLAPH(}9;Hj+Z+Hzz*5Izd7xhX)1BB`ekt_UK2Tcbu%9RP+J9n3zRN!7)t0(J06zm;<=a|kmz z94BHdocLw@tPkG6WbnBghvB61)wtXkAEPwmLw`w8~f*KQ&~;~ilDjY z;CuF{tLyjjoZb4eczw>M=ee6RA7ByDA;<36l1rF47~deubXghRVw6_aL{xj@vUc(T z*He3>>Q|qhYe9bxCqCnE`yCw+zT3(>*-Qf){f)4mLCQAPVQ8iZhj+j!bd7&1 z*m|*reVQpi73%-#YNT^-&_^ZSL9D}4)aT);&F-*Y+Ew5Pm2$NDqD<~R`}2o0)iY*|%NaWUjyw76H8Uvr{BmeFLh7DzE6-1JZ}0j((qy^dn1?RhC& zOWOk@#|jUfmw&0^JLM0W=5N@A`j5@cb(#(bi%D1@_Zy<6Q_sO^5kfCN_Lt|Bw7njG z>YbGU>V0Y;4(PDkDM4Px(HXs^@^sgn0<7n(Ds;t8CD5K0l=V3IvbvGfkX=zmI5CVG z64O)QIvB-{ot^OR2ps?A%GxWkK8(YSrKeztxn{2)`1}jj!A3>`JaW!~c6A-M42AjC z9GZA2BGb$G_lwWL&jy(ouIZ=qVR-mHY}C0N4M(vM7j0s-e8@|Ad(+5T5^*3uiu}z#HHW%RX%yb9QJr; zDCS+}W>rj!$lW&_`^htRj*ovZ>k{@7)CLhc4d_WFuHJ*MeJ0P9VXmX;bB=@4LZON> zu!EfmDH&3rpfnb_xH7)3eSuj2u3G;|RgLffH`2Wv_}1=o zSueNqQ`bPdfohTk3O{{R2b22O)_fn(Sn6j2JG9#1*GDOSu+|HEn6yv-9c)6iNRN#it6vxXW8G|c-IPObTxbzUXkO~WCpJ& z>6ead$Q2I;PKT-N`u60MAhew^hT}{(1TqE{w>bHGekPajxK#5eZr@M8=Zq8i1Nm`6 zfS*=?&A9ETSoG+qT?jfbaD2qWcj^$e+I_}OINURl(LUB;jaC%*U=1as&-!kcO_ZURpa)#|ju1$i0aidOP%MU)`e4+=<)>OU z0=_^dRw!h<@!uQ*syO18XvjK;T3qABF)LX0CsonUQ+E5lXMUVW;;(7IZRSa%d_1&Z z%dhW7*I0q>r8E93>fR(n?KFIEMLY~Y;PB3+MS*-C+frlGQ?e>=&Z0d{eh5rx zlstUgcpkmwb&tX|dw-Kmsg+kQhmV2J|1E&me1RHuC~)XlKS_;vYJ>bS7Uj)RMrbV2 z#OD*CSRS-42W)LiF6>j7<<8)GMiLR>)jj{ukOMV`Czy*+AoD!0G(|!&s=tuNoT#Em zzMSNOarqU@k!mAL=Lj3LrZ76lJhs_NB`XEH&87AHW4l_TcRGR{-d|#jrOij zDW>XK4s(c>RNh07o^0X~TYz9nEr>imu7I~xZ+mThx0@n}xapzUC*$FU$L8#8dU`D= z3A0IL%O$$`T1gTr`Y{;Wly24fyBWJr*lh#@+KbUk5CC+f#6Ep$YZ?%_ zgRDF}6ia3?qn;9n$Y+E^;w`3m&0- z#9{LmmV4RoTo*rf3|mM= zM~X6gCgH@!BKA9;UM~??&Q3gEvM$Eh`w&jV9(hI4ozB)xK0)jI%P%fYEem0M=#mpH zcEIgKoOECqRoGEWDm9kT}uMqc3#{&%L5xZXoM}@Qe;8{ zZBH<+=Iq;atev`NH{R|S+HWX5!!;sX48pI-B~C@{OBnlFm|?z4hlXLD^@JswG~j!+ z_)QZR)SHr0Kh-)b)?KFmwo>aq_Ahg&!@O2N3FY~c~vLX(DZ?w3OF+k?@WqEn(zreV9j06iMpx#kVyYcs7uPHXnhJhWJr zR&6+JsZLU5A*T3W{Q(p&akKS%or-OLshB`Nrz>TQ5G{SDX{f8fF7=&hRUP?8Q)AEl zn`>?`%p$u9JwyTKBlN}M>$0=e%1$g~`QzQ}SW$*BpSEt-;-=&MjnbMa>xQ!_S^A)L z4kYMNe}cmO>kk;3T9qb_4OHftF`!lQWmE2@S@&s#_qJljw|>M;8IfdV#XT5x!I z=o7>t(>s`BX5@rL%-Gp9=jmNRKP1G`^P74#;j-WeMRh^c)LlR3Flc!Gt_j1p-yWubL2T+Nj{lS2Q{$ElN z{~s|R|NmzJ2JHVpGX=h71P>2iF|qBlW{UfZJzf5F8y5nxpyaXs6TtkB@PCaD@k>k(ag$qsUWdMcJ{Uy`+SLgx%r~oMB zx7{t|gW29N>?YIF(UolS3FsBRA7!}z#CTWt9-^#U&WAopz@ZaSK|$e&c@P8GvrpPtdqn>`QvwxUU;6P4FbkAYjf!N_ z;Sm|0?H|>2#(BFVt6*l0{M4Qdv2EQTPcvfx-uJYVUHAJZ&Dci=&~nV0m9(|{9!aD! zb8Wsbx1Y4VBA@jlG{zbXOtjrjeyB(4bJCsWVFnWcG_2{zH{pK*1^@n$;D3BcyWZ}Y zgOn>7uVzPR=Z>RcIeKVdz%v{Wg`tQ$Iz7WD^-a%x>2Mw64D|-8e+&fmDe6}h80Y&) z?NZICiA-PFgv7+|^zvDxP|A8Uayybuqu91J66tVz z=#QrB`QiXUr>!RyhC+iV`788_nnjhqTK5BXWY)7AwPLRAqI3c{6{yHuCSpEb@7Z2% zlZyq#y~?8~Ey~8IG!mQ8I(bO`wCdJY3rl|`^$+H`n+Nr)EDV}=stJV3x~=4*K5;rf z`hLTeyeZ)x%T;tpYH`2dpMlwjsAf72c4LBeOW-m~WTGR96498fwgK2nZ&M{AtKVi+ zRJZPoneu%7xlm@}O48=xo3UVoVzqln8RYlDOE0Sx+Fir{G1c|=kF;RU?>%<}85voo z7S>DCf}#RXGqf7XRBWkKtgqw^=MuyKIAZFM2 z@IYvB+NPzT^iuhkd_?2RK}u(Y;hvhMp6Gw(6qyA{)ZtceHuz75F@btrUlsh%dfNj; z6zeC6{~yW-{{KVt|9pu4pS2p)vk^KjE`CDZ{CrPy(d@dVU{W2*;B^&5^v&2pXP2yx znxjsePb{?ly;DCX+pTFl9=6&Q#$h(&cAyY+;#}ac6>?|KRLOcN`_27rE?wAbXC{J! zr;6dp!Y?i5IO^T4RWf&UF-v!?{8CjaY_*|n`=t86TT*L-_`4`;2V9{R{gEzmlSDf% zC#4mM?YBP&fLNs=K%=d6f1zpp$H*}zow%fA}yC$DTgw98ug`p3;^76X_alf82m3}As zZD1p7I&u8y!*A4&xnVKVQ{i)<$eKrcI_&Lk)W2vg*5Aa<8Oqp_20dvMD3OsC^2o}i zBCgDnF*x@e=Tlv1%)=%epps#HwwdCWWkFQp0@O7FY8*Bb^sfed04gO~md}=qY;*xx z$C_PUZK9iv6j|{t{=!Mw!!9;|YFOCOJ#M`QY{1p060Jfcg!~mcSwJGYj<$3A3xBQW zO&-1i%to-dQUS|hFYsqi4na|r`^p9nplT{mpU=jm9$kDft7THg;9@uyW8$i;^5o!f zIQ{4XlZ4M1sbb#wRl&OSzc+hSWMI$G*~OYKHoWSInOyj4kF-DA)L$(!2RKCQ3nV^X zON3+Jy+U%3FYBuqHM2KdArcwLI(NQZD#IA!{hxtpRgDsI*+hc!`R-#~yDgAv^WN^9 zkL6aL23>%p@a`PiX=l2A^s+VF^dyg!>F)>3XIhT@{zDppN-8>2?;9F*cJ;lLg3r8R z(U#yt40Mo+6p|E}gGnJ6Gcwqq$fWqMQj}IkT};)Vi2$^hW@-y!Nxx6aTaQD{&84ZY+S&7b`r;;?bUJLaklXl$uDE+P9IV&@Do+feh|Y*UiZ&mbp!+q@j4mwpTpHi;~fnY+4qHWmtM z)X?z?bxf}uE3)|lq2@slV;LB`3hU~Jp=lQ*!{|qhOCk=#0GkvJWkLml>U4>JX({aS zDuTDCr6wzGw1|E0A!f-iZ9iMZxv*mLs)WLY-7GYp!%g50MP zhCsO%D@*lw_^YH)qO{bTai7J)02F^w?*iH%48t=W9B}89qSiXU6;ussf*lX_;{o2C zbX?crK!vX-Su16V(*2YC7I_v$Z0cZO%MEu|t>2=VVje`S=+CNy4m#S_I3_rz-8Tuu zr#wDtf43{5$4Q-}yen~xhwjWc7e2@{{gR(}X(~HavH8RmNZl!-HPbPpRCwgG6Rhzn z%uG}?Fb05H*%8Dog|Zl~ch+Pww7O z=kvO+Jznqm7_B~P_P08w<_x`k=r0r z4d>-oAIsDye!{mx1;;_zBP|}wX@4jy@+O&_YD0bXBZ)p(npBLy@d>6ig;rAa!QW6Y zB&|nz^BMqkRzqU46!L*}=9^*~Jr(X_ROPC#`gy{qQdIgofvk zFLkrE+@VleDRSqBwE;F|-lShf*$A~fP!-s?U^({WXcJ#ch=+Sf+v z6{UJGOB+eE>vQ>v%QmWuvxd(haEtT;Z9|ar-RGiyt2IFH2_eZK$l#!ZPy01<^U?X= z?s#iVD?J^!muL{WDu+GWg@3*Y2!js^(g8(Nmnvh?CB<8t89@aFQN_aTr73!{5}_NW z+A2+%TF;=o9-2l9fPD(7^HRswJ3|S)T@4qpaT~s@cIs z+=U&J-s&qejB;U^cb)ok!^)(FB;5e74}SKny3L0U-b@x$#+otJl0)A&nk1 zlxl$La+hYxby?ww3S+@FV$BO3 zRMI{_1&pYcHlT=dFM1*zH2TT2d(^B|nf(7`b93T2MniH{dtHu>B*D0=o|^WCQLt_5 zlZi@0B^2|E)SsTTY>%duCl7;xhD>%xr901&R!!bkLD@T1B&#((N2sP5g4zSUsVnMo{>g>OG>5G4Ls zFdq2t9SPMfFo!s9dbCsBM&XOA5zjMZZUF~98E-eQu;W_huy;Tn_d(|Oa=Z%h6o*2q zsUKw|8D2E4?Ew9%<8W3Z1v{f9D;DL9?69?ZXKtDRp;!y|973hOL?+tx!lpH}GHWSzS!x6Kqn!&8nhK0_}nl&`HpfAtn1xyMLyNLx2Xcc za2ES$f=a-&goYRFMq;B8UPFxn=+7DJx~ zY}pzrCwM{~uCDU~kTqNfPORZG=uuOt1ohkBI2XU8n3*XLyQ1QWE zt!!hm?`}cj$=lMM6eBSqc&U4Q9JO?%Dod{f>tB zetwbVgj=kV&HCd4ty_4rtt-JdZ{@!S>#D2lmI933-iaCRTNv`0L*{h&nL$4^ANO5? zq^Mj*UN3Q|A&p}LCB;|tKlug~kWyEc`6M(vQuzry^(6isY6AR>(_P@F|L{p>q0^8H z_rSS4jYh@yui4hLl);6$1qK&``0^eQzbwH*tHuJ^i;=xm=w+~hTD9fT3x~hAK`x?&pO7YFY-yB@QlX>-eG9&w1qPxIYs+5?!Fg zoZR84Qkb8Hzk4)i6`y@`e#vUycUr=!95h>II!jxVV(ZB1X|*5O>Qe}{b7dfYCU&Q? zmR6$Dm-O`n|D-R+se&s8i6=dgdQ-zYFe2m^^YS+@>MyX4^R7hju86-H zC9XJ!7L4miIndSZ^@~sKvJp%_V{p=D$iZ9Q-DK*Nk;$}5-8j*}Wz2E`+Llgpp1ZSR>AcwT5=M!_P3lQiOay(D#~jQUagvB09li7+ z$DmkmD@j`(v%uG~zXh^kVscdHzK}94tQb*kGSN=dd`o2Up#?<^lLJbz7PaOmGZgIp zlDi!pH1QC9tr=gMfi~SS2Pw7TA+$jAF)j#rwQ_xhU_<}`s92d*y zi?Ev7yAjJTqf5GuB#Cy@t6T`gm}xCU7&7&frO-RYu{Ef4kapcuVd|ey4MKK@XByNf z480!g*O}geZt^RmyhrWqA!vihi$KSPG$2UbB1Hz2bvxo3&&U;>C2_S$1({_$hizW z_ec!&bT|gU^hq^&b|9DF_LST#yL>w5dUZ4eZY+O$uc|rTj^{QRXIFeNI=yPU~}BOzqkgiBa-HhTZ>L%XDd zD{JKM+F$CuXl=y5c&A;~d+2b+`~I&sr2eLAfiJDG(zLq8Zoa2ivXem>^K_41sc(B- z7}k6Gg&8829|MYvgk0wi7NhtLRsjB}D1PIaugsIX%Iei~rU2bB-DJhf&~A!K1rvv_NPOn#WkdMEI?8h}0~tD!Z= zq?2%guTV%)aZz(h02cT~^w8i1cS*iGFy8tUWHdiZn)O1GY&L66D6PtYg z3iGk|Y24S3_q2&tIk8T>jo5iN1jlu@2pYz?>;X)KO&SG90iJxYw8eGj$_e`|J zQHT19u=_f{G`ZHmO}QbE?5Y640$q~MrtnteDZe{4N!tvsSPPOn0sxQV`)8MzNS0sbOan1Jp7&wn@)3{WE=%;4@yGoXv$#o(d{g&0W?XMMKdhHV*0gqib%HYAf zF%bl8;(2B4r;<$Dhc!)Iq+`@T9`j0@QF7~A*Xxr}9vlX0t)U5sLu*5S_J?TAY)yMD zP!)6v>*_~B>xXVr@5b>>D>Eq!8hm5MuKbTzSe~UOc7;4}rdS$o{5`O?#@5ycih@aX zU6xb4%>i9BY{!9RF@DG~MYGBW@d@{SooGUAguOCxRbTzYQ{eWD8^`m`Wj*QZkg&nF zK(oqUChr`7yI8i|Mz+zvHPCY#g%zG&4HG%(uK|s-=oroLt^78WzyHKQMNHqDy$Y+| znu3IGaS>{_)QL<)K-|Oee8RVSTKiWc2g8xK3}xXy;U7cu-iKEW*SA;ZWS&RLMsY9b zc7ep?8Nuh}ZYe5GUqG6XIoYruXMBdO#(m@%F5$)%1Beqta`^cCOROU^ts+}N5tj?uUlr5vTV>)`y31EcD z{qVlg{g0`Ko}d3&@XWt@;;g{h4SJTkbktV%)xORo`xyP>#pN%qP}l_Tbq_SQ??GA6 zMqU2*GCP84pX!;ZWe`*UasAO+yimpaK81!&l2!vgKzeijV1E(pApJ0X@)+IaoN*`z zCl?Q|hibfZ<#@1Lfcapfk4^X|i!?fca?P}n(zxuK{!Npo=v(*Xa8O*?U8b|Z={|I3o~4F#H`tiIBK+T>0TiNp2<6`5h;-*l zRN>);?2Y(3BDzoGOCP0xpGxhlWcPW9;69$B&$)b%%;*mKgQnltL@uGJA?SB literal 0 HcmV?d00001 diff --git a/docs/installation_flow.md b/docs/installation_flow.md new file mode 100644 index 0000000..49e97cc --- /dev/null +++ b/docs/installation_flow.md @@ -0,0 +1,88 @@ +# Installation Flow + +This document describes the installation flow for the CNOE AWS Reference Implementation. + +## Overview + +The CNOE AWS Reference Implementation uses a GitOps approach to deploy and manage addons on an EKS cluster. The installation process uses `helm` to bootstrap the EKS cluster. Detailed installation sequence is described below. + +## Installation Process + +1. **User Approval** + - User starts by executing the `scripts/install.sh` script which displays details such as target EKS cluster and AWS Region etc. It also requests approval from the user to proceed with installation. + +2. **Setup Configuration**: + - AWS Secrets Manager secrets are created to store configuration and GitHub App credentials using `create-config-secrets.sh` script. These secrets are fetched into the cluster by External Secret Operator. + - The `config.yaml` file is used to configure the installation. + - `install.sh` script reads the `config.yaml` and based on the specified cluster name, fetches kubeconfig of EKS cluster using AWS CLI. This kubeconfig is used for helm installation by overriding default kubeconfig. + +3. **EKS Cluster Bootstrap**: + - The script first performs helm installation of Argo CD and External Secret Operator (ESO) on the EKS cluster. It will use the temporary kubeconfig for accessing the EKS cluster. The values used for installation are static values from `packages//values.yaml` which are the same files used by addons later. + - Then the script applies custom manifests for these addons from the directory `packages//manifests/`. For ESO, this directory contains the AWS Secret Manager ClusterStore manifest and for Argo CD, it contains manifests for External Secrets of in-cluster Argo CD secret and Github App Argo CD repository credentials. These External Secrets use AWS Secret Manager ClusterStore. + - Then ESO will create corresponding kubernetes secrets for Argo CD cluster secret and repository credentials by fetching values from AWS Secret Manager which were created earlier. + +4. **Addons Deployment**: + - The script will wait 10 seconds and install the AppSet chart on the EKS cluster which creates ApplicationSets for all the enabled addons based on values in `packages/addons/values.yaml`. + - Each ApplicationSet will use [Argo CD Cluster Generator](https://argo-cd.readthedocs.io/en/stable/operator-manual/applicationset/Generators-Cluster/) to create respective Argo CD Application. The Cluster Generator will generate one Argo CD Application for each enabled addon as there is only one Argo CD cluster secret. + - Although the Argo CD Applications for each addon are created, each addon will take some time to reach Healthy state due to dependencies explained in the [dependency section](#addons-dependencies). + +5. **Addon Configuration**: + - Addons are configured using helm values + - Static values are stored in `packages//values.yaml` + - Dynamic values from Argo CD cluster secret labels/annotations depend on configuration from AWS Secrets Manager. + +7. **Monitoring and Verification**: + - The installation script waits for all Argo CD applications to become healthy + - Addons can be accessed through the configured domain based on path routing settings + +## Addons Dependencies + The following is the order for addons reaching healthy state when using Path Routing. + ```mermaid + flowchart LR + ESO["ESO"] --> ArgoCD["ArgoCD"] + ArgoCD --> AWSLB["AWS Load Balancer Controller"] & ExternalDNS["External DNS"] & CertManager["Cert Manager"] & Crossplane["Crossplane"] & CrossplaneComp["Crossplane Compositions"] & Keycloak["Keycloak"] + AWSLB --> NGINX["NGINX"] + ExternalDNS --> Backstage["Backstage"] & ArgoWorkflows["Argo Workflows"] + CertManager --> Backstage & ArgoWorkflows + NGINX --> Backstage & ArgoWorkflows + Keycloak --> Backstage & ArgoWorkflows + + linkStyle 0 stroke:#2962FF + linkStyle 1 stroke:#00C853,fill:none + linkStyle 2 stroke:#00C853,fill:none + linkStyle 3 stroke:#00C853,fill:none + linkStyle 4 stroke:#00C853,fill:none + linkStyle 5 stroke:#00C853,fill:none + linkStyle 6 stroke:#00C853,fill:none + linkStyle 7 stroke:#E1BEE7,fill:none + linkStyle 8 stroke:#FF6D00,fill:none + linkStyle 9 stroke:#FFD600,fill:none + linkStyle 10 stroke:#FF6D00,fill:none + linkStyle 11 stroke:#FFD600,fill:none + linkStyle 12 stroke:#FF6D00,fill:none + linkStyle 13 stroke:#FFD600,fill:none + linkStyle 14 stroke:#FF6D00,fill:none + linkStyle 15 stroke:#FFD600,fill:none + ``` + - The colors of edges in this diagram indicate the parallel progress of addons to reach healthy state. As seen in the diagram, all the addons will reach the Healthy state in parallel except Cert Manager, Keycloak, Backstage and Argo Workflows. + - Both Backstage and Argo Workflow addons depend on the Healthy status of External DNS, Cert-Manager, NGINX and Keycloak. + - This sequential order for these addons is due to dependency of Keycloak Client creation for Backstage and Argo Workflows and both these addons also need to reach Keycloak using external URL to verify SSO configuration. Therefore, both Backstage and Argo Workflows will stay unhealthy until Keycloak reaches healthy state. + - The Keycloak client creation is done using a Job pod _(`packages/keycloak/manifests/user-sso-config-job.yaml`)_. This job pod creates the Keycloak clients for Argo CD, Backstage and Argo Workflows. It also creates the kubernetes secret `keycloak-clients` containing client secrets. + - Once the client creation is successful, The ClusterSecretStore _(`packages/keycloak/manifests/keycloak-cluster-secret-store.yaml`)_ is created so that ESO can create kubernetes secrets for Client Secrets in Backstage and Argo Workflows namespace. + - When the kubernetes secrets for Keycloak Client Secrets are created in Backstage and Argo Workflows namespace, these addons will reach Healthy state. + +## Uninstallation Process + +The uninstallation process follows these steps: + +1. **Remove idpbuilder Local Cluster**: + - The local Kind cluster created by idpbuilder is deleted + +2. **Remove Addons**: + - Addons are removed in a specific order to handle dependencies + - ApplicationSets are deleted with orphan deletion policy + - PVCs for stateful applications are cleaned up + +3. **CRD Cleanup (Optional)**: + - Custom Resource Definitions can be cleaned up using the `cleanup-crds.sh` script + - This is optional and useful when you want to completely remove all traces of the installation diff --git a/docs/installation_with_idpbuilder.md b/docs/installation_with_idpbuilder.md new file mode 100644 index 0000000..bbfecb9 --- /dev/null +++ b/docs/installation_with_idpbuilder.md @@ -0,0 +1,347 @@ + +## Installation Flow Diagram +This diagram illustrates the high-level installation flow for the CNOE AWS Reference Implementation using **`idpbuilder`**. It shows how the **`idpbuilder`** and local environment interact with AWS resources to deploy and configure the platform on an EKS cluster. + +```mermaid +flowchart TD + subgraph "Local Environment" + config["config.yaml"] + secrets["GitHub App Credentials + (private/*.yaml)"] + create_secrets["create-config-secrets.sh"] + install["install-using-idpbuilder.sh"] + idpbuilder["idpbuilder + (Local Kind Cluster)"] + local_argocd["Argo CD + (Kind Cluster)"] + local_gitea["Gitea + (Kind Cluster)"] + end + + subgraph "AWS" + aws_secrets["AWS Secrets Manager + - cnoe-ref-impl/config + - cnoe-ref-impl/github-app"] + + subgraph "EKS Cluster" + eks_argocd["Argo CD"] + eso["External Secret Operator"] + appset["addons-appset + (ApplicationSet)"] + + subgraph "Addons" + backstage["Backstage"] + keycloak["Keycloak"] + crossplane["Crossplane"] + cert_manager["Cert Manager"] + external_dns["External DNS"] + ingress["Ingress NGINX"] + argo_workflows["Argo Workflows"] + end + end + end + + config --> create_secrets + secrets --> create_secrets + create_secrets --> aws_secrets + + config --> install + install --> idpbuilder + + idpbuilder --> local_argocd + idpbuilder --> local_gitea + + local_argocd -- "Installs" --> eks_argocd + local_argocd -- "Installs" --> eso + local_argocd -- "Creates" --> appset + + aws_secrets -- "Provides configuration" --> eso + + appset -- "Creates Argo CD Addon ApplicationSets" --> Addons + + eks_argocd -- "Manages" --> Addons + eso -- "Provides secrets to" --> Addons + + classDef aws fill:#FF9900,stroke:#232F3E,color:white; + classDef k8s fill:#326CE5,stroke:#254AA5,color:white; + classDef tools fill:#4CAF50,stroke:#388E3C,color:white; + classDef config fill:#9C27B0,stroke:#7B1FA2,color:white; + + class aws_secrets,EKS aws; + class eks_argocd,eso,appset,backstage,keycloak,crossplane,cert_manager,external_dns,ingress,argo_workflows k8s; + class idpbuilder,local_argocd,local_gitea,install,create_secrets tools; + class config,secrets config; +``` + +## Getting Started + +> [!NOTE] +> The installation requires AWS credentials to access the EKS cluster to deploy kubernetes resources. Therefore, the installation steps can be executed on local machine or on an EC2 instance with IAM instance role. If using local machine, please use [`aws-vault`](https://github.com/99designs/aws-vault) command to run local EC2 credentials server. Find more information about this requirement in [installation flow](docs/installation_flow.md) document. + +### Step 1. ☸️ Create EKS Cluster + +The reference implementation can be installed on new EKS cluster which can be created with following tools: + ++ **eksctl**: Follow the [instructions](cluster/eksctl) ++ **terraform**: Follow the [instructions](cluster/terraform/) + +This will create all the pre-requisite AWS Resources required for the reference implementation. Which includes: + ++ EKS cluster with Auto Mode or Without Auto Mode (Managed Node Group with 4 nodes) ++ Pod Identity Associations for following Addons: + +| Name | Namespace | Service Account Name | Permissions | +| ----- | --------- | -------------------- | ---------- | +| Crossplane | crossplane-system | provider-aws | Admin Permissions but with [permission boundary](cluster/iam-policies/crossplane-permissions-boundry.json) | +| External Secrets | external-secrets | external-secrets | [Permissions](https://external-secrets.io/latest/provider/aws-secrets-manager/#iam-policy) | +| External DNS | external-dns | external-dns | [Permissions](https://kubernetes-sigs.github.io/external-dns/latest/docs/tutorials/aws/#iam-policy) | +| AWS Load Balancer Controller
(When not using Auto Mode) | kube-system | aws-load-balancer-controller | [Permissions](https://github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/docs/install/iam_policy.json) | +| AWS EBS CSI Controller
(When not using Auto Mode) | kube-system | ebs-csi-controller-sa | [Permissions](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEBSCSIDriverPolicy.html) | + + +> [!NOTE] +> **Using Existing EKS Cluster** +> +> The reference implementation can be installed on existing EKS Cluster only if above pre-requisites are completed. + +### Step 2. 🏒 Create GitHub Organization + +Backstage and Argo CD in this reference implementation are integrated with GitHub. Therefore, a GitHub Organization should be created in order to create GitHub Apps for these integrations. Follow the instructions in [GitHub documentation](https://docs.github.com/en/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch) to create new organization. + +### Step 3. 🍴 Fork the Repository + +Once the organization is created, fork this repository to the new GitHub Organization by following instructions in [GitHub documentation](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/working-with-forks/fork-a-repo). + +### Step 4. πŸ’» Create GitHub Apps + +There are two ways to create GitHub App. You can use the Backstage CLI `npx @backstage/cli create-github-app ` as per instructions in [Backstage documentation](https://backstage.io/docs/integrations/github/github-apps/#using-the-cli-public-github-only), or create it manually per these instructions in [GitHub documentation](https://backstage.io/docs/integrations/github/github-apps). + +Create following apps and store it in corresponding file path. + +| App Name | Purpose | Required Permissions | File Path | Expected Content | +| -------- | ------- | -------------------- | --------- | ---------------- | +| Backstage | Used for automatically importing Backstage configuration such as Organization information, templates and creating new repositories for developer applications. | For All Repositories
- Read access to members, metadata, and organization administration
- Read and write access to administration and code | **`private/backstage-github.yaml`** | ![backstage-github-app](docs/images/backstage-github-app.png) | +| Argo CD | Used for deploying resources to cluster specified by Argo CD applications.| For All Repositories
- Read access to checks, code, members, and metadata| **`private/argocd-github.yaml`** | ![argocd-github-app](docs/images/argocd-github-app.png) | + +Argo CD requires `url` and `installationId` of the GitHub app. The `url` is the GitHub URL of the organization. The `installationId` can be captured by navigating to the app installation page with URL `https://github.com/organizations//settings/installations/`. You can find more information [on this page](https://stackoverflow.com/questions/74462420/where-can-we-find-github-apps-installation-id). + +> [!WARNING] +> **If the app is created using backstage CLI, it creates files in current working directory. These files contains credentials. Handle it with care. It is recommended to remove these files after copying the content over to files in `private` directory** + +> [!NOTE] +> The rest of the installation process assumes the GitHub apps credentials are available in `private/backstage-github.yaml` and `private/argocd-github.yaml` + +### Step 5. βš™οΈ Prepare Environment for Installation + +#### πŸ“¦ Install Binaries + +The installation requires following binaries in the local environment: + ++ [**AWS CLI**](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) ++ [**Docker**](https://docs.docker.com/engine/install/) ++ [**yq**](https://mikefarah.gitbook.io/yq/v3.x) ++ [**helm**](https://helm.sh/docs/intro/install/) _(Required only if using plain shell script for installation)_ ++ [**IDPBuilder**](https://github.com/cnoe-io/idpbuilder) _(Required only if using ipdbuilder for installation)_ ++ [**AWS Vault**](https://github.com/99designs/aws-vault?tab=readme-ov-file#installing) _(Required only for local machine installation)_ + +#### πŸ” Configure AWS Credentials + +If the installation steps are being executed on EC2 instance, just ensure that the EC2 IAM instance role has permissions to access EKS cluster. No other configuration is required in this case. + +If the steps are being executed on a laptop/desktop, follow below steps: + +1. Configure the AWS CLI with credentials of an IAM role which has access to the EKS cluster. Follow instructions in [AWS documentation](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-quickstart.html#getting-started-quickstart-new) to configure AWS CLI. +2. Once AWS CLI is configured, install and start the EC2 credentials server. + + ```bash + aws-vault exec --ec2-server + ``` + +3. Verify that the EC2 credentials server is started. + + ```bash + curl -s http://169.254.169.254/latest/meta-data/iam/security-credentials/local-credentials + ``` + +#### βš™οΈ Configure Reference Implementation + +The reference implementation uses **`config.yaml`** file in the repository root directory to pass values. Refer to following table and update all the values appropriately. All the values are required. + +| Parameter | Description | Type | +|-----------|-------------|------| +| `repo.url` | GitHub URL of the fork in Github Org | string | +| `repo.revision` | Branch or Tag which should be used for Argo CD Apps | string | +| `repo.basepath` | Directory in which configuration of addons is stored | string | +| `cluster_name` | Name of the EKS cluster for reference implementation
**(The name should satisfy criteria of a valid [kubernetes resource name](https://kubernetes.io/docs/concepts/overview/working-with-objects/names/))** | string | +| `auto_mode` | Set to "true" if EKS cluster is Auto Mode, otherwise "false" | string | +| `region` | AWS Region of the EKS cluster and config secret | string | +| `domain` | Base Domain name for exposing services
**(This should be base domain or sub domain of the Route53 Hosted Zone)** | string | +| `route53_hosted_zone_id` | Route53 hosted zone ID for configuring external-dns | string | +| `path_routing` | Enable path routing ("true") vs domain-based routing ("false") | string | +| `tags` | Arbitrary key-value pairs for AWS resource tagging | object | + +#### πŸ”’ Create Secrets in AWS Secret Manager + +The values required for the installation to work are stored in AWS Secret Manager in two secrets: + +1. **cnoe-ref-impl/config:** Stores values from **`config.yaml`** in JSON +2. **cnoe-ref-impl/github-app:** Stores GitHub App credentials with file name as key and content of the file as value from **private** directory. + +Run below command to create new secrets or update the existing secrets if already exists. + +```bash +./scripts/create-config-secrets.sh +``` + +> [!WARNING] +> **DO NOT** move to next steps without completing all the instructions in this step + +### Step 6. πŸš€ Installation + +#### ▢️ Start the Installation Process + +The installation can be done using plain shell script or `idpbuilder`. All the addons are installed as Argo CD apps. When using bash script, Argo CD and External Secret Operator are installed on EKS cluster as helm chart. When installing with `idpbuilder`, the Argo CD in `idpbuilder` is used install these initial addons. Once Argo CD on EKS is up, other addons are installed through it and finally the Argo CD on EKS also manages itself. Check out more details about the [installation flow](docs/installation_flow.md). + ++ **Install using script:** + ```bash + ./scripts/install.sh + ``` + ++ **Install using `idpbuilder`:** + ```bash + ./scripts/install-using-idpbuilder.sh + ``` + +#### πŸ“Š Monitor Installation Process + +The installation script will continue to run until all the addon Argo CD apps are healthy. To monitor the process, use below instructions to access Argo CD instances. _(If using EC2 instance, make sure the port-forward from EC2 to local machine is set up)_ + ++ **`idpbuilder` Argo CD:** `idpbuilder` exposes its Argo CD instance at `https://cnoe.localtest.me:8443/argocd` which can be accessed through browser. + ++ **EKS Argo CD:** Start the kubernetes port-forward session for Argo CD service and access the Argo CD UI in browser. In Argo CD UI, monitor the health of all Argo CD Apps + + ```bash + kubectl port-forward -n argocd svc/argocd-server 8080:80 + ``` + +Depending upon the configuration, Argo CD will be accessible at http://localhost:8080 or http://localhost:8080/argocd. + +Switch between the kubernetes context of idpbuilder or EKS and retrieve the credentials for Argo CD can be retrieved with following command: + +```bash +kubectl get secrets -n argocd argocd-initial-admin-secret -oyaml | yq '.data.password' | base64 -d + +# OR + +idpbuilder get secrets -p argocd -o yaml +``` + +### Step 7. 🌐 Accessing the Platform + +The addons are exposed using the base domain configured in [Step 5](#️-configure-reference-implementation). The URL depends on the setting for `path_routing`. Refer to following table for URLs: + +| App Name | URL (w/ Path Routing) | URL (w/o Path Routing) | +| --------- | --------- | --------- | +| Backstage | https://[domain] | https://backstage.[domain] | +| Argo CD | https://[domain]/argocd | https://argocd.[domain] | +| Argo Workflows | https://[domain]/argo-workflows | https://argo-workflows.[domain] | + +All the addons are configured with Keycloak SSO USER1 and the user password for it can be retrieved using following command: + +```bash +kubectl get secrets -n keycloak keycloak-config -o go-template='{{range $k,$v := .data}}{{printf "%s: " $k}}{{if not $v}}{{$v}}{{else}}{{$v | base64decode}}{{end}}{{"\n"}}{{end}}' +``` +Once, all the Argo CD apps on EKS cluster are reporting healthy status, try out [examples](docs/examples/) to create new application through Backstage. +For troubleshooting, refer to the [troubleshooting guide](docs/troubleshooting.md). + +## Cleanup +> [!WARNING] +> Before proceeding with the cleanup, ensure any Kubernetes resource created outside of the installation process such as Argo CD Apps, deployments, volume etc. are deleted. + +Run following command to remove all the addons created by this installation: + +``` +./scripts/uninstall.sh +``` + +This script will only remove resources other than CRDs from the EKS cluster so that the same cluster can used for re-installation which is useful during development. To remove CRDs, use following command: + +``` +./scripts/cleanup-crds.sh +``` + +# Installation Flow + +This document describes the installation flow for the CNOE AWS Reference Implementation. + +## Overview + +The CNOE AWS Reference Implementation uses a GitOps approach to deploy and manage addons on an EKS cluster. The installation process uses `helm` to bootstrap the EKS cluster with Argo CD and other addons. Detailed installation sequence is described below. + +## Installation Sequence + +1. **Configuration Setup**: + - The `config.yaml` file is used to configure the installation + - AWS Secrets Manager secrets are created to store configuration and GitHub App credentials using `create-config-secrets.sh` script + +2. **Local Environment Preparation**: + + Using plain shell script: + - `install.sh` script reads the `config.yaml` and based on the specified cluster name, performs helm installation on EKS cluster. + + Using idpbuilder: + - `install-using-idpbuilder.sh` script reads the `config.yaml` and based on the specified cluster name, builds a Argo CD cluster secret from eks kubeconfig. + - `idpbuilder` creates a local Kind cluster with Argo CD, Gitea and Argo CD cluster secret for EKS cluster. + - This local environment serves as a bootstrap mechanism for the remote EKS cluster using Argo CD in Kind cluster. + +3. **EKS Cluster Bootstrap**: + + Using plain shell script: + - The script performs helm installation of Argo CD and External Secret Operator on the EKS cluster. It will use the temporary kubeconfig for accessing EKS cluster. + + Using idpbuilder: + - `idpbuilder` applies Argo CD applications from the root of `packages` directory to the local Kind cluster, mainly `boostrap.yaml` and `addons-appset.yaml`. + - Argo CD in the Kind cluster installs Argo CD and External Secret Operator on the EKS cluster. It will use AWS credentials to authenticate with EKS cluster. + +4. **Addons Deployment**: + - The `addons-appset.yaml` creates an ApplicationSet in the EKS cluster's Argo CD + - This ApplicationSet creates individual Argo CD applicationSet for each addon using [cluster generator](https://argo-cd.readthedocs.io/en/stable/operator-manual/applicationset/Generators-Cluster/). + - Addons are installed in a specific order to handle dependencies + +5. **Addon Configuration**: + - Addons are configured using helm values + - Static values are stored `packages//values.yaml` + - Dynamic values from Argo CD cluster secret labels/annotations which depend on configuration from AWS Secrets Manager. + +6. **Monitoring and Verification**: + - The installation script waits for all Argo CD applications to become healthy + - Addons can be accessed through the configured domain based on path routing settings + +## Uninstallation Process + +The uninstallation process follows these steps: + +1. **Remove idpbuilder Local Cluster**: + - The local Kind cluster created by idpbuilder is deleted + +2. **Remove Addons**: + - Addons are removed in a specific order to handle dependencies + - ApplicationSets are deleted with orphan deletion policy + - PVCs for stateful applications are cleaned up + +3. **CRD Cleanup (Optional)**: + - Custom Resource Definitions can be cleaned up using the `cleanup-crds.sh` script + - This is optional and useful when you want to completely remove all traces of the installation + +## Key Components + +1. **helm** _(if using `install.sh`)_: Bootstraps EKS cluster through helm chart installation. +2. **idpbuilder** _(if using `install-using-idpbuilder.sh`)_: Creates a local Kind cluster with Argo CD and Gitea, which bootstraps the EKS cluster +3. **Argo CD**: Manages the deployment of addons on the EKS cluster using GitOps +4. **External Secret Operator**: Manages secrets from AWS Secrets Manager +5. **Addons**: Various tools and services that make up the Internal Developer Platform + +## AWS Resources + +The installation relies on these AWS resources: + +1. **EKS Cluster**: The Kubernetes cluster where the platform is deployed +2. **AWS Secrets Manager**: Stores configuration and GitHub App credentials +3. **IAM Roles**: For pod identity associations required by various addons +4. **Route53**: For DNS management via External DNS diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md new file mode 100644 index 0000000..9b1dc03 --- /dev/null +++ b/docs/troubleshooting.md @@ -0,0 +1,56 @@ + +# Troubleshooting +The installation process would take 30-35 minutes depending upon path_routing configuration. If the installation is not complete within this time, cancel the `install.sh` script execution and follow instruction in this document to troubleshoot the issues.] + +## Investigating Failures +All adoons are deployed as ArgoCD application in a two-step process. ++ Bootstraping the EKS cluster with Argo CD and External Secret Operator using idpbuilder ++ Creating rest of the addons through Argo CD on EKS cluster. + +Therefore, the best way to investigate and issue is to navigate to respective ArgoCD UI and review any errors in Argo CD application or in logs of the specific addon. + +First, switch context to `kind-localdev` cluster (idpbuilder) or EKS cluster and run following command to retrieve passwordof Argo CD. + +```bash +kubectl get secrets -n argocd argocd-initial-admin-secret -oyaml | yq '.data.password' | base64 -d + +# OR + +idpbuilder get secrets -p argocd -o yaml +``` + +**To Access **`idpbuilder`** Argo CD:** + +In a web browser, Visit `https://cnoe.localtest.me:8443/argocd`. + +**To Access **`EKS Cluster`** Argo CD:** +Verify if the Argo CD, Ingress NGINX and Cert-Manager addons on EKS cluster are healthy. + +``` +kubectl get applications -n argocd +``` + +If these addons are healthy then the EKS cluster Argo CD can be accessed directly in web browser using URL `https://argocd.[domain_name]` or `https://[domain_name]/argocd` + +Otherwise, start a kubernetes port forward session for Argo CD: + +``` +kubectl port-forward -n argocd svc/argocd-server 8080:80 +``` +After this, visit `https://localhost:8080` or `https://localhost:8080/argocd` in a web browser. + + +## Common issues + +### DNS Records not updated after reinstallation +External DNS does not delete DNS records during uninstallation. After reinstallation, External DNS might not be able to update the records with new values. in such cases, delete A, AAAA and TXT records from the Route 53 Hosted Zone and restart the external DNS pods. This will trigger a creation of new records. + +### Certificate not issued by Cert Manager ++ Describe the pending certificate challenge. If it shows message similar to: + +``` +Reason: Waiting for HTTP-01 challenge propagation: failed to perform self check GET request 'http://DOMAIN_NAME/.well-known/acme-challenge/6AQ5cRc7J6FNQ9xGOBDI5_G1lHsNM5J5ivbS3iSHd3c': Get "http://DOMAIN_NAME/.well-known/acme-challenge/6AQ5cRc7J6FNQ9xGOBDI5_G1lHsNM5J5ivbS3iSHd3c": dial tcp: lookup argo.DOMAIN_NAME on 10.100.0.10:53: no such host +``` +This is due to DNS propagation delay in the cluster. Once DNS entries are propagated (may take ~10 min), certificate should be issued. + ++ The reference implentation uses Lets Encrypt production API for requesting certificates. This API has certain limits on number of certificates issued. Due to these rate limits certificates may not be issued. Refer to [Lets Encrypt documentation](https://letsencrypt.org/docs/rate-limits/) for more information about this API throttling. diff --git a/packages/addons/path-routing-values.yaml b/packages/addons/path-routing-values.yaml new file mode 100644 index 0000000..f5f7d55 --- /dev/null +++ b/packages/addons/path-routing-values.yaml @@ -0,0 +1,47 @@ +# This file contains overriding values for addons based on "path_routing" label on cluster secret +argocd: + enabled: true + additionalResources: + - path: true # This duplciation is required as helm values for slices are not merged + manifestPath: "manifests" + type: "manifests" + - path: true + manifestPath: "path-routing" + type: "manifests" + +cert-manager: + enabled: true + additionalResources: + - path: true + manifestPath: "path-routing" + type: "manifests" + +keycloak: + enabled: true + additionalResources: + - path: true + manifestPath: "manifests" + type: "manifests" + - path: true + manifestPath: "path-routing" + type: "manifests" + +backstage: + enabled: true + additionalResources: + - path: true + manifestPath: "manifests" + type: "manifests" + - path: true + manifestPath: "path-routing" + type: "manifests" + +argo-workflows: + enabled: true + additionalResources: + - path: true + manifestPath: "manifests" + type: "manifests" + - path: true + manifestPath: "path-routing" + type: "manifests" \ No newline at end of file diff --git a/packages/addons/values.yaml b/packages/addons/values.yaml new file mode 100644 index 0000000..fcf69f5 --- /dev/null +++ b/packages/addons/values.yaml @@ -0,0 +1,274 @@ +argocd: + enabled: true + chartName: argo-cd + namespace: argocd + releaseName: argocd + defaultVersion: "8.0.14" + chartRepository: "https://argoproj.github.io/argo-helm" + valuesObject: + cnoe_ref_impl: # Specific values for reference CNOE implementation to control extraObjects. + auto_mode: '{{ if eq .metadata.labels.auto_mode "true" }}true{{ else }}false{{ end }}' + global: + domain: '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ else }}argocd.{{ .metadata.annotations.domain }}{{ end }}' + server: + ingress: + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' + path: '/{{ if eq .metadata.labels.path_routing "true" }}argocd{{ end }}' + configs: + cm: + oidc.config: | + name: Keycloak + issuer: https://{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/keycloak{{ end }}/realms/cnoe + clientID: argocd + enablePKCEAuthentication: true + requestedScopes: + - openid + - profile + - email + - groups + params: + 'server.basehref': '/{{ if eq .metadata.labels.path_routing "true" }}argocd{{ end }}' + 'server.rootpath': '{{ if eq .metadata.labels.path_routing "true" }}argocd{{ end }}' + additionalResources: + - manifestPath: "manifests" + type: "manifests" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane-bootstrap', 'control-plane'] + +aws-load-balancer-controller: + enabled: true + # enableAckPodIdentity: true + namespace: kube-system + defaultVersion: "1.13.2" + chartRepository: "https://aws.github.io/eks-charts" + valuesObject: + serviceAccount: + name: "aws-load-balancer-controller" + # vpcId: '{{.metadata.annotations.aws_vpc_id}}' + clusterName: '{{ .metadata.labels.clusterName }}' + ignoreDifferences: + - kind: Secret + name: aws-load-balancer-tls + jsonPointers: [/data] + - group: admissionregistration.k8s.io + kind: MutatingWebhookConfiguration + jqPathExpressions: ['.webhooks[].clientConfig.caBundle'] + - group: admissionregistration.k8s.io + kind: ValidatingWebhookConfiguration + jqPathExpressions: ['.webhooks[].clientConfig.caBundle'] + selector: + matchExpressions: + - key: auto_mode + operator: In + values: ['false'] + - key: environment + operator: In + values: ['control-plane'] + +ingress-nginx: + enabled: true + chartName: ingress-nginx + namespace: ingress-nginx + releaseName: ingress-nginx + defaultVersion: "4.7.0" + chartRepository: "https://kubernetes.github.io/ingress-nginx" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +external-dns: + enabled: true + releaseName: external-dns + namespace: external-dns + chartName: external-dns + chartRepository: https://kubernetes-sigs.github.io/external-dns + defaultVersion: "1.16.1" + valuesObject: + zoneIdFilters: + - '{{ .metadata.annotations.route53_hosted_zone_id }}' + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +external-secrets: + enabled: true + enableAckPodIdentity: false + namespace: external-secrets + chartName: external-secrets + defaultVersion: "0.17.0" + chartRepository: "https://charts.external-secrets.io" + additionalResources: + - manifestPath: "manifests" + type: "manifests" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane-bootstrap', 'control-plane'] + +cert-manager: + enabled: true + chartName: cert-manager + namespace: cert-manager + releaseName: cert-manager + defaultVersion: "1.17.2" + chartRepository: "https://charts.jetstack.io" + valuesObject: + global: + domainName: '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ end }}' + pathRouting: '{{ if eq .metadata.labels.path_routing "true" }}true{{ else }}false{{ end }}' + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +keycloak: + enabled: true + chartName: keycloak + namespace: keycloak + releaseName: keycloak + defaultVersion: "24.7.3" + chartRepository: "https://charts.bitnami.com/bitnami" + valuesObject: + httpRelativePath: '/{{ if eq .metadata.labels.path_routing "true" }}keycloak/{{ end }}' + ingress: + hostname: '{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' + extraTls: + - hosts: + - '{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + secretName: keycloak-server-tls + additionalResources: + - manifestPath: "manifests" + type: "manifests" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +backstage: + enabled: true + chartName: backstage + namespace: backstage + releaseName: backstage + defaultVersion: "2.6.0" + chartRepository: "https://backstage.github.io/charts" + valuesObject: + ingress: + host: '{{ if eq .metadata.labels.path_routing "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' + backstage: + appConfig: + catalog: + locations: + - type: url + target: '{{ .metadata.annotations.addons_repo_url }}/blob/{{ .metadata.annotations.addons_repo_revision }}/templates/backstage/catalog-info.yaml' + extraEnvVars: + - name: BACKSTAGE_FRONTEND_URL + value: 'https://{{ if eq .metadata.labels.path_routing "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + - name: KEYCLOAK_NAME_METADATA + value: 'https://{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/keycloak{{ end }}/realms/cnoe/.well-known/openid-configuration' + - name: ARGO_WORKFLOWS_URL + value: 'https://{{ if eq .metadata.labels.path_routing "false" }}argo-workflows.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/argo-workflows{{ end }}' + - name: ARGO_CD_URL + value: 'https://{{ if eq .metadata.labels.path_routing "false" }}argocd.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/argocd{{ end }}' + additionalResources: + - manifestPath: "manifests" + type: "manifests" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +argo-workflows: + enabled: true + chartName: argo-workflows + namespace: argo + releaseName: argo-workflows + defaultVersion: "0.45.18" + chartRepository: "https://argoproj.github.io/argo-helm" + valuesObject: + server: + baseHref: '/{{ if eq .metadata.labels.path_routing "true" }}argo-workflows/{{ end }}' + sso: + issuer: '{{ if eq .metadata.labels.path_routing "true" }}https://{{ .metadata.annotations.domain }}/keycloak{{ else }}https://keycloak.{{ .metadata.annotations.domain }}{{ end }}/realms/cnoe' + redirectUrl: '{{ if eq .metadata.labels.path_routing "true" }}https://{{ .metadata.annotations.domain }}/argo-workflows{{ else }}https://argo-workflows.{{ .metadata.annotations.domain }}{{ end }}/oauth2/callback' + ingress: + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' + nginx.ingress.kubernetes.io/rewrite-target: '{{ if eq .metadata.labels.path_routing "true" }}/$2{{ end }}' + hosts: + - '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' + paths: + - '/{{ if eq .metadata.labels.path_routing "true" }}argo-workflows(/|$)(.*){{ end }}' + tls: + - hosts: + - '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' + secretName: argo-workflows-server-tls + additionalResources: + - manifestPath: "manifests" + type: "manifests" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +crossplane: + enabled: true + chartName: crossplane + namespace: crossplane-system + releaseName: crossplane + defaultVersion: "1.20.0" + chartRepository: "https://charts.crossplane.io/stable" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +crossplane-upbound-providers: + enabled: true + chartName: crossplane-aws-upbound + namespace: crossplane-system + releaseName: crossplane-upbound-providers + defaultVersion: "3.0.0" + chartRepository: "https://gitops-bridge-dev.github.io/gitops-bridge-helm-charts" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +crossplane-compositions: + enabled: true + namespace: crossplane-system + type: manifest + path: packages/crossplane-compositions + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + +syncPolicy: + automated: + selfHeal: true + allowEmpty: true + prune: false + +syncPolicyAppSet: + preserveResourcesOnDeletion: false # Set to false so that cleanup script removes all the deployed resources \ No newline at end of file diff --git a/packages/appset-chart/.helmignore b/packages/appset-chart/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/packages/appset-chart/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/packages/appset-chart/Chart.yaml b/packages/appset-chart/Chart.yaml new file mode 100644 index 0000000..3546ee5 --- /dev/null +++ b/packages/appset-chart/Chart.yaml @@ -0,0 +1,24 @@ +apiVersion: v2 +name: application-sets +description: A Helm chart for Kubernetes + +# A chart can be either an 'application' or a 'library' chart. +# +# Application charts are a collection of templates that can be packaged into versioned archives +# to be deployed. +# +# Library charts provide useful utilities or functions for the chart developer. They're included as +# a dependency of application charts to inject those utilities and functions into the rendering +# pipeline. Library charts do not define any templates and therefore cannot be deployed. +type: application + +# This is the chart version. This version number should be incremented each time you make changes +# to the chart and its templates, including the app version. +# Versions are expected to follow Semantic Versioning (https://semver.org/) +version: 0.1.0 + +# This is the version number of the application being deployed. This version number should be +# incremented each time you make changes to the application. Versions are not expected to +# follow Semantic Versioning. They should reflect the version the application is using. +# It is recommended to use it with quotes. +appVersion: "1.16.0" diff --git a/packages/appset-chart/README.md b/packages/appset-chart/README.md new file mode 100644 index 0000000..7234aa8 --- /dev/null +++ b/packages/appset-chart/README.md @@ -0,0 +1,185 @@ +# Application Sets Helm Chart + +This Helm chart deploys ApplicationSets for managing various addons in a Kubernetes cluster using Argo CD. + +## Overview + +The Application Sets chart is designed to deploy and manage multiple Kubernetes addons across clusters using Argo CD's ApplicationSet controller. It provides a standardized way to deploy common addons such as: + +- Argo CD +- AWS Load Balancer Controller +- Ingress NGINX +- External DNS +- External Secrets +- Cert Manager +- Keycloak +- Backstage + +## Prerequisites + +- Kubernetes cluster +- Argo CD installed +- Helm 3.x + +## Installation + +```bash +helm install application-sets ./chart -n argocd +``` + +## Configuration + +### Global Configuration + +| Parameter | Description | Default | +|-----------|-------------|---------| +| `syncPolicy` | Default sync policy for all applications | See values.yaml | +| `syncPolicyAppSet` | Sync policy for ApplicationSets | `{ preserveResourcesOnDeletion: true }` | +| `useSelectors` | Whether to use selectors for targeting clusters | `true` | +| `repoURLGit` | Git repository URL for addons | `'{{.metadata.annotations.addons_repo_url}}'` | +| `repoURLGitRevision` | Git repository revision for addons | `'{{.metadata.annotations.addons_repo_revision}}'` | +| `repoURLGitBasePath` | Base path in Git repository for addons | `'{{.metadata.annotations.addons_repo_basepath}}'` | +| `useValuesFilePrefix` | Whether to use a prefix for values files | `false` | +| `valuesFilePrefix` | Prefix for values files | `''` | +| `appsetPrefix` | Prefix for ApplicationSet names | `''` | + +### Addon Configuration + +Each addon is configured as a top-level key in the values file. The following parameters are available for each addon: + +| Parameter | Description | Default | +|-----------|-------------|---------| +| `enabled` | Whether to enable the addon | `false` | +| `namespace` | Namespace to deploy the addon | Varies by addon | +| `chartName` | Name of the Helm chart | Same as addon key | +| `releaseName` | Name of the Helm release | Same as addon key | +| `defaultVersion` | Default version of the chart | Varies by addon | +| `chartRepository` | Repository URL for the chart | Varies by addon | +| `chartNamespace` | Namespace in the chart repository | `''` | +| `enableAckPodIdentity` | Whether to enable AWS Controller for Kubernetes Pod Identity | `false` | +| `selector` | Selector for targeting clusters | `{}` | +| `selectorMatchLabels` | Match labels for targeting clusters | `{}` | +| `valuesObject` | Values to pass to the Helm chart | `{}` | +| `ignoreDifferences` | Resources to ignore differences for | `[]` | +| `additionalResources` | Additional resources to deploy | `{}` | +| `syncPolicy` | Sync policy for the addon | Same as global `syncPolicy` | +| `annotationsAppSet` | Annotations for the ApplicationSet | `{}` | +| `annotationsApp` | Annotations for the Application | `{}` | +| `labelsAppSet` | Labels for the ApplicationSet | `{}` | +| `environments` | Environment-specific configurations | `[]` | + +## Values File Structure + +```yaml +# Global configuration +syncPolicy: + automated: + selfHeal: false + allowEmpty: true + prune: false + retry: + limit: -1 + backoff: + duration: 5s + factor: 2 + maxDuration: 10m + syncOptions: + - CreateNamespace=true + - ServerSideApply=true + +syncPolicyAppSet: + preserveResourcesOnDeletion: true + +useSelectors: true +repoURLGit: '{{.metadata.annotations.addons_repo_url}}' +repoURLGitRevision: '{{.metadata.annotations.addons_repo_revision}}' +repoURLGitBasePath: '{{.metadata.annotations.addons_repo_basepath}}' + +# Addon configurations +argocd: + enabled: true + chartName: argo-cd + namespace: argocd + releaseName: argocd + defaultVersion: "8.0.14" + chartRepository: "https://argoproj.github.io/argo-helm" + additionalResources: + path: true + manifestPath: "manifests" + type: "manifests" + +aws-load-balancer-controller: + enabled: true + namespace: kube-system + defaultVersion: "1.13.2" + chartRepository: "https://aws.github.io/eks-charts" + valuesObject: + serviceAccount: + name: "aws-load-balancer-controller" + clusterName: '{{.name}}' + ignoreDifferences: + - kind: Secret + name: aws-load-balancer-tls + jsonPointers: [/data] + - group: admissionregistration.k8s.io + kind: MutatingWebhookConfiguration + jqPathExpressions: ['.webhooks[].clientConfig.caBundle'] + - group: admissionregistration.k8s.io + kind: ValidatingWebhookConfiguration + jqPathExpressions: ['.webhooks[].clientConfig.caBundle'] + +# Additional addons follow the same pattern +``` + +## Advanced Features + +### Pod Identity + +For addons that require AWS IAM roles, you can enable Pod Identity: + +```yaml +addon-name: + enabled: true + enableAckPodIdentity: true + # other configuration +``` + +### Additional Resources + +You can deploy additional resources alongside an addon: + +```yaml +addon-name: + enabled: true + additionalResources: + path: true + manifestPath: "manifests" + type: "manifests" +``` + +### Environment-Specific Configurations + +You can specify different chart versions for different environments: + +```yaml +addon-name: + enabled: true + environments: + - selector: + environment: staging + tenant: tenant1 + chartVersion: "1.2.3" +``` + +## Templates + +The chart includes several helper templates: + +- `_helpers.tpl`: Common helper functions +- `_application_set.tpl`: ApplicationSet generation +- `_git_matrix.tpl`: Git matrix generator +- `_pod_identity.tpl`: Pod identity configuration + +## License + +This chart is licensed under the Apache License 2.0. \ No newline at end of file diff --git a/packages/appset-chart/templates/_application_set.tpl b/packages/appset-chart/templates/_application_set.tpl new file mode 100644 index 0000000..0c63b0e --- /dev/null +++ b/packages/appset-chart/templates/_application_set.tpl @@ -0,0 +1,59 @@ +{{/* +Template to generate additional resources configuration +*/}} +{{- define "application-sets.additionalResources" -}} +{{- $chartName := .chartName -}} +{{- $chartConfig := .chartConfig -}} +{{- $valueFiles := .valueFiles -}} +{{- $values := .values -}} + +{{- range $resource := $chartConfig.additionalResources }} +- repoURL: {{ $values.repoURLGit | squote }} + targetRevision: {{ $values.repoURLGitRevision | squote }} + path: {{- if eq $resource.type "manifests" }} + '{{ $values.repoURLGitBasePath }}/{{ $chartName }}{{ if $values.useValuesFilePrefix }}{{ $values.valuesFilePrefix }}{{ end }}/{{ $resource.manifestPath }}' + {{- else }} + {{ $resource.path | squote }} + {{- end}} + {{- if $resource.helm }} + helm: + releaseName: '{{`{{ .name }}`}}-{{ $resource.helm.releaseName }}' + {{- if $resource.helm.valuesObject }} + valuesObject: + {{- $resource.helm.valuesObject | toYaml | nindent 6 }} + {{- end }} + ignoreMissingValueFiles: true + valueFiles: + {{- include "application-sets.valueFiles" (dict + "nameNormalize" $chartName + "valueFiles" $valueFiles + "values" $values + "chartType" $resource.type) | nindent 6 }} + {{- end }} +{{- end }} +{{- end }} + + +{{/* +Define the values path for reusability +*/}} +{{- define "application-sets.valueFiles" -}} +{{- $nameNormalize := .nameNormalize -}} +{{- $chartConfig := .chartConfig -}} +{{- $valueFiles := .valueFiles -}} +{{- $chartType := .chartType -}} +{{- $values := .values -}} +{{- with .valueFiles }} +{{- range . }} +- $values/{{ $values.repoURLGitBasePath }}/{{ $nameNormalize }}{{ if $chartType }}/{{ $chartType }}{{ end }}/{{ if $chartConfig.valuesFileName }}{{ $chartConfig.valuesFileName }}{{ else }}{{ . }}{{ end }} +{{- if $values.useValuesFilePrefix }} +- $values/{{ $values.repoURLGitBasePath }}/{{ if $values.useValuesFilePrefix }}{{ $values.valuesFilePrefix }}{{ end }}{{ . }}/{{ $nameNormalize }}{{ if $chartType }}/{{ $chartType }}{{ end }}/{{ if $chartConfig.valuesFileName }}{{ $chartConfig.valuesFileName }}{{ else }}values.yaml{{ end }} +{{- end }} +{{- end }} +{{- end }} +{{- with $chartConfig.valueFiles }} +{{- range . }} +- $values/{{ $values.repoURLGitBasePath }}/{{ $nameNormalize }}{{ if $chartType }}/{{ $chartType }}{{ end }}/{{ if $chartConfig.valuesFileName }}{{ $chartConfig.valuesFileName }}{{ else }}{{ . }}{{ end }} +{{- end }} +{{- end }} +{{- end }} diff --git a/packages/appset-chart/templates/_git_matrix.tpl b/packages/appset-chart/templates/_git_matrix.tpl new file mode 100644 index 0000000..61353d3 --- /dev/null +++ b/packages/appset-chart/templates/_git_matrix.tpl @@ -0,0 +1,34 @@ + {{/* +Template creating git matrix generator +*/}} +{{- define "application-sets.git-matrix" -}} +{{- $chartName := .chartName -}} +{{- $chartConfig := .chartConfig -}} +{{- $repoURLGit := .repoURLGit -}} +{{- $repoURLGitRevision := .repoURLGitRevision -}} +{{- $selectors := .selectors -}} +{{- $useSelectors := .useSelectors -}} +generators: +- matrix: + generators: + - clusters: + selector: + matchLabels: + argocd.argoproj.io/secret-type: cluster + {{- if $selectors }} + {{- toYaml $selectors | nindent 16 }} + {{- end }} + {{- if $chartConfig.selectorMatchLabels }} + {{- toYaml $chartConfig.selectorMatchLabels | nindent 18 }} + {{- end }} + {{- if and $chartConfig.selector $useSelectors }} + {{- toYaml $chartConfig.selector | nindent 16 }} + {{- end }} + values: + chart: {{ $chartConfig.chartName | default $chartName | quote }} + - git: + repoURL: {{ $repoURLGit | squote }} + revision: {{ $repoURLGitRevision | squote }} + files: + - path: {{ $chartConfig.matrixPath | squote }} +{{- end }} \ No newline at end of file diff --git a/packages/appset-chart/templates/_helpers.tpl b/packages/appset-chart/templates/_helpers.tpl new file mode 100644 index 0000000..c705613 --- /dev/null +++ b/packages/appset-chart/templates/_helpers.tpl @@ -0,0 +1,48 @@ +{{/* +Expand the name of the chart. Defaults to `.Chart.Name` or `nameOverride`. +*/}} +{{- define "application-sets.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Generate a fully qualified app name. +If `fullnameOverride` is defined, it uses that; otherwise, it constructs the name based on `Release.Name` and chart name. +*/}} +{{- define "application-sets.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name (default .Chart.Name .Values.nameOverride) | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version, useful for labels. +*/}} +{{- define "application-sets.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels for the ApplicationSet, including version and managed-by labels. +*/}} +{{- define "application-sets.labels" -}} +helm.sh/chart: {{ include "application-sets.chart" . }} +app.kubernetes.io/name: {{ include "application-sets.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Common Helm and Kubernetes Annotations +*/}} +{{- define "application-sets.annotations" -}} +helm.sh/chart: {{ include "application-sets.chart" . }} +{{- if .Values.annotations }} +{{ toYaml .Values.annotations }} +{{- end }} +{{- end }} diff --git a/packages/appset-chart/templates/_pod_identity.tpl b/packages/appset-chart/templates/_pod_identity.tpl new file mode 100644 index 0000000..065f7c9 --- /dev/null +++ b/packages/appset-chart/templates/_pod_identity.tpl @@ -0,0 +1,35 @@ +{{/* +Template to generate pod-identity configuration +*/}} +{{- define "application-sets.pod-identity" -}} +{{- $chartName := .chartName -}} +{{- $chartConfig := .chartConfig -}} +{{- $valueFiles := .valueFiles -}} +{{- $values := .values -}} +{{- with merge (default dict $values.ackPodIdentity) (default dict $chartConfig.ackPodIdentity) }} +{{- if .path }} +- repoURL: '{{ $values.repoURLGit }}' + targetRevision: '{{ $values.repoURLGitRevision }}' + path: {{default "charts/pod-identity" $values.ackPodIdentity.path }} +{{- else if .repoURL }} +- repoURL: '{{ $values.ackPodIdentity.repoURL }}' + chart: '{{ $values.ackPodIdentity.chart }}' + targetRevision: '{{ $values.ackPodIdentity.chartVersion }}' +{{- end }} +{{- end }} + helm: + releaseName: '{{`{{ .name }}`}}-{{ $chartConfig.chartName | default $chartName }}' + valuesObject: + create: '{{`{{default "`}}{{ $chartConfig.enableAckPodIdentity }}{{`" (index .metadata.annotations "ack_create")}}`}}' + region: '{{`{{ .metadata.annotations.aws_region }}`}}' + accountId: '{{`{{ .metadata.annotations.aws_account_id}}`}}' + podIdentityAssociation: + clusterName: '{{`{{ .name }}`}}' + namespace: '{{ default $chartConfig.namespace .namespace }}' + ignoreMissingValueFiles: true + valueFiles: + {{- include "application-sets.valueFiles" (dict + "nameNormalize" $chartName + "valueFiles" $valueFiles + "values" $values "chartType" "pod-identity") | nindent 6 }} +{{- end }} diff --git a/packages/appset-chart/templates/application-set.yaml b/packages/appset-chart/templates/application-set.yaml new file mode 100644 index 0000000..aad60d5 --- /dev/null +++ b/packages/appset-chart/templates/application-set.yaml @@ -0,0 +1,189 @@ +{{- $values := .Values }} +{{- $chartType := .Values.chartType }} +{{- $namespace := .Values.namespace }} +{{- $syncPolicy := .Values.syncPolicy -}} +{{- $syncPolicyAppSet := .Values.syncPolicyAppSet -}} +{{- $goTemplateOptions := .Values.goTemplateOptions -}} +{{- $repoURLGit := .Values.repoURLGit -}} +{{- $repoURLGitRevision := .Values.repoURLGitRevision -}} +{{- $repoURLGitBasePath := .Values.repoURLGitBasePath -}} +{{- $valueFiles := .Values.valueFiles -}} +{{- $valuesFilePrefix := .Values.valuesFilePrefix -}} +{{- $useValuesFilePrefix := (default false .Values.useValuesFilePrefix ) -}} +{{- $useSelectors:= .Values.useSelectors -}} +{{- $globalSelectors := .Values.globalSelectors -}} +{{- $appsetPrefix := .Values.appsetPrefix -}} + +{{- range $chartName, $chartConfig := .Values }} +{{- if and (kindIs "map" $chartConfig) (hasKey $chartConfig "enabled") }} +{{- if eq (toString $chartConfig.enabled) "true" }} +{{- $nameNormalize := printf "%s" $chartName | replace "_" "-" | trunc 63 | trimSuffix "-" -}} +apiVersion: argoproj.io/v1alpha1 +kind: ApplicationSet +metadata: + name: {{ if $appsetPrefix }}{{ $appsetPrefix | default "" }}{{ end }}{{ $nameNormalize }} + namespace: {{ default "argocd" $namespace }} + annotations: + {{- include "application-sets.annotations" $ | nindent 4 }} + {{- if $chartConfig.annotationsAppSet }}{{- toYaml $chartConfig.annotationsAppSet | nindent 4 }}{{- end }} + labels: + {{- include "application-sets.labels" $ | nindent 4 }} + {{- if $chartConfig.labelsAppSet }}{{- toYaml $chartConfig.labelsAppSet | nindent 4 }}{{- end }} + # finalizers: + # - resources-finalizer.argocd.argoproj.io +spec: + goTemplate: true + {{- if $chartConfig.goTemplateOptions }} + goTemplateOptions: + {{ toYaml $chartConfig.goTemplateOptions | nindent 2 }} + {{- else }} + goTemplateOptions: {{ default (list "missingkey=error") $goTemplateOptions }} + {{- end }} + {{- if $chartConfig.syncPolicyAppSet }} + syncPolicy: + {{- toYaml $chartConfig.syncPolicyAppSet | nindent 4 }} + {{- else }} + syncPolicy: + {{- toYaml $syncPolicyAppSet | nindent 4 }} + {{- end }} + {{- if $chartConfig.gitMatrix }} + {{ include "application-sets.git-matrix" (dict + "chartName" $nameNormalize "chartConfig" $chartConfig + "repoURLGit" $repoURLGit "repoURLGitRevision" $repoURLGitRevision + "selectors" $globalSelectors "useSelectors" $useSelectors + ) | nindent 2 }} + {{- else }} + generators: + {{- if $chartConfig.environments }} + - merge: + mergeKeys: [server] + generators: + {{- end }} + - clusters: + selector: + matchLabels: + argocd.argoproj.io/secret-type: cluster + {{- if $globalSelectors }} + {{- toYaml $globalSelectors | nindent 12 }} + {{- end }} + {{- if $chartConfig.selectorMatchLabels }} + {{- toYaml $chartConfig.selectorMatchLabels | nindent 12 }} + {{- end }} + {{- if and $chartConfig.selector $useSelectors }} + {{- toYaml $chartConfig.selector | nindent 10 }} + {{- end }} + {{- if not $chartConfig.resourceGroup }} + values: + addonChart: {{ $chartConfig.chartName | default $nameNormalize | quote }} + {{- if $chartConfig.defaultVersion }} + addonChartVersion: {{ $chartConfig.defaultVersion | quote }} + {{- end }} + {{- if $chartConfig.chartRepository }} + addonChartRepository: {{ $chartConfig.chartRepository | quote }} + {{- end }} + {{- if $chartConfig.chartNamespace }} + addonChartRepositoryNamespace: {{ $chartConfig.chartNamespace | quote }} + chart: {{ printf "%s/%s" $chartConfig.chartNamespace ($chartConfig.chartName | default $nameNormalize) | quote }} + {{- else }} + chart: {{ $chartConfig.chartName | default $nameNormalize | quote }} + {{- end }} + {{- end }} + {{- if $chartConfig.environments }} + {{- range $chartConfig.environments }} + - clusters: + selector: + matchLabels: + {{- toYaml .selector | nindent 18 }} + values: + addonChartVersion: {{ .chartVersion | default $chartConfig.defaultVersion | quote }} + {{- end }} + {{- end }} + {{- end }} + template: + metadata: + {{- if $chartConfig.appSetName }} + name: {{ $chartConfig.appSetName }} + {{- else }} + name: '{{ $nameNormalize }}-{{`{{ .name }}`}}' + {{- end }} + labels: + {{- if $chartConfig.path }} + addonVersion: {{ $repoURLGitRevision | squote }} + {{- else }} + addonVersion: '{{`{{.values.addonChartVersion }}`}}' + {{- end }} + addon: 'true' + addonName: {{ $nameNormalize }} + environment: '{{`{{.metadata.labels.environment}}`}}' + clusterName: '{{`{{.name}}`}}' + kubernetesVersion: '{{`{{default "v1.32.0" (index .metadata.labels "kubernetesVersion")}}`}}' + {{- if $chartConfig.annotationsApp }} + annotations: + {{- toYaml $chartConfig.annotationsApp | nindent 8 }} + {{- end }} + spec: + project: default + sources: + - repoURL: {{ $repoURLGit | squote}} + targetRevision: {{ $repoURLGitRevision | squote }} + ref: values + {{- if eq (toString $chartConfig.enableAckPodIdentity) "true" }} + {{ include "application-sets.pod-identity" (dict + "chartName" ($chartConfig.chartName | default $nameNormalize) + "valueFiles" $valueFiles + "chartConfig" $chartConfig "values" $values ) | nindent 6 }} + {{- end }} + {{- if $chartConfig.path }} + - repoURL: {{ $repoURLGit | squote }} + path: {{$chartConfig.path | squote }} + targetRevision: {{ $repoURLGitRevision | squote }} + {{- else }} + - repoURL: '{{`{{ .values.addonChartRepository }}`}}' + chart: '{{`{{ .values.chart }}`}}' + targetRevision: '{{`{{.values.addonChartVersion }}`}}' + {{- end }} + {{- if ne (default "" $chartConfig.type) "manifest" }} + helm: + releaseName: {{ default "{{ .values.addonChart }}" $chartConfig.releaseName | squote }} + ignoreMissingValueFiles: true + {{- if $chartConfig.valuesObject }} + valuesObject: + {{- $chartConfig.valuesObject | toYaml | nindent 12 }} + {{- end }} + {{- if $valueFiles }} + valueFiles: + {{- include "application-sets.valueFiles" (dict + "nameNormalize" ($chartConfig.chartName | default $nameNormalize) + "chartConfig" $chartConfig + "valueFiles" $valueFiles "values" $values) | nindent 12 }} + {{- end }} + {{- if $chartConfig.additionalResources}} + {{- include "application-sets.additionalResources" (dict + "chartName" ($chartConfig.chartName | default $nameNormalize) + "valueFiles" $valueFiles + "chartConfig" $chartConfig + "values" $values) | nindent 6 }} + {{- end}} + {{- end }} + destination: + namespace: '{{ $chartConfig.namespace }}' + name: '{{`{{ .name }}`}}' + {{- if $chartConfig.syncPolicy }} + syncPolicy: + {{- toYaml $chartConfig.syncPolicy | nindent 8 }} + {{ else }} + syncPolicy: + {{- toYaml $syncPolicy | nindent 8 }} + {{- end }} + {{- with $chartConfig.ignoreDifferences }} + ignoreDifferences: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- if $chartConfig.ignoreDifferences}} + ignoreDifferences: + {{- $chartConfig.ignoreDifferences | toYaml | nindent 8 }} + {{- end }} +--- +{{- end }} +{{- end }} +{{- end }} diff --git a/packages/appset-chart/values.yaml b/packages/appset-chart/values.yaml new file mode 100644 index 0000000..6f9cab8 --- /dev/null +++ b/packages/appset-chart/values.yaml @@ -0,0 +1,32 @@ +valueFiles: + - "values.yaml" + +syncPolicy: + automated: + selfHeal: false + allowEmpty: true + prune: false + retry: + limit: -1 # number of failed sync attempt retries; unlimited number of attempts if less than 0 + backoff: + duration: 5s # the amount to back off. Default unit is seconds, but could also be a duration (e.g. "2m", "1h") + factor: 2 # a factor to multiply the base duration after each failed retry + maxDuration: 10m # the maximum amount of time allowed for the backoff strategy + syncOptions: + - CreateNamespace=true + - ServerSideApply=true # Big CRDs. +syncPolicyAppSet: + preserveResourcesOnDeletion: true +useSelectors: true +repoURLGit: '{{.metadata.annotations.addons_repo_url}}' +repoURLGitRevision: '{{.metadata.annotations.addons_repo_revision}}' +repoURLGitBasePath: '{{.metadata.annotations.addons_repo_basepath}}' +# valueFiles: +# - default/addons +# - clusters/{{.metadata.labels.environment}}/addons +# - clusters/{{.nameNormalized}}/addons +useValuesFilePrefix: false +# valuesFilePrefix: '{{.metadata.labels.tenant}}/' +# ackPodIdentity: +# path: "charts/pod-identity" +#appsetPrefix: "appset-" \ No newline at end of file diff --git a/packages/argocd/dev/appproject-cnoe.yaml b/packages/argo-cd/manifests/appproject-cnoe.yaml similarity index 100% rename from packages/argocd/dev/appproject-cnoe.yaml rename to packages/argo-cd/manifests/appproject-cnoe.yaml diff --git a/packages/argocd/dev/appproject-demo.yaml b/packages/argo-cd/manifests/appproject-demo.yaml similarity index 100% rename from packages/argocd/dev/appproject-demo.yaml rename to packages/argo-cd/manifests/appproject-demo.yaml diff --git a/packages/argo-cd/manifests/argo-cd-github-app.yaml b/packages/argo-cd/manifests/argo-cd-github-app.yaml new file mode 100644 index 0000000..77dcaa8 --- /dev/null +++ b/packages/argo-cd/manifests/argo-cd-github-app.yaml @@ -0,0 +1,53 @@ +# Github App Secret for ArgoCD +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: github-app-org + namespace: argocd +spec: + refreshInterval: "15m" + secretStoreRef: + name: aws-secretsmanager + kind: ClusterSecretStore + target: + name: github-app-org + template: + metadata: + labels: + argocd.argoproj.io/secret-type: repo-creds + data: + type: git + url: '{{ .repoURL }}' + githubAppID: "{{ .appId }}" + githubAppInstallationID: "{{ .installationId }}" + githubAppPrivateKey: "{{ .privateKey }}" + data: + - secretKey: appId + remoteRef: + conversionStrategy: Default # TODO: Remove when figured out how to avoid Diffs for CR defaults + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: argocd-github.appId + - secretKey: installationId + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: argocd-github.installationId + - secretKey: privateKey + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: argocd-github.privateKey + - secretKey: repoURL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: argocd-github.url \ No newline at end of file diff --git a/packages/argo-cd/manifests/hub-cluster-secret.yaml b/packages/argo-cd/manifests/hub-cluster-secret.yaml new file mode 100644 index 0000000..166e72c --- /dev/null +++ b/packages/argo-cd/manifests/hub-cluster-secret.yaml @@ -0,0 +1,88 @@ +# in-cluster ArgoCD cluster Secret for passing metadata to ApplicationSets +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: hub-cluster-secret + namespace: argocd +spec: + refreshInterval: "15m" + secretStoreRef: + name: aws-secretsmanager + kind: ClusterSecretStore + target: + name: hub-cluster + template: + metadata: + labels: + argocd.argoproj.io/secret-type: cluster + clusterClass: "control-plane" + clusterName: '{{ .clusterName }}' + environment: "control-plane" + path_routing: '{{ .pathRouting }}' + auto_mode: '{{ .autoMode }}' + annotations: + route53_hosted_zone_id: '{{ .route53HostedZoneID }}' + addons_repo_url: '{{ .repoURL }}' + addons_repo_revision: '{{ .repoRevision }}' + addons_repo_basepath: '{{ .repoBasePath }}' + domain: '{{ .domain }}' + data: + name: '{{ .clusterName }}' + server: https://kubernetes.default.svc + data: + - secretKey: clusterName + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: cluster_name + - secretKey: pathRouting + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: path_routing + - secretKey: repoURL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: repo.url + - secretKey: repoRevision + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: repo.revision + - secretKey: repoBasePath + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: repo.basepath + - secretKey: domain + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: domain + - secretKey: autoMode + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: auto_mode + - secretKey: route53HostedZoneID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: route53_hosted_zone_id \ No newline at end of file diff --git a/packages/argo-cd/path-routing/default-cert-external-secret.yaml b/packages/argo-cd/path-routing/default-cert-external-secret.yaml new file mode 100644 index 0000000..e04b45e --- /dev/null +++ b/packages/argo-cd/path-routing/default-cert-external-secret.yaml @@ -0,0 +1,33 @@ + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: argocd-server-tls + namespace: argocd + annotations: + argocd.argoproj.io/sync-wave: "10" +spec: + refreshInterval: "0" + secretStoreRef: + name: default-cert + kind: ClusterSecretStore + target: + name: argocd-server-tls + template: + type: kubernetes.io/tls + data: + - secretKey: tls.key + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.key + - secretKey: tls.crt + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.crt \ No newline at end of file diff --git a/packages/argo-cd/values.yaml b/packages/argo-cd/values.yaml new file mode 100644 index 0000000..304f52d --- /dev/null +++ b/packages/argo-cd/values.yaml @@ -0,0 +1,158 @@ +# Ref: https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd +cnoe_ref_impl: + auto_mode: '"true"' +dex: + enabled: false +server: + ingress: + enabled: true + ingressClassName: "nginx" + tls: true + annotations: + argocd.argoproj.io/sync-wave: "20" +configs: + cm: + accounts.backstage: apiKey + accounts.backstage.enabled: "true" + application.resourceTrackingMethod: annotation + resource.exclusions: | + - kinds: + - ProviderConfigUsage + apiGroups: + - "*" + resource.customizations: | + "awsblueprints.io/*": + health.lua: | + health_status = { + status = "Progressing", + message = "Provisioning ..." + } + + if obj.status == nil or obj.status.conditions == nil then + return health_status + end + + for i, condition in ipairs(obj.status.conditions) do + if condition.type == "Ready" then + if condition.status == "True" then + health_status.status = "Healthy" + health_status.message = "Resource is up-to-date." + return health_status + end + end + + if condition.type == "LastAsyncOperation" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + + if condition.type == "Synced" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + end + return health_status + "*.aws.upbound.io/*": + health.lua: | + health_status = { + status = "Progressing", + message = "Provisioning ..." + } + + if obj.status == nil or obj.status.conditions == nil then + return health_status + end + + for i, condition in ipairs(obj.status.conditions) do + if condition.type == "Ready" then + if condition.status == "True" then + health_status.status = "Healthy" + health_status.message = "Resource is up-to-date." + return health_status + end + end + + if condition.type == "LastAsyncOperation" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + + if condition.type == "Synced" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + end + + return health_status + "*.aws.crossplane.io/*": + health.lua: | + health_status = { + status = "Progressing", + message = "Provisioning ..." + } + + if obj.status == nil or obj.status.conditions == nil then + return health_status + end + + for i, condition in ipairs(obj.status.conditions) do + if condition.type == "Ready" then + if condition.status == "True" then + health_status.status = "Healthy" + health_status.message = "Resource is up-to-date." + return health_status + end + end + + if condition.type == "LastAsyncOperation" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + + if condition.type == "Synced" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + end + return health_status + params: + server.insecure: true + rbac: + policy.csv: | + g, superuser, role:admin + g, backstage, role:readonly + +extraObjects: +- | + # Creates a gp3 storageClass for EBS CSI. + # Sets different provisioner value for EKS Auto Mode based on auto_mode parameter in config file. + apiVersion: storage.k8s.io/v1 + kind: StorageClass + metadata: + name: gp3 + annotations: + storageclass.kubernetes.io/is-default-class: "true" + argocd.argoproj.io/sync-wave: "-10" + provisioner: {{ if eq .Values.cnoe_ref_impl.auto_mode "true"}}ebs.csi.eks.amazonaws.com{{ else }}ebs.csi.aws.com{{ end }} + volumeBindingMode: WaitForFirstConsumer + parameters: + type: gp3 + encrypted: "true" diff --git a/packages/argo-workflows-sso-config/base/kustomization.yaml b/packages/argo-workflows-sso-config/base/kustomization.yaml deleted file mode 100644 index 61d3457..0000000 --- a/packages/argo-workflows-sso-config/base/kustomization.yaml +++ /dev/null @@ -1,3 +0,0 @@ -namespace: argo -resources: - - sa-admin.yaml \ No newline at end of file diff --git a/packages/argo-workflows-sso-config/dev/kustomization.yaml b/packages/argo-workflows-sso-config/dev/kustomization.yaml deleted file mode 100644 index b504b21..0000000 --- a/packages/argo-workflows-sso-config/dev/kustomization.yaml +++ /dev/null @@ -1,4 +0,0 @@ -namespace: argo -resources: - - ../base/ - \ No newline at end of file diff --git a/packages/argo-workflows/dev/values-no-sso.yaml b/packages/argo-workflows/dev/values-no-sso.yaml deleted file mode 100644 index bd99fa4..0000000 --- a/packages/argo-workflows/dev/values-no-sso.yaml +++ /dev/null @@ -1,8 +0,0 @@ -workflow: - serviceAccount: - create: false - rbac: - create: false -server: - extraArgs: - - --auth-mode=client diff --git a/packages/argo-workflows/manifests/external-secrets.yaml b/packages/argo-workflows/manifests/external-secrets.yaml new file mode 100644 index 0000000..9e9cc96 --- /dev/null +++ b/packages/argo-workflows/manifests/external-secrets.yaml @@ -0,0 +1,25 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: keycloak-oidc + namespace: argo + annotations: + argocd.argoproj.io/sync-wave: "-10" +spec: + secretStoreRef: + name: keycloak + kind: ClusterSecretStore + target: + name: keycloak-oidc + template: + data: + ARGO_WORKFLOWS_CLIENT_ID: "argo-workflows" + ARGO_WORKFLOWS_CLIENT_SECRET: '{{ .clientSecret }}' + data: + - secretKey: clientSecret + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: ARGO_WORKFLOWS_CLIENT_SECRET diff --git a/packages/argo-workflows-sso-config/base/sa-admin.yaml b/packages/argo-workflows/manifests/sa-admin.yaml similarity index 100% rename from packages/argo-workflows-sso-config/base/sa-admin.yaml rename to packages/argo-workflows/manifests/sa-admin.yaml diff --git a/packages/argo-workflows/path-routing/default-cert-external-secret.yaml b/packages/argo-workflows/path-routing/default-cert-external-secret.yaml new file mode 100644 index 0000000..6a0b325 --- /dev/null +++ b/packages/argo-workflows/path-routing/default-cert-external-secret.yaml @@ -0,0 +1,33 @@ + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: argo-workflows-server-tls + namespace: argo + annotations: + argocd.argoproj.io/sync-wave: "10" +spec: + refreshInterval: "0" + secretStoreRef: + name: default-cert + kind: ClusterSecretStore + target: + name: argo-workflows-server-tls + template: + type: kubernetes.io/tls + data: + - secretKey: tls.key + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.key + - secretKey: tls.crt + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.crt \ No newline at end of file diff --git a/packages/argo-workflows/dev/values.yaml b/packages/argo-workflows/values.yaml similarity index 53% rename from packages/argo-workflows/dev/values.yaml rename to packages/argo-workflows/values.yaml index affc327..7ca2edc 100644 --- a/packages/argo-workflows/dev/values.yaml +++ b/packages/argo-workflows/values.yaml @@ -4,14 +4,18 @@ workflow: rbac: create: false server: + ingress: + enabled: true + ingressClassName: 'nginx' + pathType: ImplementationSpecific sso: enabled: true - clientId: + clientId: # Required for sso configuration name: keycloak-oidc - key: client-id + key: ARGO_WORKFLOWS_CLIENT_ID clientSecret: name: keycloak-oidc - key: secret-key + key: ARGO_WORKFLOWS_CLIENT_SECRET scopes: - openid - profile @@ -21,4 +25,4 @@ server: enabled: true extraArgs: - --auth-mode=client - - --auth-mode=sso + - --auth-mode=sso # Required for sso configuration diff --git a/packages/argocd/base/install.yaml b/packages/argocd/base/install.yaml deleted file mode 100644 index f94da3e..0000000 --- a/packages/argocd/base/install.yaml +++ /dev/null @@ -1,18234 +0,0 @@ -# This is an auto-generated file. DO NOT EDIT -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - labels: - app.kubernetes.io/name: applications.argoproj.io - app.kubernetes.io/part-of: argocd - name: applications.argoproj.io -spec: - group: argoproj.io - names: - kind: Application - listKind: ApplicationList - plural: applications - shortNames: - - app - - apps - singular: application - scope: Namespaced - versions: - - additionalPrinterColumns: - - jsonPath: .status.sync.status - name: Sync Status - type: string - - jsonPath: .status.health.status - name: Health Status - type: string - - jsonPath: .status.sync.revision - name: Revision - priority: 10 - type: string - name: v1alpha1 - schema: - openAPIV3Schema: - description: Application is a definition of Application resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - operation: - description: Operation contains information about a requested or running - operation - properties: - info: - description: Info is a list of informational items for this operation - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - initiatedBy: - description: InitiatedBy contains information about who initiated - the operations - properties: - automated: - description: Automated is set to true if operation was initiated - automatically by the application controller. - type: boolean - username: - description: Username contains the name of a user who started - operation - type: string - type: object - retry: - description: Retry controls the strategy to apply if a sync fails - properties: - backoff: - description: Backoff controls how to backoff on subsequent retries - of failed syncs - properties: - duration: - description: Duration is the amount to back off. Default unit - is seconds, but could also be a duration (e.g. "2m", "1h") - type: string - factor: - description: Factor is a factor to multiply the base duration - after each failed retry - format: int64 - type: integer - maxDuration: - description: MaxDuration is the maximum amount of time allowed - for the backoff strategy - type: string - type: object - limit: - description: Limit is the maximum number of attempts for retrying - a failed sync. If set to 0, no retries will be performed. - format: int64 - type: integer - type: object - sync: - description: Sync contains parameters for the operation - properties: - dryRun: - description: DryRun specifies to perform a `kubectl apply --dry-run` - without actually performing the sync - type: boolean - manifests: - description: Manifests is an optional field that overrides sync - source with a local directory for development - items: - type: string - type: array - prune: - description: Prune specifies to delete resources from the cluster - that are no longer tracked in git - type: boolean - resources: - description: Resources describes which resources shall be part - of the sync - items: - description: SyncOperationResource contains resources to sync. - properties: - group: - type: string - kind: - type: string - name: - type: string - namespace: - type: string - required: - - kind - - name - type: object - type: array - revision: - description: Revision is the revision (Git) or chart version (Helm) - which to sync the application to If omitted, will use the revision - specified in app spec. - type: string - revisions: - description: Revisions is the list of revision (Git) or chart - version (Helm) which to sync each source in sources field for - the application to If omitted, will use the revision specified - in app spec. - items: - type: string - type: array - source: - description: Source overrides the source definition set in the - application. This is typically set in a Rollback operation and - is nil during a Sync operation - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match - paths against that should be explicitly excluded from - being used during manifest generation - type: string - include: - description: Include contains a glob pattern to match - paths against that should be explicitly included during - manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable to - be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level Arguments - items: - description: JsonnetVar represents a variable to - be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to the - helm template - items: - description: HelmFileParameter is a file parameter that's - passed to helm template during manifest generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm template - from failing when valueFiles do not exist locally by - not appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters which - are passed to the helm template command upon manifest - generation - items: - description: HelmParameter is a parameter that's passed - to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether to tell - Helm to interpret booleans and numbers as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all domains - (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name to use. - If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files - to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed - to helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for templating - ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional labels - to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources for - Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to force - applying common labels to resources for Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize image - definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable entries - items: - description: EnvEntry represents an entry in the application's - environment - properties: - name: - description: Name is the name of the variable, usually - expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array type - parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type parameter. - type: object - name: - description: Name is the name identifying a parameter. - type: string - string: - description: String_ is the value of a string type - parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within sources - field. This field will not be used if used with a `source` - tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git or - Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the source - to sync the application to. In case of Git, this can be - commit, tag, or branch. If omitted, will equal to HEAD. - In case of Helm, this is a semver tag for the Chart's version. - type: string - required: - - repoURL - type: object - sources: - description: Sources overrides the source definition set in the - application. This is typically set in a Rollback operation and - is nil during a Sync operation - items: - description: ApplicationSource contains all required information - about the source of an application - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match - paths against that should be explicitly excluded from - being used during manifest generation - type: string - include: - description: Include contains a glob pattern to match - paths against that should be explicitly included during - manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to the - helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm template - from failing when valueFiles do not exist locally - by not appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command upon - manifest generation - items: - description: HelmParameter is a parameter that's passed - to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether to - tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all - domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name to - use. If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files - to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed - to helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for - templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation - values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional labels - to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to - force applying common labels to resources for Kustomize - apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable entries - items: - description: EnvEntry represents an entry in the application's - environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array type - parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type parameter. - type: object - name: - description: Name is the name identifying a parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within sources - field. This field will not be used if used with a `source` - tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git or - Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the - source to sync the application to. In case of Git, this - can be commit, tag, or branch. If omitted, will equal - to HEAD. In case of Helm, this is a semver tag for the - Chart's version. - type: string - required: - - repoURL - type: object - type: array - syncOptions: - description: SyncOptions provide per-sync sync-options, e.g. Validate=false - items: - type: string - type: array - syncStrategy: - description: SyncStrategy describes how to perform the sync - properties: - apply: - description: Apply will perform a `kubectl apply` to perform - the sync. - properties: - force: - description: Force indicates whether or not to supply - the --force flag to `kubectl apply`. The --force flag - deletes and re-create the resource, when PATCH encounters - conflict and has retried for 5 times. - type: boolean - type: object - hook: - description: Hook will submit any referenced resources to - perform the sync. This is the default strategy - properties: - force: - description: Force indicates whether or not to supply - the --force flag to `kubectl apply`. The --force flag - deletes and re-create the resource, when PATCH encounters - conflict and has retried for 5 times. - type: boolean - type: object - type: object - type: object - type: object - spec: - description: ApplicationSpec represents desired application state. Contains - link to repository with application definition and additional parameters - link definition revision. - properties: - destination: - description: Destination is a reference to the target Kubernetes server - and namespace - properties: - name: - description: Name is an alternate way of specifying the target - cluster by its symbolic name - type: string - namespace: - description: Namespace specifies the target namespace for the - application's resources. The namespace will only be set for - namespace-scoped resources that have not set a value for .metadata.namespace - type: string - server: - description: Server specifies the URL of the target cluster and - must be set to the Kubernetes control plane API - type: string - type: object - ignoreDifferences: - description: IgnoreDifferences is a list of resources and their fields - which should be ignored during comparison - items: - description: ResourceIgnoreDifferences contains resource filter - and list of json paths which should be ignored during comparison - with live state. - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - description: ManagedFieldsManagers is a list of trusted managers. - Fields mutated by those managers will take precedence over - the desired state defined in the SCM and won't be displayed - in diffs - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - description: Info contains a list of information (URLs, email addresses, - and plain text) that relates to the application - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - description: Project is a reference to the project this application - belongs to. The empty string means that application belongs to the - 'default' project. - type: string - revisionHistoryLimit: - description: RevisionHistoryLimit limits the number of items kept - in the application's revision history, which is used for informational - purposes as well as for rollbacks to previous versions. This should - only be changed in exceptional circumstances. Setting to zero will - store no history. This will reduce storage used. Increasing will - increase the space used to store the history, so we do not recommend - increasing it. Default is 10. - format: int64 - type: integer - source: - description: Source is a reference to the location of the application's - manifests or chart - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match paths - against that should be explicitly excluded from being used - during manifest generation - type: string - include: - description: Include contains a glob pattern to match paths - against that should be explicitly included during manifest - generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External Variables - items: - description: JsonnetVar represents a variable to be - passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level Arguments - items: - description: JsonnetVar represents a variable to be - passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to the helm - template - items: - description: HelmFileParameter is a file parameter that's - passed to helm template during manifest generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm template - from failing when valueFiles do not exist locally by not - appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters which - are passed to the helm template command upon manifest generation - items: - description: HelmParameter is a parameter that's passed - to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether to tell - Helm to interpret booleans and numbers as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all domains - (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name to use. - If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition installation - step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files to - use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed to - helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for templating - ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional annotations - to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether to - apply env variables substitution for annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional labels to - add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether to force - applying common annotations to resources for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to force - applying common labels to resources for Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize image - definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize adds - to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas override - specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize to - use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific options - properties: - env: - description: Env is a list of environment variable entries - items: - description: EnvEntry represents an entry in the application's - environment - properties: - name: - description: Name is the name of the variable, usually - expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type parameter. - type: object - name: - description: Name is the name identifying a parameter. - type: string - string: - description: String_ is the value of a string type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within sources - field. This field will not be used if used with a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git or Helm) - that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the source - to sync the application to. In case of Git, this can be commit, - tag, or branch. If omitted, will equal to HEAD. In case of Helm, - this is a semver tag for the Chart's version. - type: string - required: - - repoURL - type: object - sources: - description: Sources is a reference to the location of the application's - manifests or chart - items: - description: ApplicationSource contains all required information - about the source of an application - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match paths - against that should be explicitly excluded from being - used during manifest generation - type: string - include: - description: Include contains a glob pattern to match paths - against that should be explicitly included during manifest - generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External Variables - items: - description: JsonnetVar represents a variable to be - passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level Arguments - items: - description: JsonnetVar represents a variable to be - passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to the helm - template - items: - description: HelmFileParameter is a file parameter that's - passed to helm template during manifest generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm template - from failing when valueFiles do not exist locally by not - appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters which - are passed to the helm template command upon manifest - generation - items: - description: HelmParameter is a parameter that's passed - to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether to tell - Helm to interpret booleans and numbers as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all domains - (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name to use. - If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition installation - step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files to - use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed to - helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for templating - ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional annotations - to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional labels - to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether to - force applying common annotations to resources for Kustomize - apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to force - applying common labels to resources for Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize image - definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas override - specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable entries - items: - description: EnvEntry represents an entry in the application's - environment - properties: - name: - description: Name is the name of the variable, usually - expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type parameter. - type: object - name: - description: Name is the name identifying a parameter. - type: string - string: - description: String_ is the value of a string type - parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within sources - field. This field will not be used if used with a `source` - tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git or Helm) - that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the source - to sync the application to. In case of Git, this can be commit, - tag, or branch. If omitted, will equal to HEAD. In case of - Helm, this is a semver tag for the Chart's version. - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - description: SyncPolicy controls when and how a sync will be performed - properties: - automated: - description: Automated will keep an application synced to the - target revision - properties: - allowEmpty: - description: 'AllowEmpty allows apps have zero live resources - (default: false)' - type: boolean - prune: - description: 'Prune specifies whether to delete resources - from the cluster that are not found in the sources anymore - as part of automated sync (default: false)' - type: boolean - selfHeal: - description: 'SelfHeal specifes whether to revert resources - back to their desired state upon modification in the cluster - (default: false)' - type: boolean - type: object - managedNamespaceMetadata: - description: ManagedNamespaceMetadata controls metadata in the - given namespace (if CreateNamespace=true) - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - description: Retry controls failed sync retry behavior - properties: - backoff: - description: Backoff controls how to backoff on subsequent - retries of failed syncs - properties: - duration: - description: Duration is the amount to back off. Default - unit is seconds, but could also be a duration (e.g. - "2m", "1h") - type: string - factor: - description: Factor is a factor to multiply the base duration - after each failed retry - format: int64 - type: integer - maxDuration: - description: MaxDuration is the maximum amount of time - allowed for the backoff strategy - type: string - type: object - limit: - description: Limit is the maximum number of attempts for retrying - a failed sync. If set to 0, no retries will be performed. - format: int64 - type: integer - type: object - syncOptions: - description: Options allow you to specify whole app sync-options - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - status: - description: ApplicationStatus contains status information for the application - properties: - conditions: - description: Conditions is a list of currently observed application - conditions - items: - description: ApplicationCondition contains details about an application - condition, which is usally an error or warning - properties: - lastTransitionTime: - description: LastTransitionTime is the time the condition was - last observed - format: date-time - type: string - message: - description: Message contains human-readable message indicating - details about condition - type: string - type: - description: Type is an application condition type - type: string - required: - - message - - type - type: object - type: array - health: - description: Health contains information about the application's current - health status - properties: - message: - description: Message is a human-readable informational message - describing the health status - type: string - status: - description: Status holds the status code of the application or - resource - type: string - type: object - history: - description: History contains information about the application's - sync history - items: - description: RevisionHistory contains history information about - a previous sync - properties: - deployStartedAt: - description: DeployStartedAt holds the time the sync operation - started - format: date-time - type: string - deployedAt: - description: DeployedAt holds the time the sync operation completed - format: date-time - type: string - id: - description: ID is an auto incrementing identifier of the RevisionHistory - format: int64 - type: integer - revision: - description: Revision holds the revision the sync was performed - against - type: string - revisions: - description: Revisions holds the revision of each source in - sources field the sync was performed against - items: - type: string - type: array - source: - description: Source is a reference to the application source - used for the sync operation - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match - paths against that should be explicitly excluded from - being used during manifest generation - type: string - include: - description: Include contains a glob pattern to match - paths against that should be explicitly included during - manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to the - helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm template - from failing when valueFiles do not exist locally - by not appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command upon - manifest generation - items: - description: HelmParameter is a parameter that's passed - to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether to - tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all - domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name to - use. If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files - to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed - to helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for - templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation - values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional labels - to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to - force applying common labels to resources for Kustomize - apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable entries - items: - description: EnvEntry represents an entry in the application's - environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array type - parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type parameter. - type: object - name: - description: Name is the name identifying a parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within sources - field. This field will not be used if used with a `source` - tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git or - Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the - source to sync the application to. In case of Git, this - can be commit, tag, or branch. If omitted, will equal - to HEAD. In case of Helm, this is a semver tag for the - Chart's version. - type: string - required: - - repoURL - type: object - sources: - description: Sources is a reference to the application sources - used for the sync operation - items: - description: ApplicationSource contains all required information - about the source of an application - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match - paths against that should be explicitly excluded - from being used during manifest generation - type: string - include: - description: Include contains a glob pattern to match - paths against that should be explicitly included - during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to - the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm - template from failing when valueFiles do not exist - locally by not appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command upon - manifest generation - items: - description: HelmParameter is a parameter that's - passed to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm - parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all - domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name - to use. If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files - to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed - to helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for - templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation - values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to - force applying common labels to resources for Kustomize - apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry in the - application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array - type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type - parameter. - type: object - name: - description: Name is the name identifying a - parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within - sources field. This field will not be used if used with - a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git - or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the - source to sync the application to. In case of Git, this - can be commit, tag, or branch. If omitted, will equal - to HEAD. In case of Helm, this is a semver tag for the - Chart's version. - type: string - required: - - repoURL - type: object - type: array - required: - - deployedAt - - id - type: object - type: array - observedAt: - description: 'ObservedAt indicates when the application state was - updated without querying latest git state Deprecated: controller - no longer updates ObservedAt field' - format: date-time - type: string - operationState: - description: OperationState contains information about any ongoing - operations, such as a sync - properties: - finishedAt: - description: FinishedAt contains time of operation completion - format: date-time - type: string - message: - description: Message holds any pertinent messages when attempting - to perform operation (typically errors). - type: string - operation: - description: Operation is the original requested operation - properties: - info: - description: Info is a list of informational items for this - operation - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - initiatedBy: - description: InitiatedBy contains information about who initiated - the operations - properties: - automated: - description: Automated is set to true if operation was - initiated automatically by the application controller. - type: boolean - username: - description: Username contains the name of a user who - started operation - type: string - type: object - retry: - description: Retry controls the strategy to apply if a sync - fails - properties: - backoff: - description: Backoff controls how to backoff on subsequent - retries of failed syncs - properties: - duration: - description: Duration is the amount to back off. Default - unit is seconds, but could also be a duration (e.g. - "2m", "1h") - type: string - factor: - description: Factor is a factor to multiply the base - duration after each failed retry - format: int64 - type: integer - maxDuration: - description: MaxDuration is the maximum amount of - time allowed for the backoff strategy - type: string - type: object - limit: - description: Limit is the maximum number of attempts for - retrying a failed sync. If set to 0, no retries will - be performed. - format: int64 - type: integer - type: object - sync: - description: Sync contains parameters for the operation - properties: - dryRun: - description: DryRun specifies to perform a `kubectl apply - --dry-run` without actually performing the sync - type: boolean - manifests: - description: Manifests is an optional field that overrides - sync source with a local directory for development - items: - type: string - type: array - prune: - description: Prune specifies to delete resources from - the cluster that are no longer tracked in git - type: boolean - resources: - description: Resources describes which resources shall - be part of the sync - items: - description: SyncOperationResource contains resources - to sync. - properties: - group: - type: string - kind: - type: string - name: - type: string - namespace: - type: string - required: - - kind - - name - type: object - type: array - revision: - description: Revision is the revision (Git) or chart version - (Helm) which to sync the application to If omitted, - will use the revision specified in app spec. - type: string - revisions: - description: Revisions is the list of revision (Git) or - chart version (Helm) which to sync each source in sources - field for the application to If omitted, will use the - revision specified in app spec. - items: - type: string - type: array - source: - description: Source overrides the source definition set - in the application. This is typically set in a Rollback - operation and is nil during a Sync operation - properties: - chart: - description: Chart is a Helm chart name, and must - be specified for applications sourced from a Helm - repo. - type: string - directory: - description: Directory holds path/directory specific - options - properties: - exclude: - description: Exclude contains a glob pattern to - match paths against that should be explicitly - excluded from being used during manifest generation - type: string - include: - description: Include contains a glob pattern to - match paths against that should be explicitly - included during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to - Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet - External Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan - a directory recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters - to the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm - parameter - type: string - path: - description: Path is the path to the file - containing the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents - helm template from failing when valueFiles do - not exist locally by not appending them to helm - template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command - upon manifest generation - items: - description: HelmParameter is a parameter that's - passed to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and - numbers as strings - type: boolean - name: - description: Name is the name of the Helm - parameter - type: string - value: - description: Value is the value for the - Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials - to all domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name - to use. If omitted it will use the application - name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value - files to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be - passed to helm template, typically defined as - a block - type: string - version: - description: Version is the Helm version to use - for templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies - whether to apply env variables substitution - for annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies - whether to force applying common annotations - to resources for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether - to force applying common labels to resources - for Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image - override specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to - resources for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to - resources for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that - Kustomize adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of - Kustomize to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git - repository, and is only valid for applications sourced - from Git. - type: string - plugin: - description: Plugin holds config management plugin - specific options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry in - the application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array - type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type - parameter. - type: object - name: - description: Name is the name identifying - a parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within - sources field. This field will not be used if used - with a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository - (Git or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of - the source to sync the application to. In case of - Git, this can be commit, tag, or branch. If omitted, - will equal to HEAD. In case of Helm, this is a semver - tag for the Chart's version. - type: string - required: - - repoURL - type: object - sources: - description: Sources overrides the source definition set - in the application. This is typically set in a Rollback - operation and is nil during a Sync operation - items: - description: ApplicationSource contains all required - information about the source of an application - properties: - chart: - description: Chart is a Helm chart name, and must - be specified for applications sourced from a Helm - repo. - type: string - directory: - description: Directory holds path/directory specific - options - properties: - exclude: - description: Exclude contains a glob pattern - to match paths against that should be explicitly - excluded from being used during manifest generation - type: string - include: - description: Include contains a glob pattern - to match paths against that should be explicitly - included during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific - to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet - External Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan - a directory recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters - to the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm - parameter - type: string - path: - description: Path is the path to the file - containing the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents - helm template from failing when valueFiles - do not exist locally by not appending them - to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command - upon manifest generation - items: - description: HelmParameter is a parameter - that's passed to helm template during manifest - generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and - numbers as strings - type: boolean - name: - description: Name is the name of the Helm - parameter - type: string - value: - description: Value is the value for the - Helm parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials - to all domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release - name to use. If omitted it will use the application - name - type: string - skipCrds: - description: SkipCrds skips custom resource - definition installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value - files to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to - be passed to helm template, typically defined - as a block - type: string - version: - description: Version is the Helm version to - use for templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific - options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of - additional annotations to add to rendered - manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies - whether to apply env variables substitution - for annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies - whether to force applying common annotations - to resources for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether - to force applying common labels to resources - for Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image - override specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended - to resources for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended - to resources for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that - Kustomize adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize - Replicas override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version - of Kustomize to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the - Git repository, and is only valid for applications - sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin - specific options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry - in the application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the - variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an - array type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map - type parameter. - type: object - name: - description: Name is the name identifying - a parameter. - type: string - string: - description: String_ is the value of a - string type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source - within sources field. This field will not be used - if used with a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository - (Git or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision - of the source to sync the application to. In case - of Git, this can be commit, tag, or branch. If - omitted, will equal to HEAD. In case of Helm, - this is a semver tag for the Chart's version. - type: string - required: - - repoURL - type: object - type: array - syncOptions: - description: SyncOptions provide per-sync sync-options, - e.g. Validate=false - items: - type: string - type: array - syncStrategy: - description: SyncStrategy describes how to perform the - sync - properties: - apply: - description: Apply will perform a `kubectl apply` - to perform the sync. - properties: - force: - description: Force indicates whether or not to - supply the --force flag to `kubectl apply`. - The --force flag deletes and re-create the resource, - when PATCH encounters conflict and has retried - for 5 times. - type: boolean - type: object - hook: - description: Hook will submit any referenced resources - to perform the sync. This is the default strategy - properties: - force: - description: Force indicates whether or not to - supply the --force flag to `kubectl apply`. - The --force flag deletes and re-create the resource, - when PATCH encounters conflict and has retried - for 5 times. - type: boolean - type: object - type: object - type: object - type: object - phase: - description: Phase is the current phase of the operation - type: string - retryCount: - description: RetryCount contains time of operation retries - format: int64 - type: integer - startedAt: - description: StartedAt contains time of operation start - format: date-time - type: string - syncResult: - description: SyncResult is the result of a Sync operation - properties: - resources: - description: Resources contains a list of sync result items - for each individual resource in a sync operation - items: - description: ResourceResult holds the operation result details - of a specific resource - properties: - group: - description: Group specifies the API group of the resource - type: string - hookPhase: - description: HookPhase contains the state of any operation - associated with this resource OR hook This can also - contain values for non-hook resources. - type: string - hookType: - description: HookType specifies the type of the hook. - Empty for non-hook resources - type: string - kind: - description: Kind specifies the API kind of the resource - type: string - message: - description: Message contains an informational or error - message for the last sync OR operation - type: string - name: - description: Name specifies the name of the resource - type: string - namespace: - description: Namespace specifies the target namespace - of the resource - type: string - status: - description: Status holds the final result of the sync. - Will be empty if the resources is yet to be applied/pruned - and is always zero-value for hooks - type: string - syncPhase: - description: SyncPhase indicates the particular phase - of the sync that this result was acquired in - type: string - version: - description: Version specifies the API version of the - resource - type: string - required: - - group - - kind - - name - - namespace - - version - type: object - type: array - revision: - description: Revision holds the revision this sync operation - was performed to - type: string - revisions: - description: Revisions holds the revision this sync operation - was performed for respective indexed source in sources field - items: - type: string - type: array - source: - description: Source records the application source information - of the sync, used for comparing auto-sync - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match - paths against that should be explicitly excluded - from being used during manifest generation - type: string - include: - description: Include contains a glob pattern to match - paths against that should be explicitly included - during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to - the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm - template from failing when valueFiles do not exist - locally by not appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command upon - manifest generation - items: - description: HelmParameter is a parameter that's - passed to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm - parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all - domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name - to use. If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files - to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed - to helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for - templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation - values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to - force applying common labels to resources for Kustomize - apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry in the - application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array - type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type - parameter. - type: object - name: - description: Name is the name identifying a - parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within - sources field. This field will not be used if used with - a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git - or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the - source to sync the application to. In case of Git, this - can be commit, tag, or branch. If omitted, will equal - to HEAD. In case of Helm, this is a semver tag for the - Chart's version. - type: string - required: - - repoURL - type: object - sources: - description: Source records the application source information - of the sync, used for comparing auto-sync - items: - description: ApplicationSource contains all required information - about the source of an application - properties: - chart: - description: Chart is a Helm chart name, and must be - specified for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific - options - properties: - exclude: - description: Exclude contains a glob pattern to - match paths against that should be explicitly - excluded from being used during manifest generation - type: string - include: - description: Include contains a glob pattern to - match paths against that should be explicitly - included during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a - directory recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters - to the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm - parameter - type: string - path: - description: Path is the path to the file - containing the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm - template from failing when valueFiles do not exist - locally by not appending them to helm template - --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command - upon manifest generation - items: - description: HelmParameter is a parameter that's - passed to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm - parameter - type: string - value: - description: Value is the value for the Helm - parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to - all domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name - to use. If omitted it will use the application - name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value - files to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be - passed to helm template, typically defined as - a block - type: string - version: - description: Version is the Helm version to use - for templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies - whether to apply env variables substitution for - annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether - to force applying common labels to resources for - Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image - override specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to - resources for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to - resources for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git - repository, and is only valid for applications sourced - from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry in the - application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array - type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type - parameter. - type: object - name: - description: Name is the name identifying - a parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within - sources field. This field will not be used if used - with a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git - or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of - the source to sync the application to. In case of - Git, this can be commit, tag, or branch. If omitted, - will equal to HEAD. In case of Helm, this is a semver - tag for the Chart's version. - type: string - required: - - repoURL - type: object - type: array - required: - - revision - type: object - required: - - operation - - phase - - startedAt - type: object - reconciledAt: - description: ReconciledAt indicates when the application state was - reconciled using the latest git version - format: date-time - type: string - resourceHealthSource: - description: 'ResourceHealthSource indicates where the resource health - status is stored: inline if not set or appTree' - type: string - resources: - description: Resources is a list of Kubernetes resources managed by - this application - items: - description: 'ResourceStatus holds the current sync and health status - of a resource TODO: describe members of this type' - properties: - group: - type: string - health: - description: HealthStatus contains information about the currently - observed health state of an application or resource - properties: - message: - description: Message is a human-readable informational message - describing the health status - type: string - status: - description: Status holds the status code of the application - or resource - type: string - type: object - hook: - type: boolean - kind: - type: string - name: - type: string - namespace: - type: string - requiresPruning: - type: boolean - status: - description: SyncStatusCode is a type which represents possible - comparison results - type: string - syncWave: - format: int64 - type: integer - version: - type: string - type: object - type: array - sourceType: - description: SourceType specifies the type of this application - type: string - sourceTypes: - description: SourceTypes specifies the type of the sources included - in the application - items: - description: ApplicationSourceType specifies the type of the application's - source - type: string - type: array - summary: - description: Summary contains a list of URLs and container images - used by this application - properties: - externalURLs: - description: ExternalURLs holds all external URLs of application - child resources. - items: - type: string - type: array - images: - description: Images holds all images of application child resources. - items: - type: string - type: array - type: object - sync: - description: Sync contains information about the application's current - sync status - properties: - comparedTo: - description: ComparedTo contains information about what has been - compared - properties: - destination: - description: Destination is a reference to the application's - destination used for comparison - properties: - name: - description: Name is an alternate way of specifying the - target cluster by its symbolic name - type: string - namespace: - description: Namespace specifies the target namespace - for the application's resources. The namespace will - only be set for namespace-scoped resources that have - not set a value for .metadata.namespace - type: string - server: - description: Server specifies the URL of the target cluster - and must be set to the Kubernetes control plane API - type: string - type: object - source: - description: Source is a reference to the application's source - used for comparison - properties: - chart: - description: Chart is a Helm chart name, and must be specified - for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific options - properties: - exclude: - description: Exclude contains a glob pattern to match - paths against that should be explicitly excluded - from being used during manifest generation - type: string - include: - description: Include contains a glob pattern to match - paths against that should be explicitly included - during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a directory - recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters to - the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm parameter - type: string - path: - description: Path is the path to the file containing - the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm - template from failing when valueFiles do not exist - locally by not appending them to helm template --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command upon - manifest generation - items: - description: HelmParameter is a parameter that's - passed to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm parameter - type: string - value: - description: Value is the value for the Helm - parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to all - domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name - to use. If omitted it will use the application name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value files - to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be passed - to helm template, typically defined as a block - type: string - version: - description: Version is the Helm version to use for - templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies whether - to apply env variables substitution for annotation - values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether to - force applying common labels to resources for Kustomize - apps - type: boolean - images: - description: Images is a list of Kustomize image override - specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to resources - for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to resources - for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git repository, - and is only valid for applications sourced from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry in the - application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array - type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type - parameter. - type: object - name: - description: Name is the name identifying a - parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within - sources field. This field will not be used if used with - a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git - or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of the - source to sync the application to. In case of Git, this - can be commit, tag, or branch. If omitted, will equal - to HEAD. In case of Helm, this is a semver tag for the - Chart's version. - type: string - required: - - repoURL - type: object - sources: - description: Sources is a reference to the application's multiple - sources used for comparison - items: - description: ApplicationSource contains all required information - about the source of an application - properties: - chart: - description: Chart is a Helm chart name, and must be - specified for applications sourced from a Helm repo. - type: string - directory: - description: Directory holds path/directory specific - options - properties: - exclude: - description: Exclude contains a glob pattern to - match paths against that should be explicitly - excluded from being used during manifest generation - type: string - include: - description: Include contains a glob pattern to - match paths against that should be explicitly - included during manifest generation - type: string - jsonnet: - description: Jsonnet holds options specific to Jsonnet - properties: - extVars: - description: ExtVars is a list of Jsonnet External - Variables - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - description: Additional library search dirs - items: - type: string - type: array - tlas: - description: TLAS is a list of Jsonnet Top-level - Arguments - items: - description: JsonnetVar represents a variable - to be passed to jsonnet during manifest - generation - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - description: Recurse specifies whether to scan a - directory recursively for manifests - type: boolean - type: object - helm: - description: Helm holds helm specific options - properties: - fileParameters: - description: FileParameters are file parameters - to the helm template - items: - description: HelmFileParameter is a file parameter - that's passed to helm template during manifest - generation - properties: - name: - description: Name is the name of the Helm - parameter - type: string - path: - description: Path is the path to the file - containing the values for the Helm parameter - type: string - type: object - type: array - ignoreMissingValueFiles: - description: IgnoreMissingValueFiles prevents helm - template from failing when valueFiles do not exist - locally by not appending them to helm template - --values - type: boolean - parameters: - description: Parameters is a list of Helm parameters - which are passed to the helm template command - upon manifest generation - items: - description: HelmParameter is a parameter that's - passed to helm template during manifest generation - properties: - forceString: - description: ForceString determines whether - to tell Helm to interpret booleans and numbers - as strings - type: boolean - name: - description: Name is the name of the Helm - parameter - type: string - value: - description: Value is the value for the Helm - parameter - type: string - type: object - type: array - passCredentials: - description: PassCredentials pass credentials to - all domains (Helm's --pass-credentials) - type: boolean - releaseName: - description: ReleaseName is the Helm release name - to use. If omitted it will use the application - name - type: string - skipCrds: - description: SkipCrds skips custom resource definition - installation step (Helm's --skip-crds) - type: boolean - valueFiles: - description: ValuesFiles is a list of Helm value - files to use when generating a template - items: - type: string - type: array - values: - description: Values specifies Helm values to be - passed to helm template, typically defined as - a block - type: string - version: - description: Version is the Helm version to use - for templating ("3") - type: string - type: object - kustomize: - description: Kustomize holds kustomize specific options - properties: - commonAnnotations: - additionalProperties: - type: string - description: CommonAnnotations is a list of additional - annotations to add to rendered manifests - type: object - commonAnnotationsEnvsubst: - description: CommonAnnotationsEnvsubst specifies - whether to apply env variables substitution for - annotation values - type: boolean - commonLabels: - additionalProperties: - type: string - description: CommonLabels is a list of additional - labels to add to rendered manifests - type: object - forceCommonAnnotations: - description: ForceCommonAnnotations specifies whether - to force applying common annotations to resources - for Kustomize apps - type: boolean - forceCommonLabels: - description: ForceCommonLabels specifies whether - to force applying common labels to resources for - Kustomize apps - type: boolean - images: - description: Images is a list of Kustomize image - override specifications - items: - description: KustomizeImage represents a Kustomize - image definition in the format [old_image_name=]: - type: string - type: array - namePrefix: - description: NamePrefix is a prefix appended to - resources for Kustomize apps - type: string - nameSuffix: - description: NameSuffix is a suffix appended to - resources for Kustomize apps - type: string - namespace: - description: Namespace sets the namespace that Kustomize - adds to all resources - type: string - replicas: - description: Replicas is a list of Kustomize Replicas - override specifications - items: - properties: - count: - anyOf: - - type: integer - - type: string - description: Number of replicas - x-kubernetes-int-or-string: true - name: - description: Name of Deployment or StatefulSet - type: string - required: - - count - - name - type: object - type: array - version: - description: Version controls which version of Kustomize - to use for rendering manifests - type: string - type: object - path: - description: Path is a directory path within the Git - repository, and is only valid for applications sourced - from Git. - type: string - plugin: - description: Plugin holds config management plugin specific - options - properties: - env: - description: Env is a list of environment variable - entries - items: - description: EnvEntry represents an entry in the - application's environment - properties: - name: - description: Name is the name of the variable, - usually expressed in uppercase - type: string - value: - description: Value is the value of the variable - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - description: Array is the value of an array - type parameter. - items: - type: string - type: array - map: - additionalProperties: - type: string - description: Map is the value of a map type - parameter. - type: object - name: - description: Name is the name identifying - a parameter. - type: string - string: - description: String_ is the value of a string - type parameter. - type: string - type: object - type: array - type: object - ref: - description: Ref is reference to another source within - sources field. This field will not be used if used - with a `source` tag. - type: string - repoURL: - description: RepoURL is the URL to the repository (Git - or Helm) that contains the application manifests - type: string - targetRevision: - description: TargetRevision defines the revision of - the source to sync the application to. In case of - Git, this can be commit, tag, or branch. If omitted, - will equal to HEAD. In case of Helm, this is a semver - tag for the Chart's version. - type: string - required: - - repoURL - type: object - type: array - required: - - destination - type: object - revision: - description: Revision contains information about the revision - the comparison has been performed to - type: string - revisions: - description: Revisions contains information about the revisions - of multiple sources the comparison has been performed to - items: - type: string - type: array - status: - description: Status is the sync state of the comparison - type: string - required: - - status - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true - subresources: {} ---- -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - labels: - app.kubernetes.io/name: applicationsets.argoproj.io - app.kubernetes.io/part-of: argocd - name: applicationsets.argoproj.io -spec: - group: argoproj.io - names: - kind: ApplicationSet - listKind: ApplicationSetList - plural: applicationsets - shortNames: - - appset - - appsets - singular: applicationset - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - properties: - apiVersion: - type: string - kind: - type: string - metadata: - type: object - spec: - properties: - generators: - items: - properties: - clusterDecisionResource: - properties: - configMapRef: - type: string - labelSelector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - name: - type: string - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - values: - additionalProperties: - type: string - type: object - required: - - configMapRef - type: object - clusters: - properties: - selector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - values: - additionalProperties: - type: string - type: object - type: object - git: - properties: - directories: - items: - properties: - exclude: - type: boolean - path: - type: string - required: - - path - type: object - type: array - files: - items: - properties: - path: - type: string - required: - - path - type: object - type: array - pathParamPrefix: - type: string - repoURL: - type: string - requeueAfterSeconds: - format: int64 - type: integer - revision: - type: string - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - repoURL - - revision - type: object - list: - properties: - elements: - items: - x-kubernetes-preserve-unknown-fields: true - type: array - elementsYaml: - type: string - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - elements - type: object - matrix: - properties: - generators: - items: - properties: - clusterDecisionResource: - properties: - configMapRef: - type: string - labelSelector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - name: - type: string - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - values: - additionalProperties: - type: string - type: object - required: - - configMapRef - type: object - clusters: - properties: - selector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - values: - additionalProperties: - type: string - type: object - type: object - git: - properties: - directories: - items: - properties: - exclude: - type: boolean - path: - type: string - required: - - path - type: object - type: array - files: - items: - properties: - path: - type: string - required: - - path - type: object - type: array - pathParamPrefix: - type: string - repoURL: - type: string - requeueAfterSeconds: - format: int64 - type: integer - revision: - type: string - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - repoURL - - revision - type: object - list: - properties: - elements: - items: - x-kubernetes-preserve-unknown-fields: true - type: array - elementsYaml: - type: string - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - elements - type: object - matrix: - x-kubernetes-preserve-unknown-fields: true - merge: - x-kubernetes-preserve-unknown-fields: true - pullRequest: - properties: - bitbucketServer: - properties: - api: - type: string - basicAuth: - properties: - passwordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - username: - type: string - required: - - passwordRef - - username - type: object - project: - type: string - repo: - type: string - required: - - api - - project - - repo - type: object - filters: - items: - properties: - branchMatch: - type: string - type: object - type: array - gitea: - properties: - api: - type: string - insecure: - type: boolean - owner: - type: string - repo: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - api - - owner - - repo - type: object - github: - properties: - api: - type: string - appSecretName: - type: string - labels: - items: - type: string - type: array - owner: - type: string - repo: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - owner - - repo - type: object - gitlab: - properties: - api: - type: string - labels: - items: - type: string - type: array - project: - type: string - pullRequestState: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - project - type: object - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - type: object - scmProvider: - properties: - azureDevOps: - properties: - accessTokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - allBranches: - type: boolean - api: - type: string - organization: - type: string - teamProject: - type: string - required: - - accessTokenRef - - organization - - teamProject - type: object - bitbucket: - properties: - allBranches: - type: boolean - appPasswordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - owner: - type: string - user: - type: string - required: - - appPasswordRef - - owner - - user - type: object - bitbucketServer: - properties: - allBranches: - type: boolean - api: - type: string - basicAuth: - properties: - passwordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - username: - type: string - required: - - passwordRef - - username - type: object - project: - type: string - required: - - api - - project - type: object - cloneProtocol: - type: string - filters: - items: - properties: - branchMatch: - type: string - labelMatch: - type: string - pathsDoNotExist: - items: - type: string - type: array - pathsExist: - items: - type: string - type: array - repositoryMatch: - type: string - type: object - type: array - gitea: - properties: - allBranches: - type: boolean - api: - type: string - insecure: - type: boolean - owner: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - api - - owner - type: object - github: - properties: - allBranches: - type: boolean - api: - type: string - appSecretName: - type: string - organization: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - organization - type: object - gitlab: - properties: - allBranches: - type: boolean - api: - type: string - group: - type: string - includeSubgroups: - type: boolean - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - group - type: object - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - type: object - selector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - type: object - type: array - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - generators - type: object - merge: - properties: - generators: - items: - properties: - clusterDecisionResource: - properties: - configMapRef: - type: string - labelSelector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - name: - type: string - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - values: - additionalProperties: - type: string - type: object - required: - - configMapRef - type: object - clusters: - properties: - selector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - values: - additionalProperties: - type: string - type: object - type: object - git: - properties: - directories: - items: - properties: - exclude: - type: boolean - path: - type: string - required: - - path - type: object - type: array - files: - items: - properties: - path: - type: string - required: - - path - type: object - type: array - pathParamPrefix: - type: string - repoURL: - type: string - requeueAfterSeconds: - format: int64 - type: integer - revision: - type: string - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - repoURL - - revision - type: object - list: - properties: - elements: - items: - x-kubernetes-preserve-unknown-fields: true - type: array - elementsYaml: - type: string - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - elements - type: object - matrix: - x-kubernetes-preserve-unknown-fields: true - merge: - x-kubernetes-preserve-unknown-fields: true - pullRequest: - properties: - bitbucketServer: - properties: - api: - type: string - basicAuth: - properties: - passwordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - username: - type: string - required: - - passwordRef - - username - type: object - project: - type: string - repo: - type: string - required: - - api - - project - - repo - type: object - filters: - items: - properties: - branchMatch: - type: string - type: object - type: array - gitea: - properties: - api: - type: string - insecure: - type: boolean - owner: - type: string - repo: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - api - - owner - - repo - type: object - github: - properties: - api: - type: string - appSecretName: - type: string - labels: - items: - type: string - type: array - owner: - type: string - repo: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - owner - - repo - type: object - gitlab: - properties: - api: - type: string - labels: - items: - type: string - type: array - project: - type: string - pullRequestState: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - project - type: object - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - type: object - scmProvider: - properties: - azureDevOps: - properties: - accessTokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - allBranches: - type: boolean - api: - type: string - organization: - type: string - teamProject: - type: string - required: - - accessTokenRef - - organization - - teamProject - type: object - bitbucket: - properties: - allBranches: - type: boolean - appPasswordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - owner: - type: string - user: - type: string - required: - - appPasswordRef - - owner - - user - type: object - bitbucketServer: - properties: - allBranches: - type: boolean - api: - type: string - basicAuth: - properties: - passwordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - username: - type: string - required: - - passwordRef - - username - type: object - project: - type: string - required: - - api - - project - type: object - cloneProtocol: - type: string - filters: - items: - properties: - branchMatch: - type: string - labelMatch: - type: string - pathsDoNotExist: - items: - type: string - type: array - pathsExist: - items: - type: string - type: array - repositoryMatch: - type: string - type: object - type: array - gitea: - properties: - allBranches: - type: boolean - api: - type: string - insecure: - type: boolean - owner: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - api - - owner - type: object - github: - properties: - allBranches: - type: boolean - api: - type: string - appSecretName: - type: string - organization: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - organization - type: object - gitlab: - properties: - allBranches: - type: boolean - api: - type: string - group: - type: string - includeSubgroups: - type: boolean - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - group - type: object - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - type: object - selector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - type: object - type: array - mergeKeys: - items: - type: string - type: array - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - generators - - mergeKeys - type: object - pullRequest: - properties: - bitbucketServer: - properties: - api: - type: string - basicAuth: - properties: - passwordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - username: - type: string - required: - - passwordRef - - username - type: object - project: - type: string - repo: - type: string - required: - - api - - project - - repo - type: object - filters: - items: - properties: - branchMatch: - type: string - type: object - type: array - gitea: - properties: - api: - type: string - insecure: - type: boolean - owner: - type: string - repo: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - api - - owner - - repo - type: object - github: - properties: - api: - type: string - appSecretName: - type: string - labels: - items: - type: string - type: array - owner: - type: string - repo: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - owner - - repo - type: object - gitlab: - properties: - api: - type: string - labels: - items: - type: string - type: array - project: - type: string - pullRequestState: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - project - type: object - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - type: object - scmProvider: - properties: - azureDevOps: - properties: - accessTokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - allBranches: - type: boolean - api: - type: string - organization: - type: string - teamProject: - type: string - required: - - accessTokenRef - - organization - - teamProject - type: object - bitbucket: - properties: - allBranches: - type: boolean - appPasswordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - owner: - type: string - user: - type: string - required: - - appPasswordRef - - owner - - user - type: object - bitbucketServer: - properties: - allBranches: - type: boolean - api: - type: string - basicAuth: - properties: - passwordRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - username: - type: string - required: - - passwordRef - - username - type: object - project: - type: string - required: - - api - - project - type: object - cloneProtocol: - type: string - filters: - items: - properties: - branchMatch: - type: string - labelMatch: - type: string - pathsDoNotExist: - items: - type: string - type: array - pathsExist: - items: - type: string - type: array - repositoryMatch: - type: string - type: object - type: array - gitea: - properties: - allBranches: - type: boolean - api: - type: string - insecure: - type: boolean - owner: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - api - - owner - type: object - github: - properties: - allBranches: - type: boolean - api: - type: string - appSecretName: - type: string - organization: - type: string - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - organization - type: object - gitlab: - properties: - allBranches: - type: boolean - api: - type: string - group: - type: string - includeSubgroups: - type: boolean - tokenRef: - properties: - key: - type: string - secretName: - type: string - required: - - key - - secretName - type: object - required: - - group - type: object - requeueAfterSeconds: - format: int64 - type: integer - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - type: object - selector: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - required: - - key - - operator - type: object - type: array - matchLabels: - additionalProperties: - type: string - type: object - type: object - type: object - type: array - goTemplate: - type: boolean - preservedFields: - properties: - annotations: - items: - type: string - type: array - type: object - strategy: - properties: - rollingSync: - properties: - steps: - items: - properties: - matchExpressions: - items: - properties: - key: - type: string - operator: - type: string - values: - items: - type: string - type: array - type: object - type: array - maxUpdate: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - type: object - type: array - type: object - type: - type: string - type: object - syncPolicy: - properties: - preserveResourcesOnDeletion: - type: boolean - type: object - template: - properties: - metadata: - properties: - annotations: - additionalProperties: - type: string - type: object - finalizers: - items: - type: string - type: array - labels: - additionalProperties: - type: string - type: object - name: - type: string - namespace: - type: string - type: object - spec: - properties: - destination: - properties: - name: - type: string - namespace: - type: string - server: - type: string - type: object - ignoreDifferences: - items: - properties: - group: - type: string - jqPathExpressions: - items: - type: string - type: array - jsonPointers: - items: - type: string - type: array - kind: - type: string - managedFieldsManagers: - items: - type: string - type: array - name: - type: string - namespace: - type: string - required: - - kind - type: object - type: array - info: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - project: - type: string - revisionHistoryLimit: - format: int64 - type: integer - source: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - sources: - items: - properties: - chart: - type: string - directory: - properties: - exclude: - type: string - include: - type: string - jsonnet: - properties: - extVars: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - libs: - items: - type: string - type: array - tlas: - items: - properties: - code: - type: boolean - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - type: object - recurse: - type: boolean - type: object - helm: - properties: - fileParameters: - items: - properties: - name: - type: string - path: - type: string - type: object - type: array - ignoreMissingValueFiles: - type: boolean - parameters: - items: - properties: - forceString: - type: boolean - name: - type: string - value: - type: string - type: object - type: array - passCredentials: - type: boolean - releaseName: - type: string - skipCrds: - type: boolean - valueFiles: - items: - type: string - type: array - values: - type: string - version: - type: string - type: object - kustomize: - properties: - commonAnnotations: - additionalProperties: - type: string - type: object - commonAnnotationsEnvsubst: - type: boolean - commonLabels: - additionalProperties: - type: string - type: object - forceCommonAnnotations: - type: boolean - forceCommonLabels: - type: boolean - images: - items: - type: string - type: array - namePrefix: - type: string - nameSuffix: - type: string - namespace: - type: string - replicas: - items: - properties: - count: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - name: - type: string - required: - - count - - name - type: object - type: array - version: - type: string - type: object - path: - type: string - plugin: - properties: - env: - items: - properties: - name: - type: string - value: - type: string - required: - - name - - value - type: object - type: array - name: - type: string - parameters: - items: - properties: - array: - items: - type: string - type: array - map: - additionalProperties: - type: string - type: object - name: - type: string - string: - type: string - type: object - type: array - type: object - ref: - type: string - repoURL: - type: string - targetRevision: - type: string - required: - - repoURL - type: object - type: array - syncPolicy: - properties: - automated: - properties: - allowEmpty: - type: boolean - prune: - type: boolean - selfHeal: - type: boolean - type: object - managedNamespaceMetadata: - properties: - annotations: - additionalProperties: - type: string - type: object - labels: - additionalProperties: - type: string - type: object - type: object - retry: - properties: - backoff: - properties: - duration: - type: string - factor: - format: int64 - type: integer - maxDuration: - type: string - type: object - limit: - format: int64 - type: integer - type: object - syncOptions: - items: - type: string - type: array - type: object - required: - - destination - - project - type: object - required: - - metadata - - spec - type: object - required: - - generators - - template - type: object - status: - properties: - applicationStatus: - items: - properties: - application: - type: string - lastTransitionTime: - format: date-time - type: string - message: - type: string - status: - type: string - step: - type: string - required: - - application - - message - - status - - step - type: object - type: array - conditions: - items: - properties: - lastTransitionTime: - format: date-time - type: string - message: - type: string - reason: - type: string - status: - type: string - type: - type: string - required: - - message - - reason - - status - - type - type: object - type: array - type: object - required: - - metadata - - spec - type: object - served: true - storage: true - subresources: - status: {} ---- -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - labels: - app.kubernetes.io/name: appprojects.argoproj.io - app.kubernetes.io/part-of: argocd - name: appprojects.argoproj.io -spec: - group: argoproj.io - names: - kind: AppProject - listKind: AppProjectList - plural: appprojects - shortNames: - - appproj - - appprojs - singular: appproject - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: 'AppProject provides a logical grouping of applications, providing - controls for: * where the apps may deploy to (cluster whitelist) * what - may be deployed (repository whitelist, resource whitelist/blacklist) * who - can access these applications (roles, OIDC group claims bindings) * and - what they can do (RBAC policies) * automation access to these roles (JWT - tokens)' - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: AppProjectSpec is the specification of an AppProject - properties: - clusterResourceBlacklist: - description: ClusterResourceBlacklist contains list of blacklisted - cluster level resources - items: - description: GroupKind specifies a Group and a Kind, but does not - force a version. This is useful for identifying concepts during - lookup stages without having partially valid types - properties: - group: - type: string - kind: - type: string - required: - - group - - kind - type: object - type: array - clusterResourceWhitelist: - description: ClusterResourceWhitelist contains list of whitelisted - cluster level resources - items: - description: GroupKind specifies a Group and a Kind, but does not - force a version. This is useful for identifying concepts during - lookup stages without having partially valid types - properties: - group: - type: string - kind: - type: string - required: - - group - - kind - type: object - type: array - description: - description: Description contains optional project description - type: string - destinations: - description: Destinations contains list of destinations available - for deployment - items: - description: ApplicationDestination holds information about the - application's destination - properties: - name: - description: Name is an alternate way of specifying the target - cluster by its symbolic name - type: string - namespace: - description: Namespace specifies the target namespace for the - application's resources. The namespace will only be set for - namespace-scoped resources that have not set a value for .metadata.namespace - type: string - server: - description: Server specifies the URL of the target cluster - and must be set to the Kubernetes control plane API - type: string - type: object - type: array - namespaceResourceBlacklist: - description: NamespaceResourceBlacklist contains list of blacklisted - namespace level resources - items: - description: GroupKind specifies a Group and a Kind, but does not - force a version. This is useful for identifying concepts during - lookup stages without having partially valid types - properties: - group: - type: string - kind: - type: string - required: - - group - - kind - type: object - type: array - namespaceResourceWhitelist: - description: NamespaceResourceWhitelist contains list of whitelisted - namespace level resources - items: - description: GroupKind specifies a Group and a Kind, but does not - force a version. This is useful for identifying concepts during - lookup stages without having partially valid types - properties: - group: - type: string - kind: - type: string - required: - - group - - kind - type: object - type: array - orphanedResources: - description: OrphanedResources specifies if controller should monitor - orphaned resources of apps in this project - properties: - ignore: - description: Ignore contains a list of resources that are to be - excluded from orphaned resources monitoring - items: - description: OrphanedResourceKey is a reference to a resource - to be ignored from - properties: - group: - type: string - kind: - type: string - name: - type: string - type: object - type: array - warn: - description: Warn indicates if warning condition should be created - for apps which have orphaned resources - type: boolean - type: object - permitOnlyProjectScopedClusters: - description: PermitOnlyProjectScopedClusters determines whether destinations - can only reference clusters which are project-scoped - type: boolean - roles: - description: Roles are user defined RBAC roles associated with this - project - items: - description: ProjectRole represents a role that has access to a - project - properties: - description: - description: Description is a description of the role - type: string - groups: - description: Groups are a list of OIDC group claims bound to - this role - items: - type: string - type: array - jwtTokens: - description: JWTTokens are a list of generated JWT tokens bound - to this role - items: - description: JWTToken holds the issuedAt and expiresAt values - of a token - properties: - exp: - format: int64 - type: integer - iat: - format: int64 - type: integer - id: - type: string - required: - - iat - type: object - type: array - name: - description: Name is a name for this role - type: string - policies: - description: Policies Stores a list of casbin formatted strings - that define access policies for the role in the project - items: - type: string - type: array - required: - - name - type: object - type: array - signatureKeys: - description: SignatureKeys contains a list of PGP key IDs that commits - in Git must be signed with in order to be allowed for sync - items: - description: SignatureKey is the specification of a key required - to verify commit signatures with - properties: - keyID: - description: The ID of the key in hexadecimal notation - type: string - required: - - keyID - type: object - type: array - sourceNamespaces: - description: SourceNamespaces defines the namespaces application resources - are allowed to be created in - items: - type: string - type: array - sourceRepos: - description: SourceRepos contains list of repository URLs which can - be used for deployment - items: - type: string - type: array - syncWindows: - description: SyncWindows controls when syncs can be run for apps in - this project - items: - description: SyncWindow contains the kind, time, duration and attributes - that are used to assign the syncWindows to apps - properties: - applications: - description: Applications contains a list of applications that - the window will apply to - items: - type: string - type: array - clusters: - description: Clusters contains a list of clusters that the window - will apply to - items: - type: string - type: array - duration: - description: Duration is the amount of time the sync window - will be open - type: string - kind: - description: Kind defines if the window allows or blocks syncs - type: string - manualSync: - description: ManualSync enables manual syncs when they would - otherwise be blocked - type: boolean - namespaces: - description: Namespaces contains a list of namespaces that the - window will apply to - items: - type: string - type: array - schedule: - description: Schedule is the time the window will begin, specified - in cron format - type: string - timeZone: - description: TimeZone of the sync that will be applied to the - schedule - type: string - type: object - type: array - type: object - status: - description: AppProjectStatus contains status information for AppProject - CRs - properties: - jwtTokensByRole: - additionalProperties: - description: JWTTokens represents a list of JWT tokens - properties: - items: - items: - description: JWTToken holds the issuedAt and expiresAt values - of a token - properties: - exp: - format: int64 - type: integer - iat: - format: int64 - type: integer - id: - type: string - required: - - iat - type: object - type: array - type: object - description: JWTTokensByRole contains a list of JWT tokens issued - for a given role - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: application-controller - app.kubernetes.io/name: argocd-application-controller - app.kubernetes.io/part-of: argocd - name: argocd-application-controller ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: applicationset-controller - app.kubernetes.io/name: argocd-applicationset-controller - app.kubernetes.io/part-of: argocd - name: argocd-applicationset-controller ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: dex-server - app.kubernetes.io/name: argocd-dex-server - app.kubernetes.io/part-of: argocd - name: argocd-dex-server ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-controller ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: redis - app.kubernetes.io/name: argocd-redis - app.kubernetes.io/part-of: argocd - name: argocd-redis ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: repo-server - app.kubernetes.io/name: argocd-repo-server - app.kubernetes.io/part-of: argocd - name: argocd-repo-server ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: application-controller - app.kubernetes.io/name: argocd-application-controller - app.kubernetes.io/part-of: argocd - name: argocd-application-controller -rules: -- apiGroups: - - "" - resources: - - secrets - - configmaps - verbs: - - get - - list - - watch -- apiGroups: - - argoproj.io - resources: - - applications - - appprojects - verbs: - - create - - get - - list - - watch - - update - - patch - - delete -- apiGroups: - - "" - resources: - - events - verbs: - - create - - list ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: applicationset-controller - app.kubernetes.io/name: argocd-applicationset-controller - app.kubernetes.io/part-of: argocd - name: argocd-applicationset-controller -rules: -- apiGroups: - - argoproj.io - resources: - - applications - - applicationsets - - applicationsets/finalizers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - argoproj.io - resources: - - appprojects - verbs: - - get -- apiGroups: - - argoproj.io - resources: - - applicationsets/status - verbs: - - get - - patch - - update -- apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch -- apiGroups: - - "" - resources: - - secrets - - configmaps - verbs: - - get - - list - - watch -- apiGroups: - - apps - - extensions - resources: - - deployments - verbs: - - get - - list - - watch ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: dex-server - app.kubernetes.io/name: argocd-dex-server - app.kubernetes.io/part-of: argocd - name: argocd-dex-server -rules: -- apiGroups: - - "" - resources: - - secrets - - configmaps - verbs: - - get - - list - - watch ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-controller -rules: -- apiGroups: - - argoproj.io - resources: - - applications - - appprojects - verbs: - - get - - list - - watch - - update - - patch -- apiGroups: - - "" - resources: - - configmaps - - secrets - verbs: - - list - - watch -- apiGroups: - - "" - resourceNames: - - argocd-notifications-cm - resources: - - configmaps - verbs: - - get -- apiGroups: - - "" - resourceNames: - - argocd-notifications-secret - resources: - - secrets - verbs: - - get ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server -rules: -- apiGroups: - - "" - resources: - - secrets - - configmaps - verbs: - - create - - get - - list - - watch - - update - - patch - - delete -- apiGroups: - - argoproj.io - resources: - - applications - - appprojects - - applicationsets - verbs: - - create - - get - - list - - watch - - update - - delete - - patch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - list ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/component: application-controller - app.kubernetes.io/name: argocd-application-controller - app.kubernetes.io/part-of: argocd - name: argocd-application-controller -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - '*' -- nonResourceURLs: - - '*' - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - delete - - get - - patch -- apiGroups: - - "" - resources: - - events - verbs: - - list -- apiGroups: - - "" - resources: - - pods - - pods/log - verbs: - - get -- apiGroups: - - argoproj.io - resources: - - applications - verbs: - - get - - list - - watch ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: application-controller - app.kubernetes.io/name: argocd-application-controller - app.kubernetes.io/part-of: argocd - name: argocd-application-controller -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: argocd-application-controller -subjects: -- kind: ServiceAccount - name: argocd-application-controller ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: applicationset-controller - app.kubernetes.io/name: argocd-applicationset-controller - app.kubernetes.io/part-of: argocd - name: argocd-applicationset-controller -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: argocd-applicationset-controller -subjects: -- kind: ServiceAccount - name: argocd-applicationset-controller ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: dex-server - app.kubernetes.io/name: argocd-dex-server - app.kubernetes.io/part-of: argocd - name: argocd-dex-server -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: argocd-dex-server -subjects: -- kind: ServiceAccount - name: argocd-dex-server ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-controller -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: argocd-notifications-controller -subjects: -- kind: ServiceAccount - name: argocd-notifications-controller ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: redis - app.kubernetes.io/name: argocd-redis - app.kubernetes.io/part-of: argocd - name: argocd-redis -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: argocd-redis -subjects: -- kind: ServiceAccount - name: argocd-redis ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: argocd-server -subjects: -- kind: ServiceAccount - name: argocd-server ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/component: application-controller - app.kubernetes.io/name: argocd-application-controller - app.kubernetes.io/part-of: argocd - name: argocd-application-controller -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: argocd-application-controller -subjects: -- kind: ServiceAccount - name: argocd-application-controller - namespace: argocd ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: argocd-server -subjects: -- kind: ServiceAccount - name: argocd-server - namespace: argocd ---- -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-cm - app.kubernetes.io/part-of: argocd - name: argocd-cm ---- -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-cmd-params-cm - app.kubernetes.io/part-of: argocd - name: argocd-cmd-params-cm ---- -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-gpg-keys-cm - app.kubernetes.io/part-of: argocd - name: argocd-gpg-keys-cm ---- -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-cm ---- -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-rbac-cm - app.kubernetes.io/part-of: argocd - name: argocd-rbac-cm ---- -apiVersion: v1 -data: - ssh_known_hosts: | - # This file was automatically generated by hack/update-ssh-known-hosts.sh. DO NOT EDIT - [ssh.github.com]:443 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg= - [ssh.github.com]:443 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl - [ssh.github.com]:443 ssh-rsa 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 - bitbucket.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPIQmuzMBuKdWeF4+a2sjSSpBK0iqitSQ+5BM9KhpexuGt20JpTVM7u5BDZngncgrqDMbWdxMWWOGtZ9UgbqgZE= - bitbucket.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIazEu89wgQZ4bqs3d63QSMzYVa0MuJ2e2gKTKqu+UUO - bitbucket.org ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAubiN81eDcafrgMeLzaFPsw2kNvEcqTKl/VqLat/MaB33pZy0y3rJZtnqwR2qOOvbwKZYKiEO1O6VqNEBxKvJJelCq0dTXWT5pbO2gDXC6h6QDXCaHo6pOHGPUy+YBaGQRGuSusMEASYiWunYN0vCAI8QaXnWMXNMdFP3jHAJH0eDsoiGnLPBlBp4TNm6rYI74nMzgz3B9IikW4WVK+dc8KZJZWYjAuORU3jc1c/NPskD2ASinf8v3xnfXeukU0sJ5N6m5E8VLjObPEO+mN2t/FZTMZLiFqPWc/ALSqnMnnhwrNi2rbfg/rd/IpL8Le3pSBne8+seeFVBoGqzHM9yXw== - github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg= - github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl - github.com ssh-rsa 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 - gitlab.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFSMqzJeV9rUzU4kWitGjeR4PWSa29SPqJ1fVkhtj3Hw9xjLVXVYrU9QlYWrOLXBpQ6KWjbjTDTdDkoohFzgbEY= - gitlab.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf - gitlab.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bNKTBSpIYDEGk9KxsGh3mySTRgMtXL583qmBpzeQ+jqCMRgBqB98u3z++J1sKlXHWfM9dyhSevkMwSbhoR8XIq/U0tCNyokEi/ueaBMCvbcTHhO7FcwzY92WK4Yt0aGROY5qX2UKSeOvuP4D6TPqKF1onrSzH9bx9XUf2lEdWT/ia1NEKjunUqu1xOB/StKDHMoX4/OKyIzuS0q/T1zOATthvasJFoPrAjkohTyaDUz2LN5JoH839hViyEG82yB+MjcFV5MU3N1l1QL3cVUCh93xSaua1N85qivl+siMkPGbO5xR/En4iEY6K2XPASUEMaieWVNTRCtJ4S8H+9 - ssh.dev.azure.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Hr1oTWqNqOlzGJOfGJ4NakVyIzf1rXYd4d7wo6jBlkLvCA4odBlL0mDUyZ0/QUfTTqeu+tm22gOsv+VrVTMk6vwRU75gY/y9ut5Mb3bR5BV58dKXyq9A9UeB5Cakehn5Zgm6x1mKoVyf+FFn26iYqXJRgzIZZcZ5V6hrE0Qg39kZm4az48o0AUbf6Sp4SLdvnuMa2sVNwHBboS7EJkm57XQPVU3/QpyNLHbWDdzwtrlS+ez30S3AdYhLKEOxAG8weOnyrtLJAUen9mTkol8oII1edf7mWWbWVf0nBmly21+nZcmCTISQBtdcyPaEno7fFQMDD26/s0lfKob4Kw8H - vs-ssh.visualstudio.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Hr1oTWqNqOlzGJOfGJ4NakVyIzf1rXYd4d7wo6jBlkLvCA4odBlL0mDUyZ0/QUfTTqeu+tm22gOsv+VrVTMk6vwRU75gY/y9ut5Mb3bR5BV58dKXyq9A9UeB5Cakehn5Zgm6x1mKoVyf+FFn26iYqXJRgzIZZcZ5V6hrE0Qg39kZm4az48o0AUbf6Sp4SLdvnuMa2sVNwHBboS7EJkm57XQPVU3/QpyNLHbWDdzwtrlS+ez30S3AdYhLKEOxAG8weOnyrtLJAUen9mTkol8oII1edf7mWWbWVf0nBmly21+nZcmCTISQBtdcyPaEno7fFQMDD26/s0lfKob4Kw8H -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-ssh-known-hosts-cm - app.kubernetes.io/part-of: argocd - name: argocd-ssh-known-hosts-cm ---- -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-tls-certs-cm - app.kubernetes.io/part-of: argocd - name: argocd-tls-certs-cm ---- -apiVersion: v1 -kind: Secret -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-secret -type: Opaque ---- -apiVersion: v1 -kind: Secret -metadata: - labels: - app.kubernetes.io/name: argocd-secret - app.kubernetes.io/part-of: argocd - name: argocd-secret -type: Opaque ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: applicationset-controller - app.kubernetes.io/name: argocd-applicationset-controller - app.kubernetes.io/part-of: argocd - name: argocd-applicationset-controller -spec: - ports: - - name: webhook - port: 7000 - protocol: TCP - targetPort: webhook - - name: metrics - port: 8080 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: argocd-applicationset-controller ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: dex-server - app.kubernetes.io/name: argocd-dex-server - app.kubernetes.io/part-of: argocd - name: argocd-dex-server -spec: - ports: - - name: http - port: 5556 - protocol: TCP - targetPort: 5556 - - name: grpc - port: 5557 - protocol: TCP - targetPort: 5557 - - name: metrics - port: 5558 - protocol: TCP - targetPort: 5558 - selector: - app.kubernetes.io/name: argocd-dex-server ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: metrics - app.kubernetes.io/name: argocd-metrics - app.kubernetes.io/part-of: argocd - name: argocd-metrics -spec: - ports: - - name: metrics - port: 8082 - protocol: TCP - targetPort: 8082 - selector: - app.kubernetes.io/name: argocd-application-controller ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller-metrics - app.kubernetes.io/part-of: argocd - name: argocd-notifications-controller-metrics -spec: - ports: - - name: metrics - port: 9001 - protocol: TCP - targetPort: 9001 - selector: - app.kubernetes.io/name: argocd-notifications-controller ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: redis - app.kubernetes.io/name: argocd-redis - app.kubernetes.io/part-of: argocd - name: argocd-redis -spec: - ports: - - name: tcp-redis - port: 6379 - targetPort: 6379 - selector: - app.kubernetes.io/name: argocd-redis ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: repo-server - app.kubernetes.io/name: argocd-repo-server - app.kubernetes.io/part-of: argocd - name: argocd-repo-server -spec: - ports: - - name: server - port: 8081 - protocol: TCP - targetPort: 8081 - - name: metrics - port: 8084 - protocol: TCP - targetPort: 8084 - selector: - app.kubernetes.io/name: argocd-repo-server ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server -spec: - ports: - - name: http - port: 80 - protocol: TCP - targetPort: 8080 - - name: https - port: 443 - protocol: TCP - targetPort: 8080 - selector: - app.kubernetes.io/name: argocd-server ---- -apiVersion: v1 -kind: Service -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server-metrics - app.kubernetes.io/part-of: argocd - name: argocd-server-metrics -spec: - ports: - - name: metrics - port: 8083 - protocol: TCP - targetPort: 8083 - selector: - app.kubernetes.io/name: argocd-server ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: applicationset-controller - app.kubernetes.io/name: argocd-applicationset-controller - app.kubernetes.io/part-of: argocd - name: argocd-applicationset-controller -spec: - selector: - matchLabels: - app.kubernetes.io/name: argocd-applicationset-controller - template: - metadata: - labels: - app.kubernetes.io/name: argocd-applicationset-controller - spec: - containers: - - args: - - /usr/local/bin/argocd-applicationset-controller - env: - - name: NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: ARGOCD_APPLICATIONSET_CONTROLLER_ENABLE_LEADER_ELECTION - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.enable.leader.election - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_NAMESPACE - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.namespace - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_REPO_SERVER - valueFrom: - configMapKeyRef: - key: repo.server - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_POLICY - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.policy - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_DEBUG - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.debug - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_LOGFORMAT - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.log.format - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_LOGLEVEL - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.log.level - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_DRY_RUN - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.dryrun - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_GIT_MODULES_ENABLED - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.enable.git.submodule - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATIONSET_CONTROLLER_ENABLE_PROGRESSIVE_SYNCS - valueFrom: - configMapKeyRef: - key: applicationsetcontroller.enable.progressive.syncs - name: argocd-cmd-params-cm - optional: true - image: quay.io/argoproj/argocd:v2.7.6 - imagePullPolicy: Always - name: argocd-applicationset-controller - ports: - - containerPort: 7000 - name: webhook - - containerPort: 8080 - name: metrics - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /app/config/ssh - name: ssh-known-hosts - - mountPath: /app/config/tls - name: tls-certs - - mountPath: /app/config/gpg/source - name: gpg-keys - - mountPath: /app/config/gpg/keys - name: gpg-keyring - - mountPath: /tmp - name: tmp - serviceAccountName: argocd-applicationset-controller - volumes: - - configMap: - name: argocd-ssh-known-hosts-cm - name: ssh-known-hosts - - configMap: - name: argocd-tls-certs-cm - name: tls-certs - - configMap: - name: argocd-gpg-keys-cm - name: gpg-keys - - emptyDir: {} - name: gpg-keyring - - emptyDir: {} - name: tmp ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: dex-server - app.kubernetes.io/name: argocd-dex-server - app.kubernetes.io/part-of: argocd - name: argocd-dex-server -spec: - selector: - matchLabels: - app.kubernetes.io/name: argocd-dex-server - template: - metadata: - labels: - app.kubernetes.io/name: argocd-dex-server - spec: - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/part-of: argocd - topologyKey: kubernetes.io/hostname - weight: 5 - containers: - - command: - - /shared/argocd-dex - - rundex - env: - - name: ARGOCD_DEX_SERVER_DISABLE_TLS - valueFrom: - configMapKeyRef: - key: dexserver.disable.tls - name: argocd-cmd-params-cm - optional: true - image: ghcr.io/dexidp/dex:v2.36.0 - imagePullPolicy: Always - name: dex - ports: - - containerPort: 5556 - - containerPort: 5557 - - containerPort: 5558 - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /shared - name: static-files - - mountPath: /tmp - name: dexconfig - - mountPath: /tls - name: argocd-dex-server-tls - initContainers: - - command: - - /bin/cp - - -n - - /usr/local/bin/argocd - - /shared/argocd-dex - image: quay.io/argoproj/argocd:v2.7.6 - imagePullPolicy: Always - name: copyutil - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /shared - name: static-files - - mountPath: /tmp - name: dexconfig - serviceAccountName: argocd-dex-server - volumes: - - emptyDir: {} - name: static-files - - emptyDir: {} - name: dexconfig - - name: argocd-dex-server-tls - secret: - items: - - key: tls.crt - path: tls.crt - - key: tls.key - path: tls.key - - key: ca.crt - path: ca.crt - optional: true - secretName: argocd-dex-server-tls ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-controller -spec: - selector: - matchLabels: - app.kubernetes.io/name: argocd-notifications-controller - strategy: - type: Recreate - template: - metadata: - labels: - app.kubernetes.io/name: argocd-notifications-controller - spec: - containers: - - args: - - /usr/local/bin/argocd-notifications - image: quay.io/argoproj/argocd:v2.7.6 - imagePullPolicy: Always - livenessProbe: - tcpSocket: - port: 9001 - name: argocd-notifications-controller - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - volumeMounts: - - mountPath: /app/config/tls - name: tls-certs - - mountPath: /app/config/reposerver/tls - name: argocd-repo-server-tls - workingDir: /app - securityContext: - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - serviceAccountName: argocd-notifications-controller - volumes: - - configMap: - name: argocd-tls-certs-cm - name: tls-certs - - name: argocd-repo-server-tls - secret: - items: - - key: tls.crt - path: tls.crt - - key: tls.key - path: tls.key - - key: ca.crt - path: ca.crt - optional: true - secretName: argocd-repo-server-tls ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: redis - app.kubernetes.io/name: argocd-redis - app.kubernetes.io/part-of: argocd - name: argocd-redis -spec: - selector: - matchLabels: - app.kubernetes.io/name: argocd-redis - template: - metadata: - labels: - app.kubernetes.io/name: argocd-redis - spec: - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/name: argocd-redis - topologyKey: kubernetes.io/hostname - weight: 100 - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/part-of: argocd - topologyKey: kubernetes.io/hostname - weight: 5 - containers: - - args: - - --save - - "" - - --appendonly - - "no" - image: redis:7.0.11-alpine - imagePullPolicy: Always - name: redis - ports: - - containerPort: 6379 - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - securityContext: - runAsNonRoot: true - runAsUser: 999 - seccompProfile: - type: RuntimeDefault - serviceAccountName: argocd-redis ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: repo-server - app.kubernetes.io/name: argocd-repo-server - app.kubernetes.io/part-of: argocd - name: argocd-repo-server -spec: - selector: - matchLabels: - app.kubernetes.io/name: argocd-repo-server - template: - metadata: - labels: - app.kubernetes.io/name: argocd-repo-server - spec: - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/name: argocd-repo-server - topologyKey: kubernetes.io/hostname - weight: 100 - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/part-of: argocd - topologyKey: kubernetes.io/hostname - weight: 5 - automountServiceAccountToken: false - containers: - - args: - - /usr/local/bin/argocd-repo-server - env: - - name: ARGOCD_RECONCILIATION_TIMEOUT - valueFrom: - configMapKeyRef: - key: timeout.reconciliation - name: argocd-cm - optional: true - - name: ARGOCD_REPO_SERVER_LOGFORMAT - valueFrom: - configMapKeyRef: - key: reposerver.log.format - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_LOGLEVEL - valueFrom: - configMapKeyRef: - key: reposerver.log.level - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_PARALLELISM_LIMIT - valueFrom: - configMapKeyRef: - key: reposerver.parallelism.limit - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_DISABLE_TLS - valueFrom: - configMapKeyRef: - key: reposerver.disable.tls - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_TLS_MIN_VERSION - valueFrom: - configMapKeyRef: - key: reposerver.tls.minversion - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_TLS_MAX_VERSION - valueFrom: - configMapKeyRef: - key: reposerver.tls.maxversion - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_TLS_CIPHERS - valueFrom: - configMapKeyRef: - key: reposerver.tls.ciphers - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: reposerver.repo.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: REDIS_SERVER - valueFrom: - configMapKeyRef: - key: redis.server - name: argocd-cmd-params-cm - optional: true - - name: REDIS_COMPRESSION - valueFrom: - configMapKeyRef: - key: redis.compression - name: argocd-cmd-params-cm - optional: true - - name: REDISDB - valueFrom: - configMapKeyRef: - key: redis.db - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_DEFAULT_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: reposerver.default.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_OTLP_ADDRESS - valueFrom: - configMapKeyRef: - key: otlp.address - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_MAX_COMBINED_DIRECTORY_MANIFESTS_SIZE - valueFrom: - configMapKeyRef: - key: reposerver.max.combined.directory.manifests.size - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_PLUGIN_TAR_EXCLUSIONS - valueFrom: - configMapKeyRef: - key: reposerver.plugin.tar.exclusions - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_ALLOW_OUT_OF_BOUNDS_SYMLINKS - valueFrom: - configMapKeyRef: - key: reposerver.allow.oob.symlinks - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_STREAMED_MANIFEST_MAX_TAR_SIZE - valueFrom: - configMapKeyRef: - key: reposerver.streamed.manifest.max.tar.size - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_REPO_SERVER_STREAMED_MANIFEST_MAX_EXTRACTED_SIZE - valueFrom: - configMapKeyRef: - key: reposerver.streamed.manifest.max.extracted.size - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_GIT_MODULES_ENABLED - valueFrom: - configMapKeyRef: - key: reposerver.enable.git.submodule - name: argocd-cmd-params-cm - optional: true - - name: HELM_CACHE_HOME - value: /helm-working-dir - - name: HELM_CONFIG_HOME - value: /helm-working-dir - - name: HELM_DATA_HOME - value: /helm-working-dir - image: quay.io/argoproj/argocd:v2.7.6 - imagePullPolicy: Always - livenessProbe: - failureThreshold: 3 - httpGet: - path: /healthz?full=true - port: 8084 - initialDelaySeconds: 30 - periodSeconds: 30 - timeoutSeconds: 5 - name: argocd-repo-server - ports: - - containerPort: 8081 - - containerPort: 8084 - readinessProbe: - httpGet: - path: /healthz - port: 8084 - initialDelaySeconds: 5 - periodSeconds: 10 - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /app/config/ssh - name: ssh-known-hosts - - mountPath: /app/config/tls - name: tls-certs - - mountPath: /app/config/gpg/source - name: gpg-keys - - mountPath: /app/config/gpg/keys - name: gpg-keyring - - mountPath: /app/config/reposerver/tls - name: argocd-repo-server-tls - - mountPath: /tmp - name: tmp - - mountPath: /helm-working-dir - name: helm-working-dir - - mountPath: /home/argocd/cmp-server/plugins - name: plugins - initContainers: - - command: - - /bin/cp - - -n - - /usr/local/bin/argocd - - /var/run/argocd/argocd-cmp-server - image: quay.io/argoproj/argocd:v2.7.6 - name: copyutil - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /var/run/argocd - name: var-files - serviceAccountName: argocd-repo-server - volumes: - - configMap: - name: argocd-ssh-known-hosts-cm - name: ssh-known-hosts - - configMap: - name: argocd-tls-certs-cm - name: tls-certs - - configMap: - name: argocd-gpg-keys-cm - name: gpg-keys - - emptyDir: {} - name: gpg-keyring - - emptyDir: {} - name: tmp - - emptyDir: {} - name: helm-working-dir - - name: argocd-repo-server-tls - secret: - items: - - key: tls.crt - path: tls.crt - - key: tls.key - path: tls.key - - key: ca.crt - path: ca.crt - optional: true - secretName: argocd-repo-server-tls - - emptyDir: {} - name: var-files - - emptyDir: {} - name: plugins ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - app.kubernetes.io/component: server - app.kubernetes.io/name: argocd-server - app.kubernetes.io/part-of: argocd - name: argocd-server -spec: - selector: - matchLabels: - app.kubernetes.io/name: argocd-server - template: - metadata: - labels: - app.kubernetes.io/name: argocd-server - spec: - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/name: argocd-server - topologyKey: kubernetes.io/hostname - weight: 100 - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/part-of: argocd - topologyKey: kubernetes.io/hostname - weight: 5 - containers: - - args: - - /usr/local/bin/argocd-server - env: - - name: ARGOCD_SERVER_INSECURE - valueFrom: - configMapKeyRef: - key: server.insecure - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_BASEHREF - valueFrom: - configMapKeyRef: - key: server.basehref - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_ROOTPATH - valueFrom: - configMapKeyRef: - key: server.rootpath - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_LOGFORMAT - valueFrom: - configMapKeyRef: - key: server.log.format - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_LOG_LEVEL - valueFrom: - configMapKeyRef: - key: server.log.level - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_REPO_SERVER - valueFrom: - configMapKeyRef: - key: repo.server - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_DEX_SERVER - valueFrom: - configMapKeyRef: - key: server.dex.server - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_DISABLE_AUTH - valueFrom: - configMapKeyRef: - key: server.disable.auth - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_ENABLE_GZIP - valueFrom: - configMapKeyRef: - key: server.enable.gzip - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_REPO_SERVER_TIMEOUT_SECONDS - valueFrom: - configMapKeyRef: - key: server.repo.server.timeout.seconds - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_X_FRAME_OPTIONS - valueFrom: - configMapKeyRef: - key: server.x.frame.options - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_CONTENT_SECURITY_POLICY - valueFrom: - configMapKeyRef: - key: server.content.security.policy - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_REPO_SERVER_PLAINTEXT - valueFrom: - configMapKeyRef: - key: server.repo.server.plaintext - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_REPO_SERVER_STRICT_TLS - valueFrom: - configMapKeyRef: - key: server.repo.server.strict.tls - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_DEX_SERVER_PLAINTEXT - valueFrom: - configMapKeyRef: - key: server.dex.server.plaintext - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_DEX_SERVER_STRICT_TLS - valueFrom: - configMapKeyRef: - key: server.dex.server.strict.tls - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_TLS_MIN_VERSION - valueFrom: - configMapKeyRef: - key: server.tls.minversion - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_TLS_MAX_VERSION - valueFrom: - configMapKeyRef: - key: server.tls.maxversion - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_TLS_CIPHERS - valueFrom: - configMapKeyRef: - key: server.tls.ciphers - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_CONNECTION_STATUS_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: server.connection.status.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_OIDC_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: server.oidc.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_LOGIN_ATTEMPTS_EXPIRATION - valueFrom: - configMapKeyRef: - key: server.login.attempts.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_STATIC_ASSETS - valueFrom: - configMapKeyRef: - key: server.staticassets - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APP_STATE_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: server.app.state.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: REDIS_SERVER - valueFrom: - configMapKeyRef: - key: redis.server - name: argocd-cmd-params-cm - optional: true - - name: REDIS_COMPRESSION - valueFrom: - configMapKeyRef: - key: redis.compression - name: argocd-cmd-params-cm - optional: true - - name: REDISDB - valueFrom: - configMapKeyRef: - key: redis.db - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_DEFAULT_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: server.default.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_MAX_COOKIE_NUMBER - valueFrom: - configMapKeyRef: - key: server.http.cookie.maxnumber - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_OTLP_ADDRESS - valueFrom: - configMapKeyRef: - key: otlp.address - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_NAMESPACES - valueFrom: - configMapKeyRef: - key: application.namespaces - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_SERVER_ENABLE_PROXY_EXTENSION - valueFrom: - configMapKeyRef: - key: server.enable.proxy.extension - name: argocd-cmd-params-cm - optional: true - image: quay.io/argoproj/argocd:v2.7.6 - imagePullPolicy: Always - livenessProbe: - httpGet: - path: /healthz?full=true - port: 8080 - initialDelaySeconds: 3 - periodSeconds: 30 - timeoutSeconds: 5 - name: argocd-server - ports: - - containerPort: 8080 - - containerPort: 8083 - readinessProbe: - httpGet: - path: /healthz - port: 8080 - initialDelaySeconds: 3 - periodSeconds: 30 - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /app/config/ssh - name: ssh-known-hosts - - mountPath: /app/config/tls - name: tls-certs - - mountPath: /app/config/server/tls - name: argocd-repo-server-tls - - mountPath: /app/config/dex/tls - name: argocd-dex-server-tls - - mountPath: /home/argocd - name: plugins-home - - mountPath: /tmp - name: tmp - serviceAccountName: argocd-server - volumes: - - emptyDir: {} - name: plugins-home - - emptyDir: {} - name: tmp - - configMap: - name: argocd-ssh-known-hosts-cm - name: ssh-known-hosts - - configMap: - name: argocd-tls-certs-cm - name: tls-certs - - name: argocd-repo-server-tls - secret: - items: - - key: tls.crt - path: tls.crt - - key: tls.key - path: tls.key - - key: ca.crt - path: ca.crt - optional: true - secretName: argocd-repo-server-tls - - name: argocd-dex-server-tls - secret: - items: - - key: tls.crt - path: tls.crt - - key: ca.crt - path: ca.crt - optional: true - secretName: argocd-dex-server-tls ---- -apiVersion: apps/v1 -kind: StatefulSet -metadata: - labels: - app.kubernetes.io/component: application-controller - app.kubernetes.io/name: argocd-application-controller - app.kubernetes.io/part-of: argocd - name: argocd-application-controller -spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/name: argocd-application-controller - serviceName: argocd-application-controller - template: - metadata: - labels: - app.kubernetes.io/name: argocd-application-controller - spec: - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/name: argocd-application-controller - topologyKey: kubernetes.io/hostname - weight: 100 - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/part-of: argocd - topologyKey: kubernetes.io/hostname - weight: 5 - containers: - - args: - - /usr/local/bin/argocd-application-controller - env: - - name: ARGOCD_CONTROLLER_REPLICAS - value: "1" - - name: ARGOCD_RECONCILIATION_TIMEOUT - valueFrom: - configMapKeyRef: - key: timeout.reconciliation - name: argocd-cm - optional: true - - name: ARGOCD_HARD_RECONCILIATION_TIMEOUT - valueFrom: - configMapKeyRef: - key: timeout.hard.reconciliation - name: argocd-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER - valueFrom: - configMapKeyRef: - key: repo.server - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER_TIMEOUT_SECONDS - valueFrom: - configMapKeyRef: - key: controller.repo.server.timeout.seconds - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_STATUS_PROCESSORS - valueFrom: - configMapKeyRef: - key: controller.status.processors - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_OPERATION_PROCESSORS - valueFrom: - configMapKeyRef: - key: controller.operation.processors - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_LOGFORMAT - valueFrom: - configMapKeyRef: - key: controller.log.format - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_LOGLEVEL - valueFrom: - configMapKeyRef: - key: controller.log.level - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_METRICS_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: controller.metrics.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_SELF_HEAL_TIMEOUT_SECONDS - valueFrom: - configMapKeyRef: - key: controller.self.heal.timeout.seconds - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER_PLAINTEXT - valueFrom: - configMapKeyRef: - key: controller.repo.server.plaintext - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_REPO_SERVER_STRICT_TLS - valueFrom: - configMapKeyRef: - key: controller.repo.server.strict.tls - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_PERSIST_RESOURCE_HEALTH - valueFrom: - configMapKeyRef: - key: controller.resource.health.persist - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APP_STATE_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: controller.app.state.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: REDIS_SERVER - valueFrom: - configMapKeyRef: - key: redis.server - name: argocd-cmd-params-cm - optional: true - - name: REDIS_COMPRESSION - valueFrom: - configMapKeyRef: - key: redis.compression - name: argocd-cmd-params-cm - optional: true - - name: REDISDB - valueFrom: - configMapKeyRef: - key: redis.db - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_DEFAULT_CACHE_EXPIRATION - valueFrom: - configMapKeyRef: - key: controller.default.cache.expiration - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_OTLP_ADDRESS - valueFrom: - configMapKeyRef: - key: otlp.address - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_NAMESPACES - valueFrom: - configMapKeyRef: - key: application.namespaces - name: argocd-cmd-params-cm - optional: true - - name: ARGOCD_APPLICATION_CONTROLLER_KUBECTL_PARALLELISM_LIMIT - valueFrom: - configMapKeyRef: - key: controller.kubectl.parallelism.limit - name: argocd-cmd-params-cm - optional: true - image: quay.io/argoproj/argocd:v2.7.6 - imagePullPolicy: Always - name: argocd-application-controller - ports: - - containerPort: 8082 - readinessProbe: - httpGet: - path: /healthz - port: 8082 - initialDelaySeconds: 5 - periodSeconds: 10 - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /app/config/controller/tls - name: argocd-repo-server-tls - - mountPath: /home/argocd - name: argocd-home - workingDir: /home/argocd - serviceAccountName: argocd-application-controller - volumes: - - emptyDir: {} - name: argocd-home - - name: argocd-repo-server-tls - secret: - items: - - key: tls.crt - path: tls.crt - - key: tls.key - path: tls.key - - key: ca.crt - path: ca.crt - optional: true - secretName: argocd-repo-server-tls ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: argocd-application-controller-network-policy -spec: - ingress: - - from: - - namespaceSelector: {} - ports: - - port: 8082 - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-application-controller - policyTypes: - - Ingress ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: argocd-applicationset-controller-network-policy -spec: - ingress: - - from: - - namespaceSelector: {} - ports: - - port: 7000 - protocol: TCP - - port: 8080 - protocol: TCP - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-applicationset-controller - policyTypes: - - Ingress ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: argocd-dex-server-network-policy -spec: - ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-server - ports: - - port: 5556 - protocol: TCP - - port: 5557 - protocol: TCP - - from: - - namespaceSelector: {} - ports: - - port: 5558 - protocol: TCP - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-dex-server - policyTypes: - - Ingress ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - labels: - app.kubernetes.io/component: notifications-controller - app.kubernetes.io/name: argocd-notifications-controller - app.kubernetes.io/part-of: argocd - name: argocd-notifications-controller-network-policy -spec: - ingress: - - from: - - namespaceSelector: {} - ports: - - port: 9001 - protocol: TCP - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-notifications-controller - policyTypes: - - Ingress ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: argocd-redis-network-policy -spec: - egress: - - ports: - - port: 53 - protocol: UDP - - port: 53 - protocol: TCP - ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-server - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-repo-server - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-application-controller - ports: - - port: 6379 - protocol: TCP - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-redis - policyTypes: - - Ingress - - Egress ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: argocd-repo-server-network-policy -spec: - ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-server - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-application-controller - - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-notifications-controller - ports: - - port: 8081 - protocol: TCP - - from: - - namespaceSelector: {} - ports: - - port: 8084 - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-repo-server - policyTypes: - - Ingress ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: argocd-server-network-policy -spec: - ingress: - - {} - podSelector: - matchLabels: - app.kubernetes.io/name: argocd-server - policyTypes: - - Ingress diff --git a/packages/argocd/base/kustomization.yaml b/packages/argocd/base/kustomization.yaml deleted file mode 100644 index e351502..0000000 --- a/packages/argocd/base/kustomization.yaml +++ /dev/null @@ -1,3 +0,0 @@ -namespace: argocd -resources: - - install.yaml diff --git a/packages/argocd/dev/argocd-cmd-params-cm.yaml b/packages/argocd/dev/argocd-cmd-params-cm.yaml deleted file mode 100644 index c6e7b00..0000000 --- a/packages/argocd/dev/argocd-cmd-params-cm.yaml +++ /dev/null @@ -1,9 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: argocd-cmd-params-cm - labels: - app.kubernetes.io/name: argocd-cmd-params-cm - app.kubernetes.io/part-of: argocd -data: - server.insecure: "true" diff --git a/packages/argocd/dev/cm-argocd-rbac-cm.yaml b/packages/argocd/dev/cm-argocd-rbac-cm.yaml deleted file mode 100644 index d052214..0000000 --- a/packages/argocd/dev/cm-argocd-rbac-cm.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: argocd-rbac-cm -data: - policy.csv: | - g, superuser, role:admin - g, backstage, role:readonly diff --git a/packages/argocd/dev/kustomization.yaml b/packages/argocd/dev/kustomization.yaml deleted file mode 100644 index 9f4ad89..0000000 --- a/packages/argocd/dev/kustomization.yaml +++ /dev/null @@ -1,13 +0,0 @@ -namespace: argocd -resources: - - ../base/ - - service-argogrpc.yaml - - appproject-cnoe.yaml - - appproject-demo.yaml -patchesStrategicMerge: - - cm-argocd-cm.yaml - - argocd-cmd-params-cm.yaml - - cm-argocd-rbac-cm.yaml -images: - - name: quay.io/argoproj/argocd:v2.7.6 - newTag: v2.7.6 diff --git a/packages/argocd/dev/service-argogrpc.yaml b/packages/argocd/dev/service-argogrpc.yaml deleted file mode 100644 index 25152fd..0000000 --- a/packages/argocd/dev/service-argogrpc.yaml +++ /dev/null @@ -1,19 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - annotations: - alb.ingress.kubernetes.io/backend-protocol-version: HTTP2 - labels: - app: argogrpc - name: argogrpc - namespace: argocd -spec: - ports: - - name: "8080" - port: 8080 - protocol: TCP - targetPort: 8080 - selector: - app.kubernetes.io/name: argocd-server - sessionAffinity: None - type: ClusterIP diff --git a/packages/backstage/base/install-backstage.yaml b/packages/backstage/base/install-backstage.yaml deleted file mode 100644 index 286fc9f..0000000 --- a/packages/backstage/base/install-backstage.yaml +++ /dev/null @@ -1,42 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: backstage - namespace: backstage -spec: - replicas: 1 - selector: - matchLabels: - app: backstage - template: - metadata: - labels: - app: backstage - spec: - containers: - - name: backstage - image: abc/abc:abc - ports: - - name: http - containerPort: 7007 - envFrom: - - secretRef: - name: postgresql-config ---- -apiVersion: v1 -kind: Service -metadata: - name: backstage - namespace: backstage -spec: - selector: - app: backstage - ports: - - name: http - port: 7007 - targetPort: http ---- -apiVersion: v1 -kind: Namespace -metadata: - name: backstage diff --git a/packages/backstage/base/kustomization.yaml b/packages/backstage/base/kustomization.yaml deleted file mode 100644 index f86dc52..0000000 --- a/packages/backstage/base/kustomization.yaml +++ /dev/null @@ -1,3 +0,0 @@ -resources: - - install-postgresql.yaml - - install-backstage.yaml diff --git a/packages/backstage/dev/kustomization.yaml b/packages/backstage/dev/kustomization.yaml deleted file mode 100644 index 2e6b6b7..0000000 --- a/packages/backstage/dev/kustomization.yaml +++ /dev/null @@ -1,7 +0,0 @@ -resources: - - ../base - - sa-backstage.yaml - - cm-backstage-config.yaml - - secret-k8s-config.yaml -patchesStrategicMerge: - - patches/deployment-backstage.yaml diff --git a/packages/backstage/dev/patches/deployment-backstage.yaml b/packages/backstage/dev/patches/deployment-backstage.yaml deleted file mode 100644 index 7745c80..0000000 --- a/packages/backstage/dev/patches/deployment-backstage.yaml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: backstage - namespace: backstage -spec: - template: - spec: - serviceAccountName: backstage - volumes: - - name: backstage-config - projected: - sources: - - secret: - name: integrations - items: - - key: github-integration.yaml - path: github-integration.yaml - - configMap: - name: backstage-config - items: - - key: app-config.yaml - path: app-config.yaml - - secret: - name: k8s-config - items: - - key: k8s-config.yaml - path: k8s-config.yaml - containers: - - name: backstage - image: public.ecr.aws/cnoe-io/backstage:v0.0.2 - command: - - node - - packages/backend - - --config - - config/app-config.yaml - volumeMounts: - - name: backstage-config - mountPath: "/app/config" - readOnly: true - envFrom: - - secretRef: - name: backstage-env-vars diff --git a/packages/backstage/dev/sa-backstage.yaml b/packages/backstage/dev/sa-backstage.yaml deleted file mode 100644 index 63fbfe7..0000000 --- a/packages/backstage/dev/sa-backstage.yaml +++ /dev/null @@ -1,54 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: backstage - namespace: backstage - ---- -kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: read-all -rules: -- apiGroups: ["*"] - resources: ["*"] - verbs: ["get", "list", "watch"] ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: backstage-read-all -subjects: -- kind: ServiceAccount - name: backstage - namespace: backstage -roleRef: - kind: ClusterRole - name: read-all - apiGroup: rbac.authorization.k8s.io ---- -# These are needed for the argo workflow plugin to create workflows during scaffolding. -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: backstage-argo-worfklows -rules: -- apiGroups: ["argoproj.io"] - resources: ["workflows"] - verbs: ["create"] -- apiGroups: [""] - resources: ["configmaps"] - verbs: ["create"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: backstage-argo-worfklows -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: backstage-argo-worfklows -subjects: -- kind: ServiceAccount - name: backstage - namespace: backstage diff --git a/packages/backstage/dev/user-rbac.yaml b/packages/backstage/dev/user-rbac.yaml deleted file mode 100644 index c6fa4c5..0000000 --- a/packages/backstage/dev/user-rbac.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: keycloak-superuser-group -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cluster-admin -subjects: - - apiGroup: rbac.authorization.k8s.io - kind: Group - name: superuser - ---- -kind: ClusterRole -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: keycloak-write-workflows -rules: -- apiGroups: ["argoproj.io"] - resources: ["workflows"] - verbs: ["*"] - ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: keycloak-backstage-users-group -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: keycloak-write-workflows -subjects: - - apiGroup: rbac.authorization.k8s.io - kind: Group - name: backstage-users diff --git a/packages/backstage/manifests/external-secrets.yaml b/packages/backstage/manifests/external-secrets.yaml new file mode 100644 index 0000000..32c0935 --- /dev/null +++ b/packages/backstage/manifests/external-secrets.yaml @@ -0,0 +1,133 @@ + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: backstage-env-vars + namespace: backstage + annotations: + argocd.argoproj.io/sync-wave: "-10" +spec: + refreshInterval: "0" + secretStoreRef: + name: keycloak + kind: ClusterSecretStore + target: + name: backstage-env-vars + # creationPolicy: "Owner" + template: + data: + ARGOCD_ADMIN_PASSWORD: "{{ .ARGOCD_ADMIN_PASSWORD }}" + ARGOCD_AUTH_TOKEN: "argocd.token={{.ARGOCD_SESSION_TOKEN}}" + POSTGRES_PASSWORD: "{{ .password }}" + BACKSTAGE_CLIENT_SECRET: "{{ .BACKSTAGE_CLIENT_SECRET }}" + dataFrom: + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "postgres-password" + data: + - secretKey: ARGOCD_SESSION_TOKEN + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: ARGOCD_SESSION_TOKEN # Note: Read-Only non-expiring token + - secretKey: BACKSTAGE_CLIENT_SECRET + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: BACKSTAGE_CLIENT_SECRET + - secretKey: ARGOCD_ADMIN_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: ARGOCD_ADMIN_PASSWORD +--- +apiVersion: generators.external-secrets.io/v1alpha1 +kind: Password +metadata: + name: postgres-password + namespace: backstage + annotations: + argocd.argoproj.io/sync-wave: "-20" +spec: + length: 48 + digits: 5 + symbols: 5 + symbolCharacters: "/-+" + noUpper: false + allowRepeat: true +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: integrations + namespace: backstage + annotations: + argocd.argoproj.io/sync-wave: "-10" +spec: + refreshInterval: "0" + secretStoreRef: + name: aws-secretsmanager + kind: ClusterSecretStore + target: + name: integrations + template: + data: + github-integration.yaml: | + appId: {{ .appId }} + clientId: {{ .clientId }} + clientSecret: {{ .clientSecret }} + webhookUrl: {{ .webhookUrl }} + webhookSecret: {{ .webhookSecret }} + privateKey: | {{ .privateKey | nindent 2}} + data: + - secretKey: "appId" + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: backstage-github.appId + - secretKey: "clientId" + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: backstage-github.clientId + - secretKey: "clientSecret" + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: backstage-github.clientSecret + - secretKey: "webhookSecret" + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: backstage-github.webhookSecret + - secretKey: "privateKey" + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: backstage-github.privateKey + - secretKey: "webhookUrl" + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/github-app + metadataPolicy: None + property: backstage-github.webhookUrl \ No newline at end of file diff --git a/packages/backstage/dev/secret-k8s-config.yaml b/packages/backstage/manifests/k8s-config-secret.yaml similarity index 96% rename from packages/backstage/dev/secret-k8s-config.yaml rename to packages/backstage/manifests/k8s-config-secret.yaml index 2e0394d..0b99e6f 100644 --- a/packages/backstage/dev/secret-k8s-config.yaml +++ b/packages/backstage/manifests/k8s-config-secret.yaml @@ -3,6 +3,7 @@ kind: Secret metadata: name: k8s-config namespace: backstage +type: Opaque stringData: k8s-config.yaml: | type: 'config' @@ -15,4 +16,4 @@ stringData: serviceAccountToken: $file: /var/run/secrets/kubernetes.io/serviceaccount/token caData: - $file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + $file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt \ No newline at end of file diff --git a/packages/backstage/path-routing/default-cert-external-secret.yaml b/packages/backstage/path-routing/default-cert-external-secret.yaml new file mode 100644 index 0000000..1b6ac61 --- /dev/null +++ b/packages/backstage/path-routing/default-cert-external-secret.yaml @@ -0,0 +1,33 @@ + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: backstage-server-tls + namespace: backstage + annotations: + argocd.argoproj.io/sync-wave: "10" +spec: + refreshInterval: "0" + secretStoreRef: + name: default-cert + kind: ClusterSecretStore + target: + name: backstage-server-tls + template: + type: kubernetes.io/tls + data: + - secretKey: tls.key + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.key + - secretKey: tls.crt + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.crt diff --git a/packages/backstage/values.yaml b/packages/backstage/values.yaml new file mode 100644 index 0000000..7c2fafc --- /dev/null +++ b/packages/backstage/values.yaml @@ -0,0 +1,132 @@ +# Ref: https://github.com/backstage/charts/tree/main/charts/backstage +ingress: + enabled: true + className: "nginx" + extraHosts: [] + path: "/" + tls: + enabled: true + secretName: "backstage-server-tls" +backstage: + replicas: 1 + image: + registry: ghcr.io + repository: cnoe-io/backstage-app + tag: 135c0cb26f3e004a27a11edb6a4779035aff9805 + pullPolicy: IfNotPresent + command: ["node", "packages/backend"] + extraEnvVarsSecrets: + - backstage-env-vars + extraVolumeMounts: + - name: backstage-config + mountPath: "/app/config" + readOnly: true + extraVolumes: + - name: backstage-config + projected: + sources: + - secret: + name: integrations + items: + - key: github-integration.yaml + path: github-integration.yaml + - secret: + name: k8s-config + items: + - key: k8s-config.yaml + path: k8s-config.yaml + appConfig: + app: + title: CNOE Backstage + baseUrl: ${BACKSTAGE_FRONTEND_URL} + organization: + name: CNOE + backend: + baseUrl: ${BACKSTAGE_FRONTEND_URL} + csp: + connect-src: ['self', 'http:', 'https:'] + cors: + origin: ${BACKSTAGE_FRONTEND_URL} + methods: [GET, HEAD, PATCH, POST, PUT, DELETE] + credentials: true + database: + client: pg + connection: + host: ${POSTGRES_HOST} + port: ${POSTGRES_PORT} + user: ${POSTGRES_USER} + password: ${POSTGRES_PASSWORD} + cache: + store: memory + integrations: + github: + - host: github.com + apps: + - $include: /app/config/github-integration.yaml + proxy: + '/argo-workflows/api': + target: ${ARGO_WORKFLOWS_URL} + changeOrigin: true + secure: true + headers: + Authorization: + $env: ARGO_WORKFLOWS_AUTH_TOKEN + '/argocd/api': + target: ${ARGO_CD_URL} + changeOrigin: true + headers: + Cookie: + $env: ARGOCD_AUTH_TOKEN + techdocs: + builder: 'local' + generator: + runIn: 'docker' + publisher: + type: 'local' + auth: + environment: development + session: + secret: "MW2sV-sIPngEl26vAzatV-6VqfsgAx4bPIz7PuE_2Lk=" + providers: + keycloak-oidc: + development: + metadataUrl: ${KEYCLOAK_NAME_METADATA} + clientId: backstage + clientSecret: ${BACKSTAGE_CLIENT_SECRET} + additionalScopes: 'openid profile email groups' + prompt: auto + scaffolder: + catalog: + import: + entityFilename: catalog-info.yaml + pullRequestBranchName: backstage-integration + rules: + - allow: [Component, System, API, Resource, Location, Template] + kubernetes: + serviceLocatorMethod: + type: multiTenant + clusterLocatorMethods: + - $include: /app/config/k8s-config.yaml + argocd: + username: admin + password: ${ARGOCD_ADMIN_PASSWORD} + appLocatorMethods: + - type: 'config' + instances: + - name: in-cluster + url: ${ARGO_CD_URL} + username: admin + password: ${ARGOCD_ADMIN_PASSWORD} + argoWorkflows: + baseUrl: ${ARGO_WORKFLOWS_URL} +postgresql: + enabled: true + auth: + username: "backstage" + existingSecret: "backstage-env-vars" + secretKeys: + adminPasswordKey: POSTGRES_PASSWORD + userPasswordKey: POSTGRES_PASSWORD + architecture: standalone +serviceAccount: + create: true \ No newline at end of file diff --git a/packages/bootstrap.yaml b/packages/bootstrap.yaml new file mode 100644 index 0000000..d6cf878 --- /dev/null +++ b/packages/bootstrap.yaml @@ -0,0 +1,38 @@ +# This installs ArgoCD and ESO on hub cluster +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: bootstrap-appset + namespace: argocd + labels: + env: dev +spec: + project: default + destination: + server: https://kubernetes.default.svc + namespace: argocd + sources: + - repoURL: cnoe:// + targetRevision: HEAD + path: "appset-chart" + helm: + valueFiles: + - $values/addons/values.yaml + - $values/bootstrap/values-idpbuilder.yaml + - repoURL: cnoe:// + targetRevision: HEAD + ref: values + syncPolicy: + automated: + selfHeal: true + allowEmpty: true + prune: true + retry: + limit: -1 + backoff: + duration: 5s + factor: 2 + maxDuration: 10m + syncOptions: + - CreateNamespace=true + - ServerSideApply=true \ No newline at end of file diff --git a/packages/bootstrap/values-idpbuilder.yaml b/packages/bootstrap/values-idpbuilder.yaml new file mode 100644 index 0000000..4688f89 --- /dev/null +++ b/packages/bootstrap/values-idpbuilder.yaml @@ -0,0 +1,14 @@ +# Used for bootstraping hub cluster with Addon Appset chart +# Only used when using idpbuilder for installation +addons-appset: # for non-path routing + enabled: true + chartName: bootstrap + namespace: argocd + releaseName: bootstrap + type: chart + path: appset-chart + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane-bootstrap'] \ No newline at end of file diff --git a/packages/bootstrap/values.yaml b/packages/bootstrap/values.yaml new file mode 100644 index 0000000..76416ae --- /dev/null +++ b/packages/bootstrap/values.yaml @@ -0,0 +1,34 @@ +# Used for bootstraping hub cluster with Addon Appset chart +addons-appset: # for non-path routing + enabled: true + chartName: addons + namespace: argocd + releaseName: addons + type: chart + path: packages/appset-chart # This path is relative to Github repo root + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + - key: path_routing + operator: In + values: ['false'] + +addons-appset-pr: # for path routing + enabled: true + chartName: addons + namespace: argocd + releaseName: addons + type: chart + path: packages/appset-chart # This path is relative to Github repo root + valueFiles: + - "path-routing-values.yaml" + selector: + matchExpressions: + - key: environment + operator: In + values: ['control-plane'] + - key: path_routing + operator: In + values: ['true'] \ No newline at end of file diff --git a/packages/cert-manager/base/crds.yaml b/packages/cert-manager/base/crds.yaml deleted file mode 100644 index f23de4b..0000000 --- a/packages/cert-manager/base/crds.yaml +++ /dev/null @@ -1,4486 +0,0 @@ -# Copyright 2022 The cert-manager Authors. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -# Source: cert-manager/templates/crds.yaml -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: certificaterequests.cert-manager.io - labels: - app: 'cert-manager' - app.kubernetes.io/name: 'cert-manager' - app.kubernetes.io/instance: 'cert-manager' - # Generated labels - app.kubernetes.io/version: "v1.12.2" -spec: - group: cert-manager.io - names: - kind: CertificateRequest - listKind: CertificateRequestList - plural: certificaterequests - shortNames: - - cr - - crs - singular: certificaterequest - categories: - - cert-manager - scope: Namespaced - versions: - - name: v1 - subresources: - status: {} - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Approved")].status - name: Approved - type: string - - jsonPath: .status.conditions[?(@.type=="Denied")].status - name: Denied - type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Ready - type: string - - jsonPath: .spec.issuerRef.name - name: Issuer - type: string - - jsonPath: .spec.username - name: Requestor - type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Status - priority: 1 - type: string - - jsonPath: .metadata.creationTimestamp - description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC. - name: Age - type: date - schema: - openAPIV3Schema: - description: "A CertificateRequest is used to request a signed certificate from one of the configured issuers. \n All fields within the CertificateRequest's `spec` are immutable after creation. A CertificateRequest will either succeed or fail, as denoted by its `status.state` field. \n A CertificateRequest is a one-shot resource, meaning it represents a single point in time request for a certificate and cannot be re-used." - type: object - required: - - spec - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: Desired state of the CertificateRequest resource. - type: object - required: - - issuerRef - - request - properties: - duration: - description: The requested 'duration' (i.e. lifetime) of the Certificate. This option may be ignored/overridden by some issuer types. - type: string - extra: - description: Extra contains extra attributes of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable. - type: object - additionalProperties: - type: array - items: - type: string - groups: - description: Groups contains group membership of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable. - type: array - items: - type: string - x-kubernetes-list-type: atomic - isCA: - description: IsCA will request to mark the certificate as valid for certificate signing when submitting to the issuer. This will automatically add the `cert sign` usage to the list of `usages`. - type: boolean - issuerRef: - description: IssuerRef is a reference to the issuer for this CertificateRequest. If the `kind` field is not set, or set to `Issuer`, an Issuer resource with the given name in the same namespace as the CertificateRequest will be used. If the `kind` field is set to `ClusterIssuer`, a ClusterIssuer with the provided name will be used. The `name` field in this stanza is required at all times. The group field refers to the API group of the issuer which defaults to `cert-manager.io` if empty. - type: object - required: - - name - properties: - group: - description: Group of the resource being referred to. - type: string - kind: - description: Kind of the resource being referred to. - type: string - name: - description: Name of the resource being referred to. - type: string - request: - description: The PEM-encoded x509 certificate signing request to be submitted to the CA for signing. - type: string - format: byte - uid: - description: UID contains the uid of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable. - type: string - usages: - description: Usages is the set of x509 usages that are requested for the certificate. If usages are set they SHOULD be encoded inside the CSR spec Defaults to `digital signature` and `key encipherment` if not specified. - type: array - items: - description: "KeyUsage specifies valid usage contexts for keys. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 https://tools.ietf.org/html/rfc5280#section-4.2.1.12 \n Valid KeyUsage values are as follows: \"signing\", \"digital signature\", \"content commitment\", \"key encipherment\", \"key agreement\", \"data encipherment\", \"cert sign\", \"crl sign\", \"encipher only\", \"decipher only\", \"any\", \"server auth\", \"client auth\", \"code signing\", \"email protection\", \"s/mime\", \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\", \"timestamping\", \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\"" - type: string - enum: - - signing - - digital signature - - content commitment - - key encipherment - - key agreement - - data encipherment - - cert sign - - crl sign - - encipher only - - decipher only - - any - - server auth - - client auth - - code signing - - email protection - - s/mime - - ipsec end system - - ipsec tunnel - - ipsec user - - timestamping - - ocsp signing - - microsoft sgc - - netscape sgc - username: - description: Username contains the name of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable. - type: string - status: - description: Status of the CertificateRequest. This is set and managed automatically. - type: object - properties: - ca: - description: The PEM encoded x509 certificate of the signer, also known as the CA (Certificate Authority). This is set on a best-effort basis by different issuers. If not set, the CA is assumed to be unknown/not available. - type: string - format: byte - certificate: - description: The PEM encoded x509 certificate resulting from the certificate signing request. If not set, the CertificateRequest has either not been completed or has failed. More information on failure can be found by checking the `conditions` field. - type: string - format: byte - conditions: - description: List of status conditions to indicate the status of a CertificateRequest. Known condition types are `Ready` and `InvalidRequest`. - type: array - items: - description: CertificateRequestCondition contains condition information for a CertificateRequest. - type: object - required: - - status - - type - properties: - lastTransitionTime: - description: LastTransitionTime is the timestamp corresponding to the last status change of this condition. - type: string - format: date-time - message: - description: Message is a human readable description of the details of the last transition, complementing reason. - type: string - reason: - description: Reason is a brief machine readable explanation for the condition's last transition. - type: string - status: - description: Status of the condition, one of (`True`, `False`, `Unknown`). - type: string - enum: - - "True" - - "False" - - Unknown - type: - description: Type of the condition, known values are (`Ready`, `InvalidRequest`, `Approved`, `Denied`). - type: string - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - failureTime: - description: FailureTime stores the time that this CertificateRequest failed. This is used to influence garbage collection and back-off. - type: string - format: date-time - served: true - storage: true ---- -# Source: cert-manager/templates/crds.yaml -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: certificates.cert-manager.io - labels: - app: 'cert-manager' - app.kubernetes.io/name: 'cert-manager' - app.kubernetes.io/instance: 'cert-manager' - # Generated labels - app.kubernetes.io/version: "v1.12.2" -spec: - group: cert-manager.io - names: - kind: Certificate - listKind: CertificateList - plural: certificates - shortNames: - - cert - - certs - singular: certificate - categories: - - cert-manager - scope: Namespaced - versions: - - name: v1 - subresources: - status: {} - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Ready - type: string - - jsonPath: .spec.secretName - name: Secret - type: string - - jsonPath: .spec.issuerRef.name - name: Issuer - priority: 1 - type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Status - priority: 1 - type: string - - jsonPath: .metadata.creationTimestamp - description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC. - name: Age - type: date - schema: - openAPIV3Schema: - description: "A Certificate resource should be created to ensure an up to date and signed x509 certificate is stored in the Kubernetes Secret resource named in `spec.secretName`. \n The stored certificate will be renewed before it expires (as configured by `spec.renewBefore`)." - type: object - required: - - spec - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: Desired state of the Certificate resource. - type: object - required: - - issuerRef - - secretName - properties: - additionalOutputFormats: - description: AdditionalOutputFormats defines extra output formats of the private key and signed certificate chain to be written to this Certificate's target Secret. This is an Alpha Feature and is only enabled with the `--feature-gates=AdditionalCertificateOutputFormats=true` option on both the controller and webhook components. - type: array - items: - description: CertificateAdditionalOutputFormat defines an additional output format of a Certificate resource. These contain supplementary data formats of the signed certificate chain and paired private key. - type: object - required: - - type - properties: - type: - description: Type is the name of the format type that should be written to the Certificate's target Secret. - type: string - enum: - - DER - - CombinedPEM - commonName: - description: 'CommonName is a common name to be used on the Certificate. The CommonName should have a length of 64 characters or fewer to avoid generating invalid CSRs. This value is ignored by TLS clients when any subject alt name is set. This is x509 behaviour: https://tools.ietf.org/html/rfc6125#section-6.4.4' - type: string - dnsNames: - description: DNSNames is a list of DNS subjectAltNames to be set on the Certificate. - type: array - items: - type: string - duration: - description: The requested 'duration' (i.e. lifetime) of the Certificate. This option may be ignored/overridden by some issuer types. If unset this defaults to 90 days. Certificate will be renewed either 2/3 through its duration or `renewBefore` period before its expiry, whichever is later. Minimum accepted duration is 1 hour. Value must be in units accepted by Go time.ParseDuration https://golang.org/pkg/time/#ParseDuration - type: string - emailAddresses: - description: EmailAddresses is a list of email subjectAltNames to be set on the Certificate. - type: array - items: - type: string - encodeUsagesInRequest: - description: EncodeUsagesInRequest controls whether key usages should be present in the CertificateRequest - type: boolean - ipAddresses: - description: IPAddresses is a list of IP address subjectAltNames to be set on the Certificate. - type: array - items: - type: string - isCA: - description: IsCA will mark this Certificate as valid for certificate signing. This will automatically add the `cert sign` usage to the list of `usages`. - type: boolean - issuerRef: - description: IssuerRef is a reference to the issuer for this certificate. If the `kind` field is not set, or set to `Issuer`, an Issuer resource with the given name in the same namespace as the Certificate will be used. If the `kind` field is set to `ClusterIssuer`, a ClusterIssuer with the provided name will be used. The `name` field in this stanza is required at all times. - type: object - required: - - name - properties: - group: - description: Group of the resource being referred to. - type: string - kind: - description: Kind of the resource being referred to. - type: string - name: - description: Name of the resource being referred to. - type: string - keystores: - description: Keystores configures additional keystore output formats stored in the `secretName` Secret resource. - type: object - properties: - jks: - description: JKS configures options for storing a JKS keystore in the `spec.secretName` Secret resource. - type: object - required: - - create - - passwordSecretRef - properties: - create: - description: Create enables JKS keystore creation for the Certificate. If true, a file named `keystore.jks` will be created in the target Secret resource, encrypted using the password stored in `passwordSecretRef`. The keystore file will be updated immediately. If the issuer provided a CA certificate, a file named `truststore.jks` will also be created in the target Secret resource, encrypted using the password stored in `passwordSecretRef` containing the issuing Certificate Authority - type: boolean - passwordSecretRef: - description: PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the JKS keystore. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - pkcs12: - description: PKCS12 configures options for storing a PKCS12 keystore in the `spec.secretName` Secret resource. - type: object - required: - - create - - passwordSecretRef - properties: - create: - description: Create enables PKCS12 keystore creation for the Certificate. If true, a file named `keystore.p12` will be created in the target Secret resource, encrypted using the password stored in `passwordSecretRef`. The keystore file will be updated immediately. If the issuer provided a CA certificate, a file named `truststore.p12` will also be created in the target Secret resource, encrypted using the password stored in `passwordSecretRef` containing the issuing Certificate Authority - type: boolean - passwordSecretRef: - description: PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the PKCS12 keystore. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - literalSubject: - description: LiteralSubject is an LDAP formatted string that represents the [X.509 Subject field](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2.6). Use this *instead* of the Subject field if you need to ensure the correct ordering of the RDN sequence, such as when issuing certs for LDAP authentication. See https://github.com/cert-manager/cert-manager/issues/3203, https://github.com/cert-manager/cert-manager/issues/4424. This field is alpha level and is only supported by cert-manager installations where LiteralCertificateSubject feature gate is enabled on both cert-manager controller and webhook. - type: string - privateKey: - description: Options to control private keys used for the Certificate. - type: object - properties: - algorithm: - description: Algorithm is the private key algorithm of the corresponding private key for this certificate. If provided, allowed values are either `RSA`,`Ed25519` or `ECDSA` If `algorithm` is specified and `size` is not provided, key size of 256 will be used for `ECDSA` key algorithm and key size of 2048 will be used for `RSA` key algorithm. key size is ignored when using the `Ed25519` key algorithm. - type: string - enum: - - RSA - - ECDSA - - Ed25519 - encoding: - description: The private key cryptography standards (PKCS) encoding for this certificate's private key to be encoded in. If provided, allowed values are `PKCS1` and `PKCS8` standing for PKCS#1 and PKCS#8, respectively. Defaults to `PKCS1` if not specified. - type: string - enum: - - PKCS1 - - PKCS8 - rotationPolicy: - description: RotationPolicy controls how private keys should be regenerated when a re-issuance is being processed. If set to Never, a private key will only be generated if one does not already exist in the target `spec.secretName`. If one does exists but it does not have the correct algorithm or size, a warning will be raised to await user intervention. If set to Always, a private key matching the specified requirements will be generated whenever a re-issuance occurs. Default is 'Never' for backward compatibility. - type: string - enum: - - Never - - Always - size: - description: Size is the key bit size of the corresponding private key for this certificate. If `algorithm` is set to `RSA`, valid values are `2048`, `4096` or `8192`, and will default to `2048` if not specified. If `algorithm` is set to `ECDSA`, valid values are `256`, `384` or `521`, and will default to `256` if not specified. If `algorithm` is set to `Ed25519`, Size is ignored. No other values are allowed. - type: integer - renewBefore: - description: How long before the currently issued certificate's expiry cert-manager should renew the certificate. The default is 2/3 of the issued certificate's duration. Minimum accepted value is 5 minutes. Value must be in units accepted by Go time.ParseDuration https://golang.org/pkg/time/#ParseDuration - type: string - revisionHistoryLimit: - description: revisionHistoryLimit is the maximum number of CertificateRequest revisions that are maintained in the Certificate's history. Each revision represents a single `CertificateRequest` created by this Certificate, either when it was created, renewed, or Spec was changed. Revisions will be removed by oldest first if the number of revisions exceeds this number. If set, revisionHistoryLimit must be a value of `1` or greater. If unset (`nil`), revisions will not be garbage collected. Default value is `nil`. - type: integer - format: int32 - secretName: - description: SecretName is the name of the secret resource that will be automatically created and managed by this Certificate resource. It will be populated with a private key and certificate, signed by the denoted issuer. - type: string - secretTemplate: - description: SecretTemplate defines annotations and labels to be copied to the Certificate's Secret. Labels and annotations on the Secret will be changed as they appear on the SecretTemplate when added or removed. SecretTemplate annotations are added in conjunction with, and cannot overwrite, the base set of annotations cert-manager sets on the Certificate's Secret. - type: object - properties: - annotations: - description: Annotations is a key value map to be copied to the target Kubernetes Secret. - type: object - additionalProperties: - type: string - labels: - description: Labels is a key value map to be copied to the target Kubernetes Secret. - type: object - additionalProperties: - type: string - subject: - description: Full X509 name specification (https://golang.org/pkg/crypto/x509/pkix/#Name). - type: object - properties: - countries: - description: Countries to be used on the Certificate. - type: array - items: - type: string - localities: - description: Cities to be used on the Certificate. - type: array - items: - type: string - organizationalUnits: - description: Organizational Units to be used on the Certificate. - type: array - items: - type: string - organizations: - description: Organizations to be used on the Certificate. - type: array - items: - type: string - postalCodes: - description: Postal codes to be used on the Certificate. - type: array - items: - type: string - provinces: - description: State/Provinces to be used on the Certificate. - type: array - items: - type: string - serialNumber: - description: Serial number to be used on the Certificate. - type: string - streetAddresses: - description: Street addresses to be used on the Certificate. - type: array - items: - type: string - uris: - description: URIs is a list of URI subjectAltNames to be set on the Certificate. - type: array - items: - type: string - usages: - description: Usages is the set of x509 usages that are requested for the certificate. Defaults to `digital signature` and `key encipherment` if not specified. - type: array - items: - description: "KeyUsage specifies valid usage contexts for keys. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 https://tools.ietf.org/html/rfc5280#section-4.2.1.12 \n Valid KeyUsage values are as follows: \"signing\", \"digital signature\", \"content commitment\", \"key encipherment\", \"key agreement\", \"data encipherment\", \"cert sign\", \"crl sign\", \"encipher only\", \"decipher only\", \"any\", \"server auth\", \"client auth\", \"code signing\", \"email protection\", \"s/mime\", \"ipsec end system\", \"ipsec tunnel\", \"ipsec user\", \"timestamping\", \"ocsp signing\", \"microsoft sgc\", \"netscape sgc\"" - type: string - enum: - - signing - - digital signature - - content commitment - - key encipherment - - key agreement - - data encipherment - - cert sign - - crl sign - - encipher only - - decipher only - - any - - server auth - - client auth - - code signing - - email protection - - s/mime - - ipsec end system - - ipsec tunnel - - ipsec user - - timestamping - - ocsp signing - - microsoft sgc - - netscape sgc - status: - description: Status of the Certificate. This is set and managed automatically. - type: object - properties: - conditions: - description: List of status conditions to indicate the status of certificates. Known condition types are `Ready` and `Issuing`. - type: array - items: - description: CertificateCondition contains condition information for an Certificate. - type: object - required: - - status - - type - properties: - lastTransitionTime: - description: LastTransitionTime is the timestamp corresponding to the last status change of this condition. - type: string - format: date-time - message: - description: Message is a human readable description of the details of the last transition, complementing reason. - type: string - observedGeneration: - description: If set, this represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.condition[x].observedGeneration is 9, the condition is out of date with respect to the current state of the Certificate. - type: integer - format: int64 - reason: - description: Reason is a brief machine readable explanation for the condition's last transition. - type: string - status: - description: Status of the condition, one of (`True`, `False`, `Unknown`). - type: string - enum: - - "True" - - "False" - - Unknown - type: - description: Type of the condition, known values are (`Ready`, `Issuing`). - type: string - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - failedIssuanceAttempts: - description: The number of continuous failed issuance attempts up till now. This field gets removed (if set) on a successful issuance and gets set to 1 if unset and an issuance has failed. If an issuance has failed, the delay till the next issuance will be calculated using formula time.Hour * 2 ^ (failedIssuanceAttempts - 1). - type: integer - lastFailureTime: - description: LastFailureTime is set only if the lastest issuance for this Certificate failed and contains the time of the failure. If an issuance has failed, the delay till the next issuance will be calculated using formula time.Hour * 2 ^ (failedIssuanceAttempts - 1). If the latest issuance has succeeded this field will be unset. - type: string - format: date-time - nextPrivateKeySecretName: - description: The name of the Secret resource containing the private key to be used for the next certificate iteration. The keymanager controller will automatically set this field if the `Issuing` condition is set to `True`. It will automatically unset this field when the Issuing condition is not set or False. - type: string - notAfter: - description: The expiration time of the certificate stored in the secret named by this resource in `spec.secretName`. - type: string - format: date-time - notBefore: - description: The time after which the certificate stored in the secret named by this resource in spec.secretName is valid. - type: string - format: date-time - renewalTime: - description: RenewalTime is the time at which the certificate will be next renewed. If not set, no upcoming renewal is scheduled. - type: string - format: date-time - revision: - description: "The current 'revision' of the certificate as issued. \n When a CertificateRequest resource is created, it will have the `cert-manager.io/certificate-revision` set to one greater than the current value of this field. \n Upon issuance, this field will be set to the value of the annotation on the CertificateRequest resource used to issue the certificate. \n Persisting the value on the CertificateRequest resource allows the certificates controller to know whether a request is part of an old issuance or if it is part of the ongoing revision's issuance by checking if the revision value in the annotation is greater than this field." - type: integer - served: true - storage: true ---- -# Source: cert-manager/templates/crds.yaml -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: challenges.acme.cert-manager.io - labels: - app: 'cert-manager' - app.kubernetes.io/name: 'cert-manager' - app.kubernetes.io/instance: 'cert-manager' - # Generated labels - app.kubernetes.io/version: "v1.12.2" -spec: - group: acme.cert-manager.io - names: - kind: Challenge - listKind: ChallengeList - plural: challenges - singular: challenge - categories: - - cert-manager - - cert-manager-acme - scope: Namespaced - versions: - - additionalPrinterColumns: - - jsonPath: .status.state - name: State - type: string - - jsonPath: .spec.dnsName - name: Domain - type: string - - jsonPath: .status.reason - name: Reason - priority: 1 - type: string - - description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC. - jsonPath: .metadata.creationTimestamp - name: Age - type: date - name: v1 - schema: - openAPIV3Schema: - description: Challenge is a type to represent a Challenge request with an ACME server - type: object - required: - - metadata - - spec - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - type: object - required: - - authorizationURL - - dnsName - - issuerRef - - key - - solver - - token - - type - - url - properties: - authorizationURL: - description: The URL to the ACME Authorization resource that this challenge is a part of. - type: string - dnsName: - description: dnsName is the identifier that this challenge is for, e.g. example.com. If the requested DNSName is a 'wildcard', this field MUST be set to the non-wildcard domain, e.g. for `*.example.com`, it must be `example.com`. - type: string - issuerRef: - description: References a properly configured ACME-type Issuer which should be used to create this Challenge. If the Issuer does not exist, processing will be retried. If the Issuer is not an 'ACME' Issuer, an error will be returned and the Challenge will be marked as failed. - type: object - required: - - name - properties: - group: - description: Group of the resource being referred to. - type: string - kind: - description: Kind of the resource being referred to. - type: string - name: - description: Name of the resource being referred to. - type: string - key: - description: 'The ACME challenge key for this challenge For HTTP01 challenges, this is the value that must be responded with to complete the HTTP01 challenge in the format: `.`. For DNS01 challenges, this is the base64 encoded SHA256 sum of the `.` text that must be set as the TXT record content.' - type: string - solver: - description: Contains the domain solving configuration that should be used to solve this challenge resource. - type: object - properties: - dns01: - description: Configures cert-manager to attempt to complete authorizations by performing the DNS01 challenge flow. - type: object - properties: - acmeDNS: - description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage DNS01 challenge records. - type: object - required: - - accountSecretRef - - host - properties: - accountSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - host: - type: string - akamai: - description: Use the Akamai DNS zone management API to manage DNS01 challenge records. - type: object - required: - - accessTokenSecretRef - - clientSecretSecretRef - - clientTokenSecretRef - - serviceConsumerDomain - properties: - accessTokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - clientSecretSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - clientTokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - serviceConsumerDomain: - type: string - azureDNS: - description: Use the Microsoft Azure DNS API to manage DNS01 challenge records. - type: object - required: - - resourceGroupName - - subscriptionID - properties: - clientID: - description: if both this and ClientSecret are left unset MSI will be used - type: string - clientSecretSecretRef: - description: if both this and ClientID are left unset MSI will be used - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - environment: - description: name of the Azure environment (default AzurePublicCloud) - type: string - enum: - - AzurePublicCloud - - AzureChinaCloud - - AzureGermanCloud - - AzureUSGovernmentCloud - hostedZoneName: - description: name of the DNS zone that should be used - type: string - managedIdentity: - description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID - type: object - properties: - clientID: - description: client ID of the managed identity, can not be used at the same time as resourceID - type: string - resourceID: - description: resource ID of the managed identity, can not be used at the same time as clientID - type: string - resourceGroupName: - description: resource group the DNS zone is located in - type: string - subscriptionID: - description: ID of the Azure subscription - type: string - tenantID: - description: when specifying ClientID and ClientSecret then this field is also needed - type: string - cloudDNS: - description: Use the Google Cloud DNS API to manage DNS01 challenge records. - type: object - required: - - project - properties: - hostedZoneName: - description: HostedZoneName is an optional field that tells cert-manager in which Cloud DNS zone the challenge record has to be created. If left empty cert-manager will automatically choose a zone. - type: string - project: - type: string - serviceAccountSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - cloudflare: - description: Use the Cloudflare API to manage DNS01 challenge records. - type: object - properties: - apiKeySecretRef: - description: 'API key to use to authenticate with Cloudflare. Note: using an API token to authenticate is now the recommended method as it allows greater control of permissions.' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - apiTokenSecretRef: - description: API token used to authenticate with Cloudflare. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - email: - description: Email of the account, only required when using API key based authentication. - type: string - cnameStrategy: - description: CNAMEStrategy configures how the DNS01 provider should handle CNAME records when found in DNS zones. - type: string - enum: - - None - - Follow - digitalocean: - description: Use the DigitalOcean DNS API to manage DNS01 challenge records. - type: object - required: - - tokenSecretRef - properties: - tokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - rfc2136: - description: Use RFC2136 ("Dynamic Updates in the Domain Name System") (https://datatracker.ietf.org/doc/rfc2136/) to manage DNS01 challenge records. - type: object - required: - - nameserver - properties: - nameserver: - description: The IP address or hostname of an authoritative DNS server supporting RFC2136 in the form host:port. If the host is an IPv6 address it must be enclosed in square brackets (e.g [2001:db8::1])Β ; port is optional. This field is required. - type: string - tsigAlgorithm: - description: 'The TSIG Algorithm configured in the DNS supporting RFC2136. Used only when ``tsigSecretSecretRef`` and ``tsigKeyName`` are defined. Supported values are (case-insensitive): ``HMACMD5`` (default), ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.' - type: string - tsigKeyName: - description: The TSIG Key name configured in the DNS. If ``tsigSecretSecretRef`` is defined, this field is required. - type: string - tsigSecretSecretRef: - description: The name of the secret containing the TSIG value. If ``tsigKeyName`` is defined, this field is required. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - route53: - description: Use the AWS Route53 API to manage DNS01 challenge records. - type: object - required: - - region - properties: - accessKeyID: - description: 'The AccessKeyID is used for authentication. Cannot be set when SecretAccessKeyID is set. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: string - accessKeyIDSecretRef: - description: 'The SecretAccessKey is used for authentication. If set, pull the AWS access key ID from a key within a Kubernetes Secret. Cannot be set when AccessKeyID is set. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - hostedZoneID: - description: If set, the provider will manage only this zone in Route53 and will not do an lookup using the route53:ListHostedZonesByName api call. - type: string - region: - description: Always set the region when using AccessKeyID and SecretAccessKey - type: string - role: - description: Role is a Role ARN which the Route53 provider will assume using either the explicit credentials AccessKeyID/SecretAccessKey or the inferred credentials from environment variables, shared credentials file or AWS Instance metadata - type: string - secretAccessKeySecretRef: - description: 'The SecretAccessKey is used for authentication. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - webhook: - description: Configure an external webhook based DNS01 challenge solver to manage DNS01 challenge records. - type: object - required: - - groupName - - solverName - properties: - config: - description: Additional configuration that should be passed to the webhook apiserver when challenges are processed. This can contain arbitrary JSON data. Secret values should not be specified in this stanza. If secret values are needed (e.g. credentials for a DNS service), you should use a SecretKeySelector to reference a Secret resource. For details on the schema of this field, consult the webhook provider implementation's documentation. - x-kubernetes-preserve-unknown-fields: true - groupName: - description: The API group name that should be used when POSTing ChallengePayload resources to the webhook apiserver. This should be the same as the GroupName specified in the webhook provider implementation. - type: string - solverName: - description: The name of the solver to use, as defined in the webhook provider implementation. This will typically be the name of the provider, e.g. 'cloudflare'. - type: string - http01: - description: Configures cert-manager to attempt to complete authorizations by performing the HTTP01 challenge flow. It is not possible to obtain certificates for wildcard domain names (e.g. `*.example.com`) using the HTTP01 challenge mechanism. - type: object - properties: - gatewayHTTPRoute: - description: The Gateway API is a sig-network community API that models service networking in Kubernetes (https://gateway-api.sigs.k8s.io/). The Gateway solver will create HTTPRoutes with the specified labels in the same namespace as the challenge. This solver is experimental, and fields / behaviour may change in the future. - type: object - properties: - labels: - description: Custom labels that will be applied to HTTPRoutes created by cert-manager while solving HTTP-01 challenges. - type: object - additionalProperties: - type: string - parentRefs: - description: 'When solving an HTTP-01 challenge, cert-manager creates an HTTPRoute. cert-manager needs to know which parentRefs should be used when creating the HTTPRoute. Usually, the parentRef references a Gateway. See: https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways' - type: array - items: - description: "ParentReference identifies an API object (usually a Gateway) that can be considered a parent of this resource (usually a route). The only kind of parent resource with \"Core\" support is Gateway. This API may be extended in the future to support additional kinds of parent resources, such as HTTPRoute. \n The API object must be valid in the cluster; the Group and Kind must be registered in the cluster for this reference to be valid." - type: object - required: - - name - properties: - group: - description: "Group is the group of the referent. When unspecified, \"gateway.networking.k8s.io\" is inferred. To set the core API group (such as for a \"Service\" kind referent), Group must be explicitly set to \"\" (empty string). \n Support: Core" - type: string - default: gateway.networking.k8s.io - maxLength: 253 - pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - kind: - description: "Kind is kind of the referent. \n Support: Core (Gateway) \n Support: Implementation-specific (Other Resources)" - type: string - default: Gateway - maxLength: 63 - minLength: 1 - pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$ - name: - description: "Name is the name of the referent. \n Support: Core" - type: string - maxLength: 253 - minLength: 1 - namespace: - description: "Namespace is the namespace of the referent. When unspecified, this refers to the local namespace of the Route. \n Note that there are specific rules for ParentRefs which cross namespace boundaries. Cross-namespace references are only valid if they are explicitly allowed by something in the namespace they are referring to. For example: Gateway has the AllowedRoutes field, and ReferenceGrant provides a generic way to enable any other kind of cross-namespace reference. \n Support: Core" - type: string - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - port: - description: "Port is the network port this Route targets. It can be interpreted differently based on the type of parent resource. \n When the parent resource is a Gateway, this targets all listeners listening on the specified port that also support this kind of Route(and select this Route). It's not recommended to set `Port` unless the networking behaviors specified in a Route must apply to a specific port as opposed to a listener(s) whose port(s) may be changed. When both Port and SectionName are specified, the name and port of the selected listener must match both specified values. \n Implementations MAY choose to support other parent resources. Implementations supporting other types of parent resources MUST clearly document how/if Port is interpreted. \n For the purpose of status, an attachment is considered successful as long as the parent resource accepts it partially. For example, Gateway listeners can restrict which Routes can attach to them by Route kind, namespace, or hostname. If 1 of 2 Gateway listeners accept attachment from the referencing Route, the Route MUST be considered successfully attached. If no Gateway listeners accept attachment from this Route, the Route MUST be considered detached from the Gateway. \n Support: Extended \n " - type: integer - format: int32 - maximum: 65535 - minimum: 1 - sectionName: - description: "SectionName is the name of a section within the target resource. In the following resources, SectionName is interpreted as the following: \n * Gateway: Listener Name. When both Port (experimental) and SectionName are specified, the name and port of the selected listener must match both specified values. \n Implementations MAY choose to support attaching Routes to other resources. If that is the case, they MUST clearly document how SectionName is interpreted. \n When unspecified (empty string), this will reference the entire resource. For the purpose of status, an attachment is considered successful if at least one section in the parent resource accepts it. For example, Gateway listeners can restrict which Routes can attach to them by Route kind, namespace, or hostname. If 1 of 2 Gateway listeners accept attachment from the referencing Route, the Route MUST be considered successfully attached. If no Gateway listeners accept attachment from this Route, the Route MUST be considered detached from the Gateway. \n Support: Core" - type: string - maxLength: 253 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - serviceType: - description: Optional service type for Kubernetes solver service. Supported values are NodePort or ClusterIP. If unset, defaults to NodePort. - type: string - ingress: - description: The ingress based HTTP01 challenge solver will solve challenges by creating or modifying Ingress resources in order to route requests for '/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that are provisioned by cert-manager for each Challenge to be completed. - type: object - properties: - class: - description: This field configures the annotation `kubernetes.io/ingress.class` when creating Ingress resources to solve ACME challenges that use this challenge solver. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - ingressClassName: - description: This field configures the field `ingressClassName` on the created Ingress resources used to solve ACME challenges that use this challenge solver. This is the recommended way of configuring the ingress class. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - ingressTemplate: - description: Optional ingress template used to configure the ACME challenge solver ingress used for HTTP01 challenges. - type: object - properties: - metadata: - description: ObjectMeta overrides for the ingress used to solve HTTP01 challenges. Only the 'labels' and 'annotations' fields may be set. If labels or annotations overlap with in-built values, the values here will override the in-built values. - type: object - properties: - annotations: - description: Annotations that should be added to the created ACME HTTP01 solver ingress. - type: object - additionalProperties: - type: string - labels: - description: Labels that should be added to the created ACME HTTP01 solver ingress. - type: object - additionalProperties: - type: string - name: - description: The name of the ingress resource that should have ACME challenge solving routes inserted into it in order to solve HTTP01 challenges. This is typically used in conjunction with ingress controllers like ingress-gce, which maintains a 1:1 mapping between external IPs and ingress resources. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - podTemplate: - description: Optional pod template used to configure the ACME challenge solver pods used for HTTP01 challenges. - type: object - properties: - metadata: - description: ObjectMeta overrides for the pod used to solve HTTP01 challenges. Only the 'labels' and 'annotations' fields may be set. If labels or annotations overlap with in-built values, the values here will override the in-built values. - type: object - properties: - annotations: - description: Annotations that should be added to the create ACME HTTP01 solver pods. - type: object - additionalProperties: - type: string - labels: - description: Labels that should be added to the created ACME HTTP01 solver pods. - type: object - additionalProperties: - type: string - spec: - description: PodSpec defines overrides for the HTTP01 challenge solver pod. Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields. All other fields will be ignored. - type: object - properties: - affinity: - description: If specified, the pod's scheduling constraints - type: object - properties: - nodeAffinity: - description: Describes node affinity scheduling rules for the pod. - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred. - type: array - items: - description: An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op). - type: object - required: - - preference - - weight - properties: - preference: - description: A node selector term, associated with the corresponding weight. - type: object - properties: - matchExpressions: - description: A list of node selector requirements by node's labels. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchFields: - description: A list of node selector requirements by node's fields. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - x-kubernetes-map-type: atomic - weight: - description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. - type: object - required: - - nodeSelectorTerms - properties: - nodeSelectorTerms: - description: Required. A list of node selector terms. The terms are ORed. - type: array - items: - description: A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm. - type: object - properties: - matchExpressions: - description: A list of node selector requirements by node's labels. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchFields: - description: A list of node selector requirements by node's fields. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - x-kubernetes-map-type: atomic - x-kubernetes-map-type: atomic - podAffinity: - description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. - type: array - items: - description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) - type: object - required: - - podAffinityTerm - - weight - properties: - podAffinityTerm: - description: Required. A pod affinity term, associated with the corresponding weight. - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - weight: - description: weight associated with matching the corresponding podAffinityTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. - type: array - items: - description: Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is running - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - podAntiAffinity: - description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. - type: array - items: - description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) - type: object - required: - - podAffinityTerm - - weight - properties: - podAffinityTerm: - description: Required. A pod affinity term, associated with the corresponding weight. - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - weight: - description: weight associated with matching the corresponding podAffinityTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. - type: array - items: - description: Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is running - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - imagePullSecrets: - description: If specified, the pod's imagePullSecrets - type: array - items: - description: LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace. - type: object - properties: - name: - description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?' - type: string - x-kubernetes-map-type: atomic - nodeSelector: - description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/' - type: object - additionalProperties: - type: string - priorityClassName: - description: If specified, the pod's priorityClassName. - type: string - serviceAccountName: - description: If specified, the pod's service account - type: string - tolerations: - description: If specified, the pod's tolerations. - type: array - items: - description: The pod this Toleration is attached to tolerates any taint that matches the triple using the matching operator . - type: object - properties: - effect: - description: Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. - type: string - key: - description: Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. - type: string - operator: - description: Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. - type: string - tolerationSeconds: - description: TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. - type: integer - format: int64 - value: - description: Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string. - type: string - serviceType: - description: Optional service type for Kubernetes solver service. Supported values are NodePort or ClusterIP. If unset, defaults to NodePort. - type: string - selector: - description: Selector selects a set of DNSNames on the Certificate resource that should be solved using this challenge solver. If not specified, the solver will be treated as the 'default' solver with the lowest priority, i.e. if any other solver has a more specific match, it will be used instead. - type: object - properties: - dnsNames: - description: List of DNSNames that this solver will be used to solve. If specified and a match is found, a dnsNames selector will take precedence over a dnsZones selector. If multiple solvers match with the same dnsNames value, the solver with the most matching labels in matchLabels will be selected. If neither has more matches, the solver defined earlier in the list will be selected. - type: array - items: - type: string - dnsZones: - description: List of DNSZones that this solver will be used to solve. The most specific DNS zone match specified here will take precedence over other DNS zone matches, so a solver specifying sys.example.com will be selected over one specifying example.com for the domain www.sys.example.com. If multiple solvers match with the same dnsZones value, the solver with the most matching labels in matchLabels will be selected. If neither has more matches, the solver defined earlier in the list will be selected. - type: array - items: - type: string - matchLabels: - description: A label selector that is used to refine the set of certificate's that this challenge solver will apply to. - type: object - additionalProperties: - type: string - token: - description: The ACME challenge token for this challenge. This is the raw value returned from the ACME server. - type: string - type: - description: The type of ACME challenge this resource represents. One of "HTTP-01" or "DNS-01". - type: string - enum: - - HTTP-01 - - DNS-01 - url: - description: The URL of the ACME Challenge resource for this challenge. This can be used to lookup details about the status of this challenge. - type: string - wildcard: - description: wildcard will be true if this challenge is for a wildcard identifier, for example '*.example.com'. - type: boolean - status: - type: object - properties: - presented: - description: presented will be set to true if the challenge values for this challenge are currently 'presented'. This *does not* imply the self check is passing. Only that the values have been 'submitted' for the appropriate challenge mechanism (i.e. the DNS01 TXT record has been presented, or the HTTP01 configuration has been configured). - type: boolean - processing: - description: Used to denote whether this challenge should be processed or not. This field will only be set to true by the 'scheduling' component. It will only be set to false by the 'challenges' controller, after the challenge has reached a final state or timed out. If this field is set to false, the challenge controller will not take any more action. - type: boolean - reason: - description: Contains human readable information on why the Challenge is in the current state. - type: string - state: - description: Contains the current 'state' of the challenge. If not set, the state of the challenge is unknown. - type: string - enum: - - valid - - ready - - pending - - processing - - invalid - - expired - - errored - served: true - storage: true - subresources: - status: {} ---- -# Source: cert-manager/templates/crds.yaml -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterissuers.cert-manager.io - labels: - app: 'cert-manager' - app.kubernetes.io/name: 'cert-manager' - app.kubernetes.io/instance: "cert-manager" - # Generated labels - app.kubernetes.io/version: "v1.12.2" -spec: - group: cert-manager.io - names: - kind: ClusterIssuer - listKind: ClusterIssuerList - plural: clusterissuers - singular: clusterissuer - categories: - - cert-manager - scope: Cluster - versions: - - name: v1 - subresources: - status: {} - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Ready - type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Status - priority: 1 - type: string - - jsonPath: .metadata.creationTimestamp - description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC. - name: Age - type: date - schema: - openAPIV3Schema: - description: A ClusterIssuer represents a certificate issuing authority which can be referenced as part of `issuerRef` fields. It is similar to an Issuer, however it is cluster-scoped and therefore can be referenced by resources that exist in *any* namespace, not just the same namespace as the referent. - type: object - required: - - spec - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: Desired state of the ClusterIssuer resource. - type: object - properties: - acme: - description: ACME configures this issuer to communicate with a RFC8555 (ACME) server to obtain signed x509 certificates. - type: object - required: - - privateKeySecretRef - - server - properties: - caBundle: - description: Base64-encoded bundle of PEM CAs which can be used to validate the certificate chain presented by the ACME server. Mutually exclusive with SkipTLSVerify; prefer using CABundle to prevent various kinds of security vulnerabilities. If CABundle and SkipTLSVerify are unset, the system certificate bundle inside the container is used to validate the TLS connection. - type: string - format: byte - disableAccountKeyGeneration: - description: Enables or disables generating a new ACME account key. If true, the Issuer resource will *not* request a new account but will expect the account key to be supplied via an existing secret. If false, the cert-manager system will generate a new ACME account key for the Issuer. Defaults to false. - type: boolean - email: - description: Email is the email address to be associated with the ACME account. This field is optional, but it is strongly recommended to be set. It will be used to contact you in case of issues with your account or certificates, including expiry notification emails. This field may be updated after the account is initially registered. - type: string - enableDurationFeature: - description: Enables requesting a Not After date on certificates that matches the duration of the certificate. This is not supported by all ACME servers like Let's Encrypt. If set to true when the ACME server does not support it it will create an error on the Order. Defaults to false. - type: boolean - externalAccountBinding: - description: ExternalAccountBinding is a reference to a CA external account of the ACME server. If set, upon registration cert-manager will attempt to associate the given external account credentials with the registered ACME account. - type: object - required: - - keyID - - keySecretRef - properties: - keyAlgorithm: - description: 'Deprecated: keyAlgorithm field exists for historical compatibility reasons and should not be used. The algorithm is now hardcoded to HS256 in golang/x/crypto/acme.' - type: string - enum: - - HS256 - - HS384 - - HS512 - keyID: - description: keyID is the ID of the CA key that the External Account is bound to. - type: string - keySecretRef: - description: keySecretRef is a Secret Key Selector referencing a data item in a Kubernetes Secret which holds the symmetric MAC key of the External Account Binding. The `key` is the index string that is paired with the key data in the Secret and should not be confused with the key data itself, or indeed with the External Account Binding keyID above. The secret key stored in the Secret **must** be un-padded, base64 URL encoded data. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - preferredChain: - description: 'PreferredChain is the chain to use if the ACME server outputs multiple. PreferredChain is no guarantee that this one gets delivered by the ACME endpoint. For example, for Let''s Encrypt''s DST crosssign you would use: "DST Root CA X3" or "ISRG Root X1" for the newer Let''s Encrypt root CA. This value picks the first certificate bundle in the ACME alternative chains that has a certificate with this value as its issuer''s CN' - type: string - maxLength: 64 - privateKeySecretRef: - description: PrivateKey is the name of a Kubernetes Secret resource that will be used to store the automatically generated ACME account private key. Optionally, a `key` may be specified to select a specific entry within the named Secret resource. If `key` is not specified, a default of `tls.key` will be used. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - server: - description: 'Server is the URL used to access the ACME server''s ''directory'' endpoint. For example, for Let''s Encrypt''s staging endpoint, you would use: "https://acme-staging-v02.api.letsencrypt.org/directory". Only ACME v2 endpoints (i.e. RFC 8555) are supported.' - type: string - skipTLSVerify: - description: 'INSECURE: Enables or disables validation of the ACME server TLS certificate. If true, requests to the ACME server will not have the TLS certificate chain validated. Mutually exclusive with CABundle; prefer using CABundle to prevent various kinds of security vulnerabilities. Only enable this option in development environments. If CABundle and SkipTLSVerify are unset, the system certificate bundle inside the container is used to validate the TLS connection. Defaults to false.' - type: boolean - solvers: - description: 'Solvers is a list of challenge solvers that will be used to solve ACME challenges for the matching domains. Solver configurations must be provided in order to obtain certificates from an ACME server. For more information, see: https://cert-manager.io/docs/configuration/acme/' - type: array - items: - description: An ACMEChallengeSolver describes how to solve ACME challenges for the issuer it is part of. A selector may be provided to use different solving strategies for different DNS names. Only one of HTTP01 or DNS01 must be provided. - type: object - properties: - dns01: - description: Configures cert-manager to attempt to complete authorizations by performing the DNS01 challenge flow. - type: object - properties: - acmeDNS: - description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage DNS01 challenge records. - type: object - required: - - accountSecretRef - - host - properties: - accountSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - host: - type: string - akamai: - description: Use the Akamai DNS zone management API to manage DNS01 challenge records. - type: object - required: - - accessTokenSecretRef - - clientSecretSecretRef - - clientTokenSecretRef - - serviceConsumerDomain - properties: - accessTokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - clientSecretSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - clientTokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - serviceConsumerDomain: - type: string - azureDNS: - description: Use the Microsoft Azure DNS API to manage DNS01 challenge records. - type: object - required: - - resourceGroupName - - subscriptionID - properties: - clientID: - description: if both this and ClientSecret are left unset MSI will be used - type: string - clientSecretSecretRef: - description: if both this and ClientID are left unset MSI will be used - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - environment: - description: name of the Azure environment (default AzurePublicCloud) - type: string - enum: - - AzurePublicCloud - - AzureChinaCloud - - AzureGermanCloud - - AzureUSGovernmentCloud - hostedZoneName: - description: name of the DNS zone that should be used - type: string - managedIdentity: - description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID - type: object - properties: - clientID: - description: client ID of the managed identity, can not be used at the same time as resourceID - type: string - resourceID: - description: resource ID of the managed identity, can not be used at the same time as clientID - type: string - resourceGroupName: - description: resource group the DNS zone is located in - type: string - subscriptionID: - description: ID of the Azure subscription - type: string - tenantID: - description: when specifying ClientID and ClientSecret then this field is also needed - type: string - cloudDNS: - description: Use the Google Cloud DNS API to manage DNS01 challenge records. - type: object - required: - - project - properties: - hostedZoneName: - description: HostedZoneName is an optional field that tells cert-manager in which Cloud DNS zone the challenge record has to be created. If left empty cert-manager will automatically choose a zone. - type: string - project: - type: string - serviceAccountSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - cloudflare: - description: Use the Cloudflare API to manage DNS01 challenge records. - type: object - properties: - apiKeySecretRef: - description: 'API key to use to authenticate with Cloudflare. Note: using an API token to authenticate is now the recommended method as it allows greater control of permissions.' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - apiTokenSecretRef: - description: API token used to authenticate with Cloudflare. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - email: - description: Email of the account, only required when using API key based authentication. - type: string - cnameStrategy: - description: CNAMEStrategy configures how the DNS01 provider should handle CNAME records when found in DNS zones. - type: string - enum: - - None - - Follow - digitalocean: - description: Use the DigitalOcean DNS API to manage DNS01 challenge records. - type: object - required: - - tokenSecretRef - properties: - tokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - rfc2136: - description: Use RFC2136 ("Dynamic Updates in the Domain Name System") (https://datatracker.ietf.org/doc/rfc2136/) to manage DNS01 challenge records. - type: object - required: - - nameserver - properties: - nameserver: - description: The IP address or hostname of an authoritative DNS server supporting RFC2136 in the form host:port. If the host is an IPv6 address it must be enclosed in square brackets (e.g [2001:db8::1])Β ; port is optional. This field is required. - type: string - tsigAlgorithm: - description: 'The TSIG Algorithm configured in the DNS supporting RFC2136. Used only when ``tsigSecretSecretRef`` and ``tsigKeyName`` are defined. Supported values are (case-insensitive): ``HMACMD5`` (default), ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.' - type: string - tsigKeyName: - description: The TSIG Key name configured in the DNS. If ``tsigSecretSecretRef`` is defined, this field is required. - type: string - tsigSecretSecretRef: - description: The name of the secret containing the TSIG value. If ``tsigKeyName`` is defined, this field is required. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - route53: - description: Use the AWS Route53 API to manage DNS01 challenge records. - type: object - required: - - region - properties: - accessKeyID: - description: 'The AccessKeyID is used for authentication. Cannot be set when SecretAccessKeyID is set. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: string - accessKeyIDSecretRef: - description: 'The SecretAccessKey is used for authentication. If set, pull the AWS access key ID from a key within a Kubernetes Secret. Cannot be set when AccessKeyID is set. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - hostedZoneID: - description: If set, the provider will manage only this zone in Route53 and will not do an lookup using the route53:ListHostedZonesByName api call. - type: string - region: - description: Always set the region when using AccessKeyID and SecretAccessKey - type: string - role: - description: Role is a Role ARN which the Route53 provider will assume using either the explicit credentials AccessKeyID/SecretAccessKey or the inferred credentials from environment variables, shared credentials file or AWS Instance metadata - type: string - secretAccessKeySecretRef: - description: 'The SecretAccessKey is used for authentication. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - webhook: - description: Configure an external webhook based DNS01 challenge solver to manage DNS01 challenge records. - type: object - required: - - groupName - - solverName - properties: - config: - description: Additional configuration that should be passed to the webhook apiserver when challenges are processed. This can contain arbitrary JSON data. Secret values should not be specified in this stanza. If secret values are needed (e.g. credentials for a DNS service), you should use a SecretKeySelector to reference a Secret resource. For details on the schema of this field, consult the webhook provider implementation's documentation. - x-kubernetes-preserve-unknown-fields: true - groupName: - description: The API group name that should be used when POSTing ChallengePayload resources to the webhook apiserver. This should be the same as the GroupName specified in the webhook provider implementation. - type: string - solverName: - description: The name of the solver to use, as defined in the webhook provider implementation. This will typically be the name of the provider, e.g. 'cloudflare'. - type: string - http01: - description: Configures cert-manager to attempt to complete authorizations by performing the HTTP01 challenge flow. It is not possible to obtain certificates for wildcard domain names (e.g. `*.example.com`) using the HTTP01 challenge mechanism. - type: object - properties: - gatewayHTTPRoute: - description: The Gateway API is a sig-network community API that models service networking in Kubernetes (https://gateway-api.sigs.k8s.io/). The Gateway solver will create HTTPRoutes with the specified labels in the same namespace as the challenge. This solver is experimental, and fields / behaviour may change in the future. - type: object - properties: - labels: - description: Custom labels that will be applied to HTTPRoutes created by cert-manager while solving HTTP-01 challenges. - type: object - additionalProperties: - type: string - parentRefs: - description: 'When solving an HTTP-01 challenge, cert-manager creates an HTTPRoute. cert-manager needs to know which parentRefs should be used when creating the HTTPRoute. Usually, the parentRef references a Gateway. See: https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways' - type: array - items: - description: "ParentReference identifies an API object (usually a Gateway) that can be considered a parent of this resource (usually a route). The only kind of parent resource with \"Core\" support is Gateway. This API may be extended in the future to support additional kinds of parent resources, such as HTTPRoute. \n The API object must be valid in the cluster; the Group and Kind must be registered in the cluster for this reference to be valid." - type: object - required: - - name - properties: - group: - description: "Group is the group of the referent. When unspecified, \"gateway.networking.k8s.io\" is inferred. To set the core API group (such as for a \"Service\" kind referent), Group must be explicitly set to \"\" (empty string). \n Support: Core" - type: string - default: gateway.networking.k8s.io - maxLength: 253 - pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - kind: - description: "Kind is kind of the referent. \n Support: Core (Gateway) \n Support: Implementation-specific (Other Resources)" - type: string - default: Gateway - maxLength: 63 - minLength: 1 - pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$ - name: - description: "Name is the name of the referent. \n Support: Core" - type: string - maxLength: 253 - minLength: 1 - namespace: - description: "Namespace is the namespace of the referent. When unspecified, this refers to the local namespace of the Route. \n Note that there are specific rules for ParentRefs which cross namespace boundaries. Cross-namespace references are only valid if they are explicitly allowed by something in the namespace they are referring to. For example: Gateway has the AllowedRoutes field, and ReferenceGrant provides a generic way to enable any other kind of cross-namespace reference. \n Support: Core" - type: string - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - port: - description: "Port is the network port this Route targets. It can be interpreted differently based on the type of parent resource. \n When the parent resource is a Gateway, this targets all listeners listening on the specified port that also support this kind of Route(and select this Route). It's not recommended to set `Port` unless the networking behaviors specified in a Route must apply to a specific port as opposed to a listener(s) whose port(s) may be changed. When both Port and SectionName are specified, the name and port of the selected listener must match both specified values. \n Implementations MAY choose to support other parent resources. Implementations supporting other types of parent resources MUST clearly document how/if Port is interpreted. \n For the purpose of status, an attachment is considered successful as long as the parent resource accepts it partially. For example, Gateway listeners can restrict which Routes can attach to them by Route kind, namespace, or hostname. If 1 of 2 Gateway listeners accept attachment from the referencing Route, the Route MUST be considered successfully attached. If no Gateway listeners accept attachment from this Route, the Route MUST be considered detached from the Gateway. \n Support: Extended \n " - type: integer - format: int32 - maximum: 65535 - minimum: 1 - sectionName: - description: "SectionName is the name of a section within the target resource. In the following resources, SectionName is interpreted as the following: \n * Gateway: Listener Name. When both Port (experimental) and SectionName are specified, the name and port of the selected listener must match both specified values. \n Implementations MAY choose to support attaching Routes to other resources. If that is the case, they MUST clearly document how SectionName is interpreted. \n When unspecified (empty string), this will reference the entire resource. For the purpose of status, an attachment is considered successful if at least one section in the parent resource accepts it. For example, Gateway listeners can restrict which Routes can attach to them by Route kind, namespace, or hostname. If 1 of 2 Gateway listeners accept attachment from the referencing Route, the Route MUST be considered successfully attached. If no Gateway listeners accept attachment from this Route, the Route MUST be considered detached from the Gateway. \n Support: Core" - type: string - maxLength: 253 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - serviceType: - description: Optional service type for Kubernetes solver service. Supported values are NodePort or ClusterIP. If unset, defaults to NodePort. - type: string - ingress: - description: The ingress based HTTP01 challenge solver will solve challenges by creating or modifying Ingress resources in order to route requests for '/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that are provisioned by cert-manager for each Challenge to be completed. - type: object - properties: - class: - description: This field configures the annotation `kubernetes.io/ingress.class` when creating Ingress resources to solve ACME challenges that use this challenge solver. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - ingressClassName: - description: This field configures the field `ingressClassName` on the created Ingress resources used to solve ACME challenges that use this challenge solver. This is the recommended way of configuring the ingress class. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - ingressTemplate: - description: Optional ingress template used to configure the ACME challenge solver ingress used for HTTP01 challenges. - type: object - properties: - metadata: - description: ObjectMeta overrides for the ingress used to solve HTTP01 challenges. Only the 'labels' and 'annotations' fields may be set. If labels or annotations overlap with in-built values, the values here will override the in-built values. - type: object - properties: - annotations: - description: Annotations that should be added to the created ACME HTTP01 solver ingress. - type: object - additionalProperties: - type: string - labels: - description: Labels that should be added to the created ACME HTTP01 solver ingress. - type: object - additionalProperties: - type: string - name: - description: The name of the ingress resource that should have ACME challenge solving routes inserted into it in order to solve HTTP01 challenges. This is typically used in conjunction with ingress controllers like ingress-gce, which maintains a 1:1 mapping between external IPs and ingress resources. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - podTemplate: - description: Optional pod template used to configure the ACME challenge solver pods used for HTTP01 challenges. - type: object - properties: - metadata: - description: ObjectMeta overrides for the pod used to solve HTTP01 challenges. Only the 'labels' and 'annotations' fields may be set. If labels or annotations overlap with in-built values, the values here will override the in-built values. - type: object - properties: - annotations: - description: Annotations that should be added to the create ACME HTTP01 solver pods. - type: object - additionalProperties: - type: string - labels: - description: Labels that should be added to the created ACME HTTP01 solver pods. - type: object - additionalProperties: - type: string - spec: - description: PodSpec defines overrides for the HTTP01 challenge solver pod. Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields. All other fields will be ignored. - type: object - properties: - affinity: - description: If specified, the pod's scheduling constraints - type: object - properties: - nodeAffinity: - description: Describes node affinity scheduling rules for the pod. - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred. - type: array - items: - description: An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op). - type: object - required: - - preference - - weight - properties: - preference: - description: A node selector term, associated with the corresponding weight. - type: object - properties: - matchExpressions: - description: A list of node selector requirements by node's labels. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchFields: - description: A list of node selector requirements by node's fields. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - x-kubernetes-map-type: atomic - weight: - description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. - type: object - required: - - nodeSelectorTerms - properties: - nodeSelectorTerms: - description: Required. A list of node selector terms. The terms are ORed. - type: array - items: - description: A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm. - type: object - properties: - matchExpressions: - description: A list of node selector requirements by node's labels. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchFields: - description: A list of node selector requirements by node's fields. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - x-kubernetes-map-type: atomic - x-kubernetes-map-type: atomic - podAffinity: - description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. - type: array - items: - description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) - type: object - required: - - podAffinityTerm - - weight - properties: - podAffinityTerm: - description: Required. A pod affinity term, associated with the corresponding weight. - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - weight: - description: weight associated with matching the corresponding podAffinityTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. - type: array - items: - description: Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is running - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - podAntiAffinity: - description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. - type: array - items: - description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) - type: object - required: - - podAffinityTerm - - weight - properties: - podAffinityTerm: - description: Required. A pod affinity term, associated with the corresponding weight. - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - weight: - description: weight associated with matching the corresponding podAffinityTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. - type: array - items: - description: Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is running - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - imagePullSecrets: - description: If specified, the pod's imagePullSecrets - type: array - items: - description: LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace. - type: object - properties: - name: - description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?' - type: string - x-kubernetes-map-type: atomic - nodeSelector: - description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/' - type: object - additionalProperties: - type: string - priorityClassName: - description: If specified, the pod's priorityClassName. - type: string - serviceAccountName: - description: If specified, the pod's service account - type: string - tolerations: - description: If specified, the pod's tolerations. - type: array - items: - description: The pod this Toleration is attached to tolerates any taint that matches the triple using the matching operator . - type: object - properties: - effect: - description: Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. - type: string - key: - description: Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. - type: string - operator: - description: Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. - type: string - tolerationSeconds: - description: TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. - type: integer - format: int64 - value: - description: Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string. - type: string - serviceType: - description: Optional service type for Kubernetes solver service. Supported values are NodePort or ClusterIP. If unset, defaults to NodePort. - type: string - selector: - description: Selector selects a set of DNSNames on the Certificate resource that should be solved using this challenge solver. If not specified, the solver will be treated as the 'default' solver with the lowest priority, i.e. if any other solver has a more specific match, it will be used instead. - type: object - properties: - dnsNames: - description: List of DNSNames that this solver will be used to solve. If specified and a match is found, a dnsNames selector will take precedence over a dnsZones selector. If multiple solvers match with the same dnsNames value, the solver with the most matching labels in matchLabels will be selected. If neither has more matches, the solver defined earlier in the list will be selected. - type: array - items: - type: string - dnsZones: - description: List of DNSZones that this solver will be used to solve. The most specific DNS zone match specified here will take precedence over other DNS zone matches, so a solver specifying sys.example.com will be selected over one specifying example.com for the domain www.sys.example.com. If multiple solvers match with the same dnsZones value, the solver with the most matching labels in matchLabels will be selected. If neither has more matches, the solver defined earlier in the list will be selected. - type: array - items: - type: string - matchLabels: - description: A label selector that is used to refine the set of certificate's that this challenge solver will apply to. - type: object - additionalProperties: - type: string - ca: - description: CA configures this issuer to sign certificates using a signing CA keypair stored in a Secret resource. This is used to build internal PKIs that are managed by cert-manager. - type: object - required: - - secretName - properties: - crlDistributionPoints: - description: The CRL distribution points is an X.509 v3 certificate extension which identifies the location of the CRL from which the revocation of this certificate can be checked. If not set, certificates will be issued without distribution points set. - type: array - items: - type: string - ocspServers: - description: The OCSP server list is an X.509 v3 extension that defines a list of URLs of OCSP responders. The OCSP responders can be queried for the revocation status of an issued certificate. If not set, the certificate will be issued with no OCSP servers set. For example, an OCSP server URL could be "http://ocsp.int-x3.letsencrypt.org". - type: array - items: - type: string - secretName: - description: SecretName is the name of the secret used to sign Certificates issued by this Issuer. - type: string - selfSigned: - description: SelfSigned configures this issuer to 'self sign' certificates using the private key used to create the CertificateRequest object. - type: object - properties: - crlDistributionPoints: - description: The CRL distribution points is an X.509 v3 certificate extension which identifies the location of the CRL from which the revocation of this certificate can be checked. If not set certificate will be issued without CDP. Values are strings. - type: array - items: - type: string - vault: - description: Vault configures this issuer to sign certificates using a HashiCorp Vault PKI backend. - type: object - required: - - auth - - path - - server - properties: - auth: - description: Auth configures how cert-manager authenticates with the Vault server. - type: object - properties: - appRole: - description: AppRole authenticates with Vault using the App Role auth mechanism, with the role and secret stored in a Kubernetes Secret resource. - type: object - required: - - path - - roleId - - secretRef - properties: - path: - description: 'Path where the App Role authentication backend is mounted in Vault, e.g: "approle"' - type: string - roleId: - description: RoleID configured in the App Role authentication backend when setting up the authentication backend in Vault. - type: string - secretRef: - description: Reference to a key in a Secret that contains the App Role secret used to authenticate with Vault. The `key` field must be specified and denotes which entry within the Secret resource is used as the app role secret. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - kubernetes: - description: Kubernetes authenticates with Vault by passing the ServiceAccount token stored in the named Secret resource to the Vault server. - type: object - required: - - role - properties: - mountPath: - description: The Vault mountPath here is the mount path to use when authenticating with Vault. For example, setting a value to `/v1/auth/foo`, will use the path `/v1/auth/foo/login` to authenticate with Vault. If unspecified, the default value "/v1/auth/kubernetes" will be used. - type: string - role: - description: A required field containing the Vault Role to assume. A Role binds a Kubernetes ServiceAccount with a set of Vault policies. - type: string - secretRef: - description: The required Secret field containing a Kubernetes ServiceAccount JWT used for authenticating with Vault. Use of 'ambient credentials' is not supported. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - serviceAccountRef: - description: A reference to a service account that will be used to request a bound token (also known as "projected token"). Compared to using "secretRef", using this field means that you don't rely on statically bound tokens. To use this field, you must configure an RBAC rule to let cert-manager request a token. - type: object - required: - - name - properties: - name: - description: Name of the ServiceAccount used to request a token. - type: string - tokenSecretRef: - description: TokenSecretRef authenticates with Vault by presenting a token. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - caBundle: - description: Base64-encoded bundle of PEM CAs which will be used to validate the certificate chain presented by Vault. Only used if using HTTPS to connect to Vault and ignored for HTTP connections. Mutually exclusive with CABundleSecretRef. If neither CABundle nor CABundleSecretRef are defined, the certificate bundle in the cert-manager controller container is used to validate the TLS connection. - type: string - format: byte - caBundleSecretRef: - description: Reference to a Secret containing a bundle of PEM-encoded CAs to use when verifying the certificate chain presented by Vault when using HTTPS. Mutually exclusive with CABundle. If neither CABundle nor CABundleSecretRef are defined, the certificate bundle in the cert-manager controller container is used to validate the TLS connection. If no key for the Secret is specified, cert-manager will default to 'ca.crt'. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - namespace: - description: 'Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: "ns1" More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces' - type: string - path: - description: 'Path is the mount path of the Vault PKI backend''s `sign` endpoint, e.g: "my_pki_mount/sign/my-role-name".' - type: string - server: - description: 'Server is the connection address for the Vault server, e.g: "https://vault.example.com:8200".' - type: string - venafi: - description: Venafi configures this issuer to sign certificates using a Venafi TPP or Venafi Cloud policy zone. - type: object - required: - - zone - properties: - cloud: - description: Cloud specifies the Venafi cloud configuration settings. Only one of TPP or Cloud may be specified. - type: object - required: - - apiTokenSecretRef - properties: - apiTokenSecretRef: - description: APITokenSecretRef is a secret key selector for the Venafi Cloud API token. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - url: - description: URL is the base URL for Venafi Cloud. Defaults to "https://api.venafi.cloud/v1". - type: string - tpp: - description: TPP specifies Trust Protection Platform configuration settings. Only one of TPP or Cloud may be specified. - type: object - required: - - credentialsRef - - url - properties: - caBundle: - description: Base64-encoded bundle of PEM CAs which will be used to validate the certificate chain presented by the TPP server. Only used if using HTTPS; ignored for HTTP. If undefined, the certificate bundle in the cert-manager controller container is used to validate the chain. - type: string - format: byte - credentialsRef: - description: CredentialsRef is a reference to a Secret containing the username and password for the TPP server. The secret must contain two keys, 'username' and 'password'. - type: object - required: - - name - properties: - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - url: - description: 'URL is the base URL for the vedsdk endpoint of the Venafi TPP instance, for example: "https://tpp.example.com/vedsdk".' - type: string - zone: - description: Zone is the Venafi Policy Zone to use for this issuer. All requests made to the Venafi platform will be restricted by the named zone policy. This field is required. - type: string - status: - description: Status of the ClusterIssuer. This is set and managed automatically. - type: object - properties: - acme: - description: ACME specific status options. This field should only be set if the Issuer is configured to use an ACME server to issue certificates. - type: object - properties: - lastPrivateKeyHash: - description: LastPrivateKeyHash is a hash of the private key associated with the latest registered ACME account, in order to track changes made to registered account associated with the Issuer - type: string - lastRegisteredEmail: - description: LastRegisteredEmail is the email associated with the latest registered ACME account, in order to track changes made to registered account associated with the Issuer - type: string - uri: - description: URI is the unique account identifier, which can also be used to retrieve account details from the CA - type: string - conditions: - description: List of status conditions to indicate the status of a CertificateRequest. Known condition types are `Ready`. - type: array - items: - description: IssuerCondition contains condition information for an Issuer. - type: object - required: - - status - - type - properties: - lastTransitionTime: - description: LastTransitionTime is the timestamp corresponding to the last status change of this condition. - type: string - format: date-time - message: - description: Message is a human readable description of the details of the last transition, complementing reason. - type: string - observedGeneration: - description: If set, this represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.condition[x].observedGeneration is 9, the condition is out of date with respect to the current state of the Issuer. - type: integer - format: int64 - reason: - description: Reason is a brief machine readable explanation for the condition's last transition. - type: string - status: - description: Status of the condition, one of (`True`, `False`, `Unknown`). - type: string - enum: - - "True" - - "False" - - Unknown - type: - description: Type of the condition, known values are (`Ready`). - type: string - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - served: true - storage: true ---- -# Source: cert-manager/templates/crds.yaml -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: issuers.cert-manager.io - labels: - app: 'cert-manager' - app.kubernetes.io/name: 'cert-manager' - app.kubernetes.io/instance: "cert-manager" - # Generated labels - app.kubernetes.io/version: "v1.12.2" -spec: - group: cert-manager.io - names: - kind: Issuer - listKind: IssuerList - plural: issuers - singular: issuer - categories: - - cert-manager - scope: Namespaced - versions: - - name: v1 - subresources: - status: {} - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Ready")].status - name: Ready - type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message - name: Status - priority: 1 - type: string - - jsonPath: .metadata.creationTimestamp - description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC. - name: Age - type: date - schema: - openAPIV3Schema: - description: An Issuer represents a certificate issuing authority which can be referenced as part of `issuerRef` fields. It is scoped to a single namespace and can therefore only be referenced by resources within the same namespace. - type: object - required: - - spec - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: Desired state of the Issuer resource. - type: object - properties: - acme: - description: ACME configures this issuer to communicate with a RFC8555 (ACME) server to obtain signed x509 certificates. - type: object - required: - - privateKeySecretRef - - server - properties: - caBundle: - description: Base64-encoded bundle of PEM CAs which can be used to validate the certificate chain presented by the ACME server. Mutually exclusive with SkipTLSVerify; prefer using CABundle to prevent various kinds of security vulnerabilities. If CABundle and SkipTLSVerify are unset, the system certificate bundle inside the container is used to validate the TLS connection. - type: string - format: byte - disableAccountKeyGeneration: - description: Enables or disables generating a new ACME account key. If true, the Issuer resource will *not* request a new account but will expect the account key to be supplied via an existing secret. If false, the cert-manager system will generate a new ACME account key for the Issuer. Defaults to false. - type: boolean - email: - description: Email is the email address to be associated with the ACME account. This field is optional, but it is strongly recommended to be set. It will be used to contact you in case of issues with your account or certificates, including expiry notification emails. This field may be updated after the account is initially registered. - type: string - enableDurationFeature: - description: Enables requesting a Not After date on certificates that matches the duration of the certificate. This is not supported by all ACME servers like Let's Encrypt. If set to true when the ACME server does not support it it will create an error on the Order. Defaults to false. - type: boolean - externalAccountBinding: - description: ExternalAccountBinding is a reference to a CA external account of the ACME server. If set, upon registration cert-manager will attempt to associate the given external account credentials with the registered ACME account. - type: object - required: - - keyID - - keySecretRef - properties: - keyAlgorithm: - description: 'Deprecated: keyAlgorithm field exists for historical compatibility reasons and should not be used. The algorithm is now hardcoded to HS256 in golang/x/crypto/acme.' - type: string - enum: - - HS256 - - HS384 - - HS512 - keyID: - description: keyID is the ID of the CA key that the External Account is bound to. - type: string - keySecretRef: - description: keySecretRef is a Secret Key Selector referencing a data item in a Kubernetes Secret which holds the symmetric MAC key of the External Account Binding. The `key` is the index string that is paired with the key data in the Secret and should not be confused with the key data itself, or indeed with the External Account Binding keyID above. The secret key stored in the Secret **must** be un-padded, base64 URL encoded data. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - preferredChain: - description: 'PreferredChain is the chain to use if the ACME server outputs multiple. PreferredChain is no guarantee that this one gets delivered by the ACME endpoint. For example, for Let''s Encrypt''s DST crosssign you would use: "DST Root CA X3" or "ISRG Root X1" for the newer Let''s Encrypt root CA. This value picks the first certificate bundle in the ACME alternative chains that has a certificate with this value as its issuer''s CN' - type: string - maxLength: 64 - privateKeySecretRef: - description: PrivateKey is the name of a Kubernetes Secret resource that will be used to store the automatically generated ACME account private key. Optionally, a `key` may be specified to select a specific entry within the named Secret resource. If `key` is not specified, a default of `tls.key` will be used. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - server: - description: 'Server is the URL used to access the ACME server''s ''directory'' endpoint. For example, for Let''s Encrypt''s staging endpoint, you would use: "https://acme-staging-v02.api.letsencrypt.org/directory". Only ACME v2 endpoints (i.e. RFC 8555) are supported.' - type: string - skipTLSVerify: - description: 'INSECURE: Enables or disables validation of the ACME server TLS certificate. If true, requests to the ACME server will not have the TLS certificate chain validated. Mutually exclusive with CABundle; prefer using CABundle to prevent various kinds of security vulnerabilities. Only enable this option in development environments. If CABundle and SkipTLSVerify are unset, the system certificate bundle inside the container is used to validate the TLS connection. Defaults to false.' - type: boolean - solvers: - description: 'Solvers is a list of challenge solvers that will be used to solve ACME challenges for the matching domains. Solver configurations must be provided in order to obtain certificates from an ACME server. For more information, see: https://cert-manager.io/docs/configuration/acme/' - type: array - items: - description: An ACMEChallengeSolver describes how to solve ACME challenges for the issuer it is part of. A selector may be provided to use different solving strategies for different DNS names. Only one of HTTP01 or DNS01 must be provided. - type: object - properties: - dns01: - description: Configures cert-manager to attempt to complete authorizations by performing the DNS01 challenge flow. - type: object - properties: - acmeDNS: - description: Use the 'ACME DNS' (https://github.com/joohoi/acme-dns) API to manage DNS01 challenge records. - type: object - required: - - accountSecretRef - - host - properties: - accountSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - host: - type: string - akamai: - description: Use the Akamai DNS zone management API to manage DNS01 challenge records. - type: object - required: - - accessTokenSecretRef - - clientSecretSecretRef - - clientTokenSecretRef - - serviceConsumerDomain - properties: - accessTokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - clientSecretSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - clientTokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - serviceConsumerDomain: - type: string - azureDNS: - description: Use the Microsoft Azure DNS API to manage DNS01 challenge records. - type: object - required: - - resourceGroupName - - subscriptionID - properties: - clientID: - description: if both this and ClientSecret are left unset MSI will be used - type: string - clientSecretSecretRef: - description: if both this and ClientID are left unset MSI will be used - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - environment: - description: name of the Azure environment (default AzurePublicCloud) - type: string - enum: - - AzurePublicCloud - - AzureChinaCloud - - AzureGermanCloud - - AzureUSGovernmentCloud - hostedZoneName: - description: name of the DNS zone that should be used - type: string - managedIdentity: - description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID - type: object - properties: - clientID: - description: client ID of the managed identity, can not be used at the same time as resourceID - type: string - resourceID: - description: resource ID of the managed identity, can not be used at the same time as clientID - type: string - resourceGroupName: - description: resource group the DNS zone is located in - type: string - subscriptionID: - description: ID of the Azure subscription - type: string - tenantID: - description: when specifying ClientID and ClientSecret then this field is also needed - type: string - cloudDNS: - description: Use the Google Cloud DNS API to manage DNS01 challenge records. - type: object - required: - - project - properties: - hostedZoneName: - description: HostedZoneName is an optional field that tells cert-manager in which Cloud DNS zone the challenge record has to be created. If left empty cert-manager will automatically choose a zone. - type: string - project: - type: string - serviceAccountSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - cloudflare: - description: Use the Cloudflare API to manage DNS01 challenge records. - type: object - properties: - apiKeySecretRef: - description: 'API key to use to authenticate with Cloudflare. Note: using an API token to authenticate is now the recommended method as it allows greater control of permissions.' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - apiTokenSecretRef: - description: API token used to authenticate with Cloudflare. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - email: - description: Email of the account, only required when using API key based authentication. - type: string - cnameStrategy: - description: CNAMEStrategy configures how the DNS01 provider should handle CNAME records when found in DNS zones. - type: string - enum: - - None - - Follow - digitalocean: - description: Use the DigitalOcean DNS API to manage DNS01 challenge records. - type: object - required: - - tokenSecretRef - properties: - tokenSecretRef: - description: A reference to a specific 'key' within a Secret resource. In some instances, `key` is a required field. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - rfc2136: - description: Use RFC2136 ("Dynamic Updates in the Domain Name System") (https://datatracker.ietf.org/doc/rfc2136/) to manage DNS01 challenge records. - type: object - required: - - nameserver - properties: - nameserver: - description: The IP address or hostname of an authoritative DNS server supporting RFC2136 in the form host:port. If the host is an IPv6 address it must be enclosed in square brackets (e.g [2001:db8::1])Β ; port is optional. This field is required. - type: string - tsigAlgorithm: - description: 'The TSIG Algorithm configured in the DNS supporting RFC2136. Used only when ``tsigSecretSecretRef`` and ``tsigKeyName`` are defined. Supported values are (case-insensitive): ``HMACMD5`` (default), ``HMACSHA1``, ``HMACSHA256`` or ``HMACSHA512``.' - type: string - tsigKeyName: - description: The TSIG Key name configured in the DNS. If ``tsigSecretSecretRef`` is defined, this field is required. - type: string - tsigSecretSecretRef: - description: The name of the secret containing the TSIG value. If ``tsigKeyName`` is defined, this field is required. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - route53: - description: Use the AWS Route53 API to manage DNS01 challenge records. - type: object - required: - - region - properties: - accessKeyID: - description: 'The AccessKeyID is used for authentication. Cannot be set when SecretAccessKeyID is set. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: string - accessKeyIDSecretRef: - description: 'The SecretAccessKey is used for authentication. If set, pull the AWS access key ID from a key within a Kubernetes Secret. Cannot be set when AccessKeyID is set. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - hostedZoneID: - description: If set, the provider will manage only this zone in Route53 and will not do an lookup using the route53:ListHostedZonesByName api call. - type: string - region: - description: Always set the region when using AccessKeyID and SecretAccessKey - type: string - role: - description: Role is a Role ARN which the Route53 provider will assume using either the explicit credentials AccessKeyID/SecretAccessKey or the inferred credentials from environment variables, shared credentials file or AWS Instance metadata - type: string - secretAccessKeySecretRef: - description: 'The SecretAccessKey is used for authentication. If neither the Access Key nor Key ID are set, we fall-back to using env vars, shared credentials file or AWS Instance metadata, see: https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials' - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - webhook: - description: Configure an external webhook based DNS01 challenge solver to manage DNS01 challenge records. - type: object - required: - - groupName - - solverName - properties: - config: - description: Additional configuration that should be passed to the webhook apiserver when challenges are processed. This can contain arbitrary JSON data. Secret values should not be specified in this stanza. If secret values are needed (e.g. credentials for a DNS service), you should use a SecretKeySelector to reference a Secret resource. For details on the schema of this field, consult the webhook provider implementation's documentation. - x-kubernetes-preserve-unknown-fields: true - groupName: - description: The API group name that should be used when POSTing ChallengePayload resources to the webhook apiserver. This should be the same as the GroupName specified in the webhook provider implementation. - type: string - solverName: - description: The name of the solver to use, as defined in the webhook provider implementation. This will typically be the name of the provider, e.g. 'cloudflare'. - type: string - http01: - description: Configures cert-manager to attempt to complete authorizations by performing the HTTP01 challenge flow. It is not possible to obtain certificates for wildcard domain names (e.g. `*.example.com`) using the HTTP01 challenge mechanism. - type: object - properties: - gatewayHTTPRoute: - description: The Gateway API is a sig-network community API that models service networking in Kubernetes (https://gateway-api.sigs.k8s.io/). The Gateway solver will create HTTPRoutes with the specified labels in the same namespace as the challenge. This solver is experimental, and fields / behaviour may change in the future. - type: object - properties: - labels: - description: Custom labels that will be applied to HTTPRoutes created by cert-manager while solving HTTP-01 challenges. - type: object - additionalProperties: - type: string - parentRefs: - description: 'When solving an HTTP-01 challenge, cert-manager creates an HTTPRoute. cert-manager needs to know which parentRefs should be used when creating the HTTPRoute. Usually, the parentRef references a Gateway. See: https://gateway-api.sigs.k8s.io/api-types/httproute/#attaching-to-gateways' - type: array - items: - description: "ParentReference identifies an API object (usually a Gateway) that can be considered a parent of this resource (usually a route). The only kind of parent resource with \"Core\" support is Gateway. This API may be extended in the future to support additional kinds of parent resources, such as HTTPRoute. \n The API object must be valid in the cluster; the Group and Kind must be registered in the cluster for this reference to be valid." - type: object - required: - - name - properties: - group: - description: "Group is the group of the referent. When unspecified, \"gateway.networking.k8s.io\" is inferred. To set the core API group (such as for a \"Service\" kind referent), Group must be explicitly set to \"\" (empty string). \n Support: Core" - type: string - default: gateway.networking.k8s.io - maxLength: 253 - pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - kind: - description: "Kind is kind of the referent. \n Support: Core (Gateway) \n Support: Implementation-specific (Other Resources)" - type: string - default: Gateway - maxLength: 63 - minLength: 1 - pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$ - name: - description: "Name is the name of the referent. \n Support: Core" - type: string - maxLength: 253 - minLength: 1 - namespace: - description: "Namespace is the namespace of the referent. When unspecified, this refers to the local namespace of the Route. \n Note that there are specific rules for ParentRefs which cross namespace boundaries. Cross-namespace references are only valid if they are explicitly allowed by something in the namespace they are referring to. For example: Gateway has the AllowedRoutes field, and ReferenceGrant provides a generic way to enable any other kind of cross-namespace reference. \n Support: Core" - type: string - maxLength: 63 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ - port: - description: "Port is the network port this Route targets. It can be interpreted differently based on the type of parent resource. \n When the parent resource is a Gateway, this targets all listeners listening on the specified port that also support this kind of Route(and select this Route). It's not recommended to set `Port` unless the networking behaviors specified in a Route must apply to a specific port as opposed to a listener(s) whose port(s) may be changed. When both Port and SectionName are specified, the name and port of the selected listener must match both specified values. \n Implementations MAY choose to support other parent resources. Implementations supporting other types of parent resources MUST clearly document how/if Port is interpreted. \n For the purpose of status, an attachment is considered successful as long as the parent resource accepts it partially. For example, Gateway listeners can restrict which Routes can attach to them by Route kind, namespace, or hostname. If 1 of 2 Gateway listeners accept attachment from the referencing Route, the Route MUST be considered successfully attached. If no Gateway listeners accept attachment from this Route, the Route MUST be considered detached from the Gateway. \n Support: Extended \n " - type: integer - format: int32 - maximum: 65535 - minimum: 1 - sectionName: - description: "SectionName is the name of a section within the target resource. In the following resources, SectionName is interpreted as the following: \n * Gateway: Listener Name. When both Port (experimental) and SectionName are specified, the name and port of the selected listener must match both specified values. \n Implementations MAY choose to support attaching Routes to other resources. If that is the case, they MUST clearly document how SectionName is interpreted. \n When unspecified (empty string), this will reference the entire resource. For the purpose of status, an attachment is considered successful if at least one section in the parent resource accepts it. For example, Gateway listeners can restrict which Routes can attach to them by Route kind, namespace, or hostname. If 1 of 2 Gateway listeners accept attachment from the referencing Route, the Route MUST be considered successfully attached. If no Gateway listeners accept attachment from this Route, the Route MUST be considered detached from the Gateway. \n Support: Core" - type: string - maxLength: 253 - minLength: 1 - pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$ - serviceType: - description: Optional service type for Kubernetes solver service. Supported values are NodePort or ClusterIP. If unset, defaults to NodePort. - type: string - ingress: - description: The ingress based HTTP01 challenge solver will solve challenges by creating or modifying Ingress resources in order to route requests for '/.well-known/acme-challenge/XYZ' to 'challenge solver' pods that are provisioned by cert-manager for each Challenge to be completed. - type: object - properties: - class: - description: This field configures the annotation `kubernetes.io/ingress.class` when creating Ingress resources to solve ACME challenges that use this challenge solver. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - ingressClassName: - description: This field configures the field `ingressClassName` on the created Ingress resources used to solve ACME challenges that use this challenge solver. This is the recommended way of configuring the ingress class. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - ingressTemplate: - description: Optional ingress template used to configure the ACME challenge solver ingress used for HTTP01 challenges. - type: object - properties: - metadata: - description: ObjectMeta overrides for the ingress used to solve HTTP01 challenges. Only the 'labels' and 'annotations' fields may be set. If labels or annotations overlap with in-built values, the values here will override the in-built values. - type: object - properties: - annotations: - description: Annotations that should be added to the created ACME HTTP01 solver ingress. - type: object - additionalProperties: - type: string - labels: - description: Labels that should be added to the created ACME HTTP01 solver ingress. - type: object - additionalProperties: - type: string - name: - description: The name of the ingress resource that should have ACME challenge solving routes inserted into it in order to solve HTTP01 challenges. This is typically used in conjunction with ingress controllers like ingress-gce, which maintains a 1:1 mapping between external IPs and ingress resources. Only one of `class`, `name` or `ingressClassName` may be specified. - type: string - podTemplate: - description: Optional pod template used to configure the ACME challenge solver pods used for HTTP01 challenges. - type: object - properties: - metadata: - description: ObjectMeta overrides for the pod used to solve HTTP01 challenges. Only the 'labels' and 'annotations' fields may be set. If labels or annotations overlap with in-built values, the values here will override the in-built values. - type: object - properties: - annotations: - description: Annotations that should be added to the create ACME HTTP01 solver pods. - type: object - additionalProperties: - type: string - labels: - description: Labels that should be added to the created ACME HTTP01 solver pods. - type: object - additionalProperties: - type: string - spec: - description: PodSpec defines overrides for the HTTP01 challenge solver pod. Check ACMEChallengeSolverHTTP01IngressPodSpec to find out currently supported fields. All other fields will be ignored. - type: object - properties: - affinity: - description: If specified, the pod's scheduling constraints - type: object - properties: - nodeAffinity: - description: Describes node affinity scheduling rules for the pod. - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred. - type: array - items: - description: An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op). - type: object - required: - - preference - - weight - properties: - preference: - description: A node selector term, associated with the corresponding weight. - type: object - properties: - matchExpressions: - description: A list of node selector requirements by node's labels. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchFields: - description: A list of node selector requirements by node's fields. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - x-kubernetes-map-type: atomic - weight: - description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. - type: object - required: - - nodeSelectorTerms - properties: - nodeSelectorTerms: - description: Required. A list of node selector terms. The terms are ORed. - type: array - items: - description: A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm. - type: object - properties: - matchExpressions: - description: A list of node selector requirements by node's labels. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchFields: - description: A list of node selector requirements by node's fields. - type: array - items: - description: A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: The label key that the selector applies to. - type: string - operator: - description: Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. - type: string - values: - description: An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. - type: array - items: - type: string - x-kubernetes-map-type: atomic - x-kubernetes-map-type: atomic - podAffinity: - description: Describes pod affinity scheduling rules (e.g. co-locate this pod in the same node, zone, etc. as some other pod(s)). - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. - type: array - items: - description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) - type: object - required: - - podAffinityTerm - - weight - properties: - podAffinityTerm: - description: Required. A pod affinity term, associated with the corresponding weight. - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - weight: - description: weight associated with matching the corresponding podAffinityTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. - type: array - items: - description: Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is running - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - podAntiAffinity: - description: Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod in the same node, zone, etc. as some other pod(s)). - type: object - properties: - preferredDuringSchedulingIgnoredDuringExecution: - description: The scheduler will prefer to schedule pods to nodes that satisfy the anti-affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. - type: array - items: - description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) - type: object - required: - - podAffinityTerm - - weight - properties: - podAffinityTerm: - description: Required. A pod affinity term, associated with the corresponding weight. - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - weight: - description: weight associated with matching the corresponding podAffinityTerm, in the range 1-100. - type: integer - format: int32 - requiredDuringSchedulingIgnoredDuringExecution: - description: If the anti-affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the anti-affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to a pod label update), the system may or may not try to eventually evict the pod from its node. When there are multiple elements, the lists of nodes corresponding to each podAffinityTerm are intersected, i.e. all terms must be satisfied. - type: array - items: - description: Defines a set of pods (namely those matching the labelSelector relative to the given namespace(s)) that this pod should be co-located (affinity) or not co-located (anti-affinity) with, where co-located is defined as running on a node whose value of the label with key matches that of any node on which a pod of the set of pods is running - type: object - required: - - topologyKey - properties: - labelSelector: - description: A label query over a set of resources, in this case pods. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaceSelector: - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. - type: object - properties: - matchExpressions: - description: matchExpressions is a list of label selector requirements. The requirements are ANDed. - type: array - items: - description: A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values. - type: object - required: - - key - - operator - properties: - key: - description: key is the label key that the selector applies to. - type: string - operator: - description: operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist. - type: string - values: - description: values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch. - type: array - items: - type: string - matchLabels: - description: matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. - type: object - additionalProperties: - type: string - x-kubernetes-map-type: atomic - namespaces: - description: namespaces specifies a static list of namespace names that the term applies to. The term is applied to the union of the namespaces listed in this field and the ones selected by namespaceSelector. null or empty namespaces list and null namespaceSelector means "this pod's namespace". - type: array - items: - type: string - topologyKey: - description: This pod should be co-located (affinity) or not co-located (anti-affinity) with the pods matching the labelSelector in the specified namespaces, where co-located is defined as running on a node whose value of the label with key topologyKey matches that of any node on which any of the selected pods is running. Empty topologyKey is not allowed. - type: string - imagePullSecrets: - description: If specified, the pod's imagePullSecrets - type: array - items: - description: LocalObjectReference contains enough information to let you locate the referenced object inside the same namespace. - type: object - properties: - name: - description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?' - type: string - x-kubernetes-map-type: atomic - nodeSelector: - description: 'NodeSelector is a selector which must be true for the pod to fit on a node. Selector which must match a node''s labels for the pod to be scheduled on that node. More info: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/' - type: object - additionalProperties: - type: string - priorityClassName: - description: If specified, the pod's priorityClassName. - type: string - serviceAccountName: - description: If specified, the pod's service account - type: string - tolerations: - description: If specified, the pod's tolerations. - type: array - items: - description: The pod this Toleration is attached to tolerates any taint that matches the triple using the matching operator . - type: object - properties: - effect: - description: Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. - type: string - key: - description: Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. - type: string - operator: - description: Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. - type: string - tolerationSeconds: - description: TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. - type: integer - format: int64 - value: - description: Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string. - type: string - serviceType: - description: Optional service type for Kubernetes solver service. Supported values are NodePort or ClusterIP. If unset, defaults to NodePort. - type: string - selector: - description: Selector selects a set of DNSNames on the Certificate resource that should be solved using this challenge solver. If not specified, the solver will be treated as the 'default' solver with the lowest priority, i.e. if any other solver has a more specific match, it will be used instead. - type: object - properties: - dnsNames: - description: List of DNSNames that this solver will be used to solve. If specified and a match is found, a dnsNames selector will take precedence over a dnsZones selector. If multiple solvers match with the same dnsNames value, the solver with the most matching labels in matchLabels will be selected. If neither has more matches, the solver defined earlier in the list will be selected. - type: array - items: - type: string - dnsZones: - description: List of DNSZones that this solver will be used to solve. The most specific DNS zone match specified here will take precedence over other DNS zone matches, so a solver specifying sys.example.com will be selected over one specifying example.com for the domain www.sys.example.com. If multiple solvers match with the same dnsZones value, the solver with the most matching labels in matchLabels will be selected. If neither has more matches, the solver defined earlier in the list will be selected. - type: array - items: - type: string - matchLabels: - description: A label selector that is used to refine the set of certificate's that this challenge solver will apply to. - type: object - additionalProperties: - type: string - ca: - description: CA configures this issuer to sign certificates using a signing CA keypair stored in a Secret resource. This is used to build internal PKIs that are managed by cert-manager. - type: object - required: - - secretName - properties: - crlDistributionPoints: - description: The CRL distribution points is an X.509 v3 certificate extension which identifies the location of the CRL from which the revocation of this certificate can be checked. If not set, certificates will be issued without distribution points set. - type: array - items: - type: string - ocspServers: - description: The OCSP server list is an X.509 v3 extension that defines a list of URLs of OCSP responders. The OCSP responders can be queried for the revocation status of an issued certificate. If not set, the certificate will be issued with no OCSP servers set. For example, an OCSP server URL could be "http://ocsp.int-x3.letsencrypt.org". - type: array - items: - type: string - secretName: - description: SecretName is the name of the secret used to sign Certificates issued by this Issuer. - type: string - selfSigned: - description: SelfSigned configures this issuer to 'self sign' certificates using the private key used to create the CertificateRequest object. - type: object - properties: - crlDistributionPoints: - description: The CRL distribution points is an X.509 v3 certificate extension which identifies the location of the CRL from which the revocation of this certificate can be checked. If not set certificate will be issued without CDP. Values are strings. - type: array - items: - type: string - vault: - description: Vault configures this issuer to sign certificates using a HashiCorp Vault PKI backend. - type: object - required: - - auth - - path - - server - properties: - auth: - description: Auth configures how cert-manager authenticates with the Vault server. - type: object - properties: - appRole: - description: AppRole authenticates with Vault using the App Role auth mechanism, with the role and secret stored in a Kubernetes Secret resource. - type: object - required: - - path - - roleId - - secretRef - properties: - path: - description: 'Path where the App Role authentication backend is mounted in Vault, e.g: "approle"' - type: string - roleId: - description: RoleID configured in the App Role authentication backend when setting up the authentication backend in Vault. - type: string - secretRef: - description: Reference to a key in a Secret that contains the App Role secret used to authenticate with Vault. The `key` field must be specified and denotes which entry within the Secret resource is used as the app role secret. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - kubernetes: - description: Kubernetes authenticates with Vault by passing the ServiceAccount token stored in the named Secret resource to the Vault server. - type: object - required: - - role - properties: - mountPath: - description: The Vault mountPath here is the mount path to use when authenticating with Vault. For example, setting a value to `/v1/auth/foo`, will use the path `/v1/auth/foo/login` to authenticate with Vault. If unspecified, the default value "/v1/auth/kubernetes" will be used. - type: string - role: - description: A required field containing the Vault Role to assume. A Role binds a Kubernetes ServiceAccount with a set of Vault policies. - type: string - secretRef: - description: The required Secret field containing a Kubernetes ServiceAccount JWT used for authenticating with Vault. Use of 'ambient credentials' is not supported. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - serviceAccountRef: - description: A reference to a service account that will be used to request a bound token (also known as "projected token"). Compared to using "secretRef", using this field means that you don't rely on statically bound tokens. To use this field, you must configure an RBAC rule to let cert-manager request a token. - type: object - required: - - name - properties: - name: - description: Name of the ServiceAccount used to request a token. - type: string - tokenSecretRef: - description: TokenSecretRef authenticates with Vault by presenting a token. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - caBundle: - description: Base64-encoded bundle of PEM CAs which will be used to validate the certificate chain presented by Vault. Only used if using HTTPS to connect to Vault and ignored for HTTP connections. Mutually exclusive with CABundleSecretRef. If neither CABundle nor CABundleSecretRef are defined, the certificate bundle in the cert-manager controller container is used to validate the TLS connection. - type: string - format: byte - caBundleSecretRef: - description: Reference to a Secret containing a bundle of PEM-encoded CAs to use when verifying the certificate chain presented by Vault when using HTTPS. Mutually exclusive with CABundle. If neither CABundle nor CABundleSecretRef are defined, the certificate bundle in the cert-manager controller container is used to validate the TLS connection. If no key for the Secret is specified, cert-manager will default to 'ca.crt'. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - namespace: - description: 'Name of the vault namespace. Namespaces is a set of features within Vault Enterprise that allows Vault environments to support Secure Multi-tenancy. e.g: "ns1" More about namespaces can be found here https://www.vaultproject.io/docs/enterprise/namespaces' - type: string - path: - description: 'Path is the mount path of the Vault PKI backend''s `sign` endpoint, e.g: "my_pki_mount/sign/my-role-name".' - type: string - server: - description: 'Server is the connection address for the Vault server, e.g: "https://vault.example.com:8200".' - type: string - venafi: - description: Venafi configures this issuer to sign certificates using a Venafi TPP or Venafi Cloud policy zone. - type: object - required: - - zone - properties: - cloud: - description: Cloud specifies the Venafi cloud configuration settings. Only one of TPP or Cloud may be specified. - type: object - required: - - apiTokenSecretRef - properties: - apiTokenSecretRef: - description: APITokenSecretRef is a secret key selector for the Venafi Cloud API token. - type: object - required: - - name - properties: - key: - description: The key of the entry in the Secret resource's `data` field to be used. Some instances of this field may be defaulted, in others it may be required. - type: string - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - url: - description: URL is the base URL for Venafi Cloud. Defaults to "https://api.venafi.cloud/v1". - type: string - tpp: - description: TPP specifies Trust Protection Platform configuration settings. Only one of TPP or Cloud may be specified. - type: object - required: - - credentialsRef - - url - properties: - caBundle: - description: Base64-encoded bundle of PEM CAs which will be used to validate the certificate chain presented by the TPP server. Only used if using HTTPS; ignored for HTTP. If undefined, the certificate bundle in the cert-manager controller container is used to validate the chain. - type: string - format: byte - credentialsRef: - description: CredentialsRef is a reference to a Secret containing the username and password for the TPP server. The secret must contain two keys, 'username' and 'password'. - type: object - required: - - name - properties: - name: - description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names' - type: string - url: - description: 'URL is the base URL for the vedsdk endpoint of the Venafi TPP instance, for example: "https://tpp.example.com/vedsdk".' - type: string - zone: - description: Zone is the Venafi Policy Zone to use for this issuer. All requests made to the Venafi platform will be restricted by the named zone policy. This field is required. - type: string - status: - description: Status of the Issuer. This is set and managed automatically. - type: object - properties: - acme: - description: ACME specific status options. This field should only be set if the Issuer is configured to use an ACME server to issue certificates. - type: object - properties: - lastPrivateKeyHash: - description: LastPrivateKeyHash is a hash of the private key associated with the latest registered ACME account, in order to track changes made to registered account associated with the Issuer - type: string - lastRegisteredEmail: - description: LastRegisteredEmail is the email associated with the latest registered ACME account, in order to track changes made to registered account associated with the Issuer - type: string - uri: - description: URI is the unique account identifier, which can also be used to retrieve account details from the CA - type: string - conditions: - description: List of status conditions to indicate the status of a CertificateRequest. Known condition types are `Ready`. - type: array - items: - description: IssuerCondition contains condition information for an Issuer. - type: object - required: - - status - - type - properties: - lastTransitionTime: - description: LastTransitionTime is the timestamp corresponding to the last status change of this condition. - type: string - format: date-time - message: - description: Message is a human readable description of the details of the last transition, complementing reason. - type: string - observedGeneration: - description: If set, this represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.condition[x].observedGeneration is 9, the condition is out of date with respect to the current state of the Issuer. - type: integer - format: int64 - reason: - description: Reason is a brief machine readable explanation for the condition's last transition. - type: string - status: - description: Status of the condition, one of (`True`, `False`, `Unknown`). - type: string - enum: - - "True" - - "False" - - Unknown - type: - description: Type of the condition, known values are (`Ready`). - type: string - x-kubernetes-list-map-keys: - - type - x-kubernetes-list-type: map - served: true - storage: true ---- -# Source: cert-manager/templates/crds.yaml -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: orders.acme.cert-manager.io - labels: - app: 'cert-manager' - app.kubernetes.io/name: 'cert-manager' - app.kubernetes.io/instance: 'cert-manager' - # Generated labels - app.kubernetes.io/version: "v1.12.2" -spec: - group: acme.cert-manager.io - names: - kind: Order - listKind: OrderList - plural: orders - singular: order - categories: - - cert-manager - - cert-manager-acme - scope: Namespaced - versions: - - name: v1 - subresources: - status: {} - additionalPrinterColumns: - - jsonPath: .status.state - name: State - type: string - - jsonPath: .spec.issuerRef.name - name: Issuer - priority: 1 - type: string - - jsonPath: .status.reason - name: Reason - priority: 1 - type: string - - jsonPath: .metadata.creationTimestamp - description: CreationTimestamp is a timestamp representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations. Clients may not set this value. It is represented in RFC3339 form and is in UTC. - name: Age - type: date - schema: - openAPIV3Schema: - description: Order is a type to represent an Order with an ACME server - type: object - required: - - metadata - - spec - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - type: object - required: - - issuerRef - - request - properties: - commonName: - description: CommonName is the common name as specified on the DER encoded CSR. If specified, this value must also be present in `dnsNames` or `ipAddresses`. This field must match the corresponding field on the DER encoded CSR. - type: string - dnsNames: - description: DNSNames is a list of DNS names that should be included as part of the Order validation process. This field must match the corresponding field on the DER encoded CSR. - type: array - items: - type: string - duration: - description: Duration is the duration for the not after date for the requested certificate. this is set on order creation as pe the ACME spec. - type: string - ipAddresses: - description: IPAddresses is a list of IP addresses that should be included as part of the Order validation process. This field must match the corresponding field on the DER encoded CSR. - type: array - items: - type: string - issuerRef: - description: IssuerRef references a properly configured ACME-type Issuer which should be used to create this Order. If the Issuer does not exist, processing will be retried. If the Issuer is not an 'ACME' Issuer, an error will be returned and the Order will be marked as failed. - type: object - required: - - name - properties: - group: - description: Group of the resource being referred to. - type: string - kind: - description: Kind of the resource being referred to. - type: string - name: - description: Name of the resource being referred to. - type: string - request: - description: Certificate signing request bytes in DER encoding. This will be used when finalizing the order. This field must be set on the order. - type: string - format: byte - status: - type: object - properties: - authorizations: - description: Authorizations contains data returned from the ACME server on what authorizations must be completed in order to validate the DNS names specified on the Order. - type: array - items: - description: ACMEAuthorization contains data returned from the ACME server on an authorization that must be completed in order validate a DNS name on an ACME Order resource. - type: object - required: - - url - properties: - challenges: - description: Challenges specifies the challenge types offered by the ACME server. One of these challenge types will be selected when validating the DNS name and an appropriate Challenge resource will be created to perform the ACME challenge process. - type: array - items: - description: Challenge specifies a challenge offered by the ACME server for an Order. An appropriate Challenge resource can be created to perform the ACME challenge process. - type: object - required: - - token - - type - - url - properties: - token: - description: Token is the token that must be presented for this challenge. This is used to compute the 'key' that must also be presented. - type: string - type: - description: Type is the type of challenge being offered, e.g. 'http-01', 'dns-01', 'tls-sni-01', etc. This is the raw value retrieved from the ACME server. Only 'http-01' and 'dns-01' are supported by cert-manager, other values will be ignored. - type: string - url: - description: URL is the URL of this challenge. It can be used to retrieve additional metadata about the Challenge from the ACME server. - type: string - identifier: - description: Identifier is the DNS name to be validated as part of this authorization - type: string - initialState: - description: InitialState is the initial state of the ACME authorization when first fetched from the ACME server. If an Authorization is already 'valid', the Order controller will not create a Challenge resource for the authorization. This will occur when working with an ACME server that enables 'authz reuse' (such as Let's Encrypt's production endpoint). If not set and 'identifier' is set, the state is assumed to be pending and a Challenge will be created. - type: string - enum: - - valid - - ready - - pending - - processing - - invalid - - expired - - errored - url: - description: URL is the URL of the Authorization that must be completed - type: string - wildcard: - description: Wildcard will be true if this authorization is for a wildcard DNS name. If this is true, the identifier will be the *non-wildcard* version of the DNS name. For example, if '*.example.com' is the DNS name being validated, this field will be 'true' and the 'identifier' field will be 'example.com'. - type: boolean - certificate: - description: Certificate is a copy of the PEM encoded certificate for this Order. This field will be populated after the order has been successfully finalized with the ACME server, and the order has transitioned to the 'valid' state. - type: string - format: byte - failureTime: - description: FailureTime stores the time that this order failed. This is used to influence garbage collection and back-off. - type: string - format: date-time - finalizeURL: - description: FinalizeURL of the Order. This is used to obtain certificates for this order once it has been completed. - type: string - reason: - description: Reason optionally provides more information about a why the order is in the current state. - type: string - state: - description: State contains the current state of this Order resource. States 'success' and 'expired' are 'final' - type: string - enum: - - valid - - ready - - pending - - processing - - invalid - - expired - - errored - url: - description: URL of the Order. This will initially be empty when the resource is first created. The Order controller will populate this field when the Order is first processed. This field will be immutable after it is initially set. - type: string - served: true - storage: true diff --git a/packages/cert-manager/path-routing/cluster-secret-store.yaml b/packages/cert-manager/path-routing/cluster-secret-store.yaml new file mode 100644 index 0000000..3556263 --- /dev/null +++ b/packages/cert-manager/path-routing/cluster-secret-store.yaml @@ -0,0 +1,60 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: eso-store + namespace: cert-manager +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + namespace: cert-manager + name: eso-store +rules: + - apiGroups: [""] + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - authorization.k8s.io + resources: + - selfsubjectrulesreviews + verbs: + - create +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: eso-store + namespace: cert-manager +subjects: + - kind: ServiceAccount + name: eso-store + namespace: cert-manager +roleRef: + kind: Role + name: eso-store + apiGroup: rbac.authorization.k8s.io +--- +apiVersion: external-secrets.io/v1 +kind: ClusterSecretStore +metadata: + name: default-cert + annotations: + # argocd.argoproj.io/sync-wave: "60" +spec: + provider: + kubernetes: + remoteNamespace: cert-manager + server: + caProvider: + type: ConfigMap + name: kube-root-ca.crt + namespace: cert-manager + key: ca.crt + auth: + serviceAccount: + name: eso-store + namespace: cert-manager \ No newline at end of file diff --git a/packages/cert-manager/values.yaml b/packages/cert-manager/values.yaml new file mode 100644 index 0000000..ef27fd7 --- /dev/null +++ b/packages/cert-manager/values.yaml @@ -0,0 +1,38 @@ +installCRDs: true +global: + leaderElection: + namespace: cert-manager +extraObjects: + - | + apiVersion: cert-manager.io/v1 + kind: ClusterIssuer + metadata: + name: letsencrypt-prod + spec: + acme: + server: https://acme-v02.api.letsencrypt.org/directory + privateKeySecretRef: + name: letsencrypt-prod + solvers: + - http01: + ingress: + ingressClassName: nginx + - | + {{ if eq .Values.global.pathRouting "true"}} + # This resource is to create default certificate of the base domain + apiVersion: cert-manager.io/v1 + kind: Certificate + metadata: + name: default-cert + namespace: cert-manager + annotations: + argocd.argoproj.io/sync-wave: "1" + spec: + secretName: default-tls-prod + issuerRef: + name: letsencrypt-prod + kind: ClusterIssuer + dnsNames: + - {{ .Values.global.domainName }} + {{ end }} + \ No newline at end of file diff --git a/packages/crossplane-aws-upbound/values.yaml b/packages/crossplane-aws-upbound/values.yaml new file mode 100644 index 0000000..9292e4d --- /dev/null +++ b/packages/crossplane-aws-upbound/values.yaml @@ -0,0 +1,52 @@ +# Ref: https://github.com/gitops-bridge-dev/gitops-bridge-helm-charts/tree/main/charts +global: + enabled_aws_upbound: true + +deploymentRuntimeConfig: + enabled: true + metadata: + name: "upbound-aws-runtime-config" + role_arn: "" + annotations: {} + labels: {} + spec: + deploymentTemplate: + spec: + selector: {} + template: + spec: + containers: + - name: package-runtime + args: + - --debug + securityContext: + fsGroup: 2000 + serviceAccountTemplate: + metadata: + annotations: {} + labels: {} + name: provider-aws + +provider: + enabled: true + metadata: + annotations: {} + labels: {} + package: + registry: xpkg.crossplane.io/crossplane-contrib + version: v1.23.0 + +providerConfig: + enabled: true + default: true + metadata: + name: "aws-provider-config" + annotations: {} + labels: {} + spec: + credentials: + source: PodIdentity + +providers: +- dynamodb +- s3 diff --git a/packages/crossplane-compositions/kustomization.yaml b/packages/crossplane-compositions/kustomization.yaml new file mode 100644 index 0000000..36574aa --- /dev/null +++ b/packages/crossplane-compositions/kustomization.yaml @@ -0,0 +1,7 @@ +namespace: crossplane-system +resources: + - s3 + +commonAnnotations: + argocd.argoproj.io/compare-options: ServerSideDiff=true + \ No newline at end of file diff --git a/packages/crossplane-compositions/s3/definition.yaml b/packages/crossplane-compositions/s3/definition.yaml new file mode 100644 index 0000000..12daa7f --- /dev/null +++ b/packages/crossplane-compositions/s3/definition.yaml @@ -0,0 +1,63 @@ +# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apiextensions.crossplane.io/v1 +kind: CompositeResourceDefinition +metadata: + name: xobjectstorages.awsblueprints.io +spec: + claimNames: + kind: ObjectStorage + plural: objectstorages + group: awsblueprints.io + names: + kind: XObjectStorage + plural: xobjectstorages + versions: + - name: v1alpha1 + served: true + referenceable: true + schema: + openAPIV3Schema: + properties: + spec: + description: ObjectStorageSpec defines the desired state of ObjectStorage + properties: + resourceConfig: + description: ResourceConfig defines general properties of this AWS + resource. + properties: + deletionPolicy: + description: Defaults to Delete + enum: + - Delete + - Orphan + type: string + name: + description: Set the name of this resource in AWS to the value + provided by this field. + type: string + providerConfigName: + type: string + region: + type: string + tags: + additionalProperties: + type: string + type: object + required: + - providerConfigName + - region + type: object + required: + - resourceConfig + type: object + status: + description: ObjectStorageStatus defines the observed state of ObjectStorage + properties: + bucketName: + type: string + bucketArn: + type: string + type: object + type: object diff --git a/packages/crossplane-compositions/s3/general-purpose.yaml b/packages/crossplane-compositions/s3/general-purpose.yaml new file mode 100644 index 0000000..c1b40ad --- /dev/null +++ b/packages/crossplane-compositions/s3/general-purpose.yaml @@ -0,0 +1,129 @@ +# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apiextensions.crossplane.io/v1 +kind: Composition +metadata: + name: s3bucket.awsblueprints.io + labels: + awsblueprints.io/provider: aws + awsblueprints.io/environment: dev + s3.awsblueprints.io/configuration: standard +spec: + writeConnectionSecretsToNamespace: crossplane-system + compositeTypeRef: + apiVersion: awsblueprints.io/v1alpha1 + kind: XObjectStorage + patchSets: + - name: common-fields + patches: + - type: FromCompositeFieldPath + fromFieldPath: spec.resourceConfig.deletionPolicy + toFieldPath: spec.deletionPolicy + - type: FromCompositeFieldPath + fromFieldPath: spec.resourceConfig.region + toFieldPath: spec.forProvider.region + - type: FromCompositeFieldPath + fromFieldPath: spec.resourceConfig.providerConfigName + toFieldPath: spec.providerConfigRef.name + - type: FromCompositeFieldPath + fromFieldPath: spec.resourceConfig.tags + toFieldPath: spec.forProvider.tags + policy: + mergeOptions: + keepMapValues: true + - type: FromCompositeFieldPath + fromFieldPath: spec.resourceConfig.name + toFieldPath: metadata.annotations[crossplane.io/external-name] + - fromFieldPath: "metadata.name" + toFieldPath: "metadata.name" + transforms: + - type: string + string: + fmt: "bucket-%s" + type: Format + type: FromCompositeFieldPath + resources: + - name: s3-bucket + connectionDetails: + - type: FromFieldPath + name: bucketName + fromFieldPath: status.atProvider.id + base: + apiVersion: s3.aws.upbound.io/v1beta1 + kind: Bucket + spec: + deletionPolicy: Delete + forProvider: + region: us-west-2 + forceDestroy: true # be careful with this + writeConnectionSecretToRef: + namespace: crossplane-system + patches: + - type: PatchSet + patchSetName: common-fields + - type: ToCompositeFieldPath + fromFieldPath: status.atProvider.id + toFieldPath: status.bucketName + - type: ToCompositeFieldPath + fromFieldPath: status.atProvider.id + toFieldPath: status.bucketArn + transforms: + - type: string + string: + fmt: "arn:aws:s3:::%s" + type: Format + readinessChecks: + - matchCondition: + status: 'True' + type: Ready + type: MatchCondition + - name: s3-blockpublicaccess + base: + apiVersion: s3.aws.upbound.io/v1beta1 + kind: BucketPublicAccessBlock + spec: + deletionPolicy: Delete + forProvider: + bucketSelector: + matchControllerRef: true + blockPublicAcls: true + blockPublicPolicy: true + ignorePublicAcls: true + restrictPublicBuckets: true + patches: + - fromFieldPath: spec.resourceConfig.region + toFieldPath: spec.forProvider.region + type: FromCompositeFieldPath + - fromFieldPath: spec.resourceConfig.providerConfigName + toFieldPath: spec.providerConfigRef.name + type: FromCompositeFieldPath + readinessChecks: + - matchCondition: + status: 'True' + type: Ready + type: MatchCondition + - name: s3-serversideencryption + base: + apiVersion: s3.aws.upbound.io/v1beta1 + kind: BucketServerSideEncryptionConfiguration + spec: + deletionPolicy: Delete + forProvider: + bucketSelector: + matchControllerRef: true + rule: + - applyServerSideEncryptionByDefault: + - sseAlgorithm: AES256 + patches: + - fromFieldPath: spec.resourceConfig.providerConfigName + toFieldPath: spec.providerConfigRef.name + type: FromCompositeFieldPath + - fromFieldPath: spec.resourceConfig.region + toFieldPath: spec.forProvider.region + type: FromCompositeFieldPath + readinessChecks: + - matchCondition: + status: 'True' + type: Ready + type: MatchCondition diff --git a/packages/crossplane-compositions/s3/kustomization.yaml b/packages/crossplane-compositions/s3/kustomization.yaml new file mode 100644 index 0000000..2f9fb95 --- /dev/null +++ b/packages/crossplane-compositions/s3/kustomization.yaml @@ -0,0 +1,3 @@ +resources: + - definition.yaml + - general-purpose.yaml \ No newline at end of file diff --git a/packages/crossplane/dev/values.yaml b/packages/crossplane/dev/values.yaml deleted file mode 100644 index 28a8049..0000000 --- a/packages/crossplane/dev/values.yaml +++ /dev/null @@ -1,3 +0,0 @@ -args: - - --debug - - --enable-environment-configs diff --git a/packages/crossplane/values.yaml b/packages/crossplane/values.yaml new file mode 100644 index 0000000..fe04663 --- /dev/null +++ b/packages/crossplane/values.yaml @@ -0,0 +1,2 @@ +args: + - --debug diff --git a/packages/external-dns/dev/values.yaml b/packages/external-dns/values.yaml similarity index 100% rename from packages/external-dns/dev/values.yaml rename to packages/external-dns/values.yaml diff --git a/packages/external-secrets/manifests/cluster-secret-store.yaml b/packages/external-secrets/manifests/cluster-secret-store.yaml new file mode 100644 index 0000000..ea97ec2 --- /dev/null +++ b/packages/external-secrets/manifests/cluster-secret-store.yaml @@ -0,0 +1,9 @@ +apiVersion: external-secrets.io/v1 +kind: ClusterSecretStore +metadata: + name: aws-secretsmanager +spec: + provider: + aws: + service: SecretsManager + region: us-west-2 \ No newline at end of file diff --git a/packages/external-secrets/dev/values.yaml b/packages/external-secrets/values.yaml similarity index 100% rename from packages/external-secrets/dev/values.yaml rename to packages/external-secrets/values.yaml diff --git a/packages/ingress-nginx/dev/values.yaml b/packages/ingress-nginx/dev/values.yaml deleted file mode 100644 index 1d9cb8c..0000000 --- a/packages/ingress-nginx/dev/values.yaml +++ /dev/null @@ -1,10 +0,0 @@ -controller: - config: - hsts: "false" - service: - type: LoadBalancer - externalTrafficPolicy: Local - annotations: - service.beta.kubernetes.io/azure-load-balancer-health-probe-request-path: /healthz - targetPorts: - https: "https" diff --git a/packages/ingress-nginx/values.yaml b/packages/ingress-nginx/values.yaml new file mode 100644 index 0000000..95ea2e4 --- /dev/null +++ b/packages/ingress-nginx/values.yaml @@ -0,0 +1,15 @@ +controller: + config: + hsts: 'false' + service: + type: LoadBalancer + annotations: + argocd.argoproj.io/sync-wave: '-1' # Adding to ensure service is created before actual deployment + service.beta.kubernetes.io/aws-load-balancer-internal: 'false' + service.beta.kubernetes.io/aws-load-balancer-name: cnoe + service.beta.kubernetes.io/aws-load-balancer-type: external + service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing + service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip + loadBalancerClass: service.k8s.aws/nlb + targetPorts: + https: 'https' diff --git a/packages/keycloak/base/install.yaml b/packages/keycloak/base/install.yaml deleted file mode 100644 index 8d7ec4f..0000000 --- a/packages/keycloak/base/install.yaml +++ /dev/null @@ -1,49 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: keycloak - labels: - app: keycloak -spec: - ports: - - name: http - port: 8080 - targetPort: 8080 - selector: - app: keycloak - type: LoadBalancer ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: keycloak - labels: - app: keycloak -spec: - replicas: 1 - selector: - matchLabels: - app: keycloak - template: - metadata: - labels: - app: keycloak - spec: - containers: - - name: keycloak - image: quay.io/keycloak/keycloak:22.0.0 - args: ["start-dev"] - env: - - name: KEYCLOAK_ADMIN - value: "admin" - - name: KEYCLOAK_ADMIN_PASSWORD - value: "admin" - - name: KC_PROXY - value: "edge" - ports: - - name: http - containerPort: 8080 - readinessProbe: - httpGet: - path: /realms/master - port: 8080 diff --git a/packages/keycloak/base/kustomization.yaml b/packages/keycloak/base/kustomization.yaml deleted file mode 100644 index 4283b92..0000000 --- a/packages/keycloak/base/kustomization.yaml +++ /dev/null @@ -1,2 +0,0 @@ -resources: - - install.yaml \ No newline at end of file diff --git a/packages/keycloak/dev-external-secrets/kustomization.yaml b/packages/keycloak/dev-external-secrets/kustomization.yaml deleted file mode 100644 index f2c8a55..0000000 --- a/packages/keycloak/dev-external-secrets/kustomization.yaml +++ /dev/null @@ -1,3 +0,0 @@ -resources: - - ../dev - - external-secrets.yaml diff --git a/packages/keycloak/dev/cm-config.yaml b/packages/keycloak/dev/cm-config.yaml deleted file mode 100644 index 902c80d..0000000 --- a/packages/keycloak/dev/cm-config.yaml +++ /dev/null @@ -1,26 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - name: keycloak-config -data: - keycloak.conf: | - # Database - # The database vendor. - db=postgres - - # The username of the database user. - db-username=keycloak - db-url-host=postgresql.keycloak - - # Observability - - # If the server should expose healthcheck endpoints. - #health-enabled=true - - # If the server should expose metrics endpoints. - #metrics-enabled=true - - # The proxy address forwarding mode if the server is behind a reverse proxy. - proxy=edge - - hostname-strict-backchannel=true diff --git a/packages/keycloak/dev/kustomization.yaml b/packages/keycloak/dev/kustomization.yaml deleted file mode 100644 index 7b48966..0000000 --- a/packages/keycloak/dev/kustomization.yaml +++ /dev/null @@ -1,19 +0,0 @@ -resources: - - ../base - - ns.yaml - - cm-config.yaml - - postgres.yaml -namespace: keycloak -patchesStrategicMerge: - - patches/service.yaml - - patches/deployment.yaml -patchesJson6902: - - target: - version: v1 - kind: Deployment - group: apps - name: keycloak - namespace: keycloak - patch: |- - - op: remove - path: /spec/template/spec/containers/0/env/2 diff --git a/packages/keycloak/dev/ns.yaml b/packages/keycloak/dev/ns.yaml deleted file mode 100644 index 80e7888..0000000 --- a/packages/keycloak/dev/ns.yaml +++ /dev/null @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: keycloak diff --git a/packages/keycloak/dev/patches/deployment.yaml b/packages/keycloak/dev/patches/deployment.yaml deleted file mode 100644 index 8f07c85..0000000 --- a/packages/keycloak/dev/patches/deployment.yaml +++ /dev/null @@ -1,39 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: keycloak - labels: - app: keycloak -spec: - replicas: 1 - selector: - matchLabels: - app: keycloak - template: - metadata: - labels: - app: keycloak - spec: - volumes: - - name: keycloak-config - configMap: - name: keycloak-config - containers: - - name: keycloak - env: - - name: KEYCLOAK_ADMIN - value: 'cnoe-admin' - - name: KC_DB_PASSWORD - valueFrom: - secretKeyRef: - name: postgresql-config - key: POSTGRES_PASSWORD - envFrom: - - secretRef: - name: keycloak-config - args: - - start - volumeMounts: - - name: keycloak-config - mountPath: "/opt/keycloak/conf" - readOnly: true diff --git a/packages/keycloak/dev/patches/service.yaml b/packages/keycloak/dev/patches/service.yaml deleted file mode 100644 index df374f6..0000000 --- a/packages/keycloak/dev/patches/service.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: keycloak -spec: - type: ClusterIP diff --git a/packages/keycloak/manifests/external-secrets.yaml b/packages/keycloak/manifests/external-secrets.yaml new file mode 100644 index 0000000..5cc15b7 --- /dev/null +++ b/packages/keycloak/manifests/external-secrets.yaml @@ -0,0 +1,95 @@ +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: keycloak-config + namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "-10" +spec: + refreshInterval: "0" + secretStoreRef: + name: aws-secretsmanager + kind: ClusterSecretStore + target: + name: keycloak-config + template: + data: + # ARGO_CD_SESSION_URL: "http://argocd-server.argocd.svc.cluster.local:443{{ if .pathRouting }}/argocd{{ end }}/api/v1/session" + KEYCLOAK_URL: "http://keycloak.keycloak.svc.cluster.local{{ if .pathRouting }}/keycloak{{ end }}" + POSTGRES_PASSWORD: "{{ .postgresPassword }}" + KEYCLOAK_ADMIN_PASSWORD: "{{ .keycloakAdminPassword }}" + USER1_PASSWORD: "{{ .keycloakUserPassword }}" + ARGO_CD_URL: "{{ if .pathRouting }}{{ .domainName }}/argocd{{ else }}argocd.{{ .domainName }}{{ end }}" + BACKSTAGE_URL: "{{ if .pathRouting }}{{ .domainName }}{{ else }}backstage.{{ .domainName }}{{ end }}" + ARGO_WORKFLOW_URL: "{{ if .pathRouting }}{{ .domainName }}/argo-workflows{{ else }}argo-workflows.{{ .domainName }}{{ end }}" + dataFrom: + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "postgres-keycloak-password" + rewrite: + - transform: + template: "postgresPassword" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "postgres-keycloak-password" + rewrite: + - transform: + template: "keycloakAdminPassword" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "keycloak-user-password" + rewrite: + - transform: + template: "keycloakUserPassword" + data: + - secretKey: domainName + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: domain + - secretKey: pathRouting + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: cnoe-ref-impl/config + metadataPolicy: None + property: path_routing +--- +apiVersion: generators.external-secrets.io/v1alpha1 +kind: Password +metadata: + name: postgres-keycloak-password + namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "-20" +spec: + length: 32 + digits: 5 + symbols: 5 + symbolCharacters: "/-+" + noUpper: false + allowRepeat: true +--- +apiVersion: generators.external-secrets.io/v1alpha1 +kind: Password +metadata: + name: keycloak-user-password + namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "-20" +spec: + length: 32 + digits: 5 + symbols: 5 + symbolCharacters: "-" # No Special character as Argo CD does not support it. + noUpper: false + allowRepeat: true diff --git a/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml b/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml new file mode 100644 index 0000000..6013797 --- /dev/null +++ b/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml @@ -0,0 +1,60 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: eso-store + namespace: keycloak +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + namespace: keycloak + name: eso-store +rules: + - apiGroups: [""] + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - authorization.k8s.io + resources: + - selfsubjectrulesreviews + verbs: + - create +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: eso-store + namespace: keycloak +subjects: + - kind: ServiceAccount + name: eso-store + namespace: keycloak +roleRef: + kind: Role + name: eso-store + apiGroup: rbac.authorization.k8s.io +--- +apiVersion: external-secrets.io/v1 +kind: ClusterSecretStore +metadata: + name: keycloak + annotations: + argocd.argoproj.io/sync-wave: "60" +spec: + provider: + kubernetes: + remoteNamespace: keycloak + server: + caProvider: + type: ConfigMap + name: kube-root-ca.crt + namespace: keycloak + key: ca.crt + auth: + serviceAccount: + name: eso-store + namespace: keycloak \ No newline at end of file diff --git a/packages/keycloak/manifests/user-sso-config-job.yaml b/packages/keycloak/manifests/user-sso-config-job.yaml new file mode 100644 index 0000000..c743f29 --- /dev/null +++ b/packages/keycloak/manifests/user-sso-config-job.yaml @@ -0,0 +1,430 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: keycloak-config + namespace: keycloak +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: keycloak-config + namespace: keycloak +rules: + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get", "create", "update", "patch"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: keycloak-config + namespace: keycloak +subjects: + - kind: ServiceAccount + name: keycloak-config + namespace: keycloak +roleRef: + kind: Role + name: keycloak-config + apiGroup: rbac.authorization.k8s.io +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: keycloak-config + namespace: argocd +rules: + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: keycloak-config + namespace: argocd +subjects: + - kind: ServiceAccount + name: keycloak-config + namespace: keycloak +roleRef: + kind: Role + name: keycloak-config + apiGroup: rbac.authorization.k8s.io +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: keycloak-config-job + namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "40" +data: + client-scope-groups-payload.json: | + { + "name": "groups", + "description": "groups a user belongs to", + "attributes": { + "consent.screen.text": "Access to groups a user belongs to.", + "display.on.consent.screen": "true", + "include.in.token.scope": "true", + "gui.order": "" + }, + "type": "default", + "protocol": "openid-connect" + } + group-admin-payload.json: | + {"name":"admin"} + group-base-user-payload.json: | + {"name":"base-user"} + group-mapper-payload.json: | + { + "protocol": "openid-connect", + "protocolMapper": "oidc-group-membership-mapper", + "name": "groups", + "config": { + "claim.name": "groups", + "full.path": "false", + "id.token.claim": "true", + "access.token.claim": "true", + "userinfo.token.claim": "true" + } + } + user1-payload.json: | + { + "username": "user1", + "email": "", + "firstName": "user", + "lastName": "one", + "requiredActions": [], + "emailVerified": false, + "groups": [ + "/admin" + ], + "enabled": true, + "credentials": + [ + { + "type": "password", + "value": "${USER1_PASSWORD}", + "temporary": false + } + ] + } + user2-payload.json: | + { + "username": "user2", + "email": "", + "firstName": "user", + "lastName": "two", + "requiredActions": [], + "emailVerified": false, + "groups": [ + "/base-user" + ], + "enabled": true, + "credentials": [ + { + "type": "password", + "value": "${USER1_PASSWORD}", + "temporary": false + } + ] + } + argocd-client-payload.json: | + { + "protocol": "openid-connect", + "clientId": "argocd", + "name": "ArgoCD Client", + "description": "Used for ArgoCD SSO", + "publicClient": true, + "authorizationServicesEnabled": false, + "serviceAccountsEnabled": false, + "implicitFlowEnabled": false, + "directAccessGrantsEnabled": true, + "standardFlowEnabled": true, + "frontchannelLogout": true, + "attributes": { + "saml_idp_initiated_sso_url_name": "", + "oauth2.device.authorization.grant.enabled": false, + "oidc.ciba.grant.enabled": false + }, + "alwaysDisplayInConsole": false, + "rootUrl": "https://${ARGO_CD_URL}", + "baseUrl": "/applications", + "redirectUris": [ + "https://${ARGO_CD_URL}/auth/callback", + "https://${ARGO_CD_URL}/pkce/verify", + "http://localhost:8085/auth/callback" + ], + "adminUrl": "https://${ARGO_CD_URL}", + "webOrigins": [ + "https://${ARGO_CD_URL}" + ] + } + backstage-client-payload.json: | + { + "protocol": "openid-connect", + "clientId": "backstage", + "name": "Backstage Client", + "description": "Used for Backstage SSO", + "publicClient": false, + "authorizationServicesEnabled": false, + "serviceAccountsEnabled": false, + "implicitFlowEnabled": false, + "directAccessGrantsEnabled": true, + "standardFlowEnabled": true, + "frontchannelLogout": true, + "attributes": { + "saml_idp_initiated_sso_url_name": "", + "oauth2.device.authorization.grant.enabled": false, + "oidc.ciba.grant.enabled": false + }, + "alwaysDisplayInConsole": false, + "rootUrl": "", + "baseUrl": "", + "redirectUris": [ + "https://${BACKSTAGE_URL}/api/auth/keycloak-oidc/handler/frame" + ], + "webOrigins": [ + "https://${BACKSTAGE_URL}" + ] + } + argo-client-payload.json: | + { + "protocol": "openid-connect", + "clientId": "argo-workflows", + "name": "Argo Workflows Client", + "description": "Used for Argo Workflows SSO", + "publicClient": false, + "authorizationServicesEnabled": false, + "serviceAccountsEnabled": false, + "implicitFlowEnabled": false, + "directAccessGrantsEnabled": true, + "standardFlowEnabled": true, + "frontchannelLogout": true, + "attributes": { + "saml_idp_initiated_sso_url_name": "", + "oauth2.device.authorization.grant.enabled": false, + "oidc.ciba.grant.enabled": false + }, + "alwaysDisplayInConsole": false, + "rootUrl": "", + "baseUrl": "", + "redirectUris": [ + "https://${ARGO_WORKFLOW_URL}/oauth2/callback" + ], + "webOrigins": [ + "https://${ARGO_WORKFLOW_URL}" + ] + } +--- +apiVersion: batch/v1 +kind: Job +metadata: + name: keycloak-config + namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "50" +spec: + template: + metadata: + generateName: keycloak-config + spec: + serviceAccountName: keycloak-config + restartPolicy: Never + volumes: + - name: config-payloads + configMap: + name: keycloak-config-job + containers: + - name: keycloak-config + image: docker.io/library/ubuntu:22.04 + volumeMounts: + - name: config-payloads + readOnly: true + mountPath: "/var/config/" + envFrom: + - secretRef: + name: keycloak-config + command: ["/bin/bash", "-c"] + args: + - | + #! /bin/bash + set -ex -o pipefail + apt -qq update && apt -qq install curl jq gettext-base -y + + # Define helper functions + keycloak_post() { + local endpoint=$1 + local payload=$2 + local resource_name=$3 + + envsubst < ${payload} > /tmp/payload-env.json + + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -H "Content-Type: application/json" \ + -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ + -X POST --data @/tmp/payload-env.json \ + ${KEYCLOAK_URL}${endpoint}) + + if [ "$HTTP_STATUS" -eq 409 ]; then + echo "${resource_name} already exists, continuing..." + elif [ "$HTTP_STATUS" -ne 201 ] && [ "$HTTP_STATUS" -ne 200 ]; then + echo "Error creating ${resource_name}: HTTP status $HTTP_STATUS" + cat /tmp/response.txt + fi + } + + keycloak_put() { + local endpoint=$1 + local resource_name=$2 + + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -H "Content-Type: application/json" \ + -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ + -X PUT ${KEYCLOAK_URL}${endpoint}) + + if [ "$HTTP_STATUS" -ne 204 ] && [ "$HTTP_STATUS" -ne 200 ]; then + echo "Error updating ${resource_name}: HTTP status $HTTP_STATUS" + cat /tmp/response.txt + fi + } + + keycloak_get() { + local endpoint=$1 + local jq_filter=$2 + + curl -sS -H "Content-Type: application/json" \ + -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ + -X GET ${KEYCLOAK_URL}${endpoint} | jq -e -r "${jq_filter}" + } + + # Get Keycloak token for initial Admin user + # ADMIN_PASSWORD=$(cat /var/secrets/KEYCLOAK_ADMIN_PASSWORD) + # USER1_PASSWORD=$(cat /var/secrets/USER1_PASSWORD) + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -X POST -H "Content-Type: application/x-www-form-urlencoded" \ + --data-urlencode "username=cnoe-admin" \ + --data-urlencode "password=${KEYCLOAK_ADMIN_PASSWORD}" \ + --data-urlencode "grant_type=password" \ + --data-urlencode "client_id=admin-cli" \ + ${KEYCLOAK_URL}/realms/cnoe/protocol/openid-connect/token) + if [ "$HTTP_STATUS" -ne 200 ]; then + echo "Error getting Keycloak token: HTTP status $HTTP_STATUS" + cat /tmp/response.txt + exit 1 + fi + KEYCLOAK_TOKEN=$(cat /tmp/response.txt | jq -e -r '.access_token') + + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -H "Authorization: bearer ${KEYCLOAK_TOKEN}" "${KEYCLOAK_URL}/admin/realms/cnoe") + if [ "$HTTP_STATUS" -ne 200 ]; then + echo "Error validating Keycloak token: HTTP status $HTTP_STATUS" + cat /tmp/response.txt + exit 1 + fi + + # Download kubectl + curl -sS -LO "https://dl.k8s.io/release/v1.28.3//bin/linux/amd64/kubectl" + chmod +x kubectl + + echo "creating client scopes" + keycloak_post "/admin/realms/cnoe/client-scopes" "/var/config/client-scope-groups-payload.json" "Client scope" + + echo "creating admin group" + keycloak_post "/admin/realms/cnoe/groups" "/var/config/group-admin-payload.json" "Admin group" + + echo "creating base-user group" + keycloak_post "/admin/realms/cnoe/groups" "/var/config/group-base-user-payload.json" "Base-user group" + + echo "adding group claim to tokens" + CLIENT_SCOPE_GROUPS_ID=$(keycloak_get "/admin/realms/cnoe/client-scopes" '.[] | select(.name == "groups") | .id') + + keycloak_post "/admin/realms/cnoe/client-scopes/${CLIENT_SCOPE_GROUPS_ID}/protocol-mappers/models" \ + "/var/config/group-mapper-payload.json" "Protocol mapper" + + # Create users function + create_user() { + local user_num=$1 + local payload_file=$2 + + echo "creating user${user_num}" + jq --arg pwd "$USER1_PASSWORD" '.credentials[0].value = $pwd' ${payload_file} > user${user_num}-payload-with-password.json + keycloak_post "/admin/realms/cnoe/users" "user${user_num}-payload-with-password.json" "User${user_num}" + } + + create_user "1" "/var/config/user1-payload.json" + create_user "2" "/var/config/user2-payload.json" + + USER1ID=$(keycloak_get "/admin/realms/cnoe/users?lastName=one" ".[0].id") + USER2ID=$(keycloak_get "/admin/realms/cnoe/users?lastName=two" ".[0].id") + + echo "USER1 ID: ${USER1ID}" + echo "USER2 ID: ${USER2ID}" + + # Create client function + create_client() { + local client_name=$1 + local payload_file=$2 + + echo "creating ${client_name} client" + keycloak_post "/admin/realms/cnoe/clients" "${payload_file}" "${client_name} client" + } + + create_client "ArgoCD" "/var/config/argocd-client-payload.json" + + # Add client scope function + add_client_scope() { + local client_id_name=$1 + local client_name=$2 + + CLIENT_ID=$(keycloak_get "/admin/realms/cnoe/clients" ".[] | select(.clientId == \"${client_id_name}\") | .id") + CLIENT_SCOPE_GROUPS_ID=$(keycloak_get "/admin/realms/cnoe/client-scopes" '.[] | select(.name == "groups") | .id') + keycloak_put "/admin/realms/cnoe/clients/${CLIENT_ID}/default-client-scopes/${CLIENT_SCOPE_GROUPS_ID}" "${client_name} client scope" + } + + add_client_scope "argocd" "ArgoCD" + + create_client "Backstage" "/var/config/backstage-client-payload.json" + + add_client_scope "backstage" "Backstage" + + # Get client secret function + get_client_secret() { + local client_id_name=$1 + local var_name=$2 + + CLIENT_ID=$(keycloak_get "/admin/realms/cnoe/clients" ".[] | select(.clientId == \"${client_id_name}\") | .id") + local secret=$(keycloak_get "/admin/realms/cnoe/clients/${CLIENT_ID}" ".secret") + eval "${var_name}=${secret}" + } + + get_client_secret "backstage" "BACKSTAGE_CLIENT_SECRET" + + create_client "Argo Workflows" "/var/config/argo-client-payload.json" + + add_client_scope "argo-workflows" "Argo Workflows" + get_client_secret "argo-workflows" "ARGO_WORKFLOWS_CLIENT_SECRET" + + echo "Creating ArgoCD session token for backstage" + ARGOCD_PASSWORD=$(./kubectl -n argocd get secret argocd-initial-admin-secret -o go-template='{{.data.password | base64decode }}') + + ARGOCD_SESSION_TOKEN=$(curl -k -sS http://argocd-server.argocd.svc.cluster.local:443/argocd/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -r .token) + + echo "Creating keycloak-clients secret" + + echo \ + "apiVersion: v1 + kind: Secret + metadata: + name: keycloak-clients + namespace: keycloak + type: Opaque + stringData: + ARGO_WORKFLOWS_CLIENT_SECRET: ${ARGO_WORKFLOWS_CLIENT_SECRET} + ARGOCD_SESSION_TOKEN: ${ARGOCD_SESSION_TOKEN} + BACKSTAGE_CLIENT_SECRET: ${BACKSTAGE_CLIENT_SECRET} + ARGOCD_ADMIN_PASSWORD: ${ARGOCD_PASSWORD} + " > /tmp/secret.yaml + + ./kubectl apply -f /tmp/secret.yaml + echo "Configuration Done!!" + + diff --git a/packages/keycloak/path-routing/default-cert-external-secret.yaml b/packages/keycloak/path-routing/default-cert-external-secret.yaml new file mode 100644 index 0000000..679d000 --- /dev/null +++ b/packages/keycloak/path-routing/default-cert-external-secret.yaml @@ -0,0 +1,33 @@ + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: keycloak-server-tls + namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "10" +spec: + refreshInterval: "0" + secretStoreRef: + name: default-cert + kind: ClusterSecretStore + target: + name: keycloak-server-tls + template: + type: kubernetes.io/tls + data: + - secretKey: tls.key + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.key + - secretKey: tls.crt + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: default-tls-prod + property: tls.crt \ No newline at end of file diff --git a/packages/keycloak/values.yaml b/packages/keycloak/values.yaml new file mode 100644 index 0000000..85f7580 --- /dev/null +++ b/packages/keycloak/values.yaml @@ -0,0 +1,32 @@ +adminRealm: "cnoe" +production: true +usePasswordFiles: false +proxyHeaders: "forwarded" + +global: + defaultStorageClass: gp3 + +auth: + adminUser: cnoe-admin + adminPassword: cnoe-admin + existingSecret: keycloak-config + passwordSecretKey: KEYCLOAK_ADMIN_PASSWORD + +ingress: + enabled: true + ingressClassName: nginx + hostnameStrict: true + servicePort: http + annotations: + argocd.argoproj.io/sync-wave: "20" + tls: false + +postgresql: + enabled: true + auth: + username: keycloak + database: keycloak + existingSecret: "keycloak-config" + secretKeys: + userPasswordKey: POSTGRES_PASSWORD + architecture: standalone diff --git a/private/argocd-github.yaml.template b/private/argocd-github.yaml.template new file mode 100644 index 0000000..4d9b735 --- /dev/null +++ b/private/argocd-github.yaml.template @@ -0,0 +1,9 @@ +url: https://github.com/ +appId: "123abc" +# get it from https://github.com/organizations//settings/installations/ +installationId: "123abc" +privateKey: | + -----BEGIN RSA PRIVATE KEY----- + ... + -----END RSA PRIVATE KEY----- + diff --git a/private/backstage-github.yaml.template b/private/backstage-github.yaml.template new file mode 100644 index 0000000..774ee0d --- /dev/null +++ b/private/backstage-github.yaml.template @@ -0,0 +1,9 @@ +appId: 1234 +webhookUrl: https://... +clientId: ABC.. +clientSecret: 1234abc +webhookSecret: 123abc +privateKey: | + -----BEGIN RSA PRIVATE KEY----- + ... + -----END RSA PRIVATE KEY----- diff --git a/scripts/cleanup-crds.sh b/scripts/cleanup-crds.sh new file mode 100755 index 0000000..ba39258 --- /dev/null +++ b/scripts/cleanup-crds.sh @@ -0,0 +1,91 @@ +#!/bin/bash + +set -e -o pipefail + +export REPO_ROOT=$(git rev-parse --show-toplevel) +PHASE="crd-uninstall" +source ${REPO_ROOT}/scripts/utils.sh + +echo -e "\n${BOLD}${BLUE}🧹 Starting CRD cleanup process...${NC}" + +CRDS=( + "external-secrets.io" + "argoproj.io" + "cert-manager.io" + "crossplane.io" + "externaldns.k8s.io" +) + +TIMEOUT=60 + +cleanup_resources() { + local crd=$1 + local kind=$(kubectl get crd $crd -o jsonpath='{.spec.names.kind}' --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || echo "") + + if [[ -z "$kind" ]]; then + return + fi + + echo -e "${CYAN}πŸ”„ Cleaning up resources for CRD:${NC} ${BOLD}$crd${NC} ${CYAN}(Kind: $kind)${NC}" + + # Get all resources of this kind + local resources=$(kubectl get $kind --all-namespaces -o name --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true) + + if [[ -z "$resources" ]]; then + return + fi + + # Delete resources + echo "$resources" | while read resource; do + if [[ -n "$resource" ]]; then + echo -e "${YELLOW}πŸ—‘οΈ Deleting${NC} $resource" + kubectl delete $resource --timeout=${TIMEOUT}s --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || { + echo -e "${YELLOW}⏳ Timeout reached, force deleting${NC} $resource" + kubectl patch $resource -p '{"metadata":{"finalizers":[]}}' --type=merge --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + kubectl delete $resource --force --grace-period=0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + } + fi + done +} + +delete_crd() { + local crd=$1 + echo -e "${RED}πŸ—‘οΈ Deleting CRD:${NC} ${BOLD}$crd${NC}" + kubectl delete crd $crd --timeout=${TIMEOUT}s --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || { + echo -e "${YELLOW}⏳ Timeout reached, removing finalizers for CRD${NC} ${BOLD}$crd${NC}" + kubectl patch crd $crd -p '{"metadata":{"finalizers":[]}}' --type=merge --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + kubectl delete crd $crd --force --grace-period=0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + } +} + +main() { + echo -e "${PURPLE}πŸ“‹ Starting CRD cleanup for groups:${NC} ${BOLD}${CRDS[@]}${NC}" + + for group in "${CRDS[@]}"; do + echo -e "\n${CYAN}πŸ” Processing CRD group:${NC} ${BOLD}$group${NC}" + + # Find CRDs with the group suffix + crds=$(kubectl get crd -o name --kubeconfig $KUBECONFIG_FILE | grep "\.$group$" | cut -d'/' -f2 || true) + + if [[ -z "$crds" ]]; then + echo -e "${YELLOW}⚠️ No CRDs found for group:${NC} $group" + continue + fi + + echo "$crds" | while read crd; do + if [[ -n "$crd" ]]; then + cleanup_resources "$crd" + delete_crd "$crd" + echo -e "${GREEN}βœ… Successfully processed CRD:${NC} $crd" + fi + done + done + + echo -e "\n${BOLD}${GREEN}πŸŽ‰ CRD cleanup completed successfully! πŸŽ‰${NC}" +} + +main + +# Remove secrets created by the reference implementation +# echo -e "${CYAN}πŸ” Cleaning up secrets...${NC}" +# kubectl get secrets -A --no-headers --kubeconfig $KUBECONFIG_FILE | awk '{ print $1, $2}' | xargs -n 2 kubectl delete secrets --kubeconfig $KUBECONFIG_FILE -n \ No newline at end of file diff --git a/scripts/create-cluster.sh b/scripts/create-cluster.sh new file mode 100755 index 0000000..743dab2 --- /dev/null +++ b/scripts/create-cluster.sh @@ -0,0 +1,88 @@ +#!/bin/bash +set -e -o pipefail + +export REPO_ROOT=$(git rev-parse --show-toplevel) +PHASE="create-cluster" +echo -e "\n${BOLD}${BLUE}πŸš€ Starting EKS cluster creation process...${NC}" + +source ${REPO_ROOT}/scripts/utils.sh + +# Check required tools based on deployment choice +if [ "$DEPLOYMENT_TOOL" = "eksctl" ]; then + if ! command -v eksctl >/dev/null 2>&1; then + echo -e "${RED}❌ eksctl command is not installed. Please install it to continue.${NC}" + echo -e "${CYAN}πŸ’‘ Installation instructions: https://eksctl.io/installation/${NC}" + exit 1 + fi +elif [ "$DEPLOYMENT_TOOL" = "terraform" ]; then + if ! command -v terraform >/dev/null 2>&1; then + echo -e "${RED}❌ terraform command is not installed. Please install it to continue.${NC}" + echo -e "${CYAN}πŸ’‘ Installation instructions: https://terraform.io/downloads${NC}" + exit 1 + fi +fi + +echo -e "\n${BOLD}${BLUE}πŸš€ Creating EKS cluster...${NC}" +echo -e "${YELLOW}⏳ This process may take 15-20 minutes...${NC}" + +# Create the cluster based on deployment tool +if [ "$DEPLOYMENT_TOOL" = "eksctl" ]; then + echo -e "\n${BOLD}${BLUE}πŸ”§ Creating Crossplane permissions boundary policy...${NC}" + + # Create temporary file for policy document + TEMPFILE=$(mktemp) + sed "s/\${AWS_ACCOUNT_ID}/${AWS_ACCOUNT_ID}/g" ${REPO_ROOT}/cluster/iam-policies/crossplane-permissions-boundry.json > "$TEMPFILE" + + echo -e "${CYAN}πŸ“‹ Creating IAM policy crossplane-permissions-boundary...${NC}" + + # Create the permissions boundary policy (ignore error if it already exists) + if aws iam create-policy \ + --policy-name crossplane-permissions-boundary \ + --policy-document file://"$TEMPFILE" > /dev/null 2>&1; then + echo -e "${GREEN}βœ… Created crossplane-permissions-boundary policy${NC}" + else + echo -e "${YELLOW}⚠️ Policy crossplane-permissions-boundary already exists, continuing...${NC}" + fi + + # Get the policy ARN + export CROSSPLANE_BOUNDARY_POLICY_ARN=$(aws iam get-policy \ + --policy-arn arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary \ + --query 'Policy.Arn' --output text) + + echo -e "${CYAN}πŸ”— Policy ARN:${NC} ${CROSSPLANE_BOUNDARY_POLICY_ARN}" + + # Clean up temp file + rm -f "$TEMPFILE" + echo -e "${CYAN}πŸ”§ Using eksctl for cluster creation...${NC}" + + # Create the cluster with eksctl + sed -e "s/\${CLUSTER_NAME}/${CLUSTER_NAME}/g" \ + -e "s/\${AWS_REGION}/${AWS_REGION}/g" \ + -e "s/\${AWS_ACCOUNT_ID}/${AWS_ACCOUNT_ID}/g" \ + -e "s/\${CROSSPLANE_BOUNDARY_POLICY_ARN}/${CROSSPLANE_BOUNDARY_POLICY_ARN//\//\\/}/g" \ + "$EKSCTL_CONFIG_FILE_PATH" | eksctl create cluster -f - + +elif [ "$DEPLOYMENT_TOOL" = "terraform" ]; then + echo -e "${CYAN}πŸ”§ Using terraform for cluster creation...${NC}" + + # Set terraform variables + export TF_VAR_cluster_name="$CLUSTER_NAME" + export TF_VAR_region="$AWS_REGION" + export TF_VAR_auto_mode="$AUTO_MODE" + + # Initialize and apply terraform + terraform -chdir="$REPO_ROOT/cluster/terraform" init + terraform -chdir="$REPO_ROOT/cluster/terraform" apply -auto-approve +fi + +echo -e "\n${BOLD}${GREEN}πŸŽ‰ EKS cluster created successfully! πŸŽ‰${NC}" +echo -e "${CYAN}πŸ“Š Cluster Details:${NC}" +echo -e "${CYAN}πŸ”Ά Name:${NC} ${BOLD}${CLUSTER_NAME}${NC}" +echo -e "${CYAN}πŸ”Ά Region:${NC} ${AWS_REGION}" +echo -e "${CYAN}πŸ”Ά Type:${NC} ${CLUSTER_TYPE}" +echo -e "${CYAN}πŸ”Ά Tool:${NC} ${DEPLOYMENT_TOOL}" + +echo -e "\n${BOLD}${BLUE}πŸ”§ Updating kubeconfig...${NC}" +aws eks update-kubeconfig --region ${AWS_REGION} --name ${CLUSTER_NAME} --alias ${CLUSTER_NAME} + +echo -e "\n${BOLD}${GREEN}βœ… Cluster is ready for CNOE reference implementation installation!${NC}" \ No newline at end of file diff --git a/scripts/create-config-secrets.sh b/scripts/create-config-secrets.sh new file mode 100755 index 0000000..83d9b54 --- /dev/null +++ b/scripts/create-config-secrets.sh @@ -0,0 +1,92 @@ +#!/bin/bash +set -e -o pipefail + +export REPO_ROOT=$(git rev-parse --show-toplevel) +SECRET_NAME_PREFIX="cnoe-ref-impl" +PHASE="create-update-secrets" +source ${REPO_ROOT}/scripts/utils.sh + +PRIVATE_DIR="$REPO_ROOT/private" + +echo -e "\n${BOLD}${BLUE}πŸ” Starting secret creation process...${NC}" +echo -e "${CYAN}πŸ“‚ Reading files from:${NC} ${BOLD}${PRIVATE_DIR}${NC}" + +if [ ! -d "$PRIVATE_DIR" ]; then + echo -e "${RED}❌ Directory $PRIVATE_DIR does not exist${NC}" + exit 1 +fi + +# Create or update secret +create_update_secret() { + echo -e "\n${PURPLE}πŸš€ Creating/updating Secret for $1...${NC}" + TAGS=$(get_tags_from_config) + if aws secretsmanager create-secret \ + --name "$SECRET_NAME_PREFIX/$1" \ + --secret-string file://"$TEMP_SECRET_FILE" \ + --description "Secret created for $1 of CNOE AWS Reference Implementation" \ + --tags $TAGS \ + --region $AWS_REGION >/dev/null 2>&1; then + echo -e "${GREEN}βœ… Secret '${BOLD}$SECRET_NAME_PREFIX/$1${NC}${GREEN}' created successfully!${NC}" + else + echo -e "${YELLOW}πŸ”„ Secret exists, updating...${NC}" + if aws secretsmanager update-secret \ + --secret-id "$SECRET_NAME_PREFIX/$1" \ + --secret-string file://"$TEMP_SECRET_FILE" \ + --region $AWS_REGION >/dev/null 2>&1; then + echo -e "${GREEN}βœ… Secret '${BOLD}$SECRET_NAME_PREFIX/$1${NC}${GREEN}' updated successfully!${NC}" + else + echo -e "${RED}❌ Failed to create/update secret${NC}" + rm "$TEMP_SECRET_FILE" + exit 1 + fi + fi + + # Cleanup + rm "$TEMP_SECRET_FILE" + echo -e "${CYAN}πŸ” Secret ARN:${NC} $(aws secretsmanager describe-secret --secret-id "$SECRET_NAME_PREFIX/$1" --region $AWS_REGION --query 'ARN' --output text)" +} + +echo -e "\n${YELLOW}πŸ“‹ Processing files...${NC}" +TEMP_SECRET_FILE=$(mktemp) + +# Start building JSON for Github App secrets +echo "{" > "$TEMP_SECRET_FILE" + +first=true +file_count=0 +for file in "$PRIVATE_DIR"/*.yaml; do + if [ -f "$file" ]; then + filename=$(basename "$file" .yaml) + echo -e "${CYAN} πŸ“„ Adding:${NC} ${filename}" + + # Add comma if not first entry + if [ "$first" = false ]; then + echo "," >> "$TEMP_SECRET_FILE" + fi + first=false + + # Add key-value pair with properly escaped content + echo -n " \"$filename\": " >> "$TEMP_SECRET_FILE" + yq -o=json eval '.' "$file" >> "$TEMP_SECRET_FILE" + file_count=$((file_count + 1)) + fi +done + +if [ $file_count -eq 0 ]; then + echo -e "${RED}❌ No files found in $PRIVATE_DIR${NC}" + rm "$TEMP_SECRET_FILE" + exit 1 +fi + +echo "" >> "$TEMP_SECRET_FILE" +echo "}" >> "$TEMP_SECRET_FILE" + +create_update_secret "github-app" + +# Build JSON for Config secret +TEMP_SECRET_FILE=$(mktemp) +yq -o=json eval '.' "$CONFIG_FILE" > "$TEMP_SECRET_FILE" +create_update_secret "config" + +echo -e "\n${BOLD}${GREEN}πŸŽ‰ Process completed successfully! πŸŽ‰${NC}" + diff --git a/scripts/get-urls.sh b/scripts/get-urls.sh new file mode 100755 index 0000000..6106a1d --- /dev/null +++ b/scripts/get-urls.sh @@ -0,0 +1,37 @@ +#!/bin/bash + +# Colors +RED='\033[38;5;160m' +GREEN='\033[38;5;34m' +PURPLE='\033[38;5;98m' +NC='\033[0m' +BLUE='\033[38;5;33m' +YELLOW='\033[38;5;178m' +CYAN='\033[38;5;37m' +BOLD='\033[1m' +ORANGE='\033[38;5;172m' + +# Get the path_routing value from config.yaml +PATH_ROUTING=$(yq '.path_routing' config.yaml) +# Get the domain from config.yaml +DOMAIN=$(yq '.domain' config.yaml) + +echo -e "\n${BOLD}${ORANGE}✨ ========================================== ✨${NC}" +echo -e "${BOLD}${CYAN}🌐 Platform Access URLs 🌐${NC}" +echo -e "${BOLD}${ORANGE}✨ ========================================== ✨${NC}\n" + +echo -e "${BOLD}${PURPLE}πŸ”— URLs for accessing the platform:${NC}" +echo -e "${YELLOW}----------------------------------------------------${NC}" + +if [ "$PATH_ROUTING" == "\"true\"" ] || [ "$PATH_ROUTING" == "true" ]; then + echo -e "${CYAN}πŸ”Ά Backstage: ${BOLD}https://$DOMAIN${NC}" + echo -e "${CYAN}πŸ”Ά Argo CD: ${BOLD}https://$DOMAIN/argocd${NC}" + echo -e "${CYAN}πŸ”Ά Argo Workflows: ${BOLD}https://$DOMAIN/argo-workflows${NC}" +else + echo -e "${CYAN}πŸ”Ά Backstage: ${BOLD}https://backstage.$DOMAIN${NC}" + echo -e "${CYAN}πŸ”Ά Argo CD: ${BOLD}https://argocd.$DOMAIN${NC}" + echo -e "${CYAN}πŸ”Ά Argo Workflows: ${BOLD}https://argo-workflows.$DOMAIN${NC}" +fi + +echo -e "${YELLOW}----------------------------------------------------${NC}" +echo -e "\n${BOLD}${GREEN}βœ… Use the URLs above to access the platform services${NC}\n" \ No newline at end of file diff --git a/scripts/install-using-idpbuilder.sh b/scripts/install-using-idpbuilder.sh new file mode 100755 index 0000000..db9c86a --- /dev/null +++ b/scripts/install-using-idpbuilder.sh @@ -0,0 +1,69 @@ +#!/bin/bash +set -e -o pipefail + +export REPO_ROOT=$(git rev-parse --show-toplevel) +PHASE="install" +source ${REPO_ROOT}/scripts/utils.sh + +echo -e "\n${BOLD}${BLUE}πŸš€ Starting installation process...${NC}" + +SERVER_URL=$(cat "$KUBECONFIG_FILE" | yq -r '.clusters[0].cluster.server') +CA_DATA=$(cat "$KUBECONFIG_FILE" | yq -r '.clusters[0].cluster."certificate-authority-data"') + +echo -e "${CYAN}πŸ“ Creating cluster secret file...${NC}" +CLUSTER_SECRET_FILE=$(mktemp) +cat << EOF > "$CLUSTER_SECRET_FILE" +# Remote EKS cluster Argo CD secret +apiVersion: v1 +kind: Secret +metadata: + name: "$CLUSTER_NAME-cluster-secret" + namespace: argocd + labels: + argocd.argoproj.io/secret-type: cluster + clusterClass: "control-plane" + clusterName: "$CLUSTER_NAME" + environment: "control-plane-bootstrap" + path_routing: "$PATH_ROUTING" + auto_mode: "$AUTO_MODE" + annotations: + addons_repo_url: "http://cnoe.localtest.me:8443/gitea/giteaAdmin/idpbuilder-localdev-bootstrap-appset-packages.git" + addons_repo_revision: "HEAD" + addons_repo_basepath: "." + domain: "$DOMAIN_NAME" +type: Opaque +stringData: + name: "$CLUSTER_NAME" + server: $SERVER_URL + clusterResources: "true" + config: | + { + "execProviderConfig": { + "command": "argocd-k8s-auth", + "args": ["aws", "--cluster-name", "$CLUSTER_NAME"], + "apiVersion": "client.authentication.k8s.io/v1beta1" + }, + "tlsClientConfig": { + "insecure": false, + "caData": "$CA_DATA" + } + } +EOF + +echo -e "${BOLD}${GREEN}πŸ”„ Running idpbuilder to apply packages...${NC}" +idpbuilder create --use-path-routing --protocol http --package "$REPO_ROOT/packages" -c "argocd:${CLUSTER_SECRET_FILE}" > /dev/null 2>&1 + +echo -e "${YELLOW}⏳ Waiting for local addons-appset to be healthy...${NC}" +# sleep 60 # Wait 1 minute before checking the status +kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd applications/addons-appset-$CLUSTER_NAME --timeout=15m +echo -e "${GREEN}βœ… local addons-appset is now healthy!${NC}" + +# Wait for Argo CD applications to sync +wait_for_apps + +# Delete idpbuilder local kind cluster instance +echo -e "${CYAN}πŸ”„ Deleting idpbuilder local kind cluster instance...${NC}" +idpbuilder delete cluster --name localdev > /dev/null 2>&1 + +echo -e "\n${BOLD}${BLUE}πŸŽ‰ Installation completed successfully! πŸŽ‰${NC}" +echo -e "${CYAN}πŸ“Š You can now access your resources and start deploying applications.${NC}" \ No newline at end of file diff --git a/scripts/install.sh b/scripts/install.sh new file mode 100755 index 0000000..4c16b83 --- /dev/null +++ b/scripts/install.sh @@ -0,0 +1,96 @@ +#!/bin/bash +set -e -o pipefail + +export REPO_ROOT=$(git rev-parse --show-toplevel) +PHASE="install" +source ${REPO_ROOT}/scripts/utils.sh + +echo -e "\n${BOLD}${BLUE}πŸš€ Starting installation process...${NC}" + +# Static helm values files +ARGOCD_STATIC_VALUES_FILE=${REPO_ROOT}/packages/argo-cd/values.yaml +EXTERNAL_SECRETS_STATIC_VALUES_FILE=${REPO_ROOT}/packages/external-secrets/values.yaml +ADDONS_APPSET_STATIC_VALUES_FILE=${REPO_ROOT}/packages/bootstrap/values.yaml + +# Chart versions for Argo CD and ESO +ARGOCD_CHART_VERSION=$(yq '.argocd.defaultVersion' ${REPO_ROOT}/packages/addons/values.yaml) +EXTERNAL_SECRETS_CHART_VERSION=$(yq '.external-secrets.defaultVersion' ${REPO_ROOT}/packages/addons/values.yaml) + +# Custom Manifests Paths +ARGOCD_CUSTOM_MANIFESTS_PATH=${REPO_ROOT}/packages/argo-cd/manifests +EXTERNAL_SECRETS_CUSTOM_MANIFESTS_PATH=${REPO_ROOT}/packages/external-secrets/manifests + +# Build Argo CD dynamic values +ARGOCD_DYNAMIC_VALUES_FILE=$(mktemp) +ISSUER_URL=$([[ "${PATH_ROUTING}" == "false" ]] && echo "keycloak.${DOMAIN_NAME}" || echo "${DOMAIN_NAME}/keycloak") +cat << EOF > "$ARGOCD_DYNAMIC_VALUES_FILE" +cnoe_ref_impl: # Specific values for reference CNOE implementation to control extraObjects. + auto_mode: $([[ "${AUTO_MODE}" == "true" ]] && echo '"true"' || echo '"false"') +global: + domain: $([[ "${PATH_ROUTING}" == "true" ]] && echo "${DOMAIN_NAME}" || echo "argocd.${DOMAIN_NAME}") +server: + ingress: + annotations: + cert-manager.io/cluster-issuer: $([[ "${PATH_ROUTING}" == "false" ]] && echo '"letsencrypt-prod"' || echo "") + path: /$([[ "${PATH_ROUTING}" == "true" ]] && echo "argocd" || echo "") +configs: + cm: + oidc.config: | + name: Keycloak + issuer: https://$ISSUER_URL/realms/cnoe + clientID: argocd + enablePKCEAuthentication: true + requestedScopes: + - openid + - profile + - email + - groups + params: + 'server.basehref': /$([[ "${PATH_ROUTING}" == "true" ]] && echo "argocd" || echo "") + 'server.rootpath': $([[ "${PATH_ROUTING}" == "true" ]] && echo "argocd" || echo "") +EOF + +echo -e "${BOLD}${GREEN}πŸ”„ Installing Argo CD...${NC}" +helm repo add argo "https://argoproj.github.io/argo-helm" > /dev/null +helm repo update > /dev/null +helm upgrade --install --wait argocd argo/argo-cd \ + --namespace argocd --version $ARGOCD_CHART_VERSION \ + --create-namespace \ + --values "$ARGOCD_STATIC_VALUES_FILE" \ + --values "$ARGOCD_DYNAMIC_VALUES_FILE" \ + --kubeconfig $KUBECONFIG_FILE > /dev/null + +echo -e "${YELLOW}⏳ Waiting for Argo CD to be healthy...${NC}" +kubectl wait --for=condition=available deployment/argocd-server -n argocd --timeout=300s --kubeconfig $KUBECONFIG_FILE > /dev/null + + +echo -e "${BOLD}${GREEN}πŸ”„ Installing External Secrets...${NC}" +helm repo add external-secrets "https://charts.external-secrets.io" > /dev/null +helm repo update > /dev/null +helm upgrade --install --wait external-secrets external-secrets/external-secrets \ + --namespace external-secrets --version $EXTERNAL_SECRETS_CHART_VERSION \ + --create-namespace \ + --values "$EXTERNAL_SECRETS_STATIC_VALUES_FILE" \ + --kubeconfig $KUBECONFIG_FILE > /dev/null + +echo -e "${YELLOW}⏳ Waiting for External Secrets to be healthy...${NC}" +kubectl wait --for=condition=available deployment/external-secrets -n external-secrets --timeout=300s --kubeconfig $KUBECONFIG_FILE > /dev/null + + +echo -e "${BOLD}${GREEN}πŸ”„ Applying custom manifests...${NC}" +# sleep 60 +kubectl apply -f "$ARGOCD_CUSTOM_MANIFESTS_PATH" --kubeconfig $KUBECONFIG_FILE > /dev/null +kubectl apply -f "$EXTERNAL_SECRETS_CUSTOM_MANIFESTS_PATH" --kubeconfig $KUBECONFIG_FILE > /dev/null + +echo -e "${BOLD}${GREEN}πŸ”„ Installing Addons AppSet Argo CD application...${NC}" +helm upgrade --install --wait addons-appset ${REPO_ROOT}/packages/appset-chart \ + --namespace argocd \ + --values "$ADDONS_APPSET_STATIC_VALUES_FILE" \ + --kubeconfig $KUBECONFIG_FILE > /dev/null + +# Wait for Argo CD applications to sync +sleep 10 +wait_for_apps + +echo -e "\n${BOLD}${BLUE}πŸŽ‰ Installation completed successfully! πŸŽ‰${NC}" +echo -e "${CYAN}πŸ“Š You can now access your resources and start deploying applications.${NC}" diff --git a/scripts/template.sh b/scripts/template.sh new file mode 100755 index 0000000..2bfd672 --- /dev/null +++ b/scripts/template.sh @@ -0,0 +1,56 @@ +#!/bin/bash + +CONFIG_FILE="config.yaml" + +# Check if config file exists +if [ ! -f "$CONFIG_FILE" ]; then + echo "Error: $CONFIG_FILE not found" + exit 1 +fi + +# Process only YAML files in packages directory +find packages -type f -name "*.yaml" -o -name "*.yml" | while read -r file; do + # Check if file contains any template pattern {{ .key_name }} + if grep -q "{{" "$file"; then + echo "Processing $file" + + # Use grep to find lines with templates (excluding commented lines) + grep -n "{{.*}}" "$file" | grep -v "^[[:space:]]*#" | while IFS=: read -r line_num line_content; do + # Skip commented lines + if [[ "$line_content" =~ ^[[:space:]]*# ]]; then + continue + fi + + # Extract template pattern from the line + template=$(echo "$line_content" | grep -o "{{[[:space:]]*\.[a-zA-Z0-9_\.]*[[:space:]]*}}") + + # Skip if no valid template found + if [ -z "$template" ]; then + continue + fi + + # Extract key from template + key=$(echo "$template" | sed 's/{{[[:space:]]*\.\([a-zA-Z0-9_\.]*\)[[:space:]]*}}/\1/') + + # Skip if key is empty + if [ -z "$key" ]; then + continue + fi + + # Get value using yq + value=$(yq eval ".$key" "$CONFIG_FILE" 2>/dev/null) + if [ "$value" = "null" ] || [ -z "$value" ]; then + echo " Warning: No value found for key '$key' in $CONFIG_FILE" + continue + fi + + echo " Replacing '$key' with '$value'" + # Replace template with value (escape special characters in template and value) + escaped_template=$(echo "$template" | sed 's/[\/&]/\\&/g') + escaped_value=$(echo "$value" | sed 's/[\/&]/\\&/g') + sed -i "s/$escaped_template/$escaped_value/" "$file" + done + fi +done + +echo "Done!" \ No newline at end of file diff --git a/scripts/uninstall.sh b/scripts/uninstall.sh new file mode 100755 index 0000000..4406f42 --- /dev/null +++ b/scripts/uninstall.sh @@ -0,0 +1,78 @@ +#!/bin/bash +set -e -o pipefail + +export REPO_ROOT=$(git rev-parse --show-toplevel) +PHASE="uninstall" +source ${REPO_ROOT}/scripts/utils.sh + +echo -e "\n${BOLD}${BLUE}πŸš€ Starting uninstallation process...${NC}" + +# Addons to be deleted +ADDONS=( + crossplane-compositions + crossplane-upbound-providers + crossplane + argo-workflows + backstage + keycloak + cert-manager + external-dns + external-secrets + ingress-nginx + aws-load-balancer-controller +) + +# Remove addons-appset applicationset and corresponding appset-chart applicationset with orphan deletion policy. +# The addons will be removed in specific order later. +echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}addons-appset${NC} ${CYAN}ApplicationSet...${NC}" +kubectl delete applicationsets.argoproj.io -n argocd addons-appset --cascade=orphan --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true +kubectl delete applicationsets.argoproj.io -n argocd addons-appset-pr --cascade=orphan --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + +echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}appset-chart${NC} ${CYAN}ApplicationSet...${NC}" +kubectl delete applications.argoproj.io -n argocd -l addonName=$APPSET_ADDON_NAME --cascade=orphan --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + +# Start removing addons in order +echo -e "${BOLD}${YELLOW}πŸ“¦ Removing add-ons in sequence...${NC}" +# Delete all addon application sets except argocd +for app in "${ADDONS[@]}"; do + echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}$app${NC} ${CYAN}AppSet...${NC}" + kubectl delete applicationsets.argoproj.io -n argocd $app --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + # Wait for AppSet deletion to complete before moving to next AppSet + while [ $(kubectl get applications.argoproj.io -n argocd -l addonName=$app --no-headers --kubeconfig $KUBECONFIG_FILE 2>/dev/null | wc -l) -ne 0 ]; do + echo -e "${YELLOW}⏳ Waiting for ${BOLD}$app${NC} ${YELLOW}AppSet to be deleted...${NC}" + sleep 10 + done + echo -e "${GREEN}βœ… ${BOLD}$app${NC} ${GREEN}successfully removed!${NC}" +done + +# Delete ArgoCD App +echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}argocd${NC} ${CYAN}AppSet...${NC}" +kubectl delete applicationsets.argoproj.io -n argocd argocd --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true + +# Wait for ArgoCD to be deleted +echo -e "${YELLOW}⏳ Waiting for ${BOLD}argocd${NC} ${YELLOW}AppSet to be deleted...${NC}" +START_TIME=$(date +%s) +TIMEOUT=120 # 2 minutes timeout +while [ $(kubectl get applications.argoproj.io -n argocd -l addonName=argocd --no-headers --kubeconfig $KUBECONFIG_FILE 2>/dev/null | wc -l) -ne 0 ]; do + CURRENT_TIME=$(date +%s) + ELAPSED_TIME=$((CURRENT_TIME - START_TIME)) + + if [ $ELAPSED_TIME -ge $TIMEOUT ]; then + echo -e "${YELLOW}⚠️ Timeout reached. Patching ${BOLD}argocd${NC} ${YELLOW}applications to remove finalizers...${NC}" + kubectl patch applications.argoproj.io -n argocd "argocd-$CLUSTER_NAME" --type json -p='[{"op": "remove", "path": "/metadata/finalizers"}]' --kubeconfig $KUBECONFIG_FILE || true + break + fi + + echo -e "${YELLOW}⏳ Still waiting for ${BOLD}argocd${NC} ${YELLOW}AppSet to be deleted... (${ELAPSED_TIME}s elapsed)${NC}" + sleep 10 +done +echo -e "${GREEN}βœ… ${BOLD}argocd${NC} ${GREEN}successfully removed!${NC}" + +# Remove PVCs for keycloak +echo -e "${CYAN}πŸ—‘οΈ Deleting PVCs for ${BOLD}keycloak${NC}...${NC}" +kubectl delete pvc -n keycloak data-keycloak-postgresql-0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true +kubectl delete pvc -n backstage data-postgresql-0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true +echo -e "${GREEN}βœ… Keycloak & Backstage Postgres PVCs removed!${NC}" + +echo -e "\n${BOLD}${GREEN}πŸŽ‰ Uninstallation Complete! πŸŽ‰${NC}" +echo -e "${CYAN}🧹 All resources have been successfully removed.${NC}" \ No newline at end of file diff --git a/scripts/utils.sh b/scripts/utils.sh new file mode 100755 index 0000000..39c6056 --- /dev/null +++ b/scripts/utils.sh @@ -0,0 +1,192 @@ +set -e + +# Colors +export RED='\033[38;5;160m' +export GREEN='\033[38;5;34m' +export PURPLE='\033[38;5;98m' +export NC='\033[0m' +export BLUE='\033[38;5;33m' +export YELLOW='\033[38;5;178m' +export CYAN='\033[38;5;37m' +export BOLD='\033[1m' +export ORANGE='\033[38;5;172m' + +# Extract tags from config file +get_tags_from_config() { + yq eval '.tags | to_entries | map("Key=" + .key + ",Value=" + .value) | join(" ")' "$CONFIG_FILE" +} + +# Generate kubeconfig for the EKS cluster +get_kubeconfig() { + export KUBECONFIG_FILE=$(mktemp) + echo -e "${PURPLE}πŸ”‘ Generating temporary kubeconfig for cluster ${BOLD}${CLUSTER_NAME}${NC}...${NC}" + aws eks update-kubeconfig --region $AWS_REGION --name $CLUSTER_NAME --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 +} + +# Wait for all Argo CD applications to report healthy status +wait_for_apps(){ + + echo -e "${YELLOW}⏳ Waiting for addons-appset to be healthy...${NC}" + kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd applications/$APPSET_ADDON_NAME-$CLUSTER_NAME --timeout=15m --kubeconfig $KUBECONFIG_FILE + echo -e "${GREEN}βœ… addons-appset is now healthy!${NC}" + + START_TIME=$(date +%s) + TIMEOUT=600 # 5 minute timeout for moving to checking the status as the apps on hub cluster will take some time to create + while [ $(kubectl get applications.argoproj.io -n argocd --no-headers --kubeconfig $KUBECONFIG_FILE 2>/dev/null | wc -l) -lt 2 ]; do + CURRENT_TIME=$(date +%s) + ELAPSED_TIME=$((CURRENT_TIME - START_TIME)) + + if [ $ELAPSED_TIME -ge $TIMEOUT ]; then + echo -e "${YELLOW}⚠️ Timeout reached while waiting for applications to be created by the AppSet chart...${NC}" + break + fi + + echo -e "${YELLOW}⏳ Still waiting for ${BOLD}argocd apps from Appset chart${NC} ${YELLOW}to be created on hub cluster... (${ELAPSED_TIME}s elapsed)${NC}" + sleep 30 + done + + echo -e "${YELLOW}⏳ Waiting for all Argo CD apps on the hub Cluster to be Healthy... might take up to 30 minutes${NC}" + kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd --all applications --kubeconfig $KUBECONFIG_FILE --timeout=-30m + echo -e "${BOLD}${GREEN}βœ… All Argo CD apps are now healthy!${NC}" +} + +# Check if required binaries binaries exists +clis=("aws" "kubectl" "yq") +for cli in "${clis[@]}"; do + if command -v "$cli" >/dev/null 2>&1 ; then + continue + else + echo -e "${RED}❌ $cli command is not installed. Please install it to continue.${NC}" + exit 4 + fi +done + +export CONFIG_FILE="$REPO_ROOT/config.yaml" + +# Check if config file exists +if [ ! -f "$CONFIG_FILE" ]; then + echo -e "${RED}❌ File $CONFIG_FILE does not exist${NC}" + exit 1 +fi + +# Fetch config values +export CLUSTER_NAME=$(yq '.cluster_name' "$CONFIG_FILE") +export AWS_REGION=$(yq '.region' "$CONFIG_FILE") +export DOMAIN_NAME=$(yq '.domain' "$CONFIG_FILE") +export PATH_ROUTING=$(yq '.path_routing' "$CONFIG_FILE") +export AUTO_MODE=$(yq '.auto_mode' "$CONFIG_FILE") +export APPSET_ADDON_NAME=$([[ "${PATH_ROUTING}" == "true" ]] && echo "addons-appset-pr" || echo "addons-appset") +export AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text) + +# Header +echo -e "${BOLD}${ORANGE}✨ ========================================== ✨${NC}" +echo -e "${BOLD}${CYAN}πŸ“¦ CNOE AWS Reference Implementation πŸ“¦${NC}" +echo -e "${BOLD}${ORANGE}✨ ========================================== ✨${NC}\n" + +echo -e "${BOLD}${PURPLE}\n🎯 Targets:${NC}" +echo -e "${CYAN}πŸ”Ά AWS account number:${NC} ${AWS_ACCOUNT_ID}" +echo -e "${CYAN}πŸ”Ά AWS profile (if set):${NC} ${AWS_PROFILE:-None}" +echo -e "${CYAN}πŸ”Ά AWS region:${NC} ${AWS_REGION}" +echo -e "${CYAN}πŸ”Ά Kubernetes cluster:${NC} ${BOLD}$CLUSTER_NAME${NC}" + +if [ $PHASE = "create-cluster" ]; then + # Ask user for deployment tool + echo -e "\n${BOLD}${YELLOW}❓ Which tool would you like to use for cluster creation?${NC}" + echo -e "${CYAN}1) eksctl (YAML-based configuration)${NC}" + echo -e "${CYAN}2) terraform (Infrastructure as Code)${NC}" + read -p "Enter your choice (1 or 2): " tool_choice + + case $tool_choice in + 1) + export DEPLOYMENT_TOOL="eksctl" + echo -e "${GREEN}βœ… Selected: eksctl${NC}" + ;; + 2) + export DEPLOYMENT_TOOL="terraform" + echo -e "${GREEN}βœ… Selected: terraform${NC}" + ;; + *) + echo -e "${RED}❌ Invalid choice. Please select 1 or 2.${NC}" + exit 1 + ;; + esac + + # Ask user for cluster type + echo -e "\n${BOLD}${YELLOW}❓ Which type of EKS cluster would you like to create?${NC}" + echo -e "${CYAN}1) Auto Mode cluster (Recommended for new users)${NC}" + echo -e "${CYAN}2) Non-Auto Mode cluster (Managed Node Groups)${NC}" + read -p "Enter your choice (1 or 2): " cluster_choice + + case $cluster_choice in + 1) + export CLUSTER_TYPE="auto" + export AUTO_MODE="true" + export EKSCTL_CONFIG_FILE_PATH="${REPO_ROOT}/cluster/eksctl/cluster-config-auto.yaml" + echo -e "${GREEN}βœ… Selected: Auto Mode cluster${NC}" + ;; + 2) + export CLUSTER_TYPE="standard" + export AUTO_MODE="false" + export EKSCTL_CONFIG_FILE_PATH="${REPO_ROOT}/cluster/eksctl/cluster-config.yaml" + echo -e "${GREEN}βœ… Selected: Non-Auto Mode cluster${NC}" + ;; + *) + echo -e "${RED}❌ Invalid choice. Please select 1 or 2.${NC}" + exit 1 + ;; + esac + echo -e "\n${BOLD}${GREEN}❓ Are you sure you want to create the EKS cluster?${NC}" + read -p '(yes/no): ' response + if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then + echo -e "${YELLOW}⚠️ Cluster creation cancelled.${NC}" + exit 0 + fi +fi + +if [ $PHASE = "install" ]; then + echo -e "${CYAN}πŸ“‹ Configuration Details:${NC}" + echo -e "${YELLOW}----------------------------------------------------${NC}" + yq '... comments=""' "$CONFIG_FILE" + echo -e "${YELLOW}----------------------------------------------------${NC}" + + echo -e "\n${BOLD}${GREEN}❓ Are you sure you want to continue with installation?${NC}" + read -p '(yes/no): ' response + if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then + echo -e "${YELLOW}⚠️ Installation cancelled.${NC}" + exit 0 + fi + get_kubeconfig +fi + +if [ $PHASE = "uninstall" ]; then + echo -e "\n${BOLD}${RED}⚠️ WARNING: This will remove all deployed resources!${NC}" + echo -e "${BOLD}${RED}❓ Are you sure you want to continue with uninstallation?${NC}" + read -p '(yes/no): ' response + if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then + echo -e "${YELLOW}⚠️ Uninstallation cancelled.${NC}" + exit 0 + fi + get_kubeconfig +fi + +if [ $PHASE = "crd-uninstall" ]; then + echo -e "\n${BOLD}${RED}⚠️ WARNING: This will remove all CRDs created by reference implementation!${NC}" + echo -e "${BOLD}${RED}❓ Are you sure you want to continue with uninstallation?${NC}" + read -p '(yes/no): ' response + if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then + echo -e "${YELLOW}⚠️ CRD Uninstallation cancelled.${NC}" + exit 0 + fi + get_kubeconfig +fi + +if [ $PHASE = "create-update-secrets" ]; then + echo -e "${CYAN}πŸ” Secret names:${NC} ${BOLD}${SECRET_NAME_PREFIX}/config & ${SECRET_NAME_PREFIX}/github-app ${NC}" + echo -e "\n${BOLD}${RED}⚠️ WARNING: This will update the secrets if already they exists!!{NC}" + echo -e "${BOLD}${GREEN}❓ Are you sure you want to continue?${NC}" + read -p '(yes/no): ' response + if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then + echo -e "${YELLOW}⚠️ Secret creation cancelled.${NC}" + exit 0 + fi +fi diff --git a/setups/argocd/application-set.yaml b/setups/argocd/application-set.yaml deleted file mode 100644 index f15f01a..0000000 --- a/setups/argocd/application-set.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: ApplicationSet -metadata: - name: demo - namespace: argocd -spec: - generators: - - scmProvider: - cloneProtocol: https - filters: - - repositoryMatch: ^demo - pathsExist: [kustomize/dev/kustomization.yaml] - github: - allBranches: false - organization: ${GITHUB_ORG_NAME} - tokenRef: - key: password - secretName: github-token - requeueAfterSeconds: 180 - template: - metadata: - name: '{{ repository }}' - spec: - destination: - namespace: demo - server: https://kubernetes.default.svc - project: demo - source: - path: kustomize/dev - repoURL: '{{ url }}' - targetRevision: HEAD - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true - diff --git a/setups/argocd/github-secret.yaml b/setups/argocd/github-secret.yaml deleted file mode 100644 index c64ea76..0000000 --- a/setups/argocd/github-secret.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: github-token - namespace: argocd - labels: - argocd.argoproj.io/secret-type: repo-creds -stringData: - url: $GITHUB_URL - username: unused - password: $GITHUB_TOKEN diff --git a/setups/argocd/secret-argocd-secret.yaml b/setups/argocd/secret-argocd-secret.yaml deleted file mode 100644 index 4de447c..0000000 --- a/setups/argocd/secret-argocd-secret.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: argocd-secret - namespace: argocd -type: Opaque -stringData: - oidc.keycloak.clientSecret: ${KEYCLOAK_CLIENT_SECRET} diff --git a/setups/argocd/uninstall.sh b/setups/argocd/uninstall.sh deleted file mode 100755 index ac7c8a9..0000000 --- a/setups/argocd/uninstall.sh +++ /dev/null @@ -1,7 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) -kustomize build ${REPO_ROOT}/packages/argocd/dev | kubectl delete -f - - -kubectl delete ns argocd || true diff --git a/templates/argo-workflow/base/cluster-workflow-data-on-eks-cleanup.yaml b/templates/argo-workflow/base/cluster-workflow-data-on-eks-cleanup.yaml new file mode 100644 index 0000000..58d2c98 --- /dev/null +++ b/templates/argo-workflow/base/cluster-workflow-data-on-eks-cleanup.yaml @@ -0,0 +1,119 @@ +apiVersion: argoproj.io/v1alpha1 +kind: ClusterWorkflowTemplate +metadata: + annotations: + workflows.argoproj.io/description: Runs Data on EKS Blueprints. + name: terraform-data-on-eks-cleanup +spec: + activeDeadlineSeconds: 3600 + ttlStrategy: + secondsAfterCompletion: 86400 + secondsAfterSuccess: 43200 + secondsAfterFailure: 86400 + serviceAccountName: data-on-eks + entrypoint: main + arguments: + parameters: + - name: backstage-entity-name + - name: script-location + - name: admin-role + volumes: + - name: tf-state + secret: + secretName: "{{workflow.parameters.backstage-entity-name}}-tf-state" + templates: + - name: main + steps: + - - name: remove-resources + template: remove-resources + - - name: cleanup-tf + template: cleanup-tf + - name: remove-resources + inputs: + artifacts: + - name: go-template + path: /tmp/go-template + raw: + data: | + {{- range .items -}} + {{- if not .metadata.ownerReferences -}} + {{- if eq .spec.type "LoadBalancer" -}} + {{.metadata.name}} {{.metadata.namespace}}{{"\n"}} + {{- end }} + {{- end -}} + {{- end -}} + script: + image: public.ecr.aws/m8u6z8z4/manabu-test:tf-manager-v0.0.15 + volumeMounts: + - name: tf-state + mountPath: /var/run/tf + command: + - bash + source: | + set -e -o pipefail + set +x + echo 'restoring tfstate from secret' + gunzip -c /var/run/tf/tfstate > /tmp/tfstate + cluster_arn=$(jq -r '.resources[] | select(.module == "module.eks" and .type == "aws_eks_cluster")| .instances[0].attributes.arn' /tmp/tfstate) + if [[ -z "${cluster_arn// }" ]]; then + exit 0 + fi + cluster_name=$(echo $cluster_arn | cut -d '/' -f 2) + region=$(echo $cluster_arn | cut -d ':' -f 4) + mkdir ~/.kube/ + aws eks update-kubeconfig --name $cluster_name --region $region + echo 'removing kubernetes services with loadbalancers' + lbs=$(kubectl get svc -A -o go-template-file=/tmp/go-template) + echo $lbs | while IFS= read -r line; do + if [[ -z "${line// }" ]]; then + continue + fi + name=$(echo ${line} | cut -f1 -d" "); + namespace=$(echo ${line} | cut -f2 -d" "); + echo "delete $name in $namespace"; + kubectl delete svc $name -n $namespace; + done + + echo 'removing cluster information from backstage' + rm ~/.kube/config + + kubectl -n backstage get secrets k8s-config -o yaml | yq '.data."k8s-config.yaml"' | base64 -d > /tmp/config + data=$(yq eval "del(.clusters[] | select(.name == \"$cluster_name\"))" /tmp/config | base64) + kubectl -n backstage get secrets k8s-config -o yaml | yq ".data.\"k8s-config.yaml\" = \"$data\"" | kubectl apply -f - + kubectl -n backstage rollout restart deployment backstage + + - name: cleanup-tf + retryStrategy: + limit: "2" + retryPolicy: "Always" + inputs: + artifacts: + - name: data-on-eks + path: /src/data-on-eks + git: + repo: https://github.com/awslabs/data-on-eks.git + revision: main + script: + image: public.ecr.aws/m8u6z8z4/manabu-test:tf-manager-v0.0.15 + volumeMounts: + - mountPath: /var/run/tf + name: tf-state + command: + - bash + source: | + set -e -o pipefail + cd /src/data-on-eks/{{workflow.parameters.script-location}} + echo 'getting tf state from secrets' + gunzip -c /var/run/tf/tfstate > terraform.tfstate + cluster_arn=$(jq -r '.resources[] | select(.module == "module.eks" and .type == "aws_eks_cluster")| .instances[0].attributes.arn' terraform.tfstate) + region=$(echo $cluster_arn | cut -d '/' -f 4) + echo 'running cleanup script' + terraform init + set +e +o pipefail + printf "$region\n" | ./cleanup.sh + status=$? + gzip -k -c terraform.tfstate | base64 -w 0 > tfstate + kubectl get secret -n {{workflow.namespace}} {{workflow.parameters.backstage-entity-name}}-tf-state -o yaml > secret.yaml + data=$(cat tfstate) yq -i ".data.tfstate = env(data)" secret.yaml + kubectl apply -f secret.yaml + exit $status diff --git a/templates/argo-workflow/base/cluster-workflow-data-on-eks.yaml b/templates/argo-workflow/base/cluster-workflow-data-on-eks.yaml new file mode 100644 index 0000000..f277ee5 --- /dev/null +++ b/templates/argo-workflow/base/cluster-workflow-data-on-eks.yaml @@ -0,0 +1,72 @@ +apiVersion: argoproj.io/v1alpha1 +kind: ClusterWorkflowTemplate +metadata: + annotations: + workflows.argoproj.io/description: Runs Data on EKS Blueprints. + name: terraform-data-on-eks +spec: + activeDeadlineSeconds: 3600 + ttlStrategy: + secondsAfterCompletion: 86400 + secondsAfterSuccess: 43200 + secondsAfterFailure: 86400 + serviceAccountName: data-on-eks + entrypoint: main + arguments: + parameters: + - name: backstage-entity-name + - name: script-location + - name: admin-role + templates: + - name: main + steps: + - - name: run + template: run + - - name: restart-backstage + template: restart-backstage + - - name: cleanup + template: cleanup + - name: run + inputs: + artifacts: + - name: data-on-eks + path: /src/data-on-eks + git: + repo: https://github.com/awslabs/data-on-eks.git + revision: main + volumes: + - name: tf-cm + configMap: + name: "{{workflow.parameters.backstage-entity-name}}-tf-cm" + container: + image: public.ecr.aws/cnoe-io/misc:tf-manager-v0.0.1 + tty: true + stdin: true + volumeMounts: + - mountPath: /var/run/tf + name: tf-cm + env: + - name: BACKSTAGE_ENT_NAME + value: "{{workflow.parameters.backstage-entity-name}}" + - name: SCRIPT_LOCATION + value: "/src/data-on-eks/{{workflow.parameters.script-location}}" + - name: ADMIN_ROLE + value: "{{workflow.parameters.admin-role}}" + - name: TFVAR_LOCATION + value: /var/run/tf/terraform.tfvars.json + - name: restart-backstage + script: + image: public.ecr.aws/cnoe-io/misc:tf-manager-v0.0.1 + command: + - bash + source: | + kubectl -n backstage rollout restart deployment backstage + - name: cleanup + resource: + action: delete + manifest: | + apiVersion: v1 + kind: ConfigMap + metadata: + name: "{{workflow.parameters.backstage-entity-name}}-tf-cm" + namespace: "{{workflow.namespace}}" diff --git a/packages/argo-workflows-templates/base/cluster-workflow-spark-rbac.yaml b/templates/argo-workflow/base/cluster-workflow-spark-rbac.yaml similarity index 100% rename from packages/argo-workflows-templates/base/cluster-workflow-spark-rbac.yaml rename to templates/argo-workflow/base/cluster-workflow-spark-rbac.yaml diff --git a/packages/argo-workflows-templates/base/kustomization.yaml b/templates/argo-workflow/base/kustomization.yaml similarity index 100% rename from packages/argo-workflows-templates/base/kustomization.yaml rename to templates/argo-workflow/base/kustomization.yaml diff --git a/packages/argo-workflows-templates/base/sa-backstage-scaffolder.yaml b/templates/argo-workflow/base/sa-backstage-scaffolder.yaml similarity index 100% rename from packages/argo-workflows-templates/base/sa-backstage-scaffolder.yaml rename to templates/argo-workflow/base/sa-backstage-scaffolder.yaml diff --git a/templates/argo-workflow/base/sa-data-on-eks.yaml b/templates/argo-workflow/base/sa-data-on-eks.yaml new file mode 100644 index 0000000..b86431a --- /dev/null +++ b/templates/argo-workflow/base/sa-data-on-eks.yaml @@ -0,0 +1,66 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: data-on-eks + labels: + app: data-on-eks +--- +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: data-on-eks + namespace: data-on-eks + labels: + app: data-on-eks +rules: + - apiGroups: [""] + resources: ["secrets", "configmaps"] + verbs: ["get", "list", "watch", "patch", "create", "update", "delete"] +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: data-on-eks + namespace: data-on-eks + labels: + app: data-on-eks +subjects: +- kind: ServiceAccount + name: data-on-eks +roleRef: + kind: Role + name: data-on-eks + apiGroup: rbac.authorization.k8s.io + +# allow for updating backstage config +--- +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: data-on-eks + namespace: backstage + labels: + app: data-on-eks +rules: + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get", "list", "watch", "patch", "update"] + - apiGroups: [ "apps" ] + resources: [ "deployments", "replicasets", "pods" ] + verbs: [ "get", "patch" ] +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: data-on-eks + namespace: backstage + labels: + app: data-on-eks +subjects: + - kind: ServiceAccount + name: data-on-eks + namespace: data-on-eks +roleRef: + kind: Role + name: data-on-eks + apiGroup: rbac.authorization.k8s.io diff --git a/packages/argo-workflows-templates/dev/kustomization.yaml b/templates/argo-workflow/dev/kustomization.yaml similarity index 100% rename from packages/argo-workflows-templates/dev/kustomization.yaml rename to templates/argo-workflow/dev/kustomization.yaml diff --git a/templates/backstage/README.md b/templates/backstage/README.md new file mode 100644 index 0000000..632ba46 --- /dev/null +++ b/templates/backstage/README.md @@ -0,0 +1,3 @@ +# idpbuilder-localdev-backstage-templates-entities + +created by Git Repository controller for backstage-templates-entities in idpbuilder-localdev namespace \ No newline at end of file diff --git a/templates/backstage/app-with-bucket/skeleton/catalog-info.yaml b/templates/backstage/app-with-bucket/skeleton/catalog-info.yaml new file mode 100644 index 0000000..c678924 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/catalog-info.yaml @@ -0,0 +1,48 @@ +apiVersion: backstage.io/v1alpha1 +kind: Resource +metadata: + name: ${{values.name}}-bucket + description: Stores things + annotations: + argocd/app-name: ${{values.name | dump}} +spec: + type: s3-bucket + owner: guests +--- +apiVersion: backstage.io/v1alpha1 +kind: Component +metadata: + name: ${{values.name | dump}} + description: This is for testing purposes + annotations: + backstage.io/techdocs-ref: dir:. + backstage.io/kubernetes-label-selector: 'entity-id=${{values.name}}' + backstage.io/kubernetes-namespace: default + argocd/app-name: ${{values.name | dump}} + links: + - url: ${{values.remoteUrl}} + title: Repo URL + icon: github +spec: + owner: guests + lifecycle: experimental + type: service + system: ${{values.name | dump}} + dependsOn: + - resource:default/${{values.name}}-bucket +--- +apiVersion: backstage.io/v1alpha1 +kind: System +metadata: + name: ${{values.name | dump}} + description: An example system for demonstration purposes + annotations: + backstage.io/techdocs-ref: dir:. + links: + - url: ${{values.remoteUrl}} + title: CNOE Repo + icon: github +spec: + owner: guests + lifecycle: experimental + type: service diff --git a/templates/backstage/app-with-bucket/skeleton/docs/idpbuilder.md b/templates/backstage/app-with-bucket/skeleton/docs/idpbuilder.md new file mode 100644 index 0000000..3ec74fb --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/docs/idpbuilder.md @@ -0,0 +1,46 @@ +[![Codespell][codespell-badge]][codespell-link] +[![E2E][e2e-badge]][e2e-link] +[![Go Report Card][report-badge]][report-link] +[![Commit Activity][commit-activity-badge]][commit-activity-link] + +# IDP Builder + +Internal development platform binary launcher. + +> **WORK IN PROGRESS**: This tool is in a pre-release stage and is under active development. + +## About + +Spin up a complete internal developer platform using industry standard technologies like Kubernetes, Argo, and backstage with only Docker required as a dependency. + +This can be useful in several ways: +* Create a single binary which can demonstrate an IDP reference implementation. +* Use within CI to perform integration testing. +* Use as a local development environment for platform engineers. + +## Getting Started + +Checkout our [documentation website](https://cnoe.io/docs/reference-implementation/installations/idpbuilder) for getting started with idpbuilder. + +## Community + +- If you have questions or concerns about this tool, please feel free to reach out to us on the [CNCF Slack Channel](https://cloud-native.slack.com/archives/C05TN9WFN5S). +- You can also join our community meetings to meet the team and ask any questions. Checkout [this calendar](https://calendar.google.com/calendar/embed?src=064a2adfce866ccb02e61663a09f99147f22f06374e7a8994066bdc81e066986%40group.calendar.google.com&ctz=America%2FLos_Angeles) for more information. + +## Contribution + +Checkout the [contribution doc](./CONTRIBUTING.md) for contribution guidelines and more information on how to set up your local environment. + + + +[codespell-badge]: https://github.com/cnoe-io/idpbuilder/actions/workflows/codespell.yaml/badge.svg +[codespell-link]: https://github.com/cnoe-io/idpbuilder/actions/workflows/codespell.yaml + +[e2e-badge]: https://github.com/cnoe-io/idpbuilder/actions/workflows/e2e.yaml/badge.svg +[e2e-link]: https://github.com/cnoe-io/idpbuilder/actions/workflows/e2e.yaml + +[report-badge]: https://goreportcard.com/badge/github.com/cnoe-io/idpbuilder +[report-link]: https://goreportcard.com/report/github.com/cnoe-io/idpbuilder + +[commit-activity-badge]: https://img.shields.io/github/commit-activity/m/cnoe-io/idpbuilder +[commit-activity-link]: https://github.com/cnoe-io/idpbuilder/pulse diff --git a/templates/backstage/app-with-bucket/skeleton/docs/images/cnoe-logo.png b/templates/backstage/app-with-bucket/skeleton/docs/images/cnoe-logo.png new file mode 100644 index 0000000000000000000000000000000000000000..63b8f228ef58a42a758e570331053afc547df964 GIT binary patch literal 58052 zcmeFZ`9G9v{68*{rH~?`;&6(H5g|JjN+C3sFl5PYWFKpjQ_5N?`&L5P_pyzovSr`* zv9E)%jeYoDw@$s!`F`G?Kj8Ctocf`=d%2d^@_en=yt=QZOh?N`OGZXUcjxvkO)@fy zbuzM}CDg~jo%lXaEpUV0>gLV+HaC@TB5je5S`Lp)&6UmV%^j^wHI;9WkzEfCh8tR* zgEPs-l;rdO+2YrglJb^*U-Vspt!DdQ1GD?)`F2BB!fXo^UN%;21s zaK~R4U(pZ8T_nH4mL)LNIi6oP{r$V7bG3IHop+l6f5>~j_m_^aPkgN$SR`=P;(9kQ zn+F#7tozDGUJgI+%eel7Yuub{pSdQ_@F|7DZaqz}$rjCbDce}i@l)Rl$#hub8J6=} zquvO=G*Z06n-;YHeefmK4EM%E3M!}N!4PTD&zYCG8WkJF(xcV5JF$MdzD0_|Hs1&R z)I;-yyqQLh7H>rGIfjq7ums`ctXC9M#F9}#!N%po$BtH&NxUv*DvC62OD*IjMOMJu)l92$0srI7G z3qrh5PFxiA_*)5<<7`0}VcLZ&H|l+L3VA-AG%9lT4ILkc3D6%tFSeZ@uPZu=3J3PD-U^o3;Efn{4@Et9x`|-~ECY`f5nlmqVNwzRJVOE`D=2_KYYx=S0)V+Zc8t9M{`-ui8w;|iM;I{QZw z=UbizEwdoAc1aa_(YkOhC$qJZ_Ab;BZp{So!1BOZH-*}L3$w`4g4P<91o4x7t$nRF zKi>D+BP6};bpp$jv=hpDoaUVWv|zIqaIPQdigRo|_-ZuMn`1O1{_w;;mCsRM{Gc{Q z6o0Kro7TG&ssCMhO-9X3Hdz2}`zSx@qn@bt4mn37nRkhM8MVbR{k_S}2D!I34V!N{ zF8NO2CS}K3oDv)po{T)LHyjmoG;%b0!r_#lY~6(-T(eoqPRga7wu;agO1SZ`Pe7X2 z?77U>Z(q&ss?RdN_>1Nd%)?bY{d6#kVcD^|9Hd#gcg9neFHQ^g8Tmb9au1ZkkMVe= zOb|qls@YHc#eGNaEZ1|pGLOF&i7Bo=cVz~$(X~!1w$hX)UPfNmWSQi?I{2L(39Qgq zSm|<{%WI?`53-6YD2$#D_|`BvVM3cN%y;I*R8=A`zI3+iTzd+AVT9!rS&pah^{>b~ z`y`e@RI<5K!m;anJW`tvizFCEGmf_HS~iM3wV1#X$TDP8+&47cdA^&BkYDfi`&O-^ z&eodFfhX#_+h4?y^?6|t2fHK>@3o^{BV@&i2S*Psx*xAG?P&x6am!ry&SO!T&m!vb|GN$?7#)dO8; zUDbP%rbs)%M`lP9b3u1I2j~SdX?IC*X=m>Ih|}H9*4|0dU54xM4M}hf-G*^-9=_si zBg3VudY|(q($Sn#Oi)Nrh)b51lao{0(d@CL<}IbaKL`Jl;j(mgc94X@+}zv*-9!YD zjux=15)u+HAz_%XumE^NzzJpV{K#Fv-iiC?Aiu`BW$t9^XyxE+g|z2{#(iXhba9s9 z;({jn{paU8ovj}K&rJ4Ce{TzH5C%PgT@@69{coR{yIcKVK7*e8{OoXFKc|z129s2G zv@!<^hL$CJRr+v(f8G0^?{xT$u-J8J*#G+IfBjVNe?FBE z75V3v|9JBEm(nnZQ2!v@Pp%x^1#FR}m4^Lhu`I3Z(#0AwGI_E)w-g?@A6XcdvpuI% z%Dbhddc;P;JzQ+K%B$)a`xQ>y7Ugt};If#A%+cFl{~Z4m6Uina9(R|U&AsHy_tz9n zFX<5l$A{u=!~FS8#VegR#B^_~{3$1ISU57L9r*6M+;BI1xO=#g+)}J8O)YLM{Zi)s zj?~QE2BoKDN60CtPjbrtckv$){*#3NwBSE2_)iP|(}MrB;6E++PYeFjg8wJAfdAtC zj4sO)FaG7)mvZOqEgZDnM2g8w2=q~@qP1E#~+;a%GL)J2O56&?8mx~lZee=Q=6y30_UFj16ly*rV*cMp0tbDU|0kmvu;*(s=FxnK7- zdrHmL;m)QE#9NnPRtSKhb*b?yub~%P7+-&IqYp~`CoSYh&!LrinsAm{H%EK?u+-Du z-nH@l@o9WVu>BNqs!yxfXsBm1+ndE6{PXRmKOJ_*Tq)Krv~<;$@aP!Dl{L~s&$r~| z57#2rsra|5ZN5Q04YkoMgPy3wJQ4fBo`|@$`952 zpg<-x{|e=LOa6*9po1EXfdsMd=0Dc}1o2B1zFI-L-O18|^>CXEtWbLh4#Q893|2 z73Nk*d`*Fvg)08!;_pE(Pmwd*u~c7g)O!?^|3F&#DH)mp3@1CfeDt5AQGYU^Fui}_ z#jP?$p_Y%@zsEcZ#$>p@_fH)4G#;U8f9d7An*eXOVTt=}X77m;d- z4FN@pD>ggjnA6qeGo3EuUG0^rnObtF+mO(60P*pr7+3!1nlj#3<$PQm<*gmMr8uZ# zm4uOM%EB|(6`oJml+PB6KTUH|mkP~~7rJfw8)7UqIH``xHl;|Yg%U1c+!a+%bGE&c z-zRx%ZD_r(u>IUHyuLQ<7KOt4sQ3}^h5EKVQmuMmdAbaM%*5hWr8|FXrzL_@y`BBt z?i_Kn(>fBfbP%pd;Ds~tZh0jk1u~|$3vVYfqI>=PEN7Is?T7&!9TT1soyhX@p&a)} z*fg_Q)!=Cga*Cci@)|)drGvGmj z)1+^fM75g&aw_VTgQQQHF`Mb?@i7apblP!+4fHNdKwf&(<>is2r4q)|e=Ee}(~;Oy z)9JHS8uQGg`f+?rywu>LgBbcDxfazFtXM_x*^@$y_v1@T%~Yg!Y1x9;clQkWhU1Z@ z3`fXqV8%Zd2P!GZesMU3>GLsvt@xFdG1M4I>dhESl!D(odzmfKWa_1*47b5=MFC%P<|!7J~T=q?~C5wdRa9|o`1zbZX13{W)*&~b+N9R^x)P84xo8h{Oomdn~R60 z`?Spi`c#a#@M=E)Kzy(BunMN6uQtq6e?}CK0tC*;2iC-;Vz*Z9Z-LddN5i<}uSUn~ z(_N@Yh>zi)^{HqVmvJjWX5qyDY;zaN-ct7PK)R*jrm76$j7{R4QsyK50C41#lVhhA zOXGhD6!ppL7lq>EV>ClhX0UNzE~l?M&O6oe z4EYpG_{>T{jEDtzDwVtZ^4Cs{-%~ics=v4Y(rT9teD(x?(_9(xatZqd=X;!QaHQN-wZbv zpj7H~O8*=mgM+uK<}M+a@c~isW#O=w?>W|+cO@btQa_33Vu4FCPr0_*ZPCz{{v-C$ zU~6+9 z#^>8q?Ia?_8wrZ-p7Cj0GU@rua}VP>V}V6S!&!jP5T$Ir{uY`eY)`9rfKQb0+Wpxt)+RndbCJ%x$5ku+>uJl0vUiTun@;Rd@2F!v14n4QsK^yc8B`4Z6A@abT4T>uv?yMfC z3$!VZiQn~D?%bU#QGCK=Lm^nct?%wS$7jYHt;xDqbMBO86JDt{aZWMoaD>`n7J`@E78L~s8dU0|lZXWUH z_|0!gexc}iPgYW+5f2#XNpK1|)wdTcs|oGvLwq&YCStKH-A-C&OK|g%^`YlOq4tP^ zIb(!Mc1LZkT2iNN{!nJ+h3__-YT}H<03fF6f85Wg6$<(-vBrYr;vDOE%GLniTki)K zwRhdue3*J>Yecn;J(hUxk45Bfig9@Y?NoQ}8Gj}A3RlcCblD-aq zaJ*UTtPx#ZeVqEK89d_F7fPZFyM2Kc`*l{ixq!jHsYAFD&s}xf~VS zc^@I<=2+o+X-!l4W;WV!jdb%cYUB*>Im9byf7+^}1lYdTi8Nm7wC$J^xBSk_i&dVi`V=rNe;VRJD%bx5`}AZA*nNGYBW5&FeBUhSvFJ=mm@bX zrFbyp-_ozp!;br}Z{d6zb=sj=BV5Ti&v#O=*}?hUPkQRwpe1^Hl#JN!^#Og|h z(kA6vOGPNTheertI2pQ-85ov9edOpNkb_7h9$S0{9ZsU2^d4OLOtIZjO1UoUqcHXS zfJ#Hg?V60Zx}9NM=54^v63yiqcJEH787~{BihyKR{On|Hw8 zX*si;F_Wzf6j?Z{+S+`iq6>0#{U+;DX{WufIBv8`_^mg%#aIy5A;kK(lZ>7^6FIm( zP#fha|7UgsW=KKy2)4n972qM9e#zzPvh?~qcvaeFzBZpq^wW;*oUb;uhdxP;9QQ52cROuzA^36o$O6=Cb z$EwBkbVS2N1N(E3*SM|tQk93q#Fk~PosIO#KNvdXNxx`jjte=fTlU~F2rfj*;81Jd%Gx$w6ESUbb2nl1BEyv(R| zw}amai?YBswBa}I@=%!`JA^5>LZ58l@ivEevgwznObRH*rFjd_4wmP3mJ zYMmZydiE3Pasjp&toF00=FO7rA7$`Tu@{F)6}%wGH!fw9P4FDT*V>uc@$~@{UDQ?b zpj=%~Mx)CW;R0J4@R5|XzB{dm$wK1JT1947uLe47uEgrP%;qMbvyuZ$z1?ubc!xLA zo16BEmt1UojL4=3`|k0C=otR~it~G2U-`#1Ja&fdk1wWlc?rRi^M%)H<2cOqeI)kV z-JpOa5&<#*9wHWhyU8vTwVgJNA!^y@DXVulPS`Pd8GPh4BAQcNJh)gGm8rwj%H6l! zO{M0eOAna-*uTAhPn32X*j5030wkH{s0uf(VoaF5TwkEdXMfa7rxAO(`lz}QjKlC0 z?KCk!&L~n;kGXCoIz~28=Ru4>pY>ayJa;bxV!Xqs{!BPly``DV$jy^{iGcO4517-f zf{7#2L#LlncG{z?KV|BZbEvmsQF634>qXpcrxYrZ z=?z=$U78uy)j#q>On7Zzfsn`IZM9ePK>=`I56Ywbj&`U25TczXT?@TiBkB{H-I`LN z9q+j7j~~=Z5SJb656pCD?Q|Yd?$6*%tldBS#SuL=?y^%PDijsZlkQO5zeVu1sc4m0H^;Nb3z&H5rS5cH1_z$~+D({j#xzdx*qUR+ z+Cklqt~dr+YhlS?z^p)~<+)leqT$bkw!tNbevf+~6Q`mm2RHX!>TDFmd*TxK`%|=g z!X!&}J}1^7n4Y;`u&H~l7+hHOxVcSguDK>u_QdM&s|rNf)?Y6+&(tLG?!3uFv<$6& zI)WAx33`0tuVdCUlMH7O3`HOc;I8lW5=z&`$jV$6Mke3}_t&>y#5dHy2J}=Cx94+G z{iWv!OLIMb*@ zgstlr(D^Ep=C<=CUkM!-d!+ER5r+j{X8u-9yVfu<=OP-4^d2)Jm0x>EWv#B*d`LcS z)M1q{0bj~h?Ds07z?^Ou*ne?P_M>iZ>go@Wi| zuDzww@fypQsa)4|RDcX8JoL@39m##fpMQ`V&}-T`c>U$D(n{dDrm}%Sdpi#gooA@+ z_y;R)Uk|H4A|TV+{C&pkF!|B;Ox{PtfWE>maVqwrlf?sVxfCAX z{@vw+4cvZ+6OuL7fZ_6pSqNNJq8 zDvGH`mU=eBTbu1#c2b7d2R4jGRW0y^Bc?jK+URzFs@9}ks&9Wx%Im=wKRuWth_jv7 z)(FbFYLkSyuuwD7;GZw%G`;=p<5gb?X(yx8>RARt$d`Hj6v1MUcrSpEzR`z@2)RcT z+RB{js-7Z!Mr}_kSdZb-n9hpOfh^Uy>TXUmTN0Zfy_~^>K;<^35XPyW?QN>Fr8{co zVGnW^q@O;sR9V}PI*WvZwVe6+pywBB@l){bxHZ@VPj$2N$jNaQ(tv=0tI7V;*+ot& z(U>N_*b1^*b5gu2!wWyEi& ziWUl{%$?bt3++v9&HAD*A(q{|39vYVF1ejV+}#nA9^AiQv@c`HbjQ?2;B|f@a1Qx& zG(v*L8!-KTYDqR6V)3Gpb+6M2_P2zxvB~rwh3-(S{g_W}Xt*Tl=-S&EQG%+JBu#t| z^{*cA+&#@fkcU|HS$^<<)j&h+8`q&VraL}a)6-au_?9WwYY{J& zj%N~W#EcQYj;89jFPJC$7xguy1H{WbMc@eRu%; zKw63CjCM0=dZ+QaCqD`JHsy@13XSS@5^0Ds4s?>w0><#q`%IO}Vq#w)KBofa`7!OK73D%R{@9N%9C8z_O(S z7|y3e4M=SZfxNhfBf)s}wDq|X+v@UCEqkpiZGAcR^Hp0vVOA!JciY=h1MF`XoG*>ZE1(y$ognbzDP4!S&6wYNjtO<-jx)i%x>DZ_*C&OH(o)4Z=!`+!qxW9IMO{}pbe_+lZUGpuru3Tso0V^4W!cwacOHgIeYrO%VCMMU z-1hDtLTP`Mv7oU@?gHm(Z9W7yePUGfNis|ZLCVdY2_h+ZxxJyA#S#->w?)_6I9QVN z)$Q~TRNC^Of?Txq#Jh%8`_i(CFfHSlmAI6O7q*oyJ}ZHkHI%JEN8tk?}?Wc+@;q|d}@oO94}k{N&!6mP=@;z z$i0g|@?CMdJrIue3}hm7tU;}0p4=uLh!$LV6y-`_Rp zn;kLQJEcXtX`_C*2`}C(Y4};^+$~q!%5&15`;6t2jU;zT-^JvW^&!XWqHa9#HewSK z6ZqW{cJj5>9(L7jfN)R5$<|HmC{{;``BGBC--r&hg!A7aC_UESj~Q5U1yyLXX;Rmg z;*08XPyb+yl$D?2N_pYswy=%rClE-P98tXbD~9e-bc+d-OX=9=skaVM#L*A|{g9qn|Mrbf4n z&j=s)iM?A;#sv0dn2S)n7F(jeWbL?lyFawuxUK#_~sfwfl47@MXn3Gs6pTUzwl- z9j{@NR*vL!ELMA;-gjs&W^+w<$!l-DNe(6{f}B2Ld6?79d-^oK_XvbNSNyAZ8!d{A zbvwDwpJBZnb6PYe)%U$0l1Fl5$j@Yq7z-B<&77@y@VQz#YmzMxH2)-vC%vxmVQSi{ zc)#>c1BEJ&H|1w(n;kel`IQBE%s(@WK{8vu&$795Z%hSLKyef z1qY$T=tQK1)1S@fUVFVWgJ-O!m$RETcA6YGc=MmZ?0jH9-*KFrg?jQwHs-=Du_qFy z8*7xkya7fX-NBh9d!*(Gl-9e!N@rWN2;cF#>58*`(Gste*ldfn+8NU&pP`v_ksYDmFMK}Q+raGfA(3a(bvh4$ zpr6K`zsAwjcou_|p!`#PQW|no&=S?OmJ>+?S4Rsk8o25A9es0xDiFd2bAMkHKie@f2&V}sNuC8E7cSD`X&_xtx_`-|n z!&a25RDVv5qK@8WjrE;EspU3fi%G_EeEqbbcS?Byv~rN4oxrHSTY!Y#$iE3`ky#>+ za&9zhM`2VzC(?1-x*>|%ehRn8L=t|^`+MOPB|gs6@~a-VMRYD-*?$x7 zgWFA7SI zM{NYNuX6f4Ub_yy?sHFvTZ91G;Iy+v?7egwTtTPXwZVb3i48Sh4(63e(t%9s;QAp_ zO7e3i_V(*1nL_&C_6V)>MQ1_D6}Kh=%1rw$O*Ya~;!$!VGG!zY*!&$JS{W~^c=?fX zN+N@ADOsG#1BT1y8jL~&WizU=66p(e6l(*lI@w!J85oZ~W2ETe%FlxeGk%M%Lk2Pl zv+v{)rgOZ^R&vi!bu$|ox8J}WmvDDn%h?_W-E;h83ZW1m`I;U-tiVLVuhmn^sqshS zrUla{ufDID0Su8Jxd;eWKh@?~y3ly(p7fWFZS8HucwiLTnRswat6&{#5g(iDLF3Llw zA*_2*Oc&bjhpImnic@q~Z_H#WbFf9#Y(F9r3PiBLE3^Jnw=sIp^+O9ahd zA0#XT&p`96Wax}F($h|EZ~KbgTayZNIm~0wiEesooF$v8E|X$y_1ze#bx!RH1d{S}uq3cJ zG>{L`;)WN8jYv)>>jUE={G{>?FXKMxQCW%IumC+o-srteVVxX-boNYFF$?J#hC96BzFv_?1!CpqgS=tna0?~G4dcsDC3akF?kA%j za$1(&t=UR9^@^xAY!5sQUdRr~g1Y&$Phh9RCU!oP7Z?UOwGTm8}Z*Txi zpJPp4GOHMm(1#l-3uO=6Y3QL)*m7~dbMm&_x?kSfm1VPKLV#}t<+V3@=B^(~lM-j8 zMw~f6SEL1+phppR_o+M!rII3SM!z%xkAwS z`c>qygzXcXsVT%vqPc|o^+qzm>znX-yM>Hye`)hV6x!bqT80DE!*Nj_>VP@KE^ur4 zO_f(_Z%E#1R_#MnATQ^;x}6m1bK3Kymml76tUXL)zgm<)$m;i(u6b;YU4O#ucAFc5 zi%+0F%YzJ5`#U`k-TGW5o!XmH(3epzCo|;1(qzMP^r|`s;z43w5)3wcXs;T;MlLxy zLbYQ^77wWe>NMvk?-jyk$Tc8D>B=GUvGC-L^>)Z z9R@{jpT@HsdL@U0Kpn22YbYvBSSOpbv**V)r1fb;GdH&^hd7B-=gC^Sc0H|AwZ;Rb z$VA*~9Gl~jiNBwy0^^bHcm$TAYXyRn_Z8STj2A1fV*H;FL`((#l!9&=;wRS6G72;(S7-nW zY!KmmCUNDUdhyUDuzw)IgdOgY8L`>WERYuYgVc~8e@ILkFv_LB99h92J({Eafs1GA zykmj+8#39A2926z=sT3Fk|=W&Yo|?R^!mGFA)fDKNBZ|I=`{GM zxa7A9=?_KZ2m$dB@~S|{`*%2fjdOWHasRuQTpBCx)rsI^Y~_isKv_+IIR0?NK(2h0 zw+z})q5wKJZX;zNR33-1GaL_dWiebg8Tz2lu<yAf_I4c1L`yoIqk$GI2H|5-v~sQwLLm1lE(;)ZjV>sc!Vwt>Gq-DKap;2kv$rm7oJ*CS zCevY5gk2bsLGZdDxPhhy*m){6DeBA{^5z6WT2)mJb}@Z%Q4-RKyeg3F;EHrBZWEkN zM6{f|MsodtsjdNSrjO8%ssj}=!dUv-*9J<3v0|Z{Jw{1=%IR8x+()07@;nPCp;iPJ zU0&FT(T5l9N`j_5v><4+br}}cf9nj|?e9}pXP+Vw}q5Ul;UG!WM)L^>@>tYg^@dj!=xJy9slqNw9&AN}#v6S%l68xFi!g1h=|5zUw!f1>IlH9v+ z{@RL!y7ftz=eA>!1ogZ3zT8dd{)=F+3V;%ugf|x;_Ff?GoqqC$Cc8bk;$EM*KUi(z zP4c9uh*N8^~&%1UK-=t4dQx9CfMKzyqfVIn7$quKm--IfCL>7 zKwH6>^?RBlCt*;6VFu0@KmwWI>ey`0jVXKF$g8g`{<--z8Rd~CWsGoJ--_M61vMa0 zps!<`v;pPPtIWZ85j6dWCTs1?a>H(UjbSJmsO;CH%SRfq)Fz8H@&m_B;xgBHy(@Af z=m~=RNHj@i{hfTcnyOCu!gK_{hMZIeEkiSz=H8#)CP7P%clB&3lq5y~a7L!vqLmr<~bV?oBu@T&B zU%F-rw~Z+?$}jp;#8F#e<}_yx7uY7hBR8ENpxIs6>yay@v7P;n&~H$|sVxN@ZP+~? z{V*oKlb%b;uCjSdwR;2VbW=dFzV|}jbHNo*rJG1)_D$7ASnaO*ojVLOSirIjKbdlX z{Zcn68%KiP#?7^AS7y+^qB#m2m5kj)<52j(vZjjO}M1~^Y#mR za9j2y+l&uh>W9tvCn2^TgV>sL8@=U^GV`i$(w~%Zu!D%1(Ka!Y{wqaN%TBcWtt+&k ze;(Utrk+eRsEkS}xB(PVl!cXQ6~VAdbobgabO{Gf%bnSxP?X6nG=?*^GzNHoRS$gM+ML6_wRMSuY-D= zp_VO+a{>?67DnWe={n3(xB$3u@O!cF*j)=~9N#Y8v(LL3kKANe~ zhl@o4xV3>9$v1#h{Fi_SX(Ha`@LSm>F9}7Purk}QoUO+@hz(rl&yKyRjmT=LV6>Sc zdFdEiYE)hVy^Lw%u=#l?@I$|cI*+3CtvG*^JMI+gvDF_?lT%@_58Y9e1b232v8;i^ zRLrKE$^6QrbM5-)Ulcr0Rb*@0pW!<1HglhFgXK3TMcWE1baf&+v%dkk)_=ipM16Lmu)^H|$ni7w`14X9)|sJo2GF&7|RabTQEwsmo+`K@W9VMny+T zcW;6#0Y0LWY?Cf~YXZtYOGAd{!vfpyEv8?7Ez+E34ND1LswEpt5c7yPX}OW!f$;Dk z%$DCgv%hz!+Ge0=6D+Yl1vfAimmy`9U2u}0oxB*p=VLLyekD)M4jOJ5bOaD&p8o@G zFEP#D`VcsacaXHoIKH`s8~aNp;o#B4M;7GF{dKO;EMA{Gz;kgklR^u)OL|sHaPjn$!CRlHmWt4}brMmW>`0sq=2PD!h29ESsB%1y=3!PQK zX$$I6=8{u*oj^kGTZ&cT2d}VIGerGTBPL^_0c8lYi`X>_LD1?YKsJlWWTpOY}?TSOiC4!{(XQ3xH{6J*Axo}9Cb5Y zs}%)tQZPME!kFuW?BN7`;y_auzt3%uPc@su`Zix7_@$Ly9si(Ca=EV?DbUw#_HjU=L35g+83`_WRV{ijZe4Q==^nLJxf&Fjb}m3!>@-(@xK29i zflcuz3)Fxm2+_K6W18kM!#+72)#X^$;qp8-BSkV-IhhhShgYA68~>FOw;uo@X_7I1T7TLr$j~8WGWX^gNuEgGcT9rl%JpcJP(O(BO<=M$42ABE+ zuW8)R*4dNDTida7Htl|q%_)^K?mba3i{9I5oBXo0X>B&SUrr%gld)f1BRD_cu4@`;a zY>TeLPB~NN9TdePCM0Q|m z)$2BA80$Sz^E3S%A>?XO-!4ZXsl*>6bE?m*K4>?ndeq-j$9{V9N}U1LHO+;wj;D7& z-Y+3n4fi(lvaV;b+Buq7#=V5UF6l@WL7e$Njyo8epf#4WJ$b9

d(w5}BKBAr{wrzd*>V2kjkOcueVOl_vEG7B`N4Za1mCi(JQ%LO+x) z%LR9-%EYJbi4B+g3doS`-R7O*pvV_RJrqJ5OdESQfTD`J#BM0KqyhJzYj9Hzi)*V+ zQsQ7*WRRPUa@%~69fxsu%hu73Axia1W%*`_K$=_%SsqVha1e;XXeY0{>-Afl9cWp` zFLGLR6_yO&!Eme#NaHT$7SWuHR530WMC?oHYTF&q#irR1=tF|?>c8`IaU=CoyQk5y z53)!V^j~dfJ|m=JM)=|lZEL9_h{rbcmxX6S^E#T+h*)vU)5%Y=rs>LXi0MdAj+;g_ zHbAWxkp=)R9Ql=@cuW#4-F&$w`aZn;mEq*qrR{<3=Ji%L@2@h$=bf*iizq`T$c+lU z-#jn$-9e5Hx;4^V$q)gj>K;sv|ER6*I0!Z{@2aW?q*5s zf2}mM{vi=ehVF*WFp)fM{{lXbzVRD8bDVgO!5_U!PvtQb0iTC-6&YjZFiREH&Ata| zpVbDt$IqDJ;k=GlFWlYtk?P^{0<9|b{>rGhY7OGRM5p0uWYuMKvsP%Tr!MuZD%G?l zNORl)8;V;h%00!|mQ`ixU2dR|)55;)x|`wxtRb%hQ=H_>?70-hGvAy_MdHnA#)H3K zNXFGZ$_VZy(2t&wX+W2kXWY>9mbl3;svhjJ3c`Z-xfx$Z3+_-n{^Fp2Ufq%M(2F?_ zEJn{t7Q4t1^5(;{5jBDvNn>-kNb!-=0w9Teg?z-oHwq*Xf{mN<8_Ep!UW2rY^!AFt zd5LJ;Sw#WOb>Fr{t8eMy!4b$g5We*^*vv&(KaYt^{%Y5bw^v%F9TA4qN&?D(Ovuh% zJVI{BTpx8A;_JC`Q>A+|LX)W`Y26>c8*!nx=g2m} zFyLMcUs`9y1+U>Ab2e)?m!4WFy1aV%c$ZbR5t`6cM&5wTEw_$q7P05>Be0*nwWHiX zokHdJpk&G`N^mSHr0Jcsc@|y|6?#QecE!+z6TN+W@9Hz>R)ln@Ehf^(bGoa6T8(*^ zu?ZX*n<<;(#0h7-64ySflSayLE70`aJi}h!SbBKipWj^4r+EukArBw^jACTAxA_VQ z1rZ$m*ALybeMdokP2ly2!F#`iX#1k)8y{CkYkiI{f^JasB}&H>go-j_-(Wx$&Q-cX z%(jB%xkyC`jzc!S*Ed|?WrRpw0PYdr#~<^cV7_J&-RN@WLOpv{7^ciI%c%q~Kl;$=XhFra8o)6=!PA9?H;(!a>+DVmkX33cXTQb%j7u^DHCqtk}cyodMDFAfuv zE#Pp4R75RwCO!6#oNLwPZhFkmP!>bC)EPO2m{^akqz&t`AbGIoy-Jw)B--9}JSt^7 zivng*P%$BOZu09<)EuVXIp{~>CVlE$ktt0q?7nTSCix7Z!ctwY`QTe{;Lc&>EeS%1 z-dy&NQc$hM_?q3PyHO~VVP?CWYv2~*0c>KV31&Lq|7K3(ywCYLHnbv?&OaT&;f+1- z>`iLT?Xpx^RC>aCwl011nD2wD?yx*MZmHEKQKmY2J0FG#>Pg_!v`s4(U|*2K3*nw! zpxft{4L}1Mz&2!d^G~R*v-bi|%pp@c8mu~a%WN=t{yH&W;++SnD==}Gui{Hwc+Cn$ zG_x*NUSs1dWuWVe_f{Y$_qgGqz1{oNuK1xC?3QmMVz2n~sC7m@n+=0ckCbjhP+hpu z$LNGxi96PBlUk%}D_vU5R-jr%Ex=$?nh^lU4sWXPtGuq5gBR&9=hWaCXTwC6#JJpN zIPzJBnRlsUFTOtN)LDtXawf-qSPzRFFX_aOVG(bM%eYV}7|Tg5Yn@D$#od(}zd;R& z>+j2s(@!csb0gF_i{`CrKbc>(LWZ*N2MsBq?joLPqzs=92YcsklL<)MMtFBO9U8RaS>|ZRt4`Q$z7o@;`Pm(8* zDdaQZSC19xiDohu8;r)_>*feBpCDrWC5Cxoz;Gk`QXiwl^#_Vq1DTGLcWPOshY;7w zmrfiUtMy1oFBQbiJqgWwXW}i5F7Lc@AsbADpJApo$*AW4eiE204FIA_@~I$SG)^vo zPgXG!6aOI{m%+kJLD-0~(Ygzrty}iTdop&Fok3?cihS^>N#K@(sed8-f9!qrTa;bb zwvM2Lq9`RuE8U1R3@V|5bT^`ufOLZ+jXk&Mf zL2EkPk=S{B-r&F#%sfsGDIrn4O%YV`b(Fh3IgV+zEzuaa!Pz+uUYX4p7H20c zV&fJscy%r0gR5}(!7g$hFR`1z^+f9YLWbxMr_d5xxZrAm^WtGv5nK4ID zWozUGy?@bwiWO8{5QLob9`BWBdD(jw9ny=}S6%$t0pNP7K0?w!@+0BBbbyMg-c?nV z9q$165#Z23t%dbXB~J9T{R}?m5~JIF`S#d$mHa1_`WOqt$_0)JG7op{0q}wjhPlTe0V#?ZxEq%mQzB4fC}R*2KNhb}cV0L+N%AwB zeNhZNTplcKmreD|Z8{!*xIvy}^s@B_H&r9i$i{fQ)8!cr%Ii~0EmJXUW;2{Zcn>2^ z^3+JqjH5PszBM+3&J_NNN_pl*_*?aj=CcIxV2=em!arT|*@y+)m!;pbY>{jy11W#5 zL#|;8Pz%SC4vc`?LIn|*TejydA9i6cw48AdG&cni{JCD3h|rYT;!@1;LjJy7=NU1? ze}_9v%(iI{qeAp&l0v+s?SkMBr^-|X_nqt&#hP_%v4(u76UaNKdvIC22#S&unU&NM zcyAPeOx7ByFN+v%A&4 zFyT8j8-e5imm&B_?eb2o7Ru0dLwMmv^b$aIl8Ccay8OH5x`sp)#8*3S41AWsrI}jK zN;q(!GpoJSQj5BaWO=W7a0MY_YueSa?Iq6}`bg1BH)f@rR(0N@VxA7><||6Osngj5 za|^a}8O*_z=^&8z8e8&v>};SQoJCAm>?OoL?s?HZ_Y48f0>e8J%{Z=D zWs*RL<N$vR*$26BRVHvcQ;Zo68X9=^N@ZHt?C|_uurWFVy#e*%NlyQ?@miqd2j~B z|3!OV7Cjmr)&ze(NIF%0tE#7E`Yqr9s#^XRbYQNSdYm$DrQ3n6)BAM6nn_(xy*rmn zeoc6rq$?D?(XS}jGr$oj&7tBMcFADUDHWEVHh!#;DZUy2*{8UF+;rB5&DISX9n$s) zaJR|en_oilI!nC`HsA&u-?97V4p=jVpMU7UN6SChl9YEU_r-VArc*>sgsx=_`zE@% zpm)b*mn}_qILF663$y3ldn@fc=8Ush$@pYd=5%5nsa#|`)O6Bo4YhlE+#Pitv>}l= z=BxLq_TiO8JqNWju`{)A8)Snq_Jf54ot55b$yyPPGmyRnNoSnhT35~8e=Z?D;gN99 zDV$g2h^l7vs2KQy^k7p?j}r`p2O+TQ$mRW}Gvj@o=Lt0MZFp$|TWUKnN zIgUYk@p)CU1vY6HTs*z(&p<6bWI8owwYjlY-PXKXNK*6Bd)~;(z=cmyoxDxA!0`JX zb(iz{*Ms~N&2gxnJwF3lY_zj4*lP?322|);sJm{IcSuf959)Ja>tg;Vf{-CC(KYi; zi8YPneRY|wLN;(<3c+lqixXxC_%BH~$ z^1~K=Q<^6(X<927MepsXcwREb;yO^L8B?Y`9awReEkl#ei;|)0yp^dN!_*zCVFk_= zZEYsy#9GCTt}Ac3Ke)`dT1^dxwsX76N9akAm$zxVqVT2*_NU^WJ(Lj33?6lDqLEoJ zEs7!3-<4b|PJt@r_jWXJOp6QHAfmA`+o_xE+t<}`DfpQ=gbsN*+$dQ_nt zC7RUHLglot3@AY8w%iwzcK+nzX-V3uZ=~CS`0hT~nlJ3r93w6vaPfBCFN8DAy#(i? z98zbru_5fBNkiGdbdcjM#0T3f8Y}Kn-&)kX#mAkIZ6_J2jGV$Z?tT7xtM}?WZocBI zJ0MvUUoyxTvr|m__HL7Bs7>@^NZlMJqW%uR!q&%Lm3bRjivaq7VhDy`_1Fwe1f3l? z5-)lNRy&B|-}$I}C!o`lSfcy71R_8bk$8SS+nT*EB&`Gt()`Xs$$X=6Tz$&1iZpN0 z`&aedNvtOa?d3>SlR1G+6_N=G#RUDBPNeE};?pAm70mHxiy^}go#+Aal+8KgM+W)9 zn)7=YhFEmy^9n{^WAz!lS^ZF>jPy|YT9ljR zB%V!dRoqdv%p*b6an-+>we`p)!ZGQo_e$2cL-f@~U8s0ODmLuYm;a^f(F9F`f2p+) zzi@JQi|nQ~BdEoe0ochKbzsnlcsyu!>77F>U`fs5*_L7(`{~IXqx9-NR>N(sC9N!>_m={-0d#9=E5cEN-wKLYfHbzHO7j_ZEwgD zsJeH(3LD**gEb!r5>AHT7?z;Kl6`e{-@^WwzJ0~zg)`q7kr!0W#>`~$7q4(ulTkt; z7Ga_#co%O%#7lEbj_p8CU}n9y!`W-kl#6{RTq*kX;Z5_q$r4nJGpNRE!dsC(W#e7Uk?UfvUQ8##S6O^{u00^H2p!%(=DEd7utI`axWG)Ff2(~o z;MA)6I?tZH^dX~>rgethv`uD!=7#Czy4otoLu5qW?}fJ$TrYFFt_0sCbjJvaT-yRE zi4dF>4pF zqPP}O8J=q0uZ)6r28woD7b^L8Uv53G))k`N36pr0R;y zEOMJ297tEw9AD2hPR)`<383mAI+K_6e||DId6KTaY`HMQrY`@dlH2GE#|B*_!n4#z z)ox(m!JfIU?UHw;%JdnMr@Nf}T3V_;m;C3T!=Mmka27$UjV{ip4`I%X?J1UVGOBNNN;l)s3vO^x3ClKM+Sgo;HDob zOwJC!J7$R7{K-6B!s40#BAU=L#Fs#N^QiyjoE|2o`$vGF-T;>&YJz6}t9;s~@W94i zj?;R(UB3INmuvY&B3WBpsrsH6AKA%=9;ebpw8+s5d#r+vPfT3Azq^CkhM(A z_VBXNq{iuP^R=i~Q)VMK!gfe2>yPON@Ad~j|< zlgT_q?N!$S8t3Kj7xVWin^8ydr{ebZe8B*=85}0S@s#lKmlQD1Rq*p&*R3-Z$`Jme z_T9nki_bNCA~chADS6)|!uA>sS~Q8YS`OM)R-0XLh2l|zo4$@Uqb{mOd7v_$*#142 z&69j%!Q_7Z_I#@N@|~1ED+zMN&tAiITPnC1le_-kghFl#na&AZJnx;Y#V09Af1>Wv z>&AKoo6PtP@Q1v=p1&-eS@}HOh^2Ljw|e(duvBQ-O$QCbyOKAvHd_v6#*CZZPq8cs zQeI$qI=CebvZkl1!+*BXC89|qT`zX3i=T=qKUE*et>s1UNy$u}Fe{=?g!i`2Y;IEC zauviywXIG`7we?fULFXG*UF?b*r!evnEt@uHag&g*8%_{3}IdhX7bUFQ*v$>OK;J%^b z&_DNb^7Fhai>u(piDRwE`nZ(ofwOn;^5C*u##r|hGqs*O!rm-^{$AI+LRD;B0>Z|+ z>tH+b#K9$rPTWhMP)omu^TV<-yB0ohfd-QV3r%)%g6mnatyFuZW1r@>srFyv%}NW- z?e)J1TrNX@{vr9@m=Tm=3KMHn9 zQX+wk*I`+Cyo<{t0GBCn6ZADpQni(wxJPE4!|?vVy;zLa;Lq?U7`f9%wF5{t^SEmM z$+2NivE5xwUI8&7-Yp7zttUO~2rw%V02ng#@m?6%3~~gG68TM42U6eto)xVN!PptM zxK_E;TbuSa?EB&X*_q}W*N%tbiN>ljOa?@=Ndm9yk*|0&Dv<{=Jwwt!Umd3Is9nys zXh|acEmjj#=7UWo^Z0^V*t=Va&)+x3OhuT91 zbR!zdbTAiT^I`T+Y4`0VWn!~BTV9Pn#%)=hA+_+xT!{>(cuE8#;Z^8~9Ftx`G9m6D z68m(CR?a+Fs=oMy{e4*(@QgeCD1p1;g%jkB!(w@U#aT$;L3h|X#ADRp(Nu&Xl?nx3v}=wVH3zjyfvh<4|WTR+>mB+5tWw-v-LecQZQ{b7A1|oN?VCt!O0B|(q3;>G zwjGJ)6?IP?*z{z7Fq8BidqMkV5HvLz{)`EQd%&`Moz-zR?dd57OviU@O6S8a3?hAB zpL$@}3>*S2(uCA*W&9!!ti*fB!DHp5J77&!PY?RsjFNCknza^@wrfD|alczVw_9JU zLAOZCRzCAN4sN;I2kM0ee|C~g;9K|I@a&^UZ(28N;u>uIn6%k z5|$Mv?|`km1r^9L--pU68*yPMmJnr)J(&AqL7L0=`R+*p9iL3vlbvC6s%uBNd@#@E z1)c=%Ysd1#)JGf#K8hclq%mTogB=vzb~tOF7+nwgNt);DYs~h~=Pb%?W9%u{UClqZ zLKr4T8QdVH>|SSS%jOK=gh&eBmVV89h984kkR8)9keS=I)ucRK1-?nvb91 z3sB$!`;yS~-jI0e^#k`Q{|)3q^sM!)c+S?Bc$)SjNHGWJ~1&Wyg*20Yve z**3`BqU&?utq9<~5dL%l9JJADM$t~Y_DtQSHq5H-t&B?$)uy=O<>Z5XZ8c}=P-C>F zGs=miEv{(ZXw~Z~dIe`|n`&puPIZJmQjS;oyA^cKKxk6us0jt zXKqCaT%|@4ybyHuh3@)S?|M6Zqnt`WG3uylB;+Jss?lmST`+bWDI6>yt(+PS}8bD?xY*c+uirz@J#79PI@64 z2%!;wI0lTRmsyOIr5CK-atW*lKTC8^glgU4Q;c9|D0}lzz-NI>01SwaAQH*HSDQ;@ zCNlL4C=a@KnLyy$8GP8TymK|a23`*)q{*XWF?#D^XmHd}Ppgx5~0M#Th&q3sp zdiRy0&PMdPQ)Axf1ulH^9tEJ_8Z4^}1gsuz;uNpvqS+(dT}&P(KerOEyK^TDP(~70 zyZL18hxjS8e{f@thiG6@mB9{?5f%W6-!VMT`o1v1Bd5R<>EnSW&Q+zsc?TNARov}O z6K$J}+>b?iIc~4ZHedE`yKB^pRpyj4Gl56EOK$9T6J>Hg2N}$#t-@Gd$xKkDpAg@P z4<-W-Ax65s;OldJ>U8)rYvAgVc#%UcU~tZ6iPf4c zs!l4poj|=@3}GT^9Tj<@R&!1nZE)L<6Rn?+f5{F?!35V?X=x1Gx=(KXR0Lx)R|6e2 z$}dB)9xoNj+w|Z!mA(3;obYt2y{WjQ8L<%O)^ho1tjr15jt%t(mr;{CGJt*z6kQJk zFp9KMr3nSA{yKHHz1t$T{W=?9{nl4_ z^7)=eP{qb}yo(zOY2qNXe&%K5<)78%%|iSnEa$CyzHbbBf9B!4?}1ln36J6~A+&Mc za0YxX^HXn6o+lE5IJN%==El>b3!hTTQgiW&TNl!VbKiQ4BSB1IHknZ#*Iu3!WVz#2 zF?w*VNcj>diTvz89QO46O-+uQBaW73MY_GmAo0**HwZEKI^} zyjUsz1V6_S%`jVBL!B=72o|2;oY*tT<`=_>CQ#IGWiqu*C#CoGiKgdSmn(0voPTyd zdg5z*)xZ;q$&H9$X##Q=1^ZF@x>_82QBmorQAEH zfE#`1`3Y`kguW3uPY*NCl&N63Cl?*@%ZJ^M_}#K69J%6lnYUPkQ*ja*g(nj3iHxuH zYw1nD;ZCwH|8lznA%s%r|Mv97sUZI(|KyU+FGa(3+S?1dkWbb z`dc#s=<`>nBkNm~9%KISDqODT6G;+W<1sZGTL0yfcspgXl zmdaG`1^n@*j=VF}9D)n8@Q(Ee^ZvvbR9|Nl)-jcw?<`v9$((X~>0{%l@J7(P)ycF{ z^~1GE7~gFdGZ9tT=JkLWFxgUcXEYaQ_r<+rG4OM+RY6O4%(AIXb>bat^Y9RtmKxUNg&Jl_zS7zg~{s6%~It~I-hJeBAaBv zuageW14Y)XxCUWYF&_t6!$goLuT=j@oZo^-;k)qVmITc5Okp_gjDWYAXXjN_9(`BS z!S44R^gI0WGnmDBdSpJ5&0_dmE_(FGL9iCdyt1DE{=2wPWkDbhh0IFU`nC;(`)ry4 zyrJLOf0kGN z0o_+Y(wHR31w_D=TikYEzEN0mTib_e*!s}D6Dj3Fof((f)LA9Aa#?4ww`LA+esRP! zBZrr-j91{kl$|1NR@V9_Y=p|o#acuZ6ipB#x=^7)A}2e-Iwx$Nw~PF-Cajp}GCs;* zIq%~oL_Y3<*IFgZ)xK8$cSFp-9(+&wlufnCHx_%k=d3n)7GWc3L9?JFZ!Oqf=1Ef8d)HMiLv;?op z`E?HxFhbk_OvI?nvie{QeQ5pm2-?3o>1cZL!|g0i?}XGBlJ&a8&ZkZHpT!s?Q!B@K zdsjXCjY>0LllF9c6k3-jW4D2fDtB$Rd!^0_^-x-q$O%TF6Fqqi2ij*mTSc)44`h;t z_aA$UW-{@*Y}ZY0x#=`Nz1#zN6|S?xte+Eyp$CS394w#VI<+VT zG^rh0lu)z0JnUicC4@g=o$zRUS$C^VKqu?cJ0NO+nd7VAmG~!+O)YG!3!BvVI_hT- zPn$()-8?8SXmX-C)f}#ok@us+MKX(guJy*nZug(S@=NfV?M1Ji(e+8)GKs?2F_FD} zss8mfOjhvYL@#a>*X*kT3-#f$1iuOG(879&osqXf(RHhqf|fwyLkZIpw9+C@90na; zz4j@bqsA7{@#B;5Q-gdI_(CDWX>?j7Pr`c1xSC1LcFfqOeU_}7VOT(kzG3o|`R47V zVz^E*LzkQ8&zcP;e6z4F=W0=bBmjaFPIw802y}n$4Q5P9*?7xQJ(!El0}6%OQGw9kCJQ&8+pD^vG3Pcyn|~p%k^NreO8D_ zS3Kn8-mrxI-f0jDGFaz$AupX52_A)pJHL9(^%yHfG(d{ncJKYQX91Y?Q5vKI<8r^H z!^Mb%NW&5fa?x>`7=~Q0CFBqwG{9>WI#ZUcL-2@O3{vNL7 z-J~l1I&c4dtir6ty}!FcrVjOfGlfl_i|sIw44U5}UQ}F)YIfJV5BIsH6%LP|;wp?z zB+HTuYYX5LXY!~{ZCA(klMR#dh-}uX>_eDa9(a<@q&TJQd$<{H(3Y6mOvl~v2FgdY zH+~>Qr}&SB^Y0?67}q7_#=LIdacx=`+U~}t%aU&Kh!owKO#ckY`*UC#*yvNBO-F`M zY+tlHuRU{JdK*^vsU`T;b+eq~NnUmNx)D5iMnDYH^3?I(YfX8YFlu$#uX=74>5~sX z?n6r%jN31UvVFPHGx*qHv8#CzY-_yVKrLy;q}xNnuR#~8ReQ4K=4sUuys#1+PV>*R zu+8q;g2+J3H?N^I>X;0;jvs>!Ez?>^X-8=lF2uGCx`e_3U7@}jDH+{u%mw`vbo-Ztnl4FFZh}4KHb+UI`csgb3H*sKCL;}s*2S* zdYiels&y}o!)31dq`@qAN{W+Mh*~{{#-Ey7hu~W&2yIRV~pCNQ~F86Tj@ z{REG{X6v|}vgm2wRW-YmpCw8)JaIHT+5hU%;IDTJeILkUCKeUZ%nL09wzN)O%(oYL zJR6?%qN=vA43%V@?>3F&gJ#O&@;HCk&iwMNhzoO}!@h(IyhJny1_rQ&Xhg~OJW=;L z`i>mFz_hd*T6yI271#(;PTtj&$Q_!!RdTqv7JcODk(F1Sd_x!|p?`mN?IbI#BDsDM zGo*^|10?J{JO*b&d@N{~-ors)bg8c95KD#6gmZrvlpI2Qpxp!$Ua_~$d%Eid=2u&1 zmVLiRw*E$XP|mmvJ`$-RC4Z&WU|AI>alupLtWB@+7A4?znDps1pU_{3ZO2CnNeDHLLEhzNkgYX4Rl3*P9tX};!(I)Tj z|3rhICvS!KuF6PSfI7V-a+W{`f1cd?y9+Q!tPgf;DX!7{VWQ}4=|mFpIxe)Na7Lh2 zLW|j;hC*7rdv9r5U1)r^HXceA26V~#S`Zau*`2`GsUk3^s2wiHD49iT+I=;p5$MxU z@BIu`k#bk?Z?(y!>fP-oeWAYI?NkSm?L*r16u18|h4e^@Xm9DgPW=EFB%!IiKq0o6 zlR}Aun>hXY8{ZE1d|iqzUXe-=Mvyub`Gko7d$%`!x|_>@K$GYAoRG+-Ydym~z} zSQyVki;&-Fno+H3HWk0&lz7w3!S+?{t2OMCaqxB@r$+np1fB6rc#jftOM!qSwF%4* z^@f-NGdwj7_PS0f*^DaGc~N)*%YOpqF90^zT(+QxmxkBi@0&Dv-N_HC;8+9VRJy8i z8Mt@uK%*VqcK^ugmOz=Hj99J8$w6j zLgq1VuQiCbv!MP8DfqzB+pgl2Ev_1i!8wNy#JsjV>-ql9O7QLQUfsxYcW5tar0R`| zpUmwRh4v?)JBh*P1FY%^;$fAIx|gtv>1*NGe;2>;2N))qOaTLUVIr~6hy;-|W+%=i z)5jtbz5C`9G}Oy5Vf=Ji>%54W3Hqq!1A6_0zj+RRFfB>TY&Raj=|mA=1xELB-b3$s z-^hS#poz3YBYPHd`8fS}4^HbHDjL5-g8-1LANsmE5$NoMbHc8T2h#sMvRoJq=}(aD z`8%DdNZ6dLwd_VgfuHw*vXiIY80{(02+Au6`;&JJM6MR^Twbb>OiU= zj8Yr#_g=Pj{CU%33hl((AHc%-fDxXpI)LLtdYLY#?T-DX8UsCYU=C~Pm0Hs(>FWrj zYX(E#S3o46I1(h`y(dagjC)I~98R6KyCG3mw)6%B1z4%l`T#!`Y{;Ea9{)B{ajWI_ zv0@asGW!`2DkiyR@YzOh5F#?mq{coA$JAJI1yKI@gihR&>c_i{7P97|nO~o*0&D0= zp~asE;RI)oK^J&}D>u(33#$CbBuZ9ylW_MhS?{g3m(zRZ6t8rWL<^(rd0g%iU}Yu) z$USG2;XHI3yHYC)DtGKggy@0Rzq@4ur#}>#du+c^+&+7<6}FyM)1izVJcl~`v2D&N z8`Lj-7vUzmoFTgJ6B5!d`eX$t3GlSG$J48*z1Yt2B+=;I?Dg;6r}LeYx3Jowu?|e) z4uMEAc#;$TZ{Fv&YF^}z4u)1Nzd$Ax`WiC4MAzSyxTsVJs4$NL3L&rd31H<|LN$ik zpA$Q$VWfRFSug*+m;-0yte94I(M!UGgQg-WLFqDdQ$*wQ1j;l{@F%$GV#nvKVaDfd z>f$!_&|qig)L&`e7&R?#?977#>v1YorNyKX6~6^FKaW4AtwU<2Fz=mQ#R-% zY-hxWQWSp;JP_y@HMWTv5fO=Otch z9#o{*4Ows}yw^%U#vJOD>;}4Slv?t!L$|DI-F)9TYw_COV~Z%sfn$aTyrK9Nw|hj+ z0RmAOSf)Pn8t};-qH@T-s0gb=qq*45n?#U{Gl;+Qun;ax}{xYD0MTP71 zRVIISvmg%HY#O-MlVFwq1zM}r0vNlsb*wYi_r-->%r%_#Y&D$G`h=#O#}MvUZ;W3& zh~8m44ZGO)F+8|*0$m5@!T~Sc)Bx{bk!9xWt2D;JwRFd)-lvHjTA`(g_r&gAE7qVj zB0Q|I%l?*c+(qAb?iitkiVYV22f~w&75>yhQ*@EBJ!kLRgedIkKLsF2wz3{JhlnJ& zh_hGw#?}0fcDWGyfKLxRIa`YE!H&$JqCjM1kSnRiY$)ni1zbUz4SQl>E$~){D`*Cw zBu*khy0AmgcIyDG*|}&}*1<{JsVM&y5$pkTczO))4rY=lBi!uJby1=kxeY(ZWuamJ z1MiCv@&{Cb2r=CL=M_bYpB_JN??Pt$nT}|%?a~dwG74ffkA+UKAafulYfwkNeKz4; zF@JtWzFJ!uxs@@A<}c14GS;uzvJ+tHLf2nY1QglOy6|5rVCt0wd*Xbr2GG;ADHv_P zo@p4qtubjxVrdci7*cwG3j%lL<%0i~P@%bKw)E_1urB7!w2hwi!MIMls+jTNifOr9 zhBNU$!SV|?f?tZMEZ)>%W0Ai*ifpALquvYemae?~4(`xJ04L|xY_m7DuKPn4FXI2~ z)&aubNu4i#MJaZO4ha7Fz?gfem0^m;6++VxrtdH&F@wFU!wD8(Wus3BEPy;cPtAyr zKr=DtRMEH?jdGN>&F{)@>t*Dtym1Hf4~P#xHa?|GVqW$H@9Wh8 zGd1KK8UQJ<=ZKm84otg?Dvk5ThQ;U5;k2f3vPrCx1yZO<`0#TlvP8v@k6T))8JFiR zP9giWXH8+`86Jl;FpI2fY*6I*1kz$(St_kq#l>wte*wT4G&}HVd&F^so3Ura2JN_P zjHcLLmW-Z)!qDoKL~hiE_xCD&VE)&|)4jmOu^Q9Ay1nIB&cxP@7dKMAxVz92^_+Dk zV4w3IPSGQpu#j@YxZ=?#OzsYbDe3Qi)dSFs%jJ+Nu+Mre5DD{iOncr1tN|xq+y$Qf z7256F=BB0w7zLq`y9>AvAQN>fTNk|6MtL55ed-OEg#;=p_Vc% z%$y;P{Kp*d1+3LF@S0>gG+hl~-7$5?st-qjt$RJ30fX?{yNGf*nfSo0dIgmti5Cx` zEe~o?l+oTBmg>pL&tLf}I7 zSQzPG)g>9qxT-cE)f7}UX%YF&Cpw4iGSgy+hc_LFAI%CZbnHm%1B_!G#6(uIlIFOG zBS5F3bu(>C%x|Uah``>F8JCG%-`BOz$#cj(4tb zXEW2zODf4{E8=0#P~0!4wgnL-aLPE%pO;}@++O0r3dq3=yvQx+5bQWDzv@H>#O?m_+u8c8zG*g@=qeWKmbBCF9Hxlmg{<#v1r~1U+$hTEF5-;}Zg@vyt zcu=WQn?dJm0*QTtaJ;jIPFpPb$EjP2J#KhGVi?*uj&eXgpCo1E;7Ht-+tD4tOC*iu z2(sT#3Ny?~N4Gy0aWU{Zo$1`n59s^V@Fd=_?eARIa&37(J&CCZ_(D@Ape|jIP5{A6 zhPYz(804!S;}l-tImhp8w6x3Q*LHt)XZ>Qu|3t9K;jZ$9fdeL%;6exWyC`4N`7f&k_M|zs?Si$QS}tq!&=|Nk+}Vy zZWg9)>gxi%O26u^Dv@HDXzAsagbDE+wNvp<^lj=Z1?hNJh5O`HYz4ffY6swvK@f&_ z8McS_cB8-_C_F7K6yUTUBApKdV1<;s#ov!{0>R`UCz!HelEamK9*T@AIgInLI!S{c zFge{5Z3F2B#F-v%4@wC-OwLNfy#6jjG*fX+6|ttdWDw(yL=o!7Ym9>HwhQB+RiHW@ zWMdOS6q5A(FafTK8^rTbp~yqox6pF8YLc}?*Y8NSDI*=-73K8L?0NEY1`u$-xpBY; zrbYO)YON-7b4y$yjc@~4g@F(OHtLE7Cb{aNJL#S5XVZD(vX~#d4~)EXa-KFjDx|W| zw3?!2?j;?RMrYovG7LzV4@fuQj3>alu$A}|C&mq5kG2i`?dK)$?~D!2j6rA9iQxu` zHQgpfB!g3GN@!&4A~l|GjM$UA-p#GPBy%@__p{4{R`w4HZ#RBCqTj9om7(f0D*5qsA_6Jp_MO@@p9oe-o<4mK zSAdZ$RSgbJFuaq8hB%`E9rLRLg*>0NgeBr?8l=dLr8H{Mh!@WKO(M-~JEDfJ}ySl92b z*BOI9;iaX&kI6{MkY&|uM?}5lR*&~Q>><~+%N|1u?034vIM$!8@4MGu4gxLHuL)iM zIFE{_dP6Jy_X&WebIY|dXm*xdu;a$BI;$1ZnQnoDPM50Pr2@!k-+<7kk9nZO_rG`O z+*c}GYZ*#!eN)tc-Gki$QE!VB-}F?$dJHJOE}8;E{Xd}Be?|+>!y&2+YYL4D9m!n1 zzt=Be=+EpE78W)J5;j|d>uGmC+2et03qf@1!pS81uUiehHQXPrQ{k2PJ2qtl=FwEjaGNb2L!=XienVT(S}#Xc=I_31T9^Vw(RmSnjPov^z!U#%WH{>!S%h zH=o;a=YeM28$Z=;QWSiQWMoO2=c-v+=+Zv=J$?`G03L(R5PkfUX%)cqJM_a`?AKPo zi-XmJK<+1ZiF{@69ea^|gwO#nFs;JI27`P465Q97$$b79PHXL0$EmnO7hcvFn&^9n z3h@>g-)hp_V%kkdbPrP|)0Ml;KQ8uWW0d?5ggH!KqyELarN16>6Y>~|YeeRl1MxoLMXpTS- zs59?GGArgcXjTz3IRs<=RcEZ5kOjyF|1cUUhj<>V+^-=>7ftZ;)-$g6)~7annwg&c zZxjXG$`Y6bK_p*(pwipGZ--7LQQW1KvsDyRbFPfS;%`LtOuJSX;HeEzKvuOWjm8CY za}~ooo>JTU+qtUbP~voW9Jy|jHuS$%4YEJ0_!M7V#F;&awLZZ~7imfc>6EMol|C~3 zcXhCTz}cZm@4G=MH4Q`L9?yPItP@Xaw3KtG#>RnIee?IitH1@g>-g;!P*c(G-F6F` zO_~3fTmobT*%(?WsC4q5=c8`N<`cMOY4Q?+1GjAOBWGB+&bR7xLx*(0ZGV8I#c28j zF^M9oO*FD4I=DChdXVe+#07JT<)>&;@aA+ zSc1tvfY~`Z-qpN&v9dq&m<70X!40dbxBE7a{om*LT|$iEw$HLN?pbPL%@!AFF-uE^ zn8f{JQ$&$X!}Zs^TK4Q}5Jgln{?8mDnZbs+l@VWm90UJJtuRyc<6?Cn`;4$O%MrO6 z0tjFP8Q_p!WO&Op9G&}HYt2cA^Y#?Fe+UhOYo%2|goS`>pH}qAzGG%AG2Df#d<3(} zWfW81bV= z!%J#6N&tNU&M_m14^!&NSP>h9>7O~kxjhG0h=FaPzU@ldkWTYx3|;=kO9U~s0SdER@%mdgDQXW}-s)De9-BOjzV-q%BKdZ!#e zFmNY)l4fq+xGG{>&xe8nQu@~FK%#N@?y&F$%L;)MfYh`hcfi-&jRSf$UeF8m6!Fl~ zCed8ihziIU;h<}Jhx@7c!4b?#gB09W$iBt)iA^HppSrUaSsueGX>3yTCa}QnBg>DO z!u=b8H4ISlijn4kFljFkuVpt(KC03`ahD1H&$h(*_8yzOMr;ts%ao>bPf*E}I#y9t zB*Hy#W-ZI4<E&{|~B*v2G7oKhZooza9@GK|@#))R%0?q`z8nT2qufzJ| z*diGqS~p=ZdSPN~^9+~cF_4}8R}7ou(rSahM1p2px2nc52W9`YD|F=GL3-{g_i&;) zw~EM{4*ieMOB24H>);yrmyU%0&Kp!S27dd3zM`7Sru)nNe{n@T$EP5sVx-Q910V_* z0MgDB?NVTq*3!im{>6QjH^)WH>hdSX-dMPMr?c7_vSizVy_(~^X|AfqDcAL{m?7#3 zBE4?tO@OrReV%0gqHPvUg+xw{Hv-)+D#w2~Tiiyt($Zh&k*5z|pui@&u@YuV|Bf-3 z1xE@LXyR`CZ10Mz>ZCER-T0OE+ZQl*Ng#4?bJ@<$OY}7xKhO_H>8yE!srFCruc@mX z2^!Q$YwQ>a475|uF}{a;Qrcqw7iGZVBH3zN_kSn>5EdQSLN}63b1KeGEMh=`8O>Yk6T~srRDHXP=a)7P}rOJLKCtYn|u7vR;(S&V|C~hE?IZzf*W~%xuEqYMwf!N>dLGQWtxJ83=^!6U=g@H z(Njd6<{ETep@(bDI%QETkfp#m<^U>l5lt?N5WxXsz85rWM=i~omI0Fi=#oV85RGpbm;+=XTPp(M-1{7npK7^ z+`&|s7kk{n`5OA61a$;oM~E)=_HEKCSQ0@_Y5AaM%BHAwXYWKyP0ZHX45$C1bt=s3 zOGE)Dtb3qx*UuU2jU$K%NvLg*nIMBF1D!MRm{hh?jrTiwZqL}rQ|sENMqeVugYd`B zg!ncOzleK1O-+I=yC~rSl=WiQ#p7;!wbAFkigmFo=X85LhKvClv0w)ioCqON&okHFK~Q`i8$A+y;+@(r=dwVclX?gPvC90Bd7e2|9R$rFaE#wk5qq{ zG~swUgqeXV7NGsV66gX${q+5yH^awxxCX4~vGTnDhP6NdaJ(UnGy3nBN3#K(LCre~ z%KjICAZ4xfDY{Awgpg`r%YFI>B_+Rx>U{Xv_`mKththNlY*hua@POO_($uk?pw?Cv z%?PKv1AKBmKOr4%zdd<|+gB0Z;Fuaa_7D@5dORxLE!{JM`X_xFGj1$%DG;=uJs1yC zONcm}kluuUx}?C+0oE}ZENZMKo|p3wq>e#-0La%G+HO|X$5DdHSr5dohQX%8fMp(Z zUioR%R0ZcIT^A!f^(vw?fR6-AbX!KCX6!Qbgc{Ubk>lnTa8>Fg;O|0K?E5&C?H9Ks z5&YcE$L=ub5IjT(@LM~o9sB{cRR;iDwSoiAMX{XBWOh4a@B79- zQ_E>urKSc~>Ihj&IqHKNY*V6i=7uLKrQaBw9&(4-#qTV zpa{4NE>qglgPq!OU;1v3>Z$n!D@X@(fs7mS-{KgoRD+vT8$YPu-SybhhUC>3j;*;1 z1L2MY0|vVlz}r%#5PbIpwQ7O?nf(NQJDaH4Inr3oQS?}f9ZVjCxjU=i0vB^S9tLcF zh(~?x0@@j@3oW9_^D!|#;w`StYbxyv*gy<6`@iH5{8sK-?Qkpx&5~SIX-x?x;|%0W zUL>ZTRiA$V>KNVyQ|2&|M_Eo_?P+6A?iw_-zrXoi%&KyhgAbMW07 z&cQPO-3#D10z~BRydOMjz>1lN$>==*K5r1s&ji+5hz;PaODby#20h2p2C@B4Q9XMG2k1P>nRC~iFy zB4}EVDX`7D`jWZV-@&%_V>GhrLNR)EN^SjI(&D*BjWEIPJo4!$ud3--8;)v;L1L|X zcx@_0(geZl5}MpujqKdLXKA_IXn~EcU&t5(;Ds8go!$-`jXka|q~3Z{PWvP7!gg%@ zT+^7JY5Bq4*!UBt^0$uLn<7CLFPp`A#L>509b z?B2eJP2z5_U~kYYi@_YVKOfWaF^@<+vAI8#WCUjQ{%-Av)tF~}j!5X`v=%9e-ZEdM6B2i&BwEI5B{V5&b zX?jCeP5X$JI>0w+rt^VN_$9;!UixQO+n1FlzN&n-+js>D-jmA>N4oLHr{{+~uDb^E zYfj^fcONU*x?eQRdokd2JT6HT6L~Ak3r0b2gSD# zgF^O;JcXXfH;yfj>(n2o3L}2y?w?><4BgB7WsGzXCvy&q8%?bky9rQKv4JVa9l;(X zi^uV#5fAk`J8#Dx@z7$=^=UG4HRj0?II>)fn0eLEeW=?QiRWzsqSg1RBSA7~_4v;oYf^=oK0~+zLlbR!!2hr3Ex3s8x znqqApCK%ch$pm7zMg;J16js(L|_;hhuWF7slZjEQS7NjWFT^diqMjX<;WLg=94aC0KH}gLApBc zz~%$6mg{%qcH%RX-E7V)ifp%S`^Nj+?e13zYwm1X|DX20JD%$Hjla&9vMM7~X33s~ zc>vN8t=lT8j`}g;HJ^j_| z_>B8=-Pe8H*Lc6Ln-0bSCv*TTck0!v#6+GV?<>y? zekEZ{@(ms21-2KIHQC=;x{Bry<7Pa78E_f%SFfNP@^e3({6>v6K!U0A>{>@(&#R;T zPFH&)lrm8KZ=V@GKU3qH@r5c?nNv9P@iP&R5j!f0N}?n#B9izduxf+pteiPM@O$kX z0dZd?QP`1_A!=B&&f~{A0LL$;@oD+7QW2efeC^MMs7$L$e-$Uh(K-i{!tT9cpsaKG z;h^nhDx4Sm?UD8&njp5KF4k2dcWBqE*jnZUX3 z`^dfs?6$=L+f?I@1z3XyoOzi~vnc@nQYgLmQ&qhw)&Y{s2_0kjhAnb_q^|;GMj%lt zg?q}C&8VJXadI)+5Mi6l(w4iCsmjVI3;J_%KJC7((<1hv{gbEXlxM4KT-0yQ#MCu`|a?aeT8N9kB|@M-jypc01JE_D=voX2y@bbAGN z&ls^hg|zUwcg0qVV*;W|ul{7Jop4yCP68a{IWDo&)B4|wwT4&QJu}w(ySUB7<7ypq ze*EQpD(hw243Rpt2=moEK0Xl+<>V8FB|hzqc%-`ANXEk@7HB$cQs&^wON5pxFRSqO zdz=VHRKcyp$qxT{ra*efDdOG)w#sbiuW__ zL*4R=u$V^VAtDYHDjbHD+4lAq!|bU++`k}E)Kumc&(OQ3Q>h~M2CzQ{9SDX#)K8QO$UC?~zyRXT z(8^)_$OiT#18CZXSv}*eynp|SRRs7dRVmVdA^4yD&6mEsfy)u2qYx<#B$M8 z4tv4&qdF-wS#GJ!Pi%NOuFNGW`7eD-##&BG&LU-j7swQMSqi((bO%fq-CQ*vP}W9b z8sInXP5VTs*=RC4fw3UpIpT6xAn=Kk?~fDnM%G=)*cNicOp|C1g9>rm*MI5+q;8nM zLcjta-o{)tXyto&@lY^BxrMc-oAATjye6Mt{7?;?tDKD0zD$K=S$DyiUWI2z)LL>y zWqNLClhCCOneEf<>6!Sg$C?wE+KFpYst*2<>|Q0bLsaFHvzHJz`Oowk7G<=%7W`lo z0;ww;R%b}l9i!WxXHaC|bQgG}I{x(8$fdd=9Nj%BTyt4p5}t_z4Gi%N*O zT^>}|L_d`AZ`~%68suWT?C0NAqEEIlV>Ue=47{FyQRP?KIRFw@I6`c1^{vz&URV^>{8cX(252yJNiLf}uvOo(TTYD=C4(n{1 z9wpyww91EtJI&joZe*uf}ep_lY{92xJ!GRT=ZoyHO5v4qRmcK~xk(XgT8gyzDJ_4KKsisAwS^ z{M9-f$I0dEtDe{5$vf`t&T#Fw~in zb>~Ob2mu*2C>4*dL&GZQ^xB*ae&;#1u-mhB)T;}7F#}`|9x;8G7+Db@`^|Jgrh4Of z6mRX_Q>hBxvIBFyB{mC9cX^O}b}On{Ypb_Tml?juQhnrhIJrMaU;2tM+uhgF2h-(P zE7z3K3zOd&AU(o#q(08ACQ=Z+V`JX2dX+o%=Lux{^7V{aohqF?cKmQy`n_(-^v8uY zQv-to=HZne6f-^zWhBfW=<*LNxEy8s8%;lQuyrJL$643s%m%|Nb);f<1m><@di

j?(uvAoJz5HrVlgu07L?Tt}6q z|d9E+-oU!KR;*g-`K~iJwJhD6w>TKjpe83 z-`26&`t6OO_nSm*`?_)<425ACl;N`9+V(ZYIhpd7xs~H>aAHQRQ|O7v0a2rU^nTPb z)VxwM9fZbhX~Kl+kqB>_8-#H3uIdEGj+(sy$a9?%3N=TV2awqnfXuG*MUSjcd7jYO zXguNLrk3vpr)4I`IQX~$+GFxqx8naM9uVfjy#hyiT#q4z34O` z)od#FG+-9{h#vcwORV40jR)#N$l@)uhDjm6?Nd?V#d|7Bjl-&*T%?*(*LzO==gp0W zUwu)7%z!GY&%~!~V(#6l-H*!9*POT+z;an|D+mkio;o%FzaN$)IPHOd&mn%FPp8|$ z>-XkLi&?Ht%_phYs+{|ACY-oIC; z_g`5r8b=v6#xn9h9XCt2ll--=MBD>-GxOzm<9C=2el2f#)MZao|cwMn28Q1 z&juP4)cuaS&~LXw+=Nw;P54T4ahrb0x89FBv3^F6XPlWGr7>T~jp{zxOFug)zo>M# zn;8=+a#fFMh~;TF#!~_wgEnyMB5WN@c1nb*35E%_#gcN*zV70yc|k4}s^J|cKSRsJ zYk0}R8Rc8G9b_H3VFhYoTG-3=WK;A#1Ljz4PW_XMTlBGhmEn08UBsz>KKj~pMJDN~ zY#Rod8nFV<-l`CsOm&7&zp>Gr`q=W+c}5{9#b#!L`Kz1Tmo^F=zMa^-?onTlyM3^< za!C8xg^Z5xXqLR?%KxblH|s?xqBm!Bzp&|~Dzh8_Dn_!O<&3loPn#2%|Iz+ID{6}B zew5*U<8tBfAi*J@rD845sVudu%C~tp-}IUhEA%c1NcEhkSNZ|Vz>}QKNvqfFYN)IF zkdIcRe3(nPYT!2iVs%R?O%SCr(WhN&{5`f~S=qRyV6pEhdz{Y2S6(jI_x|09uW-m` zwIQ_Ql_ix*^V2euef546z;$xHln2{6(z9-gS8&Mc$4JHsm6xzaH0+IbWw`Oqo90HZ zX!0waoK~5Ebni^X4fd>ZD zexyPs%E2n=c;YnG;jX@$J}&Rjtr0CwXGOnu-I=reo%fBgf=D#lWpgd|o|x+x5qFrA z%UHZVZ3itD+Y~UxzYxyE=CN!QG7;LG_jb&I9SvovWkvdZ5*bRoYLm@JuyrtA1TsSJ zk5eSir)vMjA3M3}yu!?+qwi-p27;AD~loH%NF`+O`!i%Xrx?0ep| zh_P=wM$)sA*d;Q@p;~v})$uG>c;u`1l70g#<>Xfrk#)8~4wS`HFQsy7thwoPw5{_> zV-iJjgbpUL^1tQKW?t8oMqB~T|z<81S%^h~Qr zHoIE47m??^4SPjcpgBS#d3?h&!g1R)VV6cS_2>vPew>wZNfmKYZKM%W9N}W|Bz4b&X6>G(=Zo?S9Ws&*T{hzT9)d#L;>s9^3b_WN+FdrnlP=G##!MEIRYB} z^$ytkNC5K$K=Wl}UWR8*>M=GRh>v4xaQs!cn5gy*#JDie9Rgq7c%u z_Ueex&oK0TD|BL6L_JN6%JXaoi3Y_DF@-RtRmlO0@_ziD+!K`7PR={{@ph^e&Narl z`G`;Prvn04=$mZ&)^iDeECZXQ8rSjytM5S~9!Lb1{LS?EV&q&nvN2|LPl3G0w@uox z>(oxBlo?Z%fXOccY-xFqhBk89txxW1ZNc%Ex+BJVKTKV)M7 z82Q?DsG>}-bNC`1b&yYMV}mc7TZ(&P#cdrjjlB~H*^V%jE(gsoi}g~VcLhmriCKV0 zPD?I8eN~!RtN`tw1EYSk=8%fJ0Ng}mX^TYwFNmu()2f^UxY~)K@2iP|Bb64s&VeGb zY-b`AOwP8)weFj?Cj9%0*0y+b3vzLV>wNXsNeF1-J^vt);A*i9rDNX%Y;0{BGWvsh za{3NkCghb>Mw|V8b|KhD30Nsa-xWUT7o)lc?)4f^-5%q*q}V!uMnAdYjKsr#zE=yr z*UGyx4OyJS7Ql_Ua$zbcc+PGR?J0Q)Og}KfUBl9s|26uPdnx6|iHKQRX+ihGH!Q({ zfh&1JR>p{%obVM&J^wu251!uQla8E;sg&l8d2wi;Uw)u@5FM!Zx4A4OqR2^CGa(gD zJ=ZwoZZKl5PgwkTmfvr?6WWdJHqM?yhPONBHTB^JHG=OhP?F*bkPq_@${rErqkHdY zbP^IeXE<;)4lPO$EW)Vm%@D|Qry*aek}9e(zy0)7^S*P@ZBDet?L_H&AlA1#faTQ7 z)gf8-PmRqShMT8KGaf<9ZRCw`U{>tJx`J#LB<6hv1<#56XN?quM1p0U}&-K zUFd^-`U7%Kf8V0S08^-)BS37%^os$wei3KoTSN+TH{`b1WB;&wh}X*?n6sz(9S9Jc z)}*4gbN_8Q3gGX=&tdoeYvTUZzzE*tM*c4uKSA$u@`)3*4R4<%a0wGTZJeP5 z3m6Lg#iXTN?dIGpVUV!e)F3qYz5CCcaJD6YQM4&WdUfo90%phOGAW}orz6~sRO8KC zCC>a)m%-<#BFFVMfR~yvRu4S*Eb~ug4+z z3it&`L=Bnv)uYOdEJw-@CHLLP08dQQB{mXdX5rXiO@6uZ$dm6zLU zW8l_fvQ8Y`?xU>{bk);IRw9yx3{NE&B=+&fXg^fOMPg2UMQGH26s{QhJ{4GQr%NKg zLCPp;RP~7lj&?2#+6&}+hyUxu?~nTMX{0C|KFtcD#l8ZYx`3@W#=A!VDO1{jpi@`E zw+lBWj?@W>vlxgQIV?a;L>mE7Ex0;8c9570luF7+EZgp2egWjB39G0=%(pi&5!d$h z-e&u>ov!(@51-2p)Cv%ljCezBF=7ZF^pcXh7TiGNd#HgU6!hiYPAzDNbK_o?>G4P; zrl*iMJc@@YwA$t;a)WroYP7AI|dwaF|0b*&zf4Q@_*Kr(B=^yQ|m*Pec*{*LYmlvum?3jIgc@SWDj zVbloO3z?`Tqg^2$`Hh{S0b-;_CO&262R*`pB?$%d1aYXVZc7kZzo%){1&8n^y&pMa z7L|dTxcaSivo_!#`B6w9%jF@~fM`!@Q^^es3WTcH7n4l4ieV2jSw9n=Ptr_8;s7Rv zDoV%2J|bdjka<`A1`qwrpgH7>*hXo_>gPBoRQH;5&n=@In&pN|ABDJiyr{z&lK zY36^6?_<^Koqw!9^xUBL*BT`@-S~f!9;}*@OfCtcHTCCvWK@kSdL8ZXlc;;yMU=!B zlC;SHR^pS-1vijEP2j-ijDxLP=2d8H?D!QZpw;!B_Wfx zG=_mOR0@;6dDeiSn=-rqkIWzw2AZ+ki~{iVHOPkClxZcoamHEU*w;hZ=l{8K8-O0u zms7)$-d1FNLeMn$)fDevY<>$zAHgmNU-f2b^1`=&%TRVvV?&S~Ie#Nvp68sx4vH4u!#N<{)9 z#WY!vd1X;iRAuL|Q)zLo!l9Z}ll7HE3jmt@nI(54fR2GBCB8B(0`YQQTdbeCv-ur= zD8}DKZoHW2t|9|U>q1GH4a!99-pqrNYKmB}$#uA9u47IVs0`KQ0`Vk5ifaOTTQLsS z?@#E}DCx6yUCyD0#-wdcMaK2S`Cdo1lZLJ<`@z^>p>dVO?osQ~z2ZrbW_5ni1Bqy` zLrJxrDG>w8^uRI#l<9DEzwPR+4U%fyBySKL${%<;H%HF1maJ5BiVTw2(F; z^i__e>o1@j4x5_>igy;xD%eXVf5^mxv-k&hNfN{ps3w$cDYTIeixo>zN_5NT3r?O( zJ2+!`x3yuBOmpgH+8YU?n~c1~`YB9&(^q4pFCHKt4TnDsmHkMMvXieWY0OelL@V~X zxok=x2UC;Aq(lu9Z`MYMgh}w*b^0|gTfxKi1>$V|bGPTh0uam{#OJEBopw`nqy4ED^OH}#d5Nv`4K24gW9`1;S*Ap^aW zpkdJ0K;pom49gol^gvN@r!(NMEj`23u*ySWf89B;5AxvLdQT&5^}kLLBZj-M@`aNv z5Kac@?iGx#ajCNYR-e0Y6WlI>hD4i(GhPmKi75@2GDeQ6rw{@p zq+9xc0BNC6)58uOxA3{Ffa%i6kKCig2-jo4@0)~KlemaJj^R;pklJ^0;f#eF9BH~)M(l=sZV%BPMoK|>1r@_qHlNRm*xJJpOVJLO3c zHJM#dPhR~#A0r=l9vIJEprhXS{rINywGsFWG6qMGxpR*O7Xyl5gq&M(uCjd|iQ2bn zPmn2C_EJIAb|Tlzoo$ubB6aEpZH}tX4T^I#;}ioyJt@_*Emg7ON&&>Z>j_dIxv(wL zH5ey)YwW{hhiMj2MTE@$Syt_a*eE4x@-t>VJleTxX|j~K{4cVmx;1=6B)%gUFD#w- z^z+>L*DMQ$mlHT~Eb>_pxd~~2>uLn%sM^ec`chI^t%u!vY_6!KxL0;rwv#>GnQYlw zJV^lqVATvxiwjr7L2FTM7AikIAx*Mq%B08vIMwPtvODWNRum~B z&uzJwCL85hdHv%w%>_Z`7iup_cmG-UR-w`|N0&~!o`uN-906~zZbl-oMH99uErj&E z#(Au%u1fUbq?uB^G$CzKQaz*dtMVdmNCQ&u<^UmVPmHf;uo@0lNFVx+Uh{Vg+Nq6$ zb%$Yx-mI?~D_$r19jZ8YFP!Nfwd2v=8vCV<=_HHQ!GfA$9<3RZUzHkENDs1GwO`>; z7h{)~ZrvEQ9X}B)-bb)Vl0^3ICZhW%B&AG;HdkGq`f>sCFDcyP1YPT)2f_rTI2)<1_N^8ood}Nx`XCq^b2Md)2g^Gy8@z(@>wV zJ*+zH?BAs57>Hvo*sLhMd1~EaiSo*xJuEXC=g(dml(ZohAsb+DM}1uL(%GCjy3O#< zsj#`0QFsw5b9tn^ISh>$(ph2$v8P-x{L!k56R|HX4XVlUC| z4zL^meG6~?b{&R8Yaa&Qv+PDXOWwrTmL~T5H3=GU7Y3ESX~JKHOoy#E#Q>14<$8Cj zQrLaq``DpDiWxmZ)^sJfW<~W_Hpk`7Y^KrnO%9}!Du}5Q5=YwOU8}e#SxUr;0s~v8 z)G`B%c_9sw0pR=05wBk&BThRpm9s;+4TyppN0>jEG^O$WI(VFWv18fN-=YHB&wEz6 z02}mT5E&r`Mo2A_F0Rcd6W9(7C;)>YWl$h)mlO&NBxj=8*7mKMxt>##ff{7(3Vwh) zrpl|PI+b#xc%I<%smeE~dvMlJ-7|i-3E)GJqWJse#lpyz`<{KKhRdUCI{A%mx++@; z=c|bvu>pfRUo6;Db(0u!a`U6)WY}JowX?>=*wL$dj^QFHyS?6&cAB>@|5lU9D*$K# z?Z>kaorPIhSkN?vV{_9JJL-oByp0R`i4mcWdPvRn7oB>B8U)4Z6g8s^kJXt@=v|9` zrOvgy!*+&aR^-D4Ze!}qF6U0Jc1!e^6$wqjfoDJ?2XR9A6Ug#(`SD>{e|h{`Gmv_# zRI^%Ft>zx!$3qQ$I351pj~x!aacd>NkvJ0!U8r8nO5YH7zd!Dk*f~F!k?;|_a#gV6 z?Vg6Pz>JottJ`8HAk75I9s+JR6AgZQ>UBAsUJF>U*=xmCRf}_{2If)|Pr$5GYVV}D<`(#AgSnOz^J3(@Rr&9QgKWXP@(UfaU1_rTy@?3^SdPr~ zCtWBX6Hg&MbAzwv>%u7}llGHE%sL%5k~IzfVaMweRkIL81{{WkxCN_dlS2-7-b6qz zNQcNm{f|zUx+)VIGwQ4FX}nnC+gMyk)ipktXSQ+BeuJ6+zVTz0;}7Sqol?Wwq71i! z>qvb7#*j&2DD(+?LDv2Ahh)^cR?Bqlr(B1Ckq@>HO85?r3}8+bF*5|(`tpDBVNYCz zpeCXg`ryi$?hml)QuV#TTL`Af|t>V9R39^=Bkvy7K(f|5&*;f6#B#;uD7b-j>{ppXJ=unOO} zv04SiWE1n-F5mQZ+p3FOqib3k6)jbp^Da@>*ZK6(cGIU%XkulvGs7a3@=>Yz&fx1W zscbD;oI7lM05y4PcEAmV{wT2%{A2bvv*CsLZFV2^?gNu_O}WxL?yFYY7MD(8m=#!f z6^6*IZ~n2l=8gqgit}66P7;~S6qK_2dw41K*?{T zJ38@mc0CRs+O6HVsuceEywhHeUU5&+ue`3F$REv^yY`|nDVSx*8(npLph-U|KPg}< zxTfs|_O_J_dRBnu@I4wc6mHazXC-T4Udz0|wFDtT zGS%UoROzgFq6hv3`szugUJj1(_9?0f5=ElZWT3HRLU3v~^eYiw^C{zQ)X??}ImU|m zL!--~(x?D!PG7{V=4eA==gjA4j9!o!p$qtuYd0ujf!r_nXh$1tAhG>Th#E}_8Ce6$ z_DBqApf|yIc5(N%-jGx6Y(+C8Zn^?f!mAnQliwOo<*L~xR>B%;P=LLMpa6@*t z;7~8l-TVhm02+6ocOf1W79vp5HcGZx?gl)GgDClft36HSn3|GvDs7( zz!D3rTG4S&c+MU25TPZdHPulL)y2?JqTNI%EQ(sS}tR?-O?n4ysJL0dPcDzw@H!-rS%(XEL4{9Z{e>lGXhJ&onKIS(vD*^HKCC1+I<|uVE=)ch^I?S33kh zEv_^Vw@P2O-Xfe^A6e({F9RCzB+!5Z*oxczkgi3DBdGx^iRb3#C2xJ#Wqu3j!v%&? zlKk10{Pw2xT(Q#)+nOYO|6ZS>J*^an>syaU7?qN;x%-eBuF|Y+^hh|PAb#aF0U;M- zu!u`}I%ZQKlRfBJOBk(CVn>Du!6nDlceQky9Qc|T6^O-!mEVfqd_2k-I)%cCZVT(c zCt4W)?MBX4g!PEpV7wF(f~7_dGWD6H2~|gBEJiwjQG*9$!;2GRW^LY1KF<HX?Vu~&taunvtHx(T< znMEg0G?0v(!r`^X6@9)&4csBc1y2t0hcg75f>o}uxP^;?+xHCNAaF1{5+JOsb~_6X zef<6QqnKz9W@;oaAx@q7mvPgNBwDb*7qIr)Jt2=w|n!@uR$Bl8P=BlKr-XdhoQe z=*^;t$tFM<^weiNAtY%EAtgxJV9vLok}LJ zLvu=a#Rgv`RB5CKFR(`vmPrA;VWlZ()7Y;~=~DH`G;WZ0)G*NhwOr|4^kG5Zu`Ts_Tx^1|J_K_4;l@fF3!ex0^00|x*a!(C^e_qHC@3P#3!MtbF z#!lReyO|`2TOhg6!{2*G!$7n@pAl&*=SZi1Kbe-j+u(_Eh47;m@~Epmm4_Bxwy}Eo zTWSeg)t{v_qmk91G>zOlr1Dg9UgG6AwfS{6K~@;X*ON#hQY3rHQ#*@4y9xDz+BPAq ztO=K3+#f#QFWv6kQdPBKC;>8>$N?Ft$>w)9>uBIUF_+HjG^Qht76PPgKFz(1cFA_n z^40`jx7QJi!EA!?vt$0QRIaa|3`c-e$l+~>3y)t6iQWNS`)=AQB z9ddls*qN}tml~(W^@ZDIf95sZZ=HR+8a;HuI{HF}fzo z@aVhVVxQoqDC)}}JcUx6Vu#Lc$I&9q1fXFU%x8&ZXI*F(WoW9LiDxvvuA2EY{7Hn~ zcVpOZ%jbJixWWor7tmoZPe;y|eKgY5y`@@*mQyHu_}S^O>32kyVl`llw?Z{@%sDNU zf+}8*of@dP5(f!iOe7U7LYpQIpW@}jK`3voEciy}K{Fxcd(=!l6koV$ThqNnvhMbG zytO4MrZCdv%Wwa3sULx(ZabVV04GmPhFG^%RBTs!F#30>F%&{F>2@66g*<*(bS%H~ zsu{+s3<5>#jEyJo)>b@yL9I}D?xkZL-6p=V1o1dfN} zKN@RPCv3b!uNchwyGq7K(TzSKnPsxQujXOv(fe}a#QKky-mvQa{#T!Z4y$vmDEDyu z?nSy+#-0rf;@vTg2qxwO+xBCY+}?5Sun;>_cN2aqEUgQj(qWHh{opxjgq$((u;aZz z7xSCLqX}QgI_#@X$Q??3+*PyZB|`YxSZdFY}6VJS+~ z=j~Dv0HYw!ptM21bMwL!4myrjuHk~CV^{0??=*`U(A16L&2p~ZDA4Sti3z~T$n!*9 z;b?gKG&PB(z*t@sNj&a`l6LIYX4_&PWb?rJUVYCOiKkw0W1hZG1nUZsBgJtjdVc76 zW_vU>ZHhVJVPAg~IU!07_R-gLmxu0Wl$^O5LwK_xcRZ%2jOR4Hu4mTtg^Q`RKtBLI@XSRpe6Qbz~O> z*gF6&#RM|rP#ipK23))vK)`bpwpy#N2`|z6P&1ekbrM-}Tfb)q-)Yy09o}c%Xd&%Q zrfN-AI!qy3i=wGL$VzunOj-3KMM~QDUOIhhb;IZ!=OxnzQ)ljPtS)l&bk} zwD*wW@7c=J46`+*r|U#6J9nr0%p|(V>%E}H$jRM|zNn6Jp}64k;nBa!yvUj-ZubBE zhv+l@Ck@y){u9D~LO=q5|1{x0A^f*H{I?4JTLu5Eg8x>*|EH?}lS;0zN1*SsxtnCn R>pk#KLq+F&zOr@5{{e@yhEo6l literal 0 HcmV?d00001 diff --git a/templates/backstage/app-with-bucket/skeleton/docs/index.md b/templates/backstage/app-with-bucket/skeleton/docs/index.md new file mode 100644 index 0000000..ace4440 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/docs/index.md @@ -0,0 +1,16 @@ +![cnoe logo](./images/cnoe-logo.png) + +# Example Basic Application + +Thanks for trying out this demo! In this example, we deployed a simple application with a S3 bucket using Crossplane. + + +### idpbuilder + +Checkout the idpbuilder website: https://cnoe.io/docs/reference-implementation/installations/idpbuilder + +Checkout the idpbuilder repository: https://github.com/cnoe-io/idpbuilder + +## Crossplane + +Checkout the Crossplane website: https://www.crossplane.io/ diff --git a/templates/backstage/app-with-bucket/skeleton/go.mod b/templates/backstage/app-with-bucket/skeleton/go.mod new file mode 100644 index 0000000..cc90c20 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/go.mod @@ -0,0 +1,3 @@ +module ${{ values.name }} + +go 1.19 diff --git a/templates/backstage/app-with-bucket/skeleton/kustomize/base/cm-nginx.yaml b/templates/backstage/app-with-bucket/skeleton/kustomize/base/cm-nginx.yaml new file mode 100644 index 0000000..8f572d9 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/kustomize/base/cm-nginx.yaml @@ -0,0 +1,200 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: ${{ values.name }}-custom +data: + index.html: | + + + + Welcome to ${{ values.name }} + + + +
+
+ CNOE Logo +

Welcome to ${{ values.name }}

+

This is a sample application for CNOE reference implementation!

+

Learn more at cnoe.io.

+
+
+ +
Loading environment variables...
+
+
+
+ + + + startup.sh: | + #!/bin/bash + ( + echo -n "{" + first=true + env | sort | while IFS= read -r line; do + # Skip empty lines + [ -z "$line" ] && continue + + # Split on first = only + key="${line%%=*}" + value="${line#*=}" + + # Skip if key is empty + [ -z "$key" ] && continue + + # Add comma for all but first entry + if $first; then + first=false + printf "\n " + else + printf ",\n " + fi + + # Properly escape JSON special characters + escaped_value=$(printf '%s' "$value" | sed 's/\\/\\\\/g; s/"/\\"/g; s/\n/\\n/g; s/\r/\\r/g; s/\t/\\t/g') + printf '"%s": "%s"' "$key" "$escaped_value" + done + printf "\n}\n" + ) > /tmp/env.json + + nginx -g "daemon off;" +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: ${{ values.name }}-nginx-conf +data: + nginx.conf: | + server { + listen 80; + server_name localhost; + + location / { + root /usr/share/nginx/html; + index index.html; + } + + location /env.json { + alias /tmp/env.json; + default_type application/json; + } + } \ No newline at end of file diff --git a/templates/backstage/app-with-bucket/skeleton/kustomize/base/kustomization.yaml b/templates/backstage/app-with-bucket/skeleton/kustomize/base/kustomization.yaml new file mode 100644 index 0000000..c101707 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/kustomize/base/kustomization.yaml @@ -0,0 +1,4 @@ +resources: + - nginx.yaml + - cm-nginx.yaml + - ${{ values.name }}.yaml diff --git a/templates/backstage/app-with-bucket/skeleton/kustomize/base/nginx.yaml b/templates/backstage/app-with-bucket/skeleton/kustomize/base/nginx.yaml new file mode 100644 index 0000000..86e6423 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/kustomize/base/nginx.yaml @@ -0,0 +1,83 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: ${{ values.name }} + labels: + app: ${{ values.name }} +spec: + replicas: 3 + selector: + matchLabels: + app: ${{ values.name }} + template: + metadata: + labels: + app: ${{ values.name }} + spec: + containers: + - name: ${{ values.name }} + image: nginx:stable + command: ["/bin/bash"] + args: ["/startup.sh"] + ports: + - containerPort: 80 + volumeMounts: + - name: html-content + mountPath: /usr/share/nginx/html + - name: nginx-config + mountPath: /etc/nginx/conf.d/default.conf + subPath: nginx.conf + - name: startup-script + mountPath: /startup.sh + subPath: startup.sh + envFrom: + - secretRef: + name: ${{ values.secretName }} + volumes: + - name: html-content + configMap: + name: ${{ values.name }}-custom + - name: nginx-config + configMap: + name: ${{ values.name }}-nginx-conf + - name: startup-script + configMap: + name: ${{ values.name }}-custom + defaultMode: 0755 +--- +apiVersion: v1 +kind: Service +metadata: + name: ${{ values.name }} + labels: + app: ${{ values.name }} +spec: + ports: + - port: 80 + targetPort: 80 + selector: + app: ${{ values.name }} +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: ${{ values.name }} + annotations: + cert-manager.io/cluster-issuer: 'letsencrypt-prod' +spec: + ingressClassName: nginx + tls: + - hosts: + - ${{ values.name }}.advaitt.people.aws.dev + secretName: ${{ values.name }}-prod-tls + rules: + - host: ${{ values.name }}.advaitt.people.aws.dev + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: ${{ values.name }} + port: + number: 80 diff --git a/packages/crossplane/dev/kustomization.yaml b/templates/backstage/app-with-bucket/skeleton/kustomize/dev/kustomization.yaml similarity index 100% rename from packages/crossplane/dev/kustomization.yaml rename to templates/backstage/app-with-bucket/skeleton/kustomize/dev/kustomization.yaml diff --git a/templates/backstage/app-with-bucket/skeleton/kustomize/prod/kustomization.yaml b/templates/backstage/app-with-bucket/skeleton/kustomize/prod/kustomization.yaml new file mode 100644 index 0000000..8df05cf --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/kustomize/prod/kustomization.yaml @@ -0,0 +1,35 @@ +{%- if values.awsResources %} +resources: +{%- if 'Bucket' in values.awsResources %} + - ../base/ +{%- endif %} +{%- if 'Table' in values.awsResources %} + - ../base/table.yaml +{%- endif %} +{%- endif %} +namespace: default + +patches: + - target: + kind: Deployment + patch: | + apiVersion: apps/v1 + kind: Deployment + metadata: + name: not-used + labels: + backstage.io/kubernetes-id: ${{values.name}} + spec: + template: + metadata: + labels: + backstage.io/kubernetes-id: ${{values.name}} + - target: + kind: Service + patch: | + apiVersion: apps/v1 + kind: Service + metadata: + name: not-used + labels: + backstage.io/kubernetes-id: ${{values.name}} diff --git a/templates/backstage/app-with-bucket/skeleton/main.go b/templates/backstage/app-with-bucket/skeleton/main.go new file mode 100644 index 0000000..d3103f9 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/main.go @@ -0,0 +1,5 @@ +package main + +func main() { + +} \ No newline at end of file diff --git a/templates/backstage/app-with-bucket/skeleton/mkdocs.yml b/templates/backstage/app-with-bucket/skeleton/mkdocs.yml new file mode 100644 index 0000000..c8ae223 --- /dev/null +++ b/templates/backstage/app-with-bucket/skeleton/mkdocs.yml @@ -0,0 +1,6 @@ +site_name: 'Argo Spark Example' +nav: + - Home: index.md + - idpBuilder: idpbuilder.md +plugins: + - techdocs-core diff --git a/templates/backstage/app-with-bucket/template.yaml b/templates/backstage/app-with-bucket/template.yaml new file mode 100644 index 0000000..ce11d5c --- /dev/null +++ b/templates/backstage/app-with-bucket/template.yaml @@ -0,0 +1,144 @@ +apiVersion: scaffolder.backstage.io/v1beta3 +kind: Template +metadata: + description: Adds a Go application with AWS resources + name: app-with-aws-resources + title: Add a Go App with AWS resources +spec: + owner: guests + type: service + parameters: + - properties: + name: + title: Application Name + type: string + description: Unique name of the component + ui:autofocus: true + labels: + title: Labels + type: object + additionalProperties: + type: string + description: Labels to apply to the application + ui:autofocus: true + repoUrl: + title: Repository Location + type: string + ui:field: RepoUrlPicker + ui:options: + allowedHosts: + - github.com + required: + - name + - repoUrl + title: Choose your repository location + - description: Configure your bucket + properties: + apiVersion: + default: awsblueprints.io/v1alpha1 + description: APIVersion for the resource + type: string + kind: + default: ObjectStorage + description: Kind for the resource + type: string + config: + description: ObjectStorageSpec defines the desired state of ObjectStorage + properties: + writeConnectionSecretToRef: + description: Name of the secret to store connection details + properties: + name: + type: string + default: connection-secret + resourceConfig: + description: ResourceConfig defines general properties of this AWS resource. + properties: + deletionPolicy: + description: Defaults to Delete + enum: + - Delete + - Orphan + type: string + region: + type: string + providerConfigName: + type: string + default: default + tags: + type: object + additionalProperties: + type: string + required: + - region + type: object + required: + - resourceConfig + title: Bucket configuration options + type: object + steps: + - id: create-repo + name: Create Repository + action: github:repo:create + input: + repoUrl: ${{ parameters.repoUrl }} + - id: template + name: Generating component + action: fetch:template + input: + url: ./skeleton + values: + name: ${{parameters.name}} + labels: ${{ parameters.labels }} + repoUrl: ${{ parameters.repoUrl }} + owner: ${{ parameters.owner }} + remoteUrl: ${{ steps['create-repo'].output.remoteUrl }} + secretName: ${{parameters.config.writeConnectionSecretToRef.name}} + - action: roadiehq:utils:serialize:yaml + id: serialize + input: + data: + apiVersion: awsblueprints.io/v1alpha1 + kind: ${{ parameters.kind }} + metadata: + name: ${{ parameters.name }} + spec: ${{ parameters.config }} + name: serialize + - action: roadiehq:utils:fs:write + id: write + input: + content: ${{ steps['serialize'].output.serialized }} + path: kustomize/base/${{ parameters.name }}.yaml + name: write-to-file + - id: init-repo + name: Initialize Repository + action: github:repo:push + input: + repoUrl: ${{ parameters.repoUrl }} + defaultBranch: main + - id: wait + name: Waiting for the repo to be ready + action: "roadiehq:utils:sleep" + input: + amount: 5 + - id: create-argocd-app + name: Create ArgoCD App + action: cnoe:create-argocd-app + input: + appName: ${{parameters.name}} + appNamespace: default + argoInstance: in-cluster + projectName: default + repoUrl: ${{ steps['create-repo'].output.remoteUrl }} + path: "kustomize/base" + - id: register + name: Register + action: catalog:register + input: + repoContentsUrl: ${{ steps['init-repo'].output.repoContentsUrl }} + catalogInfoPath: '/catalog-info.yaml' + output: + links: + - title: Open in catalog + icon: catalog + entityRef: ${{ steps['register'].output.entityRef }} diff --git a/templates/backstage/argo-workflows/skeleton/catalog-info.yaml b/templates/backstage/argo-workflows/skeleton/catalog-info.yaml new file mode 100644 index 0000000..e4bfdb6 --- /dev/null +++ b/templates/backstage/argo-workflows/skeleton/catalog-info.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: backstage.io/v1alpha1 +kind: Component +metadata: + name: ${{values.name | dump}} + description: This is an example Backstage component representing the use of Argo Workflows and Spark Operator. + annotations: + backstage.io/techdocs-ref: dir:. + backstage.io/kubernetes-label-selector: 'entity-id=${{values.name}}' + backstage.io/kubernetes-namespace: argo + argocd/app-name: ${{values.name | dump}} + argo-workflows.cnoe.io/label-selector: env=dev,entity-id=${{values.name}} + argo-workflows.cnoe.io/cluster-name: local + apache-spark.cnoe.io/label-selector: env=dev,entity-id=${{values.name}} + apache-spark.cnoe.io/cluster-name: local + links: + - url: https://github.com/cnoe-punkwalker + title: Repo URL + icon: github +spec: + owner: guests + lifecycle: experimental + type: service + system: ${{values.name | dump}} +--- +apiVersion: backstage.io/v1alpha1 +kind: System +metadata: + name: ${{values.name | dump}} + description: An example system for demonstration purposes + annotations: + backstage.io/techdocs-ref: dir:. + links: + - url: https://github.com/cnoe-punkwalker/my-reference-implementation-aws + title: CNOE Repo + icon: github +spec: + owner: guests + lifecycle: experimental + type: service diff --git a/templates/backstage/argo-workflows/skeleton/docs/argo-workflows.md b/templates/backstage/argo-workflows/skeleton/docs/argo-workflows.md new file mode 100644 index 0000000..1e01c2b --- /dev/null +++ b/templates/backstage/argo-workflows/skeleton/docs/argo-workflows.md @@ -0,0 +1,160 @@ + +[![Security Status](https://github.com/argoproj/argo-workflows/actions/workflows/snyk.yml/badge.svg?branch=main)](https://github.com/argoproj/argo-workflows/actions/workflows/snyk.yml?query=branch%3Amain) +[![OpenSSF Best Practices](https://bestpractices.coreinfrastructure.org/projects/3830/badge)](https://bestpractices.coreinfrastructure.org/projects/3830) +[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/argoproj/argo-workflows/badge)](https://api.securityscorecards.dev/projects/github.com/argoproj/argo-workflows) +[![FOSSA License Status](https://app.fossa.com/api/projects/git%2Bgithub.com%2Fargoproj%2Fargo-workflows.svg?type=shield)](https://app.fossa.com/projects/git%2Bgithub.com%2Fargoproj%2Fargo-workflows?ref=badge_shield) +[![Slack](https://img.shields.io/badge/slack-argoproj-brightgreen.svg?logo=slack)](https://argoproj.github.io/community/join-slack) +[![Twitter Follow](https://img.shields.io/twitter/follow/argoproj?style=social)](https://twitter.com/argoproj) +[![LinkedIn](https://img.shields.io/badge/LinkedIn-argoproj-blue.svg?logo=linkedin)](https://www.linkedin.com/company/argoproj/) +[![Release Version](https://img.shields.io/github/v/release/argoproj/argo-workflows?label=argo-workflows)](https://github.com/argoproj/argo-workflows/releases/latest) +[![Artifact HUB](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/argo-workflows)](https://artifacthub.io/packages/helm/argo/argo-workflows) + +## What is Argo Workflows? + +Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. +Argo Workflows is implemented as a Kubernetes CRD (Custom Resource Definition). + +* Define workflows where each step is a container. +* Model multi-step workflows as a sequence of tasks or capture the dependencies between tasks using a directed acyclic graph (DAG). +* Easily run compute intensive jobs for machine learning or data processing in a fraction of the time using Argo Workflows on Kubernetes. + +Argo is a [Cloud Native Computing Foundation (CNCF)](https://cncf.io/) graduated project. + +## Use Cases + +* [Machine Learning pipelines](use-cases/machine-learning.md) +* [Data and batch processing](use-cases/data-processing.md) +* [Infrastructure automation](use-cases/infrastructure-automation.md) +* [CI/CD](use-cases/ci-cd.md) +* [Other use cases](use-cases/other.md) + +## Why Argo Workflows? + +* Argo Workflows is the most popular workflow execution engine for Kubernetes. +* Light-weight, scalable, and easier to use. +* Designed from the ground up for containers without the overhead and limitations of legacy VM and server-based environments. +* Cloud agnostic and can run on any Kubernetes cluster. + +[Read what people said in our latest survey](https://blog.argoproj.io/argo-workflows-events-2023-user-survey-results-82c53bc30543) + +## Try Argo Workflows + +You can try Argo Workflows via one of the following: + +1. [Interactive Training Material](https://killercoda.com/argoproj/course/argo-workflows/) +1. [Access the demo environment](https://workflows.apps.argoproj.io/workflows/argo) + +![Screenshot](assets/screenshot.png) + +## Who uses Argo Workflows? + +[About 200+ organizations are officially using Argo Workflows](https://github.com/argoproj/argo-workflows/blob/main/USERS.md) + +## Ecosystem + +Just some of the projects that use or rely on Argo Workflows (complete list [here](https://github.com/akuity/awesome-argo#ecosystem-projects)): + +* [Argo Events](https://github.com/argoproj/argo-events) +* [Couler](https://github.com/couler-proj/couler) +* [Hera](https://github.com/argoproj-labs/hera-workflows) +* [Katib](https://github.com/kubeflow/katib) +* [Kedro](https://kedro.readthedocs.io/en/stable/) +* [Kubeflow Pipelines](https://github.com/kubeflow/pipelines) +* [Netflix Metaflow](https://metaflow.org) +* [Onepanel](https://github.com/onepanelio/onepanel) +* [Orchest](https://github.com/orchest/orchest/) +* [Piper](https://github.com/quickube/piper) +* [Ploomber](https://github.com/ploomber/ploomber) +* [Seldon](https://github.com/SeldonIO/seldon-core) +* [SQLFlow](https://github.com/sql-machine-learning/sqlflow) + +## Client Libraries + +Check out our [Java, Golang and Python clients](client-libraries.md). + +## Quickstart + +* [Get started here](quick-start.md) +* [Walk-through examples](walk-through/index.md) + +## Documentation + +You're here! + +## Features + +An incomplete list of features Argo Workflows provide: + +* UI to visualize and manage Workflows +* Artifact support (S3, Artifactory, Alibaba Cloud OSS, Azure Blob Storage, HTTP, Git, GCS, raw) +* Workflow templating to store commonly used Workflows in the cluster +* Archiving Workflows after executing for later access +* Scheduled workflows using cron +* Server interface with REST API (HTTP and GRPC) +* DAG or Steps based declaration of workflows +* Step level input & outputs (artifacts/parameters) +* Loops +* Parameterization +* Conditionals +* Timeouts (step & workflow level) +* Retry (step & workflow level) +* Resubmit (memoized) +* Suspend & Resume +* Cancellation +* K8s resource orchestration +* Exit Hooks (notifications, cleanup) +* Garbage collection of completed workflow +* Scheduling (affinity/tolerations/node selectors) +* Volumes (ephemeral/existing) +* Parallelism limits +* Daemoned steps +* DinD (docker-in-docker) +* Script steps +* Event emission +* Prometheus metrics +* Multiple executors +* Multiple pod and workflow garbage collection strategies +* Automatically calculated resource usage per step +* Java/Golang/Python SDKs +* Pod Disruption Budget support +* Single-sign on (OAuth2/OIDC) +* Webhook triggering +* CLI +* Out-of-the box and custom Prometheus metrics +* Windows container support +* Embedded widgets +* Multiplex log viewer + +## Community Meetings + +We host monthly community meetings where we and the community showcase demos and discuss the current and future state of the project. Feel free to join us! +For Community Meeting information, minutes and recordings, please [see here](https://bit.ly/argo-wf-cmty-mtng). + +Participation in Argo Workflows is governed by the [CNCF Code of Conduct](https://github.com/cncf/foundation/blob/master/code-of-conduct.md) + +## Community Blogs and Presentations + +* [Awesome-Argo: A Curated List of Awesome Projects and Resources Related to Argo](https://github.com/terrytangyuan/awesome-argo) +* [Automation of Everything - How To Combine Argo Events, Workflows & Pipelines, CD, and Rollouts](https://youtu.be/XNXJtxkUKeY) +* [Argo Workflows and Pipelines - CI/CD, Machine Learning, and Other Kubernetes Workflows](https://youtu.be/UMaivwrAyTA) +* [Argo Ansible role: Provisioning Argo Workflows on OpenShift](https://medium.com/@marekermk/provisioning-argo-on-openshift-with-ansible-and-kustomize-340a1fda8b50) +* [Argo Workflows vs Apache Airflow](http://bit.ly/30YNIvT) +* [CI/CD with Argo on Kubernetes](https://medium.com/@bouwe.ceunen/ci-cd-with-argo-on-kubernetes-28c1a99616a9) +* [Define Your CI/CD Pipeline with Argo Workflows](https://haque-zubair.medium.com/define-your-ci-cd-pipeline-with-argo-workflows-25aefb02fa63) +* [Distributed Machine Learning Patterns from Manning Publication](https://github.com/terrytangyuan/distributed-ml-patterns) +* [Running Argo Workflows Across Multiple Kubernetes Clusters](https://admiralty.io/blog/running-argo-workflows-across-multiple-kubernetes-clusters/) +* [Open Source Model Management Roundup: Polyaxon, Argo, and Seldon](https://www.anaconda.com/blog/developer-blog/open-source-model-management-roundup-polyaxon-argo-and-seldon/) +* [Producing 200 OpenStreetMap extracts in 35 minutes using a scalable data workflow](https://www.interline.io/blog/scaling-openstreetmap-data-workflows/) +* [Argo integration review](http://dev.matt.hillsdon.net/2018/03/24/argo-integration-review.html) +* TGI Kubernetes with Joe Beda: [Argo workflow system](https://www.youtube.com/watch?v=M_rxPPLG8pU&start=859) + +## Project Resources + +* [Argo Project GitHub organization](https://github.com/argoproj) +* [Argo Website](https://argoproj.github.io/) +* [Argo Slack](https://argoproj.github.io/community/join-slack) + +## Security + +See [Security](security.md). + diff --git a/templates/backstage/argo-workflows/skeleton/docs/images/cnoe-logo.png b/templates/backstage/argo-workflows/skeleton/docs/images/cnoe-logo.png new file mode 100644 index 0000000000000000000000000000000000000000..63b8f228ef58a42a758e570331053afc547df964 GIT binary patch literal 58052 zcmeFZ`9G9v{68*{rH~?`;&6(H5g|JjN+C3sFl5PYWFKpjQ_5N?`&L5P_pyzovSr`* zv9E)%jeYoDw@$s!`F`G?Kj8Ctocf`=d%2d^@_en=yt=QZOh?N`OGZXUcjxvkO)@fy zbuzM}CDg~jo%lXaEpUV0>gLV+HaC@TB5je5S`Lp)&6UmV%^j^wHI;9WkzEfCh8tR* zgEPs-l;rdO+2YrglJb^*U-Vspt!DdQ1GD?)`F2BB!fXo^UN%;21s zaK~R4U(pZ8T_nH4mL)LNIi6oP{r$V7bG3IHop+l6f5>~j_m_^aPkgN$SR`=P;(9kQ zn+F#7tozDGUJgI+%eel7Yuub{pSdQ_@F|7DZaqz}$rjCbDce}i@l)Rl$#hub8J6=} zquvO=G*Z06n-;YHeefmK4EM%E3M!}N!4PTD&zYCG8WkJF(xcV5JF$MdzD0_|Hs1&R z)I;-yyqQLh7H>rGIfjq7ums`ctXC9M#F9}#!N%po$BtH&NxUv*DvC62OD*IjMOMJu)l92$0srI7G z3qrh5PFxiA_*)5<<7`0}VcLZ&H|l+L3VA-AG%9lT4ILkc3D6%tFSeZ@uPZu=3J3PD-U^o3;Efn{4@Et9x`|-~ECY`f5nlmqVNwzRJVOE`D=2_KYYx=S0)V+Zc8t9M{`-ui8w;|iM;I{QZw z=UbizEwdoAc1aa_(YkOhC$qJZ_Ab;BZp{So!1BOZH-*}L3$w`4g4P<91o4x7t$nRF zKi>D+BP6};bpp$jv=hpDoaUVWv|zIqaIPQdigRo|_-ZuMn`1O1{_w;;mCsRM{Gc{Q z6o0Kro7TG&ssCMhO-9X3Hdz2}`zSx@qn@bt4mn37nRkhM8MVbR{k_S}2D!I34V!N{ zF8NO2CS}K3oDv)po{T)LHyjmoG;%b0!r_#lY~6(-T(eoqPRga7wu;agO1SZ`Pe7X2 z?77U>Z(q&ss?RdN_>1Nd%)?bY{d6#kVcD^|9Hd#gcg9neFHQ^g8Tmb9au1ZkkMVe= zOb|qls@YHc#eGNaEZ1|pGLOF&i7Bo=cVz~$(X~!1w$hX)UPfNmWSQi?I{2L(39Qgq zSm|<{%WI?`53-6YD2$#D_|`BvVM3cN%y;I*R8=A`zI3+iTzd+AVT9!rS&pah^{>b~ z`y`e@RI<5K!m;anJW`tvizFCEGmf_HS~iM3wV1#X$TDP8+&47cdA^&BkYDfi`&O-^ z&eodFfhX#_+h4?y^?6|t2fHK>@3o^{BV@&i2S*Psx*xAG?P&x6am!ry&SO!T&m!vb|GN$?7#)dO8; zUDbP%rbs)%M`lP9b3u1I2j~SdX?IC*X=m>Ih|}H9*4|0dU54xM4M}hf-G*^-9=_si zBg3VudY|(q($Sn#Oi)Nrh)b51lao{0(d@CL<}IbaKL`Jl;j(mgc94X@+}zv*-9!YD zjux=15)u+HAz_%XumE^NzzJpV{K#Fv-iiC?Aiu`BW$t9^XyxE+g|z2{#(iXhba9s9 z;({jn{paU8ovj}K&rJ4Ce{TzH5C%PgT@@69{coR{yIcKVK7*e8{OoXFKc|z129s2G zv@!<^hL$CJRr+v(f8G0^?{xT$u-J8J*#G+IfBjVNe?FBE z75V3v|9JBEm(nnZQ2!v@Pp%x^1#FR}m4^Lhu`I3Z(#0AwGI_E)w-g?@A6XcdvpuI% z%Dbhddc;P;JzQ+K%B$)a`xQ>y7Ugt};If#A%+cFl{~Z4m6Uina9(R|U&AsHy_tz9n zFX<5l$A{u=!~FS8#VegR#B^_~{3$1ISU57L9r*6M+;BI1xO=#g+)}J8O)YLM{Zi)s zj?~QE2BoKDN60CtPjbrtckv$){*#3NwBSE2_)iP|(}MrB;6E++PYeFjg8wJAfdAtC zj4sO)FaG7)mvZOqEgZDnM2g8w2=q~@qP1E#~+;a%GL)J2O56&?8mx~lZee=Q=6y30_UFj16ly*rV*cMp0tbDU|0kmvu;*(s=FxnK7- zdrHmL;m)QE#9NnPRtSKhb*b?yub~%P7+-&IqYp~`CoSYh&!LrinsAm{H%EK?u+-Du z-nH@l@o9WVu>BNqs!yxfXsBm1+ndE6{PXRmKOJ_*Tq)Krv~<;$@aP!Dl{L~s&$r~| z57#2rsra|5ZN5Q04YkoMgPy3wJQ4fBo`|@$`952 zpg<-x{|e=LOa6*9po1EXfdsMd=0Dc}1o2B1zFI-L-O18|^>CXEtWbLh4#Q893|2 z73Nk*d`*Fvg)08!;_pE(Pmwd*u~c7g)O!?^|3F&#DH)mp3@1CfeDt5AQGYU^Fui}_ z#jP?$p_Y%@zsEcZ#$>p@_fH)4G#;U8f9d7An*eXOVTt=}X77m;d- z4FN@pD>ggjnA6qeGo3EuUG0^rnObtF+mO(60P*pr7+3!1nlj#3<$PQm<*gmMr8uZ# zm4uOM%EB|(6`oJml+PB6KTUH|mkP~~7rJfw8)7UqIH``xHl;|Yg%U1c+!a+%bGE&c z-zRx%ZD_r(u>IUHyuLQ<7KOt4sQ3}^h5EKVQmuMmdAbaM%*5hWr8|FXrzL_@y`BBt z?i_Kn(>fBfbP%pd;Ds~tZh0jk1u~|$3vVYfqI>=PEN7Is?T7&!9TT1soyhX@p&a)} z*fg_Q)!=Cga*Cci@)|)drGvGmj z)1+^fM75g&aw_VTgQQQHF`Mb?@i7apblP!+4fHNdKwf&(<>is2r4q)|e=Ee}(~;Oy z)9JHS8uQGg`f+?rywu>LgBbcDxfazFtXM_x*^@$y_v1@T%~Yg!Y1x9;clQkWhU1Z@ z3`fXqV8%Zd2P!GZesMU3>GLsvt@xFdG1M4I>dhESl!D(odzmfKWa_1*47b5=MFC%P<|!7J~T=q?~C5wdRa9|o`1zbZX13{W)*&~b+N9R^x)P84xo8h{Oomdn~R60 z`?Spi`c#a#@M=E)Kzy(BunMN6uQtq6e?}CK0tC*;2iC-;Vz*Z9Z-LddN5i<}uSUn~ z(_N@Yh>zi)^{HqVmvJjWX5qyDY;zaN-ct7PK)R*jrm76$j7{R4QsyK50C41#lVhhA zOXGhD6!ppL7lq>EV>ClhX0UNzE~l?M&O6oe z4EYpG_{>T{jEDtzDwVtZ^4Cs{-%~ics=v4Y(rT9teD(x?(_9(xatZqd=X;!QaHQN-wZbv zpj7H~O8*=mgM+uK<}M+a@c~isW#O=w?>W|+cO@btQa_33Vu4FCPr0_*ZPCz{{v-C$ zU~6+9 z#^>8q?Ia?_8wrZ-p7Cj0GU@rua}VP>V}V6S!&!jP5T$Ir{uY`eY)`9rfKQb0+Wpxt)+RndbCJ%x$5ku+>uJl0vUiTun@;Rd@2F!v14n4QsK^yc8B`4Z6A@abT4T>uv?yMfC z3$!VZiQn~D?%bU#QGCK=Lm^nct?%wS$7jYHt;xDqbMBO86JDt{aZWMoaD>`n7J`@E78L~s8dU0|lZXWUH z_|0!gexc}iPgYW+5f2#XNpK1|)wdTcs|oGvLwq&YCStKH-A-C&OK|g%^`YlOq4tP^ zIb(!Mc1LZkT2iNN{!nJ+h3__-YT}H<03fF6f85Wg6$<(-vBrYr;vDOE%GLniTki)K zwRhdue3*J>Yecn;J(hUxk45Bfig9@Y?NoQ}8Gj}A3RlcCblD-aq zaJ*UTtPx#ZeVqEK89d_F7fPZFyM2Kc`*l{ixq!jHsYAFD&s}xf~VS zc^@I<=2+o+X-!l4W;WV!jdb%cYUB*>Im9byf7+^}1lYdTi8Nm7wC$J^xBSk_i&dVi`V=rNe;VRJD%bx5`}AZA*nNGYBW5&FeBUhSvFJ=mm@bX zrFbyp-_ozp!;br}Z{d6zb=sj=BV5Ti&v#O=*}?hUPkQRwpe1^Hl#JN!^#Og|h z(kA6vOGPNTheertI2pQ-85ov9edOpNkb_7h9$S0{9ZsU2^d4OLOtIZjO1UoUqcHXS zfJ#Hg?V60Zx}9NM=54^v63yiqcJEH787~{BihyKR{On|Hw8 zX*si;F_Wzf6j?Z{+S+`iq6>0#{U+;DX{WufIBv8`_^mg%#aIy5A;kK(lZ>7^6FIm( zP#fha|7UgsW=KKy2)4n972qM9e#zzPvh?~qcvaeFzBZpq^wW;*oUb;uhdxP;9QQ52cROuzA^36o$O6=Cb z$EwBkbVS2N1N(E3*SM|tQk93q#Fk~PosIO#KNvdXNxx`jjte=fTlU~F2rfj*;81Jd%Gx$w6ESUbb2nl1BEyv(R| zw}amai?YBswBa}I@=%!`JA^5>LZ58l@ivEevgwznObRH*rFjd_4wmP3mJ zYMmZydiE3Pasjp&toF00=FO7rA7$`Tu@{F)6}%wGH!fw9P4FDT*V>uc@$~@{UDQ?b zpj=%~Mx)CW;R0J4@R5|XzB{dm$wK1JT1947uLe47uEgrP%;qMbvyuZ$z1?ubc!xLA zo16BEmt1UojL4=3`|k0C=otR~it~G2U-`#1Ja&fdk1wWlc?rRi^M%)H<2cOqeI)kV z-JpOa5&<#*9wHWhyU8vTwVgJNA!^y@DXVulPS`Pd8GPh4BAQcNJh)gGm8rwj%H6l! zO{M0eOAna-*uTAhPn32X*j5030wkH{s0uf(VoaF5TwkEdXMfa7rxAO(`lz}QjKlC0 z?KCk!&L~n;kGXCoIz~28=Ru4>pY>ayJa;bxV!Xqs{!BPly``DV$jy^{iGcO4517-f zf{7#2L#LlncG{z?KV|BZbEvmsQF634>qXpcrxYrZ z=?z=$U78uy)j#q>On7Zzfsn`IZM9ePK>=`I56Ywbj&`U25TczXT?@TiBkB{H-I`LN z9q+j7j~~=Z5SJb656pCD?Q|Yd?$6*%tldBS#SuL=?y^%PDijsZlkQO5zeVu1sc4m0H^;Nb3z&H5rS5cH1_z$~+D({j#xzdx*qUR+ z+Cklqt~dr+YhlS?z^p)~<+)leqT$bkw!tNbevf+~6Q`mm2RHX!>TDFmd*TxK`%|=g z!X!&}J}1^7n4Y;`u&H~l7+hHOxVcSguDK>u_QdM&s|rNf)?Y6+&(tLG?!3uFv<$6& zI)WAx33`0tuVdCUlMH7O3`HOc;I8lW5=z&`$jV$6Mke3}_t&>y#5dHy2J}=Cx94+G z{iWv!OLIMb*@ zgstlr(D^Ep=C<=CUkM!-d!+ER5r+j{X8u-9yVfu<=OP-4^d2)Jm0x>EWv#B*d`LcS z)M1q{0bj~h?Ds07z?^Ou*ne?P_M>iZ>go@Wi| zuDzww@fypQsa)4|RDcX8JoL@39m##fpMQ`V&}-T`c>U$D(n{dDrm}%Sdpi#gooA@+ z_y;R)Uk|H4A|TV+{C&pkF!|B;Ox{PtfWE>maVqwrlf?sVxfCAX z{@vw+4cvZ+6OuL7fZ_6pSqNNJq8 zDvGH`mU=eBTbu1#c2b7d2R4jGRW0y^Bc?jK+URzFs@9}ks&9Wx%Im=wKRuWth_jv7 z)(FbFYLkSyuuwD7;GZw%G`;=p<5gb?X(yx8>RARt$d`Hj6v1MUcrSpEzR`z@2)RcT z+RB{js-7Z!Mr}_kSdZb-n9hpOfh^Uy>TXUmTN0Zfy_~^>K;<^35XPyW?QN>Fr8{co zVGnW^q@O;sR9V}PI*WvZwVe6+pywBB@l){bxHZ@VPj$2N$jNaQ(tv=0tI7V;*+ot& z(U>N_*b1^*b5gu2!wWyEi& ziWUl{%$?bt3++v9&HAD*A(q{|39vYVF1ejV+}#nA9^AiQv@c`HbjQ?2;B|f@a1Qx& zG(v*L8!-KTYDqR6V)3Gpb+6M2_P2zxvB~rwh3-(S{g_W}Xt*Tl=-S&EQG%+JBu#t| z^{*cA+&#@fkcU|HS$^<<)j&h+8`q&VraL}a)6-au_?9WwYY{J& zj%N~W#EcQYj;89jFPJC$7xguy1H{WbMc@eRu%; zKw63CjCM0=dZ+QaCqD`JHsy@13XSS@5^0Ds4s?>w0><#q`%IO}Vq#w)KBofa`7!OK73D%R{@9N%9C8z_O(S z7|y3e4M=SZfxNhfBf)s}wDq|X+v@UCEqkpiZGAcR^Hp0vVOA!JciY=h1MF`XoG*>ZE1(y$ognbzDP4!S&6wYNjtO<-jx)i%x>DZ_*C&OH(o)4Z=!`+!qxW9IMO{}pbe_+lZUGpuru3Tso0V^4W!cwacOHgIeYrO%VCMMU z-1hDtLTP`Mv7oU@?gHm(Z9W7yePUGfNis|ZLCVdY2_h+ZxxJyA#S#->w?)_6I9QVN z)$Q~TRNC^Of?Txq#Jh%8`_i(CFfHSlmAI6O7q*oyJ}ZHkHI%JEN8tk?}?Wc+@;q|d}@oO94}k{N&!6mP=@;z z$i0g|@?CMdJrIue3}hm7tU;}0p4=uLh!$LV6y-`_Rp zn;kLQJEcXtX`_C*2`}C(Y4};^+$~q!%5&15`;6t2jU;zT-^JvW^&!XWqHa9#HewSK z6ZqW{cJj5>9(L7jfN)R5$<|HmC{{;``BGBC--r&hg!A7aC_UESj~Q5U1yyLXX;Rmg z;*08XPyb+yl$D?2N_pYswy=%rClE-P98tXbD~9e-bc+d-OX=9=skaVM#L*A|{g9qn|Mrbf4n z&j=s)iM?A;#sv0dn2S)n7F(jeWbL?lyFawuxUK#_~sfwfl47@MXn3Gs6pTUzwl- z9j{@NR*vL!ELMA;-gjs&W^+w<$!l-DNe(6{f}B2Ld6?79d-^oK_XvbNSNyAZ8!d{A zbvwDwpJBZnb6PYe)%U$0l1Fl5$j@Yq7z-B<&77@y@VQz#YmzMxH2)-vC%vxmVQSi{ zc)#>c1BEJ&H|1w(n;kel`IQBE%s(@WK{8vu&$795Z%hSLKyef z1qY$T=tQK1)1S@fUVFVWgJ-O!m$RETcA6YGc=MmZ?0jH9-*KFrg?jQwHs-=Du_qFy z8*7xkya7fX-NBh9d!*(Gl-9e!N@rWN2;cF#>58*`(Gste*ldfn+8NU&pP`v_ksYDmFMK}Q+raGfA(3a(bvh4$ zpr6K`zsAwjcou_|p!`#PQW|no&=S?OmJ>+?S4Rsk8o25A9es0xDiFd2bAMkHKie@f2&V}sNuC8E7cSD`X&_xtx_`-|n z!&a25RDVv5qK@8WjrE;EspU3fi%G_EeEqbbcS?Byv~rN4oxrHSTY!Y#$iE3`ky#>+ za&9zhM`2VzC(?1-x*>|%ehRn8L=t|^`+MOPB|gs6@~a-VMRYD-*?$x7 zgWFA7SI zM{NYNuX6f4Ub_yy?sHFvTZ91G;Iy+v?7egwTtTPXwZVb3i48Sh4(63e(t%9s;QAp_ zO7e3i_V(*1nL_&C_6V)>MQ1_D6}Kh=%1rw$O*Ya~;!$!VGG!zY*!&$JS{W~^c=?fX zN+N@ADOsG#1BT1y8jL~&WizU=66p(e6l(*lI@w!J85oZ~W2ETe%FlxeGk%M%Lk2Pl zv+v{)rgOZ^R&vi!bu$|ox8J}WmvDDn%h?_W-E;h83ZW1m`I;U-tiVLVuhmn^sqshS zrUla{ufDID0Su8Jxd;eWKh@?~y3ly(p7fWFZS8HucwiLTnRswat6&{#5g(iDLF3Llw zA*_2*Oc&bjhpImnic@q~Z_H#WbFf9#Y(F9r3PiBLE3^Jnw=sIp^+O9ahd zA0#XT&p`96Wax}F($h|EZ~KbgTayZNIm~0wiEesooF$v8E|X$y_1ze#bx!RH1d{S}uq3cJ zG>{L`;)WN8jYv)>>jUE={G{>?FXKMxQCW%IumC+o-srteVVxX-boNYFF$?J#hC96BzFv_?1!CpqgS=tna0?~G4dcsDC3akF?kA%j za$1(&t=UR9^@^xAY!5sQUdRr~g1Y&$Phh9RCU!oP7Z?UOwGTm8}Z*Txi zpJPp4GOHMm(1#l-3uO=6Y3QL)*m7~dbMm&_x?kSfm1VPKLV#}t<+V3@=B^(~lM-j8 zMw~f6SEL1+phppR_o+M!rII3SM!z%xkAwS z`c>qygzXcXsVT%vqPc|o^+qzm>znX-yM>Hye`)hV6x!bqT80DE!*Nj_>VP@KE^ur4 zO_f(_Z%E#1R_#MnATQ^;x}6m1bK3Kymml76tUXL)zgm<)$m;i(u6b;YU4O#ucAFc5 zi%+0F%YzJ5`#U`k-TGW5o!XmH(3epzCo|;1(qzMP^r|`s;z43w5)3wcXs;T;MlLxy zLbYQ^77wWe>NMvk?-jyk$Tc8D>B=GUvGC-L^>)Z z9R@{jpT@HsdL@U0Kpn22YbYvBSSOpbv**V)r1fb;GdH&^hd7B-=gC^Sc0H|AwZ;Rb z$VA*~9Gl~jiNBwy0^^bHcm$TAYXyRn_Z8STj2A1fV*H;FL`((#l!9&=;wRS6G72;(S7-nW zY!KmmCUNDUdhyUDuzw)IgdOgY8L`>WERYuYgVc~8e@ILkFv_LB99h92J({Eafs1GA zykmj+8#39A2926z=sT3Fk|=W&Yo|?R^!mGFA)fDKNBZ|I=`{GM zxa7A9=?_KZ2m$dB@~S|{`*%2fjdOWHasRuQTpBCx)rsI^Y~_isKv_+IIR0?NK(2h0 zw+z})q5wKJZX;zNR33-1GaL_dWiebg8Tz2lu<yAf_I4c1L`yoIqk$GI2H|5-v~sQwLLm1lE(;)ZjV>sc!Vwt>Gq-DKap;2kv$rm7oJ*CS zCevY5gk2bsLGZdDxPhhy*m){6DeBA{^5z6WT2)mJb}@Z%Q4-RKyeg3F;EHrBZWEkN zM6{f|MsodtsjdNSrjO8%ssj}=!dUv-*9J<3v0|Z{Jw{1=%IR8x+()07@;nPCp;iPJ zU0&FT(T5l9N`j_5v><4+br}}cf9nj|?e9}pXP+Vw}q5Ul;UG!WM)L^>@>tYg^@dj!=xJy9slqNw9&AN}#v6S%l68xFi!g1h=|5zUw!f1>IlH9v+ z{@RL!y7ftz=eA>!1ogZ3zT8dd{)=F+3V;%ugf|x;_Ff?GoqqC$Cc8bk;$EM*KUi(z zP4c9uh*N8^~&%1UK-=t4dQx9CfMKzyqfVIn7$quKm--IfCL>7 zKwH6>^?RBlCt*;6VFu0@KmwWI>ey`0jVXKF$g8g`{<--z8Rd~CWsGoJ--_M61vMa0 zps!<`v;pPPtIWZ85j6dWCTs1?a>H(UjbSJmsO;CH%SRfq)Fz8H@&m_B;xgBHy(@Af z=m~=RNHj@i{hfTcnyOCu!gK_{hMZIeEkiSz=H8#)CP7P%clB&3lq5y~a7L!vqLmr<~bV?oBu@T&B zU%F-rw~Z+?$}jp;#8F#e<}_yx7uY7hBR8ENpxIs6>yay@v7P;n&~H$|sVxN@ZP+~? z{V*oKlb%b;uCjSdwR;2VbW=dFzV|}jbHNo*rJG1)_D$7ASnaO*ojVLOSirIjKbdlX z{Zcn68%KiP#?7^AS7y+^qB#m2m5kj)<52j(vZjjO}M1~^Y#mR za9j2y+l&uh>W9tvCn2^TgV>sL8@=U^GV`i$(w~%Zu!D%1(Ka!Y{wqaN%TBcWtt+&k ze;(Utrk+eRsEkS}xB(PVl!cXQ6~VAdbobgabO{Gf%bnSxP?X6nG=?*^GzNHoRS$gM+ML6_wRMSuY-D= zp_VO+a{>?67DnWe={n3(xB$3u@O!cF*j)=~9N#Y8v(LL3kKANe~ zhl@o4xV3>9$v1#h{Fi_SX(Ha`@LSm>F9}7Purk}QoUO+@hz(rl&yKyRjmT=LV6>Sc zdFdEiYE)hVy^Lw%u=#l?@I$|cI*+3CtvG*^JMI+gvDF_?lT%@_58Y9e1b232v8;i^ zRLrKE$^6QrbM5-)Ulcr0Rb*@0pW!<1HglhFgXK3TMcWE1baf&+v%dkk)_=ipM16Lmu)^H|$ni7w`14X9)|sJo2GF&7|RabTQEwsmo+`K@W9VMny+T zcW;6#0Y0LWY?Cf~YXZtYOGAd{!vfpyEv8?7Ez+E34ND1LswEpt5c7yPX}OW!f$;Dk z%$DCgv%hz!+Ge0=6D+Yl1vfAimmy`9U2u}0oxB*p=VLLyekD)M4jOJ5bOaD&p8o@G zFEP#D`VcsacaXHoIKH`s8~aNp;o#B4M;7GF{dKO;EMA{Gz;kgklR^u)OL|sHaPjn$!CRlHmWt4}brMmW>`0sq=2PD!h29ESsB%1y=3!PQK zX$$I6=8{u*oj^kGTZ&cT2d}VIGerGTBPL^_0c8lYi`X>_LD1?YKsJlWWTpOY}?TSOiC4!{(XQ3xH{6J*Axo}9Cb5Y zs}%)tQZPME!kFuW?BN7`;y_auzt3%uPc@su`Zix7_@$Ly9si(Ca=EV?DbUw#_HjU=L35g+83`_WRV{ijZe4Q==^nLJxf&Fjb}m3!>@-(@xK29i zflcuz3)Fxm2+_K6W18kM!#+72)#X^$;qp8-BSkV-IhhhShgYA68~>FOw;uo@X_7I1T7TLr$j~8WGWX^gNuEgGcT9rl%JpcJP(O(BO<=M$42ABE+ zuW8)R*4dNDTida7Htl|q%_)^K?mba3i{9I5oBXo0X>B&SUrr%gld)f1BRD_cu4@`;a zY>TeLPB~NN9TdePCM0Q|m z)$2BA80$Sz^E3S%A>?XO-!4ZXsl*>6bE?m*K4>?ndeq-j$9{V9N}U1LHO+;wj;D7& z-Y+3n4fi(lvaV;b+Buq7#=V5UF6l@WL7e$Njyo8epf#4WJ$b9

d(w5}BKBAr{wrzd*>V2kjkOcueVOl_vEG7B`N4Za1mCi(JQ%LO+x) z%LR9-%EYJbi4B+g3doS`-R7O*pvV_RJrqJ5OdESQfTD`J#BM0KqyhJzYj9Hzi)*V+ zQsQ7*WRRPUa@%~69fxsu%hu73Axia1W%*`_K$=_%SsqVha1e;XXeY0{>-Afl9cWp` zFLGLR6_yO&!Eme#NaHT$7SWuHR530WMC?oHYTF&q#irR1=tF|?>c8`IaU=CoyQk5y z53)!V^j~dfJ|m=JM)=|lZEL9_h{rbcmxX6S^E#T+h*)vU)5%Y=rs>LXi0MdAj+;g_ zHbAWxkp=)R9Ql=@cuW#4-F&$w`aZn;mEq*qrR{<3=Ji%L@2@h$=bf*iizq`T$c+lU z-#jn$-9e5Hx;4^V$q)gj>K;sv|ER6*I0!Z{@2aW?q*5s zf2}mM{vi=ehVF*WFp)fM{{lXbzVRD8bDVgO!5_U!PvtQb0iTC-6&YjZFiREH&Ata| zpVbDt$IqDJ;k=GlFWlYtk?P^{0<9|b{>rGhY7OGRM5p0uWYuMKvsP%Tr!MuZD%G?l zNORl)8;V;h%00!|mQ`ixU2dR|)55;)x|`wxtRb%hQ=H_>?70-hGvAy_MdHnA#)H3K zNXFGZ$_VZy(2t&wX+W2kXWY>9mbl3;svhjJ3c`Z-xfx$Z3+_-n{^Fp2Ufq%M(2F?_ zEJn{t7Q4t1^5(;{5jBDvNn>-kNb!-=0w9Teg?z-oHwq*Xf{mN<8_Ep!UW2rY^!AFt zd5LJ;Sw#WOb>Fr{t8eMy!4b$g5We*^*vv&(KaYt^{%Y5bw^v%F9TA4qN&?D(Ovuh% zJVI{BTpx8A;_JC`Q>A+|LX)W`Y26>c8*!nx=g2m} zFyLMcUs`9y1+U>Ab2e)?m!4WFy1aV%c$ZbR5t`6cM&5wTEw_$q7P05>Be0*nwWHiX zokHdJpk&G`N^mSHr0Jcsc@|y|6?#QecE!+z6TN+W@9Hz>R)ln@Ehf^(bGoa6T8(*^ zu?ZX*n<<;(#0h7-64ySflSayLE70`aJi}h!SbBKipWj^4r+EukArBw^jACTAxA_VQ z1rZ$m*ALybeMdokP2ly2!F#`iX#1k)8y{CkYkiI{f^JasB}&H>go-j_-(Wx$&Q-cX z%(jB%xkyC`jzc!S*Ed|?WrRpw0PYdr#~<^cV7_J&-RN@WLOpv{7^ciI%c%q~Kl;$=XhFra8o)6=!PA9?H;(!a>+DVmkX33cXTQb%j7u^DHCqtk}cyodMDFAfuv zE#Pp4R75RwCO!6#oNLwPZhFkmP!>bC)EPO2m{^akqz&t`AbGIoy-Jw)B--9}JSt^7 zivng*P%$BOZu09<)EuVXIp{~>CVlE$ktt0q?7nTSCix7Z!ctwY`QTe{;Lc&>EeS%1 z-dy&NQc$hM_?q3PyHO~VVP?CWYv2~*0c>KV31&Lq|7K3(ywCYLHnbv?&OaT&;f+1- z>`iLT?Xpx^RC>aCwl011nD2wD?yx*MZmHEKQKmY2J0FG#>Pg_!v`s4(U|*2K3*nw! zpxft{4L}1Mz&2!d^G~R*v-bi|%pp@c8mu~a%WN=t{yH&W;++SnD==}Gui{Hwc+Cn$ zG_x*NUSs1dWuWVe_f{Y$_qgGqz1{oNuK1xC?3QmMVz2n~sC7m@n+=0ckCbjhP+hpu z$LNGxi96PBlUk%}D_vU5R-jr%Ex=$?nh^lU4sWXPtGuq5gBR&9=hWaCXTwC6#JJpN zIPzJBnRlsUFTOtN)LDtXawf-qSPzRFFX_aOVG(bM%eYV}7|Tg5Yn@D$#od(}zd;R& z>+j2s(@!csb0gF_i{`CrKbc>(LWZ*N2MsBq?joLPqzs=92YcsklL<)MMtFBO9U8RaS>|ZRt4`Q$z7o@;`Pm(8* zDdaQZSC19xiDohu8;r)_>*feBpCDrWC5Cxoz;Gk`QXiwl^#_Vq1DTGLcWPOshY;7w zmrfiUtMy1oFBQbiJqgWwXW}i5F7Lc@AsbADpJApo$*AW4eiE204FIA_@~I$SG)^vo zPgXG!6aOI{m%+kJLD-0~(Ygzrty}iTdop&Fok3?cihS^>N#K@(sed8-f9!qrTa;bb zwvM2Lq9`RuE8U1R3@V|5bT^`ufOLZ+jXk&Mf zL2EkPk=S{B-r&F#%sfsGDIrn4O%YV`b(Fh3IgV+zEzuaa!Pz+uUYX4p7H20c zV&fJscy%r0gR5}(!7g$hFR`1z^+f9YLWbxMr_d5xxZrAm^WtGv5nK4ID zWozUGy?@bwiWO8{5QLob9`BWBdD(jw9ny=}S6%$t0pNP7K0?w!@+0BBbbyMg-c?nV z9q$165#Z23t%dbXB~J9T{R}?m5~JIF`S#d$mHa1_`WOqt$_0)JG7op{0q}wjhPlTe0V#?ZxEq%mQzB4fC}R*2KNhb}cV0L+N%AwB zeNhZNTplcKmreD|Z8{!*xIvy}^s@B_H&r9i$i{fQ)8!cr%Ii~0EmJXUW;2{Zcn>2^ z^3+JqjH5PszBM+3&J_NNN_pl*_*?aj=CcIxV2=em!arT|*@y+)m!;pbY>{jy11W#5 zL#|;8Pz%SC4vc`?LIn|*TejydA9i6cw48AdG&cni{JCD3h|rYT;!@1;LjJy7=NU1? ze}_9v%(iI{qeAp&l0v+s?SkMBr^-|X_nqt&#hP_%v4(u76UaNKdvIC22#S&unU&NM zcyAPeOx7ByFN+v%A&4 zFyT8j8-e5imm&B_?eb2o7Ru0dLwMmv^b$aIl8Ccay8OH5x`sp)#8*3S41AWsrI}jK zN;q(!GpoJSQj5BaWO=W7a0MY_YueSa?Iq6}`bg1BH)f@rR(0N@VxA7><||6Osngj5 za|^a}8O*_z=^&8z8e8&v>};SQoJCAm>?OoL?s?HZ_Y48f0>e8J%{Z=D zWs*RL<N$vR*$26BRVHvcQ;Zo68X9=^N@ZHt?C|_uurWFVy#e*%NlyQ?@miqd2j~B z|3!OV7Cjmr)&ze(NIF%0tE#7E`Yqr9s#^XRbYQNSdYm$DrQ3n6)BAM6nn_(xy*rmn zeoc6rq$?D?(XS}jGr$oj&7tBMcFADUDHWEVHh!#;DZUy2*{8UF+;rB5&DISX9n$s) zaJR|en_oilI!nC`HsA&u-?97V4p=jVpMU7UN6SChl9YEU_r-VArc*>sgsx=_`zE@% zpm)b*mn}_qILF663$y3ldn@fc=8Ush$@pYd=5%5nsa#|`)O6Bo4YhlE+#Pitv>}l= z=BxLq_TiO8JqNWju`{)A8)Snq_Jf54ot55b$yyPPGmyRnNoSnhT35~8e=Z?D;gN99 zDV$g2h^l7vs2KQy^k7p?j}r`p2O+TQ$mRW}Gvj@o=Lt0MZFp$|TWUKnN zIgUYk@p)CU1vY6HTs*z(&p<6bWI8owwYjlY-PXKXNK*6Bd)~;(z=cmyoxDxA!0`JX zb(iz{*Ms~N&2gxnJwF3lY_zj4*lP?322|);sJm{IcSuf959)Ja>tg;Vf{-CC(KYi; zi8YPneRY|wLN;(<3c+lqixXxC_%BH~$ z^1~K=Q<^6(X<927MepsXcwREb;yO^L8B?Y`9awReEkl#ei;|)0yp^dN!_*zCVFk_= zZEYsy#9GCTt}Ac3Ke)`dT1^dxwsX76N9akAm$zxVqVT2*_NU^WJ(Lj33?6lDqLEoJ zEs7!3-<4b|PJt@r_jWXJOp6QHAfmA`+o_xE+t<}`DfpQ=gbsN*+$dQ_nt zC7RUHLglot3@AY8w%iwzcK+nzX-V3uZ=~CS`0hT~nlJ3r93w6vaPfBCFN8DAy#(i? z98zbru_5fBNkiGdbdcjM#0T3f8Y}Kn-&)kX#mAkIZ6_J2jGV$Z?tT7xtM}?WZocBI zJ0MvUUoyxTvr|m__HL7Bs7>@^NZlMJqW%uR!q&%Lm3bRjivaq7VhDy`_1Fwe1f3l? z5-)lNRy&B|-}$I}C!o`lSfcy71R_8bk$8SS+nT*EB&`Gt()`Xs$$X=6Tz$&1iZpN0 z`&aedNvtOa?d3>SlR1G+6_N=G#RUDBPNeE};?pAm70mHxiy^}go#+Aal+8KgM+W)9 zn)7=YhFEmy^9n{^WAz!lS^ZF>jPy|YT9ljR zB%V!dRoqdv%p*b6an-+>we`p)!ZGQo_e$2cL-f@~U8s0ODmLuYm;a^f(F9F`f2p+) zzi@JQi|nQ~BdEoe0ochKbzsnlcsyu!>77F>U`fs5*_L7(`{~IXqx9-NR>N(sC9N!>_m={-0d#9=E5cEN-wKLYfHbzHO7j_ZEwgD zsJeH(3LD**gEb!r5>AHT7?z;Kl6`e{-@^WwzJ0~zg)`q7kr!0W#>`~$7q4(ulTkt; z7Ga_#co%O%#7lEbj_p8CU}n9y!`W-kl#6{RTq*kX;Z5_q$r4nJGpNRE!dsC(W#e7Uk?UfvUQ8##S6O^{u00^H2p!%(=DEd7utI`axWG)Ff2(~o z;MA)6I?tZH^dX~>rgethv`uD!=7#Czy4otoLu5qW?}fJ$TrYFFt_0sCbjJvaT-yRE zi4dF>4pF zqPP}O8J=q0uZ)6r28woD7b^L8Uv53G))k`N36pr0R;y zEOMJ297tEw9AD2hPR)`<383mAI+K_6e||DId6KTaY`HMQrY`@dlH2GE#|B*_!n4#z z)ox(m!JfIU?UHw;%JdnMr@Nf}T3V_;m;C3T!=Mmka27$UjV{ip4`I%X?J1UVGOBNNN;l)s3vO^x3ClKM+Sgo;HDob zOwJC!J7$R7{K-6B!s40#BAU=L#Fs#N^QiyjoE|2o`$vGF-T;>&YJz6}t9;s~@W94i zj?;R(UB3INmuvY&B3WBpsrsH6AKA%=9;ebpw8+s5d#r+vPfT3Azq^CkhM(A z_VBXNq{iuP^R=i~Q)VMK!gfe2>yPON@Ad~j|< zlgT_q?N!$S8t3Kj7xVWin^8ydr{ebZe8B*=85}0S@s#lKmlQD1Rq*p&*R3-Z$`Jme z_T9nki_bNCA~chADS6)|!uA>sS~Q8YS`OM)R-0XLh2l|zo4$@Uqb{mOd7v_$*#142 z&69j%!Q_7Z_I#@N@|~1ED+zMN&tAiITPnC1le_-kghFl#na&AZJnx;Y#V09Af1>Wv z>&AKoo6PtP@Q1v=p1&-eS@}HOh^2Ljw|e(duvBQ-O$QCbyOKAvHd_v6#*CZZPq8cs zQeI$qI=CebvZkl1!+*BXC89|qT`zX3i=T=qKUE*et>s1UNy$u}Fe{=?g!i`2Y;IEC zauviywXIG`7we?fULFXG*UF?b*r!evnEt@uHag&g*8%_{3}IdhX7bUFQ*v$>OK;J%^b z&_DNb^7Fhai>u(piDRwE`nZ(ofwOn;^5C*u##r|hGqs*O!rm-^{$AI+LRD;B0>Z|+ z>tH+b#K9$rPTWhMP)omu^TV<-yB0ohfd-QV3r%)%g6mnatyFuZW1r@>srFyv%}NW- z?e)J1TrNX@{vr9@m=Tm=3KMHn9 zQX+wk*I`+Cyo<{t0GBCn6ZADpQni(wxJPE4!|?vVy;zLa;Lq?U7`f9%wF5{t^SEmM z$+2NivE5xwUI8&7-Yp7zttUO~2rw%V02ng#@m?6%3~~gG68TM42U6eto)xVN!PptM zxK_E;TbuSa?EB&X*_q}W*N%tbiN>ljOa?@=Ndm9yk*|0&Dv<{=Jwwt!Umd3Is9nys zXh|acEmjj#=7UWo^Z0^V*t=Va&)+x3OhuT91 zbR!zdbTAiT^I`T+Y4`0VWn!~BTV9Pn#%)=hA+_+xT!{>(cuE8#;Z^8~9Ftx`G9m6D z68m(CR?a+Fs=oMy{e4*(@QgeCD1p1;g%jkB!(w@U#aT$;L3h|X#ADRp(Nu&Xl?nx3v}=wVH3zjyfvh<4|WTR+>mB+5tWw-v-LecQZQ{b7A1|oN?VCt!O0B|(q3;>G zwjGJ)6?IP?*z{z7Fq8BidqMkV5HvLz{)`EQd%&`Moz-zR?dd57OviU@O6S8a3?hAB zpL$@}3>*S2(uCA*W&9!!ti*fB!DHp5J77&!PY?RsjFNCknza^@wrfD|alczVw_9JU zLAOZCRzCAN4sN;I2kM0ee|C~g;9K|I@a&^UZ(28N;u>uIn6%k z5|$Mv?|`km1r^9L--pU68*yPMmJnr)J(&AqL7L0=`R+*p9iL3vlbvC6s%uBNd@#@E z1)c=%Ysd1#)JGf#K8hclq%mTogB=vzb~tOF7+nwgNt);DYs~h~=Pb%?W9%u{UClqZ zLKr4T8QdVH>|SSS%jOK=gh&eBmVV89h984kkR8)9keS=I)ucRK1-?nvb91 z3sB$!`;yS~-jI0e^#k`Q{|)3q^sM!)c+S?Bc$)SjNHGWJ~1&Wyg*20Yve z**3`BqU&?utq9<~5dL%l9JJADM$t~Y_DtQSHq5H-t&B?$)uy=O<>Z5XZ8c}=P-C>F zGs=miEv{(ZXw~Z~dIe`|n`&puPIZJmQjS;oyA^cKKxk6us0jt zXKqCaT%|@4ybyHuh3@)S?|M6Zqnt`WG3uylB;+Jss?lmST`+bWDI6>yt(+PS}8bD?xY*c+uirz@J#79PI@64 z2%!;wI0lTRmsyOIr5CK-atW*lKTC8^glgU4Q;c9|D0}lzz-NI>01SwaAQH*HSDQ;@ zCNlL4C=a@KnLyy$8GP8TymK|a23`*)q{*XWF?#D^XmHd}Ppgx5~0M#Th&q3sp zdiRy0&PMdPQ)Axf1ulH^9tEJ_8Z4^}1gsuz;uNpvqS+(dT}&P(KerOEyK^TDP(~70 zyZL18hxjS8e{f@thiG6@mB9{?5f%W6-!VMT`o1v1Bd5R<>EnSW&Q+zsc?TNARov}O z6K$J}+>b?iIc~4ZHedE`yKB^pRpyj4Gl56EOK$9T6J>Hg2N}$#t-@Gd$xKkDpAg@P z4<-W-Ax65s;OldJ>U8)rYvAgVc#%UcU~tZ6iPf4c zs!l4poj|=@3}GT^9Tj<@R&!1nZE)L<6Rn?+f5{F?!35V?X=x1Gx=(KXR0Lx)R|6e2 z$}dB)9xoNj+w|Z!mA(3;obYt2y{WjQ8L<%O)^ho1tjr15jt%t(mr;{CGJt*z6kQJk zFp9KMr3nSA{yKHHz1t$T{W=?9{nl4_ z^7)=eP{qb}yo(zOY2qNXe&%K5<)78%%|iSnEa$CyzHbbBf9B!4?}1ln36J6~A+&Mc za0YxX^HXn6o+lE5IJN%==El>b3!hTTQgiW&TNl!VbKiQ4BSB1IHknZ#*Iu3!WVz#2 zF?w*VNcj>diTvz89QO46O-+uQBaW73MY_GmAo0**HwZEKI^} zyjUsz1V6_S%`jVBL!B=72o|2;oY*tT<`=_>CQ#IGWiqu*C#CoGiKgdSmn(0voPTyd zdg5z*)xZ;q$&H9$X##Q=1^ZF@x>_82QBmorQAEH zfE#`1`3Y`kguW3uPY*NCl&N63Cl?*@%ZJ^M_}#K69J%6lnYUPkQ*ja*g(nj3iHxuH zYw1nD;ZCwH|8lznA%s%r|Mv97sUZI(|KyU+FGa(3+S?1dkWbb z`dc#s=<`>nBkNm~9%KISDqODT6G;+W<1sZGTL0yfcspgXl zmdaG`1^n@*j=VF}9D)n8@Q(Ee^ZvvbR9|Nl)-jcw?<`v9$((X~>0{%l@J7(P)ycF{ z^~1GE7~gFdGZ9tT=JkLWFxgUcXEYaQ_r<+rG4OM+RY6O4%(AIXb>bat^Y9RtmKxUNg&Jl_zS7zg~{s6%~It~I-hJeBAaBv zuageW14Y)XxCUWYF&_t6!$goLuT=j@oZo^-;k)qVmITc5Okp_gjDWYAXXjN_9(`BS z!S44R^gI0WGnmDBdSpJ5&0_dmE_(FGL9iCdyt1DE{=2wPWkDbhh0IFU`nC;(`)ry4 zyrJLOf0kGN z0o_+Y(wHR31w_D=TikYEzEN0mTib_e*!s}D6Dj3Fof((f)LA9Aa#?4ww`LA+esRP! zBZrr-j91{kl$|1NR@V9_Y=p|o#acuZ6ipB#x=^7)A}2e-Iwx$Nw~PF-Cajp}GCs;* zIq%~oL_Y3<*IFgZ)xK8$cSFp-9(+&wlufnCHx_%k=d3n)7GWc3L9?JFZ!Oqf=1Ef8d)HMiLv;?op z`E?HxFhbk_OvI?nvie{QeQ5pm2-?3o>1cZL!|g0i?}XGBlJ&a8&ZkZHpT!s?Q!B@K zdsjXCjY>0LllF9c6k3-jW4D2fDtB$Rd!^0_^-x-q$O%TF6Fqqi2ij*mTSc)44`h;t z_aA$UW-{@*Y}ZY0x#=`Nz1#zN6|S?xte+Eyp$CS394w#VI<+VT zG^rh0lu)z0JnUicC4@g=o$zRUS$C^VKqu?cJ0NO+nd7VAmG~!+O)YG!3!BvVI_hT- zPn$()-8?8SXmX-C)f}#ok@us+MKX(guJy*nZug(S@=NfV?M1Ji(e+8)GKs?2F_FD} zss8mfOjhvYL@#a>*X*kT3-#f$1iuOG(879&osqXf(RHhqf|fwyLkZIpw9+C@90na; zz4j@bqsA7{@#B;5Q-gdI_(CDWX>?j7Pr`c1xSC1LcFfqOeU_}7VOT(kzG3o|`R47V zVz^E*LzkQ8&zcP;e6z4F=W0=bBmjaFPIw802y}n$4Q5P9*?7xQJ(!El0}6%OQGw9kCJQ&8+pD^vG3Pcyn|~p%k^NreO8D_ zS3Kn8-mrxI-f0jDGFaz$AupX52_A)pJHL9(^%yHfG(d{ncJKYQX91Y?Q5vKI<8r^H z!^Mb%NW&5fa?x>`7=~Q0CFBqwG{9>WI#ZUcL-2@O3{vNL7 z-J~l1I&c4dtir6ty}!FcrVjOfGlfl_i|sIw44U5}UQ}F)YIfJV5BIsH6%LP|;wp?z zB+HTuYYX5LXY!~{ZCA(klMR#dh-}uX>_eDa9(a<@q&TJQd$<{H(3Y6mOvl~v2FgdY zH+~>Qr}&SB^Y0?67}q7_#=LIdacx=`+U~}t%aU&Kh!owKO#ckY`*UC#*yvNBO-F`M zY+tlHuRU{JdK*^vsU`T;b+eq~NnUmNx)D5iMnDYH^3?I(YfX8YFlu$#uX=74>5~sX z?n6r%jN31UvVFPHGx*qHv8#CzY-_yVKrLy;q}xNnuR#~8ReQ4K=4sUuys#1+PV>*R zu+8q;g2+J3H?N^I>X;0;jvs>!Ez?>^X-8=lF2uGCx`e_3U7@}jDH+{u%mw`vbo-Ztnl4FFZh}4KHb+UI`csgb3H*sKCL;}s*2S* zdYiels&y}o!)31dq`@qAN{W+Mh*~{{#-Ey7hu~W&2yIRV~pCNQ~F86Tj@ z{REG{X6v|}vgm2wRW-YmpCw8)JaIHT+5hU%;IDTJeILkUCKeUZ%nL09wzN)O%(oYL zJR6?%qN=vA43%V@?>3F&gJ#O&@;HCk&iwMNhzoO}!@h(IyhJny1_rQ&Xhg~OJW=;L z`i>mFz_hd*T6yI271#(;PTtj&$Q_!!RdTqv7JcODk(F1Sd_x!|p?`mN?IbI#BDsDM zGo*^|10?J{JO*b&d@N{~-ors)bg8c95KD#6gmZrvlpI2Qpxp!$Ua_~$d%Eid=2u&1 zmVLiRw*E$XP|mmvJ`$-RC4Z&WU|AI>alupLtWB@+7A4?znDps1pU_{3ZO2CnNeDHLLEhzNkgYX4Rl3*P9tX};!(I)Tj z|3rhICvS!KuF6PSfI7V-a+W{`f1cd?y9+Q!tPgf;DX!7{VWQ}4=|mFpIxe)Na7Lh2 zLW|j;hC*7rdv9r5U1)r^HXceA26V~#S`Zau*`2`GsUk3^s2wiHD49iT+I=;p5$MxU z@BIu`k#bk?Z?(y!>fP-oeWAYI?NkSm?L*r16u18|h4e^@Xm9DgPW=EFB%!IiKq0o6 zlR}Aun>hXY8{ZE1d|iqzUXe-=Mvyub`Gko7d$%`!x|_>@K$GYAoRG+-Ydym~z} zSQyVki;&-Fno+H3HWk0&lz7w3!S+?{t2OMCaqxB@r$+np1fB6rc#jftOM!qSwF%4* z^@f-NGdwj7_PS0f*^DaGc~N)*%YOpqF90^zT(+QxmxkBi@0&Dv-N_HC;8+9VRJy8i z8Mt@uK%*VqcK^ugmOz=Hj99J8$w6j zLgq1VuQiCbv!MP8DfqzB+pgl2Ev_1i!8wNy#JsjV>-ql9O7QLQUfsxYcW5tar0R`| zpUmwRh4v?)JBh*P1FY%^;$fAIx|gtv>1*NGe;2>;2N))qOaTLUVIr~6hy;-|W+%=i z)5jtbz5C`9G}Oy5Vf=Ji>%54W3Hqq!1A6_0zj+RRFfB>TY&Raj=|mA=1xELB-b3$s z-^hS#poz3YBYPHd`8fS}4^HbHDjL5-g8-1LANsmE5$NoMbHc8T2h#sMvRoJq=}(aD z`8%DdNZ6dLwd_VgfuHw*vXiIY80{(02+Au6`;&JJM6MR^Twbb>OiU= zj8Yr#_g=Pj{CU%33hl((AHc%-fDxXpI)LLtdYLY#?T-DX8UsCYU=C~Pm0Hs(>FWrj zYX(E#S3o46I1(h`y(dagjC)I~98R6KyCG3mw)6%B1z4%l`T#!`Y{;Ea9{)B{ajWI_ zv0@asGW!`2DkiyR@YzOh5F#?mq{coA$JAJI1yKI@gihR&>c_i{7P97|nO~o*0&D0= zp~asE;RI)oK^J&}D>u(33#$CbBuZ9ylW_MhS?{g3m(zRZ6t8rWL<^(rd0g%iU}Yu) z$USG2;XHI3yHYC)DtGKggy@0Rzq@4ur#}>#du+c^+&+7<6}FyM)1izVJcl~`v2D&N z8`Lj-7vUzmoFTgJ6B5!d`eX$t3GlSG$J48*z1Yt2B+=;I?Dg;6r}LeYx3Jowu?|e) z4uMEAc#;$TZ{Fv&YF^}z4u)1Nzd$Ax`WiC4MAzSyxTsVJs4$NL3L&rd31H<|LN$ik zpA$Q$VWfRFSug*+m;-0yte94I(M!UGgQg-WLFqDdQ$*wQ1j;l{@F%$GV#nvKVaDfd z>f$!_&|qig)L&`e7&R?#?977#>v1YorNyKX6~6^FKaW4AtwU<2Fz=mQ#R-% zY-hxWQWSp;JP_y@HMWTv5fO=Otch z9#o{*4Ows}yw^%U#vJOD>;}4Slv?t!L$|DI-F)9TYw_COV~Z%sfn$aTyrK9Nw|hj+ z0RmAOSf)Pn8t};-qH@T-s0gb=qq*45n?#U{Gl;+Qun;ax}{xYD0MTP71 zRVIISvmg%HY#O-MlVFwq1zM}r0vNlsb*wYi_r-->%r%_#Y&D$G`h=#O#}MvUZ;W3& zh~8m44ZGO)F+8|*0$m5@!T~Sc)Bx{bk!9xWt2D;JwRFd)-lvHjTA`(g_r&gAE7qVj zB0Q|I%l?*c+(qAb?iitkiVYV22f~w&75>yhQ*@EBJ!kLRgedIkKLsF2wz3{JhlnJ& zh_hGw#?}0fcDWGyfKLxRIa`YE!H&$JqCjM1kSnRiY$)ni1zbUz4SQl>E$~){D`*Cw zBu*khy0AmgcIyDG*|}&}*1<{JsVM&y5$pkTczO))4rY=lBi!uJby1=kxeY(ZWuamJ z1MiCv@&{Cb2r=CL=M_bYpB_JN??Pt$nT}|%?a~dwG74ffkA+UKAafulYfwkNeKz4; zF@JtWzFJ!uxs@@A<}c14GS;uzvJ+tHLf2nY1QglOy6|5rVCt0wd*Xbr2GG;ADHv_P zo@p4qtubjxVrdci7*cwG3j%lL<%0i~P@%bKw)E_1urB7!w2hwi!MIMls+jTNifOr9 zhBNU$!SV|?f?tZMEZ)>%W0Ai*ifpALquvYemae?~4(`xJ04L|xY_m7DuKPn4FXI2~ z)&aubNu4i#MJaZO4ha7Fz?gfem0^m;6++VxrtdH&F@wFU!wD8(Wus3BEPy;cPtAyr zKr=DtRMEH?jdGN>&F{)@>t*Dtym1Hf4~P#xHa?|GVqW$H@9Wh8 zGd1KK8UQJ<=ZKm84otg?Dvk5ThQ;U5;k2f3vPrCx1yZO<`0#TlvP8v@k6T))8JFiR zP9giWXH8+`86Jl;FpI2fY*6I*1kz$(St_kq#l>wte*wT4G&}HVd&F^so3Ura2JN_P zjHcLLmW-Z)!qDoKL~hiE_xCD&VE)&|)4jmOu^Q9Ay1nIB&cxP@7dKMAxVz92^_+Dk zV4w3IPSGQpu#j@YxZ=?#OzsYbDe3Qi)dSFs%jJ+Nu+Mre5DD{iOncr1tN|xq+y$Qf z7256F=BB0w7zLq`y9>AvAQN>fTNk|6MtL55ed-OEg#;=p_Vc% z%$y;P{Kp*d1+3LF@S0>gG+hl~-7$5?st-qjt$RJ30fX?{yNGf*nfSo0dIgmti5Cx` zEe~o?l+oTBmg>pL&tLf}I7 zSQzPG)g>9qxT-cE)f7}UX%YF&Cpw4iGSgy+hc_LFAI%CZbnHm%1B_!G#6(uIlIFOG zBS5F3bu(>C%x|Uah``>F8JCG%-`BOz$#cj(4tb zXEW2zODf4{E8=0#P~0!4wgnL-aLPE%pO;}@++O0r3dq3=yvQx+5bQWDzv@H>#O?m_+u8c8zG*g@=qeWKmbBCF9Hxlmg{<#v1r~1U+$hTEF5-;}Zg@vyt zcu=WQn?dJm0*QTtaJ;jIPFpPb$EjP2J#KhGVi?*uj&eXgpCo1E;7Ht-+tD4tOC*iu z2(sT#3Ny?~N4Gy0aWU{Zo$1`n59s^V@Fd=_?eARIa&37(J&CCZ_(D@Ape|jIP5{A6 zhPYz(804!S;}l-tImhp8w6x3Q*LHt)XZ>Qu|3t9K;jZ$9fdeL%;6exWyC`4N`7f&k_M|zs?Si$QS}tq!&=|Nk+}Vy zZWg9)>gxi%O26u^Dv@HDXzAsagbDE+wNvp<^lj=Z1?hNJh5O`HYz4ffY6swvK@f&_ z8McS_cB8-_C_F7K6yUTUBApKdV1<;s#ov!{0>R`UCz!HelEamK9*T@AIgInLI!S{c zFge{5Z3F2B#F-v%4@wC-OwLNfy#6jjG*fX+6|ttdWDw(yL=o!7Ym9>HwhQB+RiHW@ zWMdOS6q5A(FafTK8^rTbp~yqox6pF8YLc}?*Y8NSDI*=-73K8L?0NEY1`u$-xpBY; zrbYO)YON-7b4y$yjc@~4g@F(OHtLE7Cb{aNJL#S5XVZD(vX~#d4~)EXa-KFjDx|W| zw3?!2?j;?RMrYovG7LzV4@fuQj3>alu$A}|C&mq5kG2i`?dK)$?~D!2j6rA9iQxu` zHQgpfB!g3GN@!&4A~l|GjM$UA-p#GPBy%@__p{4{R`w4HZ#RBCqTj9om7(f0D*5qsA_6Jp_MO@@p9oe-o<4mK zSAdZ$RSgbJFuaq8hB%`E9rLRLg*>0NgeBr?8l=dLr8H{Mh!@WKO(M-~JEDfJ}ySl92b z*BOI9;iaX&kI6{MkY&|uM?}5lR*&~Q>><~+%N|1u?034vIM$!8@4MGu4gxLHuL)iM zIFE{_dP6Jy_X&WebIY|dXm*xdu;a$BI;$1ZnQnoDPM50Pr2@!k-+<7kk9nZO_rG`O z+*c}GYZ*#!eN)tc-Gki$QE!VB-}F?$dJHJOE}8;E{Xd}Be?|+>!y&2+YYL4D9m!n1 zzt=Be=+EpE78W)J5;j|d>uGmC+2et03qf@1!pS81uUiehHQXPrQ{k2PJ2qtl=FwEjaGNb2L!=XienVT(S}#Xc=I_31T9^Vw(RmSnjPov^z!U#%WH{>!S%h zH=o;a=YeM28$Z=;QWSiQWMoO2=c-v+=+Zv=J$?`G03L(R5PkfUX%)cqJM_a`?AKPo zi-XmJK<+1ZiF{@69ea^|gwO#nFs;JI27`P465Q97$$b79PHXL0$EmnO7hcvFn&^9n z3h@>g-)hp_V%kkdbPrP|)0Ml;KQ8uWW0d?5ggH!KqyELarN16>6Y>~|YeeRl1MxoLMXpTS- zs59?GGArgcXjTz3IRs<=RcEZ5kOjyF|1cUUhj<>V+^-=>7ftZ;)-$g6)~7annwg&c zZxjXG$`Y6bK_p*(pwipGZ--7LQQW1KvsDyRbFPfS;%`LtOuJSX;HeEzKvuOWjm8CY za}~ooo>JTU+qtUbP~voW9Jy|jHuS$%4YEJ0_!M7V#F;&awLZZ~7imfc>6EMol|C~3 zcXhCTz}cZm@4G=MH4Q`L9?yPItP@Xaw3KtG#>RnIee?IitH1@g>-g;!P*c(G-F6F` zO_~3fTmobT*%(?WsC4q5=c8`N<`cMOY4Q?+1GjAOBWGB+&bR7xLx*(0ZGV8I#c28j zF^M9oO*FD4I=DChdXVe+#07JT<)>&;@aA+ zSc1tvfY~`Z-qpN&v9dq&m<70X!40dbxBE7a{om*LT|$iEw$HLN?pbPL%@!AFF-uE^ zn8f{JQ$&$X!}Zs^TK4Q}5Jgln{?8mDnZbs+l@VWm90UJJtuRyc<6?Cn`;4$O%MrO6 z0tjFP8Q_p!WO&Op9G&}HYt2cA^Y#?Fe+UhOYo%2|goS`>pH}qAzGG%AG2Df#d<3(} zWfW81bV= z!%J#6N&tNU&M_m14^!&NSP>h9>7O~kxjhG0h=FaPzU@ldkWTYx3|;=kO9U~s0SdER@%mdgDQXW}-s)De9-BOjzV-q%BKdZ!#e zFmNY)l4fq+xGG{>&xe8nQu@~FK%#N@?y&F$%L;)MfYh`hcfi-&jRSf$UeF8m6!Fl~ zCed8ihziIU;h<}Jhx@7c!4b?#gB09W$iBt)iA^HppSrUaSsueGX>3yTCa}QnBg>DO z!u=b8H4ISlijn4kFljFkuVpt(KC03`ahD1H&$h(*_8yzOMr;ts%ao>bPf*E}I#y9t zB*Hy#W-ZI4<E&{|~B*v2G7oKhZooza9@GK|@#))R%0?q`z8nT2qufzJ| z*diGqS~p=ZdSPN~^9+~cF_4}8R}7ou(rSahM1p2px2nc52W9`YD|F=GL3-{g_i&;) zw~EM{4*ieMOB24H>);yrmyU%0&Kp!S27dd3zM`7Sru)nNe{n@T$EP5sVx-Q910V_* z0MgDB?NVTq*3!im{>6QjH^)WH>hdSX-dMPMr?c7_vSizVy_(~^X|AfqDcAL{m?7#3 zBE4?tO@OrReV%0gqHPvUg+xw{Hv-)+D#w2~Tiiyt($Zh&k*5z|pui@&u@YuV|Bf-3 z1xE@LXyR`CZ10Mz>ZCER-T0OE+ZQl*Ng#4?bJ@<$OY}7xKhO_H>8yE!srFCruc@mX z2^!Q$YwQ>a475|uF}{a;Qrcqw7iGZVBH3zN_kSn>5EdQSLN}63b1KeGEMh=`8O>Yk6T~srRDHXP=a)7P}rOJLKCtYn|u7vR;(S&V|C~hE?IZzf*W~%xuEqYMwf!N>dLGQWtxJ83=^!6U=g@H z(Njd6<{ETep@(bDI%QETkfp#m<^U>l5lt?N5WxXsz85rWM=i~omI0Fi=#oV85RGpbm;+=XTPp(M-1{7npK7^ z+`&|s7kk{n`5OA61a$;oM~E)=_HEKCSQ0@_Y5AaM%BHAwXYWKyP0ZHX45$C1bt=s3 zOGE)Dtb3qx*UuU2jU$K%NvLg*nIMBF1D!MRm{hh?jrTiwZqL}rQ|sENMqeVugYd`B zg!ncOzleK1O-+I=yC~rSl=WiQ#p7;!wbAFkigmFo=X85LhKvClv0w)ioCqON&okHFK~Q`i8$A+y;+@(r=dwVclX?gPvC90Bd7e2|9R$rFaE#wk5qq{ zG~swUgqeXV7NGsV66gX${q+5yH^awxxCX4~vGTnDhP6NdaJ(UnGy3nBN3#K(LCre~ z%KjICAZ4xfDY{Awgpg`r%YFI>B_+Rx>U{Xv_`mKththNlY*hua@POO_($uk?pw?Cv z%?PKv1AKBmKOr4%zdd<|+gB0Z;Fuaa_7D@5dORxLE!{JM`X_xFGj1$%DG;=uJs1yC zONcm}kluuUx}?C+0oE}ZENZMKo|p3wq>e#-0La%G+HO|X$5DdHSr5dohQX%8fMp(Z zUioR%R0ZcIT^A!f^(vw?fR6-AbX!KCX6!Qbgc{Ubk>lnTa8>Fg;O|0K?E5&C?H9Ks z5&YcE$L=ub5IjT(@LM~o9sB{cRR;iDwSoiAMX{XBWOh4a@B79- zQ_E>urKSc~>Ihj&IqHKNY*V6i=7uLKrQaBw9&(4-#qTV zpa{4NE>qglgPq!OU;1v3>Z$n!D@X@(fs7mS-{KgoRD+vT8$YPu-SybhhUC>3j;*;1 z1L2MY0|vVlz}r%#5PbIpwQ7O?nf(NQJDaH4Inr3oQS?}f9ZVjCxjU=i0vB^S9tLcF zh(~?x0@@j@3oW9_^D!|#;w`StYbxyv*gy<6`@iH5{8sK-?Qkpx&5~SIX-x?x;|%0W zUL>ZTRiA$V>KNVyQ|2&|M_Eo_?P+6A?iw_-zrXoi%&KyhgAbMW07 z&cQPO-3#D10z~BRydOMjz>1lN$>==*K5r1s&ji+5hz;PaODby#20h2p2C@B4Q9XMG2k1P>nRC~iFy zB4}EVDX`7D`jWZV-@&%_V>GhrLNR)EN^SjI(&D*BjWEIPJo4!$ud3--8;)v;L1L|X zcx@_0(geZl5}MpujqKdLXKA_IXn~EcU&t5(;Ds8go!$-`jXka|q~3Z{PWvP7!gg%@ zT+^7JY5Bq4*!UBt^0$uLn<7CLFPp`A#L>509b z?B2eJP2z5_U~kYYi@_YVKOfWaF^@<+vAI8#WCUjQ{%-Av)tF~}j!5X`v=%9e-ZEdM6B2i&BwEI5B{V5&b zX?jCeP5X$JI>0w+rt^VN_$9;!UixQO+n1FlzN&n-+js>D-jmA>N4oLHr{{+~uDb^E zYfj^fcONU*x?eQRdokd2JT6HT6L~Ak3r0b2gSD# zgF^O;JcXXfH;yfj>(n2o3L}2y?w?><4BgB7WsGzXCvy&q8%?bky9rQKv4JVa9l;(X zi^uV#5fAk`J8#Dx@z7$=^=UG4HRj0?II>)fn0eLEeW=?QiRWzsqSg1RBSA7~_4v;oYf^=oK0~+zLlbR!!2hr3Ex3s8x znqqApCK%ch$pm7zMg;J16js(L|_;hhuWF7slZjEQS7NjWFT^diqMjX<;WLg=94aC0KH}gLApBc zz~%$6mg{%qcH%RX-E7V)ifp%S`^Nj+?e13zYwm1X|DX20JD%$Hjla&9vMM7~X33s~ zc>vN8t=lT8j`}g;HJ^j_| z_>B8=-Pe8H*Lc6Ln-0bSCv*TTck0!v#6+GV?<>y? zekEZ{@(ms21-2KIHQC=;x{Bry<7Pa78E_f%SFfNP@^e3({6>v6K!U0A>{>@(&#R;T zPFH&)lrm8KZ=V@GKU3qH@r5c?nNv9P@iP&R5j!f0N}?n#B9izduxf+pteiPM@O$kX z0dZd?QP`1_A!=B&&f~{A0LL$;@oD+7QW2efeC^MMs7$L$e-$Uh(K-i{!tT9cpsaKG z;h^nhDx4Sm?UD8&njp5KF4k2dcWBqE*jnZUX3 z`^dfs?6$=L+f?I@1z3XyoOzi~vnc@nQYgLmQ&qhw)&Y{s2_0kjhAnb_q^|;GMj%lt zg?q}C&8VJXadI)+5Mi6l(w4iCsmjVI3;J_%KJC7((<1hv{gbEXlxM4KT-0yQ#MCu`|a?aeT8N9kB|@M-jypc01JE_D=voX2y@bbAGN z&ls^hg|zUwcg0qVV*;W|ul{7Jop4yCP68a{IWDo&)B4|wwT4&QJu}w(ySUB7<7ypq ze*EQpD(hw243Rpt2=moEK0Xl+<>V8FB|hzqc%-`ANXEk@7HB$cQs&^wON5pxFRSqO zdz=VHRKcyp$qxT{ra*efDdOG)w#sbiuW__ zL*4R=u$V^VAtDYHDjbHD+4lAq!|bU++`k}E)Kumc&(OQ3Q>h~M2CzQ{9SDX#)K8QO$UC?~zyRXT z(8^)_$OiT#18CZXSv}*eynp|SRRs7dRVmVdA^4yD&6mEsfy)u2qYx<#B$M8 z4tv4&qdF-wS#GJ!Pi%NOuFNGW`7eD-##&BG&LU-j7swQMSqi((bO%fq-CQ*vP}W9b z8sInXP5VTs*=RC4fw3UpIpT6xAn=Kk?~fDnM%G=)*cNicOp|C1g9>rm*MI5+q;8nM zLcjta-o{)tXyto&@lY^BxrMc-oAATjye6Mt{7?;?tDKD0zD$K=S$DyiUWI2z)LL>y zWqNLClhCCOneEf<>6!Sg$C?wE+KFpYst*2<>|Q0bLsaFHvzHJz`Oowk7G<=%7W`lo z0;ww;R%b}l9i!WxXHaC|bQgG}I{x(8$fdd=9Nj%BTyt4p5}t_z4Gi%N*O zT^>}|L_d`AZ`~%68suWT?C0NAqEEIlV>Ue=47{FyQRP?KIRFw@I6`c1^{vz&URV^>{8cX(252yJNiLf}uvOo(TTYD=C4(n{1 z9wpyww91EtJI&joZe*uf}ep_lY{92xJ!GRT=ZoyHO5v4qRmcK~xk(XgT8gyzDJ_4KKsisAwS^ z{M9-f$I0dEtDe{5$vf`t&T#Fw~in zb>~Ob2mu*2C>4*dL&GZQ^xB*ae&;#1u-mhB)T;}7F#}`|9x;8G7+Db@`^|Jgrh4Of z6mRX_Q>hBxvIBFyB{mC9cX^O}b}On{Ypb_Tml?juQhnrhIJrMaU;2tM+uhgF2h-(P zE7z3K3zOd&AU(o#q(08ACQ=Z+V`JX2dX+o%=Lux{^7V{aohqF?cKmQy`n_(-^v8uY zQv-to=HZne6f-^zWhBfW=<*LNxEy8s8%;lQuyrJL$643s%m%|Nb);f<1m><@di

j?(uvAoJz5HrVlgu07L?Tt}6q z|d9E+-oU!KR;*g-`K~iJwJhD6w>TKjpe83 z-`26&`t6OO_nSm*`?_)<425ACl;N`9+V(ZYIhpd7xs~H>aAHQRQ|O7v0a2rU^nTPb z)VxwM9fZbhX~Kl+kqB>_8-#H3uIdEGj+(sy$a9?%3N=TV2awqnfXuG*MUSjcd7jYO zXguNLrk3vpr)4I`IQX~$+GFxqx8naM9uVfjy#hyiT#q4z34O` z)od#FG+-9{h#vcwORV40jR)#N$l@)uhDjm6?Nd?V#d|7Bjl-&*T%?*(*LzO==gp0W zUwu)7%z!GY&%~!~V(#6l-H*!9*POT+z;an|D+mkio;o%FzaN$)IPHOd&mn%FPp8|$ z>-XkLi&?Ht%_phYs+{|ACY-oIC; z_g`5r8b=v6#xn9h9XCt2ll--=MBD>-GxOzm<9C=2el2f#)MZao|cwMn28Q1 z&juP4)cuaS&~LXw+=Nw;P54T4ahrb0x89FBv3^F6XPlWGr7>T~jp{zxOFug)zo>M# zn;8=+a#fFMh~;TF#!~_wgEnyMB5WN@c1nb*35E%_#gcN*zV70yc|k4}s^J|cKSRsJ zYk0}R8Rc8G9b_H3VFhYoTG-3=WK;A#1Ljz4PW_XMTlBGhmEn08UBsz>KKj~pMJDN~ zY#Rod8nFV<-l`CsOm&7&zp>Gr`q=W+c}5{9#b#!L`Kz1Tmo^F=zMa^-?onTlyM3^< za!C8xg^Z5xXqLR?%KxblH|s?xqBm!Bzp&|~Dzh8_Dn_!O<&3loPn#2%|Iz+ID{6}B zew5*U<8tBfAi*J@rD845sVudu%C~tp-}IUhEA%c1NcEhkSNZ|Vz>}QKNvqfFYN)IF zkdIcRe3(nPYT!2iVs%R?O%SCr(WhN&{5`f~S=qRyV6pEhdz{Y2S6(jI_x|09uW-m` zwIQ_Ql_ix*^V2euef546z;$xHln2{6(z9-gS8&Mc$4JHsm6xzaH0+IbWw`Oqo90HZ zX!0waoK~5Ebni^X4fd>ZD zexyPs%E2n=c;YnG;jX@$J}&Rjtr0CwXGOnu-I=reo%fBgf=D#lWpgd|o|x+x5qFrA z%UHZVZ3itD+Y~UxzYxyE=CN!QG7;LG_jb&I9SvovWkvdZ5*bRoYLm@JuyrtA1TsSJ zk5eSir)vMjA3M3}yu!?+qwi-p27;AD~loH%NF`+O`!i%Xrx?0ep| zh_P=wM$)sA*d;Q@p;~v})$uG>c;u`1l70g#<>Xfrk#)8~4wS`HFQsy7thwoPw5{_> zV-iJjgbpUL^1tQKW?t8oMqB~T|z<81S%^h~Qr zHoIE47m??^4SPjcpgBS#d3?h&!g1R)VV6cS_2>vPew>wZNfmKYZKM%W9N}W|Bz4b&X6>G(=Zo?S9Ws&*T{hzT9)d#L;>s9^3b_WN+FdrnlP=G##!MEIRYB} z^$ytkNC5K$K=Wl}UWR8*>M=GRh>v4xaQs!cn5gy*#JDie9Rgq7c%u z_Ueex&oK0TD|BL6L_JN6%JXaoi3Y_DF@-RtRmlO0@_ziD+!K`7PR={{@ph^e&Narl z`G`;Prvn04=$mZ&)^iDeECZXQ8rSjytM5S~9!Lb1{LS?EV&q&nvN2|LPl3G0w@uox z>(oxBlo?Z%fXOccY-xFqhBk89txxW1ZNc%Ex+BJVKTKV)M7 z82Q?DsG>}-bNC`1b&yYMV}mc7TZ(&P#cdrjjlB~H*^V%jE(gsoi}g~VcLhmriCKV0 zPD?I8eN~!RtN`tw1EYSk=8%fJ0Ng}mX^TYwFNmu()2f^UxY~)K@2iP|Bb64s&VeGb zY-b`AOwP8)weFj?Cj9%0*0y+b3vzLV>wNXsNeF1-J^vt);A*i9rDNX%Y;0{BGWvsh za{3NkCghb>Mw|V8b|KhD30Nsa-xWUT7o)lc?)4f^-5%q*q}V!uMnAdYjKsr#zE=yr z*UGyx4OyJS7Ql_Ua$zbcc+PGR?J0Q)Og}KfUBl9s|26uPdnx6|iHKQRX+ihGH!Q({ zfh&1JR>p{%obVM&J^wu251!uQla8E;sg&l8d2wi;Uw)u@5FM!Zx4A4OqR2^CGa(gD zJ=ZwoZZKl5PgwkTmfvr?6WWdJHqM?yhPONBHTB^JHG=OhP?F*bkPq_@${rErqkHdY zbP^IeXE<;)4lPO$EW)Vm%@D|Qry*aek}9e(zy0)7^S*P@ZBDet?L_H&AlA1#faTQ7 z)gf8-PmRqShMT8KGaf<9ZRCw`U{>tJx`J#LB<6hv1<#56XN?quM1p0U}&-K zUFd^-`U7%Kf8V0S08^-)BS37%^os$wei3KoTSN+TH{`b1WB;&wh}X*?n6sz(9S9Jc z)}*4gbN_8Q3gGX=&tdoeYvTUZzzE*tM*c4uKSA$u@`)3*4R4<%a0wGTZJeP5 z3m6Lg#iXTN?dIGpVUV!e)F3qYz5CCcaJD6YQM4&WdUfo90%phOGAW}orz6~sRO8KC zCC>a)m%-<#BFFVMfR~yvRu4S*Eb~ug4+z z3it&`L=Bnv)uYOdEJw-@CHLLP08dQQB{mXdX5rXiO@6uZ$dm6zLU zW8l_fvQ8Y`?xU>{bk);IRw9yx3{NE&B=+&fXg^fOMPg2UMQGH26s{QhJ{4GQr%NKg zLCPp;RP~7lj&?2#+6&}+hyUxu?~nTMX{0C|KFtcD#l8ZYx`3@W#=A!VDO1{jpi@`E zw+lBWj?@W>vlxgQIV?a;L>mE7Ex0;8c9570luF7+EZgp2egWjB39G0=%(pi&5!d$h z-e&u>ov!(@51-2p)Cv%ljCezBF=7ZF^pcXh7TiGNd#HgU6!hiYPAzDNbK_o?>G4P; zrl*iMJc@@YwA$t;a)WroYP7AI|dwaF|0b*&zf4Q@_*Kr(B=^yQ|m*Pec*{*LYmlvum?3jIgc@SWDj zVbloO3z?`Tqg^2$`Hh{S0b-;_CO&262R*`pB?$%d1aYXVZc7kZzo%){1&8n^y&pMa z7L|dTxcaSivo_!#`B6w9%jF@~fM`!@Q^^es3WTcH7n4l4ieV2jSw9n=Ptr_8;s7Rv zDoV%2J|bdjka<`A1`qwrpgH7>*hXo_>gPBoRQH;5&n=@In&pN|ABDJiyr{z&lK zY36^6?_<^Koqw!9^xUBL*BT`@-S~f!9;}*@OfCtcHTCCvWK@kSdL8ZXlc;;yMU=!B zlC;SHR^pS-1vijEP2j-ijDxLP=2d8H?D!QZpw;!B_Wfx zG=_mOR0@;6dDeiSn=-rqkIWzw2AZ+ki~{iVHOPkClxZcoamHEU*w;hZ=l{8K8-O0u zms7)$-d1FNLeMn$)fDevY<>$zAHgmNU-f2b^1`=&%TRVvV?&S~Ie#Nvp68sx4vH4u!#N<{)9 z#WY!vd1X;iRAuL|Q)zLo!l9Z}ll7HE3jmt@nI(54fR2GBCB8B(0`YQQTdbeCv-ur= zD8}DKZoHW2t|9|U>q1GH4a!99-pqrNYKmB}$#uA9u47IVs0`KQ0`Vk5ifaOTTQLsS z?@#E}DCx6yUCyD0#-wdcMaK2S`Cdo1lZLJ<`@z^>p>dVO?osQ~z2ZrbW_5ni1Bqy` zLrJxrDG>w8^uRI#l<9DEzwPR+4U%fyBySKL${%<;H%HF1maJ5BiVTw2(F; z^i__e>o1@j4x5_>igy;xD%eXVf5^mxv-k&hNfN{ps3w$cDYTIeixo>zN_5NT3r?O( zJ2+!`x3yuBOmpgH+8YU?n~c1~`YB9&(^q4pFCHKt4TnDsmHkMMvXieWY0OelL@V~X zxok=x2UC;Aq(lu9Z`MYMgh}w*b^0|gTfxKi1>$V|bGPTh0uam{#OJEBopw`nqy4ED^OH}#d5Nv`4K24gW9`1;S*Ap^aW zpkdJ0K;pom49gol^gvN@r!(NMEj`23u*ySWf89B;5AxvLdQT&5^}kLLBZj-M@`aNv z5Kac@?iGx#ajCNYR-e0Y6WlI>hD4i(GhPmKi75@2GDeQ6rw{@p zq+9xc0BNC6)58uOxA3{Ffa%i6kKCig2-jo4@0)~KlemaJj^R;pklJ^0;f#eF9BH~)M(l=sZV%BPMoK|>1r@_qHlNRm*xJJpOVJLO3c zHJM#dPhR~#A0r=l9vIJEprhXS{rINywGsFWG6qMGxpR*O7Xyl5gq&M(uCjd|iQ2bn zPmn2C_EJIAb|Tlzoo$ubB6aEpZH}tX4T^I#;}ioyJt@_*Emg7ON&&>Z>j_dIxv(wL zH5ey)YwW{hhiMj2MTE@$Syt_a*eE4x@-t>VJleTxX|j~K{4cVmx;1=6B)%gUFD#w- z^z+>L*DMQ$mlHT~Eb>_pxd~~2>uLn%sM^ec`chI^t%u!vY_6!KxL0;rwv#>GnQYlw zJV^lqVATvxiwjr7L2FTM7AikIAx*Mq%B08vIMwPtvODWNRum~B z&uzJwCL85hdHv%w%>_Z`7iup_cmG-UR-w`|N0&~!o`uN-906~zZbl-oMH99uErj&E z#(Au%u1fUbq?uB^G$CzKQaz*dtMVdmNCQ&u<^UmVPmHf;uo@0lNFVx+Uh{Vg+Nq6$ zb%$Yx-mI?~D_$r19jZ8YFP!Nfwd2v=8vCV<=_HHQ!GfA$9<3RZUzHkENDs1GwO`>; z7h{)~ZrvEQ9X}B)-bb)Vl0^3ICZhW%B&AG;HdkGq`f>sCFDcyP1YPT)2f_rTI2)<1_N^8ood}Nx`XCq^b2Md)2g^Gy8@z(@>wV zJ*+zH?BAs57>Hvo*sLhMd1~EaiSo*xJuEXC=g(dml(ZohAsb+DM}1uL(%GCjy3O#< zsj#`0QFsw5b9tn^ISh>$(ph2$v8P-x{L!k56R|HX4XVlUC| z4zL^meG6~?b{&R8Yaa&Qv+PDXOWwrTmL~T5H3=GU7Y3ESX~JKHOoy#E#Q>14<$8Cj zQrLaq``DpDiWxmZ)^sJfW<~W_Hpk`7Y^KrnO%9}!Du}5Q5=YwOU8}e#SxUr;0s~v8 z)G`B%c_9sw0pR=05wBk&BThRpm9s;+4TyppN0>jEG^O$WI(VFWv18fN-=YHB&wEz6 z02}mT5E&r`Mo2A_F0Rcd6W9(7C;)>YWl$h)mlO&NBxj=8*7mKMxt>##ff{7(3Vwh) zrpl|PI+b#xc%I<%smeE~dvMlJ-7|i-3E)GJqWJse#lpyz`<{KKhRdUCI{A%mx++@; z=c|bvu>pfRUo6;Db(0u!a`U6)WY}JowX?>=*wL$dj^QFHyS?6&cAB>@|5lU9D*$K# z?Z>kaorPIhSkN?vV{_9JJL-oByp0R`i4mcWdPvRn7oB>B8U)4Z6g8s^kJXt@=v|9` zrOvgy!*+&aR^-D4Ze!}qF6U0Jc1!e^6$wqjfoDJ?2XR9A6Ug#(`SD>{e|h{`Gmv_# zRI^%Ft>zx!$3qQ$I351pj~x!aacd>NkvJ0!U8r8nO5YH7zd!Dk*f~F!k?;|_a#gV6 z?Vg6Pz>JottJ`8HAk75I9s+JR6AgZQ>UBAsUJF>U*=xmCRf}_{2If)|Pr$5GYVV}D<`(#AgSnOz^J3(@Rr&9QgKWXP@(UfaU1_rTy@?3^SdPr~ zCtWBX6Hg&MbAzwv>%u7}llGHE%sL%5k~IzfVaMweRkIL81{{WkxCN_dlS2-7-b6qz zNQcNm{f|zUx+)VIGwQ4FX}nnC+gMyk)ipktXSQ+BeuJ6+zVTz0;}7Sqol?Wwq71i! z>qvb7#*j&2DD(+?LDv2Ahh)^cR?Bqlr(B1Ckq@>HO85?r3}8+bF*5|(`tpDBVNYCz zpeCXg`ryi$?hml)QuV#TTL`Af|t>V9R39^=Bkvy7K(f|5&*;f6#B#;uD7b-j>{ppXJ=unOO} zv04SiWE1n-F5mQZ+p3FOqib3k6)jbp^Da@>*ZK6(cGIU%XkulvGs7a3@=>Yz&fx1W zscbD;oI7lM05y4PcEAmV{wT2%{A2bvv*CsLZFV2^?gNu_O}WxL?yFYY7MD(8m=#!f z6^6*IZ~n2l=8gqgit}66P7;~S6qK_2dw41K*?{T zJ38@mc0CRs+O6HVsuceEywhHeUU5&+ue`3F$REv^yY`|nDVSx*8(npLph-U|KPg}< zxTfs|_O_J_dRBnu@I4wc6mHazXC-T4Udz0|wFDtT zGS%UoROzgFq6hv3`szugUJj1(_9?0f5=ElZWT3HRLU3v~^eYiw^C{zQ)X??}ImU|m zL!--~(x?D!PG7{V=4eA==gjA4j9!o!p$qtuYd0ujf!r_nXh$1tAhG>Th#E}_8Ce6$ z_DBqApf|yIc5(N%-jGx6Y(+C8Zn^?f!mAnQliwOo<*L~xR>B%;P=LLMpa6@*t z;7~8l-TVhm02+6ocOf1W79vp5HcGZx?gl)GgDClft36HSn3|GvDs7( zz!D3rTG4S&c+MU25TPZdHPulL)y2?JqTNI%EQ(sS}tR?-O?n4ysJL0dPcDzw@H!-rS%(XEL4{9Z{e>lGXhJ&onKIS(vD*^HKCC1+I<|uVE=)ch^I?S33kh zEv_^Vw@P2O-Xfe^A6e({F9RCzB+!5Z*oxczkgi3DBdGx^iRb3#C2xJ#Wqu3j!v%&? zlKk10{Pw2xT(Q#)+nOYO|6ZS>J*^an>syaU7?qN;x%-eBuF|Y+^hh|PAb#aF0U;M- zu!u`}I%ZQKlRfBJOBk(CVn>Du!6nDlceQky9Qc|T6^O-!mEVfqd_2k-I)%cCZVT(c zCt4W)?MBX4g!PEpV7wF(f~7_dGWD6H2~|gBEJiwjQG*9$!;2GRW^LY1KF<HX?Vu~&taunvtHx(T< znMEg0G?0v(!r`^X6@9)&4csBc1y2t0hcg75f>o}uxP^;?+xHCNAaF1{5+JOsb~_6X zef<6QqnKz9W@;oaAx@q7mvPgNBwDb*7qIr)Jt2=w|n!@uR$Bl8P=BlKr-XdhoQe z=*^;t$tFM<^weiNAtY%EAtgxJV9vLok}LJ zLvu=a#Rgv`RB5CKFR(`vmPrA;VWlZ()7Y;~=~DH`G;WZ0)G*NhwOr|4^kG5Zu`Ts_Tx^1|J_K_4;l@fF3!ex0^00|x*a!(C^e_qHC@3P#3!MtbF z#!lReyO|`2TOhg6!{2*G!$7n@pAl&*=SZi1Kbe-j+u(_Eh47;m@~Epmm4_Bxwy}Eo zTWSeg)t{v_qmk91G>zOlr1Dg9UgG6AwfS{6K~@;X*ON#hQY3rHQ#*@4y9xDz+BPAq ztO=K3+#f#QFWv6kQdPBKC;>8>$N?Ft$>w)9>uBIUF_+HjG^Qht76PPgKFz(1cFA_n z^40`jx7QJi!EA!?vt$0QRIaa|3`c-e$l+~>3y)t6iQWNS`)=AQB z9ddls*qN}tml~(W^@ZDIf95sZZ=HR+8a;HuI{HF}fzo z@aVhVVxQoqDC)}}JcUx6Vu#Lc$I&9q1fXFU%x8&ZXI*F(WoW9LiDxvvuA2EY{7Hn~ zcVpOZ%jbJixWWor7tmoZPe;y|eKgY5y`@@*mQyHu_}S^O>32kyVl`llw?Z{@%sDNU zf+}8*of@dP5(f!iOe7U7LYpQIpW@}jK`3voEciy}K{Fxcd(=!l6koV$ThqNnvhMbG zytO4MrZCdv%Wwa3sULx(ZabVV04GmPhFG^%RBTs!F#30>F%&{F>2@66g*<*(bS%H~ zsu{+s3<5>#jEyJo)>b@yL9I}D?xkZL-6p=V1o1dfN} zKN@RPCv3b!uNchwyGq7K(TzSKnPsxQujXOv(fe}a#QKky-mvQa{#T!Z4y$vmDEDyu z?nSy+#-0rf;@vTg2qxwO+xBCY+}?5Sun;>_cN2aqEUgQj(qWHh{opxjgq$((u;aZz z7xSCLqX}QgI_#@X$Q??3+*PyZB|`YxSZdFY}6VJS+~ z=j~Dv0HYw!ptM21bMwL!4myrjuHk~CV^{0??=*`U(A16L&2p~ZDA4Sti3z~T$n!*9 z;b?gKG&PB(z*t@sNj&a`l6LIYX4_&PWb?rJUVYCOiKkw0W1hZG1nUZsBgJtjdVc76 zW_vU>ZHhVJVPAg~IU!07_R-gLmxu0Wl$^O5LwK_xcRZ%2jOR4Hu4mTtg^Q`RKtBLI@XSRpe6Qbz~O> z*gF6&#RM|rP#ipK23))vK)`bpwpy#N2`|z6P&1ekbrM-}Tfb)q-)Yy09o}c%Xd&%Q zrfN-AI!qy3i=wGL$VzunOj-3KMM~QDUOIhhb;IZ!=OxnzQ)ljPtS)l&bk} zwD*wW@7c=J46`+*r|U#6J9nr0%p|(V>%E}H$jRM|zNn6Jp}64k;nBa!yvUj-ZubBE zhv+l@Ck@y){u9D~LO=q5|1{x0A^f*H{I?4JTLu5Eg8x>*|EH?}lS;0zN1*SsxtnCn R>pk#KLq+F&zOr@5{{e@yhEo6l literal 0 HcmV?d00001 diff --git a/templates/backstage/argo-workflows/skeleton/docs/index.md b/templates/backstage/argo-workflows/skeleton/docs/index.md new file mode 100644 index 0000000..6e3003a --- /dev/null +++ b/templates/backstage/argo-workflows/skeleton/docs/index.md @@ -0,0 +1,9 @@ +![cnoe logo](./images/cnoe-logo.png) + +# Example Spark Application + +Thanks for trying out this demo! In this example, we deployed a simple Apache Spark job through Argo Workflows. + +To learn more about Spark Operators, check out [this link](https://github.com/kubeflow/spark-operator) + +To learn more about Argo Workflows, see [this link](https://argoproj.github.io/workflows/) diff --git a/templates/backstage/argo-workflows/skeleton/docs/spark-operator.md b/templates/backstage/argo-workflows/skeleton/docs/spark-operator.md new file mode 100644 index 0000000..c7ead4e --- /dev/null +++ b/templates/backstage/argo-workflows/skeleton/docs/spark-operator.md @@ -0,0 +1,86 @@ +# Kubeflow Spark Operator + +[![Go Report Card](https://goreportcard.com/badge/github.com/kubeflow/spark-operator)](https://goreportcard.com/report/github.com/kubeflow/spark-operator) + +## What is Spark Operator? + +The Kubernetes Operator for Apache Spark aims to make specifying and running [Spark](https://github.com/apache/spark) applications as easy and idiomatic as running other workloads on Kubernetes. It uses +[Kubernetes custom resources](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/) for specifying, running, and surfacing status of Spark applications. + +## Overview + +For a complete reference of the custom resource definitions, please refer to the [API Definition](docs/api-docs.md). For details on its design, please refer to the [Architecture](https://www.kubeflow.org/docs/components/spark-operator/overview/#architecture). It requires Spark 2.3 and above that supports Kubernetes as a native scheduler backend. + +The Kubernetes Operator for Apache Spark currently supports the following list of features: + +* Supports Spark 2.3 and up. +* Enables declarative application specification and management of applications through custom resources. +* Automatically runs `spark-submit` on behalf of users for each `SparkApplication` eligible for submission. +* Provides native [cron](https://en.wikipedia.org/wiki/Cron) support for running scheduled applications. +* Supports customization of Spark pods beyond what Spark natively is able to do through the mutating admission webhook, e.g., mounting ConfigMaps and volumes, and setting pod affinity/anti-affinity. +* Supports automatic application re-submission for updated `SparkApplication` objects with updated specification. +* Supports automatic application restart with a configurable restart policy. +* Supports automatic retries of failed submissions with optional linear back-off. +* Supports mounting local Hadoop configuration as a Kubernetes ConfigMap automatically via `sparkctl`. +* Supports automatically staging local application dependencies to Google Cloud Storage (GCS) via `sparkctl`. +* Supports collecting and exporting application-level metrics and driver/executor metrics to Prometheus. + +## Project Status + +**Project status:** *beta* + +**Current API version:** *`v1beta2`* + +**If you are currently using the `v1beta1` version of the APIs in your manifests, please update them to use the `v1beta2` version by changing `apiVersion: "sparkoperator.k8s.io/"` to `apiVersion: "sparkoperator.k8s.io/v1beta2"`. You will also need to delete the `previous` version of the CustomResourceDefinitions named `sparkapplications.sparkoperator.k8s.io` and `scheduledsparkapplications.sparkoperator.k8s.io`, and replace them with the `v1beta2` version either by installing the latest version of the operator or by running `kubectl create -f config/crd/bases`.** + +## Prerequisites + +* Version >= 1.13 of Kubernetes to use the [`subresource` support for CustomResourceDefinitions](https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#subresources), which became beta in 1.13 and is enabled by default in 1.13 and higher. + +* Version >= 1.16 of Kubernetes to use the `MutatingWebhook` and `ValidatingWebhook` of `apiVersion: admissionregistration.k8s.io/v1`. + +## Getting Started + +For getting started with Spark operator, please refer to [Getting Started](https://www.kubeflow.org/docs/components/spark-operator/getting-started/). + +## User Guide + +For detailed user guide and API documentation, please refer to [User Guide](https://www.kubeflow.org/docs/components/spark-operator/user-guide/) and [API Specification](docs/api-docs.md). + +If you are running Spark operator on Google Kubernetes Engine (GKE) and want to use Google Cloud Storage (GCS) and/or BigQuery for reading/writing data, also refer to the [GCP guide](https://www.kubeflow.org/docs/components/spark-operator/user-guide/gcp/). + +## Version Matrix + +The following table lists the most recent few versions of the operator. + +| Operator Version | API Version | Kubernetes Version | Base Spark Version | +| ------------- | ------------- | ------------- | ------------- | +| `v1beta2-1.6.x-3.5.0` | `v1beta2` | 1.16+ | `3.5.0` | +| `v1beta2-1.5.x-3.5.0` | `v1beta2` | 1.16+ | `3.5.0` | +| `v1beta2-1.4.x-3.5.0` | `v1beta2` | 1.16+ | `3.5.0` | +| `v1beta2-1.3.x-3.1.1` | `v1beta2` | 1.16+ | `3.1.1` | +| `v1beta2-1.2.3-3.1.1` | `v1beta2` | 1.13+ | `3.1.1` | +| `v1beta2-1.2.2-3.0.0` | `v1beta2` | 1.13+ | `3.0.0` | +| `v1beta2-1.2.1-3.0.0` | `v1beta2` | 1.13+ | `3.0.0` | +| `v1beta2-1.2.0-3.0.0` | `v1beta2` | 1.13+ | `3.0.0` | +| `v1beta2-1.1.x-2.4.5` | `v1beta2` | 1.13+ | `2.4.5` | +| `v1beta2-1.0.x-2.4.4` | `v1beta2` | 1.13+ | `2.4.4` | + +## Developer Guide + +For developing with Spark Operator, please refer to [Developer Guide](https://www.kubeflow.org/docs/components/spark-operator/developer-guide/). + +## Contributor Guide + +For contributing to Spark Operator, please refer to [Contributor Guide](CONTRIBUTING.md). + +## Community + +* Join the [CNCF Slack Channel](https://www.kubeflow.org/docs/about/community/#kubeflow-slack-channels) and then join `#kubeflow-spark-operator` Channel. +* Check out our blog post [Announcing the Kubeflow Spark Operator: Building a Stronger Spark on Kubernetes Community](https://blog.kubeflow.org/operators/2024/04/15/kubeflow-spark-operator.html). +* Join our monthly community meeting [Kubeflow Spark Operator Meeting Notes](https://bit.ly/3VGzP4n). + +## Adopters + +Check out [adopters of Spark Operator](ADOPTERS.md). + diff --git a/templates/backstage/argo-workflows/skeleton/manifests/deployment.yaml b/templates/backstage/argo-workflows/skeleton/manifests/deployment.yaml new file mode 100644 index 0000000..962bc6a --- /dev/null +++ b/templates/backstage/argo-workflows/skeleton/manifests/deployment.yaml @@ -0,0 +1,109 @@ +# apiVersion: argoproj.io/v1alpha1 +# kind: Workflow +# metadata: +# name: ${{values.name}} +# namespace: argo +# labels: +# env: dev +# entity-id: ${{values.name}} +# spec: +# serviceAccountName: admin +# entrypoint: whalesay +# templates: +# - name: whalesay +# container: +# image: docker/whalesay:latest +# command: [cowsay] +# args: ["hello world"] +--- +apiVersion: argoproj.io/v1alpha1 +kind: Workflow +metadata: + name: ${{values.name}} + namespace: argo + labels: + env: dev + entity-id: ${{values.name}} +spec: + serviceAccountName: admin + entrypoint: main + action: create + templates: + - name: main + steps: + - - name: spark-job + template: spark-job + - - name: wait + template: wait + arguments: + parameters: + - name: spark-job-name + value: '{{steps.spark-job.outputs.parameters.spark-job-name}}' + + - name: wait + inputs: + parameters: + - name: spark-job-name + resource: + action: get + successCondition: status.applicationState.state == COMPLETED + failureCondition: status.applicationState.state == FAILED + manifest: | + apiVersion: "sparkoperator.k8s.io/v1beta2" + kind: SparkApplication + metadata: + name: {{inputs.parameters.spark-job-name}} + namespace: argo + + - name: spark-job + outputs: + parameters: + - name: spark-job-name + valueFrom: + jsonPath: '{.metadata.name}' + resource: + action: create + setOwnerReference: true + manifest: | + apiVersion: "sparkoperator.k8s.io/v1beta2" + kind: SparkApplication + metadata: + name: spark-pi-${{values.name}} + namespace: argo + labels: + env: dev + entity-id: ${{values.name}} + spec: + type: Scala + mode: cluster + image: "docker.io/apache/spark:v3.1.3" + imagePullPolicy: IfNotPresent + mainClass: org.apache.spark.examples.SparkPi + mainApplicationFile: "local:///opt/spark/examples/jars/spark-examples_2.12-3.1.3.jar" + sparkVersion: "3.1.1" + restartPolicy: + type: Never + volumes: + - name: "test-volume" + hostPath: + path: "/tmp" + type: Directory + driver: + cores: 1 + coreLimit: "1200m" + memory: "512m" + labels: + version: 3.1.1 + serviceAccount: admin + volumeMounts: + - name: "test-volume" + mountPath: "/tmp" + executor: + cores: 1 + instances: 1 + memory: "512m" + labels: + version: 3.1.1 + volumeMounts: + - name: "test-volume" + mountPath: "/tmp" diff --git a/templates/backstage/argo-workflows/skeleton/mkdocs.yml b/templates/backstage/argo-workflows/skeleton/mkdocs.yml new file mode 100644 index 0000000..ba91633 --- /dev/null +++ b/templates/backstage/argo-workflows/skeleton/mkdocs.yml @@ -0,0 +1,8 @@ +site_name: 'Argo Spark Example' +nav: + - Home: index.md + - Argo-Workflows: argo-workflows.md + - Apache Spark Operator: spark-operator.md +plugins: + - techdocs-core + diff --git a/templates/backstage/argo-workflows/template.yaml b/templates/backstage/argo-workflows/template.yaml new file mode 100644 index 0000000..e0110d0 --- /dev/null +++ b/templates/backstage/argo-workflows/template.yaml @@ -0,0 +1,62 @@ +apiVersion: scaffolder.backstage.io/v1beta3 +kind: Template +metadata: + description: Creates a Basic Kubernetes Deployment + name: argo-workflows-basic + title: Basic Argo Workflow with a Spark Job +spec: + owner: guests + type: service + parameters: + - title: Configuration Options + required: + - name + properties: + name: + type: string + description: name of this application + mainApplicationFile: + type: string + default: 'local:///opt/spark/examples/jars/spark-examples_2.12-3.1.3.jar' + description: Path to the main application file + + steps: + - id: template + name: Generating component + action: fetch:template + input: + url: ./skeleton + values: + name: ${{parameters.name}} + + - id: publish + name: Publishing to a gitea git repository + action: publish:gitea + input: + description: This is an example app + # Hard coded value for this demo purposes only. + repoUrl: https://github.com/cnoe-punkwalker/${{parameters.name}} + defaultBranch: main + - id: create-argocd-app + name: Create ArgoCD App + action: cnoe:create-argocd-app + input: + appName: ${{parameters.name}} + appNamespace: ${{parameters.name}} + argoInstance: in-cluster + projectName: default + # necessary until we generate our own cert + repoUrl: https://github.com/cnoe-punkwalker/${{parameters.name}} + path: "manifests" + - id: register + name: Register + action: catalog:register + input: + repoContentsUrl: ${{ steps['publish'].output.repoContentsUrl }} + catalogInfoPath: 'catalog-info.yaml' + + output: + links: + - title: Open in catalog + icon: catalog + entityRef: ${{ steps['register'].output.entityRef }} diff --git a/templates/backstage/basic/mkdocs.yml b/templates/backstage/basic/mkdocs.yml new file mode 100644 index 0000000..c8ae223 --- /dev/null +++ b/templates/backstage/basic/mkdocs.yml @@ -0,0 +1,6 @@ +site_name: 'Argo Spark Example' +nav: + - Home: index.md + - idpBuilder: idpbuilder.md +plugins: + - techdocs-core diff --git a/templates/backstage/basic/skeleton/catalog-info.yaml b/templates/backstage/basic/skeleton/catalog-info.yaml new file mode 100644 index 0000000..c4dec95 --- /dev/null +++ b/templates/backstage/basic/skeleton/catalog-info.yaml @@ -0,0 +1,36 @@ +--- +apiVersion: backstage.io/v1alpha1 +kind: Component +metadata: + name: ${{values.name | dump}} + description: This is a basic example application + annotations: + backstage.io/techdocs-ref: dir:. + backstage.io/kubernetes-label-selector: 'entity-id=${{values.name}}' + backstage.io/kubernetes-namespace: default + argocd/app-name: ${{values.name | dump}} + links: + - url: https://cnoe.localtest.me:8443/gitea + title: Repo URL + icon: github +spec: + owner: guests + lifecycle: experimental + type: service + system: ${{values.name | dump}} +--- +apiVersion: backstage.io/v1alpha1 +kind: System +metadata: + name: ${{values.name | dump}} + description: An example system for demonstration purposes + annotations: + backstage.io/techdocs-ref: dir:. + links: + - url: https://github.com/cnoe-io/stacks/tree/main/ref-implementation + title: CNOE Repo + icon: github +spec: + owner: guests + lifecycle: experimental + type: service diff --git a/templates/backstage/basic/skeleton/docs/idpbuilder.md b/templates/backstage/basic/skeleton/docs/idpbuilder.md new file mode 100644 index 0000000..3ec74fb --- /dev/null +++ b/templates/backstage/basic/skeleton/docs/idpbuilder.md @@ -0,0 +1,46 @@ +[![Codespell][codespell-badge]][codespell-link] +[![E2E][e2e-badge]][e2e-link] +[![Go Report Card][report-badge]][report-link] +[![Commit Activity][commit-activity-badge]][commit-activity-link] + +# IDP Builder + +Internal development platform binary launcher. + +> **WORK IN PROGRESS**: This tool is in a pre-release stage and is under active development. + +## About + +Spin up a complete internal developer platform using industry standard technologies like Kubernetes, Argo, and backstage with only Docker required as a dependency. + +This can be useful in several ways: +* Create a single binary which can demonstrate an IDP reference implementation. +* Use within CI to perform integration testing. +* Use as a local development environment for platform engineers. + +## Getting Started + +Checkout our [documentation website](https://cnoe.io/docs/reference-implementation/installations/idpbuilder) for getting started with idpbuilder. + +## Community + +- If you have questions or concerns about this tool, please feel free to reach out to us on the [CNCF Slack Channel](https://cloud-native.slack.com/archives/C05TN9WFN5S). +- You can also join our community meetings to meet the team and ask any questions. Checkout [this calendar](https://calendar.google.com/calendar/embed?src=064a2adfce866ccb02e61663a09f99147f22f06374e7a8994066bdc81e066986%40group.calendar.google.com&ctz=America%2FLos_Angeles) for more information. + +## Contribution + +Checkout the [contribution doc](./CONTRIBUTING.md) for contribution guidelines and more information on how to set up your local environment. + + + +[codespell-badge]: https://github.com/cnoe-io/idpbuilder/actions/workflows/codespell.yaml/badge.svg +[codespell-link]: https://github.com/cnoe-io/idpbuilder/actions/workflows/codespell.yaml + +[e2e-badge]: https://github.com/cnoe-io/idpbuilder/actions/workflows/e2e.yaml/badge.svg +[e2e-link]: https://github.com/cnoe-io/idpbuilder/actions/workflows/e2e.yaml + +[report-badge]: https://goreportcard.com/badge/github.com/cnoe-io/idpbuilder +[report-link]: https://goreportcard.com/report/github.com/cnoe-io/idpbuilder + +[commit-activity-badge]: https://img.shields.io/github/commit-activity/m/cnoe-io/idpbuilder +[commit-activity-link]: https://github.com/cnoe-io/idpbuilder/pulse diff --git a/templates/backstage/basic/skeleton/docs/images/cnoe-logo.png b/templates/backstage/basic/skeleton/docs/images/cnoe-logo.png new file mode 100644 index 0000000000000000000000000000000000000000..63b8f228ef58a42a758e570331053afc547df964 GIT binary patch literal 58052 zcmeFZ`9G9v{68*{rH~?`;&6(H5g|JjN+C3sFl5PYWFKpjQ_5N?`&L5P_pyzovSr`* zv9E)%jeYoDw@$s!`F`G?Kj8Ctocf`=d%2d^@_en=yt=QZOh?N`OGZXUcjxvkO)@fy zbuzM}CDg~jo%lXaEpUV0>gLV+HaC@TB5je5S`Lp)&6UmV%^j^wHI;9WkzEfCh8tR* zgEPs-l;rdO+2YrglJb^*U-Vspt!DdQ1GD?)`F2BB!fXo^UN%;21s zaK~R4U(pZ8T_nH4mL)LNIi6oP{r$V7bG3IHop+l6f5>~j_m_^aPkgN$SR`=P;(9kQ zn+F#7tozDGUJgI+%eel7Yuub{pSdQ_@F|7DZaqz}$rjCbDce}i@l)Rl$#hub8J6=} zquvO=G*Z06n-;YHeefmK4EM%E3M!}N!4PTD&zYCG8WkJF(xcV5JF$MdzD0_|Hs1&R z)I;-yyqQLh7H>rGIfjq7ums`ctXC9M#F9}#!N%po$BtH&NxUv*DvC62OD*IjMOMJu)l92$0srI7G z3qrh5PFxiA_*)5<<7`0}VcLZ&H|l+L3VA-AG%9lT4ILkc3D6%tFSeZ@uPZu=3J3PD-U^o3;Efn{4@Et9x`|-~ECY`f5nlmqVNwzRJVOE`D=2_KYYx=S0)V+Zc8t9M{`-ui8w;|iM;I{QZw z=UbizEwdoAc1aa_(YkOhC$qJZ_Ab;BZp{So!1BOZH-*}L3$w`4g4P<91o4x7t$nRF zKi>D+BP6};bpp$jv=hpDoaUVWv|zIqaIPQdigRo|_-ZuMn`1O1{_w;;mCsRM{Gc{Q z6o0Kro7TG&ssCMhO-9X3Hdz2}`zSx@qn@bt4mn37nRkhM8MVbR{k_S}2D!I34V!N{ zF8NO2CS}K3oDv)po{T)LHyjmoG;%b0!r_#lY~6(-T(eoqPRga7wu;agO1SZ`Pe7X2 z?77U>Z(q&ss?RdN_>1Nd%)?bY{d6#kVcD^|9Hd#gcg9neFHQ^g8Tmb9au1ZkkMVe= zOb|qls@YHc#eGNaEZ1|pGLOF&i7Bo=cVz~$(X~!1w$hX)UPfNmWSQi?I{2L(39Qgq zSm|<{%WI?`53-6YD2$#D_|`BvVM3cN%y;I*R8=A`zI3+iTzd+AVT9!rS&pah^{>b~ z`y`e@RI<5K!m;anJW`tvizFCEGmf_HS~iM3wV1#X$TDP8+&47cdA^&BkYDfi`&O-^ z&eodFfhX#_+h4?y^?6|t2fHK>@3o^{BV@&i2S*Psx*xAG?P&x6am!ry&SO!T&m!vb|GN$?7#)dO8; zUDbP%rbs)%M`lP9b3u1I2j~SdX?IC*X=m>Ih|}H9*4|0dU54xM4M}hf-G*^-9=_si zBg3VudY|(q($Sn#Oi)Nrh)b51lao{0(d@CL<}IbaKL`Jl;j(mgc94X@+}zv*-9!YD zjux=15)u+HAz_%XumE^NzzJpV{K#Fv-iiC?Aiu`BW$t9^XyxE+g|z2{#(iXhba9s9 z;({jn{paU8ovj}K&rJ4Ce{TzH5C%PgT@@69{coR{yIcKVK7*e8{OoXFKc|z129s2G zv@!<^hL$CJRr+v(f8G0^?{xT$u-J8J*#G+IfBjVNe?FBE z75V3v|9JBEm(nnZQ2!v@Pp%x^1#FR}m4^Lhu`I3Z(#0AwGI_E)w-g?@A6XcdvpuI% z%Dbhddc;P;JzQ+K%B$)a`xQ>y7Ugt};If#A%+cFl{~Z4m6Uina9(R|U&AsHy_tz9n zFX<5l$A{u=!~FS8#VegR#B^_~{3$1ISU57L9r*6M+;BI1xO=#g+)}J8O)YLM{Zi)s zj?~QE2BoKDN60CtPjbrtckv$){*#3NwBSE2_)iP|(}MrB;6E++PYeFjg8wJAfdAtC zj4sO)FaG7)mvZOqEgZDnM2g8w2=q~@qP1E#~+;a%GL)J2O56&?8mx~lZee=Q=6y30_UFj16ly*rV*cMp0tbDU|0kmvu;*(s=FxnK7- zdrHmL;m)QE#9NnPRtSKhb*b?yub~%P7+-&IqYp~`CoSYh&!LrinsAm{H%EK?u+-Du z-nH@l@o9WVu>BNqs!yxfXsBm1+ndE6{PXRmKOJ_*Tq)Krv~<;$@aP!Dl{L~s&$r~| z57#2rsra|5ZN5Q04YkoMgPy3wJQ4fBo`|@$`952 zpg<-x{|e=LOa6*9po1EXfdsMd=0Dc}1o2B1zFI-L-O18|^>CXEtWbLh4#Q893|2 z73Nk*d`*Fvg)08!;_pE(Pmwd*u~c7g)O!?^|3F&#DH)mp3@1CfeDt5AQGYU^Fui}_ z#jP?$p_Y%@zsEcZ#$>p@_fH)4G#;U8f9d7An*eXOVTt=}X77m;d- z4FN@pD>ggjnA6qeGo3EuUG0^rnObtF+mO(60P*pr7+3!1nlj#3<$PQm<*gmMr8uZ# zm4uOM%EB|(6`oJml+PB6KTUH|mkP~~7rJfw8)7UqIH``xHl;|Yg%U1c+!a+%bGE&c z-zRx%ZD_r(u>IUHyuLQ<7KOt4sQ3}^h5EKVQmuMmdAbaM%*5hWr8|FXrzL_@y`BBt z?i_Kn(>fBfbP%pd;Ds~tZh0jk1u~|$3vVYfqI>=PEN7Is?T7&!9TT1soyhX@p&a)} z*fg_Q)!=Cga*Cci@)|)drGvGmj z)1+^fM75g&aw_VTgQQQHF`Mb?@i7apblP!+4fHNdKwf&(<>is2r4q)|e=Ee}(~;Oy z)9JHS8uQGg`f+?rywu>LgBbcDxfazFtXM_x*^@$y_v1@T%~Yg!Y1x9;clQkWhU1Z@ z3`fXqV8%Zd2P!GZesMU3>GLsvt@xFdG1M4I>dhESl!D(odzmfKWa_1*47b5=MFC%P<|!7J~T=q?~C5wdRa9|o`1zbZX13{W)*&~b+N9R^x)P84xo8h{Oomdn~R60 z`?Spi`c#a#@M=E)Kzy(BunMN6uQtq6e?}CK0tC*;2iC-;Vz*Z9Z-LddN5i<}uSUn~ z(_N@Yh>zi)^{HqVmvJjWX5qyDY;zaN-ct7PK)R*jrm76$j7{R4QsyK50C41#lVhhA zOXGhD6!ppL7lq>EV>ClhX0UNzE~l?M&O6oe z4EYpG_{>T{jEDtzDwVtZ^4Cs{-%~ics=v4Y(rT9teD(x?(_9(xatZqd=X;!QaHQN-wZbv zpj7H~O8*=mgM+uK<}M+a@c~isW#O=w?>W|+cO@btQa_33Vu4FCPr0_*ZPCz{{v-C$ zU~6+9 z#^>8q?Ia?_8wrZ-p7Cj0GU@rua}VP>V}V6S!&!jP5T$Ir{uY`eY)`9rfKQb0+Wpxt)+RndbCJ%x$5ku+>uJl0vUiTun@;Rd@2F!v14n4QsK^yc8B`4Z6A@abT4T>uv?yMfC z3$!VZiQn~D?%bU#QGCK=Lm^nct?%wS$7jYHt;xDqbMBO86JDt{aZWMoaD>`n7J`@E78L~s8dU0|lZXWUH z_|0!gexc}iPgYW+5f2#XNpK1|)wdTcs|oGvLwq&YCStKH-A-C&OK|g%^`YlOq4tP^ zIb(!Mc1LZkT2iNN{!nJ+h3__-YT}H<03fF6f85Wg6$<(-vBrYr;vDOE%GLniTki)K zwRhdue3*J>Yecn;J(hUxk45Bfig9@Y?NoQ}8Gj}A3RlcCblD-aq zaJ*UTtPx#ZeVqEK89d_F7fPZFyM2Kc`*l{ixq!jHsYAFD&s}xf~VS zc^@I<=2+o+X-!l4W;WV!jdb%cYUB*>Im9byf7+^}1lYdTi8Nm7wC$J^xBSk_i&dVi`V=rNe;VRJD%bx5`}AZA*nNGYBW5&FeBUhSvFJ=mm@bX zrFbyp-_ozp!;br}Z{d6zb=sj=BV5Ti&v#O=*}?hUPkQRwpe1^Hl#JN!^#Og|h z(kA6vOGPNTheertI2pQ-85ov9edOpNkb_7h9$S0{9ZsU2^d4OLOtIZjO1UoUqcHXS zfJ#Hg?V60Zx}9NM=54^v63yiqcJEH787~{BihyKR{On|Hw8 zX*si;F_Wzf6j?Z{+S+`iq6>0#{U+;DX{WufIBv8`_^mg%#aIy5A;kK(lZ>7^6FIm( zP#fha|7UgsW=KKy2)4n972qM9e#zzPvh?~qcvaeFzBZpq^wW;*oUb;uhdxP;9QQ52cROuzA^36o$O6=Cb z$EwBkbVS2N1N(E3*SM|tQk93q#Fk~PosIO#KNvdXNxx`jjte=fTlU~F2rfj*;81Jd%Gx$w6ESUbb2nl1BEyv(R| zw}amai?YBswBa}I@=%!`JA^5>LZ58l@ivEevgwznObRH*rFjd_4wmP3mJ zYMmZydiE3Pasjp&toF00=FO7rA7$`Tu@{F)6}%wGH!fw9P4FDT*V>uc@$~@{UDQ?b zpj=%~Mx)CW;R0J4@R5|XzB{dm$wK1JT1947uLe47uEgrP%;qMbvyuZ$z1?ubc!xLA zo16BEmt1UojL4=3`|k0C=otR~it~G2U-`#1Ja&fdk1wWlc?rRi^M%)H<2cOqeI)kV z-JpOa5&<#*9wHWhyU8vTwVgJNA!^y@DXVulPS`Pd8GPh4BAQcNJh)gGm8rwj%H6l! zO{M0eOAna-*uTAhPn32X*j5030wkH{s0uf(VoaF5TwkEdXMfa7rxAO(`lz}QjKlC0 z?KCk!&L~n;kGXCoIz~28=Ru4>pY>ayJa;bxV!Xqs{!BPly``DV$jy^{iGcO4517-f zf{7#2L#LlncG{z?KV|BZbEvmsQF634>qXpcrxYrZ z=?z=$U78uy)j#q>On7Zzfsn`IZM9ePK>=`I56Ywbj&`U25TczXT?@TiBkB{H-I`LN z9q+j7j~~=Z5SJb656pCD?Q|Yd?$6*%tldBS#SuL=?y^%PDijsZlkQO5zeVu1sc4m0H^;Nb3z&H5rS5cH1_z$~+D({j#xzdx*qUR+ z+Cklqt~dr+YhlS?z^p)~<+)leqT$bkw!tNbevf+~6Q`mm2RHX!>TDFmd*TxK`%|=g z!X!&}J}1^7n4Y;`u&H~l7+hHOxVcSguDK>u_QdM&s|rNf)?Y6+&(tLG?!3uFv<$6& zI)WAx33`0tuVdCUlMH7O3`HOc;I8lW5=z&`$jV$6Mke3}_t&>y#5dHy2J}=Cx94+G z{iWv!OLIMb*@ zgstlr(D^Ep=C<=CUkM!-d!+ER5r+j{X8u-9yVfu<=OP-4^d2)Jm0x>EWv#B*d`LcS z)M1q{0bj~h?Ds07z?^Ou*ne?P_M>iZ>go@Wi| zuDzww@fypQsa)4|RDcX8JoL@39m##fpMQ`V&}-T`c>U$D(n{dDrm}%Sdpi#gooA@+ z_y;R)Uk|H4A|TV+{C&pkF!|B;Ox{PtfWE>maVqwrlf?sVxfCAX z{@vw+4cvZ+6OuL7fZ_6pSqNNJq8 zDvGH`mU=eBTbu1#c2b7d2R4jGRW0y^Bc?jK+URzFs@9}ks&9Wx%Im=wKRuWth_jv7 z)(FbFYLkSyuuwD7;GZw%G`;=p<5gb?X(yx8>RARt$d`Hj6v1MUcrSpEzR`z@2)RcT z+RB{js-7Z!Mr}_kSdZb-n9hpOfh^Uy>TXUmTN0Zfy_~^>K;<^35XPyW?QN>Fr8{co zVGnW^q@O;sR9V}PI*WvZwVe6+pywBB@l){bxHZ@VPj$2N$jNaQ(tv=0tI7V;*+ot& z(U>N_*b1^*b5gu2!wWyEi& ziWUl{%$?bt3++v9&HAD*A(q{|39vYVF1ejV+}#nA9^AiQv@c`HbjQ?2;B|f@a1Qx& zG(v*L8!-KTYDqR6V)3Gpb+6M2_P2zxvB~rwh3-(S{g_W}Xt*Tl=-S&EQG%+JBu#t| z^{*cA+&#@fkcU|HS$^<<)j&h+8`q&VraL}a)6-au_?9WwYY{J& zj%N~W#EcQYj;89jFPJC$7xguy1H{WbMc@eRu%; zKw63CjCM0=dZ+QaCqD`JHsy@13XSS@5^0Ds4s?>w0><#q`%IO}Vq#w)KBofa`7!OK73D%R{@9N%9C8z_O(S z7|y3e4M=SZfxNhfBf)s}wDq|X+v@UCEqkpiZGAcR^Hp0vVOA!JciY=h1MF`XoG*>ZE1(y$ognbzDP4!S&6wYNjtO<-jx)i%x>DZ_*C&OH(o)4Z=!`+!qxW9IMO{}pbe_+lZUGpuru3Tso0V^4W!cwacOHgIeYrO%VCMMU z-1hDtLTP`Mv7oU@?gHm(Z9W7yePUGfNis|ZLCVdY2_h+ZxxJyA#S#->w?)_6I9QVN z)$Q~TRNC^Of?Txq#Jh%8`_i(CFfHSlmAI6O7q*oyJ}ZHkHI%JEN8tk?}?Wc+@;q|d}@oO94}k{N&!6mP=@;z z$i0g|@?CMdJrIue3}hm7tU;}0p4=uLh!$LV6y-`_Rp zn;kLQJEcXtX`_C*2`}C(Y4};^+$~q!%5&15`;6t2jU;zT-^JvW^&!XWqHa9#HewSK z6ZqW{cJj5>9(L7jfN)R5$<|HmC{{;``BGBC--r&hg!A7aC_UESj~Q5U1yyLXX;Rmg z;*08XPyb+yl$D?2N_pYswy=%rClE-P98tXbD~9e-bc+d-OX=9=skaVM#L*A|{g9qn|Mrbf4n z&j=s)iM?A;#sv0dn2S)n7F(jeWbL?lyFawuxUK#_~sfwfl47@MXn3Gs6pTUzwl- z9j{@NR*vL!ELMA;-gjs&W^+w<$!l-DNe(6{f}B2Ld6?79d-^oK_XvbNSNyAZ8!d{A zbvwDwpJBZnb6PYe)%U$0l1Fl5$j@Yq7z-B<&77@y@VQz#YmzMxH2)-vC%vxmVQSi{ zc)#>c1BEJ&H|1w(n;kel`IQBE%s(@WK{8vu&$795Z%hSLKyef z1qY$T=tQK1)1S@fUVFVWgJ-O!m$RETcA6YGc=MmZ?0jH9-*KFrg?jQwHs-=Du_qFy z8*7xkya7fX-NBh9d!*(Gl-9e!N@rWN2;cF#>58*`(Gste*ldfn+8NU&pP`v_ksYDmFMK}Q+raGfA(3a(bvh4$ zpr6K`zsAwjcou_|p!`#PQW|no&=S?OmJ>+?S4Rsk8o25A9es0xDiFd2bAMkHKie@f2&V}sNuC8E7cSD`X&_xtx_`-|n z!&a25RDVv5qK@8WjrE;EspU3fi%G_EeEqbbcS?Byv~rN4oxrHSTY!Y#$iE3`ky#>+ za&9zhM`2VzC(?1-x*>|%ehRn8L=t|^`+MOPB|gs6@~a-VMRYD-*?$x7 zgWFA7SI zM{NYNuX6f4Ub_yy?sHFvTZ91G;Iy+v?7egwTtTPXwZVb3i48Sh4(63e(t%9s;QAp_ zO7e3i_V(*1nL_&C_6V)>MQ1_D6}Kh=%1rw$O*Ya~;!$!VGG!zY*!&$JS{W~^c=?fX zN+N@ADOsG#1BT1y8jL~&WizU=66p(e6l(*lI@w!J85oZ~W2ETe%FlxeGk%M%Lk2Pl zv+v{)rgOZ^R&vi!bu$|ox8J}WmvDDn%h?_W-E;h83ZW1m`I;U-tiVLVuhmn^sqshS zrUla{ufDID0Su8Jxd;eWKh@?~y3ly(p7fWFZS8HucwiLTnRswat6&{#5g(iDLF3Llw zA*_2*Oc&bjhpImnic@q~Z_H#WbFf9#Y(F9r3PiBLE3^Jnw=sIp^+O9ahd zA0#XT&p`96Wax}F($h|EZ~KbgTayZNIm~0wiEesooF$v8E|X$y_1ze#bx!RH1d{S}uq3cJ zG>{L`;)WN8jYv)>>jUE={G{>?FXKMxQCW%IumC+o-srteVVxX-boNYFF$?J#hC96BzFv_?1!CpqgS=tna0?~G4dcsDC3akF?kA%j za$1(&t=UR9^@^xAY!5sQUdRr~g1Y&$Phh9RCU!oP7Z?UOwGTm8}Z*Txi zpJPp4GOHMm(1#l-3uO=6Y3QL)*m7~dbMm&_x?kSfm1VPKLV#}t<+V3@=B^(~lM-j8 zMw~f6SEL1+phppR_o+M!rII3SM!z%xkAwS z`c>qygzXcXsVT%vqPc|o^+qzm>znX-yM>Hye`)hV6x!bqT80DE!*Nj_>VP@KE^ur4 zO_f(_Z%E#1R_#MnATQ^;x}6m1bK3Kymml76tUXL)zgm<)$m;i(u6b;YU4O#ucAFc5 zi%+0F%YzJ5`#U`k-TGW5o!XmH(3epzCo|;1(qzMP^r|`s;z43w5)3wcXs;T;MlLxy zLbYQ^77wWe>NMvk?-jyk$Tc8D>B=GUvGC-L^>)Z z9R@{jpT@HsdL@U0Kpn22YbYvBSSOpbv**V)r1fb;GdH&^hd7B-=gC^Sc0H|AwZ;Rb z$VA*~9Gl~jiNBwy0^^bHcm$TAYXyRn_Z8STj2A1fV*H;FL`((#l!9&=;wRS6G72;(S7-nW zY!KmmCUNDUdhyUDuzw)IgdOgY8L`>WERYuYgVc~8e@ILkFv_LB99h92J({Eafs1GA zykmj+8#39A2926z=sT3Fk|=W&Yo|?R^!mGFA)fDKNBZ|I=`{GM zxa7A9=?_KZ2m$dB@~S|{`*%2fjdOWHasRuQTpBCx)rsI^Y~_isKv_+IIR0?NK(2h0 zw+z})q5wKJZX;zNR33-1GaL_dWiebg8Tz2lu<yAf_I4c1L`yoIqk$GI2H|5-v~sQwLLm1lE(;)ZjV>sc!Vwt>Gq-DKap;2kv$rm7oJ*CS zCevY5gk2bsLGZdDxPhhy*m){6DeBA{^5z6WT2)mJb}@Z%Q4-RKyeg3F;EHrBZWEkN zM6{f|MsodtsjdNSrjO8%ssj}=!dUv-*9J<3v0|Z{Jw{1=%IR8x+()07@;nPCp;iPJ zU0&FT(T5l9N`j_5v><4+br}}cf9nj|?e9}pXP+Vw}q5Ul;UG!WM)L^>@>tYg^@dj!=xJy9slqNw9&AN}#v6S%l68xFi!g1h=|5zUw!f1>IlH9v+ z{@RL!y7ftz=eA>!1ogZ3zT8dd{)=F+3V;%ugf|x;_Ff?GoqqC$Cc8bk;$EM*KUi(z zP4c9uh*N8^~&%1UK-=t4dQx9CfMKzyqfVIn7$quKm--IfCL>7 zKwH6>^?RBlCt*;6VFu0@KmwWI>ey`0jVXKF$g8g`{<--z8Rd~CWsGoJ--_M61vMa0 zps!<`v;pPPtIWZ85j6dWCTs1?a>H(UjbSJmsO;CH%SRfq)Fz8H@&m_B;xgBHy(@Af z=m~=RNHj@i{hfTcnyOCu!gK_{hMZIeEkiSz=H8#)CP7P%clB&3lq5y~a7L!vqLmr<~bV?oBu@T&B zU%F-rw~Z+?$}jp;#8F#e<}_yx7uY7hBR8ENpxIs6>yay@v7P;n&~H$|sVxN@ZP+~? z{V*oKlb%b;uCjSdwR;2VbW=dFzV|}jbHNo*rJG1)_D$7ASnaO*ojVLOSirIjKbdlX z{Zcn68%KiP#?7^AS7y+^qB#m2m5kj)<52j(vZjjO}M1~^Y#mR za9j2y+l&uh>W9tvCn2^TgV>sL8@=U^GV`i$(w~%Zu!D%1(Ka!Y{wqaN%TBcWtt+&k ze;(Utrk+eRsEkS}xB(PVl!cXQ6~VAdbobgabO{Gf%bnSxP?X6nG=?*^GzNHoRS$gM+ML6_wRMSuY-D= zp_VO+a{>?67DnWe={n3(xB$3u@O!cF*j)=~9N#Y8v(LL3kKANe~ zhl@o4xV3>9$v1#h{Fi_SX(Ha`@LSm>F9}7Purk}QoUO+@hz(rl&yKyRjmT=LV6>Sc zdFdEiYE)hVy^Lw%u=#l?@I$|cI*+3CtvG*^JMI+gvDF_?lT%@_58Y9e1b232v8;i^ zRLrKE$^6QrbM5-)Ulcr0Rb*@0pW!<1HglhFgXK3TMcWE1baf&+v%dkk)_=ipM16Lmu)^H|$ni7w`14X9)|sJo2GF&7|RabTQEwsmo+`K@W9VMny+T zcW;6#0Y0LWY?Cf~YXZtYOGAd{!vfpyEv8?7Ez+E34ND1LswEpt5c7yPX}OW!f$;Dk z%$DCgv%hz!+Ge0=6D+Yl1vfAimmy`9U2u}0oxB*p=VLLyekD)M4jOJ5bOaD&p8o@G zFEP#D`VcsacaXHoIKH`s8~aNp;o#B4M;7GF{dKO;EMA{Gz;kgklR^u)OL|sHaPjn$!CRlHmWt4}brMmW>`0sq=2PD!h29ESsB%1y=3!PQK zX$$I6=8{u*oj^kGTZ&cT2d}VIGerGTBPL^_0c8lYi`X>_LD1?YKsJlWWTpOY}?TSOiC4!{(XQ3xH{6J*Axo}9Cb5Y zs}%)tQZPME!kFuW?BN7`;y_auzt3%uPc@su`Zix7_@$Ly9si(Ca=EV?DbUw#_HjU=L35g+83`_WRV{ijZe4Q==^nLJxf&Fjb}m3!>@-(@xK29i zflcuz3)Fxm2+_K6W18kM!#+72)#X^$;qp8-BSkV-IhhhShgYA68~>FOw;uo@X_7I1T7TLr$j~8WGWX^gNuEgGcT9rl%JpcJP(O(BO<=M$42ABE+ zuW8)R*4dNDTida7Htl|q%_)^K?mba3i{9I5oBXo0X>B&SUrr%gld)f1BRD_cu4@`;a zY>TeLPB~NN9TdePCM0Q|m z)$2BA80$Sz^E3S%A>?XO-!4ZXsl*>6bE?m*K4>?ndeq-j$9{V9N}U1LHO+;wj;D7& z-Y+3n4fi(lvaV;b+Buq7#=V5UF6l@WL7e$Njyo8epf#4WJ$b9

d(w5}BKBAr{wrzd*>V2kjkOcueVOl_vEG7B`N4Za1mCi(JQ%LO+x) z%LR9-%EYJbi4B+g3doS`-R7O*pvV_RJrqJ5OdESQfTD`J#BM0KqyhJzYj9Hzi)*V+ zQsQ7*WRRPUa@%~69fxsu%hu73Axia1W%*`_K$=_%SsqVha1e;XXeY0{>-Afl9cWp` zFLGLR6_yO&!Eme#NaHT$7SWuHR530WMC?oHYTF&q#irR1=tF|?>c8`IaU=CoyQk5y z53)!V^j~dfJ|m=JM)=|lZEL9_h{rbcmxX6S^E#T+h*)vU)5%Y=rs>LXi0MdAj+;g_ zHbAWxkp=)R9Ql=@cuW#4-F&$w`aZn;mEq*qrR{<3=Ji%L@2@h$=bf*iizq`T$c+lU z-#jn$-9e5Hx;4^V$q)gj>K;sv|ER6*I0!Z{@2aW?q*5s zf2}mM{vi=ehVF*WFp)fM{{lXbzVRD8bDVgO!5_U!PvtQb0iTC-6&YjZFiREH&Ata| zpVbDt$IqDJ;k=GlFWlYtk?P^{0<9|b{>rGhY7OGRM5p0uWYuMKvsP%Tr!MuZD%G?l zNORl)8;V;h%00!|mQ`ixU2dR|)55;)x|`wxtRb%hQ=H_>?70-hGvAy_MdHnA#)H3K zNXFGZ$_VZy(2t&wX+W2kXWY>9mbl3;svhjJ3c`Z-xfx$Z3+_-n{^Fp2Ufq%M(2F?_ zEJn{t7Q4t1^5(;{5jBDvNn>-kNb!-=0w9Teg?z-oHwq*Xf{mN<8_Ep!UW2rY^!AFt zd5LJ;Sw#WOb>Fr{t8eMy!4b$g5We*^*vv&(KaYt^{%Y5bw^v%F9TA4qN&?D(Ovuh% zJVI{BTpx8A;_JC`Q>A+|LX)W`Y26>c8*!nx=g2m} zFyLMcUs`9y1+U>Ab2e)?m!4WFy1aV%c$ZbR5t`6cM&5wTEw_$q7P05>Be0*nwWHiX zokHdJpk&G`N^mSHr0Jcsc@|y|6?#QecE!+z6TN+W@9Hz>R)ln@Ehf^(bGoa6T8(*^ zu?ZX*n<<;(#0h7-64ySflSayLE70`aJi}h!SbBKipWj^4r+EukArBw^jACTAxA_VQ z1rZ$m*ALybeMdokP2ly2!F#`iX#1k)8y{CkYkiI{f^JasB}&H>go-j_-(Wx$&Q-cX z%(jB%xkyC`jzc!S*Ed|?WrRpw0PYdr#~<^cV7_J&-RN@WLOpv{7^ciI%c%q~Kl;$=XhFra8o)6=!PA9?H;(!a>+DVmkX33cXTQb%j7u^DHCqtk}cyodMDFAfuv zE#Pp4R75RwCO!6#oNLwPZhFkmP!>bC)EPO2m{^akqz&t`AbGIoy-Jw)B--9}JSt^7 zivng*P%$BOZu09<)EuVXIp{~>CVlE$ktt0q?7nTSCix7Z!ctwY`QTe{;Lc&>EeS%1 z-dy&NQc$hM_?q3PyHO~VVP?CWYv2~*0c>KV31&Lq|7K3(ywCYLHnbv?&OaT&;f+1- z>`iLT?Xpx^RC>aCwl011nD2wD?yx*MZmHEKQKmY2J0FG#>Pg_!v`s4(U|*2K3*nw! zpxft{4L}1Mz&2!d^G~R*v-bi|%pp@c8mu~a%WN=t{yH&W;++SnD==}Gui{Hwc+Cn$ zG_x*NUSs1dWuWVe_f{Y$_qgGqz1{oNuK1xC?3QmMVz2n~sC7m@n+=0ckCbjhP+hpu z$LNGxi96PBlUk%}D_vU5R-jr%Ex=$?nh^lU4sWXPtGuq5gBR&9=hWaCXTwC6#JJpN zIPzJBnRlsUFTOtN)LDtXawf-qSPzRFFX_aOVG(bM%eYV}7|Tg5Yn@D$#od(}zd;R& z>+j2s(@!csb0gF_i{`CrKbc>(LWZ*N2MsBq?joLPqzs=92YcsklL<)MMtFBO9U8RaS>|ZRt4`Q$z7o@;`Pm(8* zDdaQZSC19xiDohu8;r)_>*feBpCDrWC5Cxoz;Gk`QXiwl^#_Vq1DTGLcWPOshY;7w zmrfiUtMy1oFBQbiJqgWwXW}i5F7Lc@AsbADpJApo$*AW4eiE204FIA_@~I$SG)^vo zPgXG!6aOI{m%+kJLD-0~(Ygzrty}iTdop&Fok3?cihS^>N#K@(sed8-f9!qrTa;bb zwvM2Lq9`RuE8U1R3@V|5bT^`ufOLZ+jXk&Mf zL2EkPk=S{B-r&F#%sfsGDIrn4O%YV`b(Fh3IgV+zEzuaa!Pz+uUYX4p7H20c zV&fJscy%r0gR5}(!7g$hFR`1z^+f9YLWbxMr_d5xxZrAm^WtGv5nK4ID zWozUGy?@bwiWO8{5QLob9`BWBdD(jw9ny=}S6%$t0pNP7K0?w!@+0BBbbyMg-c?nV z9q$165#Z23t%dbXB~J9T{R}?m5~JIF`S#d$mHa1_`WOqt$_0)JG7op{0q}wjhPlTe0V#?ZxEq%mQzB4fC}R*2KNhb}cV0L+N%AwB zeNhZNTplcKmreD|Z8{!*xIvy}^s@B_H&r9i$i{fQ)8!cr%Ii~0EmJXUW;2{Zcn>2^ z^3+JqjH5PszBM+3&J_NNN_pl*_*?aj=CcIxV2=em!arT|*@y+)m!;pbY>{jy11W#5 zL#|;8Pz%SC4vc`?LIn|*TejydA9i6cw48AdG&cni{JCD3h|rYT;!@1;LjJy7=NU1? ze}_9v%(iI{qeAp&l0v+s?SkMBr^-|X_nqt&#hP_%v4(u76UaNKdvIC22#S&unU&NM zcyAPeOx7ByFN+v%A&4 zFyT8j8-e5imm&B_?eb2o7Ru0dLwMmv^b$aIl8Ccay8OH5x`sp)#8*3S41AWsrI}jK zN;q(!GpoJSQj5BaWO=W7a0MY_YueSa?Iq6}`bg1BH)f@rR(0N@VxA7><||6Osngj5 za|^a}8O*_z=^&8z8e8&v>};SQoJCAm>?OoL?s?HZ_Y48f0>e8J%{Z=D zWs*RL<N$vR*$26BRVHvcQ;Zo68X9=^N@ZHt?C|_uurWFVy#e*%NlyQ?@miqd2j~B z|3!OV7Cjmr)&ze(NIF%0tE#7E`Yqr9s#^XRbYQNSdYm$DrQ3n6)BAM6nn_(xy*rmn zeoc6rq$?D?(XS}jGr$oj&7tBMcFADUDHWEVHh!#;DZUy2*{8UF+;rB5&DISX9n$s) zaJR|en_oilI!nC`HsA&u-?97V4p=jVpMU7UN6SChl9YEU_r-VArc*>sgsx=_`zE@% zpm)b*mn}_qILF663$y3ldn@fc=8Ush$@pYd=5%5nsa#|`)O6Bo4YhlE+#Pitv>}l= z=BxLq_TiO8JqNWju`{)A8)Snq_Jf54ot55b$yyPPGmyRnNoSnhT35~8e=Z?D;gN99 zDV$g2h^l7vs2KQy^k7p?j}r`p2O+TQ$mRW}Gvj@o=Lt0MZFp$|TWUKnN zIgUYk@p)CU1vY6HTs*z(&p<6bWI8owwYjlY-PXKXNK*6Bd)~;(z=cmyoxDxA!0`JX zb(iz{*Ms~N&2gxnJwF3lY_zj4*lP?322|);sJm{IcSuf959)Ja>tg;Vf{-CC(KYi; zi8YPneRY|wLN;(<3c+lqixXxC_%BH~$ z^1~K=Q<^6(X<927MepsXcwREb;yO^L8B?Y`9awReEkl#ei;|)0yp^dN!_*zCVFk_= zZEYsy#9GCTt}Ac3Ke)`dT1^dxwsX76N9akAm$zxVqVT2*_NU^WJ(Lj33?6lDqLEoJ zEs7!3-<4b|PJt@r_jWXJOp6QHAfmA`+o_xE+t<}`DfpQ=gbsN*+$dQ_nt zC7RUHLglot3@AY8w%iwzcK+nzX-V3uZ=~CS`0hT~nlJ3r93w6vaPfBCFN8DAy#(i? z98zbru_5fBNkiGdbdcjM#0T3f8Y}Kn-&)kX#mAkIZ6_J2jGV$Z?tT7xtM}?WZocBI zJ0MvUUoyxTvr|m__HL7Bs7>@^NZlMJqW%uR!q&%Lm3bRjivaq7VhDy`_1Fwe1f3l? z5-)lNRy&B|-}$I}C!o`lSfcy71R_8bk$8SS+nT*EB&`Gt()`Xs$$X=6Tz$&1iZpN0 z`&aedNvtOa?d3>SlR1G+6_N=G#RUDBPNeE};?pAm70mHxiy^}go#+Aal+8KgM+W)9 zn)7=YhFEmy^9n{^WAz!lS^ZF>jPy|YT9ljR zB%V!dRoqdv%p*b6an-+>we`p)!ZGQo_e$2cL-f@~U8s0ODmLuYm;a^f(F9F`f2p+) zzi@JQi|nQ~BdEoe0ochKbzsnlcsyu!>77F>U`fs5*_L7(`{~IXqx9-NR>N(sC9N!>_m={-0d#9=E5cEN-wKLYfHbzHO7j_ZEwgD zsJeH(3LD**gEb!r5>AHT7?z;Kl6`e{-@^WwzJ0~zg)`q7kr!0W#>`~$7q4(ulTkt; z7Ga_#co%O%#7lEbj_p8CU}n9y!`W-kl#6{RTq*kX;Z5_q$r4nJGpNRE!dsC(W#e7Uk?UfvUQ8##S6O^{u00^H2p!%(=DEd7utI`axWG)Ff2(~o z;MA)6I?tZH^dX~>rgethv`uD!=7#Czy4otoLu5qW?}fJ$TrYFFt_0sCbjJvaT-yRE zi4dF>4pF zqPP}O8J=q0uZ)6r28woD7b^L8Uv53G))k`N36pr0R;y zEOMJ297tEw9AD2hPR)`<383mAI+K_6e||DId6KTaY`HMQrY`@dlH2GE#|B*_!n4#z z)ox(m!JfIU?UHw;%JdnMr@Nf}T3V_;m;C3T!=Mmka27$UjV{ip4`I%X?J1UVGOBNNN;l)s3vO^x3ClKM+Sgo;HDob zOwJC!J7$R7{K-6B!s40#BAU=L#Fs#N^QiyjoE|2o`$vGF-T;>&YJz6}t9;s~@W94i zj?;R(UB3INmuvY&B3WBpsrsH6AKA%=9;ebpw8+s5d#r+vPfT3Azq^CkhM(A z_VBXNq{iuP^R=i~Q)VMK!gfe2>yPON@Ad~j|< zlgT_q?N!$S8t3Kj7xVWin^8ydr{ebZe8B*=85}0S@s#lKmlQD1Rq*p&*R3-Z$`Jme z_T9nki_bNCA~chADS6)|!uA>sS~Q8YS`OM)R-0XLh2l|zo4$@Uqb{mOd7v_$*#142 z&69j%!Q_7Z_I#@N@|~1ED+zMN&tAiITPnC1le_-kghFl#na&AZJnx;Y#V09Af1>Wv z>&AKoo6PtP@Q1v=p1&-eS@}HOh^2Ljw|e(duvBQ-O$QCbyOKAvHd_v6#*CZZPq8cs zQeI$qI=CebvZkl1!+*BXC89|qT`zX3i=T=qKUE*et>s1UNy$u}Fe{=?g!i`2Y;IEC zauviywXIG`7we?fULFXG*UF?b*r!evnEt@uHag&g*8%_{3}IdhX7bUFQ*v$>OK;J%^b z&_DNb^7Fhai>u(piDRwE`nZ(ofwOn;^5C*u##r|hGqs*O!rm-^{$AI+LRD;B0>Z|+ z>tH+b#K9$rPTWhMP)omu^TV<-yB0ohfd-QV3r%)%g6mnatyFuZW1r@>srFyv%}NW- z?e)J1TrNX@{vr9@m=Tm=3KMHn9 zQX+wk*I`+Cyo<{t0GBCn6ZADpQni(wxJPE4!|?vVy;zLa;Lq?U7`f9%wF5{t^SEmM z$+2NivE5xwUI8&7-Yp7zttUO~2rw%V02ng#@m?6%3~~gG68TM42U6eto)xVN!PptM zxK_E;TbuSa?EB&X*_q}W*N%tbiN>ljOa?@=Ndm9yk*|0&Dv<{=Jwwt!Umd3Is9nys zXh|acEmjj#=7UWo^Z0^V*t=Va&)+x3OhuT91 zbR!zdbTAiT^I`T+Y4`0VWn!~BTV9Pn#%)=hA+_+xT!{>(cuE8#;Z^8~9Ftx`G9m6D z68m(CR?a+Fs=oMy{e4*(@QgeCD1p1;g%jkB!(w@U#aT$;L3h|X#ADRp(Nu&Xl?nx3v}=wVH3zjyfvh<4|WTR+>mB+5tWw-v-LecQZQ{b7A1|oN?VCt!O0B|(q3;>G zwjGJ)6?IP?*z{z7Fq8BidqMkV5HvLz{)`EQd%&`Moz-zR?dd57OviU@O6S8a3?hAB zpL$@}3>*S2(uCA*W&9!!ti*fB!DHp5J77&!PY?RsjFNCknza^@wrfD|alczVw_9JU zLAOZCRzCAN4sN;I2kM0ee|C~g;9K|I@a&^UZ(28N;u>uIn6%k z5|$Mv?|`km1r^9L--pU68*yPMmJnr)J(&AqL7L0=`R+*p9iL3vlbvC6s%uBNd@#@E z1)c=%Ysd1#)JGf#K8hclq%mTogB=vzb~tOF7+nwgNt);DYs~h~=Pb%?W9%u{UClqZ zLKr4T8QdVH>|SSS%jOK=gh&eBmVV89h984kkR8)9keS=I)ucRK1-?nvb91 z3sB$!`;yS~-jI0e^#k`Q{|)3q^sM!)c+S?Bc$)SjNHGWJ~1&Wyg*20Yve z**3`BqU&?utq9<~5dL%l9JJADM$t~Y_DtQSHq5H-t&B?$)uy=O<>Z5XZ8c}=P-C>F zGs=miEv{(ZXw~Z~dIe`|n`&puPIZJmQjS;oyA^cKKxk6us0jt zXKqCaT%|@4ybyHuh3@)S?|M6Zqnt`WG3uylB;+Jss?lmST`+bWDI6>yt(+PS}8bD?xY*c+uirz@J#79PI@64 z2%!;wI0lTRmsyOIr5CK-atW*lKTC8^glgU4Q;c9|D0}lzz-NI>01SwaAQH*HSDQ;@ zCNlL4C=a@KnLyy$8GP8TymK|a23`*)q{*XWF?#D^XmHd}Ppgx5~0M#Th&q3sp zdiRy0&PMdPQ)Axf1ulH^9tEJ_8Z4^}1gsuz;uNpvqS+(dT}&P(KerOEyK^TDP(~70 zyZL18hxjS8e{f@thiG6@mB9{?5f%W6-!VMT`o1v1Bd5R<>EnSW&Q+zsc?TNARov}O z6K$J}+>b?iIc~4ZHedE`yKB^pRpyj4Gl56EOK$9T6J>Hg2N}$#t-@Gd$xKkDpAg@P z4<-W-Ax65s;OldJ>U8)rYvAgVc#%UcU~tZ6iPf4c zs!l4poj|=@3}GT^9Tj<@R&!1nZE)L<6Rn?+f5{F?!35V?X=x1Gx=(KXR0Lx)R|6e2 z$}dB)9xoNj+w|Z!mA(3;obYt2y{WjQ8L<%O)^ho1tjr15jt%t(mr;{CGJt*z6kQJk zFp9KMr3nSA{yKHHz1t$T{W=?9{nl4_ z^7)=eP{qb}yo(zOY2qNXe&%K5<)78%%|iSnEa$CyzHbbBf9B!4?}1ln36J6~A+&Mc za0YxX^HXn6o+lE5IJN%==El>b3!hTTQgiW&TNl!VbKiQ4BSB1IHknZ#*Iu3!WVz#2 zF?w*VNcj>diTvz89QO46O-+uQBaW73MY_GmAo0**HwZEKI^} zyjUsz1V6_S%`jVBL!B=72o|2;oY*tT<`=_>CQ#IGWiqu*C#CoGiKgdSmn(0voPTyd zdg5z*)xZ;q$&H9$X##Q=1^ZF@x>_82QBmorQAEH zfE#`1`3Y`kguW3uPY*NCl&N63Cl?*@%ZJ^M_}#K69J%6lnYUPkQ*ja*g(nj3iHxuH zYw1nD;ZCwH|8lznA%s%r|Mv97sUZI(|KyU+FGa(3+S?1dkWbb z`dc#s=<`>nBkNm~9%KISDqODT6G;+W<1sZGTL0yfcspgXl zmdaG`1^n@*j=VF}9D)n8@Q(Ee^ZvvbR9|Nl)-jcw?<`v9$((X~>0{%l@J7(P)ycF{ z^~1GE7~gFdGZ9tT=JkLWFxgUcXEYaQ_r<+rG4OM+RY6O4%(AIXb>bat^Y9RtmKxUNg&Jl_zS7zg~{s6%~It~I-hJeBAaBv zuageW14Y)XxCUWYF&_t6!$goLuT=j@oZo^-;k)qVmITc5Okp_gjDWYAXXjN_9(`BS z!S44R^gI0WGnmDBdSpJ5&0_dmE_(FGL9iCdyt1DE{=2wPWkDbhh0IFU`nC;(`)ry4 zyrJLOf0kGN z0o_+Y(wHR31w_D=TikYEzEN0mTib_e*!s}D6Dj3Fof((f)LA9Aa#?4ww`LA+esRP! zBZrr-j91{kl$|1NR@V9_Y=p|o#acuZ6ipB#x=^7)A}2e-Iwx$Nw~PF-Cajp}GCs;* zIq%~oL_Y3<*IFgZ)xK8$cSFp-9(+&wlufnCHx_%k=d3n)7GWc3L9?JFZ!Oqf=1Ef8d)HMiLv;?op z`E?HxFhbk_OvI?nvie{QeQ5pm2-?3o>1cZL!|g0i?}XGBlJ&a8&ZkZHpT!s?Q!B@K zdsjXCjY>0LllF9c6k3-jW4D2fDtB$Rd!^0_^-x-q$O%TF6Fqqi2ij*mTSc)44`h;t z_aA$UW-{@*Y}ZY0x#=`Nz1#zN6|S?xte+Eyp$CS394w#VI<+VT zG^rh0lu)z0JnUicC4@g=o$zRUS$C^VKqu?cJ0NO+nd7VAmG~!+O)YG!3!BvVI_hT- zPn$()-8?8SXmX-C)f}#ok@us+MKX(guJy*nZug(S@=NfV?M1Ji(e+8)GKs?2F_FD} zss8mfOjhvYL@#a>*X*kT3-#f$1iuOG(879&osqXf(RHhqf|fwyLkZIpw9+C@90na; zz4j@bqsA7{@#B;5Q-gdI_(CDWX>?j7Pr`c1xSC1LcFfqOeU_}7VOT(kzG3o|`R47V zVz^E*LzkQ8&zcP;e6z4F=W0=bBmjaFPIw802y}n$4Q5P9*?7xQJ(!El0}6%OQGw9kCJQ&8+pD^vG3Pcyn|~p%k^NreO8D_ zS3Kn8-mrxI-f0jDGFaz$AupX52_A)pJHL9(^%yHfG(d{ncJKYQX91Y?Q5vKI<8r^H z!^Mb%NW&5fa?x>`7=~Q0CFBqwG{9>WI#ZUcL-2@O3{vNL7 z-J~l1I&c4dtir6ty}!FcrVjOfGlfl_i|sIw44U5}UQ}F)YIfJV5BIsH6%LP|;wp?z zB+HTuYYX5LXY!~{ZCA(klMR#dh-}uX>_eDa9(a<@q&TJQd$<{H(3Y6mOvl~v2FgdY zH+~>Qr}&SB^Y0?67}q7_#=LIdacx=`+U~}t%aU&Kh!owKO#ckY`*UC#*yvNBO-F`M zY+tlHuRU{JdK*^vsU`T;b+eq~NnUmNx)D5iMnDYH^3?I(YfX8YFlu$#uX=74>5~sX z?n6r%jN31UvVFPHGx*qHv8#CzY-_yVKrLy;q}xNnuR#~8ReQ4K=4sUuys#1+PV>*R zu+8q;g2+J3H?N^I>X;0;jvs>!Ez?>^X-8=lF2uGCx`e_3U7@}jDH+{u%mw`vbo-Ztnl4FFZh}4KHb+UI`csgb3H*sKCL;}s*2S* zdYiels&y}o!)31dq`@qAN{W+Mh*~{{#-Ey7hu~W&2yIRV~pCNQ~F86Tj@ z{REG{X6v|}vgm2wRW-YmpCw8)JaIHT+5hU%;IDTJeILkUCKeUZ%nL09wzN)O%(oYL zJR6?%qN=vA43%V@?>3F&gJ#O&@;HCk&iwMNhzoO}!@h(IyhJny1_rQ&Xhg~OJW=;L z`i>mFz_hd*T6yI271#(;PTtj&$Q_!!RdTqv7JcODk(F1Sd_x!|p?`mN?IbI#BDsDM zGo*^|10?J{JO*b&d@N{~-ors)bg8c95KD#6gmZrvlpI2Qpxp!$Ua_~$d%Eid=2u&1 zmVLiRw*E$XP|mmvJ`$-RC4Z&WU|AI>alupLtWB@+7A4?znDps1pU_{3ZO2CnNeDHLLEhzNkgYX4Rl3*P9tX};!(I)Tj z|3rhICvS!KuF6PSfI7V-a+W{`f1cd?y9+Q!tPgf;DX!7{VWQ}4=|mFpIxe)Na7Lh2 zLW|j;hC*7rdv9r5U1)r^HXceA26V~#S`Zau*`2`GsUk3^s2wiHD49iT+I=;p5$MxU z@BIu`k#bk?Z?(y!>fP-oeWAYI?NkSm?L*r16u18|h4e^@Xm9DgPW=EFB%!IiKq0o6 zlR}Aun>hXY8{ZE1d|iqzUXe-=Mvyub`Gko7d$%`!x|_>@K$GYAoRG+-Ydym~z} zSQyVki;&-Fno+H3HWk0&lz7w3!S+?{t2OMCaqxB@r$+np1fB6rc#jftOM!qSwF%4* z^@f-NGdwj7_PS0f*^DaGc~N)*%YOpqF90^zT(+QxmxkBi@0&Dv-N_HC;8+9VRJy8i z8Mt@uK%*VqcK^ugmOz=Hj99J8$w6j zLgq1VuQiCbv!MP8DfqzB+pgl2Ev_1i!8wNy#JsjV>-ql9O7QLQUfsxYcW5tar0R`| zpUmwRh4v?)JBh*P1FY%^;$fAIx|gtv>1*NGe;2>;2N))qOaTLUVIr~6hy;-|W+%=i z)5jtbz5C`9G}Oy5Vf=Ji>%54W3Hqq!1A6_0zj+RRFfB>TY&Raj=|mA=1xELB-b3$s z-^hS#poz3YBYPHd`8fS}4^HbHDjL5-g8-1LANsmE5$NoMbHc8T2h#sMvRoJq=}(aD z`8%DdNZ6dLwd_VgfuHw*vXiIY80{(02+Au6`;&JJM6MR^Twbb>OiU= zj8Yr#_g=Pj{CU%33hl((AHc%-fDxXpI)LLtdYLY#?T-DX8UsCYU=C~Pm0Hs(>FWrj zYX(E#S3o46I1(h`y(dagjC)I~98R6KyCG3mw)6%B1z4%l`T#!`Y{;Ea9{)B{ajWI_ zv0@asGW!`2DkiyR@YzOh5F#?mq{coA$JAJI1yKI@gihR&>c_i{7P97|nO~o*0&D0= zp~asE;RI)oK^J&}D>u(33#$CbBuZ9ylW_MhS?{g3m(zRZ6t8rWL<^(rd0g%iU}Yu) z$USG2;XHI3yHYC)DtGKggy@0Rzq@4ur#}>#du+c^+&+7<6}FyM)1izVJcl~`v2D&N z8`Lj-7vUzmoFTgJ6B5!d`eX$t3GlSG$J48*z1Yt2B+=;I?Dg;6r}LeYx3Jowu?|e) z4uMEAc#;$TZ{Fv&YF^}z4u)1Nzd$Ax`WiC4MAzSyxTsVJs4$NL3L&rd31H<|LN$ik zpA$Q$VWfRFSug*+m;-0yte94I(M!UGgQg-WLFqDdQ$*wQ1j;l{@F%$GV#nvKVaDfd z>f$!_&|qig)L&`e7&R?#?977#>v1YorNyKX6~6^FKaW4AtwU<2Fz=mQ#R-% zY-hxWQWSp;JP_y@HMWTv5fO=Otch z9#o{*4Ows}yw^%U#vJOD>;}4Slv?t!L$|DI-F)9TYw_COV~Z%sfn$aTyrK9Nw|hj+ z0RmAOSf)Pn8t};-qH@T-s0gb=qq*45n?#U{Gl;+Qun;ax}{xYD0MTP71 zRVIISvmg%HY#O-MlVFwq1zM}r0vNlsb*wYi_r-->%r%_#Y&D$G`h=#O#}MvUZ;W3& zh~8m44ZGO)F+8|*0$m5@!T~Sc)Bx{bk!9xWt2D;JwRFd)-lvHjTA`(g_r&gAE7qVj zB0Q|I%l?*c+(qAb?iitkiVYV22f~w&75>yhQ*@EBJ!kLRgedIkKLsF2wz3{JhlnJ& zh_hGw#?}0fcDWGyfKLxRIa`YE!H&$JqCjM1kSnRiY$)ni1zbUz4SQl>E$~){D`*Cw zBu*khy0AmgcIyDG*|}&}*1<{JsVM&y5$pkTczO))4rY=lBi!uJby1=kxeY(ZWuamJ z1MiCv@&{Cb2r=CL=M_bYpB_JN??Pt$nT}|%?a~dwG74ffkA+UKAafulYfwkNeKz4; zF@JtWzFJ!uxs@@A<}c14GS;uzvJ+tHLf2nY1QglOy6|5rVCt0wd*Xbr2GG;ADHv_P zo@p4qtubjxVrdci7*cwG3j%lL<%0i~P@%bKw)E_1urB7!w2hwi!MIMls+jTNifOr9 zhBNU$!SV|?f?tZMEZ)>%W0Ai*ifpALquvYemae?~4(`xJ04L|xY_m7DuKPn4FXI2~ z)&aubNu4i#MJaZO4ha7Fz?gfem0^m;6++VxrtdH&F@wFU!wD8(Wus3BEPy;cPtAyr zKr=DtRMEH?jdGN>&F{)@>t*Dtym1Hf4~P#xHa?|GVqW$H@9Wh8 zGd1KK8UQJ<=ZKm84otg?Dvk5ThQ;U5;k2f3vPrCx1yZO<`0#TlvP8v@k6T))8JFiR zP9giWXH8+`86Jl;FpI2fY*6I*1kz$(St_kq#l>wte*wT4G&}HVd&F^so3Ura2JN_P zjHcLLmW-Z)!qDoKL~hiE_xCD&VE)&|)4jmOu^Q9Ay1nIB&cxP@7dKMAxVz92^_+Dk zV4w3IPSGQpu#j@YxZ=?#OzsYbDe3Qi)dSFs%jJ+Nu+Mre5DD{iOncr1tN|xq+y$Qf z7256F=BB0w7zLq`y9>AvAQN>fTNk|6MtL55ed-OEg#;=p_Vc% z%$y;P{Kp*d1+3LF@S0>gG+hl~-7$5?st-qjt$RJ30fX?{yNGf*nfSo0dIgmti5Cx` zEe~o?l+oTBmg>pL&tLf}I7 zSQzPG)g>9qxT-cE)f7}UX%YF&Cpw4iGSgy+hc_LFAI%CZbnHm%1B_!G#6(uIlIFOG zBS5F3bu(>C%x|Uah``>F8JCG%-`BOz$#cj(4tb zXEW2zODf4{E8=0#P~0!4wgnL-aLPE%pO;}@++O0r3dq3=yvQx+5bQWDzv@H>#O?m_+u8c8zG*g@=qeWKmbBCF9Hxlmg{<#v1r~1U+$hTEF5-;}Zg@vyt zcu=WQn?dJm0*QTtaJ;jIPFpPb$EjP2J#KhGVi?*uj&eXgpCo1E;7Ht-+tD4tOC*iu z2(sT#3Ny?~N4Gy0aWU{Zo$1`n59s^V@Fd=_?eARIa&37(J&CCZ_(D@Ape|jIP5{A6 zhPYz(804!S;}l-tImhp8w6x3Q*LHt)XZ>Qu|3t9K;jZ$9fdeL%;6exWyC`4N`7f&k_M|zs?Si$QS}tq!&=|Nk+}Vy zZWg9)>gxi%O26u^Dv@HDXzAsagbDE+wNvp<^lj=Z1?hNJh5O`HYz4ffY6swvK@f&_ z8McS_cB8-_C_F7K6yUTUBApKdV1<;s#ov!{0>R`UCz!HelEamK9*T@AIgInLI!S{c zFge{5Z3F2B#F-v%4@wC-OwLNfy#6jjG*fX+6|ttdWDw(yL=o!7Ym9>HwhQB+RiHW@ zWMdOS6q5A(FafTK8^rTbp~yqox6pF8YLc}?*Y8NSDI*=-73K8L?0NEY1`u$-xpBY; zrbYO)YON-7b4y$yjc@~4g@F(OHtLE7Cb{aNJL#S5XVZD(vX~#d4~)EXa-KFjDx|W| zw3?!2?j;?RMrYovG7LzV4@fuQj3>alu$A}|C&mq5kG2i`?dK)$?~D!2j6rA9iQxu` zHQgpfB!g3GN@!&4A~l|GjM$UA-p#GPBy%@__p{4{R`w4HZ#RBCqTj9om7(f0D*5qsA_6Jp_MO@@p9oe-o<4mK zSAdZ$RSgbJFuaq8hB%`E9rLRLg*>0NgeBr?8l=dLr8H{Mh!@WKO(M-~JEDfJ}ySl92b z*BOI9;iaX&kI6{MkY&|uM?}5lR*&~Q>><~+%N|1u?034vIM$!8@4MGu4gxLHuL)iM zIFE{_dP6Jy_X&WebIY|dXm*xdu;a$BI;$1ZnQnoDPM50Pr2@!k-+<7kk9nZO_rG`O z+*c}GYZ*#!eN)tc-Gki$QE!VB-}F?$dJHJOE}8;E{Xd}Be?|+>!y&2+YYL4D9m!n1 zzt=Be=+EpE78W)J5;j|d>uGmC+2et03qf@1!pS81uUiehHQXPrQ{k2PJ2qtl=FwEjaGNb2L!=XienVT(S}#Xc=I_31T9^Vw(RmSnjPov^z!U#%WH{>!S%h zH=o;a=YeM28$Z=;QWSiQWMoO2=c-v+=+Zv=J$?`G03L(R5PkfUX%)cqJM_a`?AKPo zi-XmJK<+1ZiF{@69ea^|gwO#nFs;JI27`P465Q97$$b79PHXL0$EmnO7hcvFn&^9n z3h@>g-)hp_V%kkdbPrP|)0Ml;KQ8uWW0d?5ggH!KqyELarN16>6Y>~|YeeRl1MxoLMXpTS- zs59?GGArgcXjTz3IRs<=RcEZ5kOjyF|1cUUhj<>V+^-=>7ftZ;)-$g6)~7annwg&c zZxjXG$`Y6bK_p*(pwipGZ--7LQQW1KvsDyRbFPfS;%`LtOuJSX;HeEzKvuOWjm8CY za}~ooo>JTU+qtUbP~voW9Jy|jHuS$%4YEJ0_!M7V#F;&awLZZ~7imfc>6EMol|C~3 zcXhCTz}cZm@4G=MH4Q`L9?yPItP@Xaw3KtG#>RnIee?IitH1@g>-g;!P*c(G-F6F` zO_~3fTmobT*%(?WsC4q5=c8`N<`cMOY4Q?+1GjAOBWGB+&bR7xLx*(0ZGV8I#c28j zF^M9oO*FD4I=DChdXVe+#07JT<)>&;@aA+ zSc1tvfY~`Z-qpN&v9dq&m<70X!40dbxBE7a{om*LT|$iEw$HLN?pbPL%@!AFF-uE^ zn8f{JQ$&$X!}Zs^TK4Q}5Jgln{?8mDnZbs+l@VWm90UJJtuRyc<6?Cn`;4$O%MrO6 z0tjFP8Q_p!WO&Op9G&}HYt2cA^Y#?Fe+UhOYo%2|goS`>pH}qAzGG%AG2Df#d<3(} zWfW81bV= z!%J#6N&tNU&M_m14^!&NSP>h9>7O~kxjhG0h=FaPzU@ldkWTYx3|;=kO9U~s0SdER@%mdgDQXW}-s)De9-BOjzV-q%BKdZ!#e zFmNY)l4fq+xGG{>&xe8nQu@~FK%#N@?y&F$%L;)MfYh`hcfi-&jRSf$UeF8m6!Fl~ zCed8ihziIU;h<}Jhx@7c!4b?#gB09W$iBt)iA^HppSrUaSsueGX>3yTCa}QnBg>DO z!u=b8H4ISlijn4kFljFkuVpt(KC03`ahD1H&$h(*_8yzOMr;ts%ao>bPf*E}I#y9t zB*Hy#W-ZI4<E&{|~B*v2G7oKhZooza9@GK|@#))R%0?q`z8nT2qufzJ| z*diGqS~p=ZdSPN~^9+~cF_4}8R}7ou(rSahM1p2px2nc52W9`YD|F=GL3-{g_i&;) zw~EM{4*ieMOB24H>);yrmyU%0&Kp!S27dd3zM`7Sru)nNe{n@T$EP5sVx-Q910V_* z0MgDB?NVTq*3!im{>6QjH^)WH>hdSX-dMPMr?c7_vSizVy_(~^X|AfqDcAL{m?7#3 zBE4?tO@OrReV%0gqHPvUg+xw{Hv-)+D#w2~Tiiyt($Zh&k*5z|pui@&u@YuV|Bf-3 z1xE@LXyR`CZ10Mz>ZCER-T0OE+ZQl*Ng#4?bJ@<$OY}7xKhO_H>8yE!srFCruc@mX z2^!Q$YwQ>a475|uF}{a;Qrcqw7iGZVBH3zN_kSn>5EdQSLN}63b1KeGEMh=`8O>Yk6T~srRDHXP=a)7P}rOJLKCtYn|u7vR;(S&V|C~hE?IZzf*W~%xuEqYMwf!N>dLGQWtxJ83=^!6U=g@H z(Njd6<{ETep@(bDI%QETkfp#m<^U>l5lt?N5WxXsz85rWM=i~omI0Fi=#oV85RGpbm;+=XTPp(M-1{7npK7^ z+`&|s7kk{n`5OA61a$;oM~E)=_HEKCSQ0@_Y5AaM%BHAwXYWKyP0ZHX45$C1bt=s3 zOGE)Dtb3qx*UuU2jU$K%NvLg*nIMBF1D!MRm{hh?jrTiwZqL}rQ|sENMqeVugYd`B zg!ncOzleK1O-+I=yC~rSl=WiQ#p7;!wbAFkigmFo=X85LhKvClv0w)ioCqON&okHFK~Q`i8$A+y;+@(r=dwVclX?gPvC90Bd7e2|9R$rFaE#wk5qq{ zG~swUgqeXV7NGsV66gX${q+5yH^awxxCX4~vGTnDhP6NdaJ(UnGy3nBN3#K(LCre~ z%KjICAZ4xfDY{Awgpg`r%YFI>B_+Rx>U{Xv_`mKththNlY*hua@POO_($uk?pw?Cv z%?PKv1AKBmKOr4%zdd<|+gB0Z;Fuaa_7D@5dORxLE!{JM`X_xFGj1$%DG;=uJs1yC zONcm}kluuUx}?C+0oE}ZENZMKo|p3wq>e#-0La%G+HO|X$5DdHSr5dohQX%8fMp(Z zUioR%R0ZcIT^A!f^(vw?fR6-AbX!KCX6!Qbgc{Ubk>lnTa8>Fg;O|0K?E5&C?H9Ks z5&YcE$L=ub5IjT(@LM~o9sB{cRR;iDwSoiAMX{XBWOh4a@B79- zQ_E>urKSc~>Ihj&IqHKNY*V6i=7uLKrQaBw9&(4-#qTV zpa{4NE>qglgPq!OU;1v3>Z$n!D@X@(fs7mS-{KgoRD+vT8$YPu-SybhhUC>3j;*;1 z1L2MY0|vVlz}r%#5PbIpwQ7O?nf(NQJDaH4Inr3oQS?}f9ZVjCxjU=i0vB^S9tLcF zh(~?x0@@j@3oW9_^D!|#;w`StYbxyv*gy<6`@iH5{8sK-?Qkpx&5~SIX-x?x;|%0W zUL>ZTRiA$V>KNVyQ|2&|M_Eo_?P+6A?iw_-zrXoi%&KyhgAbMW07 z&cQPO-3#D10z~BRydOMjz>1lN$>==*K5r1s&ji+5hz;PaODby#20h2p2C@B4Q9XMG2k1P>nRC~iFy zB4}EVDX`7D`jWZV-@&%_V>GhrLNR)EN^SjI(&D*BjWEIPJo4!$ud3--8;)v;L1L|X zcx@_0(geZl5}MpujqKdLXKA_IXn~EcU&t5(;Ds8go!$-`jXka|q~3Z{PWvP7!gg%@ zT+^7JY5Bq4*!UBt^0$uLn<7CLFPp`A#L>509b z?B2eJP2z5_U~kYYi@_YVKOfWaF^@<+vAI8#WCUjQ{%-Av)tF~}j!5X`v=%9e-ZEdM6B2i&BwEI5B{V5&b zX?jCeP5X$JI>0w+rt^VN_$9;!UixQO+n1FlzN&n-+js>D-jmA>N4oLHr{{+~uDb^E zYfj^fcONU*x?eQRdokd2JT6HT6L~Ak3r0b2gSD# zgF^O;JcXXfH;yfj>(n2o3L}2y?w?><4BgB7WsGzXCvy&q8%?bky9rQKv4JVa9l;(X zi^uV#5fAk`J8#Dx@z7$=^=UG4HRj0?II>)fn0eLEeW=?QiRWzsqSg1RBSA7~_4v;oYf^=oK0~+zLlbR!!2hr3Ex3s8x znqqApCK%ch$pm7zMg;J16js(L|_;hhuWF7slZjEQS7NjWFT^diqMjX<;WLg=94aC0KH}gLApBc zz~%$6mg{%qcH%RX-E7V)ifp%S`^Nj+?e13zYwm1X|DX20JD%$Hjla&9vMM7~X33s~ zc>vN8t=lT8j`}g;HJ^j_| z_>B8=-Pe8H*Lc6Ln-0bSCv*TTck0!v#6+GV?<>y? zekEZ{@(ms21-2KIHQC=;x{Bry<7Pa78E_f%SFfNP@^e3({6>v6K!U0A>{>@(&#R;T zPFH&)lrm8KZ=V@GKU3qH@r5c?nNv9P@iP&R5j!f0N}?n#B9izduxf+pteiPM@O$kX z0dZd?QP`1_A!=B&&f~{A0LL$;@oD+7QW2efeC^MMs7$L$e-$Uh(K-i{!tT9cpsaKG z;h^nhDx4Sm?UD8&njp5KF4k2dcWBqE*jnZUX3 z`^dfs?6$=L+f?I@1z3XyoOzi~vnc@nQYgLmQ&qhw)&Y{s2_0kjhAnb_q^|;GMj%lt zg?q}C&8VJXadI)+5Mi6l(w4iCsmjVI3;J_%KJC7((<1hv{gbEXlxM4KT-0yQ#MCu`|a?aeT8N9kB|@M-jypc01JE_D=voX2y@bbAGN z&ls^hg|zUwcg0qVV*;W|ul{7Jop4yCP68a{IWDo&)B4|wwT4&QJu}w(ySUB7<7ypq ze*EQpD(hw243Rpt2=moEK0Xl+<>V8FB|hzqc%-`ANXEk@7HB$cQs&^wON5pxFRSqO zdz=VHRKcyp$qxT{ra*efDdOG)w#sbiuW__ zL*4R=u$V^VAtDYHDjbHD+4lAq!|bU++`k}E)Kumc&(OQ3Q>h~M2CzQ{9SDX#)K8QO$UC?~zyRXT z(8^)_$OiT#18CZXSv}*eynp|SRRs7dRVmVdA^4yD&6mEsfy)u2qYx<#B$M8 z4tv4&qdF-wS#GJ!Pi%NOuFNGW`7eD-##&BG&LU-j7swQMSqi((bO%fq-CQ*vP}W9b z8sInXP5VTs*=RC4fw3UpIpT6xAn=Kk?~fDnM%G=)*cNicOp|C1g9>rm*MI5+q;8nM zLcjta-o{)tXyto&@lY^BxrMc-oAATjye6Mt{7?;?tDKD0zD$K=S$DyiUWI2z)LL>y zWqNLClhCCOneEf<>6!Sg$C?wE+KFpYst*2<>|Q0bLsaFHvzHJz`Oowk7G<=%7W`lo z0;ww;R%b}l9i!WxXHaC|bQgG}I{x(8$fdd=9Nj%BTyt4p5}t_z4Gi%N*O zT^>}|L_d`AZ`~%68suWT?C0NAqEEIlV>Ue=47{FyQRP?KIRFw@I6`c1^{vz&URV^>{8cX(252yJNiLf}uvOo(TTYD=C4(n{1 z9wpyww91EtJI&joZe*uf}ep_lY{92xJ!GRT=ZoyHO5v4qRmcK~xk(XgT8gyzDJ_4KKsisAwS^ z{M9-f$I0dEtDe{5$vf`t&T#Fw~in zb>~Ob2mu*2C>4*dL&GZQ^xB*ae&;#1u-mhB)T;}7F#}`|9x;8G7+Db@`^|Jgrh4Of z6mRX_Q>hBxvIBFyB{mC9cX^O}b}On{Ypb_Tml?juQhnrhIJrMaU;2tM+uhgF2h-(P zE7z3K3zOd&AU(o#q(08ACQ=Z+V`JX2dX+o%=Lux{^7V{aohqF?cKmQy`n_(-^v8uY zQv-to=HZne6f-^zWhBfW=<*LNxEy8s8%;lQuyrJL$643s%m%|Nb);f<1m><@di

j?(uvAoJz5HrVlgu07L?Tt}6q z|d9E+-oU!KR;*g-`K~iJwJhD6w>TKjpe83 z-`26&`t6OO_nSm*`?_)<425ACl;N`9+V(ZYIhpd7xs~H>aAHQRQ|O7v0a2rU^nTPb z)VxwM9fZbhX~Kl+kqB>_8-#H3uIdEGj+(sy$a9?%3N=TV2awqnfXuG*MUSjcd7jYO zXguNLrk3vpr)4I`IQX~$+GFxqx8naM9uVfjy#hyiT#q4z34O` z)od#FG+-9{h#vcwORV40jR)#N$l@)uhDjm6?Nd?V#d|7Bjl-&*T%?*(*LzO==gp0W zUwu)7%z!GY&%~!~V(#6l-H*!9*POT+z;an|D+mkio;o%FzaN$)IPHOd&mn%FPp8|$ z>-XkLi&?Ht%_phYs+{|ACY-oIC; z_g`5r8b=v6#xn9h9XCt2ll--=MBD>-GxOzm<9C=2el2f#)MZao|cwMn28Q1 z&juP4)cuaS&~LXw+=Nw;P54T4ahrb0x89FBv3^F6XPlWGr7>T~jp{zxOFug)zo>M# zn;8=+a#fFMh~;TF#!~_wgEnyMB5WN@c1nb*35E%_#gcN*zV70yc|k4}s^J|cKSRsJ zYk0}R8Rc8G9b_H3VFhYoTG-3=WK;A#1Ljz4PW_XMTlBGhmEn08UBsz>KKj~pMJDN~ zY#Rod8nFV<-l`CsOm&7&zp>Gr`q=W+c}5{9#b#!L`Kz1Tmo^F=zMa^-?onTlyM3^< za!C8xg^Z5xXqLR?%KxblH|s?xqBm!Bzp&|~Dzh8_Dn_!O<&3loPn#2%|Iz+ID{6}B zew5*U<8tBfAi*J@rD845sVudu%C~tp-}IUhEA%c1NcEhkSNZ|Vz>}QKNvqfFYN)IF zkdIcRe3(nPYT!2iVs%R?O%SCr(WhN&{5`f~S=qRyV6pEhdz{Y2S6(jI_x|09uW-m` zwIQ_Ql_ix*^V2euef546z;$xHln2{6(z9-gS8&Mc$4JHsm6xzaH0+IbWw`Oqo90HZ zX!0waoK~5Ebni^X4fd>ZD zexyPs%E2n=c;YnG;jX@$J}&Rjtr0CwXGOnu-I=reo%fBgf=D#lWpgd|o|x+x5qFrA z%UHZVZ3itD+Y~UxzYxyE=CN!QG7;LG_jb&I9SvovWkvdZ5*bRoYLm@JuyrtA1TsSJ zk5eSir)vMjA3M3}yu!?+qwi-p27;AD~loH%NF`+O`!i%Xrx?0ep| zh_P=wM$)sA*d;Q@p;~v})$uG>c;u`1l70g#<>Xfrk#)8~4wS`HFQsy7thwoPw5{_> zV-iJjgbpUL^1tQKW?t8oMqB~T|z<81S%^h~Qr zHoIE47m??^4SPjcpgBS#d3?h&!g1R)VV6cS_2>vPew>wZNfmKYZKM%W9N}W|Bz4b&X6>G(=Zo?S9Ws&*T{hzT9)d#L;>s9^3b_WN+FdrnlP=G##!MEIRYB} z^$ytkNC5K$K=Wl}UWR8*>M=GRh>v4xaQs!cn5gy*#JDie9Rgq7c%u z_Ueex&oK0TD|BL6L_JN6%JXaoi3Y_DF@-RtRmlO0@_ziD+!K`7PR={{@ph^e&Narl z`G`;Prvn04=$mZ&)^iDeECZXQ8rSjytM5S~9!Lb1{LS?EV&q&nvN2|LPl3G0w@uox z>(oxBlo?Z%fXOccY-xFqhBk89txxW1ZNc%Ex+BJVKTKV)M7 z82Q?DsG>}-bNC`1b&yYMV}mc7TZ(&P#cdrjjlB~H*^V%jE(gsoi}g~VcLhmriCKV0 zPD?I8eN~!RtN`tw1EYSk=8%fJ0Ng}mX^TYwFNmu()2f^UxY~)K@2iP|Bb64s&VeGb zY-b`AOwP8)weFj?Cj9%0*0y+b3vzLV>wNXsNeF1-J^vt);A*i9rDNX%Y;0{BGWvsh za{3NkCghb>Mw|V8b|KhD30Nsa-xWUT7o)lc?)4f^-5%q*q}V!uMnAdYjKsr#zE=yr z*UGyx4OyJS7Ql_Ua$zbcc+PGR?J0Q)Og}KfUBl9s|26uPdnx6|iHKQRX+ihGH!Q({ zfh&1JR>p{%obVM&J^wu251!uQla8E;sg&l8d2wi;Uw)u@5FM!Zx4A4OqR2^CGa(gD zJ=ZwoZZKl5PgwkTmfvr?6WWdJHqM?yhPONBHTB^JHG=OhP?F*bkPq_@${rErqkHdY zbP^IeXE<;)4lPO$EW)Vm%@D|Qry*aek}9e(zy0)7^S*P@ZBDet?L_H&AlA1#faTQ7 z)gf8-PmRqShMT8KGaf<9ZRCw`U{>tJx`J#LB<6hv1<#56XN?quM1p0U}&-K zUFd^-`U7%Kf8V0S08^-)BS37%^os$wei3KoTSN+TH{`b1WB;&wh}X*?n6sz(9S9Jc z)}*4gbN_8Q3gGX=&tdoeYvTUZzzE*tM*c4uKSA$u@`)3*4R4<%a0wGTZJeP5 z3m6Lg#iXTN?dIGpVUV!e)F3qYz5CCcaJD6YQM4&WdUfo90%phOGAW}orz6~sRO8KC zCC>a)m%-<#BFFVMfR~yvRu4S*Eb~ug4+z z3it&`L=Bnv)uYOdEJw-@CHLLP08dQQB{mXdX5rXiO@6uZ$dm6zLU zW8l_fvQ8Y`?xU>{bk);IRw9yx3{NE&B=+&fXg^fOMPg2UMQGH26s{QhJ{4GQr%NKg zLCPp;RP~7lj&?2#+6&}+hyUxu?~nTMX{0C|KFtcD#l8ZYx`3@W#=A!VDO1{jpi@`E zw+lBWj?@W>vlxgQIV?a;L>mE7Ex0;8c9570luF7+EZgp2egWjB39G0=%(pi&5!d$h z-e&u>ov!(@51-2p)Cv%ljCezBF=7ZF^pcXh7TiGNd#HgU6!hiYPAzDNbK_o?>G4P; zrl*iMJc@@YwA$t;a)WroYP7AI|dwaF|0b*&zf4Q@_*Kr(B=^yQ|m*Pec*{*LYmlvum?3jIgc@SWDj zVbloO3z?`Tqg^2$`Hh{S0b-;_CO&262R*`pB?$%d1aYXVZc7kZzo%){1&8n^y&pMa z7L|dTxcaSivo_!#`B6w9%jF@~fM`!@Q^^es3WTcH7n4l4ieV2jSw9n=Ptr_8;s7Rv zDoV%2J|bdjka<`A1`qwrpgH7>*hXo_>gPBoRQH;5&n=@In&pN|ABDJiyr{z&lK zY36^6?_<^Koqw!9^xUBL*BT`@-S~f!9;}*@OfCtcHTCCvWK@kSdL8ZXlc;;yMU=!B zlC;SHR^pS-1vijEP2j-ijDxLP=2d8H?D!QZpw;!B_Wfx zG=_mOR0@;6dDeiSn=-rqkIWzw2AZ+ki~{iVHOPkClxZcoamHEU*w;hZ=l{8K8-O0u zms7)$-d1FNLeMn$)fDevY<>$zAHgmNU-f2b^1`=&%TRVvV?&S~Ie#Nvp68sx4vH4u!#N<{)9 z#WY!vd1X;iRAuL|Q)zLo!l9Z}ll7HE3jmt@nI(54fR2GBCB8B(0`YQQTdbeCv-ur= zD8}DKZoHW2t|9|U>q1GH4a!99-pqrNYKmB}$#uA9u47IVs0`KQ0`Vk5ifaOTTQLsS z?@#E}DCx6yUCyD0#-wdcMaK2S`Cdo1lZLJ<`@z^>p>dVO?osQ~z2ZrbW_5ni1Bqy` zLrJxrDG>w8^uRI#l<9DEzwPR+4U%fyBySKL${%<;H%HF1maJ5BiVTw2(F; z^i__e>o1@j4x5_>igy;xD%eXVf5^mxv-k&hNfN{ps3w$cDYTIeixo>zN_5NT3r?O( zJ2+!`x3yuBOmpgH+8YU?n~c1~`YB9&(^q4pFCHKt4TnDsmHkMMvXieWY0OelL@V~X zxok=x2UC;Aq(lu9Z`MYMgh}w*b^0|gTfxKi1>$V|bGPTh0uam{#OJEBopw`nqy4ED^OH}#d5Nv`4K24gW9`1;S*Ap^aW zpkdJ0K;pom49gol^gvN@r!(NMEj`23u*ySWf89B;5AxvLdQT&5^}kLLBZj-M@`aNv z5Kac@?iGx#ajCNYR-e0Y6WlI>hD4i(GhPmKi75@2GDeQ6rw{@p zq+9xc0BNC6)58uOxA3{Ffa%i6kKCig2-jo4@0)~KlemaJj^R;pklJ^0;f#eF9BH~)M(l=sZV%BPMoK|>1r@_qHlNRm*xJJpOVJLO3c zHJM#dPhR~#A0r=l9vIJEprhXS{rINywGsFWG6qMGxpR*O7Xyl5gq&M(uCjd|iQ2bn zPmn2C_EJIAb|Tlzoo$ubB6aEpZH}tX4T^I#;}ioyJt@_*Emg7ON&&>Z>j_dIxv(wL zH5ey)YwW{hhiMj2MTE@$Syt_a*eE4x@-t>VJleTxX|j~K{4cVmx;1=6B)%gUFD#w- z^z+>L*DMQ$mlHT~Eb>_pxd~~2>uLn%sM^ec`chI^t%u!vY_6!KxL0;rwv#>GnQYlw zJV^lqVATvxiwjr7L2FTM7AikIAx*Mq%B08vIMwPtvODWNRum~B z&uzJwCL85hdHv%w%>_Z`7iup_cmG-UR-w`|N0&~!o`uN-906~zZbl-oMH99uErj&E z#(Au%u1fUbq?uB^G$CzKQaz*dtMVdmNCQ&u<^UmVPmHf;uo@0lNFVx+Uh{Vg+Nq6$ zb%$Yx-mI?~D_$r19jZ8YFP!Nfwd2v=8vCV<=_HHQ!GfA$9<3RZUzHkENDs1GwO`>; z7h{)~ZrvEQ9X}B)-bb)Vl0^3ICZhW%B&AG;HdkGq`f>sCFDcyP1YPT)2f_rTI2)<1_N^8ood}Nx`XCq^b2Md)2g^Gy8@z(@>wV zJ*+zH?BAs57>Hvo*sLhMd1~EaiSo*xJuEXC=g(dml(ZohAsb+DM}1uL(%GCjy3O#< zsj#`0QFsw5b9tn^ISh>$(ph2$v8P-x{L!k56R|HX4XVlUC| z4zL^meG6~?b{&R8Yaa&Qv+PDXOWwrTmL~T5H3=GU7Y3ESX~JKHOoy#E#Q>14<$8Cj zQrLaq``DpDiWxmZ)^sJfW<~W_Hpk`7Y^KrnO%9}!Du}5Q5=YwOU8}e#SxUr;0s~v8 z)G`B%c_9sw0pR=05wBk&BThRpm9s;+4TyppN0>jEG^O$WI(VFWv18fN-=YHB&wEz6 z02}mT5E&r`Mo2A_F0Rcd6W9(7C;)>YWl$h)mlO&NBxj=8*7mKMxt>##ff{7(3Vwh) zrpl|PI+b#xc%I<%smeE~dvMlJ-7|i-3E)GJqWJse#lpyz`<{KKhRdUCI{A%mx++@; z=c|bvu>pfRUo6;Db(0u!a`U6)WY}JowX?>=*wL$dj^QFHyS?6&cAB>@|5lU9D*$K# z?Z>kaorPIhSkN?vV{_9JJL-oByp0R`i4mcWdPvRn7oB>B8U)4Z6g8s^kJXt@=v|9` zrOvgy!*+&aR^-D4Ze!}qF6U0Jc1!e^6$wqjfoDJ?2XR9A6Ug#(`SD>{e|h{`Gmv_# zRI^%Ft>zx!$3qQ$I351pj~x!aacd>NkvJ0!U8r8nO5YH7zd!Dk*f~F!k?;|_a#gV6 z?Vg6Pz>JottJ`8HAk75I9s+JR6AgZQ>UBAsUJF>U*=xmCRf}_{2If)|Pr$5GYVV}D<`(#AgSnOz^J3(@Rr&9QgKWXP@(UfaU1_rTy@?3^SdPr~ zCtWBX6Hg&MbAzwv>%u7}llGHE%sL%5k~IzfVaMweRkIL81{{WkxCN_dlS2-7-b6qz zNQcNm{f|zUx+)VIGwQ4FX}nnC+gMyk)ipktXSQ+BeuJ6+zVTz0;}7Sqol?Wwq71i! z>qvb7#*j&2DD(+?LDv2Ahh)^cR?Bqlr(B1Ckq@>HO85?r3}8+bF*5|(`tpDBVNYCz zpeCXg`ryi$?hml)QuV#TTL`Af|t>V9R39^=Bkvy7K(f|5&*;f6#B#;uD7b-j>{ppXJ=unOO} zv04SiWE1n-F5mQZ+p3FOqib3k6)jbp^Da@>*ZK6(cGIU%XkulvGs7a3@=>Yz&fx1W zscbD;oI7lM05y4PcEAmV{wT2%{A2bvv*CsLZFV2^?gNu_O}WxL?yFYY7MD(8m=#!f z6^6*IZ~n2l=8gqgit}66P7;~S6qK_2dw41K*?{T zJ38@mc0CRs+O6HVsuceEywhHeUU5&+ue`3F$REv^yY`|nDVSx*8(npLph-U|KPg}< zxTfs|_O_J_dRBnu@I4wc6mHazXC-T4Udz0|wFDtT zGS%UoROzgFq6hv3`szugUJj1(_9?0f5=ElZWT3HRLU3v~^eYiw^C{zQ)X??}ImU|m zL!--~(x?D!PG7{V=4eA==gjA4j9!o!p$qtuYd0ujf!r_nXh$1tAhG>Th#E}_8Ce6$ z_DBqApf|yIc5(N%-jGx6Y(+C8Zn^?f!mAnQliwOo<*L~xR>B%;P=LLMpa6@*t z;7~8l-TVhm02+6ocOf1W79vp5HcGZx?gl)GgDClft36HSn3|GvDs7( zz!D3rTG4S&c+MU25TPZdHPulL)y2?JqTNI%EQ(sS}tR?-O?n4ysJL0dPcDzw@H!-rS%(XEL4{9Z{e>lGXhJ&onKIS(vD*^HKCC1+I<|uVE=)ch^I?S33kh zEv_^Vw@P2O-Xfe^A6e({F9RCzB+!5Z*oxczkgi3DBdGx^iRb3#C2xJ#Wqu3j!v%&? zlKk10{Pw2xT(Q#)+nOYO|6ZS>J*^an>syaU7?qN;x%-eBuF|Y+^hh|PAb#aF0U;M- zu!u`}I%ZQKlRfBJOBk(CVn>Du!6nDlceQky9Qc|T6^O-!mEVfqd_2k-I)%cCZVT(c zCt4W)?MBX4g!PEpV7wF(f~7_dGWD6H2~|gBEJiwjQG*9$!;2GRW^LY1KF<HX?Vu~&taunvtHx(T< znMEg0G?0v(!r`^X6@9)&4csBc1y2t0hcg75f>o}uxP^;?+xHCNAaF1{5+JOsb~_6X zef<6QqnKz9W@;oaAx@q7mvPgNBwDb*7qIr)Jt2=w|n!@uR$Bl8P=BlKr-XdhoQe z=*^;t$tFM<^weiNAtY%EAtgxJV9vLok}LJ zLvu=a#Rgv`RB5CKFR(`vmPrA;VWlZ()7Y;~=~DH`G;WZ0)G*NhwOr|4^kG5Zu`Ts_Tx^1|J_K_4;l@fF3!ex0^00|x*a!(C^e_qHC@3P#3!MtbF z#!lReyO|`2TOhg6!{2*G!$7n@pAl&*=SZi1Kbe-j+u(_Eh47;m@~Epmm4_Bxwy}Eo zTWSeg)t{v_qmk91G>zOlr1Dg9UgG6AwfS{6K~@;X*ON#hQY3rHQ#*@4y9xDz+BPAq ztO=K3+#f#QFWv6kQdPBKC;>8>$N?Ft$>w)9>uBIUF_+HjG^Qht76PPgKFz(1cFA_n z^40`jx7QJi!EA!?vt$0QRIaa|3`c-e$l+~>3y)t6iQWNS`)=AQB z9ddls*qN}tml~(W^@ZDIf95sZZ=HR+8a;HuI{HF}fzo z@aVhVVxQoqDC)}}JcUx6Vu#Lc$I&9q1fXFU%x8&ZXI*F(WoW9LiDxvvuA2EY{7Hn~ zcVpOZ%jbJixWWor7tmoZPe;y|eKgY5y`@@*mQyHu_}S^O>32kyVl`llw?Z{@%sDNU zf+}8*of@dP5(f!iOe7U7LYpQIpW@}jK`3voEciy}K{Fxcd(=!l6koV$ThqNnvhMbG zytO4MrZCdv%Wwa3sULx(ZabVV04GmPhFG^%RBTs!F#30>F%&{F>2@66g*<*(bS%H~ zsu{+s3<5>#jEyJo)>b@yL9I}D?xkZL-6p=V1o1dfN} zKN@RPCv3b!uNchwyGq7K(TzSKnPsxQujXOv(fe}a#QKky-mvQa{#T!Z4y$vmDEDyu z?nSy+#-0rf;@vTg2qxwO+xBCY+}?5Sun;>_cN2aqEUgQj(qWHh{opxjgq$((u;aZz z7xSCLqX}QgI_#@X$Q??3+*PyZB|`YxSZdFY}6VJS+~ z=j~Dv0HYw!ptM21bMwL!4myrjuHk~CV^{0??=*`U(A16L&2p~ZDA4Sti3z~T$n!*9 z;b?gKG&PB(z*t@sNj&a`l6LIYX4_&PWb?rJUVYCOiKkw0W1hZG1nUZsBgJtjdVc76 zW_vU>ZHhVJVPAg~IU!07_R-gLmxu0Wl$^O5LwK_xcRZ%2jOR4Hu4mTtg^Q`RKtBLI@XSRpe6Qbz~O> z*gF6&#RM|rP#ipK23))vK)`bpwpy#N2`|z6P&1ekbrM-}Tfb)q-)Yy09o}c%Xd&%Q zrfN-AI!qy3i=wGL$VzunOj-3KMM~QDUOIhhb;IZ!=OxnzQ)ljPtS)l&bk} zwD*wW@7c=J46`+*r|U#6J9nr0%p|(V>%E}H$jRM|zNn6Jp}64k;nBa!yvUj-ZubBE zhv+l@Ck@y){u9D~LO=q5|1{x0A^f*H{I?4JTLu5Eg8x>*|EH?}lS;0zN1*SsxtnCn R>pk#KLq+F&zOr@5{{e@yhEo6l literal 0 HcmV?d00001 diff --git a/templates/backstage/basic/skeleton/docs/index.md b/templates/backstage/basic/skeleton/docs/index.md new file mode 100644 index 0000000..6f9f96b --- /dev/null +++ b/templates/backstage/basic/skeleton/docs/index.md @@ -0,0 +1,11 @@ +![cnoe logo](./images/cnoe-logo.png) + +# Example Basic Application + +Thanks for trying out this demo! In this example, we deployed a simple application. + +### idpbuilder + +Checkout idpbuilder website: https://cnoe.io/docs/reference-implementation/installations/idpbuilder + +Checkout idpbuilder repository: https://github.com/cnoe-io/idpbuilder diff --git a/templates/backstage/basic/skeleton/manifests/deployment.yaml b/templates/backstage/basic/skeleton/manifests/deployment.yaml new file mode 100644 index 0000000..77b5178 --- /dev/null +++ b/templates/backstage/basic/skeleton/manifests/deployment.yaml @@ -0,0 +1,24 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: ${{values.name | dump}} + namespace: default + labels: + entity-id: ${{values.name}} + app: nginx +spec: + replicas: 1 + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + entity-id: ${{values.name}} + spec: + containers: + - name: nginx + image: nginx:1.14.2 + ports: + - containerPort: 80 diff --git a/templates/backstage/basic/template.yaml b/templates/backstage/basic/template.yaml new file mode 100644 index 0000000..f75743b --- /dev/null +++ b/templates/backstage/basic/template.yaml @@ -0,0 +1,58 @@ +apiVersion: scaffolder.backstage.io/v1beta3 +kind: Template +metadata: + description: Creates a Basic Kubernetes Deployment + name: basic + title: Create a Basic Deployment +spec: + owner: guests + type: service + parameters: + - title: Configuration Options + required: + - name + properties: + name: + type: string + description: name of this application + + steps: + - id: template + name: Generating component + action: fetch:template + input: + url: ./skeleton + values: + name: ${{parameters.name}} + + - id: publish + name: Publishing to a gitea git repository + action: publish:gitea + input: + description: This is an example app + # Hard coded value for this demo purposes only. + repoUrl: cnoe.localtest.me:8443/gitea?repo=${{parameters.name}} + defaultBranch: main + - id: create-argocd-app + name: Create ArgoCD App + action: cnoe:create-argocd-app + input: + appName: ${{parameters.name}} + appNamespace: ${{parameters.name}} + argoInstance: in-cluster + projectName: default + # necessary until we generate our own cert + repoUrl: https://cnoe.localtest.me:8443/gitea/giteaAdmin/${{parameters.name}} + path: "manifests" + - id: register + name: Register + action: catalog:register + input: + repoContentsUrl: ${{ steps['publish'].output.repoContentsUrl }} + catalogInfoPath: 'catalog-info.yaml' + + output: + links: + - title: Open in catalog + icon: catalog + entityRef: ${{ steps['register'].output.entityRef }} diff --git a/templates/backstage/catalog-info.yaml b/templates/backstage/catalog-info.yaml new file mode 100644 index 0000000..65bfbaf --- /dev/null +++ b/templates/backstage/catalog-info.yaml @@ -0,0 +1,20 @@ +apiVersion: backstage.io/v1alpha1 +kind: Location +metadata: + name: basic-example-templates + description: A collection of example templates +spec: + targets: + - ./basic/template.yaml + - ./argo-workflows/template.yaml + - ./app-with-bucket/template.yaml + - ./ray-serve/template-ray-serve.yaml +--- +apiVersion: backstage.io/v1alpha1 +kind: Location +metadata: + name: basic-organization + description: Basic organization data +spec: + targets: + - ./organization/guests.yaml diff --git a/templates/backstage/organization/guests.yaml b/templates/backstage/organization/guests.yaml new file mode 100644 index 0000000..b1dddfc --- /dev/null +++ b/templates/backstage/organization/guests.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: backstage.io/v1alpha1 +kind: User +metadata: + name: guest +spec: + memberOf: [guests] +--- +apiVersion: backstage.io/v1alpha1 +kind: Group +metadata: + name: guests +spec: + type: team + children: [] diff --git a/templates/backstage/ray-serve/sample/pytorch-sample.py b/templates/backstage/ray-serve/sample/pytorch-sample.py new file mode 100644 index 0000000..f37716c --- /dev/null +++ b/templates/backstage/ray-serve/sample/pytorch-sample.py @@ -0,0 +1,154 @@ +import os +from typing import Dict + +import torch +from filelock import FileLock +from torch import nn +from torch.utils.data import DataLoader +from torchvision import datasets, transforms +from torchvision.transforms import Normalize, ToTensor +from tqdm import tqdm + +import ray.train +from ray.train import ScalingConfig +from ray.train.torch import TorchTrainer +import ray + + +def get_dataloaders(batch_size): + # Transform to normalize the input images + transform = transforms.Compose([ToTensor(), Normalize((0.5,), (0.5,))]) + + with FileLock(os.path.expanduser("~/data.lock")): + # Download training data from open datasets + training_data = datasets.FashionMNIST( + root="~/data", + train=True, + download=True, + transform=transform, + ) + + # Download test data from open datasets + test_data = datasets.FashionMNIST( + root="~/data", + train=False, + download=True, + transform=transform, + ) + + # Create data loaders + train_dataloader = DataLoader(training_data, batch_size=batch_size, shuffle=True) + test_dataloader = DataLoader(test_data, batch_size=batch_size) + + return train_dataloader, test_dataloader + + +# Model Definition +class NeuralNetwork(nn.Module): + def __init__(self): + super(NeuralNetwork, self).__init__() + self.flatten = nn.Flatten() + self.linear_relu_stack = nn.Sequential( + nn.Linear(28 * 28, 512), + nn.ReLU(), + nn.Dropout(0.25), + nn.Linear(512, 512), + nn.ReLU(), + nn.Dropout(0.25), + nn.Linear(512, 10), + nn.ReLU(), + ) + + def forward(self, x): + x = self.flatten(x) + logits = self.linear_relu_stack(x) + return logits + + +def train_func_per_worker(config: Dict): + lr = config["lr"] + epochs = config["epochs"] + batch_size = config["batch_size_per_worker"] + + # Get dataloaders inside the worker training function + train_dataloader, test_dataloader = get_dataloaders(batch_size=batch_size) + + # [1] Prepare Dataloader for distributed training + # Shard the datasets among workers and move batches to the correct device + # ======================================================================= + train_dataloader = ray.train.torch.prepare_data_loader(train_dataloader) + test_dataloader = ray.train.torch.prepare_data_loader(test_dataloader) + + model = NeuralNetwork() + + # [2] Prepare and wrap your model with DistributedDataParallel + # Move the model to the correct GPU/CPU device + # ============================================================ + model = ray.train.torch.prepare_model(model) + + loss_fn = nn.CrossEntropyLoss() + optimizer = torch.optim.SGD(model.parameters(), lr=lr, momentum=0.9) + + # Model training loop + for epoch in range(epochs): + if ray.train.get_context().get_world_size() > 1: + # Required for the distributed sampler to shuffle properly across epochs. + train_dataloader.sampler.set_epoch(epoch) + + model.train() + for X, y in tqdm(train_dataloader, desc=f"Train Epoch {epoch}"): + pred = model(X) + loss = loss_fn(pred, y) + + optimizer.zero_grad() + loss.backward() + optimizer.step() + + model.eval() + test_loss, num_correct, num_total = 0, 0, 0 + with torch.no_grad(): + for X, y in tqdm(test_dataloader, desc=f"Test Epoch {epoch}"): + pred = model(X) + loss = loss_fn(pred, y) + + test_loss += loss.item() + num_total += y.shape[0] + num_correct += (pred.argmax(1) == y).sum().item() + + test_loss /= len(test_dataloader) + accuracy = num_correct / num_total + + # [3] Report metrics to Ray Train + # =============================== + ray.train.report(metrics={"loss": test_loss, "accuracy": accuracy}) + + +def train_fashion_mnist(num_workers=5, use_gpu=False): + global_batch_size = 32 + + train_config = { + "lr": 1e-3, + "epochs": 1, # artificially set low to finish quickly + "batch_size_per_worker": global_batch_size // num_workers, + } + + # Configure computation resources + scaling_config = ScalingConfig(num_workers=num_workers, use_gpu=use_gpu) + + # Initialize a Ray TorchTrainer + trainer = TorchTrainer( + train_loop_per_worker=train_func_per_worker, + train_loop_config=train_config, + scaling_config=scaling_config, + ) + + # [4] Start distributed training + # Run `train_func_per_worker` on all workers + # ============================================= + result = trainer.fit() + print(f"Training result: {result}") + + +if __name__ == "__main__": + ray.init("auto") + train_fashion_mnist(num_workers=10, use_gpu=False) \ No newline at end of file diff --git a/templates/backstage/ray-serve/skeleton/catalog-info.yaml b/templates/backstage/ray-serve/skeleton/catalog-info.yaml new file mode 100644 index 0000000..c3e5646 --- /dev/null +++ b/templates/backstage/ray-serve/skeleton/catalog-info.yaml @@ -0,0 +1,18 @@ +--- +apiVersion: backstage.io/v1alpha1 +kind: Component +metadata: + name: ${{values.name | dump}} + description: This is for Ray Serve + annotations: + backstage.io/kubernetes-label-selector: 'entity-id=${{values.name}}' + backstage.io/kubernetes-namespace: argo + argocd/app-name: ${{values.name | dump}} + argo-workflows.cnoe.io/label-selector: env=dev,entity-id=${{values.name}} + argo-workflows.cnoe.io/cluster-name: local + apache-ray.cnoe.io/label-selector: env=dev,entity-id=${{values.name}} + apache-ray.cnoe.io/cluster-name: local +spec: + owner: guest + lifecycle: experimental + type: service \ No newline at end of file diff --git a/templates/backstage/ray-serve/skeleton/manifests/ray-serve.yaml b/templates/backstage/ray-serve/skeleton/manifests/ray-serve.yaml new file mode 100644 index 0000000..0004f00 --- /dev/null +++ b/templates/backstage/ray-serve/skeleton/manifests/ray-serve.yaml @@ -0,0 +1,92 @@ +# Make sure to increase resource requests and limits before using this example in production. +apiVersion: ray.io/v1 +kind: RayService +metadata: + name: "ray-service-${{values.name}}" +spec: + # serveConfigV2 takes a yaml multi-line scalar, which should be a Ray Serve multi-application config. See https://docs.ray.io/en/latest/serve/multi-app.html. + serveConfigV2: | + applications: + - name: text_ml_app + import_path: text_ml.app + route_prefix: /summarize_translate + runtime_env: + working_dir: "${{values.rayServeFile}}" + pip: + - torch + - transformers + deployments: + - name: Translator + num_replicas: 4 + ray_actor_options: + num_cpus: 0.2 + user_config: + language: french + - name: Summarizer + num_replicas: 4 + ray_actor_options: + num_cpus: 0.2 + rayClusterConfig: + rayVersion: '2.34.0' # should match the Ray version in the image of the containers + enableInTreeAutoscaling: true + autoscalerOptions: + upscalingMode: Conservative + idleTimeoutSeconds: 120 + ######################headGroupSpecs################################# + # Ray head pod template. + headGroupSpec: + # The `rayStartParams` are used to configure the `ray start` command. + # See https://github.com/ray-project/kuberay/blob/master/docs/guidance/rayStartParams.md for the default settings of `rayStartParams` in KubeRay. + # See https://docs.ray.io/en/latest/cluster/cli.html#ray-start for all available options in `rayStartParams`. + rayStartParams: + dashboard-host: '0.0.0.0' + #pod template + template: + spec: + containers: + - name: ray-head + image: rayproject/ray:2.34.0 + resources: + limits: + cpu: 1 + memory: 1Gi + requests: + cpu: 1 + memory: 1Gi + ports: + - containerPort: 6379 + name: gcs-server + - containerPort: 8265 # Ray dashboard + name: dashboard + - containerPort: 10001 + name: client + - containerPort: 8000 + name: serve + workerGroupSpecs: + # the pod replicas in this group typed worker + - replicas: 1 + minReplicas: 1 + maxReplicas: 5 + # logical group name, for this called small-group, also can be functional + groupName: small-group + # The `rayStartParams` are used to configure the `ray start` command. + # See https://github.com/ray-project/kuberay/blob/master/docs/guidance/rayStartParams.md for the default settings of `rayStartParams` in KubeRay. + # See https://docs.ray.io/en/latest/cluster/cli.html#ray-start for all available options in `rayStartParams`. + rayStartParams: {} + #pod template + template: + spec: + containers: + - name: ray-worker # must consist of lower case alphanumeric characters or '-', and must start and end with an alphanumeric character (e.g. 'my-name', or '123-abc' + image: rayproject/ray:2.34.0 + lifecycle: + preStop: + exec: + command: ["/bin/sh","-c","ray stop"] + resources: + limits: + cpu: "1" + memory: "4Gi" + requests: + cpu: "500m" + memory: "2Gi" \ No newline at end of file diff --git a/templates/backstage/ray-serve/template-ray-serve.yaml b/templates/backstage/ray-serve/template-ray-serve.yaml new file mode 100644 index 0000000..f9f619a --- /dev/null +++ b/templates/backstage/ray-serve/template-ray-serve.yaml @@ -0,0 +1,58 @@ +apiVersion: scaffolder.backstage.io/v1beta3 +kind: Template +metadata: + description: Creates Ray Service on Kubernetes + name: ray-serve-kubernetes + title: Ray Service on Kubernetes +spec: + owner: guest + type: service + parameters: + - title: Configuration Options + required: + - name + properties: + name: + type: string + description: Name of this Ray Service + rayServeFile: + type: string + default: "https://github.com/mlops-on-kubernetes/Book/raw/main/Chapter%206/serve-config.zip" + description: Path to your Ray Service Multi-application config zip file + steps: + - id: template + name: Generating component + action: fetch:template + input: + url: ./skeleton + values: + name: ${{parameters.name}} + rayServeFile: ${{parameters.rayServeFile}} + - id: publish + name: Publishing to a gitea git repository + action: publish:gitea + input: + description: This is an Ray Serve app Repo + repoUrl: cnoe.localtest.me:8443/gitea?repo=${{parameters.name}} + defaultBranch: main + - id: create-argocd-app + name: Create ArgoCD App + action: cnoe:create-argocd-app + input: + appName: ${{parameters.name}} + appNamespace: ray + argoInstance: in-cluster + projectName: default + repoUrl: https://cnoe.localtest.me:8443/gitea/giteaAdmin/${{parameters.name}} + path: "manifests" + - id: register + name: Register + action: catalog:register + input: + repoContentsUrl: ${{ steps['publish'].output.repoContentsUrl }} + catalogInfoPath: 'catalog-info.yaml' + output: + links: + - title: Open in catalog + icon: catalog + entityRef: ${{ steps['register'].output.entityRef }} \ No newline at end of file diff --git a/terraform/backstage.tf b/terraform/backstage.tf deleted file mode 100644 index 24f494f..0000000 --- a/terraform/backstage.tf +++ /dev/null @@ -1,80 +0,0 @@ -resource "random_password" "backstage_postgres_password" { - length = 48 - special = true - override_special = "!#" -} - -resource "kubernetes_manifest" "namespace_backstage" { - manifest = { - "apiVersion" = "v1" - "kind" = "Namespace" - "metadata" = { - "name" = "backstage" - } - } -} - -resource "kubernetes_manifest" "secret_backstage_postgresql_config" { - depends_on = [ - kubernetes_manifest.namespace_backstage - ] - - manifest = { - "apiVersion" = "v1" - "kind" = "Secret" - "metadata" = { - "name" = "postgresql-config" - "namespace" = "backstage" - } - "data" = { - "POSTGRES_DB" = "${base64encode("backstage")}" - "POSTGRES_PASSWORD" = "${base64encode(random_password.backstage_postgres_password.result)}" - "POSTGRES_USER" = "${base64encode("backstage")}" - } - } -} - -resource "terraform_data" "backstage_keycloak_setup" { - depends_on = [ - kubectl_manifest.application_argocd_keycloak, - kubernetes_manifest.namespace_backstage - ] - - provisioner "local-exec" { - command = "./install.sh ${random_password.backstage_postgres_password.result} ${local.backstage_domain_name} ${local.kc_domain_name} ${local.argo_domain_name}" - - working_dir = "${path.module}/scripts/backstage" - interpreter = ["/bin/bash", "-c"] - } - - provisioner "local-exec" { - when = destroy - - command = "./uninstall.sh" - - working_dir = "${path.module}/scripts/backstage" - interpreter = ["/bin/bash", "-c"] - } -} - -resource "kubectl_manifest" "application_argocd_backstage" { - depends_on = [ - terraform_data.backstage_keycloak_setup - ] - - yaml_body = templatefile("${path.module}/templates/argocd-apps/backstage.yaml", { - GITHUB_URL = local.repo_url - } - ) -} - -resource "kubectl_manifest" "ingress_backstage" { - depends_on = [ - kubectl_manifest.application_argocd_backstage, - ] - - yaml_body = templatefile("${path.module}/templates/manifests/ingress-backstage.yaml", { - BACKSTAGE_DOMAIN_NAME = local.backstage_domain_name - } - ) -} diff --git a/terraform/scripts/argo-workflows/config-payloads/client-payload.json b/terraform/scripts/argo-workflows/config-payloads/client-payload.json deleted file mode 100644 index 2dff8b9..0000000 --- a/terraform/scripts/argo-workflows/config-payloads/client-payload.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "protocol": "openid-connect", - "clientId": "argo-workflows", - "name": "Argo Workflows Client", - "description": "Used for Argo Workflows SSO", - "publicClient": false, - "authorizationServicesEnabled": false, - "serviceAccountsEnabled": false, - "implicitFlowEnabled": false, - "directAccessGrantsEnabled": true, - "standardFlowEnabled": true, - "frontchannelLogout": true, - "attributes": { - "saml_idp_initiated_sso_url_name": "", - "oauth2.device.authorization.grant.enabled": false, - "oidc.ciba.grant.enabled": false - }, - "alwaysDisplayInConsole": false, - "rootUrl": "", - "baseUrl": "", - "redirectUris": [ - "${ARGO_WORKFLOWS_REDIRECT_URL}" - ], - "webOrigins": [ - "/*" - ] - } - \ No newline at end of file diff --git a/terraform/scripts/argo-workflows/install.sh b/terraform/scripts/argo-workflows/install.sh deleted file mode 100755 index 5a85361..0000000 --- a/terraform/scripts/argo-workflows/install.sh +++ /dev/null @@ -1,56 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) - -kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd application/keycloak -kubectl wait --for=condition=ready pod -l app=keycloak -n keycloak --timeout=30s -echo "Creating keycloak client for Argo Workflows" - -ADMIN_PASSWORD=$(kubectl get secret -n keycloak keycloak-config -o go-template='{{index .data "KEYCLOAK_ADMIN_PASSWORD" | base64decode}}') -kubectl port-forward -n keycloak svc/keycloak 8090:8080 > /dev/null 2>&1 & -pid=$! -trap '{ - rm config-payloads/*-to-be-applied.json || true - kill $pid -}' EXIT -echo "waiting for port forward to be ready" -while ! nc -vz localhost 8090 > /dev/null 2>&1 ; do - sleep 2 -done - -KEYCLOAK_TOKEN=$(curl -sS --fail-with-body -X POST -H "Content-Type: application/x-www-form-urlencoded" \ ---data-urlencode "username=cnoe-admin" \ ---data-urlencode "password=${ADMIN_PASSWORD}" \ ---data-urlencode "grant_type=password" \ ---data-urlencode "client_id=admin-cli" \ -localhost:8090/realms/master/protocol/openid-connect/token | jq -e -r '.access_token') - -envsubst < config-payloads/client-payload.json > config-payloads/client-payload-to-be-applied.json - -curl -sS -H "Content-Type: application/json" \ --H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ --X POST --data @config-payloads/client-payload-to-be-applied.json \ -localhost:8090/admin/realms/cnoe/clients - -CLIENT_ID=$(curl -sS -H "Content-Type: application/json" \ --H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ --X GET localhost:8090/admin/realms/cnoe/clients | jq -e -r '.[] | select(.clientId == "argo-workflows") | .id') - -export CLIENT_SECRET=$(curl -sS -H "Content-Type: application/json" \ --H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ --X GET localhost:8090/admin/realms/cnoe/clients/${CLIENT_ID} | jq -e -r '.secret') - -CLIENT_SCOPE_GROUPS_ID=$(curl -sS -H "Content-Type: application/json" -H "Authorization: bearer ${KEYCLOAK_TOKEN}" -X GET localhost:8090/admin/realms/cnoe/client-scopes | jq -e -r '.[] | select(.name == "groups") | .id') - -curl -sS -H "Content-Type: application/json" -H "Authorization: bearer ${KEYCLOAK_TOKEN}" -X PUT localhost:8090/admin/realms/cnoe/clients/${CLIENT_ID}/default-client-scopes/${CLIENT_SCOPE_GROUPS_ID} - -echo 'storing client secrets to argo namespace' - -envsubst < secret-sso.yaml | kubectl apply -f - - -# If TLS secret is available in /private, use it. Could be empty... -if ls ${REPO_ROOT}/private/argo-workflows-tls-backup-* 1> /dev/null 2>&1; then - TLS_FILE=$(ls -t ${REPO_ROOT}/private/argo-workflows-tls-backup-* | head -n1) - kubectl apply -f ${TLS_FILE} -fi diff --git a/terraform/scripts/argo-workflows/secret-sso.yaml b/terraform/scripts/argo-workflows/secret-sso.yaml deleted file mode 100644 index bfabf61..0000000 --- a/terraform/scripts/argo-workflows/secret-sso.yaml +++ /dev/null @@ -1,9 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: keycloak-oidc - namespace: argo -type: Opaque -stringData: - secret-key: ${CLIENT_SECRET} - client-id: argo-workflows diff --git a/terraform/scripts/argo-workflows/uninstall.sh b/terraform/scripts/argo-workflows/uninstall.sh deleted file mode 100755 index c6266a4..0000000 --- a/terraform/scripts/argo-workflows/uninstall.sh +++ /dev/null @@ -1,49 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) -NAMESPACE="argo" -LABEL_SELECTOR="controller.cert-manager.io/fao=true" -NAME=argo-workflows - - -echo "backing up TLS secrets to ${REPO_ROOT}/private" - -mkdir -p ${REPO_ROOT}/private -secrets=$(kubectl get secrets -n ${NAMESPACE} -l ${LABEL_SELECTOR} --ignore-not-found) - -if [[ ! -z "${secrets}" ]]; then - kubectl get secrets -n ${NAMESPACE} -l ${LABEL_SELECTOR} -o yaml > ${REPO_ROOT}/private/${NAME}-tls-backup-$(date +%s).yaml -fi - -kubectl delete -f secret-sso.yaml || true - -ADMIN_PASSWORD=$(kubectl get secret -n keycloak keycloak-config -o go-template='{{index .data "KEYCLOAK_ADMIN_PASSWORD" | base64decode}}') - -kubectl port-forward -n keycloak svc/keycloak 8090:8080 > /dev/null 2>&1 & -pid=$! -trap '{ -kill $pid -}' EXIT - -echo "waiting for port forward to be ready" -while ! nc -vz localhost 8090 > /dev/null 2>&1 ; do - sleep 2 -done - -echo 'deleting Keycloak client' -KEYCLOAK_TOKEN=$(curl -sS --fail-with-body -X POST -H "Content-Type: application/x-www-form-urlencoded" \ - --data-urlencode "username=cnoe-admin" \ - --data-urlencode "password=${ADMIN_PASSWORD}" \ - --data-urlencode "grant_type=password" \ - --data-urlencode "client_id=admin-cli" \ - localhost:8090/realms/master/protocol/openid-connect/token | jq -e -r '.access_token') - -CLIENT_ID=$(curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X GET localhost:8090/admin/realms/cnoe/clients | jq -e -r '.[] | select(.clientId == "argo-workflows") | .id') - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X DELETE localhost:8090/admin/realms/cnoe/clients/${CLIENT_ID} - diff --git a/terraform/scripts/backstage/config-payloads/client-payload.json b/terraform/scripts/backstage/config-payloads/client-payload.json deleted file mode 100644 index 3363a7a..0000000 --- a/terraform/scripts/backstage/config-payloads/client-payload.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "protocol": "openid-connect", - "clientId": "backstage", - "name": "Backstage Client", - "description": "Used for Backstage SSO", - "publicClient": false, - "authorizationServicesEnabled": false, - "serviceAccountsEnabled": false, - "implicitFlowEnabled": false, - "directAccessGrantsEnabled": true, - "standardFlowEnabled": true, - "frontchannelLogout": true, - "attributes": { - "saml_idp_initiated_sso_url_name": "", - "oauth2.device.authorization.grant.enabled": false, - "oidc.ciba.grant.enabled": false - }, - "alwaysDisplayInConsole": false, - "rootUrl": "", - "baseUrl": "", - "redirectUris": [ - "https://${BACKSTAGE_DOMAIN_NAME}/api/auth/keycloak-oidc/handler/frame" - ], - "webOrigins": [ - "/*" - ] - } - \ No newline at end of file diff --git a/terraform/scripts/backstage/install.sh b/terraform/scripts/backstage/install.sh deleted file mode 100755 index 65ae0d3..0000000 --- a/terraform/scripts/backstage/install.sh +++ /dev/null @@ -1,82 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) - -export POSTGRES_PASSWORD=${1} -export BACKSTAGE_DOMAIN_NAME=${2} -export KEYCLOAK_DOMAIN_NAME=${3} -export ARGO_WORKFLOWS_DOMAIN_NAME=${4} -export GITHUB_APP_YAML_INDENTED=$(cat ${REPO_ROOT}/private/github-integration.yaml | base64 | sed 's/^/ /') - -kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd application/keycloak -kubectl wait --for=condition=ready pod -l app=keycloak -n keycloak --timeout=30s -echo "Creating keycloak client for Backstage" - -ADMIN_PASSWORD=$(kubectl get secret -n keycloak keycloak-config -o go-template='{{index .data "KEYCLOAK_ADMIN_PASSWORD" | base64decode}}') - -kubectl port-forward -n keycloak svc/keycloak 8080:8080 > /dev/null 2>&1 & -pid=$! -trap '{ - rm config-payloads/*-to-be-applied.json || true - kill $pid -}' EXIT -echo "waiting for port forward to be ready" -while ! nc -vz localhost 8080 > /dev/null 2>&1 ; do - sleep 2 -done - -KEYCLOAK_TOKEN=$(curl -sS --fail-with-body -X POST -H "Content-Type: application/x-www-form-urlencoded" \ ---data-urlencode "username=cnoe-admin" \ ---data-urlencode "password=${ADMIN_PASSWORD}" \ ---data-urlencode "grant_type=password" \ ---data-urlencode "client_id=admin-cli" \ -localhost:8080/realms/master/protocol/openid-connect/token | jq -e -r '.access_token') - -envsubst < config-payloads/client-payload.json > config-payloads/client-payload-to-be-applied.json - -curl -sS -H "Content-Type: application/json" \ --H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ --X POST --data @config-payloads/client-payload-to-be-applied.json \ -localhost:8080/admin/realms/cnoe/clients - -CLIENT_ID=$(curl -sS -H "Content-Type: application/json" \ --H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ --X GET localhost:8080/admin/realms/cnoe/clients | jq -e -r '.[] | select(.clientId == "backstage") | .id') - -export CLIENT_SECRET=$(curl -sS -H "Content-Type: application/json" \ --H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ --X GET localhost:8080/admin/realms/cnoe/clients/${CLIENT_ID} | jq -e -r '.secret') - -CLIENT_SCOPE_GROUPS_ID=$(curl -sS -H "Content-Type: application/json" -H "Authorization: bearer ${KEYCLOAK_TOKEN}" -X GET localhost:8080/admin/realms/cnoe/client-scopes | jq -e -r '.[] | select(.name == "groups") | .id') - -curl -sS -H "Content-Type: application/json" -H "Authorization: bearer ${KEYCLOAK_TOKEN}" -X PUT localhost:8080/admin/realms/cnoe/clients/${CLIENT_ID}/default-client-scopes/${CLIENT_SCOPE_GROUPS_ID} - -# Get ArgoCD token for Backstage -kubectl port-forward svc/argocd-server -n argocd 8085:80 > /dev/null 2>&1 & -pid=$! -trap '{ - rm config-payloads/*-to-be-applied.json || true - kill $pid -}' EXIT -echo "waiting for port forward to be ready" -while ! nc -vz localhost 8085 > /dev/null 2>&1 ; do - sleep 2 -done - -pass=$(kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d) - -token=$(curl -sS localhost:8085/api/v1/session -d "{\"username\":\"admin\",\"password\":\"${pass}\"}" | yq .token) - -# THIS DOES NOT EXPIRE. Has read all permissions. -argocdToken=$(curl -sS http://localhost:8085/api/v1/account/backstage/token -X POST -H "Authorization: Bearer ${token}" | yq .token) - -echo 'storing client secrets to backstage namespace' -envsubst < secret-env-var.yaml | kubectl apply -f - -envsubst < secret-integrations.yaml | kubectl apply -f - - -#If TLS secret is available in /private, use it. Could be empty... -if ls ${REPO_ROOT}/private/backstage-tls-backup-* 1> /dev/null 2>&1; then - TLS_FILE=$(ls -t ${REPO_ROOT}/private/backstage-tls-backup-* | head -n1) - kubectl apply -f ${TLS_FILE} -fi diff --git a/terraform/scripts/backstage/secret-env-var.yaml b/terraform/scripts/backstage/secret-env-var.yaml deleted file mode 100644 index 3fe7a4c..0000000 --- a/terraform/scripts/backstage/secret-env-var.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: backstage-env-vars - namespace: backstage -stringData: - BACKSTAGE_FRONTEND_URL: https://${BACKSTAGE_DOMAIN_NAME} - POSTGRES_HOST: postgresql.backstage.svc.cluster.local - POSTGRES_PORT: '5432' - POSTGRES_USER: backstage - POSTGRES_PASSWORD: '${POSTGRES_PASSWORD}' - ARGO_WORKFLOWS_URL: https://${ARGO_WORKFLOWS_DOMAIN_NAME} - KEYCLOAK_NAME_METADATA: https://${KEYCLOAK_DOMAIN_NAME}/realms/cnoe/.well-known/openid-configuration - KEYCLOAK_CLIENT_SECRET: '${CLIENT_SECRET}' - ARGOCD_AUTH_TOKEN: 'argocd.token=${argocdToken}' - ARGO_CD_URL: 'http://argocd-server.argocd.svc.cluster.local/api/v1/' diff --git a/terraform/scripts/backstage/secret-integrations.yaml b/terraform/scripts/backstage/secret-integrations.yaml deleted file mode 100644 index d192f1f..0000000 --- a/terraform/scripts/backstage/secret-integrations.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: integrations - namespace: backstage -data: - github-integration.yaml: | -${GITHUB_APP_YAML_INDENTED} diff --git a/terraform/scripts/backstage/uninstall.sh b/terraform/scripts/backstage/uninstall.sh deleted file mode 100755 index 801ef8a..0000000 --- a/terraform/scripts/backstage/uninstall.sh +++ /dev/null @@ -1,44 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) -NAMESPACE="backstage" -LABEL_SELECTOR="controller.cert-manager.io/fao=true" -NAME=backstage - -echo "backing up TLS secrets to ${REPO_ROOT}/private" - -mkdir -p ${REPO_ROOT}/private -secrets=$(kubectl get secrets -n ${NAMESPACE} -l ${LABEL_SELECTOR} --ignore-not-found) - -if [[ ! -z "${secrets}" ]]; then - kubectl get secrets -n ${NAMESPACE} -l ${LABEL_SELECTOR} -o yaml > ${REPO_ROOT}/private/${NAME}-tls-backup-$(date +%s).yaml -fi - -ADMIN_PASSWORD=$(kubectl get secret -n keycloak keycloak-config -o go-template='{{index .data "KEYCLOAK_ADMIN_PASSWORD" | base64decode}}') -kubectl port-forward -n keycloak svc/keycloak 8080:8080 > /dev/null 2>&1 & -pid=$! -trap '{ -kill $pid -}' EXIT - -echo "waiting for port forward to be ready" -while ! nc -vz localhost 8080 > /dev/null 2>&1 ; do - sleep 2 -done - -echo 'deleting Keycloak client' -KEYCLOAK_TOKEN=$(curl -sS --fail-with-body -X POST -H "Content-Type: application/x-www-form-urlencoded" \ - --data-urlencode "username=cnoe-admin" \ - --data-urlencode "password=${ADMIN_PASSWORD}" \ - --data-urlencode "grant_type=password" \ - --data-urlencode "client_id=admin-cli" \ - localhost:8080/realms/master/protocol/openid-connect/token | jq -e -r '.access_token') - -CLIENT_ID=$(curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X GET localhost:8080/admin/realms/cnoe/clients | jq -e -r '.[] | select(.clientId == "backstage") | .id') - -curl -sS --fail-with-body -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X DELETE localhost:8080/admin/realms/cnoe/clients/${CLIENT_ID} diff --git a/terraform/scripts/crossplane/uninstall.sh b/terraform/scripts/crossplane/uninstall.sh deleted file mode 100755 index c872f0b..0000000 --- a/terraform/scripts/crossplane/uninstall.sh +++ /dev/null @@ -1,11 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -while true; do - provider_count=$(kubectl get --ignore-not-found=true Provider.pkg.crossplane.io | wc -l) - if [ "$provider_count" -eq 0 ]; then - exit 0 - fi - echo "waiting for $provider_count providers to be deleted" - sleep 10 -done diff --git a/terraform/scripts/keycloak/config-payloads/client-scope-groups-payload.json b/terraform/scripts/keycloak/config-payloads/client-scope-groups-payload.json deleted file mode 100644 index 2c11e58..0000000 --- a/terraform/scripts/keycloak/config-payloads/client-scope-groups-payload.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "name": "groups", - "description": "groups a user belongs to", - "attributes": { - "consent.screen.text": "Access to groups a user belongs to.", - "display.on.consent.screen": "true", - "include.in.token.scope": "true", - "gui.order": "" - }, - "type": "default", - "protocol": "openid-connect" -} \ No newline at end of file diff --git a/terraform/scripts/keycloak/config-payloads/group-admin-payload.json b/terraform/scripts/keycloak/config-payloads/group-admin-payload.json deleted file mode 100644 index 54e6be2..0000000 --- a/terraform/scripts/keycloak/config-payloads/group-admin-payload.json +++ /dev/null @@ -1 +0,0 @@ -{"name":"admin"} \ No newline at end of file diff --git a/terraform/scripts/keycloak/config-payloads/group-base-user-payload.json b/terraform/scripts/keycloak/config-payloads/group-base-user-payload.json deleted file mode 100644 index c56b3aa..0000000 --- a/terraform/scripts/keycloak/config-payloads/group-base-user-payload.json +++ /dev/null @@ -1 +0,0 @@ -{"name":"base-user"} \ No newline at end of file diff --git a/terraform/scripts/keycloak/config-payloads/group-mapper-payload.json b/terraform/scripts/keycloak/config-payloads/group-mapper-payload.json deleted file mode 100644 index aba9168..0000000 --- a/terraform/scripts/keycloak/config-payloads/group-mapper-payload.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "protocol": "openid-connect", - "protocolMapper": "oidc-group-membership-mapper", - "name": "groups", - "config": { - "claim.name": "groups", - "full.path": "false", - "id.token.claim": "true", - "access.token.claim": "true", - "userinfo.token.claim": "true" - } -} \ No newline at end of file diff --git a/terraform/scripts/keycloak/config-payloads/realm-payload.json b/terraform/scripts/keycloak/config-payloads/realm-payload.json deleted file mode 100644 index 56dd08f..0000000 --- a/terraform/scripts/keycloak/config-payloads/realm-payload.json +++ /dev/null @@ -1 +0,0 @@ -{"realm":"cnoe","enabled":true} \ No newline at end of file diff --git a/terraform/scripts/keycloak/config-payloads/user-password.json b/terraform/scripts/keycloak/config-payloads/user-password.json deleted file mode 100644 index fd20bb5..0000000 --- a/terraform/scripts/keycloak/config-payloads/user-password.json +++ /dev/null @@ -1,5 +0,0 @@ -{ - "temporary": false, - "type": "password", - "value": "${USER1_PASSWORD}" -} diff --git a/terraform/scripts/keycloak/config-payloads/user-user1.json b/terraform/scripts/keycloak/config-payloads/user-user1.json deleted file mode 100644 index 105cca4..0000000 --- a/terraform/scripts/keycloak/config-payloads/user-user1.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "username": "user1", - "email": "", - "firstName": "user", - "lastName": "one", - "requiredActions": [], - "emailVerified": false, - "groups": [ - "/admin" - ], - "enabled": true -} diff --git a/terraform/scripts/keycloak/config-payloads/user-user2.json b/terraform/scripts/keycloak/config-payloads/user-user2.json deleted file mode 100644 index b82417a..0000000 --- a/terraform/scripts/keycloak/config-payloads/user-user2.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "username": "user2", - "email": "", - "firstName": "user", - "lastName": "two", - "requiredActions": [], - "emailVerified": false, - "groups": [ - "/base-user" - ], - "enabled": true -} diff --git a/terraform/scripts/keycloak/install.sh b/terraform/scripts/keycloak/install.sh deleted file mode 100755 index ad47d68..0000000 --- a/terraform/scripts/keycloak/install.sh +++ /dev/null @@ -1,97 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -export USER1_PASSWORD=${1} -ADMIN_PASSWORD=${2} -REPO_ROOT=$(git rev-parse --show-toplevel) - -echo "waiting for keycloak to be ready. may take a few minutes" -kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd application/keycloak --timeout=300s -kubectl wait --for=condition=ready pod -l app=keycloak -n keycloak --timeout=30s - -# Configure keycloak. Might be better to just import -kubectl port-forward -n keycloak svc/keycloak 8080:8080 > /dev/null 2>&1 & -pid=$! - -envsubst < config-payloads/user-password.json > config-payloads/user-password-to-be-applied.json - -# ensure port-forward is killed -trap '{ - rm config-payloads/user-password-to-be-applied.json || true - kill $pid -}' EXIT - -echo "waiting for port forward to be ready" -while ! nc -vz localhost 8080 > /dev/null 2>&1 ; do - sleep 2 -done - -# Default token expires in one minute. May need to extend. very ugly -KEYCLOAK_TOKEN=$(curl -sS --fail-with-body -X POST -H "Content-Type: application/x-www-form-urlencoded" \ - --data-urlencode "username=cnoe-admin" \ - --data-urlencode "password=${ADMIN_PASSWORD}" \ - --data-urlencode "grant_type=password" \ - --data-urlencode "client_id=admin-cli" \ - localhost:8080/realms/master/protocol/openid-connect/token | jq -e -r '.access_token') -echo "creating cnoe realm and groups" -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/realm-payload.json \ - localhost:8080/admin/realms - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/client-scope-groups-payload.json \ - localhost:8080/admin/realms/cnoe/client-scopes - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/group-admin-payload.json \ - localhost:8080/admin/realms/cnoe/groups - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/group-base-user-payload.json \ - localhost:8080/admin/realms/cnoe/groups - -# Create scope mapper -echo 'adding group claim to tokens' -CLIENT_SCOPE_GROUPS_ID=$(curl -sS -H "Content-Type: application/json" -H "Authorization: bearer ${KEYCLOAK_TOKEN}" -X GET localhost:8080/admin/realms/cnoe/client-scopes | jq -e -r '.[] | select(.name == "groups") | .id') - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/group-mapper-payload.json \ - localhost:8080/admin/realms/cnoe/client-scopes/${CLIENT_SCOPE_GROUPS_ID}/protocol-mappers/models - -echo "creating test users" -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/user-user1.json \ - localhost:8080/admin/realms/cnoe/users - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X POST --data @config-payloads/user-user2.json \ - localhost:8080/admin/realms/cnoe/users - -USER1ID=$(curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" 'localhost:8080/admin/realms/cnoe/users?lastName=one' | jq -r '.[0].id') -USER2ID=$(curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" 'localhost:8080/admin/realms/cnoe/users?lastName=two' | jq -r '.[0].id') - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X PUT --data @config-payloads/user-password-to-be-applied.json \ - localhost:8080/admin/realms/cnoe/users/${USER1ID}/reset-password - -curl -sS -H "Content-Type: application/json" \ - -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ - -X PUT --data @config-payloads/user-password-to-be-applied.json \ - localhost:8080/admin/realms/cnoe/users/${USER2ID}/reset-password - -# If TLS secret is available in /private, use it. Could be empty... - -if ls ${REPO_ROOT}/private/keycloak-tls-backup-* 1> /dev/null 2>&1; then - TLS_FILE=$(ls -t ${REPO_ROOT}/private/keycloak-tls-backup-* | head -n1) - kubectl apply -f ${TLS_FILE} -fi diff --git a/terraform/scripts/keycloak/uninstall.sh b/terraform/scripts/keycloak/uninstall.sh deleted file mode 100755 index ebf7b72..0000000 --- a/terraform/scripts/keycloak/uninstall.sh +++ /dev/null @@ -1,15 +0,0 @@ -#!/bin/bash - -LABEL_SELECTOR="controller.cert-manager.io/fao=true" -APP_NAME=keycloak -NAMESPACE=keycloak -REPO_ROOT=$(git rev-parse --show-toplevel) - -echo "backing up TLS secrets to ${REPO_ROOT}/private" - -mkdir -p ${REPO_ROOT}/private -secrets=$(kubectl get secrets -n ${NAMESPACE} -l ${LABEL_SELECTOR} --ignore-not-found) - -if [[ ! -z "${secrets}" ]]; then - kubectl get secrets -n ${NAMESPACE} -l ${LABEL_SELECTOR} -o yaml > ${REPO_ROOT}/private/${APP_NAME}-tls-backup-$(date +%s).yaml -fi diff --git a/terraform/templates/argocd-apps/argo-workflows-sso-config.yaml b/terraform/templates/argocd-apps/argo-workflows-sso-config.yaml deleted file mode 100644 index 3e5ad58..0000000 --- a/terraform/templates/argocd-apps/argo-workflows-sso-config.yaml +++ /dev/null @@ -1,22 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: argo-workflows-sso-config - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - path: packages/argo-workflows-sso-config/dev - destination: - server: "https://kubernetes.default.svc" - namespace: argo - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/argo-workflows-templates.yaml b/terraform/templates/argocd-apps/argo-workflows-templates.yaml deleted file mode 100644 index 7f54232..0000000 --- a/terraform/templates/argocd-apps/argo-workflows-templates.yaml +++ /dev/null @@ -1,22 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: argo-workflows-templates - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - path: packages/argo-workflows-templates/dev/ - destination: - server: "https://kubernetes.default.svc" - namespace: argo - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/argo-workflows.yaml b/terraform/templates/argocd-apps/argo-workflows.yaml deleted file mode 100644 index 8033ae0..0000000 --- a/terraform/templates/argocd-apps/argo-workflows.yaml +++ /dev/null @@ -1,34 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: argo-workflows - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - chart: argo-workflows - repoURL: https://argoproj.github.io/argo-helm - targetRevision: 0.31.0 - helm: - releaseName: argo-workflows - valueFiles: - - $values/packages/argo-workflows/dev/values.yaml - parameters: - - name: server.sso.issuer - value: ${KEYCLOAK_CNOE_URL} - - name: server.sso.redirectUrl - value: ${ARGO_REDIRECT_URL} - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - ref: values - destination: - server: "https://kubernetes.default.svc" - namespace: argo - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/backstage.yaml b/terraform/templates/argocd-apps/backstage.yaml deleted file mode 100644 index 8fe3c9f..0000000 --- a/terraform/templates/argocd-apps/backstage.yaml +++ /dev/null @@ -1,29 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: backstage - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - ignoreDifferences: - - jsonPointers: - - /data/k8s-config.yaml - kind: Secret - name: k8s-config - namespace: backstage - project: cnoe - sources: - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - path: packages/backstage/dev/ - destination: - server: "https://kubernetes.default.svc" - namespace: backstage - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true - - RespectIgnoreDifferences=true diff --git a/terraform/templates/argocd-apps/crossplane-provider.yaml b/terraform/templates/argocd-apps/crossplane-provider.yaml deleted file mode 100644 index 71bf4b9..0000000 --- a/terraform/templates/argocd-apps/crossplane-provider.yaml +++ /dev/null @@ -1,21 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: crossplane-provider - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - source: - repoURL: ${GITHUB_URL} - targetRevision: HEAD - path: packages/crossplane/dev/ - destination: - server: "https://kubernetes.default.svc" - namespace: crossplane-system - syncPolicy: - automated: {} - syncOptions: [] diff --git a/terraform/templates/argocd-apps/crossplane.yaml b/terraform/templates/argocd-apps/crossplane.yaml deleted file mode 100644 index fc3943e..0000000 --- a/terraform/templates/argocd-apps/crossplane.yaml +++ /dev/null @@ -1,29 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: crossplane - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - chart: crossplane - repoURL: https://charts.crossplane.io/stable - targetRevision: 1.13.2 - helm: - releaseName: crossplane - valueFiles: - - $values/packages/crossplane/dev/values.yaml - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - ref: values - destination: - server: "https://kubernetes.default.svc" - namespace: crossplane-system - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/external-secrets.yaml b/terraform/templates/argocd-apps/external-secrets.yaml deleted file mode 100644 index e697f1a..0000000 --- a/terraform/templates/argocd-apps/external-secrets.yaml +++ /dev/null @@ -1,29 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: external-secrets - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - chart: external-secrets - repoURL: https://charts.external-secrets.io - targetRevision: "0.9.2" - helm: - releaseName: external-secrets - valueFiles: - - $values/packages/external-secrets/dev/values.yaml - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - ref: values - destination: - server: "https://kubernetes.default.svc" - namespace: external-secrets - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/keycloak.yaml b/terraform/templates/argocd-apps/keycloak.yaml deleted file mode 100644 index ad4e198..0000000 --- a/terraform/templates/argocd-apps/keycloak.yaml +++ /dev/null @@ -1,22 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: keycloak - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - path: ${PATH} - destination: - server: "https://kubernetes.default.svc" - namespace: keycloak - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/manifests/cluster-issuer.yaml b/terraform/templates/manifests/cluster-issuer.yaml deleted file mode 100644 index e2a80c1..0000000 --- a/terraform/templates/manifests/cluster-issuer.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: cert-manager.io/v1 -kind: ClusterIssuer -metadata: - name: letsencrypt-prod -spec: - acme: - server: https://acme-v02.api.letsencrypt.org/directory - privateKeySecretRef: - name: letsencrypt-prod - solvers: - - http01: - ingress: - ingressClassName: nginx diff --git a/terraform/templates/manifests/ingress-argo-workflows.yaml b/terraform/templates/manifests/ingress-argo-workflows.yaml deleted file mode 100644 index 9bcacb0..0000000 --- a/terraform/templates/manifests/ingress-argo-workflows.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: argo-workflows - namespace: argo - annotations: - cert-manager.io/cluster-issuer: 'letsencrypt-prod' -spec: - ingressClassName: nginx - tls: - - hosts: - - ${ARGO_WORKFLOWS_DOMAIN_NAME} - secretName: argo-workflows-prod-tls - rules: - - host: ${ARGO_WORKFLOWS_DOMAIN_NAME} - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: argo-workflows-server - port: - number: 2746 diff --git a/terraform/templates/manifests/ingress-argocd.yaml b/terraform/templates/manifests/ingress-argocd.yaml deleted file mode 100644 index 9ffba36..0000000 --- a/terraform/templates/manifests/ingress-argocd.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: argocd-server-ingress - namespace: argocd - annotations: - cert-manager.io/cluster-issuer: 'letsencrypt-prod' -spec: - ingressClassName: nginx - tls: - - hosts: - - ${ARGOCD_DOMAIN_NAME} - secretName: argocd-prod-tls - rules: - - host: ${ARGOCD_DOMAIN_NAME} - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: argocd-server - port: - name: https diff --git a/terraform/templates/manifests/ingress-backstage.yaml b/terraform/templates/manifests/ingress-backstage.yaml deleted file mode 100644 index 7a05bdc..0000000 --- a/terraform/templates/manifests/ingress-backstage.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: backstage - namespace: backstage - annotations: - cert-manager.io/cluster-issuer: 'letsencrypt-prod' -spec: - ingressClassName: nginx - tls: - - hosts: - - ${BACKSTAGE_DOMAIN_NAME} - secretName: backstage-prod-tls - rules: - - host: ${BACKSTAGE_DOMAIN_NAME} - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: backstage - port: - number: 7007 From f8226ab41ffda7e8b3aab36a510c062ed804207c Mon Sep 17 00:00:00 2001 From: Bowen Sun Date: Tue, 9 Sep 2025 12:42:11 +0100 Subject: [PATCH 2/8] feat(refactor): add taskfile and helmfile to replace shell scripts + refactor components for azure + remove aws specific configs Signed-off-by: Bowen Sun --- .gitignore | 2 + .taskrc.yml | 2 + README.md | 48 ++- Taskfile.yml | 170 +++++++++++ cluster/eksctl/README.md | 82 ----- cluster/eksctl/cluster-config-auto.yaml | 46 --- cluster/eksctl/cluster-config.yaml | 69 ----- .../crossplane-permissions-boundry.json | 65 ---- cluster/iam-policies/external-secrets.json | 25 -- cluster/terraform/README.md | 96 ------ cluster/terraform/main.tf | 242 --------------- cluster/terraform/outputs.tf | 39 --- cluster/terraform/variables.tf | 18 -- cluster/terraform/versions.tf | 9 - config.yaml | 35 --- config.yaml.template | 47 +++ helmfile.yaml | 33 ++ packages/addons/values.yaml | 289 ++++++++++-------- .../argo-cd/manifests/appproject-demo.yaml | 6 +- .../argo-cd/manifests/argo-cd-github-app.yaml | 53 ---- .../argo-cd/manifests/hub-cluster-secret.yaml | 88 ------ packages/argo-cd/values.yaml | 78 +++-- packages/argo-cd/values.yaml.gotmpl | 75 +++++ packages/argocd/dev/cm-argocd-cm.yaml | 55 ---- .../backstage/base/install-postgresql.yaml | 72 ----- .../backstage/dev/cm-backstage-config.yaml | 156 ---------- .../backstage/manifests/external-secrets.yaml | 123 ++++---- packages/bootstrap.yaml | 11 +- packages/bootstrap/_helpers.tpl | 7 + packages/bootstrap/argocd.yaml.gotmpl | 1 + packages/bootstrap/crossplane-ns.yaml | 7 + packages/bootstrap/values-idpbuilder.yaml | 14 - packages/bootstrap/values.yaml | 16 +- packages/cert-manager/dev/values.yaml | 24 -- .../appset}/.helmignore | 0 .../appset}/Chart.yaml | 0 .../{appset-chart => charts/appset}/README.md | 0 .../appset}/templates/_application_set.tpl | 0 .../appset}/templates/_git_matrix.tpl | 10 +- .../appset}/templates/_helpers.tpl | 0 .../appset}/templates/_pod_identity.tpl | 0 .../appset}/templates/application-set.yaml | 9 +- .../appset}/values.yaml | 10 +- packages/charts/raw/.helmignore | 23 ++ packages/charts/raw/Chart.yaml | 24 ++ packages/charts/raw/templates/resources.yaml | 8 + packages/charts/raw/values.yaml | 47 +++ packages/crossplane-aws-upbound/values.yaml | 52 ---- .../kustomization.yaml | 7 - .../s3/definition.yaml | 63 ---- .../s3/general-purpose.yaml | 129 -------- .../s3/kustomization.yaml | 3 - packages/crossplane/base/kustomization.yaml | 4 - .../base/provider-azure-config.yaml | 13 - packages/crossplane/base/provider-azure.yaml | 8 - .../clusterproviderconfig/azure.yaml | 11 + .../clusterproviderconfig/kubernetes.yaml | 8 + .../azure-workload-identity.yaml | 6 + .../manifests/functions/auto-ready.yaml | 6 + .../manifests/functions/go-templating.yaml | 6 + .../providers/azure-authorization.yaml | 6 + .../providers/azure-managedidentity.yaml | 6 + .../crossplane/manifests/providers/azure.yaml | 6 + .../manifests/providers/kubernetes.yaml | 6 + .../manifests/xrs/external-dns.yaml | 16 + .../manifests/xrs/external-secrets.yaml | 14 + .../crossplane/manifests/xrs/keycloak.yaml | 16 + packages/crossplane/values.yaml | 20 +- packages/external-dns/values.yaml | 1 + .../manifests/cluster-secret-store.yaml | 10 +- .../external-secrets.yaml | 70 ----- packages/keycloak/dev/postgres.yaml | 73 ----- .../keycloak/manifests/external-secrets.yaml | 74 +++-- .../keycloak-cluster-secret-store.yaml | 8 +- private/argocd-github.yaml.template | 9 - private/azure-credentials.yaml.template | 20 ++ private/backstage-github.yaml.template | 9 - scripts/cleanup-crds.sh | 91 ------ scripts/create-cluster.sh | 88 ------ scripts/create-config-secrets.sh | 92 ------ scripts/get-urls.sh | 37 --- scripts/install-using-idpbuilder.sh | 69 ----- scripts/install.sh | 96 ------ scripts/template.sh | 56 ---- scripts/uninstall.sh | 78 ----- scripts/utils.sh | 192 ------------ setups/argocd/install.sh | 55 ---- setups/config.yaml | 19 -- setups/install.sh | 34 --- setups/uninstall.sh | 28 -- setups/utils.sh | 45 --- terraform/argo-workflows.tf | 84 ----- terraform/argocd-ingress.tf | 8 - terraform/cert-manager.tf | 18 -- terraform/crossplane.tf | 58 ---- terraform/data.tf | 24 -- terraform/external-dns.tf | 67 ---- terraform/external-secrets.tf | 12 - terraform/ingress-nginx.tf | 12 - terraform/keycloak.tf | 245 --------------- terraform/main.tf | 35 --- .../templates/argocd-apps/cert-manager.yaml | 29 -- .../templates/argocd-apps/external-dns.yaml | 44 --- .../templates/argocd-apps/ingress-nginx.yaml | 29 -- .../crossplane-azure-controller-config.yaml | 13 - .../templates/manifests/ingress-keycloak.yaml | 26 -- .../manifests/keycloak-secret-store.yaml | 12 - terraform/variables.tf | 74 ----- terraform/versions.tf | 22 -- 109 files changed, 982 insertions(+), 3724 deletions(-) create mode 100644 .taskrc.yml create mode 100644 Taskfile.yml delete mode 100644 cluster/eksctl/README.md delete mode 100644 cluster/eksctl/cluster-config-auto.yaml delete mode 100644 cluster/eksctl/cluster-config.yaml delete mode 100644 cluster/iam-policies/crossplane-permissions-boundry.json delete mode 100644 cluster/iam-policies/external-secrets.json delete mode 100644 cluster/terraform/README.md delete mode 100644 cluster/terraform/main.tf delete mode 100644 cluster/terraform/outputs.tf delete mode 100644 cluster/terraform/variables.tf delete mode 100644 cluster/terraform/versions.tf delete mode 100644 config.yaml create mode 100644 config.yaml.template create mode 100644 helmfile.yaml delete mode 100644 packages/argo-cd/manifests/argo-cd-github-app.yaml delete mode 100644 packages/argo-cd/manifests/hub-cluster-secret.yaml create mode 100644 packages/argo-cd/values.yaml.gotmpl delete mode 100644 packages/argocd/dev/cm-argocd-cm.yaml delete mode 100644 packages/backstage/base/install-postgresql.yaml delete mode 100644 packages/backstage/dev/cm-backstage-config.yaml create mode 100644 packages/bootstrap/_helpers.tpl create mode 100644 packages/bootstrap/argocd.yaml.gotmpl create mode 100644 packages/bootstrap/crossplane-ns.yaml delete mode 100644 packages/bootstrap/values-idpbuilder.yaml delete mode 100644 packages/cert-manager/dev/values.yaml rename packages/{appset-chart => charts/appset}/.helmignore (100%) rename packages/{appset-chart => charts/appset}/Chart.yaml (100%) rename packages/{appset-chart => charts/appset}/README.md (100%) rename packages/{appset-chart => charts/appset}/templates/_application_set.tpl (100%) rename packages/{appset-chart => charts/appset}/templates/_git_matrix.tpl (84%) rename packages/{appset-chart => charts/appset}/templates/_helpers.tpl (100%) rename packages/{appset-chart => charts/appset}/templates/_pod_identity.tpl (100%) rename packages/{appset-chart => charts/appset}/templates/application-set.yaml (97%) rename packages/{appset-chart => charts/appset}/values.yaml (77%) create mode 100644 packages/charts/raw/.helmignore create mode 100644 packages/charts/raw/Chart.yaml create mode 100644 packages/charts/raw/templates/resources.yaml create mode 100644 packages/charts/raw/values.yaml delete mode 100644 packages/crossplane-aws-upbound/values.yaml delete mode 100644 packages/crossplane-compositions/kustomization.yaml delete mode 100644 packages/crossplane-compositions/s3/definition.yaml delete mode 100644 packages/crossplane-compositions/s3/general-purpose.yaml delete mode 100644 packages/crossplane-compositions/s3/kustomization.yaml delete mode 100644 packages/crossplane/base/kustomization.yaml delete mode 100644 packages/crossplane/base/provider-azure-config.yaml delete mode 100644 packages/crossplane/base/provider-azure.yaml create mode 100644 packages/crossplane/manifests/clusterproviderconfig/azure.yaml create mode 100644 packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml create mode 100644 packages/crossplane/manifests/configurations/azure-workload-identity.yaml create mode 100644 packages/crossplane/manifests/functions/auto-ready.yaml create mode 100644 packages/crossplane/manifests/functions/go-templating.yaml create mode 100644 packages/crossplane/manifests/providers/azure-authorization.yaml create mode 100644 packages/crossplane/manifests/providers/azure-managedidentity.yaml create mode 100644 packages/crossplane/manifests/providers/azure.yaml create mode 100644 packages/crossplane/manifests/providers/kubernetes.yaml create mode 100644 packages/crossplane/manifests/xrs/external-dns.yaml create mode 100644 packages/crossplane/manifests/xrs/external-secrets.yaml create mode 100644 packages/crossplane/manifests/xrs/keycloak.yaml delete mode 100644 packages/keycloak/dev-external-secrets/external-secrets.yaml delete mode 100644 packages/keycloak/dev/postgres.yaml delete mode 100644 private/argocd-github.yaml.template create mode 100644 private/azure-credentials.yaml.template delete mode 100644 private/backstage-github.yaml.template delete mode 100755 scripts/cleanup-crds.sh delete mode 100755 scripts/create-cluster.sh delete mode 100755 scripts/create-config-secrets.sh delete mode 100755 scripts/get-urls.sh delete mode 100755 scripts/install-using-idpbuilder.sh delete mode 100755 scripts/install.sh delete mode 100755 scripts/template.sh delete mode 100755 scripts/uninstall.sh delete mode 100755 scripts/utils.sh delete mode 100755 setups/argocd/install.sh delete mode 100644 setups/config.yaml delete mode 100755 setups/install.sh delete mode 100755 setups/uninstall.sh delete mode 100644 setups/utils.sh delete mode 100644 terraform/argo-workflows.tf delete mode 100644 terraform/argocd-ingress.tf delete mode 100644 terraform/cert-manager.tf delete mode 100644 terraform/crossplane.tf delete mode 100644 terraform/data.tf delete mode 100644 terraform/external-dns.tf delete mode 100644 terraform/external-secrets.tf delete mode 100644 terraform/ingress-nginx.tf delete mode 100644 terraform/keycloak.tf delete mode 100644 terraform/main.tf delete mode 100644 terraform/templates/argocd-apps/cert-manager.yaml delete mode 100644 terraform/templates/argocd-apps/external-dns.yaml delete mode 100644 terraform/templates/argocd-apps/ingress-nginx.yaml delete mode 100644 terraform/templates/manifests/crossplane-azure-controller-config.yaml delete mode 100644 terraform/templates/manifests/ingress-keycloak.yaml delete mode 100644 terraform/templates/manifests/keycloak-secret-store.yaml delete mode 100644 terraform/variables.tf delete mode 100644 terraform/versions.tf diff --git a/.gitignore b/.gitignore index 5ac6bba..577dfea 100644 --- a/.gitignore +++ b/.gitignore @@ -38,3 +38,5 @@ override.tf.json terraform.rc /private/ +config.yaml +.task/ diff --git a/.taskrc.yml b/.taskrc.yml new file mode 100644 index 0000000..b0ba6f2 --- /dev/null +++ b/.taskrc.yml @@ -0,0 +1,2 @@ +experiments: + ENV_PRECEDENCE: 1 diff --git a/README.md b/README.md index 88577ce..d9a09d5 100644 --- a/README.md +++ b/README.md @@ -123,18 +123,48 @@ Follow the following steps to get started. ```bash az aks create \ - --name $(yq '.cluster_name' setups/config.yaml) \ - --location $(yq '.region' setups/config.yaml) \ - --resource-group $(yq '.resource_group' setups/config.yaml) \ - --kubernetes-version ${AKS_VERSION:-1.31} \ - --sku automatic \ - --enable-oidc-issuer \ - --enable-workload-identity \ - --node-vm-size ${ASK_NODE_SIZE:-Standard_D4alds_v6} + --name $(yq '.cluster_name' config.yaml) \ + --location $(yq '.location' config.yaml) \ + --resource-group $(yq '.resource_group' config.yaml) \ + --kubernetes-version ${AKS_VERSION:-1.33} \ + --sku base \ + --enable-oidc-issuer \ + --enable-workload-identity \ + --node-vm-size ${AKS_NODE_SIZE:-standard_d4alds_v6} ``` ```bash - az aks get-credentials --name $(yq '.cluster_name' setups/config.yaml) --resource-group $(yq '.resource_group' setups/config.yaml) + az aks disable-addons -a monitoring --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) && \ + az aks update \ + --name $(yq '.cluster_name' config.yaml) \ + --resource-group $(yq '.resource_group' config.yaml) \ + --disable-azure-monitor-metrics && \ + az aks update \ + --name $(yq '.cluster_name' config.yaml) \ + --resource-group $(yq '.resource_group' config.yaml) \ + --aad-admin-group-object-ids $(az ad group show -g aks-admin | yq '.id') + ``` + + ```bash + kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io --force=true --interactive=false --now=true gatekeeper-validating-webhook-configuration + kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io --force=true --interactive=false --now=true gatekeeper-mutating-webhook-configuration + kubectl delete ns --force=true --interactive=false --now=true gatekeeper-system + kubectl api-resources -o json | jq -rc '.resources[] | select(.group != null) | select(.group | match(".gatekeeper.sh")) | .kind + .group' | xargs -I{} kubectl delete crd --force=true --interactive=false --now=true {} + ``` + + ```bash + az aks delete \ + --name $(yq '.cluster_name' config.yaml) \ + --resource-group $(yq '.resource_group' config.yaml) \ + --yes + ``` + + ```bash + az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) + ``` + + ```bash + az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --query "oidcIssuerProfile.issuerUrl" -o tsv ``` 3. If you don't have a public registered Azure DNS zone, [register a Azure DNS domain](https://learn.microsoft.com/en-us/azure/dns/) (be sure to use Azure DNS Zone as the DNS service for the domain). We **strongly encourage creating a dedicated sub domain** for this. If you'd rather manage DNS yourself, you can set `enable_dns_management` in the config file. diff --git a/Taskfile.yml b/Taskfile.yml new file mode 100644 index 0000000..40b418f --- /dev/null +++ b/Taskfile.yml @@ -0,0 +1,170 @@ +# https://taskfile.dev + +version: "3" + +set: [errexit, nounset, pipefail] + +env: + KUBECONFIG: + sh: mktemp + REPO_ROOT: "{{.ROOT_DIR}}" + SECRET_NAME_PREFIX: cnoe-ref-impl + +tasks: + init: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: helmfile:init + - task: helmfile:lint + - task: helmfile:build + + install: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: helmfile + - task: update + + sync: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: helmfile:sync + - task: update:secret + - task: update:crossplane + + update: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: update:secret + - task: update:crossplane + + update:secret: + deps: + - update:kubeconfig + preconditions: + - test -f private/azure-credentials.yaml + cmds: + - defer: { task: cleanup } + - kubectl apply -f packages/bootstrap/crossplane-ns.yaml + - kubectl apply -f private/azure-credentials.yaml + - task: update:secret:azure + + update:secret:azure: + preconditions: + - test -f config.yaml + vars: + TAGS: + sh: yq eval '.tags | to_entries | map("Key=" + .key + ",Value=" + .value) | join(" ")' config.yaml + SECRET_TEMP: + sh: mktemp + sources: + - config.yaml + generates: + - "{{.SECRET_TEMP}}" + cmds: + - task: if + vars: + CONDITION: $(az keyvault list -o yaml | SECRET_NAME_PREFIX=${SECRET_NAME_PREFIX} yq '.[] | [select(.name==env(SECRET_NAME_PREFIX))] | length') -eq 0 + RUN: az keyvault create --resource-group $(yq '.resource_group' config.yaml) --tags {{.TAGS}} ${SECRET_NAME_PREFIX} + - defer: rm -f {{.SECRET_TEMP}} + - yq -o=json config.yaml > {{.SECRET_TEMP}} + - | + az keyvault secret set \ + --name config \ + --vault-name ${SECRET_NAME_PREFIX} \ + --file {{.SECRET_TEMP}} \ + --description "Secret for config of CNOE Azure Reference Implementation" \ + --tags {{.TAGS}} + --output yaml | yq 'del(.value)' + + update:crossplane: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: wait + vars: + CONDITION: $(kubectl get provider.pkg.crossplane.io -o yaml | yq '[.items[] | select(.metadata.name=="*provider-kubernetes")] | length') -eq 0 + - task: wait + vars: + CONDITION: $(kubectl -n crossplane-system get sa -o name | grep provider-kubernetes | wc -l) -eq 0 + - task: if + vars: + CONDITION: $(kubectl get clusterrolebindings -o yaml | yq '[.items[] | select(.metadata.name=="provider-kubernetes-admin-binding")] | length') -eq 0 + RUN: kubectl create clusterrolebinding provider-kubernetes-admin-binding --clusterrole cluster-admin --serviceaccount="$(kubectl -n crossplane-system get sa -o yaml | yq '.items[] | select(.metadata.name=="*provider-kubernetes*") | [.metadata.namespace, .metadata.name] | join(":")')" + + update:kubeconfig: + preconditions: + - test -f config.yaml + cmds: + - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --file "{{.KUBECONFIG}}" + + cleanup: + internal: true + cmds: + - rm -f "{{.KUBECONFIG}}" + + wait: + internal: true + env: + TIMEOUT: "{{default 300 .TIMEOUT}}" + cmds: + - while [[ {{.CONDITION}} ]] && [[ ${TIMEOUT} -gt 0 ]]; do sleep 5 && ((TIMEOUT-=5)); done + + if: + internal: true + cmds: + - if [[ {{.CONDITION}} ]]; then {{.RUN}}; fi + + uninstall: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: update:kubeconfig + - task: helmfile:destroy + + helmfile: + cmds: + - task: helmfile:init + - task: helmfile:apply + helmfile:init: + cmds: + - helmfile init {{.CLI_ARGS}} + helmfile:lint: + cmds: + - helmfile lint {{.CLI_ARGS}} + helmfile:diff: + cmds: + - helmfile diff {{.CLI_ARGS}} + helmfile:build: + cmds: + - helmfile build {{.CLI_ARGS}} + helmfile:apply: + cmds: + - helmfile apply {{.CLI_ARGS}} + helmfile:list: + cmds: + - helmfile list {{.CLI_ARGS}} + helmfile:status: + cmds: + - helmfile status {{.CLI_ARGS}} + helmfile:template: + cmds: + - helmfile template {{.CLI_ARGS}} + helmfile:deps: + cmds: + - helmfile deps {{.CLI_ARGS}} + helmfile:sync: + cmds: + - helmfile sync {{.CLI_ARGS}} + helmfile:destroy: + cmds: + - helmfile destroy {{.CLI_ARGS}} diff --git a/cluster/eksctl/README.md b/cluster/eksctl/README.md deleted file mode 100644 index 23c8a48..0000000 --- a/cluster/eksctl/README.md +++ /dev/null @@ -1,82 +0,0 @@ -# EKS Cluster Setup with eksctl - -This directory contains the configuration to create an EKS cluster with pod identity associations for various AWS services. - -## Prerequisites - -- AWS CLI configured with appropriate permissions -- eksctl installed - -## Create Cluster -Run the following command and follow the instructions: - -```bash -export REPO_ROOT=$(git rev-parse --show-toplevel) -$REPO_ROOT/scripts/create-cluster.sh -``` - -## AWS Resources Created - -The cluster creation will provision the following AWS resources: - -### EKS Cluster -- EKS cluster with Kubernetes version 1.33 -- VPC with CIDR 10.0.0.0/16 -- Single NAT Gateway -- Public and private subnets across availability zones -- EKS cluster security groups -- OIDC identity provider - -### Managed Node Group _(For Non-Auto Mode cluster)_ -- Managed node group with 3-6 m5.large instances -- Desired capacity: 4 nodes -- 100GB EBS volumes per node -- Node IAM role with required policies - -### EKS Addons _(For Non-Auto Mode cluster)_ -- eks-pod-identity-agent -- aws-ebs-csi-driver with EBS CSI controller policies -- vpc-cni (default) -- coredns (default) -- kube-proxy (default) - -### Pod Identity Associations -- **crossplane-system/provider-aws**: AdministratorAccess + permissions boundary -- **external-secrets/external-secrets**: Secrets Manager access policies -- **kube-system/aws-load-balancer-controller**: AWS Load Balancer Controller policies -- **external-dns/external-dns**: Route 53 DNS management policies - -### IAM Resources -- IAM roles for pod identity associations -- IAM policies for service-specific permissions -- OIDC identity provider for the cluster - -## Cleanup - -> [!CAUTION] -> Ensure all workloads are removed from the cluster before destroying to avoid orphaned resources. - -To delete the cluster and all associated resources: - -```bash -# Delete the EKS cluster -export $CLUSTER_NAME="cnoe-ref-impl" -export AWS_REGION="us-west-2" -eksctl delete cluster --name $CLUSTER_NAME --region $AWS_REGION - -# Delete the permissions boundary policy -export AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text) -aws iam delete-policy --policy-arn arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary -``` - -This will automatically clean up the following: -- EKS cluster -- Managed node groups -- Pod identity associations -- IAM roles and policies created by eksctl -- VPC and networking resources (if created by eksctl) -- EKS addons -- Crossplane permissions boundary policy - -> [!NOTE] -> Manual cleanup may be required for any resources created outside of eksctl or if the deletion process encounters errors. diff --git a/cluster/eksctl/cluster-config-auto.yaml b/cluster/eksctl/cluster-config-auto.yaml deleted file mode 100644 index ff9c19b..0000000 --- a/cluster/eksctl/cluster-config-auto.yaml +++ /dev/null @@ -1,46 +0,0 @@ -apiVersion: eksctl.io/v1alpha5 -kind: ClusterConfig -metadata: - name: ${CLUSTER_NAME} - region: ${AWS_REGION} - version: "1.33" - tags: - githubRepo: "github.com/cnoe-io/reference-implementation-aws" - env: "dev" - project: "cnoe" -vpc: - cidr: "10.0.0.0/16" - nat: - gateway: Single -autoModeConfig: - enabled: true -iam: - withOIDC: true - podIdentityAssociations: - - namespace: crossplane-system - serviceAccountName: provider-aws - permissionPolicyARNs: - - "arn:aws:iam::aws:policy/AdministratorAccess" - permissionsBoundaryARN: "${CROSSPLANE_BOUNDARY_POLICY_ARN}" - - namespace: external-secrets - serviceAccountName: external-secrets - permissionPolicy: - Version: "2012-10-17" - Statement: - - Action: - - "secretsmanager:ListSecrets" - - "secretsmanager:BatchGetSecretValue" - Effect: "Allow" - Resource: "*" - - Effect: "Allow" - Action: - - "secretsmanager:GetResourcePolicy" - - "secretsmanager:GetSecretValue" - - "secretsmanager:DescribeSecret" - - "secretsmanager:ListSecretVersionIds" - Resource: - - "arn:aws:secretsmanager:us-west-2:${AWS_ACCOUNT_ID}:secret:cnoe-ref-impl/*" - - namespace: external-dns - serviceAccountName: external-dns - wellKnownPolicies: - externalDNS: true diff --git a/cluster/eksctl/cluster-config.yaml b/cluster/eksctl/cluster-config.yaml deleted file mode 100644 index f5fcc5d..0000000 --- a/cluster/eksctl/cluster-config.yaml +++ /dev/null @@ -1,69 +0,0 @@ -apiVersion: eksctl.io/v1alpha5 -kind: ClusterConfig -metadata: - name: ${CLUSTER_NAME} - region: ${AWS_REGION} - version: "1.33" - tags: - githubRepo: "github.com/cnoe-io/reference-implementation-aws" - env: "dev" - project: "cnoe" -vpc: - cidr: "10.0.0.0/16" - nat: - gateway: Single -managedNodeGroups: - - name: managed-ng-1 - instanceType: m5.large - minSize: 3 - maxSize: 6 - desiredCapacity: 4 - volumeSize: 100 - ssh: - allow: false - labels: - pool: system -addonsConfig: - autoApplyPodIdentityAssociations: true -addons: - - name: eks-pod-identity-agent - - name: aws-ebs-csi-driver - podIdentityAssociations: - - namespace: kube-system - serviceAccountName: ebs-csi-controller-sa - wellKnownPolicies: - ebsCSIController: true -iam: - withOIDC: true - podIdentityAssociations: - - namespace: crossplane-system - serviceAccountName: provider-aws - permissionPolicyARNs: - - "arn:aws:iam::aws:policy/AdministratorAccess" - permissionsBoundaryARN: "${CROSSPLANE_BOUNDARY_POLICY_ARN}" - - namespace: external-secrets - serviceAccountName: external-secrets - permissionPolicy: - Version: "2012-10-17" - Statement: - - Action: - - "secretsmanager:ListSecrets" - - "secretsmanager:BatchGetSecretValue" - Effect: "Allow" - Resource: "*" - - Effect: "Allow" - Action: - - "secretsmanager:GetResourcePolicy" - - "secretsmanager:GetSecretValue" - - "secretsmanager:DescribeSecret" - - "secretsmanager:ListSecretVersionIds" - Resource: - - "arn:aws:secretsmanager:us-west-2:${AWS_ACCOUNT_ID}:secret:cnoe-ref-impl/*" - - namespace: kube-system - serviceAccountName: aws-load-balancer-controller - wellKnownPolicies: - awsLoadBalancerController: true - - namespace: external-dns - serviceAccountName: external-dns - wellKnownPolicies: - externalDNS: true diff --git a/cluster/iam-policies/crossplane-permissions-boundry.json b/cluster/iam-policies/crossplane-permissions-boundry.json deleted file mode 100644 index f7f6f3d..0000000 --- a/cluster/iam-policies/crossplane-permissions-boundry.json +++ /dev/null @@ -1,65 +0,0 @@ -{ - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "DenyPermBoundaryIAMPolicyAlteration", - "Effect": "Deny", - "Action": [ - "iam:DeletePolicy", - "iam:DeletePolicyVersion", - "iam:CreatePolicyVersion", - "iam:SetDefaultPolicyVersion" - ], - "Resource": [ - "arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary" - ] - }, - { - "Sid": "DenyRemovalOfPermBoundaryFromAnyUserOrRole", - "Effect": "Deny", - "Action": [ - "iam:DeleteUserPermissionsBoundary", - "iam:DeleteRolePermissionsBoundary" - ], - "Resource": [ - "arn:aws:iam::${AWS_ACCOUNT_ID}:user/*", - "arn:aws:iam::${AWS_ACCOUNT_ID}:role/*" - ], - "Condition": { - "StringEquals": { - "iam:PermissionsBoundary": "arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary" - } - } - }, - { - "Effect": "Deny", - "Action": [ - "iam:CreateUser", - "iam:AddUserToGroup", - "iam:AttachUserPolicy", - "iam:ChangePassword", - "iam:CreateAccessKey", - "iam:*AccountAlias", - "iam:CreateGroup", - "iam:*LoginProfile", - "iam:*IDConnectProvider*", - "iam:*SAMLProvider*", - "iam:CreateServiceSpecificCredential", - "iam:*MFA*", - "iam:UpdateUser" - ], - "Resource": [ - "*" - ] - }, - { - "Effect": "Allow", - "Action": [ - "*" - ], - "Resource": [ - "*" - ] - } - ] - } \ No newline at end of file diff --git a/cluster/iam-policies/external-secrets.json b/cluster/iam-policies/external-secrets.json deleted file mode 100644 index 0b28c75..0000000 --- a/cluster/iam-policies/external-secrets.json +++ /dev/null @@ -1,25 +0,0 @@ -{ - "Version": "2012-10-17", - "Statement": [ - { - "Action" : [ - "secretsmanager:ListSecrets", - "secretsmanager:BatchGetSecretValue" - ], - "Effect" : "Allow", - "Resource" : "*" - }, - { - "Effect": "Allow", - "Action": [ - "secretsmanager:GetResourcePolicy", - "secretsmanager:GetSecretValue", - "secretsmanager:DescribeSecret", - "secretsmanager:ListSecretVersionIds" - ], - "Resource": [ - "arn:aws:secretsmanager:us-west-2:${AWS_ACCOUNT_ID}:secret:cnoe-ref-impl/*" - ] - } - ] -} \ No newline at end of file diff --git a/cluster/terraform/README.md b/cluster/terraform/README.md deleted file mode 100644 index 926148a..0000000 --- a/cluster/terraform/README.md +++ /dev/null @@ -1,96 +0,0 @@ -# EKS Cluster Setup with Terraform - -This directory contains Terraform configuration to create an EKS cluster with pod identity associations for various AWS services. The configuration supports both standard EKS clusters and EKS Auto Mode. - -## Prerequisites - -- AWS CLI configured with appropriate permissions -- Terraform >= 1.0 installed - -## Create Cluster -Run the following command and follow the instructions: - -```bash -export REPO_ROOT=$(git rev-parse --show-toplevel) -$REPO_ROOT/scripts/create-cluster.sh -``` - -## AWS Resources Created - -The Terraform configuration will provision the following AWS resources: - -### EKS Cluster -- EKS cluster with Kubernetes version 1.33 -- VPC with CIDR 10.0.0.0/16 -- Single NAT Gateway -- Public and private subnets across 3 availability zones -- EKS cluster security groups -- OIDC identity provider - -### Compute Resources - -#### Auto Mode (when `auto_mode = true`) -- EKS Auto Mode enabled with general-purpose node pools -- Automatic compute resource management - -#### Standard Mode (when `auto_mode = false`) -- Managed node group with 3-6 m5.large instances -- Desired capacity: 4 nodes -- 100GB EBS volumes per node -- Node IAM role with required policies - -### EKS Addons - -#### Auto Mode -- All addons managed automatically by EKS Auto Mode -- No explicit addon configuration required - -#### Standard Mode -- eks-pod-identity-agent -- aws-ebs-csi-driver with EBS CSI controller policies -- vpc-cni -- coredns -- kube-proxy - -### Pod Identity Associations - -#### Always Created (Both Modes) -- **crossplane-system/provider-aws**: AdministratorAccess + permissions boundary -- **external-secrets/external-secrets**: Secrets Manager access policies -- **external-dns/external-dns**: Route 53 DNS management policies - -#### Standard Mode Only -- **kube-system/aws-load-balancer-controller**: AWS Load Balancer Controller policies -- **kube-system/ebs-csi-controller-sa**: EBS CSI driver policies - -### IAM Resources -- IAM roles for pod identity associations -- IAM policies for service-specific permissions -- OIDC identity provider for the cluster -- Crossplane permissions boundary policy - -## Cleanup - -> [!CAUTION] -> Ensure all workloads are removed from the cluster before destroying to avoid orphaned resources. - -To delete the cluster and all associated resources: - -```bash -# Destroy the Terraform-managed resources -export REPO_ROOT=$(git rev-parse --show-toplevel) -export export TF_VAR_auto_mode="true" # set this to "false" if using non-auto mode -terraform -chdir=$REPO_ROOT/cluster/terraform destroy -``` - -This will clean up: -- EKS cluster -- Managed node groups (if using standard mode) -- Pod identity associations -- IAM roles and policies created by Terraform -- VPC and networking resources -- EKS addons -- Crossplane permissions boundary policy - -> [!NOTE] -> Manual cleanup may be required for any resources created outside of Terraform or if the deletion process encounters errors. \ No newline at end of file diff --git a/cluster/terraform/main.tf b/cluster/terraform/main.tf deleted file mode 100644 index 592fbd1..0000000 --- a/cluster/terraform/main.tf +++ /dev/null @@ -1,242 +0,0 @@ -provider "aws" { - region = var.region -} - -data "aws_eks_cluster_auth" "this" { - name = module.eks.cluster_name -} - -data "aws_caller_identity" "current" {} -data "aws_availability_zones" "available" {} - -data "template_file" "crossplane_boundary_policy" { - template = file("${path.module}/../iam-policies/crossplane-permissions-boundry.json") - vars = { - AWS_ACCOUNT_ID = data.aws_caller_identity.current.account_id - } -} - -data "template_file" "external_secret_policy" { - template = file("${path.module}/../iam-policies/external-secrets.json") - vars = { - AWS_ACCOUNT_ID = data.aws_caller_identity.current.account_id - } -} -locals { - name = var.cluster_name - region = var.region - - vpc_cidr = "10.0.0.0/16" - azs = slice(data.aws_availability_zones.available.names, 0, 3) - - tags = { - githubRepo = "github.com/cnoe-io/reference-implementation-aws" - env = "dev" - project = "cnoe" - } -} - -################################################################################ -# Cluster -################################################################################ - -module "eks" { - source = "terraform-aws-modules/eks/aws" - version = "~> 20.37" - - cluster_name = local.name - cluster_version = "1.33" - cluster_endpoint_public_access = true - - enable_cluster_creator_admin_permissions = true - - vpc_id = module.vpc.vpc_id - subnet_ids = module.vpc.private_subnets - - enable_irsa = true - - # EKS Auto Mode configuration - # When enabled, EKS automatically manages compute resources and core addons - # This eliminates the need for managed node groups and manual addon management - cluster_compute_config = var.auto_mode ? { - enabled = true - node_pools = ["general-purpose", "system"] - } : null - - # Only create managed node groups when not using Auto Mode - # Auto Mode handles compute resources automatically - eks_managed_node_groups = var.auto_mode ? {} : { - initial = { - instance_types = ["m5.large"] - - min_size = 3 - max_size = 6 - desired_size = 4 - - disk_size = 100 - - labels = { - pool = "system" - } - } - } - - # Conditional cluster addons based on Auto Mode - # Auto Mode automatically manages: CoreDNS, kube-proxy, VPC CNI, EBS CSI driver, AWS Load Balancer Controller, eks-pod-identity-agent - cluster_addons = var.auto_mode ? { - # Auto Mode manages all addons automatically - no explicit addon configuration needed - } : { - # Standard mode requires all addons to be explicitly managed - coredns = {} - eks-pod-identity-agent = {} - kube-proxy = {} - vpc-cni = {} - aws-ebs-csi-driver = {} - } - - tags = local.tags -} - - -################################################################################ -# IAM Policies -################################################################################ - -resource "aws_iam_policy" "crossplane_boundary" { - name = "crossplane-permissions-boundary" - policy = data.template_file.crossplane_boundary_policy.rendered - - tags = local.tags -} - -################################################################################ -# Pod Identity -################################################################################ - -# AWS Load Balancer Controller - Only needed when not using Auto Mode -module "aws_load_balancer_controller_pod_identity" { - count = var.auto_mode ? 0 : 1 - source = "terraform-aws-modules/eks-pod-identity/aws" - version = "~> 1.0" - - name = "aws_load_balancer_controller" - attach_aws_lb_controller_policy = true - associations = { - external_secrets = { - cluster_name = module.eks.cluster_name - namespace = "kube-system" - service_account = "aws-load-balancer-controller" - } - } - - tags = local.tags -} - -# External DNS - Required for both Auto Mode and standard mode -module "external_dns_pod_identity" { - source = "terraform-aws-modules/eks-pod-identity/aws" - version = "~> 1.0" - - name = "external-dns" - attach_external_dns_policy = true - external_dns_hosted_zone_arns = [ "*" ] - associations = { - external_secrets = { - cluster_name = module.eks.cluster_name - namespace = "external-dns" - service_account = "external-dns" - } - } - tags = local.tags -} - -# EBS CSI Driver - Only needed when not using Auto Mode -module "ebs_csi_driver_pod_identity" { - count = var.auto_mode ? 0 : 1 - source = "terraform-aws-modules/eks-pod-identity/aws" - version = "~> 1.0" - - name = "ebs-csi-driver" - attach_aws_ebs_csi_policy = true - associations = { - external_secrets = { - cluster_name = module.eks.cluster_name - namespace = "kube-system" - service_account = "ebs-csi-controller-sa" - } - } - tags = local.tags -} - -# Crossplane - Required for both Auto Mode and standard mode -module "crossplane_pod_identity" { - source = "terraform-aws-modules/eks-pod-identity/aws" - version = "~> 1.0" - - name = "crossplane-provider-aws" - - additional_policy_arns = { - admin = "arn:aws:iam::aws:policy/AdministratorAccess" - } - permissions_boundary_arn = aws_iam_policy.crossplane_boundary.arn - - associations = { - crossplane = { - cluster_name = module.eks.cluster_name - namespace = "crossplane-system" - service_account = "provider-aws" - } - } - - tags = local.tags -} - -# External Secrets - Required for both Auto Mode and standard mode -module "external_secrets_pod_identity" { - source = "terraform-aws-modules/eks-pod-identity/aws" - version = "~> 1.0" - - name = "external-secrets" - attach_custom_policy = true - override_policy_documents = [data.template_file.external_secret_policy.rendered] - associations = { - external_secrets = { - cluster_name = module.eks.cluster_name - namespace = "external-secrets" - service_account = "external-secrets" - } - } - - tags = local.tags -} - -################################################################################ -# VPC -################################################################################ - -module "vpc" { - source = "terraform-aws-modules/vpc/aws" - version = "~> 5.0" - - name = local.name - cidr = local.vpc_cidr - - azs = local.azs - private_subnets = [for k, v in local.azs : cidrsubnet(local.vpc_cidr, 4, k)] - public_subnets = [for k, v in local.azs : cidrsubnet(local.vpc_cidr, 8, k + 48)] - - enable_nat_gateway = true - single_nat_gateway = true - enable_dns_hostnames = true - enable_dns_support = true - - public_subnet_tags = { - "kubernetes.io/role/elb" = 1 - } - - private_subnet_tags = { - "kubernetes.io/role/internal-elb" = 1 - } - - tags = local.tags -} \ No newline at end of file diff --git a/cluster/terraform/outputs.tf b/cluster/terraform/outputs.tf deleted file mode 100644 index 0873d1f..0000000 --- a/cluster/terraform/outputs.tf +++ /dev/null @@ -1,39 +0,0 @@ -output "cluster_name" { - description = "EKS cluster name" - value = module.eks.cluster_name -} - -output "cluster_endpoint" { - description = "Endpoint for EKS control plane" - value = module.eks.cluster_endpoint -} - -output "cluster_security_group_id" { - description = "Security group ids attached to the cluster control plane" - value = module.eks.cluster_security_group_id -} - -output "region" { - description = "AWS region" - value = var.region -} - -output "cluster_arn" { - description = "The Amazon Resource Name (ARN) of the cluster" - value = module.eks.cluster_arn -} - -output "oidc_provider_arn" { - description = "The ARN of the OIDC Provider if enabled" - value = module.eks.oidc_provider_arn -} - -output "auto_mode_enabled" { - description = "Whether EKS Auto Mode is enabled" - value = var.auto_mode -} - -output "configure_kubectl" { - description = "Configure kubectl: make sure you're logged in with the correct AWS profile and run the following command to update your kubeconfig" - value = "aws eks --region ${var.region} update-kubeconfig --name ${module.eks.cluster_name}" -} \ No newline at end of file diff --git a/cluster/terraform/variables.tf b/cluster/terraform/variables.tf deleted file mode 100644 index 446e13f..0000000 --- a/cluster/terraform/variables.tf +++ /dev/null @@ -1,18 +0,0 @@ -variable "cluster_name" { - description = "Name of the EKS cluster" - type = string - default = "cnoe-ref-impl" -} - -variable "region" { - description = "AWS region" - type = string - default = "us-west-2" -} - -variable "auto_mode" { - description = "Enable EKS Auto Mode. When enabled, EKS automatically manages compute resources and many addons." - type = bool - default = false -} - diff --git a/cluster/terraform/versions.tf b/cluster/terraform/versions.tf deleted file mode 100644 index 4c65a71..0000000 --- a/cluster/terraform/versions.tf +++ /dev/null @@ -1,9 +0,0 @@ -terraform { - required_version = ">= 1.0" - required_providers { - aws = { - source = "hashicorp/aws" - version = ">= 5.0" - } - } -} \ No newline at end of file diff --git a/config.yaml b/config.yaml deleted file mode 100644 index 5924313..0000000 --- a/config.yaml +++ /dev/null @@ -1,35 +0,0 @@ -### Config for CNOE AWS Reference Implementation ### -# Source: "https://github.com/cnoe/reference-implementation-aws" - -# Details of your repository fork -repo: - url: "https://github.com/cnoe-punkwalker/reference-implementation-aws" # This is the GITHUB URL of the fork in Github Org that you have created. - revision: "HEAD" # Branch or Tag which should be used for Argo CD Apps - basepath: "packages" # Directory in which configuration of addons is stored - -# The name of the EKS cluster you are installing the reference implementation on. -cluster_name: "cnoe-ref-impl" -# Set this to "true" if EKS cluster is Auto Mode othewise "false" -# !!! Note: This is a string value as it is passed on to the Argo CD cluster secret as label -auto_mode: "true" -# AWS Region of the EKS cluster and cnoe-reference-implementation-aws config secret -region: "us-west-2" - -# Base Domain name used for exposing services. It should be a subdomain or main domain of the Route53 hosted zone. -domain: - -# Route53 hosted zone ID for configuring external-dns -route53_hosted_zone_id: - -# Set this to "true" if you want to enable path routing othewise "false" for domain based routing. -# When enabled, the exposed addons will be accessible at https:/// -# When disabled, the exposed addons will be accessible at https://. -# !!! Note: This is a string value as it is passed on to the Argo CD cluster secret as label -path_routing: "true" - -# Tags for AWS resources -tags: - githubRepo: "github.com/cnoe-io/reference-implementation-aws" - env: "dev" - project: "cnoe" - \ No newline at end of file diff --git a/config.yaml.template b/config.yaml.template new file mode 100644 index 0000000..fe11c00 --- /dev/null +++ b/config.yaml.template @@ -0,0 +1,47 @@ +### Config for CNOE Azure Reference Implementation ### +# Source: "https://github.com/livewyer-ops/reference-implementation-azure" + +# Details of your repository fork +repo: + url: "https://github.com/livewyer-ops/reference-implementation-azure" # This is the GITHUB URL of the fork in Github Org that you have created. + revision: "v2" # Branch or Tag which should be used for Argo CD Apps + basepath: "packages" # Directory in which configuration of addons is stored + +# The name of the AKS cluster you are installing the reference implementation on. +cluster_name: "cnoe-ref-impl" +# Azure Region of the AKS cluster and cnoe-reference-implementation-azure config secret +subscription: +location: eastus +resource_group: cnoe-idp + +# AKS cluster OIDC issuer URL +cluster_oidc_issuer_url: https://eastus.oic.prod-aks.azure.com/00000000-0000-0000-0000-000000000000/11111111-1111-1111-1111-111111111111/ + +# Base Domain name used for exposing services. It should be a subdomain or main domain of the DNS zone. +domain: + +# Set this to "true" if you want to enable path routing othewise "false" for domain based routing. +# When enabled, the exposed addons will be accessible at https:/// +# When disabled, the exposed addons will be accessible at https://. +# !!! Note: This is a string value as it is passed on to the Argo CD cluster secret as label +path_routing: false + +github: + appId: "" + installationId: "" + orgURL: https://github.com/< + clientId: + clientSecret: + webhookUrl: + webhookSecret: + privateKey: | + -----BEGIN RSA PRIVATE KEY----- + ... + -----END RSA PRIVATE KEY----- + + +# Tags for AWS resources +tags: + githubRepo: "github.com/livewyer-ops/reference-implementation-azure" + env: "dev" + project: "cnoe" diff --git a/helmfile.yaml b/helmfile.yaml new file mode 100644 index 0000000..827436c --- /dev/null +++ b/helmfile.yaml @@ -0,0 +1,33 @@ +helmDefaults: + cleanupOnFail: true + createNamespace: true + wait: true + +repositories: + - name: argo + url: https://argoproj.github.io/argo-helm + +releases: + - name: argocd + namespace: argocd + chart: argo/argo-cd + version: '{{ ((readFile (printf "%s/%s" (requiredEnv "REPO_ROOT") "packages/addons/values.yaml")) | fromYaml).argocd.defaultVersion }}' + values: + - packages/argo-cd/values.yaml + - packages/argo-cd/values.yaml.gotmpl + - name: cnoe-argocd-config + namespace: argocd + chart: packages/charts/raw + values: + - packages/bootstrap/argocd.yaml.gotmpl + disableValidationOnInstall: true + needs: + - argocd/argocd + - name: cnoe-appset + namespace: argocd + chart: packages/charts/appset + values: + - packages/addons/values.yaml + disableValidationOnInstall: true + needs: + - argocd/cnoe-argocd-config diff --git a/packages/addons/values.yaml b/packages/addons/values.yaml index fcf69f5..89f6eb8 100644 --- a/packages/addons/values.yaml +++ b/packages/addons/values.yaml @@ -6,20 +6,18 @@ argocd: defaultVersion: "8.0.14" chartRepository: "https://argoproj.github.io/argo-helm" valuesObject: - cnoe_ref_impl: # Specific values for reference CNOE implementation to control extraObjects. - auto_mode: '{{ if eq .metadata.labels.auto_mode "true" }}true{{ else }}false{{ end }}' global: - domain: '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ else }}argocd.{{ .metadata.annotations.domain }}{{ end }}' + domain: '{{ if eq .metadata.annotations.pathRouting "true" }}{{ .metadata.annotations.domain }}{{ else }}argocd.{{ .metadata.annotations.domain }}{{ end }}' server: ingress: - annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' - path: '/{{ if eq .metadata.labels.path_routing "true" }}argocd{{ end }}' + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' + path: '/{{ if eq .metadata.annotations.pathRouting "true" }}argocd{{ end }}' configs: cm: oidc.config: | name: Keycloak - issuer: https://{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/keycloak{{ end }}/realms/cnoe + issuer: https://{{ if eq .metadata.annotations.pathRouting "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/keycloak{{ end }}/realms/cnoe clientID: argocd enablePKCEAuthentication: true requestedScopes: @@ -28,46 +26,126 @@ argocd: - email - groups params: - 'server.basehref': '/{{ if eq .metadata.labels.path_routing "true" }}argocd{{ end }}' - 'server.rootpath': '{{ if eq .metadata.labels.path_routing "true" }}argocd{{ end }}' + "server.basehref": '/{{ if eq .metadata.annotations.pathRouting "true" }}argocd{{ end }}' + "server.rootpath": '{{ if eq .metadata.annotations.pathRouting "true" }}argocd{{ end }}' additionalResources: - - manifestPath: "manifests" - type: "manifests" + - manifestPath: "manifests" + type: "manifests" selector: matchExpressions: - key: environment operator: In - values: ['control-plane-bootstrap', 'control-plane'] + values: ["control-plane-bootstrap", "control-plane"] -aws-load-balancer-controller: +crossplane: + enabled: true + chartName: crossplane + namespace: crossplane-system + releaseName: crossplane + defaultVersion: "2.0.2-up.4" + chartRepository: "https://charts.upbound.io/stable" + selector: + matchExpressions: + - key: environment + operator: In + values: ["control-plane"] + +crossplane-config: enabled: true - # enableAckPodIdentity: true - namespace: kube-system - defaultVersion: "1.13.2" - chartRepository: "https://aws.github.io/eks-charts" + chartName: raw + namespace: crossplane-system + releaseName: crossplane-xrs + defaultVersion: "0.1.0" + chartRepository: "{{ .metadata.annotations.addonsRepoURL }}" + path: packages/charts/raw valuesObject: - serviceAccount: - name: "aws-load-balancer-controller" - # vpcId: '{{.metadata.annotations.aws_vpc_id}}' - clusterName: '{{ .metadata.labels.clusterName }}' - ignoreDifferences: - - kind: Secret - name: aws-load-balancer-tls - jsonPointers: [/data] - - group: admissionregistration.k8s.io - kind: MutatingWebhookConfiguration - jqPathExpressions: ['.webhooks[].clientConfig.caBundle'] - - group: admissionregistration.k8s.io - kind: ValidatingWebhookConfiguration - jqPathExpressions: ['.webhooks[].clientConfig.caBundle'] + templates: + - apiVersion: azure.m.upbound.io/v1beta1 + kind: ClusterProviderConfig + metadata: + name: default + spec: + credentials: + source: Secret + secretRef: + name: provider-azure + namespace: crossplane-system + key: credentials + - apiVersion: kubernetes.m.crossplane.io/v1alpha1 + kind: ClusterProviderConfig + metadata: + name: default + namespace: crossplane-system + spec: + credentials: + source: InjectedIdentity selector: matchExpressions: - - key: auto_mode + - key: environment operator: In - values: ['false'] + values: ["control-plane"] + +crossplane-xrs: + enabled: true + chartName: raw + namespace: crossplane-system + releaseName: crossplane-xrs + defaultVersion: "0.1.0" + chartRepository: "{{ .metadata.annotations.addonsRepoURL }}" + path: packages/charts/raw + valuesObject: + templates: + - apiVersion: azure.livewyer.io/v1alpha1 + kind: WorkloadIdentity + metadata: + name: external-dns + namespace: external-dns + spec: + forProvider: + location: "{{ .metadata.annotations.location }}" + oidcIssuerURL: "{{ .metadata.annotations.clusterOIDCIssuerURL }}" + resourceGroupName: "{{ .metadata.annotations.resourceGroup }}" + roleAssignments: + - roleDefinitionName: DNS Zone Contributor + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + - roleDefinitionName: Reader + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + serviceAccountName: external-dns + - apiVersion: azure.livewyer.io/v1alpha1 + kind: WorkloadIdentity + metadata: + name: external-secrets + namespace: external-secrets + spec: + forProvider: + location: "{{ .metadata.annotations.location }}" + oidcIssuerURL: "{{ .metadata.annotations.clusterOIDCIssuerURL }}" + resourceGroupName: "{{ .metadata.annotations.resourceGroup }}" + roleAssignments: + - roleDefinitionName: Key Vault Secrets User + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + serviceAccountName: external-secrets + - apiVersion: azure.livewyer.io/v1alpha1 + kind: WorkloadIdentity + metadata: + name: keycloak-eso-store + namespace: keycloak + spec: + forProvider: + location: "{{ .metadata.annotations.location }}" + oidcIssuerURL: "{{ .metadata.annotations.clusterOIDCIssuerURL }}" + resourceGroupName: "{{ .metadata.annotations.resourceGroup }}" + roleAssignments: + - roleDefinitionName: Key Vault Secrets User + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + - roleDefinitionName: Key Vault Reader + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + serviceAccountName: eso-store + selector: + matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] ingress-nginx: enabled: true @@ -80,7 +158,7 @@ ingress-nginx: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] external-dns: enabled: true @@ -90,13 +168,15 @@ external-dns: chartRepository: https://kubernetes-sigs.github.io/external-dns defaultVersion: "1.16.1" valuesObject: - zoneIdFilters: - - '{{ .metadata.annotations.route53_hosted_zone_id }}' + provider: + name: azure + domainFilters: + - "{{ .metadata.annotations.domain }}" selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] external-secrets: enabled: true @@ -106,13 +186,13 @@ external-secrets: defaultVersion: "0.17.0" chartRepository: "https://charts.external-secrets.io" additionalResources: - - manifestPath: "manifests" - type: "manifests" + - manifestPath: "manifests" + type: "manifests" selector: matchExpressions: - key: environment operator: In - values: ['control-plane-bootstrap', 'control-plane'] + values: ["control-plane-bootstrap", "control-plane"] cert-manager: enabled: true @@ -123,14 +203,14 @@ cert-manager: chartRepository: "https://charts.jetstack.io" valuesObject: global: - domainName: '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ end }}' - pathRouting: '{{ if eq .metadata.labels.path_routing "true" }}true{{ else }}false{{ end }}' + domainName: '{{ if eq .metadata.annotations.pathRouting "true" }}{{ .metadata.annotations.domain }}{{ end }}' + pathRouting: '{{ if eq .metadata.annotations.pathRouting "true" }}true{{ else }}false{{ end }}' selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] - + values: ["control-plane"] + keycloak: enabled: true chartName: keycloak @@ -139,23 +219,23 @@ keycloak: defaultVersion: "24.7.3" chartRepository: "https://charts.bitnami.com/bitnami" valuesObject: - httpRelativePath: '/{{ if eq .metadata.labels.path_routing "true" }}keycloak/{{ end }}' + httpRelativePath: '/{{ if eq .metadata.annotations.pathRouting "true" }}keycloak/{{ end }}' ingress: - hostname: '{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' - annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' + hostname: '{{ if eq .metadata.annotations.pathRouting "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' extraTls: - - hosts: - - '{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' - secretName: keycloak-server-tls + - hosts: + - '{{ if eq .metadata.annotations.pathRouting "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + secretName: keycloak-server-tls additionalResources: - - manifestPath: "manifests" - type: "manifests" + - manifestPath: "manifests" + type: "manifests" selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] backstage: enabled: true @@ -166,32 +246,32 @@ backstage: chartRepository: "https://backstage.github.io/charts" valuesObject: ingress: - host: '{{ if eq .metadata.labels.path_routing "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' - annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' + host: '{{ if eq .metadata.annotations.pathRouting "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' backstage: appConfig: catalog: locations: - type: url - target: '{{ .metadata.annotations.addons_repo_url }}/blob/{{ .metadata.annotations.addons_repo_revision }}/templates/backstage/catalog-info.yaml' + target: "{{ .metadata.annotations.addonsRepoURL }}/blob/{{ .metadata.annotations.addonsRepoRevision }}/templates/backstage/catalog-info.yaml" extraEnvVars: - - name: BACKSTAGE_FRONTEND_URL - value: 'https://{{ if eq .metadata.labels.path_routing "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' - - name: KEYCLOAK_NAME_METADATA - value: 'https://{{ if eq .metadata.labels.path_routing "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/keycloak{{ end }}/realms/cnoe/.well-known/openid-configuration' - - name: ARGO_WORKFLOWS_URL - value: 'https://{{ if eq .metadata.labels.path_routing "false" }}argo-workflows.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/argo-workflows{{ end }}' - - name: ARGO_CD_URL - value: 'https://{{ if eq .metadata.labels.path_routing "false" }}argocd.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/argocd{{ end }}' + - name: BACKSTAGE_FRONTEND_URL + value: 'https://{{ if eq .metadata.annotations.pathRouting "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' + - name: KEYCLOAK_NAME_METADATA + value: 'https://{{ if eq .metadata.annotations.pathRouting "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/keycloak{{ end }}/realms/cnoe/.well-known/openid-configuration' + - name: ARGO_WORKFLOWS_URL + value: 'https://{{ if eq .metadata.annotations.pathRouting "false" }}argo-workflows.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/argo-workflows{{ end }}' + - name: ARGO_CD_URL + value: 'https://{{ if eq .metadata.annotations.pathRouting "false" }}argocd.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}/argocd{{ end }}' additionalResources: - - manifestPath: "manifests" - type: "manifests" + - manifestPath: "manifests" + type: "manifests" selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] argo-workflows: enabled: true @@ -202,67 +282,30 @@ argo-workflows: chartRepository: "https://argoproj.github.io/argo-helm" valuesObject: server: - baseHref: '/{{ if eq .metadata.labels.path_routing "true" }}argo-workflows/{{ end }}' + baseHref: '/{{ if eq .metadata.annotations.pathRouting "true" }}argo-workflows/{{ end }}' sso: - issuer: '{{ if eq .metadata.labels.path_routing "true" }}https://{{ .metadata.annotations.domain }}/keycloak{{ else }}https://keycloak.{{ .metadata.annotations.domain }}{{ end }}/realms/cnoe' - redirectUrl: '{{ if eq .metadata.labels.path_routing "true" }}https://{{ .metadata.annotations.domain }}/argo-workflows{{ else }}https://argo-workflows.{{ .metadata.annotations.domain }}{{ end }}/oauth2/callback' + issuer: '{{ if eq .metadata.annotations.pathRouting "true" }}https://{{ .metadata.annotations.domain }}/keycloak{{ else }}https://keycloak.{{ .metadata.annotations.domain }}{{ end }}/realms/cnoe' + redirectUrl: '{{ if eq .metadata.annotations.pathRouting "true" }}https://{{ .metadata.annotations.domain }}/argo-workflows{{ else }}https://argo-workflows.{{ .metadata.annotations.domain }}{{ end }}/oauth2/callback' ingress: - annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.labels.path_routing "false" }}letsencrypt-prod{{ end }}' - nginx.ingress.kubernetes.io/rewrite-target: '{{ if eq .metadata.labels.path_routing "true" }}/$2{{ end }}' + annotations: + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' + nginx.ingress.kubernetes.io/rewrite-target: '{{ if eq .metadata.annotations.pathRouting "true" }}/$2{{ end }}' hosts: - - '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' - paths: - - '/{{ if eq .metadata.labels.path_routing "true" }}argo-workflows(/|$)(.*){{ end }}' + - '{{ if eq .metadata.annotations.pathRouting "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' + paths: + - '/{{ if eq .metadata.annotations.pathRouting "true" }}argo-workflows(/|$)(.*){{ end }}' tls: - - hosts: - - '{{ if eq .metadata.labels.path_routing "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' - secretName: argo-workflows-server-tls + - hosts: + - '{{ if eq .metadata.annotations.pathRouting "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' + secretName: argo-workflows-server-tls additionalResources: - - manifestPath: "manifests" - type: "manifests" - selector: - matchExpressions: - - key: environment - operator: In - values: ['control-plane'] - -crossplane: - enabled: true - chartName: crossplane - namespace: crossplane-system - releaseName: crossplane - defaultVersion: "1.20.0" - chartRepository: "https://charts.crossplane.io/stable" - selector: - matchExpressions: - - key: environment - operator: In - values: ['control-plane'] - -crossplane-upbound-providers: - enabled: true - chartName: crossplane-aws-upbound - namespace: crossplane-system - releaseName: crossplane-upbound-providers - defaultVersion: "3.0.0" - chartRepository: "https://gitops-bridge-dev.github.io/gitops-bridge-helm-charts" - selector: - matchExpressions: - - key: environment - operator: In - values: ['control-plane'] - -crossplane-compositions: - enabled: true - namespace: crossplane-system - type: manifest - path: packages/crossplane-compositions + - manifestPath: "manifests" + type: "manifests" selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] syncPolicy: automated: @@ -271,4 +314,4 @@ syncPolicy: prune: false syncPolicyAppSet: - preserveResourcesOnDeletion: false # Set to false so that cleanup script removes all the deployed resources \ No newline at end of file + preserveResourcesOnDeletion: false # Set to false so that cleanup script removes all the deployed resources diff --git a/packages/argo-cd/manifests/appproject-demo.yaml b/packages/argo-cd/manifests/appproject-demo.yaml index 977105c..65ad111 100644 --- a/packages/argo-cd/manifests/appproject-demo.yaml +++ b/packages/argo-cd/manifests/appproject-demo.yaml @@ -8,10 +8,10 @@ metadata: spec: description: For the demo sourceRepos: - - '*' + - "*" clusterResourceWhitelist: - - group: '*' - kind: '*' + - group: "*" + kind: "*" destinations: - namespace: demo server: https://kubernetes.default.svc diff --git a/packages/argo-cd/manifests/argo-cd-github-app.yaml b/packages/argo-cd/manifests/argo-cd-github-app.yaml deleted file mode 100644 index 77dcaa8..0000000 --- a/packages/argo-cd/manifests/argo-cd-github-app.yaml +++ /dev/null @@ -1,53 +0,0 @@ -# Github App Secret for ArgoCD ---- -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: github-app-org - namespace: argocd -spec: - refreshInterval: "15m" - secretStoreRef: - name: aws-secretsmanager - kind: ClusterSecretStore - target: - name: github-app-org - template: - metadata: - labels: - argocd.argoproj.io/secret-type: repo-creds - data: - type: git - url: '{{ .repoURL }}' - githubAppID: "{{ .appId }}" - githubAppInstallationID: "{{ .installationId }}" - githubAppPrivateKey: "{{ .privateKey }}" - data: - - secretKey: appId - remoteRef: - conversionStrategy: Default # TODO: Remove when figured out how to avoid Diffs for CR defaults - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: argocd-github.appId - - secretKey: installationId - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: argocd-github.installationId - - secretKey: privateKey - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: argocd-github.privateKey - - secretKey: repoURL - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: argocd-github.url \ No newline at end of file diff --git a/packages/argo-cd/manifests/hub-cluster-secret.yaml b/packages/argo-cd/manifests/hub-cluster-secret.yaml deleted file mode 100644 index 166e72c..0000000 --- a/packages/argo-cd/manifests/hub-cluster-secret.yaml +++ /dev/null @@ -1,88 +0,0 @@ -# in-cluster ArgoCD cluster Secret for passing metadata to ApplicationSets -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: hub-cluster-secret - namespace: argocd -spec: - refreshInterval: "15m" - secretStoreRef: - name: aws-secretsmanager - kind: ClusterSecretStore - target: - name: hub-cluster - template: - metadata: - labels: - argocd.argoproj.io/secret-type: cluster - clusterClass: "control-plane" - clusterName: '{{ .clusterName }}' - environment: "control-plane" - path_routing: '{{ .pathRouting }}' - auto_mode: '{{ .autoMode }}' - annotations: - route53_hosted_zone_id: '{{ .route53HostedZoneID }}' - addons_repo_url: '{{ .repoURL }}' - addons_repo_revision: '{{ .repoRevision }}' - addons_repo_basepath: '{{ .repoBasePath }}' - domain: '{{ .domain }}' - data: - name: '{{ .clusterName }}' - server: https://kubernetes.default.svc - data: - - secretKey: clusterName - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: cluster_name - - secretKey: pathRouting - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: path_routing - - secretKey: repoURL - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: repo.url - - secretKey: repoRevision - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: repo.revision - - secretKey: repoBasePath - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: repo.basepath - - secretKey: domain - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: domain - - secretKey: autoMode - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: auto_mode - - secretKey: route53HostedZoneID - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: route53_hosted_zone_id \ No newline at end of file diff --git a/packages/argo-cd/values.yaml b/packages/argo-cd/values.yaml index 304f52d..e415b50 100644 --- a/packages/argo-cd/values.yaml +++ b/packages/argo-cd/values.yaml @@ -1,6 +1,4 @@ # Ref: https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd -cnoe_ref_impl: - auto_mode: '"true"' dex: enabled: false server: @@ -10,6 +8,9 @@ server: tls: true annotations: argocd.argoproj.io/sync-wave: "20" +redis: + livenessProbe: + enabled: true configs: cm: accounts.backstage: apiKey @@ -58,7 +59,7 @@ configs: end end return health_status - "*.aws.upbound.io/*": + "*.azure.upbound.io/*": health.lua: | health_status = { status = "Progressing", @@ -96,7 +97,44 @@ configs: end return health_status - "*.aws.crossplane.io/*": + "*.azure.crossplane.io/*": + health.lua: | + health_status = { + status = "Progressing", + message = "Provisioning ..." + } + + if obj.status == nil or obj.status.conditions == nil then + return health_status + end + + for i, condition in ipairs(obj.status.conditions) do + if condition.type == "Ready" then + if condition.status == "True" then + health_status.status = "Healthy" + health_status.message = "Resource is up-to-date." + return health_status + end + end + + if condition.type == "LastAsyncOperation" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + + if condition.type == "Synced" then + if condition.status == "False" then + health_status.status = "Degraded" + health_status.message = condition.message + return health_status + end + end + end + return health_status + "*.azure.livewyer.io/*": health.lua: | health_status = { status = "Progressing", @@ -140,19 +178,19 @@ configs: g, superuser, role:admin g, backstage, role:readonly -extraObjects: -- | - # Creates a gp3 storageClass for EBS CSI. - # Sets different provisioner value for EKS Auto Mode based on auto_mode parameter in config file. - apiVersion: storage.k8s.io/v1 - kind: StorageClass - metadata: - name: gp3 - annotations: - storageclass.kubernetes.io/is-default-class: "true" - argocd.argoproj.io/sync-wave: "-10" - provisioner: {{ if eq .Values.cnoe_ref_impl.auto_mode "true"}}ebs.csi.eks.amazonaws.com{{ else }}ebs.csi.aws.com{{ end }} - volumeBindingMode: WaitForFirstConsumer - parameters: - type: gp3 - encrypted: "true" +# extraObjects: +# - | +# # Creates a gp3 storageClass for EBS CSI. +# # Sets different provisioner value for EKS Auto Mode based on auto_mode parameter in config file. +# apiVersion: storage.k8s.io/v1 +# kind: StorageClass +# metadata: +# name: gp3 +# annotations: +# storageclass.kubernetes.io/is-default-class: "true" +# argocd.argoproj.io/sync-wave: "-10" +# provisioner: {{ if eq .Values.cnoe_ref_impl.auto_mode "true"}}ebs.csi.eks.amazonaws.com{{ else }}ebs.csi.aws.com{{ end }} +# volumeBindingMode: WaitForFirstConsumer +# parameters: +# type: gp3 +# encrypted: "true" diff --git a/packages/argo-cd/values.yaml.gotmpl b/packages/argo-cd/values.yaml.gotmpl new file mode 100644 index 0000000..794bfe4 --- /dev/null +++ b/packages/argo-cd/values.yaml.gotmpl @@ -0,0 +1,75 @@ +{{- $config := (readFile "../../config.yaml") | fromYaml -}} + +global: + domain: {{ ternary $config.domain (printf "argocd.%s" $config.domain) $config.path_routing }} + +server: + ingress: + annotations: + {{ if not $config.path_routing -}} + cert-manager.io/cluster-issuer: letsencrypt-prod + {{ end -}} + path: {{ ternary "/argocd" "/" $config.path_routing }} + +configs: + cm: + oidc.config: | + name: Keycloak + issuer: https://{{ ternary (printf "%s/keycloak" $config.domain) (printf "keycloak.%s" $config.domain) $config.path_routing }}/realms/cnoe + clientID: argocd + enablePKCEAuthentication: true + requestedScopes: + - openid + - profile + - email + - groups + params: + 'server.basehref': {{ ternary "/argocd" "/" $config.path_routing }} + 'server.rootpath': {{ ternary "argocd" "" $config.path_routing }} + +extraObjects: + - apiVersion: v1 + kind: Secret + type: Opaque + metadata: + name: cnoe + labels: + argocd.argoproj.io/secret-type: cluster + environment: "control-plane" + annotations: + addonsRepoURL: {{ $config.repo.url }} + addonsRepoRevision: {{ $config.repo.revision }} + addonsRepoBasepath: {{ $config.repo.basepath }} + subscription: {{ $config.subscription }} + location: {{ $config.location }} + resourceGroup: {{ $config.resource_group }} + clusterName: {{ $config.cluster_name }} + clusterOIDCIssuerURL: {{ $config.cluster_oidc_issuer_url }} + domain: {{ $config.domain }} + pathRouting: "{{ $config.path_routing }}" + environment: "control-plane" + stringData: + name: {{ $config.cluster_name }} + server: https://kubernetes.default.svc + - apiVersion: v1 + kind: Secret + type: Opaque + metadata: + name: github-app-org + labels: + argocd.argoproj.io/secret-type: repo-creds + stringData: + type: git + url: {{ $config.github.orgURL }} + githubAppID: "{{ $config.github.appId }}" + githubAppInstallationID: "{{ $config.github.installationId }}" + githubClientID: {{ $config.github.clientId }} + githubClientSecret: "{{ $config.github.clientSecret }}" + {{ if $config.github.webhookUrl -}} + githubWebhookURL: {{ $config.github.webhookUrl }} + {{ end -}} + {{ if $config.github.webhookSecret }} + githubWebhookSecret: {{ $config.github.webhookSecret }} + {{ end -}} + githubAppPrivateKey: | + {{ $config.github.privateKey | nindent 8 }} diff --git a/packages/argocd/dev/cm-argocd-cm.yaml b/packages/argocd/dev/cm-argocd-cm.yaml deleted file mode 100644 index 4a9eca1..0000000 --- a/packages/argocd/dev/cm-argocd-cm.yaml +++ /dev/null @@ -1,55 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: argocd-cm - app.kubernetes.io/part-of: argocd - name: argocd-cm -data: - accounts.backstage: apiKey - accounts.backstage.enabled: "true" - application.resourceTrackingMethod: annotation - resource.exclusions: | - - kinds: - - ProviderConfigUsage - apiGroups: - - "*" - resource.customizations: | - "*.gcp.upbound.io/*": - health.lua: | - health_status = { - status = "Progressing", - message = "Provisioning ..." - } - - if obj.status == nil or obj.status.conditions == nil then - return health_status - end - - for i, condition in ipairs(obj.status.conditions) do - if condition.type == "Ready" then - if condition.status == "True" then - health_status.status = "Healthy" - health_status.message = "Resource is up-to-date." - return health_status - end - end - - if condition.type == "LastAsyncOperation" then - if condition.status == "False" then - health_status.status = "Degraded" - health_status.message = condition.message - return health_status - end - end - - if condition.type == "Synced" then - if condition.status == "False" then - health_status.status = "Degraded" - health_status.message = condition.message - return health_status - end - end - end - - return health_status diff --git a/packages/backstage/base/install-postgresql.yaml b/packages/backstage/base/install-postgresql.yaml deleted file mode 100644 index cbbcaa4..0000000 --- a/packages/backstage/base/install-postgresql.yaml +++ /dev/null @@ -1,72 +0,0 @@ -kind: PersistentVolumeClaim -apiVersion: v1 -metadata: - name: postgresql - namespace: backstage - labels: - app: postgresql -spec: - storageClassName: default - capacity: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 1Gi ---- -apiVersion: apps/v1 -kind: StatefulSet -metadata: - name: postgresql - namespace: backstage - labels: - app: postgresql -spec: - serviceName: service-postgresql - replicas: 1 - selector: - matchLabels: - app: postgresql - template: - metadata: - labels: - app: postgresql - spec: - containers: - - name: postgres - resources: - limits: - memory: 500Mi - requests: - cpu: 100m - memory: 300Mi - image: docker.io/library/postgres:15.3-alpine3.18 - envFrom: - - secretRef: - name: postgresql-config - ports: - - containerPort: 5432 - name: postgresdb - volumeMounts: - - name: data - mountPath: /var/lib/postgresql/data - subPath: postgress - volumes: - - name: data - persistentVolumeClaim: - claimName: postgresql ---- -apiVersion: v1 -kind: Service -metadata: - name: postgresql - namespace: backstage - labels: - app: postgresql -spec: - ports: - - port: 5432 - name: postgres - clusterIP: None - selector: - app: postgresql diff --git a/packages/backstage/dev/cm-backstage-config.yaml b/packages/backstage/dev/cm-backstage-config.yaml deleted file mode 100644 index 73e67bc..0000000 --- a/packages/backstage/dev/cm-backstage-config.yaml +++ /dev/null @@ -1,156 +0,0 @@ -apiVersion: v1 -kind: ConfigMap -metadata: - labels: - app.kubernetes.io/name: backstage - name: backstage-config -data: - app-config.yaml: | - app: - title: CNOE Backstage - baseUrl: ${BACKSTAGE_FRONTEND_URL} - organization: - name: CNOE - backend: - # Used for enabling authentication, secret is shared by all backend plugins - # See https://backstage.io/docs/tutorials/backend-to-backend-auth for - # information on the format - # auth: - # keys: - # - secret: ${BACKEND_SECRET} - baseUrl: ${BACKSTAGE_FRONTEND_URL} - listen: - port: 7007 - # Uncomment the following host directive to bind to specific interfaces - # host: 127.0.0.1 - csp: - connect-src: ["'self'", 'http:', 'https:'] - # Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference - # Default Helmet Content-Security-Policy values can be removed by setting the key to false - cors: - origin: ${BACKSTAGE_FRONTEND_URL} - methods: [GET, HEAD, PATCH, POST, PUT, DELETE] - credentials: true - database: - client: pg - connection: - host: ${POSTGRES_HOST} - port: ${POSTGRES_PORT} - user: ${POSTGRES_USER} - password: ${POSTGRES_PASSWORD} - cache: - store: memory - # workingDirectory: /tmp # Use this to configure a working directory for the scaffolder, defaults to the OS temp-dir - - integrations: - github: - - host: github.com - apps: - - $include: github-integration.yaml - # - host: github.com - # # This is a Personal Access Token or PAT from GitHub. You can find out how to generate this token, and more information - # # about setting up the GitHub integration here: https://backstage.io/docs/getting-started/configuration#setting-up-a-github-integration - # token: ${GITHUB_TOKEN} - ### Example for how to add your GitHub Enterprise instance using the API: - # - host: ghe.example.net - # apiBaseUrl: https://ghe.example.net/api/v3 - # token: ${GHE_TOKEN} - - proxy: - '/argo-workflows/api': - target: ${ARGO_WORKFLOWS_URL} - changeOrigin: true - secure: true - headers: - Authorization: - $env: ARGO_WORKFLOWS_AUTH_TOKEN - '/argocd/api': - target: ${ARGO_CD_URL} - changeOrigin: true - headers: - Cookie: - $env: ARGOCD_AUTH_TOKEN - - # Reference documentation http://backstage.io/docs/features/techdocs/configuration - # Note: After experimenting with basic setup, use CI/CD to generate docs - # and an external cloud storage when deploying TechDocs for production use-case. - # https://backstage.io/docs/features/techdocs/how-to-guides#how-to-migrate-from-techdocs-basic-to-recommended-deployment-approach - techdocs: - builder: 'local' # Alternatives - 'external' - generator: - runIn: 'docker' # Alternatives - 'local' - publisher: - type: 'local' # Alternatives - 'googleGcs' or 'awsS3'. Read documentation for using alternatives. - - auth: - environment: development - session: - secret: MW2sV-sIPngEl26vAzatV-6VqfsgAx4bPIz7PuE_2Lk= - providers: - keycloak-oidc: - development: - metadataUrl: ${KEYCLOAK_NAME_METADATA} - clientId: backstage - clientSecret: ${KEYCLOAK_CLIENT_SECRET} - scope: 'openid profile email groups' - prompt: auto - - scaffolder: - # see https://backstage.io/docs/features/software-templates/configuration for software template options - - catalog: - import: - entityFilename: catalog-info.yaml - pullRequestBranchName: backstage-integration - rules: - - allow: [Component, System, API, Resource, Location, Template] - locations: - - type: url - target: https://github.com/Parfuemerie-Douglas/scaffolder-backend-module-azure-pipelines/blob/main/catalog-info.yaml - - type: url - target: https://github.com/Parfuemerie-Douglas/scaffolder-backend-module-azure-repositories/blob/main/catalog-info.yaml - - type: url - target: https://github.com/yaegashi/dx2devops-backstage-containerapp/blob/main/catalog-info.yaml - - type: url - target: https://github.com/jsburckhardt/backstage-azureinfra/blob/main/template.yaml - # AWS Data-on-EKS - # - type: url - # target: https://github.com/awslabs/backstage-templates-on-eks/blob/main/catalog-info.yaml - # Examples from a public GitHub repository. - # Uncomment these lines to add an example org - # - type: url - # target: https://github.com/backstage/backstage/blob/master/packages/catalog-model/examples/all.yaml - # rules: - # - allow: [User, Group] - providers: - # azureDevOps: - # yourProviderId: # identifies your dataset / provider independent of config changes - # organization: myorg - # project: myproject - # repository: service-* # this will match all repos starting with service-* - # path: /catalog-info.yaml - # schedule: # optional; same options as in SchedulerServiceTaskScheduleDefinition - # # supports cron, ISO duration, "human duration" as used in code - # frequency: { minutes: 30 } - # # supports ISO duration, "human duration" as used in code - # timeout: { minutes: 3 } - # microsoftGraphOrg: - # default: - # tenantId: ${AZURE_TENANT_ID} - # user: - # filter: accountEnabled eq true and userType eq 'member' - # group: - # filter: > - # securityEnabled eq false - # and mailEnabled eq true - # and groupTypes/any(c:c+eq+'Unified') - # schedule: - # frequency: PT1H - # timeout: PT50M - kubernetes: - serviceLocatorMethod: - type: 'multiTenant' - clusterLocatorMethods: - - $include: k8s-config.yaml - argoWorkflows: - baseUrl: ${ARGO_WORKFLOWS_URL} diff --git a/packages/backstage/manifests/external-secrets.yaml b/packages/backstage/manifests/external-secrets.yaml index 32c0935..4866ec5 100644 --- a/packages/backstage/manifests/external-secrets.yaml +++ b/packages/backstage/manifests/external-secrets.yaml @@ -1,4 +1,3 @@ - --- apiVersion: external-secrets.io/v1 kind: ExternalSecret @@ -20,35 +19,35 @@ spec: ARGOCD_ADMIN_PASSWORD: "{{ .ARGOCD_ADMIN_PASSWORD }}" ARGOCD_AUTH_TOKEN: "argocd.token={{.ARGOCD_SESSION_TOKEN}}" POSTGRES_PASSWORD: "{{ .password }}" - BACKSTAGE_CLIENT_SECRET: "{{ .BACKSTAGE_CLIENT_SECRET }}" + BACKSTAGE_CLIENT_SECRET: "{{ .BACKSTAGE_CLIENT_SECRET }}" dataFrom: - - sourceRef: - generatorRef: - apiVersion: generators.external-secrets.io/v1alpha1 - kind: Password - name: "postgres-password" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "postgres-password" data: - - secretKey: ARGOCD_SESSION_TOKEN - remoteRef: - conversionStrategy: Default - decodingStrategy: None - metadataPolicy: None - key: keycloak-clients - property: ARGOCD_SESSION_TOKEN # Note: Read-Only non-expiring token - - secretKey: BACKSTAGE_CLIENT_SECRET - remoteRef: - conversionStrategy: Default - decodingStrategy: None - metadataPolicy: None - key: keycloak-clients - property: BACKSTAGE_CLIENT_SECRET - - secretKey: ARGOCD_ADMIN_PASSWORD - remoteRef: - conversionStrategy: Default - decodingStrategy: None - metadataPolicy: None - key: keycloak-clients - property: ARGOCD_ADMIN_PASSWORD + - secretKey: ARGOCD_SESSION_TOKEN + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: ARGOCD_SESSION_TOKEN # Note: Read-Only non-expiring token + - secretKey: BACKSTAGE_CLIENT_SECRET + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: BACKSTAGE_CLIENT_SECRET + - secretKey: ARGOCD_ADMIN_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: ARGOCD_ADMIN_PASSWORD --- apiVersion: generators.external-secrets.io/v1alpha1 kind: Password @@ -75,7 +74,7 @@ metadata: spec: refreshInterval: "0" secretStoreRef: - name: aws-secretsmanager + name: azure-keyvault kind: ClusterSecretStore target: name: integrations @@ -89,45 +88,27 @@ spec: webhookSecret: {{ .webhookSecret }} privateKey: | {{ .privateKey | nindent 2}} data: - - secretKey: "appId" - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: backstage-github.appId - - secretKey: "clientId" - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: backstage-github.clientId - - secretKey: "clientSecret" - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: backstage-github.clientSecret - - secretKey: "webhookSecret" - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: backstage-github.webhookSecret - - secretKey: "privateKey" - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: backstage-github.privateKey - - secretKey: "webhookUrl" - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/github-app - metadataPolicy: None - property: backstage-github.webhookUrl \ No newline at end of file + - secretKey: "appId" + remoteRef: + key: config + property: github.appId + - secretKey: "clientId" + remoteRef: + key: config + property: github.clientId + - secretKey: "clientSecret" + remoteRef: + key: config + property: github.clientSecret + - secretKey: "webhookSecret" + remoteRef: + key: config + property: github.webhookSecret + - secretKey: "privateKey" + remoteRef: + key: config + property: github.privateKey + - secretKey: "webhookUrl" + remoteRef: + key: config + property: github.webhookUrl diff --git a/packages/bootstrap.yaml b/packages/bootstrap.yaml index d6cf878..f4d7082 100644 --- a/packages/bootstrap.yaml +++ b/packages/bootstrap.yaml @@ -14,11 +14,10 @@ spec: sources: - repoURL: cnoe:// targetRevision: HEAD - path: "appset-chart" + path: charts/appset helm: valueFiles: - $values/addons/values.yaml - - $values/bootstrap/values-idpbuilder.yaml - repoURL: cnoe:// targetRevision: HEAD ref: values @@ -28,11 +27,11 @@ spec: allowEmpty: true prune: true retry: - limit: -1 + limit: -1 backoff: - duration: 5s - factor: 2 + duration: 5s + factor: 2 maxDuration: 10m syncOptions: - CreateNamespace=true - - ServerSideApply=true \ No newline at end of file + - ServerSideApply=true diff --git a/packages/bootstrap/_helpers.tpl b/packages/bootstrap/_helpers.tpl new file mode 100644 index 0000000..ec4c807 --- /dev/null +++ b/packages/bootstrap/_helpers.tpl @@ -0,0 +1,7 @@ +{{- define "readManifest" -}} +templates: +{{- $manifestDir := (printf "%s/%s" (requiredEnv "REPO_ROOT") (.PATH | trim)) -}} +{{- range $index,$item := readDirEntries $manifestDir }} +- {{ readFile (printf "%s/%s" $manifestDir $item.Name) | toYaml }} +{{- end }} +{{- end -}} diff --git a/packages/bootstrap/argocd.yaml.gotmpl b/packages/bootstrap/argocd.yaml.gotmpl new file mode 100644 index 0000000..fe1a4cd --- /dev/null +++ b/packages/bootstrap/argocd.yaml.gotmpl @@ -0,0 +1 @@ +{{ include "readManifest" (dict "PATH" "packages/argo-cd/manifests") }} diff --git a/packages/bootstrap/crossplane-ns.yaml b/packages/bootstrap/crossplane-ns.yaml new file mode 100644 index 0000000..6791c54 --- /dev/null +++ b/packages/bootstrap/crossplane-ns.yaml @@ -0,0 +1,7 @@ +apiVersion: v1 +kind: Namespace +metadata: + creationTimestamp: "2025-09-24T09:31:24Z" + labels: + kubernetes.io/metadata.name: crossplane-system + name: crossplane-system diff --git a/packages/bootstrap/values-idpbuilder.yaml b/packages/bootstrap/values-idpbuilder.yaml deleted file mode 100644 index 4688f89..0000000 --- a/packages/bootstrap/values-idpbuilder.yaml +++ /dev/null @@ -1,14 +0,0 @@ -# Used for bootstraping hub cluster with Addon Appset chart -# Only used when using idpbuilder for installation -addons-appset: # for non-path routing - enabled: true - chartName: bootstrap - namespace: argocd - releaseName: bootstrap - type: chart - path: appset-chart - selector: - matchExpressions: - - key: environment - operator: In - values: ['control-plane-bootstrap'] \ No newline at end of file diff --git a/packages/bootstrap/values.yaml b/packages/bootstrap/values.yaml index 76416ae..7dc5fca 100644 --- a/packages/bootstrap/values.yaml +++ b/packages/bootstrap/values.yaml @@ -5,15 +5,15 @@ addons-appset: # for non-path routing namespace: argocd releaseName: addons type: chart - path: packages/appset-chart # This path is relative to Github repo root + path: packages/charts/appset # This path is relative to Github repo root selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] - key: path_routing operator: In - values: ['false'] + values: ["false"] addons-appset-pr: # for path routing enabled: true @@ -21,14 +21,14 @@ addons-appset-pr: # for path routing namespace: argocd releaseName: addons type: chart - path: packages/appset-chart # This path is relative to Github repo root - valueFiles: - - "path-routing-values.yaml" + path: packages/charts/appset # This path is relative to Github repo root + valueFiles: + - "path-routing-values.yaml" selector: matchExpressions: - key: environment operator: In - values: ['control-plane'] + values: ["control-plane"] - key: path_routing operator: In - values: ['true'] \ No newline at end of file + values: ["true"] diff --git a/packages/cert-manager/dev/values.yaml b/packages/cert-manager/dev/values.yaml deleted file mode 100644 index dc29eee..0000000 --- a/packages/cert-manager/dev/values.yaml +++ /dev/null @@ -1,24 +0,0 @@ -installCRDs: true -global: - leaderElection: - namespace: cert-manager -webhook: - validatingWebhookConfiguration: - namespaceSelector: - matchExpressions: - - key: cert-manager.io/disable-validation - operator: NotIn - values: - - "true" - - key: name - operator: NotIn - values: - - cert-manager - - key: control-plane - operator: NotIn - values: - - "true" - - key: kubernetes.azure.com/managedby - operator: NotIn - values: - - aks diff --git a/packages/appset-chart/.helmignore b/packages/charts/appset/.helmignore similarity index 100% rename from packages/appset-chart/.helmignore rename to packages/charts/appset/.helmignore diff --git a/packages/appset-chart/Chart.yaml b/packages/charts/appset/Chart.yaml similarity index 100% rename from packages/appset-chart/Chart.yaml rename to packages/charts/appset/Chart.yaml diff --git a/packages/appset-chart/README.md b/packages/charts/appset/README.md similarity index 100% rename from packages/appset-chart/README.md rename to packages/charts/appset/README.md diff --git a/packages/appset-chart/templates/_application_set.tpl b/packages/charts/appset/templates/_application_set.tpl similarity index 100% rename from packages/appset-chart/templates/_application_set.tpl rename to packages/charts/appset/templates/_application_set.tpl diff --git a/packages/appset-chart/templates/_git_matrix.tpl b/packages/charts/appset/templates/_git_matrix.tpl similarity index 84% rename from packages/appset-chart/templates/_git_matrix.tpl rename to packages/charts/appset/templates/_git_matrix.tpl index 61353d3..7a435b8 100644 --- a/packages/appset-chart/templates/_git_matrix.tpl +++ b/packages/charts/appset/templates/_git_matrix.tpl @@ -19,7 +19,7 @@ generators: {{- toYaml $selectors | nindent 16 }} {{- end }} {{- if $chartConfig.selectorMatchLabels }} - {{- toYaml $chartConfig.selectorMatchLabels | nindent 18 }} + {{- toYaml $chartConfig.selectorMatchLabels | nindent 16 }} {{- end }} {{- if and $chartConfig.selector $useSelectors }} {{- toYaml $chartConfig.selector | nindent 16 }} @@ -29,6 +29,12 @@ generators: - git: repoURL: {{ $repoURLGit | squote }} revision: {{ $repoURLGitRevision | squote }} + {{- if $chartConfig.matrixPath }} files: - path: {{ $chartConfig.matrixPath | squote }} -{{- end }} \ No newline at end of file + {{- end }} + {{- if $chartConfig.matrixValues }} + values: + {{ $chartConfig.matrixValues | toYaml }} + {{- end }} +{{- end }} diff --git a/packages/appset-chart/templates/_helpers.tpl b/packages/charts/appset/templates/_helpers.tpl similarity index 100% rename from packages/appset-chart/templates/_helpers.tpl rename to packages/charts/appset/templates/_helpers.tpl diff --git a/packages/appset-chart/templates/_pod_identity.tpl b/packages/charts/appset/templates/_pod_identity.tpl similarity index 100% rename from packages/appset-chart/templates/_pod_identity.tpl rename to packages/charts/appset/templates/_pod_identity.tpl diff --git a/packages/appset-chart/templates/application-set.yaml b/packages/charts/appset/templates/application-set.yaml similarity index 97% rename from packages/appset-chart/templates/application-set.yaml rename to packages/charts/appset/templates/application-set.yaml index aad60d5..4137cbc 100644 --- a/packages/appset-chart/templates/application-set.yaml +++ b/packages/charts/appset/templates/application-set.yaml @@ -17,7 +17,9 @@ {{- range $chartName, $chartConfig := .Values }} {{- if and (kindIs "map" $chartConfig) (hasKey $chartConfig "enabled") }} {{- if eq (toString $chartConfig.enabled) "true" }} -{{- $nameNormalize := printf "%s" $chartName | replace "_" "-" | trunc 63 | trimSuffix "-" -}} +{{ $nameNormalize := printf "%s" $chartName | replace "_" "-" | trunc 63 | trimSuffix "-" -}} + +--- apiVersion: argoproj.io/v1alpha1 kind: ApplicationSet metadata: @@ -157,13 +159,13 @@ spec: "chartConfig" $chartConfig "valueFiles" $valueFiles "values" $values) | nindent 12 }} {{- end }} - {{- if $chartConfig.additionalResources}} + {{- if $chartConfig.additionalResources }} {{- include "application-sets.additionalResources" (dict "chartName" ($chartConfig.chartName | default $nameNormalize) "valueFiles" $valueFiles "chartConfig" $chartConfig "values" $values) | nindent 6 }} - {{- end}} + {{- end }} {{- end }} destination: namespace: '{{ $chartConfig.namespace }}' @@ -183,7 +185,6 @@ spec: ignoreDifferences: {{- $chartConfig.ignoreDifferences | toYaml | nindent 8 }} {{- end }} ---- {{- end }} {{- end }} {{- end }} diff --git a/packages/appset-chart/values.yaml b/packages/charts/appset/values.yaml similarity index 77% rename from packages/appset-chart/values.yaml rename to packages/charts/appset/values.yaml index 6f9cab8..0f13bf0 100644 --- a/packages/appset-chart/values.yaml +++ b/packages/charts/appset/values.yaml @@ -14,13 +14,13 @@ syncPolicy: maxDuration: 10m # the maximum amount of time allowed for the backoff strategy syncOptions: - CreateNamespace=true - - ServerSideApply=true # Big CRDs. + - ServerSideApply=true # Big CRDs. syncPolicyAppSet: preserveResourcesOnDeletion: true useSelectors: true -repoURLGit: '{{.metadata.annotations.addons_repo_url}}' -repoURLGitRevision: '{{.metadata.annotations.addons_repo_revision}}' -repoURLGitBasePath: '{{.metadata.annotations.addons_repo_basepath}}' +repoURLGit: "{{.metadata.annotations.addonsRepoURL}}" +repoURLGitRevision: "{{.metadata.annotations.addonsRepoRevision}}" +repoURLGitBasePath: "{{.metadata.annotations.addonsRepoBasepath}}" # valueFiles: # - default/addons # - clusters/{{.metadata.labels.environment}}/addons @@ -29,4 +29,4 @@ useValuesFilePrefix: false # valuesFilePrefix: '{{.metadata.labels.tenant}}/' # ackPodIdentity: # path: "charts/pod-identity" -#appsetPrefix: "appset-" \ No newline at end of file +#appsetPrefix: "appset-" diff --git a/packages/charts/raw/.helmignore b/packages/charts/raw/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/packages/charts/raw/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/packages/charts/raw/Chart.yaml b/packages/charts/raw/Chart.yaml new file mode 100644 index 0000000..fdf7e0b --- /dev/null +++ b/packages/charts/raw/Chart.yaml @@ -0,0 +1,24 @@ +apiVersion: v2 +name: raw +description: A Helm chart to deploy Kubernetes objects + +# A chart can be either an 'application' or a 'library' chart. +# +# Application charts are a collection of templates that can be packaged into versioned archives +# to be deployed. +# +# Library charts provide useful utilities or functions for the chart developer. They're included as +# a dependency of application charts to inject those utilities and functions into the rendering +# pipeline. Library charts do not define any templates and therefore cannot be deployed. +type: application + +# This is the chart version. This version number should be incremented each time you make changes +# to the chart and its templates, including the app version. +# Versions are expected to follow Semantic Versioning (https://semver.org/) +version: 0.1.0 + +# This is the version number of the application being deployed. This version number should be +# incremented each time you make changes to the application. Versions are not expected to +# follow Semantic Versioning. They should reflect the version the application is using. +# It is recommended to use it with quotes. +appVersion: "1.16.0" diff --git a/packages/charts/raw/templates/resources.yaml b/packages/charts/raw/templates/resources.yaml new file mode 100644 index 0000000..eb0fbba --- /dev/null +++ b/packages/charts/raw/templates/resources.yaml @@ -0,0 +1,8 @@ +{{- range $.Values.templates }} +--- +{{ if typeIs "string" . }} + {{- tpl . $ }} +{{- else }} + {{- tpl (toYaml .) $ }} +{{- end }} +{{ end }} diff --git a/packages/charts/raw/values.yaml b/packages/charts/raw/values.yaml new file mode 100644 index 0000000..ac77a75 --- /dev/null +++ b/packages/charts/raw/values.yaml @@ -0,0 +1,47 @@ +templates: [] +## +## Example: Uncomment the below and run `helm template ./`: +## +# +# templates: +# - | +# apiVersion: v1 +# kind: ConfigMap +# metadata: +# name: {{ .Release.Name }}-1 +# namespace: {{ .Release.Namespace }} +# data: +# foo: {{ .Values.foo }} +# - | +# apiVersion: v1 +# kind: ConfigMap +# metadata: +# name: {{ .Release.Name }}-2 +# namespace: {{ .Release.Namespace }} +# data: +# foo: {{ .Values.foo }} +# values: +# foo: FOO +# +## +## Expected Output: +## +# +# --- +# # Source: raw/templates/resources.yaml +# apiVersion: v1 +# kind: ConfigMap +# metadata: +# name: release-name-1 +# namespace: default +# data: +# foo: +# --- +# # Source: raw/templates/resources.yaml +# apiVersion: v1 +# kind: ConfigMap +# metadata: +# name: release-name-2 +# namespace: default +# data: +# foo: diff --git a/packages/crossplane-aws-upbound/values.yaml b/packages/crossplane-aws-upbound/values.yaml deleted file mode 100644 index 9292e4d..0000000 --- a/packages/crossplane-aws-upbound/values.yaml +++ /dev/null @@ -1,52 +0,0 @@ -# Ref: https://github.com/gitops-bridge-dev/gitops-bridge-helm-charts/tree/main/charts -global: - enabled_aws_upbound: true - -deploymentRuntimeConfig: - enabled: true - metadata: - name: "upbound-aws-runtime-config" - role_arn: "" - annotations: {} - labels: {} - spec: - deploymentTemplate: - spec: - selector: {} - template: - spec: - containers: - - name: package-runtime - args: - - --debug - securityContext: - fsGroup: 2000 - serviceAccountTemplate: - metadata: - annotations: {} - labels: {} - name: provider-aws - -provider: - enabled: true - metadata: - annotations: {} - labels: {} - package: - registry: xpkg.crossplane.io/crossplane-contrib - version: v1.23.0 - -providerConfig: - enabled: true - default: true - metadata: - name: "aws-provider-config" - annotations: {} - labels: {} - spec: - credentials: - source: PodIdentity - -providers: -- dynamodb -- s3 diff --git a/packages/crossplane-compositions/kustomization.yaml b/packages/crossplane-compositions/kustomization.yaml deleted file mode 100644 index 36574aa..0000000 --- a/packages/crossplane-compositions/kustomization.yaml +++ /dev/null @@ -1,7 +0,0 @@ -namespace: crossplane-system -resources: - - s3 - -commonAnnotations: - argocd.argoproj.io/compare-options: ServerSideDiff=true - \ No newline at end of file diff --git a/packages/crossplane-compositions/s3/definition.yaml b/packages/crossplane-compositions/s3/definition.yaml deleted file mode 100644 index 12daa7f..0000000 --- a/packages/crossplane-compositions/s3/definition.yaml +++ /dev/null @@ -1,63 +0,0 @@ -# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. -# SPDX-License-Identifier: Apache-2.0 - -apiVersion: apiextensions.crossplane.io/v1 -kind: CompositeResourceDefinition -metadata: - name: xobjectstorages.awsblueprints.io -spec: - claimNames: - kind: ObjectStorage - plural: objectstorages - group: awsblueprints.io - names: - kind: XObjectStorage - plural: xobjectstorages - versions: - - name: v1alpha1 - served: true - referenceable: true - schema: - openAPIV3Schema: - properties: - spec: - description: ObjectStorageSpec defines the desired state of ObjectStorage - properties: - resourceConfig: - description: ResourceConfig defines general properties of this AWS - resource. - properties: - deletionPolicy: - description: Defaults to Delete - enum: - - Delete - - Orphan - type: string - name: - description: Set the name of this resource in AWS to the value - provided by this field. - type: string - providerConfigName: - type: string - region: - type: string - tags: - additionalProperties: - type: string - type: object - required: - - providerConfigName - - region - type: object - required: - - resourceConfig - type: object - status: - description: ObjectStorageStatus defines the observed state of ObjectStorage - properties: - bucketName: - type: string - bucketArn: - type: string - type: object - type: object diff --git a/packages/crossplane-compositions/s3/general-purpose.yaml b/packages/crossplane-compositions/s3/general-purpose.yaml deleted file mode 100644 index c1b40ad..0000000 --- a/packages/crossplane-compositions/s3/general-purpose.yaml +++ /dev/null @@ -1,129 +0,0 @@ -# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. -# SPDX-License-Identifier: Apache-2.0 - -apiVersion: apiextensions.crossplane.io/v1 -kind: Composition -metadata: - name: s3bucket.awsblueprints.io - labels: - awsblueprints.io/provider: aws - awsblueprints.io/environment: dev - s3.awsblueprints.io/configuration: standard -spec: - writeConnectionSecretsToNamespace: crossplane-system - compositeTypeRef: - apiVersion: awsblueprints.io/v1alpha1 - kind: XObjectStorage - patchSets: - - name: common-fields - patches: - - type: FromCompositeFieldPath - fromFieldPath: spec.resourceConfig.deletionPolicy - toFieldPath: spec.deletionPolicy - - type: FromCompositeFieldPath - fromFieldPath: spec.resourceConfig.region - toFieldPath: spec.forProvider.region - - type: FromCompositeFieldPath - fromFieldPath: spec.resourceConfig.providerConfigName - toFieldPath: spec.providerConfigRef.name - - type: FromCompositeFieldPath - fromFieldPath: spec.resourceConfig.tags - toFieldPath: spec.forProvider.tags - policy: - mergeOptions: - keepMapValues: true - - type: FromCompositeFieldPath - fromFieldPath: spec.resourceConfig.name - toFieldPath: metadata.annotations[crossplane.io/external-name] - - fromFieldPath: "metadata.name" - toFieldPath: "metadata.name" - transforms: - - type: string - string: - fmt: "bucket-%s" - type: Format - type: FromCompositeFieldPath - resources: - - name: s3-bucket - connectionDetails: - - type: FromFieldPath - name: bucketName - fromFieldPath: status.atProvider.id - base: - apiVersion: s3.aws.upbound.io/v1beta1 - kind: Bucket - spec: - deletionPolicy: Delete - forProvider: - region: us-west-2 - forceDestroy: true # be careful with this - writeConnectionSecretToRef: - namespace: crossplane-system - patches: - - type: PatchSet - patchSetName: common-fields - - type: ToCompositeFieldPath - fromFieldPath: status.atProvider.id - toFieldPath: status.bucketName - - type: ToCompositeFieldPath - fromFieldPath: status.atProvider.id - toFieldPath: status.bucketArn - transforms: - - type: string - string: - fmt: "arn:aws:s3:::%s" - type: Format - readinessChecks: - - matchCondition: - status: 'True' - type: Ready - type: MatchCondition - - name: s3-blockpublicaccess - base: - apiVersion: s3.aws.upbound.io/v1beta1 - kind: BucketPublicAccessBlock - spec: - deletionPolicy: Delete - forProvider: - bucketSelector: - matchControllerRef: true - blockPublicAcls: true - blockPublicPolicy: true - ignorePublicAcls: true - restrictPublicBuckets: true - patches: - - fromFieldPath: spec.resourceConfig.region - toFieldPath: spec.forProvider.region - type: FromCompositeFieldPath - - fromFieldPath: spec.resourceConfig.providerConfigName - toFieldPath: spec.providerConfigRef.name - type: FromCompositeFieldPath - readinessChecks: - - matchCondition: - status: 'True' - type: Ready - type: MatchCondition - - name: s3-serversideencryption - base: - apiVersion: s3.aws.upbound.io/v1beta1 - kind: BucketServerSideEncryptionConfiguration - spec: - deletionPolicy: Delete - forProvider: - bucketSelector: - matchControllerRef: true - rule: - - applyServerSideEncryptionByDefault: - - sseAlgorithm: AES256 - patches: - - fromFieldPath: spec.resourceConfig.providerConfigName - toFieldPath: spec.providerConfigRef.name - type: FromCompositeFieldPath - - fromFieldPath: spec.resourceConfig.region - toFieldPath: spec.forProvider.region - type: FromCompositeFieldPath - readinessChecks: - - matchCondition: - status: 'True' - type: Ready - type: MatchCondition diff --git a/packages/crossplane-compositions/s3/kustomization.yaml b/packages/crossplane-compositions/s3/kustomization.yaml deleted file mode 100644 index 2f9fb95..0000000 --- a/packages/crossplane-compositions/s3/kustomization.yaml +++ /dev/null @@ -1,3 +0,0 @@ -resources: - - definition.yaml - - general-purpose.yaml \ No newline at end of file diff --git a/packages/crossplane/base/kustomization.yaml b/packages/crossplane/base/kustomization.yaml deleted file mode 100644 index ac50581..0000000 --- a/packages/crossplane/base/kustomization.yaml +++ /dev/null @@ -1,4 +0,0 @@ -namespace: crossplane-system -resources: - - provider-azure.yaml - - provider-azure-config.yaml diff --git a/packages/crossplane/base/provider-azure-config.yaml b/packages/crossplane/base/provider-azure-config.yaml deleted file mode 100644 index bf2b4d9..0000000 --- a/packages/crossplane/base/provider-azure-config.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: azure.upbound.io/v1beta1 -kind: ProviderConfig -metadata: - name: provider-azure-config - annotations: - argocd.argoproj.io/sync-wave: "20" - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true -spec: - tenantID: ${TENANT_ID} - subscriptionID: ${SUBSCRIPTION_ID} - clientID: ${CLIENT_ID} - credentials: - source: UserAssignedManagedIdentity diff --git a/packages/crossplane/base/provider-azure.yaml b/packages/crossplane/base/provider-azure.yaml deleted file mode 100644 index 0a62697..0000000 --- a/packages/crossplane/base/provider-azure.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Provider -metadata: - annotations: - argocd.argoproj.io/sync-wave: "0" - name: provider-family-azure -spec: - package: xpkg.upbound.io/upbound/provider-family-azure:v1 diff --git a/packages/crossplane/manifests/clusterproviderconfig/azure.yaml b/packages/crossplane/manifests/clusterproviderconfig/azure.yaml new file mode 100644 index 0000000..fb07c73 --- /dev/null +++ b/packages/crossplane/manifests/clusterproviderconfig/azure.yaml @@ -0,0 +1,11 @@ +apiVersion: azure.m.upbound.io/v1beta1 +kind: ClusterProviderConfig +metadata: + name: default +spec: + credentials: + source: Secret + secretRef: + name: provider-azure + namespace: crossplane-system + key: credential diff --git a/packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml b/packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml new file mode 100644 index 0000000..4020885 --- /dev/null +++ b/packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml @@ -0,0 +1,8 @@ +apiVersion: kubernetes.m.crossplane.io/v1alpha1 +kind: ClusterProviderConfig +metadata: + name: default + namespace: crossplane-system +spec: + credentials: + source: InjectedIdentity diff --git a/packages/crossplane/manifests/configurations/azure-workload-identity.yaml b/packages/crossplane/manifests/configurations/azure-workload-identity.yaml new file mode 100644 index 0000000..25550ce --- /dev/null +++ b/packages/crossplane/manifests/configurations/azure-workload-identity.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1 +kind: Configuration +metadata: + name: configuration-azure-workload-identity +spec: + package: xpkg.upbound.io/livewyer-ops/crossplane-configuration-azure-workload-identity:v0.0.2 diff --git a/packages/crossplane/manifests/functions/auto-ready.yaml b/packages/crossplane/manifests/functions/auto-ready.yaml new file mode 100644 index 0000000..6952d23 --- /dev/null +++ b/packages/crossplane/manifests/functions/auto-ready.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1beta1 +kind: Function +metadata: + name: function-auto-ready +spec: + package: xpkg.upbound.io/upbound/function-auto-ready:v0.5.0 diff --git a/packages/crossplane/manifests/functions/go-templating.yaml b/packages/crossplane/manifests/functions/go-templating.yaml new file mode 100644 index 0000000..9ae9b3f --- /dev/null +++ b/packages/crossplane/manifests/functions/go-templating.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1beta1 +kind: Function +metadata: + name: function-go-templating +spec: + package: xpkg.upbound.io/upbound/function-go-templating:v0.11.0 diff --git a/packages/crossplane/manifests/providers/azure-authorization.yaml b/packages/crossplane/manifests/providers/azure-authorization.yaml new file mode 100644 index 0000000..8745222 --- /dev/null +++ b/packages/crossplane/manifests/providers/azure-authorization.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-azure-authorization +spec: + package: xpkg.upbound.io/upbound/provider-azure-authorization:v2.0.0 diff --git a/packages/crossplane/manifests/providers/azure-managedidentity.yaml b/packages/crossplane/manifests/providers/azure-managedidentity.yaml new file mode 100644 index 0000000..27c0259 --- /dev/null +++ b/packages/crossplane/manifests/providers/azure-managedidentity.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-azure-managedidentity +spec: + package: xpkg.upbound.io/upbound/provider-azure-managedidentity:v2.0.0 diff --git a/packages/crossplane/manifests/providers/azure.yaml b/packages/crossplane/manifests/providers/azure.yaml new file mode 100644 index 0000000..1f317de --- /dev/null +++ b/packages/crossplane/manifests/providers/azure.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-azure +spec: + package: xpkg.upbound.io/upbound/provider-family-azure:v2.0.0 diff --git a/packages/crossplane/manifests/providers/kubernetes.yaml b/packages/crossplane/manifests/providers/kubernetes.yaml new file mode 100644 index 0000000..ac7e129 --- /dev/null +++ b/packages/crossplane/manifests/providers/kubernetes.yaml @@ -0,0 +1,6 @@ +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-kubernetes +spec: + package: xpkg.upbound.io/upbound/provider-kubernetes:v1 diff --git a/packages/crossplane/manifests/xrs/external-dns.yaml b/packages/crossplane/manifests/xrs/external-dns.yaml new file mode 100644 index 0000000..8285c71 --- /dev/null +++ b/packages/crossplane/manifests/xrs/external-dns.yaml @@ -0,0 +1,16 @@ +apiVersion: azure.livewyer.io/v1alpha1 +kind: WorkloadIdentity +metadata: + name: external-dns + namespace: external-dns +spec: + forProvider: + location: "{{ .location }}" + oidcIssuerURL: "{{ .clusterOIDCIssuerURL }}" + resourceGroupName: "{{ .resourceGroup }}" + roleAssignments: + - roleDefinitionName: DNS Zone Contributor + scope: "{{ .resourceGroup }}" + - roleDefinitionName: Reader + scope: "{{ .resourceGroup }}" + serviceAccountName: external-dns diff --git a/packages/crossplane/manifests/xrs/external-secrets.yaml b/packages/crossplane/manifests/xrs/external-secrets.yaml new file mode 100644 index 0000000..00216a2 --- /dev/null +++ b/packages/crossplane/manifests/xrs/external-secrets.yaml @@ -0,0 +1,14 @@ +apiVersion: azure.livewyer.io/v1alpha1 +kind: WorkloadIdentity +metadata: + name: external-secrets + namespace: external-secrets +spec: + forProvider: + location: "{{ .location }}" + oidcIssuerURL: "{{ .clusterOIDCIssuerURL }}" + resourceGroupName: "{{ .resourceGroup }}" + roleAssignments: + - roleDefinitionName: Key Vault Secrets User + scope: "{{ .subscription }}/resourcegroups/resource-{{ .resourceGroup }}" + serviceAccountName: external-secrets diff --git a/packages/crossplane/manifests/xrs/keycloak.yaml b/packages/crossplane/manifests/xrs/keycloak.yaml new file mode 100644 index 0000000..896c617 --- /dev/null +++ b/packages/crossplane/manifests/xrs/keycloak.yaml @@ -0,0 +1,16 @@ +apiVersion: azure.livewyer.io/v1alpha1 +kind: WorkloadIdentity +metadata: + name: keycloak + namespace: keycloak +spec: + forProvider: + location: "{{ .location }}" + oidcIssuerURL: "{{ .clusterOIDCIssuerURL }}" + resourceGroupName: "{{ .resourceGroup }}" + roleAssignments: + - roleDefinitionName: Key Vault Secrets User + scope: "{{ .resourceGroup }}" + - roleDefinitionName: Key Vault Reader + scope: "{{ .resourceGroup }}" + serviceAccountName: external-secret-keycloak diff --git a/packages/crossplane/values.yaml b/packages/crossplane/values.yaml index fe04663..6d0dbd8 100644 --- a/packages/crossplane/values.yaml +++ b/packages/crossplane/values.yaml @@ -1,2 +1,18 @@ -args: - - --debug +webui: + enabled: true + +provider: + packages: + - xpkg.upbound.io/upbound/provider-family-azure:v2.0.0 + - xpkg.upbound.io/upbound/provider-azure-authorization:v2.0.0 + - xpkg.upbound.io/upbound/provider-azure-managedidentity:v2.0.0 + - xpkg.upbound.io/upbound/provider-kubernetes:v1 + +configuration: + packages: + - xpkg.upbound.io/livewyer-ops/crossplane-configuration-azure-workload-identity:v0.0.2 + +function: + packages: + - xpkg.upbound.io/upbound/function-auto-ready:v0.5.0 + - xpkg.upbound.io/upbound/function-go-templating:v0.11.0 diff --git a/packages/external-dns/values.yaml b/packages/external-dns/values.yaml index 105d07a..27e8ea9 100644 --- a/packages/external-dns/values.yaml +++ b/packages/external-dns/values.yaml @@ -3,6 +3,7 @@ sources: txtOwnerId: cnoe-external-dns policy: upsert-only serviceAccount: + create: false labels: "azure.workload.identity/use": "true" podLabels: diff --git a/packages/external-secrets/manifests/cluster-secret-store.yaml b/packages/external-secrets/manifests/cluster-secret-store.yaml index ea97ec2..b763df3 100644 --- a/packages/external-secrets/manifests/cluster-secret-store.yaml +++ b/packages/external-secrets/manifests/cluster-secret-store.yaml @@ -1,9 +1,11 @@ apiVersion: external-secrets.io/v1 kind: ClusterSecretStore metadata: - name: aws-secretsmanager + name: azure-keyvault spec: provider: - aws: - service: SecretsManager - region: us-west-2 \ No newline at end of file + azurekv: + authType: ManagedIdentity + vaultUrl: https://cnoe-ref-impl.vault.azure.net + serviceAccountRef: + name: external-secrets diff --git a/packages/keycloak/dev-external-secrets/external-secrets.yaml b/packages/keycloak/dev-external-secrets/external-secrets.yaml deleted file mode 100644 index 2604ffc..0000000 --- a/packages/keycloak/dev-external-secrets/external-secrets.yaml +++ /dev/null @@ -1,70 +0,0 @@ ---- -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: keycloak-config - namespace: keycloak -spec: - refreshInterval: 5m - secretStoreRef: - name: keycloak - kind: SecretStore - target: - name: keycloak-config - creationPolicy: Owner - data: - - secretKey: KC_HOSTNAME - remoteRef: - key: cnoe-keycloak-config - property: KC_HOSTNAME - - secretKey: KEYCLOAK_ADMIN_PASSWORD - remoteRef: - key: cnoe-keycloak-config - property: KEYCLOAK_ADMIN_PASSWORD - ---- -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: postgresql-config - namespace: keycloak -spec: - refreshInterval: 5m - secretStoreRef: - name: keycloak - kind: SecretStore - target: - name: postgresql-config - creationPolicy: Owner - data: - - secretKey: POSTGRES_DB - remoteRef: - key: cnoe-keycloak-config - property: POSTGRES_DB - - secretKey: POSTGRES_PASSWORD - remoteRef: - key: cnoe-keycloak-config - property: POSTGRES_PASSWORD - - secretKey: POSTGRES_USER - remoteRef: - key: cnoe-keycloak-config - property: POSTGRES_USER ---- -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: keycloak-user-config - namespace: keycloak -spec: - refreshInterval: 5m - secretStoreRef: - name: keycloak - kind: SecretStore - target: - name: keycloak-user-config - creationPolicy: Owner - data: - - secretKey: user1-password - remoteRef: - key: cnoe-keycloak-config - property: user1-password diff --git a/packages/keycloak/dev/postgres.yaml b/packages/keycloak/dev/postgres.yaml deleted file mode 100644 index f6ae72e..0000000 --- a/packages/keycloak/dev/postgres.yaml +++ /dev/null @@ -1,73 +0,0 @@ -kind: PersistentVolumeClaim -apiVersion: v1 -metadata: - name: postgresql - namespace: keycloak - labels: - app: postgresql -spec: - storageClassName: default - capacity: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 1Gi ---- -apiVersion: apps/v1 -kind: StatefulSet -metadata: - name: postgresql - namespace: keycloak - labels: - app: postgresql -spec: - serviceName: service-postgresql - replicas: 1 - selector: - matchLabels: - app: postgresql - template: - metadata: - labels: - app: postgresql - spec: - containers: - - name: postgres - resources: - limits: - memory: 500Mi - requests: - cpu: 100m - memory: 300Mi - image: docker.io/library/postgres:15.3-alpine3.18 - envFrom: - - secretRef: - name: postgresql-config - ports: - - containerPort: 5432 - name: postgresdb - volumeMounts: - - name: data - mountPath: /var/lib/postgresql/data - subPath: postgress - volumes: - - name: data - persistentVolumeClaim: - claimName: postgresql - ---- -apiVersion: v1 -kind: Service -metadata: - name: postgresql - namespace: keycloak - labels: - app: postgresql -spec: - ports: - - port: 5432 - name: postgres - clusterIP: None - selector: - app: postgresql diff --git a/packages/keycloak/manifests/external-secrets.yaml b/packages/keycloak/manifests/external-secrets.yaml index 5cc15b7..c787336 100644 --- a/packages/keycloak/manifests/external-secrets.yaml +++ b/packages/keycloak/manifests/external-secrets.yaml @@ -9,7 +9,7 @@ metadata: spec: refreshInterval: "0" secretStoreRef: - name: aws-secretsmanager + name: azure-keyvault kind: ClusterSecretStore target: name: keycloak-config @@ -19,50 +19,44 @@ spec: KEYCLOAK_URL: "http://keycloak.keycloak.svc.cluster.local{{ if .pathRouting }}/keycloak{{ end }}" POSTGRES_PASSWORD: "{{ .postgresPassword }}" KEYCLOAK_ADMIN_PASSWORD: "{{ .keycloakAdminPassword }}" - USER1_PASSWORD: "{{ .keycloakUserPassword }}" + USER1_PASSWORD: "{{ .keycloakUserPassword }}" ARGO_CD_URL: "{{ if .pathRouting }}{{ .domainName }}/argocd{{ else }}argocd.{{ .domainName }}{{ end }}" BACKSTAGE_URL: "{{ if .pathRouting }}{{ .domainName }}{{ else }}backstage.{{ .domainName }}{{ end }}" ARGO_WORKFLOW_URL: "{{ if .pathRouting }}{{ .domainName }}/argo-workflows{{ else }}argo-workflows.{{ .domainName }}{{ end }}" dataFrom: - - sourceRef: - generatorRef: - apiVersion: generators.external-secrets.io/v1alpha1 - kind: Password - name: "postgres-keycloak-password" - rewrite: - - transform: - template: "postgresPassword" - - sourceRef: - generatorRef: - apiVersion: generators.external-secrets.io/v1alpha1 - kind: Password - name: "postgres-keycloak-password" - rewrite: - - transform: - template: "keycloakAdminPassword" - - sourceRef: - generatorRef: - apiVersion: generators.external-secrets.io/v1alpha1 - kind: Password - name: "keycloak-user-password" - rewrite: - - transform: - template: "keycloakUserPassword" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "postgres-keycloak-password" + rewrite: + - transform: + template: "postgresPassword" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "postgres-keycloak-password" + rewrite: + - transform: + template: "keycloakAdminPassword" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "keycloak-user-password" + rewrite: + - transform: + template: "keycloakUserPassword" data: - - secretKey: domainName - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: domain - - secretKey: pathRouting - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: cnoe-ref-impl/config - metadataPolicy: None - property: path_routing + - secretKey: domainName + remoteRef: + key: config + property: domain + - secretKey: pathRouting + remoteRef: + key: config + property: path_routing --- apiVersion: generators.external-secrets.io/v1alpha1 kind: Password diff --git a/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml b/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml index 6013797..5330761 100644 --- a/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml +++ b/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml @@ -1,9 +1,3 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: eso-store - namespace: keycloak ---- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: @@ -57,4 +51,4 @@ spec: auth: serviceAccount: name: eso-store - namespace: keycloak \ No newline at end of file + namespace: keycloak diff --git a/private/argocd-github.yaml.template b/private/argocd-github.yaml.template deleted file mode 100644 index 4d9b735..0000000 --- a/private/argocd-github.yaml.template +++ /dev/null @@ -1,9 +0,0 @@ -url: https://github.com/ -appId: "123abc" -# get it from https://github.com/organizations//settings/installations/ -installationId: "123abc" -privateKey: | - -----BEGIN RSA PRIVATE KEY----- - ... - -----END RSA PRIVATE KEY----- - diff --git a/private/azure-credentials.yaml.template b/private/azure-credentials.yaml.template new file mode 100644 index 0000000..d14bce3 --- /dev/null +++ b/private/azure-credentials.yaml.template @@ -0,0 +1,20 @@ +apiVersion: v1 +kind: Secret +type: Opaque +metadata: + name: provider-azure + namespace: crossplane-system +stringData: + credentials: | + { + "clientId": "", + "clientSecret": "", + "subscriptionId": "", + "tenantId": "", + "activeDirectoryEndpointUrl": "https://login.microsoftonline.com", + "resourceManagerEndpointUrl": "https://management.azure.com/", + "activeDirectoryGraphResourceId": "https://graph.windows.net/", + "sqlManagementEndpointUrl": "https://management.core.windows.net:8443/", + "galleryEndpointUrl": "https://gallery.azure.com/", + "managementEndpointUrl": "https://management.core.windows.net/" + } diff --git a/private/backstage-github.yaml.template b/private/backstage-github.yaml.template deleted file mode 100644 index 774ee0d..0000000 --- a/private/backstage-github.yaml.template +++ /dev/null @@ -1,9 +0,0 @@ -appId: 1234 -webhookUrl: https://... -clientId: ABC.. -clientSecret: 1234abc -webhookSecret: 123abc -privateKey: | - -----BEGIN RSA PRIVATE KEY----- - ... - -----END RSA PRIVATE KEY----- diff --git a/scripts/cleanup-crds.sh b/scripts/cleanup-crds.sh deleted file mode 100755 index ba39258..0000000 --- a/scripts/cleanup-crds.sh +++ /dev/null @@ -1,91 +0,0 @@ -#!/bin/bash - -set -e -o pipefail - -export REPO_ROOT=$(git rev-parse --show-toplevel) -PHASE="crd-uninstall" -source ${REPO_ROOT}/scripts/utils.sh - -echo -e "\n${BOLD}${BLUE}🧹 Starting CRD cleanup process...${NC}" - -CRDS=( - "external-secrets.io" - "argoproj.io" - "cert-manager.io" - "crossplane.io" - "externaldns.k8s.io" -) - -TIMEOUT=60 - -cleanup_resources() { - local crd=$1 - local kind=$(kubectl get crd $crd -o jsonpath='{.spec.names.kind}' --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || echo "") - - if [[ -z "$kind" ]]; then - return - fi - - echo -e "${CYAN}πŸ”„ Cleaning up resources for CRD:${NC} ${BOLD}$crd${NC} ${CYAN}(Kind: $kind)${NC}" - - # Get all resources of this kind - local resources=$(kubectl get $kind --all-namespaces -o name --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true) - - if [[ -z "$resources" ]]; then - return - fi - - # Delete resources - echo "$resources" | while read resource; do - if [[ -n "$resource" ]]; then - echo -e "${YELLOW}πŸ—‘οΈ Deleting${NC} $resource" - kubectl delete $resource --timeout=${TIMEOUT}s --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || { - echo -e "${YELLOW}⏳ Timeout reached, force deleting${NC} $resource" - kubectl patch $resource -p '{"metadata":{"finalizers":[]}}' --type=merge --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - kubectl delete $resource --force --grace-period=0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - } - fi - done -} - -delete_crd() { - local crd=$1 - echo -e "${RED}πŸ—‘οΈ Deleting CRD:${NC} ${BOLD}$crd${NC}" - kubectl delete crd $crd --timeout=${TIMEOUT}s --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || { - echo -e "${YELLOW}⏳ Timeout reached, removing finalizers for CRD${NC} ${BOLD}$crd${NC}" - kubectl patch crd $crd -p '{"metadata":{"finalizers":[]}}' --type=merge --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - kubectl delete crd $crd --force --grace-period=0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - } -} - -main() { - echo -e "${PURPLE}πŸ“‹ Starting CRD cleanup for groups:${NC} ${BOLD}${CRDS[@]}${NC}" - - for group in "${CRDS[@]}"; do - echo -e "\n${CYAN}πŸ” Processing CRD group:${NC} ${BOLD}$group${NC}" - - # Find CRDs with the group suffix - crds=$(kubectl get crd -o name --kubeconfig $KUBECONFIG_FILE | grep "\.$group$" | cut -d'/' -f2 || true) - - if [[ -z "$crds" ]]; then - echo -e "${YELLOW}⚠️ No CRDs found for group:${NC} $group" - continue - fi - - echo "$crds" | while read crd; do - if [[ -n "$crd" ]]; then - cleanup_resources "$crd" - delete_crd "$crd" - echo -e "${GREEN}βœ… Successfully processed CRD:${NC} $crd" - fi - done - done - - echo -e "\n${BOLD}${GREEN}πŸŽ‰ CRD cleanup completed successfully! πŸŽ‰${NC}" -} - -main - -# Remove secrets created by the reference implementation -# echo -e "${CYAN}πŸ” Cleaning up secrets...${NC}" -# kubectl get secrets -A --no-headers --kubeconfig $KUBECONFIG_FILE | awk '{ print $1, $2}' | xargs -n 2 kubectl delete secrets --kubeconfig $KUBECONFIG_FILE -n \ No newline at end of file diff --git a/scripts/create-cluster.sh b/scripts/create-cluster.sh deleted file mode 100755 index 743dab2..0000000 --- a/scripts/create-cluster.sh +++ /dev/null @@ -1,88 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -export REPO_ROOT=$(git rev-parse --show-toplevel) -PHASE="create-cluster" -echo -e "\n${BOLD}${BLUE}πŸš€ Starting EKS cluster creation process...${NC}" - -source ${REPO_ROOT}/scripts/utils.sh - -# Check required tools based on deployment choice -if [ "$DEPLOYMENT_TOOL" = "eksctl" ]; then - if ! command -v eksctl >/dev/null 2>&1; then - echo -e "${RED}❌ eksctl command is not installed. Please install it to continue.${NC}" - echo -e "${CYAN}πŸ’‘ Installation instructions: https://eksctl.io/installation/${NC}" - exit 1 - fi -elif [ "$DEPLOYMENT_TOOL" = "terraform" ]; then - if ! command -v terraform >/dev/null 2>&1; then - echo -e "${RED}❌ terraform command is not installed. Please install it to continue.${NC}" - echo -e "${CYAN}πŸ’‘ Installation instructions: https://terraform.io/downloads${NC}" - exit 1 - fi -fi - -echo -e "\n${BOLD}${BLUE}πŸš€ Creating EKS cluster...${NC}" -echo -e "${YELLOW}⏳ This process may take 15-20 minutes...${NC}" - -# Create the cluster based on deployment tool -if [ "$DEPLOYMENT_TOOL" = "eksctl" ]; then - echo -e "\n${BOLD}${BLUE}πŸ”§ Creating Crossplane permissions boundary policy...${NC}" - - # Create temporary file for policy document - TEMPFILE=$(mktemp) - sed "s/\${AWS_ACCOUNT_ID}/${AWS_ACCOUNT_ID}/g" ${REPO_ROOT}/cluster/iam-policies/crossplane-permissions-boundry.json > "$TEMPFILE" - - echo -e "${CYAN}πŸ“‹ Creating IAM policy crossplane-permissions-boundary...${NC}" - - # Create the permissions boundary policy (ignore error if it already exists) - if aws iam create-policy \ - --policy-name crossplane-permissions-boundary \ - --policy-document file://"$TEMPFILE" > /dev/null 2>&1; then - echo -e "${GREEN}βœ… Created crossplane-permissions-boundary policy${NC}" - else - echo -e "${YELLOW}⚠️ Policy crossplane-permissions-boundary already exists, continuing...${NC}" - fi - - # Get the policy ARN - export CROSSPLANE_BOUNDARY_POLICY_ARN=$(aws iam get-policy \ - --policy-arn arn:aws:iam::${AWS_ACCOUNT_ID}:policy/crossplane-permissions-boundary \ - --query 'Policy.Arn' --output text) - - echo -e "${CYAN}πŸ”— Policy ARN:${NC} ${CROSSPLANE_BOUNDARY_POLICY_ARN}" - - # Clean up temp file - rm -f "$TEMPFILE" - echo -e "${CYAN}πŸ”§ Using eksctl for cluster creation...${NC}" - - # Create the cluster with eksctl - sed -e "s/\${CLUSTER_NAME}/${CLUSTER_NAME}/g" \ - -e "s/\${AWS_REGION}/${AWS_REGION}/g" \ - -e "s/\${AWS_ACCOUNT_ID}/${AWS_ACCOUNT_ID}/g" \ - -e "s/\${CROSSPLANE_BOUNDARY_POLICY_ARN}/${CROSSPLANE_BOUNDARY_POLICY_ARN//\//\\/}/g" \ - "$EKSCTL_CONFIG_FILE_PATH" | eksctl create cluster -f - - -elif [ "$DEPLOYMENT_TOOL" = "terraform" ]; then - echo -e "${CYAN}πŸ”§ Using terraform for cluster creation...${NC}" - - # Set terraform variables - export TF_VAR_cluster_name="$CLUSTER_NAME" - export TF_VAR_region="$AWS_REGION" - export TF_VAR_auto_mode="$AUTO_MODE" - - # Initialize and apply terraform - terraform -chdir="$REPO_ROOT/cluster/terraform" init - terraform -chdir="$REPO_ROOT/cluster/terraform" apply -auto-approve -fi - -echo -e "\n${BOLD}${GREEN}πŸŽ‰ EKS cluster created successfully! πŸŽ‰${NC}" -echo -e "${CYAN}πŸ“Š Cluster Details:${NC}" -echo -e "${CYAN}πŸ”Ά Name:${NC} ${BOLD}${CLUSTER_NAME}${NC}" -echo -e "${CYAN}πŸ”Ά Region:${NC} ${AWS_REGION}" -echo -e "${CYAN}πŸ”Ά Type:${NC} ${CLUSTER_TYPE}" -echo -e "${CYAN}πŸ”Ά Tool:${NC} ${DEPLOYMENT_TOOL}" - -echo -e "\n${BOLD}${BLUE}πŸ”§ Updating kubeconfig...${NC}" -aws eks update-kubeconfig --region ${AWS_REGION} --name ${CLUSTER_NAME} --alias ${CLUSTER_NAME} - -echo -e "\n${BOLD}${GREEN}βœ… Cluster is ready for CNOE reference implementation installation!${NC}" \ No newline at end of file diff --git a/scripts/create-config-secrets.sh b/scripts/create-config-secrets.sh deleted file mode 100755 index 83d9b54..0000000 --- a/scripts/create-config-secrets.sh +++ /dev/null @@ -1,92 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -export REPO_ROOT=$(git rev-parse --show-toplevel) -SECRET_NAME_PREFIX="cnoe-ref-impl" -PHASE="create-update-secrets" -source ${REPO_ROOT}/scripts/utils.sh - -PRIVATE_DIR="$REPO_ROOT/private" - -echo -e "\n${BOLD}${BLUE}πŸ” Starting secret creation process...${NC}" -echo -e "${CYAN}πŸ“‚ Reading files from:${NC} ${BOLD}${PRIVATE_DIR}${NC}" - -if [ ! -d "$PRIVATE_DIR" ]; then - echo -e "${RED}❌ Directory $PRIVATE_DIR does not exist${NC}" - exit 1 -fi - -# Create or update secret -create_update_secret() { - echo -e "\n${PURPLE}πŸš€ Creating/updating Secret for $1...${NC}" - TAGS=$(get_tags_from_config) - if aws secretsmanager create-secret \ - --name "$SECRET_NAME_PREFIX/$1" \ - --secret-string file://"$TEMP_SECRET_FILE" \ - --description "Secret created for $1 of CNOE AWS Reference Implementation" \ - --tags $TAGS \ - --region $AWS_REGION >/dev/null 2>&1; then - echo -e "${GREEN}βœ… Secret '${BOLD}$SECRET_NAME_PREFIX/$1${NC}${GREEN}' created successfully!${NC}" - else - echo -e "${YELLOW}πŸ”„ Secret exists, updating...${NC}" - if aws secretsmanager update-secret \ - --secret-id "$SECRET_NAME_PREFIX/$1" \ - --secret-string file://"$TEMP_SECRET_FILE" \ - --region $AWS_REGION >/dev/null 2>&1; then - echo -e "${GREEN}βœ… Secret '${BOLD}$SECRET_NAME_PREFIX/$1${NC}${GREEN}' updated successfully!${NC}" - else - echo -e "${RED}❌ Failed to create/update secret${NC}" - rm "$TEMP_SECRET_FILE" - exit 1 - fi - fi - - # Cleanup - rm "$TEMP_SECRET_FILE" - echo -e "${CYAN}πŸ” Secret ARN:${NC} $(aws secretsmanager describe-secret --secret-id "$SECRET_NAME_PREFIX/$1" --region $AWS_REGION --query 'ARN' --output text)" -} - -echo -e "\n${YELLOW}πŸ“‹ Processing files...${NC}" -TEMP_SECRET_FILE=$(mktemp) - -# Start building JSON for Github App secrets -echo "{" > "$TEMP_SECRET_FILE" - -first=true -file_count=0 -for file in "$PRIVATE_DIR"/*.yaml; do - if [ -f "$file" ]; then - filename=$(basename "$file" .yaml) - echo -e "${CYAN} πŸ“„ Adding:${NC} ${filename}" - - # Add comma if not first entry - if [ "$first" = false ]; then - echo "," >> "$TEMP_SECRET_FILE" - fi - first=false - - # Add key-value pair with properly escaped content - echo -n " \"$filename\": " >> "$TEMP_SECRET_FILE" - yq -o=json eval '.' "$file" >> "$TEMP_SECRET_FILE" - file_count=$((file_count + 1)) - fi -done - -if [ $file_count -eq 0 ]; then - echo -e "${RED}❌ No files found in $PRIVATE_DIR${NC}" - rm "$TEMP_SECRET_FILE" - exit 1 -fi - -echo "" >> "$TEMP_SECRET_FILE" -echo "}" >> "$TEMP_SECRET_FILE" - -create_update_secret "github-app" - -# Build JSON for Config secret -TEMP_SECRET_FILE=$(mktemp) -yq -o=json eval '.' "$CONFIG_FILE" > "$TEMP_SECRET_FILE" -create_update_secret "config" - -echo -e "\n${BOLD}${GREEN}πŸŽ‰ Process completed successfully! πŸŽ‰${NC}" - diff --git a/scripts/get-urls.sh b/scripts/get-urls.sh deleted file mode 100755 index 6106a1d..0000000 --- a/scripts/get-urls.sh +++ /dev/null @@ -1,37 +0,0 @@ -#!/bin/bash - -# Colors -RED='\033[38;5;160m' -GREEN='\033[38;5;34m' -PURPLE='\033[38;5;98m' -NC='\033[0m' -BLUE='\033[38;5;33m' -YELLOW='\033[38;5;178m' -CYAN='\033[38;5;37m' -BOLD='\033[1m' -ORANGE='\033[38;5;172m' - -# Get the path_routing value from config.yaml -PATH_ROUTING=$(yq '.path_routing' config.yaml) -# Get the domain from config.yaml -DOMAIN=$(yq '.domain' config.yaml) - -echo -e "\n${BOLD}${ORANGE}✨ ========================================== ✨${NC}" -echo -e "${BOLD}${CYAN}🌐 Platform Access URLs 🌐${NC}" -echo -e "${BOLD}${ORANGE}✨ ========================================== ✨${NC}\n" - -echo -e "${BOLD}${PURPLE}πŸ”— URLs for accessing the platform:${NC}" -echo -e "${YELLOW}----------------------------------------------------${NC}" - -if [ "$PATH_ROUTING" == "\"true\"" ] || [ "$PATH_ROUTING" == "true" ]; then - echo -e "${CYAN}πŸ”Ά Backstage: ${BOLD}https://$DOMAIN${NC}" - echo -e "${CYAN}πŸ”Ά Argo CD: ${BOLD}https://$DOMAIN/argocd${NC}" - echo -e "${CYAN}πŸ”Ά Argo Workflows: ${BOLD}https://$DOMAIN/argo-workflows${NC}" -else - echo -e "${CYAN}πŸ”Ά Backstage: ${BOLD}https://backstage.$DOMAIN${NC}" - echo -e "${CYAN}πŸ”Ά Argo CD: ${BOLD}https://argocd.$DOMAIN${NC}" - echo -e "${CYAN}πŸ”Ά Argo Workflows: ${BOLD}https://argo-workflows.$DOMAIN${NC}" -fi - -echo -e "${YELLOW}----------------------------------------------------${NC}" -echo -e "\n${BOLD}${GREEN}βœ… Use the URLs above to access the platform services${NC}\n" \ No newline at end of file diff --git a/scripts/install-using-idpbuilder.sh b/scripts/install-using-idpbuilder.sh deleted file mode 100755 index db9c86a..0000000 --- a/scripts/install-using-idpbuilder.sh +++ /dev/null @@ -1,69 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -export REPO_ROOT=$(git rev-parse --show-toplevel) -PHASE="install" -source ${REPO_ROOT}/scripts/utils.sh - -echo -e "\n${BOLD}${BLUE}πŸš€ Starting installation process...${NC}" - -SERVER_URL=$(cat "$KUBECONFIG_FILE" | yq -r '.clusters[0].cluster.server') -CA_DATA=$(cat "$KUBECONFIG_FILE" | yq -r '.clusters[0].cluster."certificate-authority-data"') - -echo -e "${CYAN}πŸ“ Creating cluster secret file...${NC}" -CLUSTER_SECRET_FILE=$(mktemp) -cat << EOF > "$CLUSTER_SECRET_FILE" -# Remote EKS cluster Argo CD secret -apiVersion: v1 -kind: Secret -metadata: - name: "$CLUSTER_NAME-cluster-secret" - namespace: argocd - labels: - argocd.argoproj.io/secret-type: cluster - clusterClass: "control-plane" - clusterName: "$CLUSTER_NAME" - environment: "control-plane-bootstrap" - path_routing: "$PATH_ROUTING" - auto_mode: "$AUTO_MODE" - annotations: - addons_repo_url: "http://cnoe.localtest.me:8443/gitea/giteaAdmin/idpbuilder-localdev-bootstrap-appset-packages.git" - addons_repo_revision: "HEAD" - addons_repo_basepath: "." - domain: "$DOMAIN_NAME" -type: Opaque -stringData: - name: "$CLUSTER_NAME" - server: $SERVER_URL - clusterResources: "true" - config: | - { - "execProviderConfig": { - "command": "argocd-k8s-auth", - "args": ["aws", "--cluster-name", "$CLUSTER_NAME"], - "apiVersion": "client.authentication.k8s.io/v1beta1" - }, - "tlsClientConfig": { - "insecure": false, - "caData": "$CA_DATA" - } - } -EOF - -echo -e "${BOLD}${GREEN}πŸ”„ Running idpbuilder to apply packages...${NC}" -idpbuilder create --use-path-routing --protocol http --package "$REPO_ROOT/packages" -c "argocd:${CLUSTER_SECRET_FILE}" > /dev/null 2>&1 - -echo -e "${YELLOW}⏳ Waiting for local addons-appset to be healthy...${NC}" -# sleep 60 # Wait 1 minute before checking the status -kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd applications/addons-appset-$CLUSTER_NAME --timeout=15m -echo -e "${GREEN}βœ… local addons-appset is now healthy!${NC}" - -# Wait for Argo CD applications to sync -wait_for_apps - -# Delete idpbuilder local kind cluster instance -echo -e "${CYAN}πŸ”„ Deleting idpbuilder local kind cluster instance...${NC}" -idpbuilder delete cluster --name localdev > /dev/null 2>&1 - -echo -e "\n${BOLD}${BLUE}πŸŽ‰ Installation completed successfully! πŸŽ‰${NC}" -echo -e "${CYAN}πŸ“Š You can now access your resources and start deploying applications.${NC}" \ No newline at end of file diff --git a/scripts/install.sh b/scripts/install.sh deleted file mode 100755 index 4c16b83..0000000 --- a/scripts/install.sh +++ /dev/null @@ -1,96 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -export REPO_ROOT=$(git rev-parse --show-toplevel) -PHASE="install" -source ${REPO_ROOT}/scripts/utils.sh - -echo -e "\n${BOLD}${BLUE}πŸš€ Starting installation process...${NC}" - -# Static helm values files -ARGOCD_STATIC_VALUES_FILE=${REPO_ROOT}/packages/argo-cd/values.yaml -EXTERNAL_SECRETS_STATIC_VALUES_FILE=${REPO_ROOT}/packages/external-secrets/values.yaml -ADDONS_APPSET_STATIC_VALUES_FILE=${REPO_ROOT}/packages/bootstrap/values.yaml - -# Chart versions for Argo CD and ESO -ARGOCD_CHART_VERSION=$(yq '.argocd.defaultVersion' ${REPO_ROOT}/packages/addons/values.yaml) -EXTERNAL_SECRETS_CHART_VERSION=$(yq '.external-secrets.defaultVersion' ${REPO_ROOT}/packages/addons/values.yaml) - -# Custom Manifests Paths -ARGOCD_CUSTOM_MANIFESTS_PATH=${REPO_ROOT}/packages/argo-cd/manifests -EXTERNAL_SECRETS_CUSTOM_MANIFESTS_PATH=${REPO_ROOT}/packages/external-secrets/manifests - -# Build Argo CD dynamic values -ARGOCD_DYNAMIC_VALUES_FILE=$(mktemp) -ISSUER_URL=$([[ "${PATH_ROUTING}" == "false" ]] && echo "keycloak.${DOMAIN_NAME}" || echo "${DOMAIN_NAME}/keycloak") -cat << EOF > "$ARGOCD_DYNAMIC_VALUES_FILE" -cnoe_ref_impl: # Specific values for reference CNOE implementation to control extraObjects. - auto_mode: $([[ "${AUTO_MODE}" == "true" ]] && echo '"true"' || echo '"false"') -global: - domain: $([[ "${PATH_ROUTING}" == "true" ]] && echo "${DOMAIN_NAME}" || echo "argocd.${DOMAIN_NAME}") -server: - ingress: - annotations: - cert-manager.io/cluster-issuer: $([[ "${PATH_ROUTING}" == "false" ]] && echo '"letsencrypt-prod"' || echo "") - path: /$([[ "${PATH_ROUTING}" == "true" ]] && echo "argocd" || echo "") -configs: - cm: - oidc.config: | - name: Keycloak - issuer: https://$ISSUER_URL/realms/cnoe - clientID: argocd - enablePKCEAuthentication: true - requestedScopes: - - openid - - profile - - email - - groups - params: - 'server.basehref': /$([[ "${PATH_ROUTING}" == "true" ]] && echo "argocd" || echo "") - 'server.rootpath': $([[ "${PATH_ROUTING}" == "true" ]] && echo "argocd" || echo "") -EOF - -echo -e "${BOLD}${GREEN}πŸ”„ Installing Argo CD...${NC}" -helm repo add argo "https://argoproj.github.io/argo-helm" > /dev/null -helm repo update > /dev/null -helm upgrade --install --wait argocd argo/argo-cd \ - --namespace argocd --version $ARGOCD_CHART_VERSION \ - --create-namespace \ - --values "$ARGOCD_STATIC_VALUES_FILE" \ - --values "$ARGOCD_DYNAMIC_VALUES_FILE" \ - --kubeconfig $KUBECONFIG_FILE > /dev/null - -echo -e "${YELLOW}⏳ Waiting for Argo CD to be healthy...${NC}" -kubectl wait --for=condition=available deployment/argocd-server -n argocd --timeout=300s --kubeconfig $KUBECONFIG_FILE > /dev/null - - -echo -e "${BOLD}${GREEN}πŸ”„ Installing External Secrets...${NC}" -helm repo add external-secrets "https://charts.external-secrets.io" > /dev/null -helm repo update > /dev/null -helm upgrade --install --wait external-secrets external-secrets/external-secrets \ - --namespace external-secrets --version $EXTERNAL_SECRETS_CHART_VERSION \ - --create-namespace \ - --values "$EXTERNAL_SECRETS_STATIC_VALUES_FILE" \ - --kubeconfig $KUBECONFIG_FILE > /dev/null - -echo -e "${YELLOW}⏳ Waiting for External Secrets to be healthy...${NC}" -kubectl wait --for=condition=available deployment/external-secrets -n external-secrets --timeout=300s --kubeconfig $KUBECONFIG_FILE > /dev/null - - -echo -e "${BOLD}${GREEN}πŸ”„ Applying custom manifests...${NC}" -# sleep 60 -kubectl apply -f "$ARGOCD_CUSTOM_MANIFESTS_PATH" --kubeconfig $KUBECONFIG_FILE > /dev/null -kubectl apply -f "$EXTERNAL_SECRETS_CUSTOM_MANIFESTS_PATH" --kubeconfig $KUBECONFIG_FILE > /dev/null - -echo -e "${BOLD}${GREEN}πŸ”„ Installing Addons AppSet Argo CD application...${NC}" -helm upgrade --install --wait addons-appset ${REPO_ROOT}/packages/appset-chart \ - --namespace argocd \ - --values "$ADDONS_APPSET_STATIC_VALUES_FILE" \ - --kubeconfig $KUBECONFIG_FILE > /dev/null - -# Wait for Argo CD applications to sync -sleep 10 -wait_for_apps - -echo -e "\n${BOLD}${BLUE}πŸŽ‰ Installation completed successfully! πŸŽ‰${NC}" -echo -e "${CYAN}πŸ“Š You can now access your resources and start deploying applications.${NC}" diff --git a/scripts/template.sh b/scripts/template.sh deleted file mode 100755 index 2bfd672..0000000 --- a/scripts/template.sh +++ /dev/null @@ -1,56 +0,0 @@ -#!/bin/bash - -CONFIG_FILE="config.yaml" - -# Check if config file exists -if [ ! -f "$CONFIG_FILE" ]; then - echo "Error: $CONFIG_FILE not found" - exit 1 -fi - -# Process only YAML files in packages directory -find packages -type f -name "*.yaml" -o -name "*.yml" | while read -r file; do - # Check if file contains any template pattern {{ .key_name }} - if grep -q "{{" "$file"; then - echo "Processing $file" - - # Use grep to find lines with templates (excluding commented lines) - grep -n "{{.*}}" "$file" | grep -v "^[[:space:]]*#" | while IFS=: read -r line_num line_content; do - # Skip commented lines - if [[ "$line_content" =~ ^[[:space:]]*# ]]; then - continue - fi - - # Extract template pattern from the line - template=$(echo "$line_content" | grep -o "{{[[:space:]]*\.[a-zA-Z0-9_\.]*[[:space:]]*}}") - - # Skip if no valid template found - if [ -z "$template" ]; then - continue - fi - - # Extract key from template - key=$(echo "$template" | sed 's/{{[[:space:]]*\.\([a-zA-Z0-9_\.]*\)[[:space:]]*}}/\1/') - - # Skip if key is empty - if [ -z "$key" ]; then - continue - fi - - # Get value using yq - value=$(yq eval ".$key" "$CONFIG_FILE" 2>/dev/null) - if [ "$value" = "null" ] || [ -z "$value" ]; then - echo " Warning: No value found for key '$key' in $CONFIG_FILE" - continue - fi - - echo " Replacing '$key' with '$value'" - # Replace template with value (escape special characters in template and value) - escaped_template=$(echo "$template" | sed 's/[\/&]/\\&/g') - escaped_value=$(echo "$value" | sed 's/[\/&]/\\&/g') - sed -i "s/$escaped_template/$escaped_value/" "$file" - done - fi -done - -echo "Done!" \ No newline at end of file diff --git a/scripts/uninstall.sh b/scripts/uninstall.sh deleted file mode 100755 index 4406f42..0000000 --- a/scripts/uninstall.sh +++ /dev/null @@ -1,78 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -export REPO_ROOT=$(git rev-parse --show-toplevel) -PHASE="uninstall" -source ${REPO_ROOT}/scripts/utils.sh - -echo -e "\n${BOLD}${BLUE}πŸš€ Starting uninstallation process...${NC}" - -# Addons to be deleted -ADDONS=( - crossplane-compositions - crossplane-upbound-providers - crossplane - argo-workflows - backstage - keycloak - cert-manager - external-dns - external-secrets - ingress-nginx - aws-load-balancer-controller -) - -# Remove addons-appset applicationset and corresponding appset-chart applicationset with orphan deletion policy. -# The addons will be removed in specific order later. -echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}addons-appset${NC} ${CYAN}ApplicationSet...${NC}" -kubectl delete applicationsets.argoproj.io -n argocd addons-appset --cascade=orphan --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true -kubectl delete applicationsets.argoproj.io -n argocd addons-appset-pr --cascade=orphan --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - -echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}appset-chart${NC} ${CYAN}ApplicationSet...${NC}" -kubectl delete applications.argoproj.io -n argocd -l addonName=$APPSET_ADDON_NAME --cascade=orphan --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - -# Start removing addons in order -echo -e "${BOLD}${YELLOW}πŸ“¦ Removing add-ons in sequence...${NC}" -# Delete all addon application sets except argocd -for app in "${ADDONS[@]}"; do - echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}$app${NC} ${CYAN}AppSet...${NC}" - kubectl delete applicationsets.argoproj.io -n argocd $app --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - # Wait for AppSet deletion to complete before moving to next AppSet - while [ $(kubectl get applications.argoproj.io -n argocd -l addonName=$app --no-headers --kubeconfig $KUBECONFIG_FILE 2>/dev/null | wc -l) -ne 0 ]; do - echo -e "${YELLOW}⏳ Waiting for ${BOLD}$app${NC} ${YELLOW}AppSet to be deleted...${NC}" - sleep 10 - done - echo -e "${GREEN}βœ… ${BOLD}$app${NC} ${GREEN}successfully removed!${NC}" -done - -# Delete ArgoCD App -echo -e "${CYAN}πŸ—‘οΈ Deleting ${BOLD}argocd${NC} ${CYAN}AppSet...${NC}" -kubectl delete applicationsets.argoproj.io -n argocd argocd --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true - -# Wait for ArgoCD to be deleted -echo -e "${YELLOW}⏳ Waiting for ${BOLD}argocd${NC} ${YELLOW}AppSet to be deleted...${NC}" -START_TIME=$(date +%s) -TIMEOUT=120 # 2 minutes timeout -while [ $(kubectl get applications.argoproj.io -n argocd -l addonName=argocd --no-headers --kubeconfig $KUBECONFIG_FILE 2>/dev/null | wc -l) -ne 0 ]; do - CURRENT_TIME=$(date +%s) - ELAPSED_TIME=$((CURRENT_TIME - START_TIME)) - - if [ $ELAPSED_TIME -ge $TIMEOUT ]; then - echo -e "${YELLOW}⚠️ Timeout reached. Patching ${BOLD}argocd${NC} ${YELLOW}applications to remove finalizers...${NC}" - kubectl patch applications.argoproj.io -n argocd "argocd-$CLUSTER_NAME" --type json -p='[{"op": "remove", "path": "/metadata/finalizers"}]' --kubeconfig $KUBECONFIG_FILE || true - break - fi - - echo -e "${YELLOW}⏳ Still waiting for ${BOLD}argocd${NC} ${YELLOW}AppSet to be deleted... (${ELAPSED_TIME}s elapsed)${NC}" - sleep 10 -done -echo -e "${GREEN}βœ… ${BOLD}argocd${NC} ${GREEN}successfully removed!${NC}" - -# Remove PVCs for keycloak -echo -e "${CYAN}πŸ—‘οΈ Deleting PVCs for ${BOLD}keycloak${NC}...${NC}" -kubectl delete pvc -n keycloak data-keycloak-postgresql-0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true -kubectl delete pvc -n backstage data-postgresql-0 --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 || true -echo -e "${GREEN}βœ… Keycloak & Backstage Postgres PVCs removed!${NC}" - -echo -e "\n${BOLD}${GREEN}πŸŽ‰ Uninstallation Complete! πŸŽ‰${NC}" -echo -e "${CYAN}🧹 All resources have been successfully removed.${NC}" \ No newline at end of file diff --git a/scripts/utils.sh b/scripts/utils.sh deleted file mode 100755 index 39c6056..0000000 --- a/scripts/utils.sh +++ /dev/null @@ -1,192 +0,0 @@ -set -e - -# Colors -export RED='\033[38;5;160m' -export GREEN='\033[38;5;34m' -export PURPLE='\033[38;5;98m' -export NC='\033[0m' -export BLUE='\033[38;5;33m' -export YELLOW='\033[38;5;178m' -export CYAN='\033[38;5;37m' -export BOLD='\033[1m' -export ORANGE='\033[38;5;172m' - -# Extract tags from config file -get_tags_from_config() { - yq eval '.tags | to_entries | map("Key=" + .key + ",Value=" + .value) | join(" ")' "$CONFIG_FILE" -} - -# Generate kubeconfig for the EKS cluster -get_kubeconfig() { - export KUBECONFIG_FILE=$(mktemp) - echo -e "${PURPLE}πŸ”‘ Generating temporary kubeconfig for cluster ${BOLD}${CLUSTER_NAME}${NC}...${NC}" - aws eks update-kubeconfig --region $AWS_REGION --name $CLUSTER_NAME --kubeconfig $KUBECONFIG_FILE > /dev/null 2>&1 -} - -# Wait for all Argo CD applications to report healthy status -wait_for_apps(){ - - echo -e "${YELLOW}⏳ Waiting for addons-appset to be healthy...${NC}" - kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd applications/$APPSET_ADDON_NAME-$CLUSTER_NAME --timeout=15m --kubeconfig $KUBECONFIG_FILE - echo -e "${GREEN}βœ… addons-appset is now healthy!${NC}" - - START_TIME=$(date +%s) - TIMEOUT=600 # 5 minute timeout for moving to checking the status as the apps on hub cluster will take some time to create - while [ $(kubectl get applications.argoproj.io -n argocd --no-headers --kubeconfig $KUBECONFIG_FILE 2>/dev/null | wc -l) -lt 2 ]; do - CURRENT_TIME=$(date +%s) - ELAPSED_TIME=$((CURRENT_TIME - START_TIME)) - - if [ $ELAPSED_TIME -ge $TIMEOUT ]; then - echo -e "${YELLOW}⚠️ Timeout reached while waiting for applications to be created by the AppSet chart...${NC}" - break - fi - - echo -e "${YELLOW}⏳ Still waiting for ${BOLD}argocd apps from Appset chart${NC} ${YELLOW}to be created on hub cluster... (${ELAPSED_TIME}s elapsed)${NC}" - sleep 30 - done - - echo -e "${YELLOW}⏳ Waiting for all Argo CD apps on the hub Cluster to be Healthy... might take up to 30 minutes${NC}" - kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd --all applications --kubeconfig $KUBECONFIG_FILE --timeout=-30m - echo -e "${BOLD}${GREEN}βœ… All Argo CD apps are now healthy!${NC}" -} - -# Check if required binaries binaries exists -clis=("aws" "kubectl" "yq") -for cli in "${clis[@]}"; do - if command -v "$cli" >/dev/null 2>&1 ; then - continue - else - echo -e "${RED}❌ $cli command is not installed. Please install it to continue.${NC}" - exit 4 - fi -done - -export CONFIG_FILE="$REPO_ROOT/config.yaml" - -# Check if config file exists -if [ ! -f "$CONFIG_FILE" ]; then - echo -e "${RED}❌ File $CONFIG_FILE does not exist${NC}" - exit 1 -fi - -# Fetch config values -export CLUSTER_NAME=$(yq '.cluster_name' "$CONFIG_FILE") -export AWS_REGION=$(yq '.region' "$CONFIG_FILE") -export DOMAIN_NAME=$(yq '.domain' "$CONFIG_FILE") -export PATH_ROUTING=$(yq '.path_routing' "$CONFIG_FILE") -export AUTO_MODE=$(yq '.auto_mode' "$CONFIG_FILE") -export APPSET_ADDON_NAME=$([[ "${PATH_ROUTING}" == "true" ]] && echo "addons-appset-pr" || echo "addons-appset") -export AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text) - -# Header -echo -e "${BOLD}${ORANGE}✨ ========================================== ✨${NC}" -echo -e "${BOLD}${CYAN}πŸ“¦ CNOE AWS Reference Implementation πŸ“¦${NC}" -echo -e "${BOLD}${ORANGE}✨ ========================================== ✨${NC}\n" - -echo -e "${BOLD}${PURPLE}\n🎯 Targets:${NC}" -echo -e "${CYAN}πŸ”Ά AWS account number:${NC} ${AWS_ACCOUNT_ID}" -echo -e "${CYAN}πŸ”Ά AWS profile (if set):${NC} ${AWS_PROFILE:-None}" -echo -e "${CYAN}πŸ”Ά AWS region:${NC} ${AWS_REGION}" -echo -e "${CYAN}πŸ”Ά Kubernetes cluster:${NC} ${BOLD}$CLUSTER_NAME${NC}" - -if [ $PHASE = "create-cluster" ]; then - # Ask user for deployment tool - echo -e "\n${BOLD}${YELLOW}❓ Which tool would you like to use for cluster creation?${NC}" - echo -e "${CYAN}1) eksctl (YAML-based configuration)${NC}" - echo -e "${CYAN}2) terraform (Infrastructure as Code)${NC}" - read -p "Enter your choice (1 or 2): " tool_choice - - case $tool_choice in - 1) - export DEPLOYMENT_TOOL="eksctl" - echo -e "${GREEN}βœ… Selected: eksctl${NC}" - ;; - 2) - export DEPLOYMENT_TOOL="terraform" - echo -e "${GREEN}βœ… Selected: terraform${NC}" - ;; - *) - echo -e "${RED}❌ Invalid choice. Please select 1 or 2.${NC}" - exit 1 - ;; - esac - - # Ask user for cluster type - echo -e "\n${BOLD}${YELLOW}❓ Which type of EKS cluster would you like to create?${NC}" - echo -e "${CYAN}1) Auto Mode cluster (Recommended for new users)${NC}" - echo -e "${CYAN}2) Non-Auto Mode cluster (Managed Node Groups)${NC}" - read -p "Enter your choice (1 or 2): " cluster_choice - - case $cluster_choice in - 1) - export CLUSTER_TYPE="auto" - export AUTO_MODE="true" - export EKSCTL_CONFIG_FILE_PATH="${REPO_ROOT}/cluster/eksctl/cluster-config-auto.yaml" - echo -e "${GREEN}βœ… Selected: Auto Mode cluster${NC}" - ;; - 2) - export CLUSTER_TYPE="standard" - export AUTO_MODE="false" - export EKSCTL_CONFIG_FILE_PATH="${REPO_ROOT}/cluster/eksctl/cluster-config.yaml" - echo -e "${GREEN}βœ… Selected: Non-Auto Mode cluster${NC}" - ;; - *) - echo -e "${RED}❌ Invalid choice. Please select 1 or 2.${NC}" - exit 1 - ;; - esac - echo -e "\n${BOLD}${GREEN}❓ Are you sure you want to create the EKS cluster?${NC}" - read -p '(yes/no): ' response - if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo -e "${YELLOW}⚠️ Cluster creation cancelled.${NC}" - exit 0 - fi -fi - -if [ $PHASE = "install" ]; then - echo -e "${CYAN}πŸ“‹ Configuration Details:${NC}" - echo -e "${YELLOW}----------------------------------------------------${NC}" - yq '... comments=""' "$CONFIG_FILE" - echo -e "${YELLOW}----------------------------------------------------${NC}" - - echo -e "\n${BOLD}${GREEN}❓ Are you sure you want to continue with installation?${NC}" - read -p '(yes/no): ' response - if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo -e "${YELLOW}⚠️ Installation cancelled.${NC}" - exit 0 - fi - get_kubeconfig -fi - -if [ $PHASE = "uninstall" ]; then - echo -e "\n${BOLD}${RED}⚠️ WARNING: This will remove all deployed resources!${NC}" - echo -e "${BOLD}${RED}❓ Are you sure you want to continue with uninstallation?${NC}" - read -p '(yes/no): ' response - if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo -e "${YELLOW}⚠️ Uninstallation cancelled.${NC}" - exit 0 - fi - get_kubeconfig -fi - -if [ $PHASE = "crd-uninstall" ]; then - echo -e "\n${BOLD}${RED}⚠️ WARNING: This will remove all CRDs created by reference implementation!${NC}" - echo -e "${BOLD}${RED}❓ Are you sure you want to continue with uninstallation?${NC}" - read -p '(yes/no): ' response - if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo -e "${YELLOW}⚠️ CRD Uninstallation cancelled.${NC}" - exit 0 - fi - get_kubeconfig -fi - -if [ $PHASE = "create-update-secrets" ]; then - echo -e "${CYAN}πŸ” Secret names:${NC} ${BOLD}${SECRET_NAME_PREFIX}/config & ${SECRET_NAME_PREFIX}/github-app ${NC}" - echo -e "\n${BOLD}${RED}⚠️ WARNING: This will update the secrets if already they exists!!{NC}" - echo -e "${BOLD}${GREEN}❓ Are you sure you want to continue?${NC}" - read -p '(yes/no): ' response - if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo -e "${YELLOW}⚠️ Secret creation cancelled.${NC}" - exit 0 - fi -fi diff --git a/setups/argocd/install.sh b/setups/argocd/install.sh deleted file mode 100755 index f72658e..0000000 --- a/setups/argocd/install.sh +++ /dev/null @@ -1,55 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) - -if [ -f "${REPO_ROOT}/private/github-token" ]; then - GITHUB_TOKEN=$(cat ${REPO_ROOT}/private/github-token | tr -d '\n') -else - echo 'To get started grant the following permissions: - - Repository access for all repositories - - Read-only access to: Administration, Contents, and Metadata. - Get your GitHub personal access token from: https://github.com/settings/tokens?type=beta' - echo "Enter your token. e.g. github_pat_abcde: " - read -s GITHUB_TOKEN -fi - - -if [[ -z "${GITHUB_URL}" ]]; then - read -p "Enter GitHub repository URL e.g. https://github.com/cnoe-io/reference-implementation-aws : " GITHUB_URL - export GITHUB_URL -fi - -export GITHUB_TOKEN - -echo 'creating secret for ArgoCD in your cluster...' -kubectl create ns argocd || true -envsubst < github-secret.yaml | kubectl apply -f - - -echo 'creating Argo CD resources' -cd ${REPO_ROOT} -retry_count=0 -max_retries=2 - -set +e -while [ $retry_count -le $max_retries ]; do - kustomize build packages/argocd/dev | kubectl apply -f - - if [ $? -eq 0 ]; then - break - fi - echo "An error occurred. Retrying in 5 seconds" - sleep 5 - ((retry_count++)) -done - -if [ $? -ne 0 ]; then - echo 'could not install argocd in your cluster' - exit 1 -fi - -set -e -echo 'waiting for ArgoCD to be ready' -kubectl -n argocd rollout status --watch --timeout=900s statefulset/argocd-application-controller -kubectl -n argocd rollout status --watch --timeout=900s deployment/argocd-server - -cd - diff --git a/setups/config.yaml b/setups/config.yaml deleted file mode 100644 index 0d71c4c..0000000 --- a/setups/config.yaml +++ /dev/null @@ -1,19 +0,0 @@ -# This is the GITHUB URL where Kubernetes manifests are stored. -# If you forked this repo, you will need to update this. -repo_url: "https://github.com/livewyer-ops/cnoe-reference-implementation-azure.git" -# Tags to apply to Azure resources -tags: - env: "dev" - project: "cnoe" -region: "eastus" -# The name of the resource group you are installing this under. -resource_group: cnoe-idp -# The name of the AKS cluster you are installing this under. -cluster_name: cnoe-idp -# Set this to false if you want to manage DNS somewhere else. e.g. manually. -enable_dns_management: true -# If using external DNS, specify the Azure DNS hosted zone ID. Required if enable_dns_management is set to true -dns_zone_id: /subscriptions//resourceGroups//providers/Microsoft.Network/dnszones/ -domain_name: sudbomain.domain.root -# If set to true, we will store secrets to Azure Secrets Manager, then sync it to the cluster using External Secrets Operator. -enable_external_secret: true diff --git a/setups/install.sh b/setups/install.sh deleted file mode 100755 index 6abf7fe..0000000 --- a/setups/install.sh +++ /dev/null @@ -1,34 +0,0 @@ -#!/bin/bash -set -e -o pipefail -REPO_ROOT=$(git rev-parse --show-toplevel) - -source ${REPO_ROOT}/setups/utils.sh - -echo -e "${GREEN}Installing with the following options: ${NC}" -echo -e "${GREEN}----------------------------------------------------${NC}" -yq '... comments=""' ${REPO_ROOT}/setups/config.yaml -echo -e "${GREEN}----------------------------------------------------${NC}" -echo -e "${PURPLE}\nTargets:${NC}" -echo "Kubernetes cluster: $(kubectl config current-context)" -echo "Azure account (if set): $(az account show -o json | jq -rc '.user.name')" -echo "Azure subscription: $(az account show -o json | jq -rc '.name')" - -echo -e "${GREEN}\nAre you sure you want to continue?${NC}" -read -p '(yes/no): ' response -if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo 'exiting.' - exit 0 -fi - -export GITHUB_URL=$(yq '.repo_url' ./setups/config.yaml) - -# Set up ArgoCD. We will use ArgoCD to install all components. -cd "${REPO_ROOT}/setups/argocd/" -./install.sh -cd - - -# The rest of the steps are defined as a Terraform module. Parse the config to JSON and use it as the Terraform variable file. This is done because JSON doesn't allow you to easily place comments. -cd "${REPO_ROOT}/terraform/" -yq -o json '.' ../setups/config.yaml > terraform.tfvars.json -terraform init -upgrade -terraform apply -auto-approve diff --git a/setups/uninstall.sh b/setups/uninstall.sh deleted file mode 100755 index a4947bc..0000000 --- a/setups/uninstall.sh +++ /dev/null @@ -1,28 +0,0 @@ -#!/bin/bash -set -e -o pipefail - -REPO_ROOT=$(git rev-parse --show-toplevel) -SETUP_DIR="${REPO_ROOT}/setups" -TF_DIR="${REPO_ROOT}/terraform" -source ${REPO_ROOT}/setups/utils.sh - -cd ${SETUP_DIR} - -echo -e "${PURPLE}\nTargets:${NC}" -echo "Kubernetes cluster: $(kubectl config current-context)" -echo "Azure account (if set): $(az account show -o json | jq -rc '.user.name')" -echo "Azure subscription: $(az account show -o json | jq -rc '.name')" - -echo -e "${RED}\nAre you sure you want to continue?${NC}" -read -p '(yes/no): ' response -if [[ ! "$response" =~ ^[Yy][Ee][Ss]$ ]]; then - echo 'exiting.' - exit 0 -fi - -cd "${TF_DIR}" -terraform destroy - -cd "${SETUP_DIR}/argocd/" -./uninstall.sh -cd - diff --git a/setups/utils.sh b/setups/utils.sh deleted file mode 100644 index 16f7d36..0000000 --- a/setups/utils.sh +++ /dev/null @@ -1,45 +0,0 @@ -set -e -export RED='\033[0;31m' -export GREEN='\033[0;32m' -export PURPLE='\033[0;35m' -export NC='\033[0m' - -check_command() { - command -v "$1" >/dev/null 2>&1 -} - -# Validation -clis=("gcloud" "kubectl" "jq" "kustomize" "curl" "yq") -for cli in "${clis[@]}"; do - if check_command "$cli"; then - continue - else - echo -e "${RED}$cli is not installed. Please install it to continue.${NC}" - exit 4 - fi -done - -DEFAULT_KUBECONFIG_FILE="$HOME/.kube/config" -# Check if the default kubeconfig file exists -if [ ! -f "${DEFAULT_KUBECONFIG_FILE}" ]; then - echo "${DEFAULT_KUBECONFIG_FILE} kubeconfig file does not exist. Exiting..." - exit 1 -fi - -if [ "$( grep -v "^$\|^ *$" -c "${DEFAULT_KUBECONFIG_FILE}" )" -eq "0" ]; then - echo -e "${RED}Error: ${DEFAULT_KUBECONFIG_FILE} kubeconfig file does not exist or is empty.${NC}" - echo -e "${PURPLE}Info: Please configure a valid kubeconfig file or set the KUBECONFIG environment variable.${NC}" - exit 1 -fi - -kubectl cluster-info > /dev/null -if [ $? -ne 0 ]; then - echo "Could not get cluster info. Ensure kubectl is configured correctly" - exit 1 -fi - -minor=$(kubectl version --client=true -o yaml | yq '.clientVersion.minor') -if [[ ${minor} -lt "27" ]]; then - echo -e "${RED} ${minor} this kubectl version is not supported. Please upgrade to 1.27+ ${NC}" - exit 5 -fi diff --git a/terraform/argo-workflows.tf b/terraform/argo-workflows.tf deleted file mode 100644 index 6d7ae64..0000000 --- a/terraform/argo-workflows.tf +++ /dev/null @@ -1,84 +0,0 @@ -#--------------------------------------------------------------- -# Argo Workflows -#--------------------------------------------------------------- - -resource "kubernetes_manifest" "namespace_argo_workflows" { - manifest = { - "apiVersion" = "v1" - "kind" = "Namespace" - "metadata" = { - "name" = "argo" - } - } -} - -resource "terraform_data" "argo_workflows_keycloak_setup" { - depends_on = [ - kubectl_manifest.application_argocd_keycloak, - kubernetes_manifest.namespace_argo_workflows - ] - - provisioner "local-exec" { - command = "./install.sh" - - working_dir = "${path.module}/scripts/argo-workflows" - environment = { - "ARGO_WORKFLOWS_REDIRECT_URL" = "${local.argo_redirect_url}" - } - interpreter = ["/bin/bash", "-c"] - } - - provisioner "local-exec" { - when = destroy - - command = "./uninstall.sh" - working_dir = "${path.module}/scripts/argo-workflows" - interpreter = ["/bin/bash", "-c"] - } -} - -resource "kubectl_manifest" "application_argocd_argo_workflows" { - depends_on = [ - terraform_data.argo_workflows_keycloak_setup - ] - - yaml_body = templatefile("${path.module}/templates/argocd-apps/argo-workflows.yaml", { - GITHUB_URL = local.repo_url - KEYCLOAK_CNOE_URL = local.kc_cnoe_url - ARGO_REDIRECT_URL = local.argo_redirect_url - } - ) -} - -resource "kubectl_manifest" "application_argocd_argo_workflows_templates" { - depends_on = [ - terraform_data.argo_workflows_keycloak_setup - ] - - yaml_body = templatefile("${path.module}/templates/argocd-apps/argo-workflows-templates.yaml", { - GITHUB_URL = local.repo_url - } - ) -} - -resource "kubectl_manifest" "application_argocd_argo_workflows_sso_config" { - depends_on = [ - terraform_data.argo_workflows_keycloak_setup - ] - - yaml_body = templatefile("${path.module}/templates/argocd-apps/argo-workflows-sso-config.yaml", { - GITHUB_URL = local.repo_url - } - ) -} - -resource "kubectl_manifest" "ingress_argo_workflows" { - depends_on = [ - kubectl_manifest.application_argocd_argo_workflows, - ] - - yaml_body = templatefile("${path.module}/templates/manifests/ingress-argo-workflows.yaml", { - ARGO_WORKFLOWS_DOMAIN_NAME = local.argo_domain_name - } - ) -} diff --git a/terraform/argocd-ingress.tf b/terraform/argocd-ingress.tf deleted file mode 100644 index 7b8b21d..0000000 --- a/terraform/argocd-ingress.tf +++ /dev/null @@ -1,8 +0,0 @@ -resource "kubectl_manifest" "ingress_argocd" { - yaml_body = templatefile("${path.module}/templates/manifests/ingress-argocd.yaml", { - ARGOCD_DOMAIN_NAME = local.argocd_domain_name - } - ) - - depends_on = [kubernetes_manifest.namespace_argo_workflows] -} diff --git a/terraform/cert-manager.tf b/terraform/cert-manager.tf deleted file mode 100644 index 5cdeea2..0000000 --- a/terraform/cert-manager.tf +++ /dev/null @@ -1,18 +0,0 @@ -resource "kubectl_manifest" "application_argocd_cert_manager" { - yaml_body = templatefile("${path.module}/templates/argocd-apps/cert-manager.yaml", { - REPO_URL = local.repo_url - }) -} - -resource "terraform_data" "wait_for_cert_manager" { - provisioner "local-exec" { - command = "kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd application/cert-manager && kubectl wait --for=jsonpath=.status.sync.status=Synced --timeout=900s -n argocd application/cert-manager" - } -} - -resource "kubectl_manifest" "cluster_issuer_prod" { - depends_on = [terraform_data.wait_for_cert_manager] - yaml_body = templatefile("${path.module}/templates/manifests/cluster-issuer.yaml", { - REPO_URL = local.repo_url - }) -} diff --git a/terraform/crossplane.tf b/terraform/crossplane.tf deleted file mode 100644 index ca1c15a..0000000 --- a/terraform/crossplane.tf +++ /dev/null @@ -1,58 +0,0 @@ -module "crossplane_azure_provider_role" { - source = "git::https://github.com/livewyer-ops/terraform-azure-workload-identity.git" - - resource_group_name = data.azurerm_resource_group.current.name - location = data.azurerm_resource_group.current.location - - oidc_issuer_url = data.azurerm_kubernetes_cluster.target.oidc_issuer_url - create_kubernetes_namespace = false - create_service_account = false - namespace = "crossplane-system" - service_account_name = "provider-azure" - role_assignments = [{ - role_definition_name = "Owner" - scope = data.azurerm_resource_group.current.id - }] -} - -resource "kubectl_manifest" "application_argocd_crossplane" { - yaml_body = templatefile("${path.module}/templates/argocd-apps/crossplane.yaml", { - GITHUB_URL = local.repo_url - } - ) - - provisioner "local-exec" { - command = "kubectl wait --for=jsonpath=.status.health.status=Healthy -n argocd application/crossplane --timeout=600s && kubectl wait --for=jsonpath=.status.sync.status=Synced --timeout=600s -n argocd application/crossplane" - - interpreter = ["/bin/bash", "-c"] - } - - provisioner "local-exec" { - when = destroy - - command = "./uninstall.sh" - working_dir = "${path.module}/scripts/crossplane" - interpreter = ["/bin/bash", "-c"] - } -} - -resource "kubectl_manifest" "crossplane_provider_controller_config" { - depends_on = [ - kubectl_manifest.application_argocd_crossplane, - ] - yaml_body = templatefile("${path.module}/templates/manifests/crossplane-azure-controller-config.yaml", { - AZURE_CLIENT_ID = module.crossplane_azure_provider_role.client_id - AZURE_TENANT_ID = module.crossplane_azure_provider_role.tenant_id - } - ) -} - -resource "kubectl_manifest" "application_argocd_crossplane_provider" { - depends_on = [ - kubectl_manifest.application_argocd_crossplane, - ] - yaml_body = templatefile("${path.module}/templates/argocd-apps/crossplane-provider.yaml", { - GITHUB_URL = local.repo_url - } - ) -} diff --git a/terraform/data.tf b/terraform/data.tf deleted file mode 100644 index b7f9ff9..0000000 --- a/terraform/data.tf +++ /dev/null @@ -1,24 +0,0 @@ -data "azurerm_kubernetes_cluster" "target" { - name = local.cluster_name - resource_group_name = local.resource_group -} - -data "azurerm_dns_zone" "selected" { - count = local.dns_count - name = local.dns_zone_id["resource_name"] - resource_group_name = local.dns_zone_id["resource_group_name"] -} - -data "azurerm_resource_group" "dns" { - name = local.dns_zone_id["resource_group_name"] -} - -data "azurerm_subscription" "current" { - subscription_id = local.subscription_id -} - -data "azurerm_resource_group" "current" { - name = local.resource_group -} - -data "azurerm_client_config" "current" {} diff --git a/terraform/external-dns.tf b/terraform/external-dns.tf deleted file mode 100644 index 856d10c..0000000 --- a/terraform/external-dns.tf +++ /dev/null @@ -1,67 +0,0 @@ -module "external_dns_role" { - source = "git::https://github.com/livewyer-ops/terraform-azure-workload-identity.git" - - count = local.dns_count - - resource_group_name = data.azurerm_resource_group.current.name - location = data.azurerm_resource_group.current.location - - oidc_issuer_url = data.azurerm_kubernetes_cluster.target.oidc_issuer_url - create_kubernetes_namespace = true - create_service_account = false - namespace = "external-dns" - service_account_name = "external-dns" - role_assignments = [ - { - role_definition_name = "DNS Zone Contributor" - scope = data.azurerm_dns_zone.selected[0].id - }, - { - role_definition_name = "Reader" - scope = data.azurerm_resource_group.dns.id - }, - ] -} - -resource "kubectl_manifest" "application_argocd_external_dns" { - count = local.dns_count - - yaml_body = templatefile("${path.module}/templates/argocd-apps/external-dns.yaml", { - GITHUB_URL = local.repo_url - DOMAIN_NAME = data.azurerm_dns_zone.selected[0].name - AZURE_CLIENT_ID = module.external_dns_role[0].client_id - AZURE_CONFIG_SECRET = "external-dns-azure" - } - ) - - provisioner "local-exec" { - command = "kubectl wait --for=jsonpath=.status.health.status=Healthy --timeout=300s -n argocd application/external-dns" - interpreter = ["/bin/bash", "-c"] - } - - depends_on = [kubernetes_manifest.external_dns_config] -} - -resource "kubernetes_manifest" "external_dns_config" { - count = local.dns_count - - manifest = { - "apiVersion" = "v1" - "kind" = "Secret" - "type" = "Opaque" - "metadata" = { - "name" = "external-dns-azure" - "namespace" = "external-dns" - } - "data" = { - "azure.json" = base64encode(jsonencode({ - "tenantId" = "${data.azurerm_subscription.current.tenant_id}" - "subscriptionId" = "${data.azurerm_subscription.current.subscription_id}" - "resourceGroup" = "${local.dns_zone_id["resource_group_name"]}" - "useWorkloadIdentityExtension" = true - })) - } - } - - depends_on = [module.external_dns_role] -} diff --git a/terraform/external-secrets.tf b/terraform/external-secrets.tf deleted file mode 100644 index daf13db..0000000 --- a/terraform/external-secrets.tf +++ /dev/null @@ -1,12 +0,0 @@ -resource "kubectl_manifest" "application_argocd_external_secrets" { - yaml_body = templatefile("${path.module}/templates/argocd-apps/external-secrets.yaml", { - GITHUB_URL = local.repo_url - } - ) - - provisioner "local-exec" { - command = "kubectl wait --for=jsonpath=.status.health.status=Healthy --timeout=300s -n argocd application/external-secrets" - - interpreter = ["/bin/bash", "-c"] - } -} diff --git a/terraform/ingress-nginx.tf b/terraform/ingress-nginx.tf deleted file mode 100644 index d047a3b..0000000 --- a/terraform/ingress-nginx.tf +++ /dev/null @@ -1,12 +0,0 @@ -resource "kubectl_manifest" "application_argocd_ingress_nginx" { - yaml_body = templatefile("${path.module}/templates/argocd-apps/ingress-nginx.yaml", { - GITHUB_URL = local.repo_url - } - ) - - provisioner "local-exec" { - command = "kubectl wait --for=jsonpath=.status.health.status=Healthy --timeout=300s -n argocd application/ingress-nginx" - - interpreter = ["/bin/bash", "-c"] - } -} diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf deleted file mode 100644 index bfa053b..0000000 --- a/terraform/keycloak.tf +++ /dev/null @@ -1,245 +0,0 @@ - -#--------------------------------------------------------------- -# External Secrets for Keycloak if enabled -#--------------------------------------------------------------- - -module "external_secrets_role_keycloak" { - source = "git::https://github.com/livewyer-ops/terraform-azure-workload-identity.git" - - count = local.secret_count - - resource_group_name = data.azurerm_resource_group.current.name - location = data.azurerm_resource_group.current.location - - oidc_issuer_url = data.azurerm_kubernetes_cluster.target.oidc_issuer_url - create_kubernetes_namespace = false - create_service_account = false - namespace = "keycloak" - service_account_name = "external-secret-keycloak" - role_assignments = [ - { - role_definition_name = "Key Vault Secrets User" - scope = azurerm_key_vault.keycloak_config[0].id - }, - { - role_definition_name = "Key Vault Reader" - scope = azurerm_key_vault.keycloak_config[0].id - }, - ] - - depends_on = [kubernetes_manifest.namespace_keycloak[0]] -} - -# should use gitops really. -resource "kubernetes_manifest" "namespace_keycloak" { - count = local.secret_count - - manifest = { - "apiVersion" = "v1" - "kind" = "Namespace" - "metadata" = { - "name" = "keycloak" - } - } -} - -resource "kubernetes_manifest" "serviceaccount_external_secret_keycloak" { - count = local.secret_count - depends_on = [ - kubernetes_manifest.namespace_keycloak, - kubectl_manifest.application_argocd_external_secrets, - module.external_secrets_role_keycloak - ] - - manifest = { - "apiVersion" = "v1" - "kind" = "ServiceAccount" - "metadata" = { - "annotations" = { - "azure.workload.identity/client-id" = tostring(module.external_secrets_role_keycloak[0].client_id) - "azure.workload.identity/tenant-id" = tostring(module.external_secrets_role_keycloak[0].tenant_id) - } - "name" = "external-secret-keycloak" - "namespace" = "keycloak" - } - } -} - -resource "azurerm_key_vault" "keycloak_config" { - count = local.secret_count - - name = "cnoe-keycloak-config" - location = data.azurerm_resource_group.current.location - resource_group_name = data.azurerm_resource_group.current.name - tenant_id = data.azurerm_client_config.current.tenant_id - sku_name = "standard" - enable_rbac_authorization = true - access_policy { - tenant_id = data.azurerm_client_config.current.tenant_id - object_id = data.azurerm_client_config.current.object_id - secret_permissions = ["Backup", "Delete", "Get", "List", "Purge", "Recover", "Restore", "Set"] - } - access_policy { - tenant_id = module.external_secrets_role_keycloak[0].tenant_id - object_id = module.external_secrets_role_keycloak[0].client_id - secret_permissions = ["Get", "List"] - } -} - -resource "azurerm_key_vault_secret" "keycloak_config" { - count = local.secret_count - - name = "cnoe-keycloak-config" - key_vault_id = azurerm_key_vault.keycloak_config[0].id - value = jsonencode({ - KC_HOSTNAME = local.kc_domain_name - KEYCLOAK_ADMIN_PASSWORD = random_password.keycloak_admin_password.result - POSTGRES_PASSWORD = random_password.keycloak_postgres_password.result - POSTGRES_DB = "keycloak" - POSTGRES_USER = "keycloak" - "user1-password" = random_password.keycloak_user_password.result - }) - - depends_on = [azurerm_role_assignment.keycloak_config[0]] -} - -resource "azurerm_role_assignment" "keycloak_config" { - count = local.secret_count - - scope = azurerm_key_vault.keycloak_config[0].id - role_definition_name = "Key Vault Administrator" - principal_id = data.azurerm_client_config.current.object_id -} - -resource "kubectl_manifest" "keycloak_secret_store" { - count = local.secret_count - - depends_on = [ - kubectl_manifest.application_argocd_external_secrets, - kubernetes_manifest.serviceaccount_external_secret_keycloak, - module.external_secrets_role_keycloak, - azurerm_key_vault_secret.keycloak_config, - ] - - yaml_body = templatefile("${path.module}/templates/manifests/keycloak-secret-store.yaml", { - VAULT_URL = azurerm_key_vault.keycloak_config[0].vault_uri - SA_NAME = "external-secret-keycloak" - } - ) -} - -#--------------------------------------------------------------- -# Keycloak secrets if external secrets is not enabled -#--------------------------------------------------------------- - -resource "kubernetes_manifest" "secret_keycloak_keycloak_config" { - count = local.secret_count == 1 ? 0 : 1 - - manifest = { - "apiVersion" = "v1" - "kind" = "Secret" - "metadata" = { - "name" = "keycloak-config" - "namespace" = "keycloak" - } - "data" = { - "KC_HOSTNAME" = "${base64encode(local.kc_domain_name)}" - "KEYCLOAK_ADMIN_PASSWORD" = "${base64encode(random_password.keycloak_admin_password.result)}" - } - } -} - -resource "kubernetes_manifest" "secret_keycloak_postgresql_config" { - count = local.secret_count == 1 ? 0 : 1 - - manifest = { - "apiVersion" = "v1" - "kind" = "Secret" - "metadata" = { - "name" = "postgresql-config" - "namespace" = "keycloak" - } - "data" = { - "POSTGRES_DB" = "${base64encode("keycloak")}" - "POSTGRES_PASSWORD" = "${base64encode(random_password.keycloak_postgres_password.result)}" - "POSTGRES_USER" = "${base64encode("keycloak")}" - } - } -} - -resource "kubernetes_manifest" "secret_keycloak_keycloak_user_config" { - count = local.secret_count == 1 ? 0 : 1 - - manifest = { - "apiVersion" = "v1" - "kind" = "Secret" - "metadata" = { - "name" = "keycloak-user-config" - "namespace" = "keycloak" - } - "data" = { - "user1-password" = "${base64encode(random_password.keycloak_user_password.result)}" - } - } -} - -#--------------------------------------------------------------- -# Keycloak passwords -#--------------------------------------------------------------- - -resource "random_password" "keycloak_admin_password" { - length = 48 - special = false - override_special = "!#?" -} - -resource "random_password" "keycloak_user_password" { - length = 48 - special = false - override_special = "!#?" -} - -resource "random_password" "keycloak_postgres_password" { - length = 48 - special = false - override_special = "!#?" -} - -#--------------------------------------------------------------- -# Keycloak installation -#--------------------------------------------------------------- - -resource "kubectl_manifest" "application_argocd_keycloak" { - depends_on = [kubectl_manifest.keycloak_secret_store] - - yaml_body = templatefile("${path.module}/templates/argocd-apps/keycloak.yaml", { - GITHUB_URL = local.repo_url - PATH = "${local.secret_count == 1 ? "packages/keycloak/dev-external-secrets/" : "packages/keycloak/dev/"}" - } - ) - - provisioner "local-exec" { - command = "./install.sh '${random_password.keycloak_user_password.result}' '${random_password.keycloak_admin_password.result}'" - - working_dir = "${path.module}/scripts/keycloak" - interpreter = ["/bin/bash", "-c"] - } - provisioner "local-exec" { - when = destroy - command = "./uninstall.sh" - - working_dir = "${path.module}/scripts/keycloak" - interpreter = ["/bin/bash", "-c"] - } -} - -resource "kubectl_manifest" "ingress_keycloak" { - depends_on = [ - kubectl_manifest.application_argocd_keycloak, - ] - - yaml_body = templatefile("${path.module}/templates/manifests/ingress-keycloak.yaml", { - KEYCLOAK_DOMAIN_NAME = local.kc_domain_name - } - ) -} diff --git a/terraform/main.tf b/terraform/main.tf deleted file mode 100644 index dbb7ecb..0000000 --- a/terraform/main.tf +++ /dev/null @@ -1,35 +0,0 @@ -locals { - repo_url = trimsuffix(var.repo_url, "/") - subscription_id = var.subscription_id - resource_group = var.resource_group - region = var.region - tags = var.tags - cluster_name = var.cluster_name - dns_zone_id = provider::azurerm::parse_resource_id(var.dns_zone_id) - dns_count = var.enable_dns_management ? 1 : 0 - secret_count = var.enable_external_secret ? 1 : 0 - - domain_name = var.enable_dns_management ? "${provider::azurerm::parse_resource_id(trimsuffix(data.azurerm_dns_zone.selected[0].id, "."))["resource_name"]}" : "${var.domain_name}" - kc_domain_name = "keycloak.${local.domain_name}" - kc_cnoe_url = "https://${local.kc_domain_name}/realms/cnoe" - argo_domain_name = "argo.${local.domain_name}" - argo_redirect_url = "https://${local.argo_domain_name}/oauth2/callback" - argocd_domain_name = "argocd.${local.domain_name}" - backstage_domain_name = "backstage.${local.domain_name}" -} - - -provider "azurerm" { - subscription_id = local.subscription_id - features {} -} - -provider "kubernetes" { - config_path = "~/.kube/config" -} - -provider "helm" { - kubernetes { - config_path = "~/.kube/config" - } -} diff --git a/terraform/templates/argocd-apps/cert-manager.yaml b/terraform/templates/argocd-apps/cert-manager.yaml deleted file mode 100644 index e9bee15..0000000 --- a/terraform/templates/argocd-apps/cert-manager.yaml +++ /dev/null @@ -1,29 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: cert-manager - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - chart: cert-manager - repoURL: https://charts.jetstack.io - targetRevision: 1.16.3 - helm: - releaseName: cert-manager - valueFiles: - - $values/packages/cert-manager/dev/values.yaml - - repoURL: ${REPO_URL} - targetRevision: HEAD - ref: values - destination: - server: "https://kubernetes.default.svc" - namespace: cert-manager - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/external-dns.yaml b/terraform/templates/argocd-apps/external-dns.yaml deleted file mode 100644 index 7cf0f72..0000000 --- a/terraform/templates/argocd-apps/external-dns.yaml +++ /dev/null @@ -1,44 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: external-dns - namespace: argocd - labels: - env: dev -spec: - project: cnoe - sources: - - chart: external-dns - repoURL: https://kubernetes-sigs.github.io/external-dns/ - targetRevision: 1.15.0 - helm: - releaseName: external-dns - valueFiles: - - $values/packages/external-dns/dev/values.yaml - parameters: - - name: provider.name - value: azure - - name: domainFilters[0] - value: ${DOMAIN_NAME} - - name: serviceAccount.annotations.azure\.workload\.identity/client-id - value: ${AZURE_CLIENT_ID} - - name: extraVolumes[0].name - value: "azure-config-file" - - name: extraVolumes[0].secret.secretName - value: ${AZURE_CONFIG_SECRET} - - name: extraVolumeMounts[0].name - value: "azure-config-file" - - name: extraVolumeMounts[0].mountPath - value: "/etc/kubernetes" - - name: extraVolumeMounts[0].readOnly - value: "true" - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - ref: values - destination: - server: "https://kubernetes.default.svc" - namespace: external-dns - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/argocd-apps/ingress-nginx.yaml b/terraform/templates/argocd-apps/ingress-nginx.yaml deleted file mode 100644 index 1120952..0000000 --- a/terraform/templates/argocd-apps/ingress-nginx.yaml +++ /dev/null @@ -1,29 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: ingress-nginx - namespace: argocd - labels: - env: dev - finalizers: - - resources-finalizer.argocd.argoproj.io -spec: - project: cnoe - sources: - - chart: ingress-nginx - repoURL: https://kubernetes.github.io/ingress-nginx - targetRevision: 4.12.0 - helm: - releaseName: ingress-nginx - valueFiles: - - $values/packages/ingress-nginx/dev/values.yaml - - repoURL: ${GITHUB_URL} - targetRevision: HEAD - ref: values - destination: - server: "https://kubernetes.default.svc" - namespace: ingress-nginx - syncPolicy: - automated: {} - syncOptions: - - CreateNamespace=true diff --git a/terraform/templates/manifests/crossplane-azure-controller-config.yaml b/terraform/templates/manifests/crossplane-azure-controller-config.yaml deleted file mode 100644 index a744f37..0000000 --- a/terraform/templates/manifests/crossplane-azure-controller-config.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: pkg.crossplane.io/v1alpha1 -kind: ControllerConfig -metadata: - name: provider-azure-config - annotations: - azure.workload.identity/client-id: ${AZURE_CLIENT_ID} - azure.workload.identity/tenant-id: ${AZURE_TENANT_ID} -spec: - podSecurityContext: - fsGroup: 2000 - args: - - --debug - - --enable-management-policies diff --git a/terraform/templates/manifests/ingress-keycloak.yaml b/terraform/templates/manifests/ingress-keycloak.yaml deleted file mode 100644 index 9093ac4..0000000 --- a/terraform/templates/manifests/ingress-keycloak.yaml +++ /dev/null @@ -1,26 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: keycloak - namespace: keycloak - annotations: - cert-manager.io/cluster-issuer: 'letsencrypt-prod' - nginx.ingress.kubernetes.io/proxy-buffers-number: "4" - nginx.ingress.kubernetes.io/proxy-buffer-size: "16k" -spec: - ingressClassName: nginx - tls: - - hosts: - - ${KEYCLOAK_DOMAIN_NAME} - secretName: keycloak-prod-tls - rules: - - host: ${KEYCLOAK_DOMAIN_NAME} - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: keycloak - port: - number: 8080 diff --git a/terraform/templates/manifests/keycloak-secret-store.yaml b/terraform/templates/manifests/keycloak-secret-store.yaml deleted file mode 100644 index bbc6d6a..0000000 --- a/terraform/templates/manifests/keycloak-secret-store.yaml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: external-secrets.io/v1beta1 -kind: SecretStore -metadata: - name: keycloak - namespace: keycloak -spec: - provider: - azurekv: - authType: WorkloadIdentity - serviceAccountRef: - name: ${SA_NAME} - vaultUrl: ${VAULT_URL} diff --git a/terraform/variables.tf b/terraform/variables.tf deleted file mode 100644 index c352ae2..0000000 --- a/terraform/variables.tf +++ /dev/null @@ -1,74 +0,0 @@ -variable "repo_url" { - description = "Repository URL where application definitions are stored" - default = "https://github.com/manabuOrg/ref-impl" - type = string -} - -variable "tags" { - description = "Tags to apply to AKS resources" - default = { - env = "dev" - project = "cnoe" - } - type = map(string) -} - -variable "region" { - description = "Azure Region" - type = string - default = "" -} - -variable "subscription_id" { - description = "Azure Subscription ID" - type = string - default = "" -} - -variable "resource_group" { - description = "Azure Resource Group name" - type = string - default = "" -} - -variable "cluster_name" { - description = "AKS Cluster name" - default = "cnoe-ref-impl" - type = string -} - -variable "dns_zone_id" { - description = "If using external DNS, specify the Azure DNS zone ID. Required if enable_dns_management is set to true." - default = "" - type = string -} - -variable "domain_name" { - description = "if external DNS is not used, this value must be provided." - default = "svc.cluster.local" - type = string -} - -variable "organization_url" { - description = "github organization url" - default = "https://github.com/cnoe-io" - type = string -} - -variable "enable_dns_management" { - description = "Do you want to use external dns to manage dns records in Azure DNS?" - default = true - type = bool -} - -variable "enable_external_secret" { - description = "Do you want to use external secret to manage dns records in Azure DNS?" - default = true - type = bool -} - -variable "service_account_token_expiration_seconds" { - type = number - description = "(optional) Represents the expirationSeconds field for the projected service account token" - default = 86400 -} diff --git a/terraform/versions.tf b/terraform/versions.tf deleted file mode 100644 index 81d83b3..0000000 --- a/terraform/versions.tf +++ /dev/null @@ -1,22 +0,0 @@ -terraform { - required_version = ">= 1.8" - - required_providers { - azurerm = { - source = "hashicorp/azurerm" - version = ">= 4.17.0" - } - kubernetes = { - source = "hashicorp/kubernetes" - version = ">= 2.35.1" - } - random = { - source = "hashicorp/random" - version = ">= 3.6.3" - } - kubectl = { - source = "alekc/kubectl" - version = ">= 2.1.3" - } - } -} From 1361abece5456fdc594beb5941a3b53e635905f6 Mon Sep 17 00:00:00 2001 From: Bowen Sun Date: Wed, 24 Sep 2025 20:26:44 +0100 Subject: [PATCH 3/8] refactor: update configs for azure Signed-off-by: Bowen Sun --- Taskfile.yml | 297 ++++++++++++++++-- config.yaml.template | 8 + helmfile.yaml | 13 +- packages/addons/values.yaml | 97 +++--- packages/argo-cd/values.yaml | 18 +- packages/argo-cd/values.yaml.gotmpl | 6 +- .../manifests/external-secrets.yaml | 18 +- packages/argo-workflows/values.yaml | 5 +- .../backstage/manifests/external-secrets.yaml | 74 ++++- packages/backstage/values.yaml | 30 +- packages/bootstrap/_helpers.tpl | 7 - packages/bootstrap/argocd.yaml.gotmpl | 1 - packages/bootstrap/crossplane-ns.yaml | 7 - packages/cert-manager/values.yaml | 31 +- packages/charts/raw/.helmignore | 23 -- packages/charts/raw/Chart.yaml | 24 -- packages/charts/raw/templates/resources.yaml | 8 - packages/charts/raw/values.yaml | 47 --- .../crossplane/kustomize/kustomization.yaml | 38 +++ packages/crossplane/kustomize/providers.yaml | 28 ++ .../clusterproviderconfig/azure.yaml | 11 - .../clusterproviderconfig/kubernetes.yaml | 8 - .../azure-workload-identity.yaml | 6 - .../manifests/functions/auto-ready.yaml | 6 - .../manifests/functions/go-templating.yaml | 6 - .../providers/azure-authorization.yaml | 6 - .../providers/azure-managedidentity.yaml | 6 - .../crossplane/manifests/providers/azure.yaml | 6 - .../manifests/providers/kubernetes.yaml | 6 - .../crossplane/manifests/runtime-config.yaml | 31 ++ .../manifests/xrs/external-dns.yaml | 16 - .../manifests/xrs/external-secrets.yaml | 14 - .../crossplane/manifests/xrs/keycloak.yaml | 16 - packages/crossplane/values.yaml | 18 +- packages/external-dns/values.yaml | 17 +- .../manifests/cluster-secret-store.yaml | 11 - packages/external-secrets/values.yaml | 37 +++ packages/ingress-nginx/values.yaml | 13 +- .../keycloak/manifests/external-secrets.yaml | 20 +- .../keycloak-cluster-secret-store.yaml | 21 -- .../manifests/user-sso-config-job.yaml | 68 ++-- packages/keycloak/values.yaml | 3 +- private/azure-credentials.yaml.template | 20 -- 43 files changed, 648 insertions(+), 498 deletions(-) delete mode 100644 packages/bootstrap/_helpers.tpl delete mode 100644 packages/bootstrap/argocd.yaml.gotmpl delete mode 100644 packages/bootstrap/crossplane-ns.yaml delete mode 100644 packages/charts/raw/.helmignore delete mode 100644 packages/charts/raw/Chart.yaml delete mode 100644 packages/charts/raw/templates/resources.yaml delete mode 100644 packages/charts/raw/values.yaml create mode 100644 packages/crossplane/kustomize/kustomization.yaml create mode 100644 packages/crossplane/kustomize/providers.yaml delete mode 100644 packages/crossplane/manifests/clusterproviderconfig/azure.yaml delete mode 100644 packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml delete mode 100644 packages/crossplane/manifests/configurations/azure-workload-identity.yaml delete mode 100644 packages/crossplane/manifests/functions/auto-ready.yaml delete mode 100644 packages/crossplane/manifests/functions/go-templating.yaml delete mode 100644 packages/crossplane/manifests/providers/azure-authorization.yaml delete mode 100644 packages/crossplane/manifests/providers/azure-managedidentity.yaml delete mode 100644 packages/crossplane/manifests/providers/azure.yaml delete mode 100644 packages/crossplane/manifests/providers/kubernetes.yaml create mode 100644 packages/crossplane/manifests/runtime-config.yaml delete mode 100644 packages/crossplane/manifests/xrs/external-dns.yaml delete mode 100644 packages/crossplane/manifests/xrs/external-secrets.yaml delete mode 100644 packages/crossplane/manifests/xrs/keycloak.yaml delete mode 100644 packages/external-secrets/manifests/cluster-secret-store.yaml delete mode 100644 private/azure-credentials.yaml.template diff --git a/Taskfile.yml b/Taskfile.yml index 40b418f..cb35a34 100644 --- a/Taskfile.yml +++ b/Taskfile.yml @@ -5,10 +5,10 @@ version: "3" set: [errexit, nounset, pipefail] env: - KUBECONFIG: - sh: mktemp + KUBECONFIG: "{{.ROOT_DIR}}/private/kubeconfig" REPO_ROOT: "{{.ROOT_DIR}}" - SECRET_NAME_PREFIX: cnoe-ref-impl + KEYVAULT_NAME: + sh: yq '.keyvault // "cnoe-ref-impl"' config.yaml tasks: init: @@ -25,45 +25,95 @@ tasks: - update:kubeconfig cmds: - defer: { task: cleanup } + - task: azure:creds - task: helmfile - task: update + diff: + deps: + - update:kubeconfig + cmds: + - defer: { task: cleanup } + - task: helmfile:diff + sync: deps: - update:kubeconfig cmds: - defer: { task: cleanup } - task: helmfile:sync - - task: update:secret - - task: update:crossplane + - task: update update: deps: - - update:kubeconfig + - task: update:kubeconfig + silent: true cmds: - defer: { task: cleanup } - - task: update:secret - task: update:crossplane + - task: update:secret update:secret: deps: - - update:kubeconfig - preconditions: - - test -f private/azure-credentials.yaml + - task: update:kubeconfig + silent: true + vars: + RESOURCE_GROUP: + sh: yq '.resource_group' config.yaml cmds: - defer: { task: cleanup } - - kubectl apply -f packages/bootstrap/crossplane-ns.yaml - - kubectl apply -f private/azure-credentials.yaml - task: update:secret:azure + - task: wait + vars: + IF: $(kubectl get ns | grep external-dns | wc -l) -eq 0 + - task: wait + vars: + IF: $(az identity show --resource-group "{{.RESOURCE_GROUP}}" --name external-dns --only-show-errors 2>/dev/null | wc -l) -eq 0 + - task: update:secret:external-dns + + # NOTE: THIS IS NOT IDEAL + # TODO: move this task to manifest or use other method to manage + update:secret:external-dns: + deps: + - task: update:kubeconfig + silent: true + - task: azure:init + silent: true + preconditions: + - yq 'true' config.yaml + vars: + SUBSCRIPTION_ID: + sh: yq '.subscription' config.yaml + RESOURCE_GROUP: + sh: yq '.resource_group' config.yaml + TENANT_ID: + sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name external-dns --query "tenantId" --output tsv --only-show-errors + CLIENT_ID: + sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name external-dns --query "clientId" --output tsv --only-show-errors + SECRET_TEMP: + sh: mktemp + sources: + - config.yaml + generates: + - "{{.SECRET_TEMP}}" + cmds: + - defer: rm -f {{.SECRET_TEMP}} + - cmd: yq --null-input -o=json '.aadClientId = "{{.CLIENT_ID}}" | .tenantId = "{{.TENANT_ID}}" | .subscriptionId = "{{.SUBSCRIPTION_ID}}" | .resourceGroup = "{{.RESOURCE_GROUP}}" | .useWorkloadIdentityExtension = true' > {{.SECRET_TEMP}} + - kubectl create secret generic external-dns-azure --namespace external-dns --from-file='azure.json'={{.SECRET_TEMP}} update:secret:azure: + deps: + - task: azure:init + silent: true preconditions: - - test -f config.yaml + - yq 'true' config.yaml vars: TAGS: - sh: yq eval '.tags | to_entries | map("Key=" + .key + ",Value=" + .value) | join(" ")' config.yaml + sh: yq eval '.tags | to_entries | map(.key + "=" + .value) | join(" ")' config.yaml SECRET_TEMP: sh: mktemp + KUBELET_IDENTITY_OBJECT_ID: + sh: az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --query 'identityProfile.kubeletidentity.objectId' -o tsv --only-show-errors sources: - config.yaml generates: @@ -71,65 +121,252 @@ tasks: cmds: - task: if vars: - CONDITION: $(az keyvault list -o yaml | SECRET_NAME_PREFIX=${SECRET_NAME_PREFIX} yq '.[] | [select(.name==env(SECRET_NAME_PREFIX))] | length') -eq 0 - RUN: az keyvault create --resource-group $(yq '.resource_group' config.yaml) --tags {{.TAGS}} ${SECRET_NAME_PREFIX} + IF: $(az keyvault list -o yaml --only-show-errors | KEYVAULT_NAME=${KEYVAULT_NAME} yq '.[] | [select(.name==env(KEYVAULT_NAME))] | length') -eq 0 + RUN: az keyvault create --resource-group $(yq '.resource_group' config.yaml) --enable-rbac-authorization --tags {{.TAGS}} ${KEYVAULT_NAME} --only-show-errors - defer: rm -f {{.SECRET_TEMP}} - yq -o=json config.yaml > {{.SECRET_TEMP}} - | az keyvault secret set \ --name config \ - --vault-name ${SECRET_NAME_PREFIX} \ + --vault-name ${KEYVAULT_NAME} \ --file {{.SECRET_TEMP}} \ --description "Secret for config of CNOE Azure Reference Implementation" \ - --tags {{.TAGS}} - --output yaml | yq 'del(.value)' + --tags {{.TAGS}} \ + --only-show-errors --output yaml | yq 'del(.value)' update:crossplane: deps: - - update:kubeconfig + - task: update:kubeconfig + silent: true cmds: - defer: { task: cleanup } - task: wait vars: - CONDITION: $(kubectl get provider.pkg.crossplane.io -o yaml | yq '[.items[] | select(.metadata.name=="*provider-kubernetes")] | length') -eq 0 + IF: $(kubectl get provider.pkg.crossplane.io -o yaml 2>/dev/null | yq '[.items[] | select(.metadata.name=="*provider-kubernetes")] | length') -eq 0 - task: wait vars: - CONDITION: $(kubectl -n crossplane-system get sa -o name | grep provider-kubernetes | wc -l) -eq 0 + IF: $(kubectl -n crossplane-system get sa -o name | grep provider-kubernetes | wc -l) -eq 0 - task: if vars: - CONDITION: $(kubectl get clusterrolebindings -o yaml | yq '[.items[] | select(.metadata.name=="provider-kubernetes-admin-binding")] | length') -eq 0 + IF: $(kubectl get clusterrolebindings -o yaml | yq '[.items[] | select(.metadata.name=="provider-kubernetes-admin-binding")] | length') -eq 0 RUN: kubectl create clusterrolebinding provider-kubernetes-admin-binding --clusterrole cluster-admin --serviceaccount="$(kubectl -n crossplane-system get sa -o yaml | yq '.items[] | select(.metadata.name=="*provider-kubernetes*") | [.metadata.namespace, .metadata.name] | join(":")')" update:kubeconfig: + deps: + - task: azure:init + silent: true + preconditions: + - yq 'true' config.yaml + cmds: + - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --overwrite-existing --only-show-errors + + update:config: + internal: true + cmd: |- + {{.RUN}} + + azure:init: + preconditions: + - yq 'true' config.yaml + vars: + SUBSCRIPTION_ID: + sh: yq '.subscription' config.yaml + cmds: + - az account set --subscription "{{.SUBSCRIPTION_ID}}" + + azure:creds: + deps: + - task: azure:init + silent: true preconditions: - - test -f config.yaml + - yq 'true' config.yaml cmds: - - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --file "{{.KUBECONFIG}}" + - task: azure:creds:create + - task: azure:creds:get + + azure:creds:get: + deps: + - task: azure:init + silent: true + preconditions: + - yq 'true' config.yaml + vars: + IDENTITY_NAME: crossplane + SUBSCRIPTION_ID: + sh: yq '.subscription' config.yaml + RESOURCE_GROUP: + sh: yq '.resource_group' config.yaml + CLIENT_ID: + sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name {{.IDENTITY_NAME}} --query "clientId" --output tsv --only-show-errors + TENANT_ID: + sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name {{.IDENTITY_NAME}} --query "tenantId" --output tsv --only-show-errors + cmds: + - task: update:config + vars: + RUN: yq -i e '.crossplane_workload_identity |= { .clientId |= "{{.CLIENT_ID}}" | .tenantId |= "{{.TENANT_ID}}"}' config.yaml + + azure:creds:create: + deps: + - task: azure:init + silent: true + preconditions: + - yq 'true' config.yaml + vars: + IDENTITY_NAME: crossplane + IDENTITY_NAMESPACE: crossplane-system + SUBSCRIPTION_ID: + sh: yq '.subscription' config.yaml + RESOURCE_GROUP: + sh: yq '.resource_group' config.yaml + OIDC_ISSUER: + sh: yq '.cluster_oidc_issuer_url' config.yaml + sources: + - config.yaml + cmds: + - task: if + vars: + IF: $(az identity list --resource-group "{{.RESOURCE_GROUP}}" --only-show-errors -o yaml | yq '[.[] | select(.name=="{{.IDENTITY_NAME}}")] | length') -eq 0 + RUN: az identity create --name "{{.IDENTITY_NAME}}" --resource-group "{{.RESOURCE_GROUP}}" --only-show-errors --output none + - | + az identity federated-credential update \ + --name "{{.IDENTITY_NAME}}_fc" \ + --identity-name "{{.IDENTITY_NAME}}" \ + --resource-group "{{.RESOURCE_GROUP}}" \ + --issuer "{{.OIDC_ISSUER}}" \ + --subject "system:serviceaccount:{{.IDENTITY_NAMESPACE}}:{{.IDENTITY_NAME}}" \ + --audience "api://AzureADTokenExchange" \ + --only-show-errors --output none 2>/dev/null || \ + az identity federated-credential create \ + --name "{{.IDENTITY_NAME}}_fc" \ + --identity-name "{{.IDENTITY_NAME}}" \ + --resource-group "{{.RESOURCE_GROUP}}" \ + --issuer "{{.OIDC_ISSUER}}" \ + --subject "system:serviceaccount:{{.IDENTITY_NAMESPACE}}:{{.IDENTITY_NAME}}" \ + --audience "api://AzureADTokenExchange" \ + --only-show-errors --output none + - task: wait + vars: + TIMEOUT: 10 + IF: true + - |- + az role assignment create \ + --assignee-object-id "$(az identity show --resource-group {{.RESOURCE_GROUP}} --name {{.IDENTITY_NAME}} --query 'principalId' -o tsv --only-show-errors)" \ + --role "Owner" \ + --scope "/subscriptions/{{.SUBSCRIPTION_ID}}/resourceGroups/{{.RESOURCE_GROUP}}" \ + --only-show-errors \ + --output none + + azure:creds:delete: + deps: + - task: azure:init + silent: true + preconditions: + - yq 'true' config.yaml + vars: + IDENTITY_NAME: crossplane + SUBSCRIPTION_ID: + sh: yq '.subscription' config.yaml + RESOURCE_GROUP: + sh: yq '.resource_group' config.yaml + PRINCIPAL_ID: + sh: az identity show --resource-group {{.RESOURCE_GROUP}} --name {{.IDENTITY_NAME}} --query 'principalId' -o tsv --only-show-errors + ROLE_ASSIGNMENT_ID: + sh: az role assignment list --resource-group {{.RESOURCE_GROUP}} --query "[?principalId=='{{.PRINCIPAL_ID}}'].id" -o tsv --only-show-errors + cmds: + - az role assignment delete --ids {{.ROLE_ASSIGNMENT_ID}} + - az identity delete --name "{{.IDENTITY_NAME}}" --resource-group "{{.RESOURCE_GROUP}}" --subscription "{{.SUBSCRIPTION_ID}}" --only-show-errors --output none cleanup: internal: true cmds: - - rm -f "{{.KUBECONFIG}}" + - cmd: rm -f "{{.KUBECONFIG}}" + ignore_error: true wait: internal: true env: - TIMEOUT: "{{default 300 .TIMEOUT}}" + WAIT_TIMEOUT: "{{default 300 .TIMEOUT}}" cmds: - - while [[ {{.CONDITION}} ]] && [[ ${TIMEOUT} -gt 0 ]]; do sleep 5 && ((TIMEOUT-=5)); done + - while [[ {{.IF}} ]] && [[ ${WAIT_TIMEOUT} -gt 0 ]]; do sleep 5 && ((WAIT_TIMEOUT-=5)); done || exit 1 if: internal: true cmds: - - if [[ {{.CONDITION}} ]]; then {{.RUN}}; fi + - if [[ {{.IF}} ]]; then {{.RUN}}; fi || exit 1 + + ifelse: + internal: true + cmds: + - if [[ {{.IF}} ]]; then {{.IF_RUN}}; else {{.ELSE_RUN}}; fi || exit 1 uninstall: deps: - update:kubeconfig cmds: - defer: { task: cleanup } - - task: update:kubeconfig + - kubectl delete ingress -A --all --interactive=false --now + - kubectl delete workloadidentities.azure.livewyer.io -A --all --interactive=false --now + - task: wait + vars: + IF: true + TIMEOUT: 30 + - kubectl delete pkg --all --interactive=false --now + - task: azure:creds:delete + - kubectl delete appset -A --all --interactive=false --now + - kubectl delete app -A --all --interactive=false --now --cascade=orphan + - task: wait + vars: + IF: true + TIMEOUT: 30 - task: helmfile:destroy + - cmd: kubectl delete ns {{.ITEM}} --interactive=false --now --cascade=orphan + for: { var: NS } + vars: + NS: + sh: yq 'to_entries[] | select(.value.enabled==true).value.namespace' packages/addons/values.yaml + ignore_error: true + + test:aks:create: + deps: + - task: azure:init + silent: true + env: + KUBECONFIG: + sh: echo ${HOME}/.kube/config + preconditions: + - yq 'true' config.yaml + cmds: + - | + az aks create \ + --name $(yq '.cluster_name' config.yaml) \ + --location $(yq '.location' config.yaml) \ + --resource-group $(yq '.resource_group' config.yaml) \ + --kubernetes-version ${AKS_VERSION:-1.33} \ + --sku base \ + --enable-oidc-issuer \ + --enable-workload-identity \ + --node-vm-size ${AKS_NODE_SIZE:-standard_d4alds_v6} \ + --output none {{.CLI_ARGS}} + - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --overwrite-existing --only-show-errors + - task: test:config:update + vars: + OIDC_ISSUER: + sh: az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --query "oidcIssuerProfile.issuerUrl" -o tsv --only-show-errors + + test:config:update: + preconditions: + - yq 'true' config.yaml + cmds: + - yq -i e '.cluster_oidc_issuer_url |= "{{.OIDC_ISSUER}}"' config.yaml + + test:aks:destroy: + deps: + - task: azure:init + silent: true + preconditions: + - yq 'true' config.yaml + cmds: + - az aks delete --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --yes {{.CLI_ARGS}} helmfile: cmds: diff --git a/config.yaml.template b/config.yaml.template index fe11c00..b977383 100644 --- a/config.yaml.template +++ b/config.yaml.template @@ -20,6 +20,9 @@ cluster_oidc_issuer_url: https://eastus.oic.prod-aks.azure.com/00000000-0000-000 # Base Domain name used for exposing services. It should be a subdomain or main domain of the DNS zone. domain: +# Azure Key Vault to use to store config secrets and certs +keyvault: cnoe-ref-impl + # Set this to "true" if you want to enable path routing othewise "false" for domain based routing. # When enabled, the exposed addons will be accessible at https:/// # When disabled, the exposed addons will be accessible at https://. @@ -39,6 +42,11 @@ github: ... -----END RSA PRIVATE KEY----- +crossplane_workload_identity: + clientId: + tenantId: + +letsencrypt_env: prod # Tags for AWS resources tags: diff --git a/helmfile.yaml b/helmfile.yaml index 827436c..ebc0c4d 100644 --- a/helmfile.yaml +++ b/helmfile.yaml @@ -15,19 +15,14 @@ releases: values: - packages/argo-cd/values.yaml - packages/argo-cd/values.yaml.gotmpl - - name: cnoe-argocd-config - namespace: argocd - chart: packages/charts/raw - values: - - packages/bootstrap/argocd.yaml.gotmpl - disableValidationOnInstall: true - needs: - - argocd/argocd + suppressDiff: true - name: cnoe-appset namespace: argocd chart: packages/charts/appset values: + - packages/bootstrap/values.yaml - packages/addons/values.yaml disableValidationOnInstall: true + suppressDiff: true needs: - - argocd/cnoe-argocd-config + - argocd/argocd diff --git a/packages/addons/values.yaml b/packages/addons/values.yaml index 89f6eb8..57fc330 100644 --- a/packages/addons/values.yaml +++ b/packages/addons/values.yaml @@ -11,7 +11,7 @@ argocd: server: ingress: annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-{{ .metadata.annotations.letsencryptEnv }}{{ end }}' path: '/{{ if eq .metadata.annotations.pathRouting "true" }}argocd{{ end }}' configs: cm: @@ -44,62 +44,33 @@ crossplane: releaseName: crossplane defaultVersion: "2.0.2-up.4" chartRepository: "https://charts.upbound.io/stable" - selector: - matchExpressions: - - key: environment - operator: In - values: ["control-plane"] - -crossplane-config: - enabled: true - chartName: raw - namespace: crossplane-system - releaseName: crossplane-xrs - defaultVersion: "0.1.0" - chartRepository: "{{ .metadata.annotations.addonsRepoURL }}" - path: packages/charts/raw valuesObject: - templates: + serviceAccount: + customAnnotations: + azure.workload.identity/client-id: "{{ .metadata.annotations.crossplaneClientId }}" + azure.workload.identity/tenant-id: "{{ .metadata.annotations.crossplaneTenantId }}" + extraObjects: - apiVersion: azure.m.upbound.io/v1beta1 kind: ClusterProviderConfig metadata: name: default + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true spec: credentials: - source: Secret - secretRef: - name: provider-azure - namespace: crossplane-system - key: credentials - - apiVersion: kubernetes.m.crossplane.io/v1alpha1 - kind: ClusterProviderConfig - metadata: - name: default - namespace: crossplane-system - spec: - credentials: - source: InjectedIdentity - selector: - matchExpressions: - - key: environment - operator: In - values: ["control-plane"] - -crossplane-xrs: - enabled: true - chartName: raw - namespace: crossplane-system - releaseName: crossplane-xrs - defaultVersion: "0.1.0" - chartRepository: "{{ .metadata.annotations.addonsRepoURL }}" - path: packages/charts/raw - valuesObject: - templates: + source: OIDCTokenFile + # source: UserAssignedManagedIdentity + oidcTokenFilePath: /var/run/secrets/azure/tokens/azure-identity-token + subscriptionID: "{{ .metadata.annotations.subscription }}" + clientID: "{{ .metadata.annotations.crossplaneClientId }}" + tenantID: "{{ .metadata.annotations.crossplaneTenantId }}" - apiVersion: azure.livewyer.io/v1alpha1 kind: WorkloadIdentity metadata: name: external-dns namespace: external-dns + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true spec: forProvider: location: "{{ .metadata.annotations.location }}" @@ -107,40 +78,45 @@ crossplane-xrs: resourceGroupName: "{{ .metadata.annotations.resourceGroup }}" roleAssignments: - roleDefinitionName: DNS Zone Contributor - scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" - - roleDefinitionName: Reader - scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourceGroups/{{ .metadata.annotations.resourceGroup }}/providers/Microsoft.Network/dnszones/{{ .metadata.annotations.domain }}" serviceAccountName: external-dns - apiVersion: azure.livewyer.io/v1alpha1 kind: WorkloadIdentity metadata: name: external-secrets namespace: external-secrets + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true spec: forProvider: location: "{{ .metadata.annotations.location }}" oidcIssuerURL: "{{ .metadata.annotations.clusterOIDCIssuerURL }}" resourceGroupName: "{{ .metadata.annotations.resourceGroup }}" roleAssignments: - - roleDefinitionName: Key Vault Secrets User - scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" - serviceAccountName: external-secrets + - roleDefinitionName: Key Vault Administrator + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourceGroups/{{ .metadata.annotations.resourceGroup }}/providers/Microsoft.KeyVault/vaults/{{ .metadata.annotations.keyvault }}" + serviceAccountName: workload-identity-sa - apiVersion: azure.livewyer.io/v1alpha1 kind: WorkloadIdentity metadata: - name: keycloak-eso-store + name: keycloak namespace: keycloak + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true spec: forProvider: location: "{{ .metadata.annotations.location }}" oidcIssuerURL: "{{ .metadata.annotations.clusterOIDCIssuerURL }}" resourceGroupName: "{{ .metadata.annotations.resourceGroup }}" roleAssignments: - - roleDefinitionName: Key Vault Secrets User - scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" - - roleDefinitionName: Key Vault Reader - scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourcegroups/{{ .metadata.annotations.resourceGroup }}" + - roleDefinitionName: Key Vault Administrator + scope: "/subscriptions/{{ .metadata.annotations.subscription }}/resourceGroups/{{ .metadata.annotations.resourceGroup }}/providers/Microsoft.KeyVault/vaults/{{ .metadata.annotations.keyvault }}" serviceAccountName: eso-store + additionalResources: + - manifestPath: "manifests" + type: "manifests" + - manifestPath: "kustomize" + type: "manifests" selector: matchExpressions: - key: environment @@ -185,9 +161,6 @@ external-secrets: chartName: external-secrets defaultVersion: "0.17.0" chartRepository: "https://charts.external-secrets.io" - additionalResources: - - manifestPath: "manifests" - type: "manifests" selector: matchExpressions: - key: environment @@ -223,7 +196,7 @@ keycloak: ingress: hostname: '{{ if eq .metadata.annotations.pathRouting "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-{{ .metadata.annotations.letsencryptEnv }}{{ end }}' extraTls: - hosts: - '{{ if eq .metadata.annotations.pathRouting "false" }}keycloak.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' @@ -248,7 +221,7 @@ backstage: ingress: host: '{{ if eq .metadata.annotations.pathRouting "false" }}backstage.{{ .metadata.annotations.domain }}{{ else }}{{ .metadata.annotations.domain }}{{ end }}' annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-{{ .metadata.annotations.letsencryptEnv }}{{ end }}' backstage: appConfig: catalog: @@ -288,7 +261,7 @@ argo-workflows: redirectUrl: '{{ if eq .metadata.annotations.pathRouting "true" }}https://{{ .metadata.annotations.domain }}/argo-workflows{{ else }}https://argo-workflows.{{ .metadata.annotations.domain }}{{ end }}/oauth2/callback' ingress: annotations: - cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-prod{{ end }}' + cert-manager.io/cluster-issuer: '{{ if eq .metadata.annotations.pathRouting "false" }}letsencrypt-{{ .metadata.annotations.letsencryptEnv }}{{ end }}' nginx.ingress.kubernetes.io/rewrite-target: '{{ if eq .metadata.annotations.pathRouting "true" }}/$2{{ end }}' hosts: - '{{ if eq .metadata.annotations.pathRouting "true" }}{{ .metadata.annotations.domain }}{{ else }}argo-workflows.{{ .metadata.annotations.domain }}{{ end }}' diff --git a/packages/argo-cd/values.yaml b/packages/argo-cd/values.yaml index e415b50..37721fd 100644 --- a/packages/argo-cd/values.yaml +++ b/packages/argo-cd/values.yaml @@ -8,6 +8,7 @@ server: tls: true annotations: argocd.argoproj.io/sync-wave: "20" + external-dns.alpha.kubernetes.io/ttl: "60" redis: livenessProbe: enabled: true @@ -177,20 +178,3 @@ configs: policy.csv: | g, superuser, role:admin g, backstage, role:readonly - -# extraObjects: -# - | -# # Creates a gp3 storageClass for EBS CSI. -# # Sets different provisioner value for EKS Auto Mode based on auto_mode parameter in config file. -# apiVersion: storage.k8s.io/v1 -# kind: StorageClass -# metadata: -# name: gp3 -# annotations: -# storageclass.kubernetes.io/is-default-class: "true" -# argocd.argoproj.io/sync-wave: "-10" -# provisioner: {{ if eq .Values.cnoe_ref_impl.auto_mode "true"}}ebs.csi.eks.amazonaws.com{{ else }}ebs.csi.aws.com{{ end }} -# volumeBindingMode: WaitForFirstConsumer -# parameters: -# type: gp3 -# encrypted: "true" diff --git a/packages/argo-cd/values.yaml.gotmpl b/packages/argo-cd/values.yaml.gotmpl index 794bfe4..c42f27b 100644 --- a/packages/argo-cd/values.yaml.gotmpl +++ b/packages/argo-cd/values.yaml.gotmpl @@ -7,7 +7,7 @@ server: ingress: annotations: {{ if not $config.path_routing -}} - cert-manager.io/cluster-issuer: letsencrypt-prod + cert-manager.io/cluster-issuer: letsencrypt-{{ $config.letsencrypt_env }} {{ end -}} path: {{ ternary "/argocd" "/" $config.path_routing }} @@ -46,8 +46,12 @@ extraObjects: clusterName: {{ $config.cluster_name }} clusterOIDCIssuerURL: {{ $config.cluster_oidc_issuer_url }} domain: {{ $config.domain }} + keyvault: {{$config.keyvault}} pathRouting: "{{ $config.path_routing }}" environment: "control-plane" + crossplaneClientId: "{{ $config.crossplane_workload_identity.clientId }}" + crossplaneTenantId: "{{ $config.crossplane_workload_identity.tenantId }}" + letsencryptEnv: "{{ $config.letsencrypt_env }}" stringData: name: {{ $config.cluster_name }} server: https://kubernetes.default.svc diff --git a/packages/argo-workflows/manifests/external-secrets.yaml b/packages/argo-workflows/manifests/external-secrets.yaml index 9e9cc96..36b3e7b 100644 --- a/packages/argo-workflows/manifests/external-secrets.yaml +++ b/packages/argo-workflows/manifests/external-secrets.yaml @@ -3,8 +3,6 @@ kind: ExternalSecret metadata: name: keycloak-oidc namespace: argo - annotations: - argocd.argoproj.io/sync-wave: "-10" spec: secretStoreRef: name: keycloak @@ -14,12 +12,12 @@ spec: template: data: ARGO_WORKFLOWS_CLIENT_ID: "argo-workflows" - ARGO_WORKFLOWS_CLIENT_SECRET: '{{ .clientSecret }}' + ARGO_WORKFLOWS_CLIENT_SECRET: "{{ .clientSecret }}" data: - - secretKey: clientSecret - remoteRef: - conversionStrategy: Default - decodingStrategy: None - metadataPolicy: None - key: keycloak-clients - property: ARGO_WORKFLOWS_CLIENT_SECRET + - secretKey: clientSecret + remoteRef: + conversionStrategy: Default + decodingStrategy: None + metadataPolicy: None + key: keycloak-clients + property: ARGO_WORKFLOWS_CLIENT_SECRET diff --git a/packages/argo-workflows/values.yaml b/packages/argo-workflows/values.yaml index 7ca2edc..3e882a7 100644 --- a/packages/argo-workflows/values.yaml +++ b/packages/argo-workflows/values.yaml @@ -6,10 +6,13 @@ workflow: server: ingress: enabled: true - ingressClassName: 'nginx' + ingressClassName: "nginx" pathType: ImplementationSpecific + annotations: + external-dns.alpha.kubernetes.io/ttl: "60" sso: enabled: true + insecureSkipVerify: true clientId: # Required for sso configuration name: keycloak-oidc key: ARGO_WORKFLOWS_CLIENT_ID diff --git a/packages/backstage/manifests/external-secrets.yaml b/packages/backstage/manifests/external-secrets.yaml index 4866ec5..5ae3c39 100644 --- a/packages/backstage/manifests/external-secrets.yaml +++ b/packages/backstage/manifests/external-secrets.yaml @@ -18,14 +18,27 @@ spec: data: ARGOCD_ADMIN_PASSWORD: "{{ .ARGOCD_ADMIN_PASSWORD }}" ARGOCD_AUTH_TOKEN: "argocd.token={{.ARGOCD_SESSION_TOKEN}}" - POSTGRES_PASSWORD: "{{ .password }}" + POSTGRES_PASSWORD: "{{ .postgresPassword }}" BACKSTAGE_CLIENT_SECRET: "{{ .BACKSTAGE_CLIENT_SECRET }}" + BACKSTAGE_SESSION_SECRET: "{{ .sessionSecret }}" + NODE_TLS_REJECT_UNAUTHORIZED: "0" dataFrom: - sourceRef: generatorRef: apiVersion: generators.external-secrets.io/v1alpha1 kind: Password name: "postgres-password" + rewrite: + - transform: + template: "postgresPassword" + - sourceRef: + generatorRef: + apiVersion: generators.external-secrets.io/v1alpha1 + kind: Password + name: "session-secret" + rewrite: + - transform: + template: "sessionSecret" data: - secretKey: ARGOCD_SESSION_TOKEN remoteRef: @@ -55,7 +68,7 @@ metadata: name: postgres-password namespace: backstage annotations: - argocd.argoproj.io/sync-wave: "-20" + argocd.argoproj.io/sync-wave: "-10" spec: length: 48 digits: 5 @@ -64,6 +77,21 @@ spec: noUpper: false allowRepeat: true --- +apiVersion: generators.external-secrets.io/v1alpha1 +kind: Password +metadata: + name: session-secret + namespace: backstage + annotations: + argocd.argoproj.io/sync-wave: "-20" +spec: + length: 64 + digits: 5 + symbols: 5 + symbolCharacters: "/-+@$%^&#" + noUpper: false + allowRepeat: true +--- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: @@ -88,27 +116,45 @@ spec: webhookSecret: {{ .webhookSecret }} privateKey: | {{ .privateKey | nindent 2}} data: - - secretKey: "appId" - remoteRef: + - remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config + metadataPolicy: None property: github.appId - - secretKey: "clientId" - remoteRef: + secretKey: appId + - remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config + metadataPolicy: None property: github.clientId - - secretKey: "clientSecret" - remoteRef: + secretKey: clientId + - remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config + metadataPolicy: None property: github.clientSecret - - secretKey: "webhookSecret" - remoteRef: + secretKey: clientSecret + - remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config + metadataPolicy: None property: github.webhookSecret - - secretKey: "privateKey" - remoteRef: + secretKey: webhookSecret + - remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config + metadataPolicy: None property: github.privateKey - - secretKey: "webhookUrl" - remoteRef: + secretKey: privateKey + - remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config + metadataPolicy: None property: github.webhookUrl + secretKey: webhookUrl diff --git a/packages/backstage/values.yaml b/packages/backstage/values.yaml index 7c2fafc..aad5ec1 100644 --- a/packages/backstage/values.yaml +++ b/packages/backstage/values.yaml @@ -7,6 +7,8 @@ ingress: tls: enabled: true secretName: "backstage-server-tls" + annotations: + external-dns.alpha.kubernetes.io/ttl: "60" backstage: replicas: 1 image: @@ -14,7 +16,11 @@ backstage: repository: cnoe-io/backstage-app tag: 135c0cb26f3e004a27a11edb6a4779035aff9805 pullPolicy: IfNotPresent - command: ["node", "packages/backend"] + command: + - /bin/bash + - -c + - | + node packages/backend --config /app/app-config-from-configmap.yaml || /app/node_modules/.bin/knex migrate:unlock --connection "postgresql://$POSTGRES_USER:$POSTGRES_PASSWORD@$POSTGRES_HOST/backstage_plugin_app" --client pg extraEnvVarsSecrets: - backstage-env-vars extraVolumeMounts: @@ -44,7 +50,7 @@ backstage: backend: baseUrl: ${BACKSTAGE_FRONTEND_URL} csp: - connect-src: ['self', 'http:', 'https:'] + connect-src: ["self", "http:", "https:"] cors: origin: ${BACKSTAGE_FRONTEND_URL} methods: [GET, HEAD, PATCH, POST, PUT, DELETE] @@ -64,38 +70,38 @@ backstage: apps: - $include: /app/config/github-integration.yaml proxy: - '/argo-workflows/api': + "/argo-workflows/api": target: ${ARGO_WORKFLOWS_URL} changeOrigin: true secure: true headers: Authorization: $env: ARGO_WORKFLOWS_AUTH_TOKEN - '/argocd/api': + "/argocd/api": target: ${ARGO_CD_URL} changeOrigin: true headers: Cookie: $env: ARGOCD_AUTH_TOKEN techdocs: - builder: 'local' + builder: "local" generator: - runIn: 'docker' + runIn: "docker" publisher: - type: 'local' + type: "local" auth: environment: development session: - secret: "MW2sV-sIPngEl26vAzatV-6VqfsgAx4bPIz7PuE_2Lk=" + secret: ${BACKSTAGE_SESSION_SECRET} providers: keycloak-oidc: development: metadataUrl: ${KEYCLOAK_NAME_METADATA} clientId: backstage clientSecret: ${BACKSTAGE_CLIENT_SECRET} - additionalScopes: 'openid profile email groups' + additionalScopes: "openid profile email groups" prompt: auto - scaffolder: + scaffolder: {} catalog: import: entityFilename: catalog-info.yaml @@ -111,7 +117,7 @@ backstage: username: admin password: ${ARGOCD_ADMIN_PASSWORD} appLocatorMethods: - - type: 'config' + - type: "config" instances: - name: in-cluster url: ${ARGO_CD_URL} @@ -129,4 +135,4 @@ postgresql: userPasswordKey: POSTGRES_PASSWORD architecture: standalone serviceAccount: - create: true \ No newline at end of file + create: true diff --git a/packages/bootstrap/_helpers.tpl b/packages/bootstrap/_helpers.tpl deleted file mode 100644 index ec4c807..0000000 --- a/packages/bootstrap/_helpers.tpl +++ /dev/null @@ -1,7 +0,0 @@ -{{- define "readManifest" -}} -templates: -{{- $manifestDir := (printf "%s/%s" (requiredEnv "REPO_ROOT") (.PATH | trim)) -}} -{{- range $index,$item := readDirEntries $manifestDir }} -- {{ readFile (printf "%s/%s" $manifestDir $item.Name) | toYaml }} -{{- end }} -{{- end -}} diff --git a/packages/bootstrap/argocd.yaml.gotmpl b/packages/bootstrap/argocd.yaml.gotmpl deleted file mode 100644 index fe1a4cd..0000000 --- a/packages/bootstrap/argocd.yaml.gotmpl +++ /dev/null @@ -1 +0,0 @@ -{{ include "readManifest" (dict "PATH" "packages/argo-cd/manifests") }} diff --git a/packages/bootstrap/crossplane-ns.yaml b/packages/bootstrap/crossplane-ns.yaml deleted file mode 100644 index 6791c54..0000000 --- a/packages/bootstrap/crossplane-ns.yaml +++ /dev/null @@ -1,7 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - creationTimestamp: "2025-09-24T09:31:24Z" - labels: - kubernetes.io/metadata.name: crossplane-system - name: crossplane-system diff --git a/packages/cert-manager/values.yaml b/packages/cert-manager/values.yaml index ef27fd7..9f8f3da 100644 --- a/packages/cert-manager/values.yaml +++ b/packages/cert-manager/values.yaml @@ -2,6 +2,22 @@ installCRDs: true global: leaderElection: namespace: cert-manager +webhook: + validatingWebhookConfiguration: + namespaceSelector: + matchExpressions: + - key: cert-manager.io/disable-validation + operator: NotIn + values: + - "true" + - key: kubernetes.azure.com/managedby + operator: NotIn + values: + - aks + - key: control-plane + operator: NotIn + values: + - "true" extraObjects: - | apiVersion: cert-manager.io/v1 @@ -17,6 +33,20 @@ extraObjects: - http01: ingress: ingressClassName: nginx + - | + apiVersion: cert-manager.io/v1 + kind: ClusterIssuer + metadata: + name: letsencrypt-staging + spec: + acme: + server: https://acme-staging-v02.api.letsencrypt.org/directory + privateKeySecretRef: + name: letsencrypt-staging + solvers: + - http01: + ingress: + ingressClassName: nginx - | {{ if eq .Values.global.pathRouting "true"}} # This resource is to create default certificate of the base domain @@ -35,4 +65,3 @@ extraObjects: dnsNames: - {{ .Values.global.domainName }} {{ end }} - \ No newline at end of file diff --git a/packages/charts/raw/.helmignore b/packages/charts/raw/.helmignore deleted file mode 100644 index 0e8a0eb..0000000 --- a/packages/charts/raw/.helmignore +++ /dev/null @@ -1,23 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*.orig -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ diff --git a/packages/charts/raw/Chart.yaml b/packages/charts/raw/Chart.yaml deleted file mode 100644 index fdf7e0b..0000000 --- a/packages/charts/raw/Chart.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: v2 -name: raw -description: A Helm chart to deploy Kubernetes objects - -# A chart can be either an 'application' or a 'library' chart. -# -# Application charts are a collection of templates that can be packaged into versioned archives -# to be deployed. -# -# Library charts provide useful utilities or functions for the chart developer. They're included as -# a dependency of application charts to inject those utilities and functions into the rendering -# pipeline. Library charts do not define any templates and therefore cannot be deployed. -type: application - -# This is the chart version. This version number should be incremented each time you make changes -# to the chart and its templates, including the app version. -# Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.1.0 - -# This is the version number of the application being deployed. This version number should be -# incremented each time you make changes to the application. Versions are not expected to -# follow Semantic Versioning. They should reflect the version the application is using. -# It is recommended to use it with quotes. -appVersion: "1.16.0" diff --git a/packages/charts/raw/templates/resources.yaml b/packages/charts/raw/templates/resources.yaml deleted file mode 100644 index eb0fbba..0000000 --- a/packages/charts/raw/templates/resources.yaml +++ /dev/null @@ -1,8 +0,0 @@ -{{- range $.Values.templates }} ---- -{{ if typeIs "string" . }} - {{- tpl . $ }} -{{- else }} - {{- tpl (toYaml .) $ }} -{{- end }} -{{ end }} diff --git a/packages/charts/raw/values.yaml b/packages/charts/raw/values.yaml deleted file mode 100644 index ac77a75..0000000 --- a/packages/charts/raw/values.yaml +++ /dev/null @@ -1,47 +0,0 @@ -templates: [] -## -## Example: Uncomment the below and run `helm template ./`: -## -# -# templates: -# - | -# apiVersion: v1 -# kind: ConfigMap -# metadata: -# name: {{ .Release.Name }}-1 -# namespace: {{ .Release.Namespace }} -# data: -# foo: {{ .Values.foo }} -# - | -# apiVersion: v1 -# kind: ConfigMap -# metadata: -# name: {{ .Release.Name }}-2 -# namespace: {{ .Release.Namespace }} -# data: -# foo: {{ .Values.foo }} -# values: -# foo: FOO -# -## -## Expected Output: -## -# -# --- -# # Source: raw/templates/resources.yaml -# apiVersion: v1 -# kind: ConfigMap -# metadata: -# name: release-name-1 -# namespace: default -# data: -# foo: -# --- -# # Source: raw/templates/resources.yaml -# apiVersion: v1 -# kind: ConfigMap -# metadata: -# name: release-name-2 -# namespace: default -# data: -# foo: diff --git a/packages/crossplane/kustomize/kustomization.yaml b/packages/crossplane/kustomize/kustomization.yaml new file mode 100644 index 0000000..c9759d5 --- /dev/null +++ b/packages/crossplane/kustomize/kustomization.yaml @@ -0,0 +1,38 @@ +# kustomization.yaml +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - providers.yaml + +patches: + - patch: |- + - op: add + path: /spec/runtimeConfigRef + value: + name: workload-identity + target: + group: pkg.crossplane.io + version: v1 + kind: Provider + name: upbound-provider-family-azure + - patch: |- + - op: add + path: /spec/runtimeConfigRef + value: + name: workload-identity + target: + group: pkg.crossplane.io + version: v1 + kind: Provider + name: upbound-provider-azure-authorization + - patch: |- + - op: add + path: /spec/runtimeConfigRef + value: + name: workload-identity + target: + group: pkg.crossplane.io + version: v1 + kind: Provider + name: upbound-provider-azure-managedidentity diff --git a/packages/crossplane/kustomize/providers.yaml b/packages/crossplane/kustomize/providers.yaml new file mode 100644 index 0000000..1f77ba2 --- /dev/null +++ b/packages/crossplane/kustomize/providers.yaml @@ -0,0 +1,28 @@ +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-family-azure + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true +spec: + package: xpkg.upbound.io/upbound/provider-family-azure:v2.0.0 + +--- +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-azure-authorization + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true +spec: + package: xpkg.upbound.io/upbound/provider-azure-authorization:v2.0.0 + +--- +apiVersion: pkg.crossplane.io/v1 +kind: Provider +metadata: + name: upbound-provider-azure-managedidentity + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true +spec: + package: xpkg.upbound.io/upbound/provider-azure-managedidentity:v2.0.0 diff --git a/packages/crossplane/manifests/clusterproviderconfig/azure.yaml b/packages/crossplane/manifests/clusterproviderconfig/azure.yaml deleted file mode 100644 index fb07c73..0000000 --- a/packages/crossplane/manifests/clusterproviderconfig/azure.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: azure.m.upbound.io/v1beta1 -kind: ClusterProviderConfig -metadata: - name: default -spec: - credentials: - source: Secret - secretRef: - name: provider-azure - namespace: crossplane-system - key: credential diff --git a/packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml b/packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml deleted file mode 100644 index 4020885..0000000 --- a/packages/crossplane/manifests/clusterproviderconfig/kubernetes.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: kubernetes.m.crossplane.io/v1alpha1 -kind: ClusterProviderConfig -metadata: - name: default - namespace: crossplane-system -spec: - credentials: - source: InjectedIdentity diff --git a/packages/crossplane/manifests/configurations/azure-workload-identity.yaml b/packages/crossplane/manifests/configurations/azure-workload-identity.yaml deleted file mode 100644 index 25550ce..0000000 --- a/packages/crossplane/manifests/configurations/azure-workload-identity.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Configuration -metadata: - name: configuration-azure-workload-identity -spec: - package: xpkg.upbound.io/livewyer-ops/crossplane-configuration-azure-workload-identity:v0.0.2 diff --git a/packages/crossplane/manifests/functions/auto-ready.yaml b/packages/crossplane/manifests/functions/auto-ready.yaml deleted file mode 100644 index 6952d23..0000000 --- a/packages/crossplane/manifests/functions/auto-ready.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1beta1 -kind: Function -metadata: - name: function-auto-ready -spec: - package: xpkg.upbound.io/upbound/function-auto-ready:v0.5.0 diff --git a/packages/crossplane/manifests/functions/go-templating.yaml b/packages/crossplane/manifests/functions/go-templating.yaml deleted file mode 100644 index 9ae9b3f..0000000 --- a/packages/crossplane/manifests/functions/go-templating.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1beta1 -kind: Function -metadata: - name: function-go-templating -spec: - package: xpkg.upbound.io/upbound/function-go-templating:v0.11.0 diff --git a/packages/crossplane/manifests/providers/azure-authorization.yaml b/packages/crossplane/manifests/providers/azure-authorization.yaml deleted file mode 100644 index 8745222..0000000 --- a/packages/crossplane/manifests/providers/azure-authorization.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Provider -metadata: - name: upbound-provider-azure-authorization -spec: - package: xpkg.upbound.io/upbound/provider-azure-authorization:v2.0.0 diff --git a/packages/crossplane/manifests/providers/azure-managedidentity.yaml b/packages/crossplane/manifests/providers/azure-managedidentity.yaml deleted file mode 100644 index 27c0259..0000000 --- a/packages/crossplane/manifests/providers/azure-managedidentity.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Provider -metadata: - name: upbound-provider-azure-managedidentity -spec: - package: xpkg.upbound.io/upbound/provider-azure-managedidentity:v2.0.0 diff --git a/packages/crossplane/manifests/providers/azure.yaml b/packages/crossplane/manifests/providers/azure.yaml deleted file mode 100644 index 1f317de..0000000 --- a/packages/crossplane/manifests/providers/azure.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Provider -metadata: - name: upbound-provider-azure -spec: - package: xpkg.upbound.io/upbound/provider-family-azure:v2.0.0 diff --git a/packages/crossplane/manifests/providers/kubernetes.yaml b/packages/crossplane/manifests/providers/kubernetes.yaml deleted file mode 100644 index ac7e129..0000000 --- a/packages/crossplane/manifests/providers/kubernetes.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: pkg.crossplane.io/v1 -kind: Provider -metadata: - name: upbound-provider-kubernetes -spec: - package: xpkg.upbound.io/upbound/provider-kubernetes:v1 diff --git a/packages/crossplane/manifests/runtime-config.yaml b/packages/crossplane/manifests/runtime-config.yaml new file mode 100644 index 0000000..876c0d8 --- /dev/null +++ b/packages/crossplane/manifests/runtime-config.yaml @@ -0,0 +1,31 @@ +apiVersion: pkg.crossplane.io/v1beta1 +kind: DeploymentRuntimeConfig +metadata: + name: workload-identity + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true +spec: + deploymentTemplate: + spec: + selector: {} + template: + metadata: + labels: + azure.workload.identity/use: "true" + spec: + serviceAccountName: crossplane + containers: + - name: package-runtime + args: + - --debug + +--- +apiVersion: kubernetes.m.crossplane.io/v1alpha1 +kind: ClusterProviderConfig +metadata: + name: default + annotations: + argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true +spec: + credentials: + source: InjectedIdentity diff --git a/packages/crossplane/manifests/xrs/external-dns.yaml b/packages/crossplane/manifests/xrs/external-dns.yaml deleted file mode 100644 index 8285c71..0000000 --- a/packages/crossplane/manifests/xrs/external-dns.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: azure.livewyer.io/v1alpha1 -kind: WorkloadIdentity -metadata: - name: external-dns - namespace: external-dns -spec: - forProvider: - location: "{{ .location }}" - oidcIssuerURL: "{{ .clusterOIDCIssuerURL }}" - resourceGroupName: "{{ .resourceGroup }}" - roleAssignments: - - roleDefinitionName: DNS Zone Contributor - scope: "{{ .resourceGroup }}" - - roleDefinitionName: Reader - scope: "{{ .resourceGroup }}" - serviceAccountName: external-dns diff --git a/packages/crossplane/manifests/xrs/external-secrets.yaml b/packages/crossplane/manifests/xrs/external-secrets.yaml deleted file mode 100644 index 00216a2..0000000 --- a/packages/crossplane/manifests/xrs/external-secrets.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: azure.livewyer.io/v1alpha1 -kind: WorkloadIdentity -metadata: - name: external-secrets - namespace: external-secrets -spec: - forProvider: - location: "{{ .location }}" - oidcIssuerURL: "{{ .clusterOIDCIssuerURL }}" - resourceGroupName: "{{ .resourceGroup }}" - roleAssignments: - - roleDefinitionName: Key Vault Secrets User - scope: "{{ .subscription }}/resourcegroups/resource-{{ .resourceGroup }}" - serviceAccountName: external-secrets diff --git a/packages/crossplane/manifests/xrs/keycloak.yaml b/packages/crossplane/manifests/xrs/keycloak.yaml deleted file mode 100644 index 896c617..0000000 --- a/packages/crossplane/manifests/xrs/keycloak.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: azure.livewyer.io/v1alpha1 -kind: WorkloadIdentity -metadata: - name: keycloak - namespace: keycloak -spec: - forProvider: - location: "{{ .location }}" - oidcIssuerURL: "{{ .clusterOIDCIssuerURL }}" - resourceGroupName: "{{ .resourceGroup }}" - roleAssignments: - - roleDefinitionName: Key Vault Secrets User - scope: "{{ .resourceGroup }}" - - roleDefinitionName: Key Vault Reader - scope: "{{ .resourceGroup }}" - serviceAccountName: external-secret-keycloak diff --git a/packages/crossplane/values.yaml b/packages/crossplane/values.yaml index 6d0dbd8..f070d01 100644 --- a/packages/crossplane/values.yaml +++ b/packages/crossplane/values.yaml @@ -1,5 +1,8 @@ -webui: - enabled: true +customLabels: + azure.workload.identity/use: "true" + +# customAnnotations: +# azure.workload.identity/inject-proxy-sidecar: "true" provider: packages: @@ -8,11 +11,14 @@ provider: - xpkg.upbound.io/upbound/provider-azure-managedidentity:v2.0.0 - xpkg.upbound.io/upbound/provider-kubernetes:v1 -configuration: - packages: - - xpkg.upbound.io/livewyer-ops/crossplane-configuration-azure-workload-identity:v0.0.2 - function: packages: - xpkg.upbound.io/upbound/function-auto-ready:v0.5.0 - xpkg.upbound.io/upbound/function-go-templating:v0.11.0 + +configuration: + packages: + - xpkg.upbound.io/livewyer-ops/crossplane-configuration-azure-workload-identity:v0.0.2 + +webui: + enabled: true diff --git a/packages/external-dns/values.yaml b/packages/external-dns/values.yaml index 27e8ea9..2ce0949 100644 --- a/packages/external-dns/values.yaml +++ b/packages/external-dns/values.yaml @@ -1,10 +1,19 @@ sources: - ingress txtOwnerId: cnoe-external-dns -policy: upsert-only +policy: sync serviceAccount: create: false - labels: - "azure.workload.identity/use": "true" + name: external-dns podLabels: - "azure.workload.identity/use": "true" + azure.workload.identity/use: "true" +commonLabels: + azure.workload.identity/use: "true" +extraVolumes: + - name: azure-config-file + secret: + secretName: external-dns-azure +extraVolumeMounts: + - name: azure-config-file + mountPath: /etc/kubernetes + readOnly: true diff --git a/packages/external-secrets/manifests/cluster-secret-store.yaml b/packages/external-secrets/manifests/cluster-secret-store.yaml deleted file mode 100644 index b763df3..0000000 --- a/packages/external-secrets/manifests/cluster-secret-store.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ClusterSecretStore -metadata: - name: azure-keyvault -spec: - provider: - azurekv: - authType: ManagedIdentity - vaultUrl: https://cnoe-ref-impl.vault.azure.net - serviceAccountRef: - name: external-secrets diff --git a/packages/external-secrets/values.yaml b/packages/external-secrets/values.yaml index 1b4551c..3b94846 100644 --- a/packages/external-secrets/values.yaml +++ b/packages/external-secrets/values.yaml @@ -1 +1,38 @@ installCRDs: true +podLabels: + azure.workload.identity/use: "true" +commonLabels: + azure.workload.identity/use: "true" +extraObjects: + - apiVersion: external-secrets.io/v1 + kind: ClusterSecretStore + metadata: + name: azure-keyvault + spec: + provider: + azurekv: + authType: WorkloadIdentity + vaultUrl: https://cnoe-ref-impl.vault.azure.net + serviceAccountRef: + name: workload-identity-sa + namespace: external-secrets + - apiVersion: external-secrets.io/v1 + kind: ClusterSecretStore + metadata: + name: keycloak + annotations: + argocd.argoproj.io/sync-wave: "60" + spec: + provider: + kubernetes: + remoteNamespace: keycloak + server: + caProvider: + type: ConfigMap + name: kube-root-ca.crt + namespace: keycloak + key: ca.crt + auth: + serviceAccount: + name: eso-store + namespace: keycloak diff --git a/packages/ingress-nginx/values.yaml b/packages/ingress-nginx/values.yaml index 95ea2e4..1d9cb8c 100644 --- a/packages/ingress-nginx/values.yaml +++ b/packages/ingress-nginx/values.yaml @@ -1,15 +1,10 @@ controller: config: - hsts: 'false' + hsts: "false" service: type: LoadBalancer + externalTrafficPolicy: Local annotations: - argocd.argoproj.io/sync-wave: '-1' # Adding to ensure service is created before actual deployment - service.beta.kubernetes.io/aws-load-balancer-internal: 'false' - service.beta.kubernetes.io/aws-load-balancer-name: cnoe - service.beta.kubernetes.io/aws-load-balancer-type: external - service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing - service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip - loadBalancerClass: service.k8s.aws/nlb + service.beta.kubernetes.io/azure-load-balancer-health-probe-request-path: /healthz targetPorts: - https: 'https' + https: "https" diff --git a/packages/keycloak/manifests/external-secrets.yaml b/packages/keycloak/manifests/external-secrets.yaml index c787336..63b2156 100644 --- a/packages/keycloak/manifests/external-secrets.yaml +++ b/packages/keycloak/manifests/external-secrets.yaml @@ -4,8 +4,6 @@ kind: ExternalSecret metadata: name: keycloak-config namespace: keycloak - annotations: - argocd.argoproj.io/sync-wave: "-10" spec: refreshInterval: "0" secretStoreRef: @@ -16,13 +14,13 @@ spec: template: data: # ARGO_CD_SESSION_URL: "http://argocd-server.argocd.svc.cluster.local:443{{ if .pathRouting }}/argocd{{ end }}/api/v1/session" - KEYCLOAK_URL: "http://keycloak.keycloak.svc.cluster.local{{ if .pathRouting }}/keycloak{{ end }}" + KEYCLOAK_URL: 'http://keycloak.keycloak.svc.cluster.local{{ ternary "/keycloak" "" (eq (lower .pathRouting) "true") }}' POSTGRES_PASSWORD: "{{ .postgresPassword }}" KEYCLOAK_ADMIN_PASSWORD: "{{ .keycloakAdminPassword }}" USER1_PASSWORD: "{{ .keycloakUserPassword }}" - ARGO_CD_URL: "{{ if .pathRouting }}{{ .domainName }}/argocd{{ else }}argocd.{{ .domainName }}{{ end }}" - BACKSTAGE_URL: "{{ if .pathRouting }}{{ .domainName }}{{ else }}backstage.{{ .domainName }}{{ end }}" - ARGO_WORKFLOW_URL: "{{ if .pathRouting }}{{ .domainName }}/argo-workflows{{ else }}argo-workflows.{{ .domainName }}{{ end }}" + ARGO_CD_URL: '{{ if (eq (lower .pathRouting) "true") }}{{ .domainName }}/argocd{{ else }}argocd.{{ .domainName }}{{ end }}' + BACKSTAGE_URL: '{{ if (eq (lower .pathRouting) "true") }}{{ .domainName }}{{ else }}backstage.{{ .domainName }}{{ end }}' + ARGO_WORKFLOW_URL: '{{ if (eq (lower .pathRouting) "true") }}{{ .domainName }}/argo-workflows{{ else }}argo-workflows.{{ .domainName }}{{ end }}' dataFrom: - sourceRef: generatorRef: @@ -51,20 +49,24 @@ spec: data: - secretKey: domainName remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config property: domain + metadataPolicy: None - secretKey: pathRouting remoteRef: + conversionStrategy: Default + decodingStrategy: None key: config property: path_routing + metadataPolicy: None --- apiVersion: generators.external-secrets.io/v1alpha1 kind: Password metadata: name: postgres-keycloak-password namespace: keycloak - annotations: - argocd.argoproj.io/sync-wave: "-20" spec: length: 32 digits: 5 @@ -78,8 +80,6 @@ kind: Password metadata: name: keycloak-user-password namespace: keycloak - annotations: - argocd.argoproj.io/sync-wave: "-20" spec: length: 32 digits: 5 diff --git a/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml b/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml index 5330761..e9aa163 100644 --- a/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml +++ b/packages/keycloak/manifests/keycloak-cluster-secret-store.yaml @@ -31,24 +31,3 @@ roleRef: kind: Role name: eso-store apiGroup: rbac.authorization.k8s.io ---- -apiVersion: external-secrets.io/v1 -kind: ClusterSecretStore -metadata: - name: keycloak - annotations: - argocd.argoproj.io/sync-wave: "60" -spec: - provider: - kubernetes: - remoteNamespace: keycloak - server: - caProvider: - type: ConfigMap - name: kube-root-ca.crt - namespace: keycloak - key: ca.crt - auth: - serviceAccount: - name: eso-store - namespace: keycloak diff --git a/packages/keycloak/manifests/user-sso-config-job.yaml b/packages/keycloak/manifests/user-sso-config-job.yaml index c743f29..11aa2bd 100644 --- a/packages/keycloak/manifests/user-sso-config-job.yaml +++ b/packages/keycloak/manifests/user-sso-config-job.yaml @@ -251,9 +251,9 @@ spec: args: - | #! /bin/bash - set -ex -o pipefail + set -e -o pipefail apt -qq update && apt -qq install curl jq gettext-base -y - + # Define helper functions keycloak_post() { local endpoint=$1 @@ -261,12 +261,12 @@ spec: local resource_name=$3 envsubst < ${payload} > /tmp/payload-env.json - + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -H "Content-Type: application/json" \ -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ -X POST --data @/tmp/payload-env.json \ ${KEYCLOAK_URL}${endpoint}) - + if [ "$HTTP_STATUS" -eq 409 ]; then echo "${resource_name} already exists, continuing..." elif [ "$HTTP_STATUS" -ne 201 ] && [ "$HTTP_STATUS" -ne 200 ]; then @@ -274,30 +274,30 @@ spec: cat /tmp/response.txt fi } - + keycloak_put() { local endpoint=$1 local resource_name=$2 - + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -H "Content-Type: application/json" \ -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ -X PUT ${KEYCLOAK_URL}${endpoint}) - + if [ "$HTTP_STATUS" -ne 204 ] && [ "$HTTP_STATUS" -ne 200 ]; then echo "Error updating ${resource_name}: HTTP status $HTTP_STATUS" cat /tmp/response.txt fi } - + keycloak_get() { local endpoint=$1 local jq_filter=$2 - + curl -sS -H "Content-Type: application/json" \ -H "Authorization: bearer ${KEYCLOAK_TOKEN}" \ -X GET ${KEYCLOAK_URL}${endpoint} | jq -e -r "${jq_filter}" } - + # Get Keycloak token for initial Admin user # ADMIN_PASSWORD=$(cat /var/secrets/KEYCLOAK_ADMIN_PASSWORD) # USER1_PASSWORD=$(cat /var/secrets/USER1_PASSWORD) @@ -313,7 +313,7 @@ spec: exit 1 fi KEYCLOAK_TOKEN=$(cat /tmp/response.txt | jq -e -r '.access_token') - + HTTP_STATUS=$(curl -sS -w "%{http_code}" -o /tmp/response.txt -H "Authorization: bearer ${KEYCLOAK_TOKEN}" "${KEYCLOAK_URL}/admin/realms/cnoe") if [ "$HTTP_STATUS" -ne 200 ]; then echo "Error validating Keycloak token: HTTP status $HTTP_STATUS" @@ -324,10 +324,10 @@ spec: # Download kubectl curl -sS -LO "https://dl.k8s.io/release/v1.28.3//bin/linux/amd64/kubectl" chmod +x kubectl - + echo "creating client scopes" keycloak_post "/admin/realms/cnoe/client-scopes" "/var/config/client-scope-groups-payload.json" "Client scope" - + echo "creating admin group" keycloak_post "/admin/realms/cnoe/groups" "/var/config/group-admin-payload.json" "Admin group" @@ -336,7 +336,7 @@ spec: echo "adding group claim to tokens" CLIENT_SCOPE_GROUPS_ID=$(keycloak_get "/admin/realms/cnoe/client-scopes" '.[] | select(.name == "groups") | .id') - + keycloak_post "/admin/realms/cnoe/client-scopes/${CLIENT_SCOPE_GROUPS_ID}/protocol-mappers/models" \ "/var/config/group-mapper-payload.json" "Protocol mapper" @@ -344,12 +344,12 @@ spec: create_user() { local user_num=$1 local payload_file=$2 - + echo "creating user${user_num}" jq --arg pwd "$USER1_PASSWORD" '.credentials[0].value = $pwd' ${payload_file} > user${user_num}-payload-with-password.json keycloak_post "/admin/realms/cnoe/users" "user${user_num}-payload-with-password.json" "User${user_num}" } - + create_user "1" "/var/config/user1-payload.json" create_user "2" "/var/config/user2-payload.json" @@ -358,58 +358,58 @@ spec: echo "USER1 ID: ${USER1ID}" echo "USER2 ID: ${USER2ID}" - + # Create client function create_client() { local client_name=$1 local payload_file=$2 - + echo "creating ${client_name} client" keycloak_post "/admin/realms/cnoe/clients" "${payload_file}" "${client_name} client" } - + create_client "ArgoCD" "/var/config/argocd-client-payload.json" - + # Add client scope function add_client_scope() { local client_id_name=$1 local client_name=$2 - + CLIENT_ID=$(keycloak_get "/admin/realms/cnoe/clients" ".[] | select(.clientId == \"${client_id_name}\") | .id") CLIENT_SCOPE_GROUPS_ID=$(keycloak_get "/admin/realms/cnoe/client-scopes" '.[] | select(.name == "groups") | .id') keycloak_put "/admin/realms/cnoe/clients/${CLIENT_ID}/default-client-scopes/${CLIENT_SCOPE_GROUPS_ID}" "${client_name} client scope" } - + add_client_scope "argocd" "ArgoCD" - + create_client "Backstage" "/var/config/backstage-client-payload.json" - + add_client_scope "backstage" "Backstage" - + # Get client secret function get_client_secret() { local client_id_name=$1 local var_name=$2 - + CLIENT_ID=$(keycloak_get "/admin/realms/cnoe/clients" ".[] | select(.clientId == \"${client_id_name}\") | .id") local secret=$(keycloak_get "/admin/realms/cnoe/clients/${CLIENT_ID}" ".secret") eval "${var_name}=${secret}" } - + get_client_secret "backstage" "BACKSTAGE_CLIENT_SECRET" - + create_client "Argo Workflows" "/var/config/argo-client-payload.json" - + add_client_scope "argo-workflows" "Argo Workflows" get_client_secret "argo-workflows" "ARGO_WORKFLOWS_CLIENT_SECRET" echo "Creating ArgoCD session token for backstage" ARGOCD_PASSWORD=$(./kubectl -n argocd get secret argocd-initial-admin-secret -o go-template='{{.data.password | base64decode }}') - - ARGOCD_SESSION_TOKEN=$(curl -k -sS http://argocd-server.argocd.svc.cluster.local:443/argocd/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -r .token) + + ARGOCD_SESSION_TOKEN=$(curl -Lk -sS http://${ARGO_CD_URL}/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -rc .token) echo "Creating keycloak-clients secret" - + echo \ "apiVersion: v1 kind: Secret @@ -423,8 +423,6 @@ spec: BACKSTAGE_CLIENT_SECRET: ${BACKSTAGE_CLIENT_SECRET} ARGOCD_ADMIN_PASSWORD: ${ARGOCD_PASSWORD} " > /tmp/secret.yaml - + ./kubectl apply -f /tmp/secret.yaml echo "Configuration Done!!" - - diff --git a/packages/keycloak/values.yaml b/packages/keycloak/values.yaml index 85f7580..8d9c2ed 100644 --- a/packages/keycloak/values.yaml +++ b/packages/keycloak/values.yaml @@ -4,7 +4,7 @@ usePasswordFiles: false proxyHeaders: "forwarded" global: - defaultStorageClass: gp3 + defaultStorageClass: default auth: adminUser: cnoe-admin @@ -19,6 +19,7 @@ ingress: servicePort: http annotations: argocd.argoproj.io/sync-wave: "20" + external-dns.alpha.kubernetes.io/ttl: "60" tls: false postgresql: diff --git a/private/azure-credentials.yaml.template b/private/azure-credentials.yaml.template deleted file mode 100644 index d14bce3..0000000 --- a/private/azure-credentials.yaml.template +++ /dev/null @@ -1,20 +0,0 @@ -apiVersion: v1 -kind: Secret -type: Opaque -metadata: - name: provider-azure - namespace: crossplane-system -stringData: - credentials: | - { - "clientId": "", - "clientSecret": "", - "subscriptionId": "", - "tenantId": "", - "activeDirectoryEndpointUrl": "https://login.microsoftonline.com", - "resourceManagerEndpointUrl": "https://management.azure.com/", - "activeDirectoryGraphResourceId": "https://graph.windows.net/", - "sqlManagementEndpointUrl": "https://management.core.windows.net:8443/", - "galleryEndpointUrl": "https://gallery.azure.com/", - "managementEndpointUrl": "https://management.core.windows.net/" - } From d8da4aa833ea597fbd7095f4837e64523d0a31a7 Mon Sep 17 00:00:00 2001 From: Bowen Sun Date: Mon, 29 Sep 2025 11:42:28 +0100 Subject: [PATCH 4/8] =?UTF-8?q?fix:=20bitnami=20images=20=F0=9F=91=8E?= =?UTF-8?q?=F0=9F=8F=BF?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Bowen Sun --- packages/backstage/values.yaml | 5 +++++ packages/keycloak/values.yaml | 13 +++++++++++++ 2 files changed, 18 insertions(+) diff --git a/packages/backstage/values.yaml b/packages/backstage/values.yaml index aad5ec1..defb48c 100644 --- a/packages/backstage/values.yaml +++ b/packages/backstage/values.yaml @@ -127,6 +127,11 @@ backstage: baseUrl: ${ARGO_WORKFLOWS_URL} postgresql: enabled: true + image: + repository: bitnamilegacy/postgresql + global: + security: + allowInsecureImages: true auth: username: "backstage" existingSecret: "backstage-env-vars" diff --git a/packages/keycloak/values.yaml b/packages/keycloak/values.yaml index 8d9c2ed..29524c8 100644 --- a/packages/keycloak/values.yaml +++ b/packages/keycloak/values.yaml @@ -1,9 +1,17 @@ +image: + repository: bitnamilegacy/keycloak +keycloakConfigCli: + image: + repository: bitnamilegacy/keycloak-config-cli + adminRealm: "cnoe" production: true usePasswordFiles: false proxyHeaders: "forwarded" global: + security: + allowInsecureImages: true defaultStorageClass: default auth: @@ -24,6 +32,11 @@ ingress: postgresql: enabled: true + image: + repository: bitnamilegacy/postgresql + global: + security: + allowInsecureImages: true auth: username: keycloak database: keycloak From f0d5fac989db27b0c29c19eeb99145913cdf800d Mon Sep 17 00:00:00 2001 From: Bowen Sun Date: Mon, 29 Sep 2025 11:55:46 +0100 Subject: [PATCH 5/8] refactor: improve initial and component install Signed-off-by: Bowen Sun --- Taskfile.yml | 223 ++++++++---------- config.yaml.template | 1 + packages/addons/values.yaml | 3 + .../argo-cd/manifests/argo-cd-github-app.yaml | 85 +++++++ .../argo-cd/manifests/hub-cluster-secret.yaml | 137 +++++++++++ packages/argo-cd/values.yaml.gotmpl | 29 +-- .../manifests/external-secrets.yaml | 2 + .../backstage/manifests/external-secrets.yaml | 2 +- .../manifests/provider-kubernetes-config.yaml | 29 +++ .../manifests/external-secrets.yaml | 53 +++++ .../keycloak/manifests/external-secrets.yaml | 6 + private/.gitkeep | 0 12 files changed, 415 insertions(+), 155 deletions(-) create mode 100644 packages/argo-cd/manifests/argo-cd-github-app.yaml create mode 100644 packages/argo-cd/manifests/hub-cluster-secret.yaml create mode 100644 packages/crossplane/manifests/provider-kubernetes-config.yaml create mode 100644 packages/external-dns/manifests/external-secrets.yaml create mode 100644 private/.gitkeep diff --git a/Taskfile.yml b/Taskfile.yml index cb35a34..7f47a0e 100644 --- a/Taskfile.yml +++ b/Taskfile.yml @@ -7,15 +7,28 @@ set: [errexit, nounset, pipefail] env: KUBECONFIG: "{{.ROOT_DIR}}/private/kubeconfig" REPO_ROOT: "{{.ROOT_DIR}}" + +vars: + CONFIG_FILE: "{{.ROOT_DIR}}/config.yaml" + SUBSCRIPTION_ID: + sh: yq '.subscription' "{{.CONFIG_FILE}}" + RESOURCE_GROUP: + sh: yq '.resource_group' "{{.CONFIG_FILE}}" + LOCATION: + sh: yq '.location' "{{.CONFIG_FILE}}" KEYVAULT_NAME: - sh: yq '.keyvault // "cnoe-ref-impl"' config.yaml + sh: yq '.keyvault // "cnoe-ref-impl"' "{{.CONFIG_FILE}}" + CLUSTER_NAME: + sh: yq '.cluster_name' "{{.CONFIG_FILE}}" + TAGS: + sh: yq eval '.tags | to_entries | map(.key + "=" + .value) | join(" ")' "{{.CONFIG_FILE}}" + AZ_CLI_OPTS: --only-show-errors --output none tasks: init: deps: - update:kubeconfig cmds: - - defer: { task: cleanup } - task: helmfile:init - task: helmfile:lint - task: helmfile:build @@ -24,7 +37,6 @@ tasks: deps: - update:kubeconfig cmds: - - defer: { task: cleanup } - task: azure:creds - task: helmfile - task: update @@ -33,46 +45,41 @@ tasks: deps: - update:kubeconfig cmds: - - defer: { task: cleanup } - task: helmfile:diff sync: deps: - update:kubeconfig cmds: - - defer: { task: cleanup } - task: helmfile:sync - task: update + get:urls: + deps: + - update:kubeconfig + cmds: + - | + kubectl get ingress -A -o yaml | yq '.items[] | {(.metadata.name): ((select(.spec.tls != null) | "https://" // "http://") + .spec.rules[].host + .spec.rules[].http.paths[].path)}' + update: deps: - task: update:kubeconfig silent: true cmds: - - defer: { task: cleanup } - - task: update:crossplane - task: update:secret update:secret: deps: - task: update:kubeconfig silent: true - vars: - RESOURCE_GROUP: - sh: yq '.resource_group' config.yaml cmds: - - defer: { task: cleanup } - task: update:secret:azure - task: wait vars: - IF: $(kubectl get ns | grep external-dns | wc -l) -eq 0 - - task: wait - vars: - IF: $(az identity show --resource-group "{{.RESOURCE_GROUP}}" --name external-dns --only-show-errors 2>/dev/null | wc -l) -eq 0 + IF: $(az identity show {{.AZ_CLI_OPTS}} --name external-dns -o yaml 2>/dev/null | wc -l) -eq 0 - task: update:secret:external-dns + - task: update:secret:azure - # NOTE: THIS IS NOT IDEAL - # TODO: move this task to manifest or use other method to manage update:secret:external-dns: deps: - task: update:kubeconfig @@ -80,85 +87,57 @@ tasks: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" vars: - SUBSCRIPTION_ID: - sh: yq '.subscription' config.yaml - RESOURCE_GROUP: - sh: yq '.resource_group' config.yaml TENANT_ID: - sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name external-dns --query "tenantId" --output tsv --only-show-errors + sh: az identity show {{.AZ_CLI_OPTS}} --name external-dns --query "tenantId" --output tsv CLIENT_ID: - sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name external-dns --query "clientId" --output tsv --only-show-errors - SECRET_TEMP: - sh: mktemp - sources: - - config.yaml - generates: - - "{{.SECRET_TEMP}}" + sh: az identity show {{.AZ_CLI_OPTS}} --name external-dns --query "clientId" --output tsv cmds: - - defer: rm -f {{.SECRET_TEMP}} - - cmd: yq --null-input -o=json '.aadClientId = "{{.CLIENT_ID}}" | .tenantId = "{{.TENANT_ID}}" | .subscriptionId = "{{.SUBSCRIPTION_ID}}" | .resourceGroup = "{{.RESOURCE_GROUP}}" | .useWorkloadIdentityExtension = true' > {{.SECRET_TEMP}} - - kubectl create secret generic external-dns-azure --namespace external-dns --from-file='azure.json'={{.SECRET_TEMP}} + - task: update:config + vars: + RUN: yq -i e '.externaldns_workload_identity |= { .clientId |= "{{.CLIENT_ID}}" | .tenantId |= "{{.TENANT_ID}}"}' "{{.CONFIG_FILE}}" + silent: true update:secret:azure: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" vars: - TAGS: - sh: yq eval '.tags | to_entries | map(.key + "=" + .value) | join(" ")' config.yaml SECRET_TEMP: sh: mktemp - KUBELET_IDENTITY_OBJECT_ID: - sh: az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --query 'identityProfile.kubeletidentity.objectId' -o tsv --only-show-errors sources: - - config.yaml + - "{{.CONFIG_FILE}}" generates: - "{{.SECRET_TEMP}}" cmds: - task: if vars: - IF: $(az keyvault list -o yaml --only-show-errors | KEYVAULT_NAME=${KEYVAULT_NAME} yq '.[] | [select(.name==env(KEYVAULT_NAME))] | length') -eq 0 - RUN: az keyvault create --resource-group $(yq '.resource_group' config.yaml) --enable-rbac-authorization --tags {{.TAGS}} ${KEYVAULT_NAME} --only-show-errors - - defer: rm -f {{.SECRET_TEMP}} - - yq -o=json config.yaml > {{.SECRET_TEMP}} + IF: $(az keyvault list {{.AZ_CLI_OPTS}} -o yaml | yq '.[] | [select(.name=="{{.KEYVAULT_NAME}}")] | length') -eq 0 + RUN: az keyvault create {{.AZ_CLI_OPTS}} --enable-rbac-authorization --tags {{.TAGS}} "{{.KEYVAULT_NAME}}" + - defer: rm -f "{{.SECRET_TEMP}}" + silent: true + - cmd: yq -o=json "{{.CONFIG_FILE}}" > "{{.SECRET_TEMP}}" + silent: true - | - az keyvault secret set \ + az keyvault secret set {{.AZ_CLI_OPTS}} \ --name config \ - --vault-name ${KEYVAULT_NAME} \ - --file {{.SECRET_TEMP}} \ + --vault-name "{{.KEYVAULT_NAME}}" \ + --file "{{.SECRET_TEMP}}" \ --description "Secret for config of CNOE Azure Reference Implementation" \ --tags {{.TAGS}} \ - --only-show-errors --output yaml | yq 'del(.value)' - - update:crossplane: - deps: - - task: update:kubeconfig - silent: true - cmds: - - defer: { task: cleanup } - - task: wait - vars: - IF: $(kubectl get provider.pkg.crossplane.io -o yaml 2>/dev/null | yq '[.items[] | select(.metadata.name=="*provider-kubernetes")] | length') -eq 0 - - task: wait - vars: - IF: $(kubectl -n crossplane-system get sa -o name | grep provider-kubernetes | wc -l) -eq 0 - - task: if - vars: - IF: $(kubectl get clusterrolebindings -o yaml | yq '[.items[] | select(.metadata.name=="provider-kubernetes-admin-binding")] | length') -eq 0 - RUN: kubectl create clusterrolebinding provider-kubernetes-admin-binding --clusterrole cluster-admin --serviceaccount="$(kubectl -n crossplane-system get sa -o yaml | yq '.items[] | select(.metadata.name=="*provider-kubernetes*") | [.metadata.namespace, .metadata.name] | join(":")')" + --query "{id: id, update: attributes.updated}" -o tsv update:kubeconfig: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" cmds: - - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --overwrite-existing --only-show-errors + - az aks get-credentials {{.AZ_CLI_OPTS}} --name "{{.CLUSTER_NAME}}" --overwrite-existing update:config: internal: true @@ -167,114 +146,103 @@ tasks: azure:init: preconditions: - - yq 'true' config.yaml - vars: - SUBSCRIPTION_ID: - sh: yq '.subscription' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" cmds: - - az account set --subscription "{{.SUBSCRIPTION_ID}}" + - az account set --subscription "{{.SUBSCRIPTION_ID}}" + - az config set defaults.location="{{.LOCATION}}" defaults.group="{{.RESOURCE_GROUP}}" {{.AZ_CLI_OPTS}} azure:creds: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" + vars: + ENABLED: + sh: yq '[select(.crossplane_workload_identity.create==true)] | length' "{{.CONFIG_FILE}}" cmds: - task: azure:creds:create + for: ["{{.ENABLED}}"] - task: azure:creds:get + for: ["{{.ENABLED}}"] azure:creds:get: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" vars: IDENTITY_NAME: crossplane - SUBSCRIPTION_ID: - sh: yq '.subscription' config.yaml - RESOURCE_GROUP: - sh: yq '.resource_group' config.yaml CLIENT_ID: - sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name {{.IDENTITY_NAME}} --query "clientId" --output tsv --only-show-errors + sh: az identity show {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" --query "clientId" --output tsv TENANT_ID: - sh: az identity show --resource-group "{{.RESOURCE_GROUP}}" --name {{.IDENTITY_NAME}} --query "tenantId" --output tsv --only-show-errors + sh: az identity show {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" --query "tenantId" --output tsv cmds: - task: update:config vars: - RUN: yq -i e '.crossplane_workload_identity |= { .clientId |= "{{.CLIENT_ID}}" | .tenantId |= "{{.TENANT_ID}}"}' config.yaml + RUN: yq -i e '.crossplane_workload_identity |= { .clientId |= "{{.CLIENT_ID}}" | .tenantId |= "{{.TENANT_ID}}"}' "{{.CONFIG_FILE}}" + silent: true azure:creds:create: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" vars: IDENTITY_NAME: crossplane IDENTITY_NAMESPACE: crossplane-system - SUBSCRIPTION_ID: - sh: yq '.subscription' config.yaml - RESOURCE_GROUP: - sh: yq '.resource_group' config.yaml OIDC_ISSUER: - sh: yq '.cluster_oidc_issuer_url' config.yaml + sh: yq '.cluster_oidc_issuer_url' "{{.CONFIG_FILE}}" sources: - - config.yaml + - "{{.CONFIG_FILE}}" cmds: - task: if vars: - IF: $(az identity list --resource-group "{{.RESOURCE_GROUP}}" --only-show-errors -o yaml | yq '[.[] | select(.name=="{{.IDENTITY_NAME}}")] | length') -eq 0 - RUN: az identity create --name "{{.IDENTITY_NAME}}" --resource-group "{{.RESOURCE_GROUP}}" --only-show-errors --output none + IF: $(az identity list {{.AZ_CLI_OPTS}} -o yaml | yq '[.[] | select(.name=="{{.IDENTITY_NAME}}")] | length') -eq 0 + RUN: az identity create {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" --output none - | - az identity federated-credential update \ + az identity federated-credential update {{.AZ_CLI_OPTS}} \ --name "{{.IDENTITY_NAME}}_fc" \ --identity-name "{{.IDENTITY_NAME}}" \ - --resource-group "{{.RESOURCE_GROUP}}" \ --issuer "{{.OIDC_ISSUER}}" \ --subject "system:serviceaccount:{{.IDENTITY_NAMESPACE}}:{{.IDENTITY_NAME}}" \ - --audience "api://AzureADTokenExchange" \ - --only-show-errors --output none 2>/dev/null || \ - az identity federated-credential create \ + --audience "api://AzureADTokenExchange" 2>/dev/null || \ + az identity federated-credential create {{.AZ_CLI_OPTS}} \ --name "{{.IDENTITY_NAME}}_fc" \ --identity-name "{{.IDENTITY_NAME}}" \ - --resource-group "{{.RESOURCE_GROUP}}" \ --issuer "{{.OIDC_ISSUER}}" \ --subject "system:serviceaccount:{{.IDENTITY_NAMESPACE}}:{{.IDENTITY_NAME}}" \ - --audience "api://AzureADTokenExchange" \ - --only-show-errors --output none + --audience "api://AzureADTokenExchange" - task: wait vars: - TIMEOUT: 10 - IF: true + IF: $(az identity federated-credential list {{.AZ_CLI_OPTS}} --identity-name "{{.IDENTITY_NAME}}" 2>/dev/null && echo 0 || echo 1) -ne 0 || $(az identity show {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" -o yaml 2>/dev/null | yq '[.principalId] | length') -ne 1 - |- - az role assignment create \ - --assignee-object-id "$(az identity show --resource-group {{.RESOURCE_GROUP}} --name {{.IDENTITY_NAME}} --query 'principalId' -o tsv --only-show-errors)" \ + az role assignment create {{.AZ_CLI_OPTS}} \ + --assignee-object-id "$(az identity show {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" --query 'principalId' -o tsv)" \ --role "Owner" \ - --scope "/subscriptions/{{.SUBSCRIPTION_ID}}/resourceGroups/{{.RESOURCE_GROUP}}" \ - --only-show-errors \ - --output none + --scope "/subscriptions/{{.SUBSCRIPTION_ID}}/resourceGroups/{{.RESOURCE_GROUP}}" azure:creds:delete: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" vars: + ENABLED: + sh: yq '[select(.crossplane_workload_identity.create==true)] | length' "{{.CONFIG_FILE}}" IDENTITY_NAME: crossplane - SUBSCRIPTION_ID: - sh: yq '.subscription' config.yaml - RESOURCE_GROUP: - sh: yq '.resource_group' config.yaml PRINCIPAL_ID: - sh: az identity show --resource-group {{.RESOURCE_GROUP}} --name {{.IDENTITY_NAME}} --query 'principalId' -o tsv --only-show-errors + sh: az identity show {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" --query 'principalId' -o tsv ROLE_ASSIGNMENT_ID: - sh: az role assignment list --resource-group {{.RESOURCE_GROUP}} --query "[?principalId=='{{.PRINCIPAL_ID}}'].id" -o tsv --only-show-errors + sh: az role assignment list {{.AZ_CLI_OPTS}} --query "[?principalId=='{{.PRINCIPAL_ID}}'].id" -o tsv cmds: - - az role assignment delete --ids {{.ROLE_ASSIGNMENT_ID}} - - az identity delete --name "{{.IDENTITY_NAME}}" --resource-group "{{.RESOURCE_GROUP}}" --subscription "{{.SUBSCRIPTION_ID}}" --only-show-errors --output none + - cmd: az role assignment delete {{.AZ_CLI_OPTS}} --ids "{{.ROLE_ASSIGNMENT_ID}}" + for: ["{{.ENABLED}}"] + - cmd: az identity delete {{.AZ_CLI_OPTS}} --name "{{.IDENTITY_NAME}}" + for: ["{{.ENABLED}}"] cleanup: internal: true @@ -287,17 +255,20 @@ tasks: env: WAIT_TIMEOUT: "{{default 300 .TIMEOUT}}" cmds: - - while [[ {{.IF}} ]] && [[ ${WAIT_TIMEOUT} -gt 0 ]]; do sleep 5 && ((WAIT_TIMEOUT-=5)); done || exit 1 + - cmd: while [[ {{.IF}} ]] && [[ ${WAIT_TIMEOUT} -gt 0 ]]; do sleep 5 && ((WAIT_TIMEOUT-=5)); done || exit 1 + silent: true if: internal: true cmds: - - if [[ {{.IF}} ]]; then {{.RUN}}; fi || exit 1 + - cmd: if [[ {{.IF}} ]]; then {{.RUN}}; fi || exit 1 + silent: true ifelse: internal: true cmds: - - if [[ {{.IF}} ]]; then {{.IF_RUN}}; else {{.ELSE_RUN}}; fi || exit 1 + - cmd: if [[ {{.IF}} ]]; then {{.IF_RUN}}; else {{.ELSE_RUN}}; fi || exit 1 + silent: true uninstall: deps: @@ -319,7 +290,7 @@ tasks: IF: true TIMEOUT: 30 - task: helmfile:destroy - - cmd: kubectl delete ns {{.ITEM}} --interactive=false --now --cascade=orphan + - cmd: kubectl delete ns "{{.ITEM}}" --interactive=false --now --cascade=orphan for: { var: NS } vars: NS: @@ -334,39 +305,37 @@ tasks: KUBECONFIG: sh: echo ${HOME}/.kube/config preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" cmds: - | az aks create \ - --name $(yq '.cluster_name' config.yaml) \ - --location $(yq '.location' config.yaml) \ - --resource-group $(yq '.resource_group' config.yaml) \ + --name "{{.CLUSTER_NAME}}" \ --kubernetes-version ${AKS_VERSION:-1.33} \ --sku base \ --enable-oidc-issuer \ --enable-workload-identity \ --node-vm-size ${AKS_NODE_SIZE:-standard_d4alds_v6} \ --output none {{.CLI_ARGS}} - - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --overwrite-existing --only-show-errors + - az aks get-credentials {{.AZ_CLI_OPTS}} --name "{{.CLUSTER_NAME}}" --overwrite-existing - task: test:config:update vars: OIDC_ISSUER: - sh: az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --query "oidcIssuerProfile.issuerUrl" -o tsv --only-show-errors + sh: az aks show --name "{{.CLUSTER_NAME}}" --query "oidcIssuerProfile.issuerUrl" -o tsv --only-show-errors test:config:update: preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" cmds: - - yq -i e '.cluster_oidc_issuer_url |= "{{.OIDC_ISSUER}}"' config.yaml + - yq -i e '.cluster_oidc_issuer_url |= "{{.OIDC_ISSUER}}"' "{{.CONFIG_FILE}}" test:aks:destroy: deps: - task: azure:init silent: true preconditions: - - yq 'true' config.yaml + - yq 'true' "{{.CONFIG_FILE}}" cmds: - - az aks delete --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --yes {{.CLI_ARGS}} + - az aks delete --name "{{.CLUSTER_NAME}}" --yes {{.CLI_ARGS}} helmfile: cmds: diff --git a/config.yaml.template b/config.yaml.template index b977383..b2d579b 100644 --- a/config.yaml.template +++ b/config.yaml.template @@ -43,6 +43,7 @@ github: -----END RSA PRIVATE KEY----- crossplane_workload_identity: + create: true clientId: tenantId: diff --git a/packages/addons/values.yaml b/packages/addons/values.yaml index 57fc330..88dea7d 100644 --- a/packages/addons/values.yaml +++ b/packages/addons/values.yaml @@ -148,6 +148,9 @@ external-dns: name: azure domainFilters: - "{{ .metadata.annotations.domain }}" + additionalResources: + - manifestPath: "manifests" + type: "manifests" selector: matchExpressions: - key: environment diff --git a/packages/argo-cd/manifests/argo-cd-github-app.yaml b/packages/argo-cd/manifests/argo-cd-github-app.yaml new file mode 100644 index 0000000..c11ae65 --- /dev/null +++ b/packages/argo-cd/manifests/argo-cd-github-app.yaml @@ -0,0 +1,85 @@ +# Github App Secret for ArgoCD + +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: github-app-org + namespace: argocd +spec: + refreshInterval: "15m" + secretStoreRef: + name: azure-keyvault + kind: ClusterSecretStore + target: + name: github-app-org + template: + metadata: + labels: + argocd.argoproj.io/secret-type: repo-creds + data: + type: git + url: "{{ .url }}" + githubAppID: "{{ .githubAppID }}" + githubAppInstallationID: "{{ .githubAppInstallationID }}" + githubClientID: "{{ .githubClientID }}" + githubClientSecret: "{{ .githubClientSecret }}" + githubWebhookURL: "{{ .githubWebhookURL }}" + githubWebhookSecret: "{{ .githubWebhookSecret }}" + githubAppPrivateKey: "{{ .githubAppPrivateKey }}" + data: + - secretKey: url + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.orgURL + - secretKey: githubAppID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.appId + - secretKey: githubAppInstallationID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.installationId + - secretKey: githubClientID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.clientId + - secretKey: githubClientSecret + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.clientSecret + - secretKey: githubWebhookSecret + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.webhookSecret + - secretKey: githubWebhookURL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.webhookUrl + - secretKey: githubAppPrivateKey + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + metadataPolicy: None + property: github.privateKey diff --git a/packages/argo-cd/manifests/hub-cluster-secret.yaml b/packages/argo-cd/manifests/hub-cluster-secret.yaml new file mode 100644 index 0000000..1be9bea --- /dev/null +++ b/packages/argo-cd/manifests/hub-cluster-secret.yaml @@ -0,0 +1,137 @@ +# in-cluster ArgoCD cluster Secret for passing metadata to ApplicationSets + +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: hub-cluster-secret + namespace: argocd +spec: + refreshInterval: "15m" + secretStoreRef: + name: azure-keyvault + kind: ClusterSecretStore + target: + name: cnoe + template: + metadata: + labels: + argocd.argoproj.io/secret-type: cluster + environment: "control-plane" + annotations: + addonsRepoURL: "{{ .addonsRepoURL }}" + addonsRepoRevision: "{{ .addonsRepoRevision }}" + addonsRepoBasepath: "{{ .addonsRepoBasepath }}" + subscription: "{{ .subscription }}" + location: "{{ .location }}" + resourceGroup: "{{ .resourceGroup }}" + clusterName: "{{ .clusterName }}" + clusterOIDCIssuerURL: "{{ .clusterOIDCIssuerURL }}" + domain: "{{ .domain }}" + keyvault: "{{ .keyvault }}" + pathRouting: "{{ .pathRouting }}" + environment: "control-plane" + crossplaneClientId: "{{ .crossplaneClientId }}" + crossplaneTenantId: "{{ .crossplaneTenantId }}" + letsencryptEnv: "{{ .letsencryptEnv }}" + data: + name: "{{ .clusterName }}" + server: https://kubernetes.default.svc + data: + - secretKey: addonsRepoURL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: repo.url + metadataPolicy: None + - secretKey: addonsRepoRevision + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: repo.revision + metadataPolicy: None + - secretKey: addonsRepoBasepath + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: repo.basepath + metadataPolicy: None + - secretKey: subscription + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: subscription + metadataPolicy: None + - secretKey: location + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: location + metadataPolicy: None + - secretKey: resourceGroup + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: resource_group + metadataPolicy: None + - secretKey: clusterName + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: cluster_name + metadataPolicy: None + - secretKey: clusterOIDCIssuerURL + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: cluster_oidc_issuer_url + metadataPolicy: None + - secretKey: domain + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: domain + metadataPolicy: None + - secretKey: keyvault + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: keyvault + metadataPolicy: None + - secretKey: pathRouting + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: path_routing + metadataPolicy: None + - secretKey: crossplaneClientId + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: crossplane_workload_identity.clientId + metadataPolicy: None + - secretKey: crossplaneTenantId + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: crossplane_workload_identity.tenantId + metadataPolicy: None + - secretKey: letsencryptEnv + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: letsencrypt_env + metadataPolicy: None diff --git a/packages/argo-cd/values.yaml.gotmpl b/packages/argo-cd/values.yaml.gotmpl index c42f27b..40acdf4 100644 --- a/packages/argo-cd/values.yaml.gotmpl +++ b/packages/argo-cd/values.yaml.gotmpl @@ -1,33 +1,7 @@ {{- $config := (readFile "../../config.yaml") | fromYaml -}} -global: - domain: {{ ternary $config.domain (printf "argocd.%s" $config.domain) $config.path_routing }} - -server: - ingress: - annotations: - {{ if not $config.path_routing -}} - cert-manager.io/cluster-issuer: letsencrypt-{{ $config.letsencrypt_env }} - {{ end -}} - path: {{ ternary "/argocd" "/" $config.path_routing }} - -configs: - cm: - oidc.config: | - name: Keycloak - issuer: https://{{ ternary (printf "%s/keycloak" $config.domain) (printf "keycloak.%s" $config.domain) $config.path_routing }}/realms/cnoe - clientID: argocd - enablePKCEAuthentication: true - requestedScopes: - - openid - - profile - - email - - groups - params: - 'server.basehref': {{ ternary "/argocd" "/" $config.path_routing }} - 'server.rootpath': {{ ternary "argocd" "" $config.path_routing }} - extraObjects: + - apiVersion: v1 kind: Secret type: Opaque @@ -55,6 +29,7 @@ extraObjects: stringData: name: {{ $config.cluster_name }} server: https://kubernetes.default.svc + - apiVersion: v1 kind: Secret type: Opaque diff --git a/packages/argo-workflows/manifests/external-secrets.yaml b/packages/argo-workflows/manifests/external-secrets.yaml index 36b3e7b..6d77366 100644 --- a/packages/argo-workflows/manifests/external-secrets.yaml +++ b/packages/argo-workflows/manifests/external-secrets.yaml @@ -3,6 +3,8 @@ kind: ExternalSecret metadata: name: keycloak-oidc namespace: argo + annotations: + argocd.argoproj.io/sync-wave: "-10" spec: secretStoreRef: name: keycloak diff --git a/packages/backstage/manifests/external-secrets.yaml b/packages/backstage/manifests/external-secrets.yaml index 5ae3c39..f60732d 100644 --- a/packages/backstage/manifests/external-secrets.yaml +++ b/packages/backstage/manifests/external-secrets.yaml @@ -68,7 +68,7 @@ metadata: name: postgres-password namespace: backstage annotations: - argocd.argoproj.io/sync-wave: "-10" + argocd.argoproj.io/sync-wave: "-20" spec: length: 48 digits: 5 diff --git a/packages/crossplane/manifests/provider-kubernetes-config.yaml b/packages/crossplane/manifests/provider-kubernetes-config.yaml new file mode 100644 index 0000000..7829be1 --- /dev/null +++ b/packages/crossplane/manifests/provider-kubernetes-config.yaml @@ -0,0 +1,29 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: provider-kubernetes-config + namespace: crossplane-system + annotations: + argocd.argoproj.io/sync-wave: "50" +spec: + template: + spec: + serviceAccountName: upbound-controller-manager + restartPolicy: Never + containers: + - name: provider-kubernetes-config + image: docker.io/bitnamilegacy/kubectl + command: ["/bin/bash", "-c"] + args: + - | + #! /bin/bash + set -e -o pipefail + + while [[ $(kubectl -n crossplane-system get sa -o yaml | yq '[.items[] | select(.metadata.name=="*provider-kubernetes*")] | length') -eq 0 ]]; do + sleep 5 + done + SA=$(kubectl -n crossplane-system get sa -o yaml | yq '.items[] | select(.metadata.name=="*provider-kubernetes*").metadata.name') + kubectl create clusterrolebinding provider-kubernetes-admin-binding \ + --clusterrole cluster-admin \ + --serviceaccount="crossplane-system:${SA}" && \ + echo "Done" || echo "Error" diff --git a/packages/external-dns/manifests/external-secrets.yaml b/packages/external-dns/manifests/external-secrets.yaml new file mode 100644 index 0000000..fb147f6 --- /dev/null +++ b/packages/external-dns/manifests/external-secrets.yaml @@ -0,0 +1,53 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: external-dns-azure + namespace: external-dns + annotations: + argocd.argoproj.io/sync-wave: "-10" +spec: + refreshInterval: "0" + secretStoreRef: + name: azure-keyvault + kind: ClusterSecretStore + target: + name: external-dns-azure + template: + data: + azure.json: | + { + "aadClientId": "{{ .aadClientId }}", + "tenantId": "{{ .tenantId }}", + "subscriptionId": "{{ .subscriptionId }}", + "resourceGroup": "{{ .resourceGroup }}", + "useWorkloadIdentityExtension": true + } + data: + - secretKey: aadClientId + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: externaldns_workload_identity.clientId + metadataPolicy: None + - secretKey: tenantId + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: externaldns_workload_identity.tenantId + metadataPolicy: None + - secretKey: subscriptionId + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: subscription + metadataPolicy: None + - secretKey: resourceGroup + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: config + property: resource_group + metadataPolicy: None diff --git a/packages/keycloak/manifests/external-secrets.yaml b/packages/keycloak/manifests/external-secrets.yaml index 63b2156..50f18e3 100644 --- a/packages/keycloak/manifests/external-secrets.yaml +++ b/packages/keycloak/manifests/external-secrets.yaml @@ -4,6 +4,8 @@ kind: ExternalSecret metadata: name: keycloak-config namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "-10" spec: refreshInterval: "0" secretStoreRef: @@ -67,6 +69,8 @@ kind: Password metadata: name: postgres-keycloak-password namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "-20" spec: length: 32 digits: 5 @@ -80,6 +84,8 @@ kind: Password metadata: name: keycloak-user-password namespace: keycloak + annotations: + argocd.argoproj.io/sync-wave: "-20" spec: length: 32 digits: 5 diff --git a/private/.gitkeep b/private/.gitkeep new file mode 100644 index 0000000..e69de29 From a0195886fef957aeea8778a8778898b43d825d86 Mon Sep 17 00:00:00 2001 From: Bowen Sun Date: Mon, 29 Sep 2025 17:27:09 +0100 Subject: [PATCH 6/8] docs: update docs Signed-off-by: Bowen Sun --- README.md | 524 +- TROUBLESHOOTING.md | 52 - Taskfile.yml | 2 +- config.yaml.template | 22 +- docs/DEMO.md | 145 + docs/TASKFILE.md | 88 + docs/TROUBLESHOOTING.md | 595 ++ docs/examples/app-with-aws-resources.md | 0 docs/examples/demo.md | 43 - docs/examples/spark/pi.yaml | 45 - .../template-generation/data-on-eks.yaml | 94 - docs/images/argocd-github-app.png | Bin 48479 -> 0 bytes docs/images/backstage-github-app.png | Bin 74537 -> 0 bytes docs/images/overview.excalidraw | 7857 ----------------- docs/images/overview.png | Bin 216985 -> 195653 bytes docs/installation_flow.md | 88 - docs/installation_with_idpbuilder.md | 347 - docs/troubleshooting.md | 56 - 18 files changed, 1087 insertions(+), 8871 deletions(-) delete mode 100644 TROUBLESHOOTING.md create mode 100644 docs/DEMO.md create mode 100644 docs/TASKFILE.md create mode 100644 docs/TROUBLESHOOTING.md delete mode 100644 docs/examples/app-with-aws-resources.md delete mode 100644 docs/examples/demo.md delete mode 100644 docs/examples/spark/pi.yaml delete mode 100644 docs/examples/template-generation/data-on-eks.yaml delete mode 100644 docs/images/argocd-github-app.png delete mode 100644 docs/images/backstage-github-app.png delete mode 100644 docs/images/overview.excalidraw delete mode 100644 docs/installation_flow.md delete mode 100644 docs/installation_with_idpbuilder.md delete mode 100644 docs/troubleshooting.md diff --git a/README.md b/README.md index d9a09d5..c888f41 100644 --- a/README.md +++ b/README.md @@ -2,358 +2,328 @@ > **_NOTE:_** Applications deployed in this repository are not meant or configured for production. -# Installation - -- Installation script must be used with a AKS cluster because we use Workload Identity to talk to Azure services. -- Components are installed as ArgoCD Applications. -- Files under the `/packages` directory are meant to be usable without any modifications. This means certain configuration options like domain name must be passed outside of this directory. e.g. use ArgoCD's Helm parameters. - -## Basic installation flow - -The installation process follows the following pattern. - -1. Create a GitHub App for Backstage integration. -2. Install ArgoCD and configure it to be able to monitor your GitHub Organization. -3. Run Terraform. Terraform is responsible for: - - Managing Azure resources necessary for the Kubernetes operators to function. Mostly IAM Roles. - - Install components as ArgoCD applications. Pass IAM role information where necessary. - - Apply Kubernetes manifests such as secrets and ingress where information cannot easily be passed to ArgoCD. - - Run all the above in an order because installation order matters for many of these components. For example, Keycloak must be installed and ready before Backstage can be installed and configured. - -```mermaid ---- -title: Installation Process ---- -erDiagram - "Local Machine" ||--o{ "ArgoCD" : "1. installs" - "Local Machine" ||--o{ "Terraform" : "2. invokes" - "Terraform" ||--o{ "Azure Resources" : "3. creates" - "Terraform" ||--o{ "ArgoCD" : "4. create ArgoCD Apps" - "ArgoCD" ||--o{ "This Repo" : "pulls manifests" - "ArgoCD" ||--o{ "Components" : "installs to the cluster" -``` - -This installation pattern where some Kubernetes manifests are handled in Terraform while others are handled in GitOps manner may not be suitable for many organizations. If you can be certain about parameters such as domain name and certificate handling, it is better to utilize GitOps approach where these information are committed to a repository. The reason it is handled this way is to allow for customization for different organizations without forking this repository and committing organization specific information into the repository. - -## Secret handling - -Currently handled outside of repository and set via bash script. Secrets such as GitHub token and TLS private keys are stored in the `${REPO_ROOT}/private` directory. - -We may be able to use sealed secrets with full GitOps approach in the future. - -## Requirements - -- Github **Organization** (free to create) -- An existing AKS cluster version (1.27+) -- Azure CLI (2.13+) -- [kubelogin](https://github.com/Azure/kubelogin) -- Kubectl CLI (1.27+) -- jq -- git -- yq -- curl -- kustomize -- node + npm (if you choose to create GitHub App via CLI) - -## Create GitHub Apps for your GitHub Organization - -GitHub app is used to enable integration between Backstage and GitHub. -This allows you for integration actions such as automatically importing Backstage configuration such as Organization information and templates. - -We strongly encourage you to create a **dedicated GitHub organization**. If you don't have an organization for this purpose, please follow [this link](https://docs.github.com/en/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch) to create one. - -There are two ways to create GitHub integration with Backstage. You can use the Backstage CLI, or create it manually. See [this page](https://backstage.io/docs/integrations/github/github-apps) for more information on creating one manually. Once the app is created, place it under the private directory with the name `github-integration.yaml`. - -To create one with the CLI, follow the steps below. If you are using cli to create GitHub App, please make sure to select third option in the permissions prompt, if your GitHub App access needs publishing access to create GitHub repositories for your backstage templates. + +# CNOE Azure Reference Implementation + +This repository provides a reference implementation for deploying Cloud Native Operations Enabler (CNOE) components on Azure Kubernetes Service (AKS) using GitOps principles. + + +## Table of Contents + +- [Architecture](#architecture) + - [Deployed Components](#deployed-components) +- [Important Notes](#important-notes) +- [Prerequisites](#prerequisites) + - [Required Azure Resources](#required-azure-resources) + - [Setup Guidance for Azure Resources](#setup-guidance-for-azure-resources) + - [GitHub Integration Setup](#github-integration-setup) + - [Create GitHub App for Backstage](#create-github-app-for-backstage) + - [Create GitHub Token](#create-github-token) +- [Installation Flow](#installation-flow) +- [Security Notes](#security-notes) +- [Installation Steps](#installation-steps) + - [Installation Requirements](#installation-requirements) + - [1. Configure the Installation](#1-configure-the-installation) + - [DNS and TLS Configuration](#dns-and-tls-configuration) + - [Automatic (Recommended)](#automatic-recommended) + - [Manual](#manual) + - [2. Install Components](#2-install-components) + - [3. Monitor Installation](#3-monitor-installation) + - [4. Get Access URLs](#4-get-access-urls) + - [5. Access Backstage](#5-access-backstage) +- [Usage](#usage) +- [Update Component Configurations](#update-component-configurations) + - [Backstage Templates](#backstage-templates) +- [Uninstall](#uninstall) +- [Contributing](#contributing) +- [Troubleshooting](#troubleshooting) +- [Potential Enhancements](#potential-enhancements) + +## Architecture + +- Installation is managed through **Taskfile** and **Helmfile** + - See [TASKFILE.md](./docs/TASKFILE.md) for information about the tasks defined in the `Taskfile.yml` file. +- Components are deployed as **ArgoCD Applications** +- Uses **Azure Workload Identity** for secure authentication to Azure services +- Files under the `/packages` directory are meant to be usable without modifications +- Configuration is externalised through the `config.yaml` file + +### Deployed Components + +| Component | Version | Purpose | +| ---------------- | ---------- | ------------------------------ | +| ArgoCD | 8.0.14 | GitOps continuous deployment | +| Crossplane | 2.0.2-up.4 | Infrastructure as Code | +| Ingress-nginx | 4.7.0 | Ingress controller | +| ExternalDNS | 1.16.1 | Automatic DNS management | +| External-secrets | 0.17.0 | Secret management | +| Cert-manager | 1.17.2 | TLS certificate management | +| Keycloak | 24.7.3 | Identity and access management | +| Backstage | 2.6.0 | Developer portal | +| Argo-workflows | 0.45.18 | Workflow orchestration | + +## Important Notes + +- **Azure Resource Management**: This repository does not manage Azure infrastructure. AKS cluster, DNS zone, Key Vault, and related resources must be provisioned separately using your organization's infrastructure management approach. +- **Production Readiness**: The helper tasks in this repository are for creating Azure resources for demo purposes only. Any production deployments should follow enterprise infrastructure management practices. +- **Configuration Management**: All configuration is centralised in `config.yaml`. The `private/` directory is only for temporary files during development. + +## Prerequisites + +### Required Azure Resources + +Before using this reference implementation, you **MUST** have the following Azure resources already created and configured: + +1. **AKS Cluster** (1.27+) with: + - OIDC Issuer enabled (`--enable-oidc-issuer`) + - Workload Identity enabled (`--enable-workload-identity`) + - Sufficient node capacity for all components + - For example, the demonstration AKS cluster created with the helper task `azure:creds:create` has node pool with the node size set to `standard_d4alds_v6` by default +2. **Azure DNS Zone** + - A registered domain with Azure DNS as the authoritative DNS service +3. **Azure Key Vault** + - For storing configuration secrets and certificates + - Must be accessible from the AKS cluster +4. **Crossplane Workload Identity** + - Azure Managed Identity with appropriate permissions + - Federated credentials configured for the AKS cluster OIDC issuer + +> **Important**: +> - All Azure resources must be in the same subscription and resource group +> - These resources are prerequisites and must be provisioned using your organisation's preferred infrastructure management approach (Terraform, Bicep, ARM templates, etc.). The tasks in this repository that create Azure resources (`azure:creds:create`, `test:aks:create`, etc.) are helper functions for demonstration purposes only and are **NOT recommended for production deployments**. + +#### Setup Guidance for Azure Resources + +For setting up the prerequisite Azure resources, refer to the official Azure documentation: + +- [Create an AKS cluster](https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough) +- [Azure DNS zones](https://docs.microsoft.com/en-us/azure/dns/) +- [Azure Key Vault](https://docs.microsoft.com/en-us/azure/key-vault/) +- [Azure Workload Identity](https://azure.github.io/azure-workload-identity/) + +### GitHub Integration Setup + +#### Create GitHub App for Backstage + +You need a GitHub App to enable Backstage integration with your GitHub organisation. + +**Option 1: Using Backstage CLI (Recommended)** ```bash npx '@backstage/cli' create-github-app ${GITHUB_ORG_NAME} -# If prompted, select all for permissions or select permissions listed in this page https://backstage.io/docs/integrations/github/github-apps#app-permissions -# In the browser window, allow access to all repositories then install the app. +# Select appropriate permissions when prompted +# Install the app to your organisation in the browser -? Select permissions [required] (these can be changed later but then require approvals in all installations) (Press to select, to toggle all, to invert selection, -and to proceed) - β—‰ Read access to content (required by Software Catalog to ingest data from repositories) - β—‰ Read access to members (required by Software Catalog to ingest GitHub teams) -❯◯ Read and Write to content and actions (required by Software Templates to create new repositories) - -# move it to a "private" location. +# Move the credentials file to a temporary location mkdir -p private GITHUB_APP_FILE=$(ls github-app-* | head -n1) mv ${GITHUB_APP_FILE} private/github-integration.yaml ``` -**The file created above contains credentials. Handle it with care.** - -The rest of the installation process assumes the GitHub app credentials are available at `private/github-integration.yaml` +**Option 2: Manual Creation** +Follow [Backstage GitHub App documentation](https://backstage.io/docs/integrations/github/github-apps) and save the credentials as `private/github-integration.yaml`. -If you want to delete the GitHUb application, follow [these steps](https://docs.github.com/en/apps/maintaining-github-apps/deleting-a-github-app). +> **Note**: The `private/` directory is for temporary files during development/testing only. All configuration must be properly stored in `config.yaml` for the actual deployment. -## Create a GitHub token +#### Create GitHub Token -A GitHub token is needed by ArgoCD to get information about repositories under your Organization. - -The following permissions are needed: +Create a GitHub Personal Access Token with these permissions: - Repository access for all repositories -- Read-only access to: Administration, Contents, and Metadata. - Get your GitHub personal access token from: https://github.com/settings/tokens?type=beta +- Read-only access to: Administration, Contents, and Metadata -Once you have your token, save it under the private directory with the name `github-token`. For example: +Save the token value temporarily as you will need it when creating the `config.yaml` file. -```bash -# From the root of this repository. -$ mkdir -p private -$ vim private/github-token # paste your token -# example output -$ cat private/github-token -github_pat_ABCDEDFEINDK.... -``` +## Installation Flow -## Install - -Follow the following steps to get started. - -1. Create GitHub apps and GitHub token as described above. -2. Create a new AKS cluster. We do not include AKS cluster in the installation module because AKS cluster requirements vary between organizations and the focus of this is integration of different projects. If you prefer, you can create a new basic cluster with the included commands: - - ```bash - az group create --name $(yq '.resource_group' setups/config.yaml) --location $(yq '.region' setups/config.yaml) - ``` - - ```bash - az aks create \ - --name $(yq '.cluster_name' config.yaml) \ - --location $(yq '.location' config.yaml) \ - --resource-group $(yq '.resource_group' config.yaml) \ - --kubernetes-version ${AKS_VERSION:-1.33} \ - --sku base \ - --enable-oidc-issuer \ - --enable-workload-identity \ - --node-vm-size ${AKS_NODE_SIZE:-standard_d4alds_v6} - ``` - - ```bash - az aks disable-addons -a monitoring --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) && \ - az aks update \ - --name $(yq '.cluster_name' config.yaml) \ - --resource-group $(yq '.resource_group' config.yaml) \ - --disable-azure-monitor-metrics && \ - az aks update \ - --name $(yq '.cluster_name' config.yaml) \ - --resource-group $(yq '.resource_group' config.yaml) \ - --aad-admin-group-object-ids $(az ad group show -g aks-admin | yq '.id') - ``` - - ```bash - kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io --force=true --interactive=false --now=true gatekeeper-validating-webhook-configuration - kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io --force=true --interactive=false --now=true gatekeeper-mutating-webhook-configuration - kubectl delete ns --force=true --interactive=false --now=true gatekeeper-system - kubectl api-resources -o json | jq -rc '.resources[] | select(.group != null) | select(.group | match(".gatekeeper.sh")) | .kind + .group' | xargs -I{} kubectl delete crd --force=true --interactive=false --now=true {} - ``` - - ```bash - az aks delete \ - --name $(yq '.cluster_name' config.yaml) \ - --resource-group $(yq '.resource_group' config.yaml) \ - --yes - ``` - - ```bash - az aks get-credentials --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) - ``` - - ```bash - az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) --query "oidcIssuerProfile.issuerUrl" -o tsv - ``` - -3. If you don't have a public registered Azure DNS zone, [register a Azure DNS domain](https://learn.microsoft.com/en-us/azure/dns/) (be sure to use Azure DNS Zone as the DNS service for the domain). We **strongly encourage creating a dedicated sub domain** for this. If you'd rather manage DNS yourself, you can set `enable_dns_management` in the config file. -4. Get the host zone id and put it in the config file. - - ```bash - az network dns zone list --query "[?name=='${YOUR_DOMAIN_NAME}'].id" - # in the setups/config file, update the zone id. - hosted_zone_id:: /subscriptions/${SUBSCRIPTION_UUID}/resourceGroups/${DOMAIN_RESOURCE_GROUP}/providers/Microsoft.Network/dnszones/${YOUR_DOMAIN_NAME} - ``` - -5. Update the [`setups/config`](setups/config.yaml) file with your own values. -6. Run `setups/install.sh` and follow the prompts. See the section below about monitoring installation progress. -7. Once installation completes, navigate to `backstage.` and log in as `user1`. Password is available as a secret. You may need to wait for DNS propagation to complete to be able to login. May take ~10 minutes. - - ```bash - kubectl get secrets -n keycloak keycloak-user-config -o go-template='{{range $k,$v := .data}}{{printf "%s: " $k}}{{if not $v}}{{$v}}{{else}}{{$v | base64decode}}{{end}}{{"\n"}}{{end}}' - ``` - -### Monitoring installation progress - -Components are installed as ArgoCD Applications. You can monitor installation progress by going to ArgoCD UI. +The installation process follows this pattern: -```bash -# Get the admin password -kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d +1. Configure your environment settings in `config.yaml` + - The [Installation](#installation) process will include creating a `config.yaml` file using the [`config.yaml.template`](https://github.com/livewyer-ops/reference-implementation-azure/blob/v2/config.yaml.template) in this repository +2. Run `task install` which: + - Sets up Azure Workload Identity credentials + - Deploys ArgoCD via Helmfile + - Creates ArgoCD ApplicationSets that deploy all other components + - Configures workload identities and RBAC automatically -kubectl port-forward svc/argocd-server -n argocd 8081:80 +```mermaid +--- +title: Installation Process +--- +erDiagram + "Local Machine" ||--o{ "Taskfile" : "1. executes" + "Taskfile" ||--o{ "Azure CLI" : "2. configures identity" + "Taskfile" ||--o{ "Helmfile" : "3. deploys ArgoCD" + "Helmfile" ||--o{ "ArgoCD" : "4. installs" + "ArgoCD" ||--o{ "This Repo" : "pulls manifests" + "ArgoCD" ||--o{ "Components" : "installs via ApplicationSets" ``` -Go to [`http://localhost:8081`](http://localhost:8081) and login with the username `admin` and password obtained above. In the UI you can look at resources created, their logs, and events. - -### If you installed it without automatic DNS configuration. +## Security Notes -If you set `enable_dns_management: false`, you are responsible for updating DNS records, thus external-dns is not installed. You have to set the following DNS records: +- GitHub App credentials contain sensitive information - handle with care +- Configuration secrets are stored in Azure Key Vault +- Workload Identity is used for secure Azure authentication +- TLS encryption is used for all external traffic -- `backstage.` -- `keycloak.` -- `argo.` -- `argocd.` +## Installation Steps -Point these records to the value returned by the following command. +### Installation Requirements -```bash -kubectl get svc -n ingress-nginx ingress-nginx-controller -o jsonpath='{.status.loadBalancer.ingress[0].hostname}' -``` +- **Azure CLI** (2.13+) with subscription access +- **kubectl** (1.27+) +- **kubelogin** for AKS authentication +- **yq** for YAML processing +- **jq** for JSON processing +- **curl** and **git** +- **helm** (3.x) +- **helmfile** +- **task** (Taskfile executor) +- A **GitHub Organisation** (free to create) -### If you installed it without Cert Manager. +### 1. Configure the Installation -If you set `MANAGED_CERT=false`, you are responsible for managing TLS certs, thus cert-manager is not installed. You must [create TLS secrets accordingly](https://kubernetes.io/docs/concepts/services-networking/ingress/#tls). - -Run the following command to find where to create secrets. +Copy and customise the configuration: ```bash -output=$(kubectl get ingress --all-namespaces -o json | jq -r '.items[] | "\(.metadata.namespace) \(.spec.rules[].host) \(.spec.tls[].secretName)"') -echo -e "Namespace \t Hostname \t TLS Secret Name" -echo -e "$output" +cp config.yaml.template config.yaml +# Edit config.yaml with your values ``` -Secret format should be something like: - -```yaml -apiVersion: v1 -kind: Secret -metadata: - name: backstage. - namespace: backstage -data: - tls.crt: - tls.key: -type: kubernetes.io/tls -``` +Key configuration sections in `config.yaml`: -## What was created? +- `repo`: The details of the repository hosting the reference azure implementation code +- `cluster_name`: Your AKS cluster name +- `subscription`: Your Azure subscription ID +- `location`: The target Azure region +- `resource_group`: Your Azure resource group +- `cluster_oidc_issuer_url`: The AKS OIDC issuer URL +- `domain`: The base domain name you will be using for exposing services +- `keyvault`: Your Azure Key Vault name +- `github`: GitHub App credentials (from the [Github Integration Setup](#github-integration-setup)) -The following components are installed if you chose the full installation option. +#### DNS and TLS Configuration -| Name | Version | -| ---------------- | ------- | -| argo-workflows | v3.4.8 | -| argocd | v2.7.6 | -| backstage | v1.16.0 | -| cert-manager | v1.12.2 | -| crossplane | v1.12.2 | -| external-dns | v0.13.5 | -| ingress-nginx | v1.8.0 | -| keycloak | v22.0.0 | -| external-secrets | v0.9.2 | +##### Automatic (Recommended) -### Things created outside of the cluster +- Set your domain in `config.yaml` +- ExternalDNS manages DNS records automatically +- Cert-manager handles Let's Encrypt certificates -If full installation is done, you should have these DNS entries available. They all point to the Network Load Balancer. +##### Manual -- `backstage.` -- `argo.` -- `keycloak.` +- Set DNS records to point to the ingress load balancer IP +- Provide your own TLS certificates as Kubernetes secrets -You can confirm these by querying at a register. +### 2. Install Components -```bash -dig A `backstage.` @1.1.1.1 +If installing the reference implementation on a machine for the first time run: -kubectl get svc -n ingress-nginx +```bash +task init ``` -A Azure Load Balancer is also created. This is managed by the Kubernetes Service and points to ingress-nginx pod. This pod is responsible for routing requests to correct places. As a result, HTTPS endpoints are created with valid certificates. +If you haven't previously run `task init`, then you will be prompted to install several Helm plugins required by Helmfile when you run the next command: ```bash -openssl s_client -showcerts -servername id. -connect id.:443 <<< "Q" -curl https://backstage. +# Install all components +task install ``` -## How to access the Backstage instance? +> **Notes**: +> - `task install` will update the `config.yaml` file +> - Post-installation, use `task sync` (the equivalent to running `helmfile sync`) to apply updates. See the [Task Usage Guidelines](docs/TASKFILE.md) for more information. -When you open a browser window and go to `https://backstage.`, you should be prompted to login. -Two users are created during the installation process: `user1` and `user2`. Their passwords are available in the keycloak namespace. +### 3. Monitor Installation -```bash -kubectl get secrets -n keycloak keycloak-user-config -o go-template='{{range $k,$v := .data}}{{printf "%s: " $k}}{{if not $v}}{{$v}}{{else}}{{$v | base64decode}}{{end}}{{"\n"}}{{end}}' -``` +Once ArgoCD is running, monitor the installation progress of the other components by checking the Argo CD UI: -## Uninstall +```bash +# Get ArgoCD admin password +kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d -1. Run `setups/uninstall.sh` and follow the prompts. -2. Remove GitHub app from your Organization by following [these steps](https://docs.github.com/en/apps/maintaining-github-apps/deleting-a-github-app). -3. Remove token from your GitHub Organization by following [these steps](https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization). -4. Remove the created GitHub Organization. +# Port forward to ArgoCD +kubectl port-forward svc/argocd-server -n argocd 8080:80 +``` -
- Uninstall details +Access the ArgoCD UI at http://localhost:8080 with username `admin`. -### Resources deleted +### 4. Get Access URLs -Currently resources created by applications are not deleted. For example, if you have Spark Jobs running, they are not deleted and may block deletion of the spark-operator app. +Use the `task get:urls` command to fetch all the URLs. -
+The URL structure of the URLs will depend on the type of routing you set in the configuration. Examples of the set of URLs that can be outputted are below: -## What can you do in Backstage? +**Domain-based routing** (default): -See [this doc](./demo.md) for demos! +- Backstage: `https://backstage.YOUR_DOMAIN` +- ArgoCD: `https://argocd.YOUR_DOMAIN` +- Keycloak: `https://keycloak.YOUR_DOMAIN` +- Argo Workflows: `https://argo-workflows.YOUR_DOMAIN` -## Possible issues +**Path-based routing** (set `path_routing: true`): -### Cert-manager +- Backstage: `https://YOUR_DOMAIN/` +- ArgoCD: `https://YOUR_DOMAIN/argocd` +- Keycloak: `https://YOUR_DOMAIN/keycloak` +- Argo Workflows: `https://YOUR_DOMAIN/argo-workflows` -- by default it uses http-01 challenge. If you'd prefer using dns-01, you can update the ingress files. TODO AUTOMATE THIS -- You may get events like `Get "http:///.well-known/acme-challenge/09yldI6tVRvtWVPyMfwCwsYdOCEGGVWhmb1PWzXwhXI": dial tcp: lookup on 10.100.0.10:53: no such host`. This is due to DNS propagation delay. It may take ~10 minutes. +### 5. Access Backstage -## Troubleshooting +Once the Keycloak and Backstage are installed, check you can login to the Backstage UI with a default user: -See [the troubleshooting doc](TROUBLESHOOTING.md) for more information. +```bash +# Get user password +kubectl -n keycloak get secret keycloak-config -o yaml | yq '.data.USER1_PASSWORD | @base64d' +``` -## Creation Order notes +## Usage -
- Click to expand +See [DEMO.md](docs/DEMO.md) for information on how to navigate the platform and for usage examples. -## Things created outside of the cluster with Keycloak SSO enabled. +## Update Component Configurations -- Azure DNS Zone records. Azure DNS hosted zones are not created. You must also register it if you want to be able to access through public DNS. These are managed by the external DNS controller. +If you want to try customising component configurations, you can do so by updating the `packages/addons/values.yaml` file and using `task sync` to apply the updates. -- Azure Load Balancer. This is just the entrance to the Kubernetes cluster. This points to the default installation of Ingress Nginx. +### Backstage Templates -- TLS Certificates issued by Let's Encrypt. These are managed by cert-manager based on values in Ingress. They use the production issuer which means we must be very careful with how many and often we request certificates from them. The uninstall scripts backup certificates to the `private` directory to avoid re-issuing certificates. +Backstage templates can be found in the `templates/` directory -These resources are controlled by Kubernetes controllers and thus should be deleted using controllers. +## Uninstall -### Keycloak SSO with DNS and TLS certificates +```bash +# Remove all components +task uninstall -If using keycloak SSO with fully automated DNS and certificate management, it must be: +# Clean up GitHub App and tokens manually +# Delete the GitHub organisation if no longer needed +``` -1. ingress-nginx -2. cert-manager -3. external-dns -4. keycloak -5. The rest of stuff +## Contributing -### Keycloak SSO with manual DNS and TLS Certificates +This reference implementation is designed to be: -If using keycloak SSO but manage DNS records and certificates manually. +- **Forkable**: Create your own version for your organisation +- **Customizable**: Modify configurations without changing core packages +- **Extensible**: Add new components following the established patterns -1. ingress-nginx -2. The rest of stuff minus cert-manager and external-dns +## Troubleshooting -In this case, you can issue your own certs and provide them as TLS secrets as specified in the `spec.tls[0].secretName` field of Ingress objects. -You can also let Load Balancer terminate TLS instead using the LB controller. This is not covered currently, but possible. +See [TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md) for common issues and detailed troubleshooting steps. -### No SSO +## Potential Enhancements -If no SSO, no particular installation order. Eventual consistency works. +The installation of this Azure reference implemenation will give you a starting point for the platform, however as previously stated applications deployed in this repository are not meant or configured for production. To push it towards production ready, you can make further enhancements that could include: -
+1. Modifying the basic and Argo workflow templates for your specific Azure use cases +2. Intergrating additional Azure services with Crossplane +3. Configuring auto-scaling for AKS and Azure resources +4. Adding OPA Gatekeeper for governance +5. Intergrating a monitoring stack. For example: + 1. Deploy Prometheus and Grafana + 2. Configure service monitors for Azure resources + 3. View metrics and Azure resource status in Backstage +6. Implementing GitOps-based environment promotion: + 1. **Development**: Deploy to dev environment via Git push + 2. **Testing**: Promote to test environment via ArgoCD + 3. **Production**: Use ArgoCD sync waves for controlled rollout diff --git a/TROUBLESHOOTING.md b/TROUBLESHOOTING.md deleted file mode 100644 index 11682dd..0000000 --- a/TROUBLESHOOTING.md +++ /dev/null @@ -1,52 +0,0 @@ -# Troubleshooting steps - -All applications are deployed as ArgoCD application. The best way is to navigate to ArgoCD UI and look at logs for each application. - -```bash -# Get the admin ArgoCD password -kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d -# Port forward to 8081. 8080 could be in-use by the install / uninstall scripts. -kubectl port-forward svc/argocd-server -n argocd 8081:80 - -Go to http://localhost:8081 -``` - -# Common issues - -## Argo Workflows - -### Argo Workflows controller stuck in Crash Loop. - -You may see error message like: - -``` -Error: Get "https:///realms/cnoe/.well-known/openid-configuration": dial tcp: lookup on 10.100.0.10:53: no such host -``` - -This is due to DNS propagation delay in the cluster. Once DNS entries are propagated (may take ~10 min), pods should start running. - -## Certificates - -General steps are [outlined here](https://cert-manager.io/docs/troubleshooting/). - -### Certificates not issued - -You may see something like this - -```bash -$ kubectl -n argo get certificate -NAME READY SECRET AGE -argo-workflows-prod-tls FALSE argo-workflows-prod-tls 3m52s - -$ kubectl -n argo get challenge -NAME STATE DOMAIN AGE -argo-workflows-prod-tls-qxfjq-1305584735-1533108683 pending argo. 91s -``` - -If you describe the challenge, you may see something like this. - -``` -Reason: Waiting for HTTP-01 challenge propagation: failed to perform self check GET request 'http://argo.DOMAIN_NAME/.well-known/acme-challenge/6AQ5cRc7J6FNQ9xGOBDI5_G1lHsNM5J5ivbS3iSHd3c': Get "http://argo.DOMAIN_NAME/.well-known/acme-challenge/6AQ5cRc7J6FNQ9xGOBDI5_G1lHsNM5J5ivbS3iSHd3c": dial tcp: lookup argo.DOMAIN_NAME on 10.100.0.10:53: no such host -``` - -This is due to DNS propagation delay in the cluster. Once DNS entries are propagated (may take ~10 min), certs should be issued. diff --git a/Taskfile.yml b/Taskfile.yml index 7f47a0e..5b46907 100644 --- a/Taskfile.yml +++ b/Taskfile.yml @@ -148,7 +148,7 @@ tasks: preconditions: - yq 'true' "{{.CONFIG_FILE}}" cmds: - - az account set --subscription "{{.SUBSCRIPTION_ID}}" + - az account set --subscription "{{.SUBSCRIPTION_ID}}" - az config set defaults.location="{{.LOCATION}}" defaults.group="{{.RESOURCE_GROUP}}" {{.AZ_CLI_OPTS}} azure:creds: diff --git a/config.yaml.template b/config.yaml.template index b2d579b..b996c59 100644 --- a/config.yaml.template +++ b/config.yaml.template @@ -1,10 +1,10 @@ ### Config for CNOE Azure Reference Implementation ### # Source: "https://github.com/livewyer-ops/reference-implementation-azure" -# Details of your repository fork +# Details of your repository hosting the reference azure implementation code repo: - url: "https://github.com/livewyer-ops/reference-implementation-azure" # This is the GITHUB URL of the fork in Github Org that you have created. - revision: "v2" # Branch or Tag which should be used for Argo CD Apps + url: "https://github.com//reference-implementation-azure" + revision: "main" # Branch or Tag which should be used for Argo CD Apps basepath: "packages" # Directory in which configuration of addons is stored # The name of the AKS cluster you are installing the reference implementation on. @@ -32,7 +32,7 @@ path_routing: false github: appId: "" installationId: "" - orgURL: https://github.com/< + orgURL: https://github.com/ clientId: clientSecret: webhookUrl: @@ -42,15 +42,15 @@ github: ... -----END RSA PRIVATE KEY----- -crossplane_workload_identity: - create: true - clientId: - tenantId: - letsencrypt_env: prod -# Tags for AWS resources +# Tags for Azure resources tags: - githubRepo: "github.com/livewyer-ops/reference-implementation-azure" + githubRepo: "github.com//reference-implementation-azure" env: "dev" project: "cnoe" + +crossplane_workload_identity: + create: true + clientId: + tenantId: diff --git a/docs/DEMO.md b/docs/DEMO.md new file mode 100644 index 0000000..3f23536 --- /dev/null +++ b/docs/DEMO.md @@ -0,0 +1,145 @@ + +# Demo Guide - CNOE Azure Reference Implementation + +This guide demonstrates the key features and capabilities of the CNOE Azure Reference Implementation through practical examples focused on Azure services and infrastructure. + + +## Best Practices Demonstrated + +### 1. GitOps Workflow + +- All changes through Git +- Declarative configuration +- Automated reconciliation + +### 2. Security + +- Workload Identity for Azure authentication +- Secret management with External Secrets +- TLS everywhere with cert-manager +- Configuration stored securely in Azure Key Vault + +### 3. Developer Experience + +- Self-service via Backstage templates +- Integrated tooling in single interface +- Documentation as code + +### 4. Operational Excellence + +- Infrastructure as Code +- Automated DNS and certificate management +- Comprehensive monitoring +- Centralized configuration management + + +## Table of Contents + +- [Prerequisites](#prerequisites) +- [Getting Started: Explore the Platform](#getting-started-explore-the-platform) + - [Crossplane](#crossplane) + - [Keycloak](#keycloak) + - [SSO Credentials](#sso-credentials) + - [Argo CD](#argo-cd) +- [Argo Workflows](#argo-workflows) + - [Backstage](#backstage) +- [Demo Scenarios](#demo-scenarios) + - [Scenario 1: Creating a New Application from Template](#scenario-1-creating-a-new-application-from-template) +- [Reading Material](#reading-material) +- [Feedback and Contributions](#feedback-and-contributions) + +## Prerequisites + +- Complete installation following the instructions in the [README.md](../README.md) file +- All prerequisite Azure resources (AKS cluster, DNS zone, Key Vault) are properly configured +- Access to Backstage UI at your configured domain +- Default user (`user1`) credentials from Keycloak + +## Getting Started: Explore the Platform + +After you installed the platform, before performing any operations/scenarios we recommend you first explore the platform. + +This section will provide you with instructions on you can access the UI for each component for you to explore. + +To begin the `task get:urls` command can be used to fetch all the URLs. + +### Crossplane + +An ingress has not been deployed for Crossplane, but there is a UI for it. + +If you wish to access the Crossplane UI, you can first run: + +```bash +kubectl port-forward service/webui -n crossplane-system 8080:80 +``` + +Then access the Crossplane UI at [localhost:8080](http://localhost:8080). + +See the [Crossplane Documentation](https://docs.crossplane.io/) for more information. + +### Keycloak + +To start exploring Keycloak, open the URL for your Keycloak instance in a web browser and login with the credentials for `cnoe-admin`: + +```bash +# Get Keycloak admin password +kubectl -n keycloak get secret keycloak-config -o yaml | yq '.data.KEYCLOAK_ADMIN_PASSWORD | @base64d' +``` + +See [Keycloak's Server Administration Guide](https://www.keycloak.org/docs/latest/server_admin/index.html) for more information + +#### SSO Credentials + +SSO is enabled with all other services being integrated with Keycloak. Fetch the credentials for `user1` with the following command: + +```bash +# Get user password +kubectl -n keycloak get secret keycloak-config -o yaml | yq '.data.USER1_PASSWORD | @base64d' +``` + +### Argo CD + +To start exploring ArgoCD, open the URL for your ArgoCD instance in a web browser and login with the Keycloak credentials for `user1`. + +See the [ArgoCD User Guide](https://argo-cd.readthedocs.io/en/stable/) for more information. + +## Argo Workflows + +To start exploring Argo Workflow, open the URL for your Argo Workflow instance in a web browser and login with the Keycloak credentials for `user1`. + +See [Argo Workflows Documents](https://argo-workflows.readthedocs.io/en/latest/) for more information and workflow examples can be in the [argoproj/argo-workflows](https://github.com/argoproj/argo-workflows/tree/master/examples) repository. + +### Backstage + +To start exploring Backstage, open the URL for your Backstage instance in a web browser and login with the Keycloak credentials for `user1`. + +Once logged in, explore the Backstage UI. + +> **Note: at the time of writing, all available templates are for AWS and therefore may not work if you attempt to create a component using them** + +See the [Backstage Documentation](https://backstage.io/docs/) for more information + +## Demo Scenarios + +### Scenario 1: Creating a New Application from Template + +@TODO creating templates for Azure is still to be completed [link to issue to be attached] + +## Reading Material + +Previously linked reading material and more: + +- [Backstage Documentation](https://backstage.io/docs/) +- [ArgoCD User Guide](https://argo-cd.readthedocs.io/en/stable/) +- [Argo Workflows Examples](https://github.com/argoproj/argo-workflows/tree/master/examples) +- [Crossplane Documentation](https://docs.crossplane.io/) +- [CNOE Project](https://cnoe.io/) +- [Azure Workload Identity](https://azure.github.io/azure-workload-identity/) + +## Feedback and Contributions + +Found an issue or have suggestions? + +- Open an issue in the repository +- Submit a pull request with improvements +- Join the CNOE community discussions diff --git a/docs/TASKFILE.md b/docs/TASKFILE.md new file mode 100644 index 0000000..bf1877a --- /dev/null +++ b/docs/TASKFILE.md @@ -0,0 +1,88 @@ +# Task Usage Guidelines + +This document gives an overview of the tasks defined in the Taskfile.yml. + +## Available Tasks + +```bash +task init # Initialize and validate configuration +task install # Full installation +task sync # Deploy/update components (equivalent to helmfile sync) +task diff # Show pending changes +task update # Update configuration secrets +task uninstall # Remove all components + +# Helper tasks (for demo/testing only): +task test:aks:create # Create test AKS cluster (NOT for production) +task test:aks:destroy # Delete test AKS cluster +task azure:creds:create # Create Azure credentials (demo only) +task azure:creds:delete # Delete Azure credentials (demo only) +``` + +> **Note**: Tasks may update the `config.yaml` + +## Production vs Demo Tasks + +**Production Tasks** (safe for production use): + +```bash +task install # Full installation +task sync # Update components (helmfile sync equivalent) +task update # Update configuration secrets +task diff # Show pending changes +task uninstall # Clean removal +``` + +**Demo/Helper Tasks** (for demonstration and testing only): + +```bash +task test:aks:create # Creates test AKS cluster - NOT for production +task test:aks:destroy # Removes test AKS cluster +task azure:creds:create # Creates demo Azure credentials - NOT for production +task azure:creds:delete # Removes demo Azure credentials +``` + +> **Important**: Tasks prefixed with `test:` or `azure:creds:` are helper functions for demonstration purposes only. Production Azure resources should be managed through your organization's standard infrastructure management practices (Terraform, Bicep, ARM templates, etc.). + +## `task install` vs `task sync` + +- `task install` - Complete initial setup including Azure credential configuration +- `task sync` - Updates existing installation (equivalent to `helmfile sync`) + +Use `task sync` for updates after the initial installation, not `task install`. + +## Updating Configuration + +```bash +# Make changes to config.yaml +vim config.yaml + +# Update the platform configuration +task update + +# Sync changes to all components +task sync +``` + +## Task Usage Examples + +```bash +# View configuration differences before applying +task diff + +# Deploy updates (equivalent to helmfile sync) +task sync + +# Update only the configuration secrets in Key Vault +task update:secret + +# Initialize and validate configuration +task init + +# Full reinstallation +task uninstall +task install +``` + +> **Important**: Tasks prefixed with `test:` or `azure:creds:` are helper functions for demonstration and testing purposes only. They are **NOT recommended for production deployments**. Production infrastructure should be managed using your organization's standard infrastructure management practices. + diff --git a/docs/TROUBLESHOOTING.md b/docs/TROUBLESHOOTING.md new file mode 100644 index 0000000..d236517 --- /dev/null +++ b/docs/TROUBLESHOOTING.md @@ -0,0 +1,595 @@ + +# Troubleshooting Guide - CNOE Azure Reference Implementation + +This guide covers common issues and their solutions when using the CNOE Azure Reference Implementation with Taskfile and Helmfile. + +> Note: Most issues are related to missing prerequisites, authentication, networking, or resource constraints. Start with verifying prerequisites and work systematically through the troubleshooting steps. + + +## Table of Contents + +- [Installation Issues](#installation-issues) + - [Task Installation Fails](#task-installation-fails) + - [Helmfile Deployment Issues](#helmfile-deployment-issues) + - [Azure Workload Identity Issues](#azure-workload-identity-issues) +- [Configuration Issues](#configuration-issues) + - [GitHub Integration Problems](#github-integration-problems) + - [Domain and DNS Issues](#domain-and-dns-issues) + - [Azure Key Vault Issues](#azure-key-vault-issues) +- [General Troubleshooting Approach](#general-troubleshooting-approach) + - [1. Check ArgoCD Applications](#1-check-argocd-applications) + - [2. Check Taskfile Operations](#2-check-taskfile-operations) + - [3. Common Diagnostic Commands](#3-common-diagnostic-commands) + - [Common Log Locations](#common-log-locations) +- [Component-Specific Issues](#component-specific-issues) + - [ArgoCD Issues](#argocd-issues) + - [ArgoCD Not Accessible](#argocd-not-accessible) + - [Applications Not Syncing](#applications-not-syncing) + - [Crossplane Issues](#crossplane-issues) + - [Provider Not Ready](#provider-not-ready) + - [ExternalDNS Issues](#externaldns-issues) + - [DNS Records Not Created](#dns-records-not-created) + - [Cert-Manager Issues](#cert-manager-issues) + - [Certificates Not Issued](#certificates-not-issued) + - [Keycloak Issues](#keycloak-issues) + - [Keycloak Pod Failing](#keycloak-pod-failing) + - [SSO Authentication Issues](#sso-authentication-issues) + - [Backstage Issues](#backstage-issues) + - [Backstage Pod Crashing](#backstage-pod-crashing) + - [Ingress Issues](#ingress-issues) + - [Load Balancer Not Created](#load-balancer-not-created) +- [Performance Issues](#performance-issues) + - [Slow Installation](#slow-installation) + - [High Resource Usage](#high-resource-usage) +- [Recovery Procedures](#recovery-procedures) + - [Reinstalling Components](#reinstalling-components) + - [Backup and Restore](#backup-and-restore) + - [Emergency Access](#emergency-access) +- [Getting Help](#getting-help) + - [Collecting Diagnostic Information](#collecting-diagnostic-information) + - [Additional Resources](#additional-resources) +- [Prevention Tips](#prevention-tips) + +## Installation Issues + +### Task Installation Fails + +**Symptoms**: `task install` command fails + +**Common Causes**: + +1. Missing prerequisite Azure resources (AKS cluster, DNS zone, Key Vault) +2. Incorrect configuration in config.yaml +3. Azure CLI not authenticated +4. Incorrect cluster context +5. Missing required tools + +**Debug Steps**: + +```bash +# Verify prerequisite Azure resources exist +az aks show --name $(yq '.cluster_name' config.yaml) --resource-group $(yq '.resource_group' config.yaml) +az network dns zone show --name $(yq '.domain' config.yaml) --resource-group $(yq '.resource_group' config.yaml) +az keyvault show --name $(yq '.keyvault' config.yaml) --resource-group $(yq '.resource_group' config.yaml) + +# Verify required tools +which az kubectl yq jq helm helmfile task + +# Check Azure CLI login +az account show + +# Verify correct cluster context +kubectl config current-context + +# Validate configuration file +yq '.' config.yaml + +# Check cluster OIDC issuer +az aks show --name $(yq '.cluster_name' config.yaml) \ + --resource-group $(yq '.resource_group' config.yaml) \ + --query "oidcIssuerProfile.issuerUrl" -o tsv +``` + +### Helmfile Deployment Issues + +**Symptoms**: Helmfile fails to deploy ArgoCD + +**Debug Steps**: + +```bash +# Check Helmfile syntax +task helmfile:lint + +# View what would be deployed +task helmfile:diff + +# Check Helm repositories +helm repo list + +# Manual Helmfile debug +helmfile --debug diff +``` + +### Azure Workload Identity Issues + +**Symptoms**: Components can't authenticate to Azure services + +**Debug Steps**: + +```bash +# Check managed identity creation +az identity list --resource-group $(yq '.resource_group' config.yaml) + +# Verify federated credentials +az identity federated-credential list \ + --name crossplane \ + --resource-group $(yq '.resource_group' config.yaml) + +# Check service account annotations +kubectl get sa crossplane -n crossplane-system -o yaml + +# Verify workload identity resources +kubectl get workloadidentities.azure.livewyer.io -A -o yaml +``` + +**Common Fixes**: + +```bash +# Update Azure credentials (for demo environments only) +task azure:creds:delete +task azure:creds:create + +# Update workload identity configuration +task update:secret:azure +``` + +> **Important**: The `azure:creds:*` tasks are helper functions for demonstration only. In production, Azure identities should be managed through your organization's infrastructure management approach. + +## Configuration Issues + +### GitHub Integration Problems + +**Symptoms**: Backstage cannot connect to GitHub + +**Solutions**: + +```bash +# Verify GitHub configuration in config.yaml +yq '.github' config.yaml + +# Check if configuration was uploaded to Key Vault +az keyvault secret show --name config --vault-name $(yq '.keyvault' config.yaml) + +# Update configuration +task update:secret +``` + +> **Important**: GitHub integration details are stored in `config.yaml`, not in private files. All configuration is centralized in this file and stored securely in Azure Key Vault. + +### Domain and DNS Issues + +**Symptoms**: Services not accessible via domain names + +**Debug Steps**: + +```bash +# Check DNS resolution +nslookup backstage.YOUR_DOMAIN + +# Verify ingress configuration +kubectl get ingress -A + +# Check external-dns logs +kubectl logs -n external-dns deployment/external-dns + +# Test load balancer IP +kubectl get svc -n ingress-nginx ingress-nginx-controller +curl -H "Host: backstage.YOUR_DOMAIN" http://LOAD_BALANCER_IP +``` + +### Azure Key Vault Issues + +**Symptoms**: External secrets cannot fetch secrets from Key Vault + +**Debug Steps**: + +```bash +# Check Key Vault access +az keyvault secret list --vault-name $(yq '.keyvault' config.yaml) + +# Verify external-secrets logs +kubectl logs -n external-secrets deployment/external-secrets + +# Check workload identity for external-secrets +kubectl get workloadidentity external-secrets -n external-secrets -o yaml + +# Test Key Vault connectivity +kubectl run test-pod --rm -i --tty --image=mcr.microsoft.com/azure-cli -- az keyvault secret list --vault-name $(yq '.keyvault' config.yaml) +``` + +## General Troubleshooting Approach + +### 1. Check ArgoCD Applications + +All components are deployed as ArgoCD applications. Start by checking their status: + +```bash +# Get ArgoCD admin password +kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d + +# Port forward to ArgoCD UI +kubectl port-forward svc/argocd-server -n argocd 8080:80 +``` + +Navigate to http://localhost:8080 and login with username `admin` to view: + +- Application sync status +- Resource health +- Event logs +- Sync history + +### 2. Check Taskfile Operations + +```bash +# View available tasks +task --list-all + +# Check configuration +task diff + +# Verify Helmfile status +task helmfile:status +``` + +### 3. Common Diagnostic Commands + +```bash +# Check cluster connectivity +kubectl cluster-info + +# View all ArgoCD applications +kubectl get applications -n argocd + +# Check application sets +kubectl get applicationsets -n argocd + +# View workload identities +kubectl get workloadidentities.azure.livewyer.io -A +``` + +### Common Log Locations + +```bash +# ArgoCD logs +kubectl logs -n argocd deployment/argocd-application-controller +kubectl logs -n argocd deployment/argocd-server + +# Component logs +kubectl logs -n NAMESPACE deployment/COMPONENT_NAME + +# System logs +journalctl -u kubelet (on cluster nodes) +``` + +## Component-Specific Issues + +### ArgoCD Issues + +#### ArgoCD Not Accessible + +**Symptoms**: Cannot access ArgoCD UI + +**Debug Steps**: + +```bash +# Check ArgoCD deployment +kubectl get pods -n argocd + +# Check ingress +kubectl get ingress -n argocd + +# Check service +kubectl get svc -n argocd argocd-server + +# Check logs +kubectl logs -n argocd deployment/argocd-server +``` + +#### Applications Not Syncing + +**Symptoms**: ArgoCD applications stuck in "OutOfSync" or "Unknown" state + +**Common Fix**: + +```bash +# Force refresh application +kubectl patch app APP_NAME -n argocd --type merge --patch '{"operation":{"initiatedBy":{"automated":true}}}' + +# Check repository access +kubectl get secret -n argocd argocd-repo-server-tls-certs-cm + +# Verify repository connectivity +kubectl exec -n argocd deployment/argocd-server -- argocd repo list +``` + +### Crossplane Issues + +#### Provider Not Ready + +**Symptoms**: Crossplane Azure provider fails to install + +**Debug Steps**: + +```bash +# Check provider status +kubectl get providers + +# Check provider config +kubectl get providerconfigs + +# Check crossplane logs +kubectl logs -n crossplane-system deployment/crossplane + +# Verify workload identity +kubectl describe workloadidentity crossplane -n crossplane-system +``` + +### ExternalDNS Issues + +#### DNS Records Not Created + +**Symptoms**: DNS records are not automatically created + +**Debug Steps**: + +```bash +# Check external-dns logs +kubectl logs -n external-dns deployment/external-dns + +# Check workload identity +kubectl get workloadidentity external-dns -n external-dns -o yaml + +# Verify DNS zone permissions +az role assignment list --scope "/subscriptions/$(yq '.subscription' config.yaml)/resourceGroups/$(yq '.resource_group' config.yaml)/providers/Microsoft.Network/dnszones/$(yq '.domain' config.yaml)" +``` + +**Common Fix**: + +```bash +# Update external-dns workload identity (demo environments) +task update:secret:external-dns + +# Check domain configuration +yq '.domain' config.yaml + +# Verify DNS zone exists +az network dns zone show --name $(yq '.domain' config.yaml) --resource-group $(yq '.resource_group' config.yaml) +``` + +### Cert-Manager Issues + +#### Certificates Not Issued + +**Symptoms**: TLS certificates remain in "Pending" state + +**Debug Steps**: + +```bash +# Check certificate status +kubectl get certificates -A + +# Check certificate requests +kubectl get certificaterequests -A + +# Check challenges +kubectl get challenges -A + +# Check issuer status +kubectl get clusterissuers + +# Check cert-manager logs +kubectl logs -n cert-manager deployment/cert-manager +``` + +**Common Error Messages**: + +``` +Get "http://example.com/.well-known/acme-challenge/...": dial tcp: lookup example.com: no such host +``` + +**Solution**: DNS propagation delay. Wait 5-10 minutes for DNS to propagate. + +### Keycloak Issues + +#### Keycloak Pod Failing + +**Symptoms**: Keycloak pods crash or fail to start + +**Debug Steps**: + +```bash +# Check pod status +kubectl get pods -n keycloak + +# Check logs +kubectl logs -n keycloak deployment/keycloak + +# Check persistent volume claims +kubectl get pvc -n keycloak + +# Check secrets +kubectl get secrets -n keycloak +``` + +#### SSO Authentication Issues + +**Symptoms**: Cannot log into Backstage via Keycloak + +**Debug Steps**: + +```bash +# Check Keycloak accessibility +curl -k https://keycloak.YOUR_DOMAIN/realms/cnoe/.well-known/openid-configuration + +# Check user secrets +kubectl get secrets -n keycloak keycloak-user-config -o yaml + +# Verify Backstage configuration +kubectl get configmap -n backstage backstage-config -o yaml +``` + +### Backstage Issues + +#### Backstage Pod Crashing + +**Symptoms**: Backstage pods fail to start + +**Debug Steps**: + +```bash +# Check pod logs +kubectl logs -n backstage deployment/backstage + +# Check configuration +kubectl get configmap -n backstage -o yaml + +# Check secrets +kubectl get secrets -n backstage -o yaml + +# Verify GitHub integration configuration in config.yaml +yq '.github' config.yaml +``` + +### Ingress Issues + +#### Load Balancer Not Created + +**Symptoms**: ingress-nginx service has no external IP + +**Debug Steps**: + +```bash +# Check service status +kubectl get svc -n ingress-nginx + +# Check ingress-nginx logs +kubectl logs -n ingress-nginx deployment/ingress-nginx-controller + +# Check Azure Load Balancer +az network lb list --resource-group MC_$(yq '.resource_group' config.yaml)_$(yq '.cluster_name' config.yaml)_$(yq '.location' config.yaml) +``` + +## Performance Issues + +### Slow Installation + +**Symptoms**: Installation takes very long or times out + +**Common Causes**: + +1. DNS propagation delays +2. Certificate issuance delays +3. Image pull issues +4. Resource constraints + +**Debug Steps**: + +```bash +# Check node resources +kubectl top nodes + +# Check pod resources +kubectl top pods -A + +# Scale up cluster if needed (using your infrastructure management approach) +# Example for testing: az aks scale --name CLUSTER --resource-group RG --node-count 3 + +# Check image pull status +kubectl get events -A --sort-by=.metadata.creationTimestamp +``` + +### High Resource Usage + +**Symptoms**: Cluster running out of resources + +**Debug Steps**: + +```bash +# Check resource requests and limits +kubectl describe nodes + +# Identify resource-hungry pods +kubectl top pods -A --sort-by=cpu +kubectl top pods -A --sort-by=memory + +# Check persistent volume usage +kubectl get pv +``` + +## Recovery Procedures + +### Reinstalling Components + +```bash +# Reinstall specific component +kubectl delete app COMPONENT_NAME -n argocd +task sync + +# Full reinstall +task uninstall +task install +``` + +### Backup and Restore + +```bash +# Backup ArgoCD configuration +kubectl get applications -n argocd -o yaml > argocd-apps-backup.yaml + +# Backup configuration from Key Vault +az keyvault secret show --name config --vault-name $(yq '.keyvault' config.yaml) > config-backup.json + +# Restore from backup +kubectl apply -f argocd-apps-backup.yaml +``` + +### Emergency Access + +```bash +# Direct kubectl access to services +kubectl port-forward svc/argocd-server -n argocd 8080:80 +kubectl port-forward svc/backstage -n backstage 3000:7007 + +# Reset ArgoCD admin password +kubectl patch secret argocd-initial-admin-secret -n argocd -p '{"data":{"password":"'$(echo -n 'new-password' | base64)'"}}' +``` + +## Getting Help + +### Collecting Diagnostic Information + +```bash +# Create diagnostic bundle +mkdir cnoe-diagnostics +kubectl cluster-info dump --output-directory=cnoe-diagnostics/cluster-info +kubectl get events -A --sort-by=.metadata.creationTimestamp > cnoe-diagnostics/events.yaml +kubectl get pods -A -o yaml > cnoe-diagnostics/pods.yaml +task helmfile:status > cnoe-diagnostics/helmfile-status.txt +yq '.' config.yaml > cnoe-diagnostics/config.yaml +``` + +### Additional Resources + +- [CNOE Community](https://cnoe.io/community) +- [ArgoCD Documentation](https://argo-cd.readthedocs.io/) +- [Backstage Documentation](https://backstage.io/docs/) + +## Prevention Tips + +1. **Proper Prerequisites**: Ensure all Azure resources are properly provisioned before installation +2. **Configuration Management**: Keep config.yaml up-to-date and validate before applying changes +3. **Regular Updates**: Use `task sync` to keep components updated +4. **Monitor Resources**: Set up monitoring for cluster resources +5. **Backup Strategy**: Regular backups of critical configurations +6. **Testing**: Test changes in a separate environment first +7. **Infrastructure Management**: Use proper infrastructure management tools for production Azure resources diff --git a/docs/examples/app-with-aws-resources.md b/docs/examples/app-with-aws-resources.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/examples/demo.md b/docs/examples/demo.md deleted file mode 100644 index 4bfe867..0000000 --- a/docs/examples/demo.md +++ /dev/null @@ -1,43 +0,0 @@ -## Backstage template generation - -Using the CNOE CLI, you can generate Backstage template input fields from Terraform modules, Kubernetes CRDs, and Crossplane XRDs. - -### Terraform (imperative) - -For example, to generate input field from a terraform module in the Data on EKS repository: - -```bash -git clone https://github.com/awslabs/data-on-eks.git /tmp/data-on-eks - -cnoe template tf -i /tmp/data-on-eks/analytics/terraform/spark-k8s-operator -o examples/template-generation -t examples/template-generation/data-on-eks.yaml -p '.spec.parameters[0].properties.tfVars' - -``` -The above command takes the terraform module available at `/tmp/data-on-eks/analytics/terraform/spark-k8s-operator` then inserts generated backstage fields into a partially configured template at `examples/template-generation/data-on-eks.yaml`. This partially configure template contains fields that are common to all modules in the Data on EKS repository. - -You can view what fields are generated by using `diff` and `yq`: - -```bash -diff <(yq -P 'sort_keys(..)' -o=props examples/template-generation/spark-k8s-operator.yaml) <(yq -P 'sort_keys(..)' -o=props examples/template-generation/data-on-eks.yaml) -``` - -The rest of this document assumes you've used the spark-k8s-operator module to generate input fields. - -Once the template is hydrated, it is ready to use. You can push it to a private git repository within your organization or push it to a public repository. -You can then register the template in the Backstage UI (`Create...` > `Register Existing Component`) or update your Backstage configuration. The main configuration file is a ConfigMap in the backstage namespace with the name `backstage-config`. - -You can use the template to create a EKS cluster with optimization for data workload using terraform. The example uses a custom Argo Workflows template to run the install script, add a IAM role to the admin group in the cluster, create a Backstage service account, then registers the cluster to Backstage for use. - -The Argo Workflows run is associated with the Backstage entity. So you can check on its status within Backstage. If you'd like to see detailed information about the run, you can click on it to go to the Argo Workflows UI. - -Once the new cluster is ready, you can submit a Spark Job to the new cluster through Backstage. - -### Terraform (declarative) - -You can also use the terraform controller or Crossplane terraform provider to deploy terraform modules. Examples of this will be included in the future. - - -### Crossplane and ACK - -When using Crossplane, the bulk of work is done by Crossplane providers. You can use GitOps tools like ArgoCD to deploy these manifests to the cluster using Backstage scaffolder templates. Examples of this will be included in the future. - - diff --git a/docs/examples/spark/pi.yaml b/docs/examples/spark/pi.yaml deleted file mode 100644 index 39b7202..0000000 --- a/docs/examples/spark/pi.yaml +++ /dev/null @@ -1,45 +0,0 @@ -apiVersion: sparkoperator.k8s.io/v1beta2 -kind: SparkApplication -metadata: - name: pyspark-pi-karpenter -spec: - type: Python - pythonVersion: "3" - mode: cluster - image: public.ecr.aws/r1l5w1y9/spark-operator:3.2.1-hadoop-3.3.1-java-11-scala-2.12-python-3.8-latest - imagePullPolicy: Always - mainApplicationFile: local:///opt/spark/examples/src/main/python/pi.py - sparkVersion: 3.1.1 - restartPolicy: - type: OnFailure - onFailureRetries: 1 - onFailureRetryInterval: 10 - onSubmissionFailureRetries: 5 - onSubmissionFailureRetryInterval: 20 - driver: - cores: 1 - coreLimit: 1200m - memory: 512m - labels: - version: 3.1.1 - serviceAccount: spark - nodeSelector: - NodeGroupType: spark-spot-ca - tolerations: - - key: spark-spot-ca - operator: Exists - effect: NoSchedule - executor: - cores: 1 - instances: 2 - memory: 512m - serviceAccount: spark - labels: - version: 3.1.1 - nodeSelector: - NodeGroupType: spark-spot-ca - tolerations: - - key: spark-spot-ca - operator: Exists - effect: NoSchedule - diff --git a/docs/examples/template-generation/data-on-eks.yaml b/docs/examples/template-generation/data-on-eks.yaml deleted file mode 100644 index c994c3b..0000000 --- a/docs/examples/template-generation/data-on-eks.yaml +++ /dev/null @@ -1,94 +0,0 @@ -apiVersion: scaffolder.backstage.io/v1beta3 -kind: Template -metadata: - description: Creates a EKS cluster with Spark Operator + extra enabled through Terraform - name: data-on-eks-spark - title: Data on EKS - Spark Operator -spec: - owner: guest - type: service - parameters: - - title: Terraform config options - properties: - tfVars: # this field is to be generated. - title: Terraform variables - type: object - - title: Configuration Options - properties: - name: - title: name of this entry - type: string - namespace: - title: namespace within the kubernetes cluster to deploy this - type: string - default: data-on-eks - adminRoleName: # update the aws-config cm to give admin access to this group. - title: Admin Role Name - description: Name of the role to give the administrative rights on the EKS cluster. - default: Admin - type: string - clusterName: - title: Cluster to run - description: The cluster to run this workflow in. - type: string - ui:field: KubernetesClusterPicker - repoUrl: # need a place to store this entity information. - title: Repository Location - type: string - ui:field: RepoUrlPicker - ui:options: - allowedHosts: - - github.com - steps: - - id: create-repo - name: Create Repository - action: github:repo:create - input: - repoUrl: ${{ parameters.repoUrl }} - - id: fetch-base - name: Fetch Base - action: fetch:template - input: - url: ./data-on-eks - values: - name: ${{ parameters.name }} - namespace: ${{ parameters.namespace }} - tfVars: ${{ parameters.tfVars }} - adminRoleName: ${{parameters.adminRoleName}} - clusterName: ${{ parameters.clusterName }} - - id: init-repo - name: Initialize Repository - action: github:repo:push - input: - repoUrl: ${{ parameters.repoUrl }} - defaultBranch: main - - id: wait - name: Waiting for the repo to be ready - action: "roadiehq:utils:sleep" - input: - amount: 5 - - id: register - name: Register - action: catalog:register - input: - repoContentsUrl: ${{ steps['init-repo'].output.repoContentsUrl }} - catalogInfoPath: '/catalog-info.yaml' - - id: apply-cm - name: Apply TF variables CM - action: cnoe:kubernetes:apply - input: - manifestPath: cm.yaml # this contains tfvar json file. - namespaced: true - clusterName: ${{ parameters.clusterName }} - - id: apply-workflow - name: Start TF workflow - action: cnoe:kubernetes:apply - input: - manifestPath: workflow.yaml # initiates an argo workflows run. - namespaced: true - clusterName: ${{ parameters.clusterName }} - output: - links: - - title: Open in catalog - icon: catalog - entityRef: ${{ steps['register'].output.entityRef }} diff --git a/docs/images/argocd-github-app.png b/docs/images/argocd-github-app.png deleted file mode 100644 index 8834ab6cb4a91558dcbbcf6dca910de14d5e026a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 48479 zcmZUa1z23Ywy<&6V#Qqw#ih7Qai_)I2X`+FMT@)B(hlzKPzEXPuElkrID`Dt@0@$@ z`S0D&lSy`DB|BNOce3&(T0>0%8-ol34h{}m@x81T92}wm92`6z8VW4Nf^ka*c4K5O zBcq`xBSWL%?qXvPu!e(UN%BgZVC!>xJ!ooaP>Yug?28W`&CUXDf6>6HPohS>Uh}Ch zbrKJHr^tR!&VU*McNP;X`wTCaI^*o_uF+o8l@Ez<+PS|v^SeHK3iS6c>@9thR)=_~ zGLEJm*PfpK!6=@DVo?^+mrtx5;p=3D?A_V5ZeU`?>{{aW!q%?C^La3YU+8qHRp`w7 zd2B(~<8A)jkC3RxHXe7gON_`S_u=2hTO2a!uhyFdHMa<2i-@{dZ1?)4whXtt#Y+3b zF@K)f#TArnc{*snEcY(2lTN&q{eBzepJkS;@5e#+Wi#d7C`D3;&Esws4LM5__eW-_ z7wTD~ma+5Bi0dQlbZl^11?z+^9$K0_9a9pZ|gJof9Fwy`G2oOnEPAiUp``T z1RN^t?iI}W79#vtZbX4X#QzGzAsp-`Bs|Y3*zOKQ%df{QI$B56Jm9g_E0ui}Sx_ z!-|UjjTP3g_q7J-%i24^`V3ZwIL|vC(SP#)pOpWp@jps_{GXD7JpW(G|48}YC3QWl z-DO;yU{!jG|Icv!yW0Ou{C7c7&c9FoA3gD}ZvH10*3aS?qMZLdX5tu77pocAFjCmd zs_Vdfn3DZ-MZtbqVD7IEbH4NSt7kB!m4s82mD2HrKQTrPB4*QxoXM6kM=hgo)XedCxsHd$k7EZwg12z3 zK2nk}!AS7`mpDm0mMb*0+Ba7T8qWWJ6aLA?a7<4!ujY^D$2 zo)qF|7MIv2Y_xZlk+DLR4Ht^*epuQ)RUz`(KHVfXp8>8q$=d~r?-p4MlIwD8Dp!dA z1SDg~L`oW|5K<~iNQG8}BpQjwk2`89^Z$+%VtYe>X>~vb=ATo2t3bkEEmN#k0Ga@C zfJRf6Xe&3W>K=55wG%*%bNmWw`m)UR>PyxmmkrZXNuH0g=?)6{rWJT5G}TZOsnG9E zd91S~4sybQk4R5#W~x&5=?z72^my(T+I3cnWqO@BjJoAgj7q76mI?`zfBHQzxR5?~ z+efqeYo1<0yxWt2Ir}q5rY7FX5;^GVMt<@Biq=+n-$f*z*h@gN3gOzHd1{Y<&6k@= zpN>lKNR+3xwmdUYx$aDjzB9ZKo3?&MO^c5y>m5> z1f6;0Ab&rw`(^ZoY8)2&-iK_yp&$= zet;PoO46iDKufB>bTxS}sWu&+_Ezd0*9Abch)4Geo7`QTWc-EM!^Yg3tIO57@Y~dP zt%dqdM;nzthW|_+bla&fYq~7WwMwo_bsEfX3kYcMo+7x%#c3c&ZLE zm1PIWs}&ZJX0=vML;moyGEF+|H-6vwb3sT-HNbGmM=6-B#=GELM4crVlPg7&+2sTB zd_LJC(QP!!ZChOL8w{h{!!@4I3Mq;%JNcv@JXR1fqKmG{HNt*I-(#^o$h zbg`1p#rI$I8;_@l4NAB+uB1aEC4%@l5xQ)X+d<=QuTgR zIv=}2F5ihhZ2Y)dsEdPtCl#gIlSl+bprsY4{h_3tap|x5E7{!n6Gp8YkYR#AcwHi0 zDMAjTwpL0wQR=hmg>=r<)Tecw2vsMw9lPO2N(xV>k9lWjQ+jK+?|9Rv3X}zQNKrDg zBAA?aZ-V&z?wJY}@GZ6pzDeh8b(v6>1m%?-QBgfVa4rW8H4A_X$m7v4i`36LbnKB5 zsd;~Ce{crHwd2--XyOeP)V?vzv6fz;cK@kjEYog%du>CYgf`k_CcLYR;D<^?Vga<} zao^lk)8Y+y63Fg1$o?MA<4NQg`!(lD^@Kcm7CUB{;zYyr57lR?!8mmhm3> z`%n`~-J+1(_L$&2NO#_!fTsXWp__nErx)YCkfIaqXRU7?gYTnM*DV8^s^DH?63z}( z8SgeC)=IA)6K166Q_Ds8K;oxlWe@WZaY@elrJ_dDzN_61CjP_D4H*}CO4!h~;E~_q zuLU||UaQztttk~ecJ|zNl-ItQVS8s(_<%4P38Cbl@>BE15J31!BY+IW`Qe3(ADW1l zGwp^x+aM=m(C+YtQncp7+P=`fslnT5)m`pxK2hA4h&v2Yue8<@qXUuax1L;C!LHZZ~FC)3o1ul;VMt zf|6t(%HLlLN$gPPFTHc>*|KsRKiDc-{A$9VMiOEsfn(@D`m9oKWP9Hv*5JGkZ@X@g zHmr4Qpm?PJ_|vK|Xsrw>StIVWTlU- zgevIzvm;JK$Im6c^|jI59;rEd{nEW?rvC9emovq*ZRM$7+QkP|>Vw*PO(8f#V@tQ2 zTO(~HBMGK0^OiNJi$AyT`L+u2TvJUuEhWZ2*6WU$G;b}r3~h`Ev>KBDKL}nKTC+jV zE6lW|M9`b43#-haRA;z|DnqN-D{J{uOIqCH(4Num!*=V3MYE<0(flBQUT5+jT*E#= z)vZS;F7*em{eJ39BQJZ6JO^DRnnz-_n(AR3f!gejKzgTDkI9?lbFolUT_7tFOEeU6 zL68+=WQGzHaAe-hL(;gpVdF{2zS0(1xK*C z!279>)iW_0=!%a4O&IHP-s4ZLeyIAFW+x(186??7 zFr;kv5m13(^mCD!c*2Qyf6C&zwint&={TOu24;I{>wnXpDj>Iy+ppJMq>+)wImH{) zUK;%Qa^i_=t`ag(=VHPcJRyC4wlui$DznL}s-U8a-TtwwU;<*4x%r#iTuJ6^|1NHJ zOA@AD_l88!sU(zY7#`JVFk|#%=iKRS+=feJ+g$1ZQa58J1H?vx=P`Z% zvU%bxs1Sm`5Nm041$o_-awm`(wr_5$vXX({4B=VaQULjbsx!z!lpq$kxwtkO!O6`fPQ@Xymg_u^oRt%?FA)5m@q z2e-@i;fm30w-7%) z0ZQyGcX62;{6GcIy9>(at>@kqv>h4ox6E31XLf-(3E1(2A)QeJ;{6MAEswMczLkxv-?Wc zJi(EmH$i%9A5RVa%e;esO~4_((v}R4ygB=xZ1S`#ks+1HBw(0X5xPT{_~}j04gbw` z9Zv43Xzy8H^^u-8U_tF--XB!C^DKU?5;EwwdOY)?K-srS4<7%{c>v?V@|S;xc78rO z3dZYP8k%t8kVicY8zkt@uWQdc3tq?U!(KbM?@-QMr6YS(un3qkb6X(4aaf&pZ#u6+ zx{=OoZ$l`;Wkh7lW89y8F{l!Ad=mAEyNxU7xTVu$X zj*sZJH4qwOpTZ#AT@+83%7%nC9CgFv_OaO}Ushh5d5r8Kpr!VeShjus%|u>4fG2^faAP{*6enqpP1Sj|RD<=zS-HVU+BN%e!iecqtz zOzH?=}ELfQA; zqL_*EOuyo7fmgWCxym4r7H**%&O)hH)t4D&1p5`=frht^@vcron-ffbzFea>y4()( z5nb|~*Rn+>ykVjfzC3A9lk9>*0R}Dh8Dv*x=ZI2wR(6XBL=Dv@$=gfjO;o|=c(O9AMGF}8{iWFk z6Z^%M*4u-TrVEV%p*P@9R;~8hQC~ZJC^F5A-+b_n)xvQ$7-iYlj`gB_Img?`Ug5k` zQept>`d0LHq$K9&UNR)Vul7>!%{MW|!ihyJikRQJva1-Jhx-@$=dKUUu)5n8#aqtWS*V#s+wM&v>^%cdw-@g0{T!cV>4`Q*f0t zhc-JWlcVFCzH>7>Tm<<+nquc}jZ6_Itn7!Weu8Cd$b5}6sw?rxP0^5j#Z$p38R9*T zQx(uBcHz7ro?=GE5~Z9G`q~DgzpFb~}q3lLOp53xta%XB#*5-=h+8D6}&$sJR zB!k#Sg%N69-bG^vgVp1*P6E06b};q`e77tj5WkjR1CXmC;qN{J@{#=@2|^8@R8LfT zPsB``)@_c)GVq5{lmO?+{<{xUM|G|PPj=IR_2?$I1zl}9Jhy!#2kV;M<=0{r$XsxD zrtu(zE)346t7`ux+JgI}-df69skS%wL`2vNSl=O^V;0}8)kV?=Kg#7RKP&0f z20unEK0uTIdbHQ*eJqt^5pKu%w&z^6M9b+bFEXp6Qf}>3#UV5ScwkQmLNK8>0EZYKMzEXGz*67?SxiCF7L6?ghxSrEn!rPV8P(Gdk9 zr4^H47wJvtjdRH0CVco3*@2`)#ws59<8#4taM=tWGBC5*x$C|Cmg|{w{@Y$8DQ6^* ze{~%(R#-49Hb{5WC(Bq?Ic2f%?fEANp-pU~Sre(#{KR9PA*bGVLVGmM>aj%gt}7YzaL677t7$4d747kFn`F$v7Bc=5E*GP%o-gm70{d&t{p)s}#s=%1WNv@>N zADL~W?^R}zAMa9f98qR&uRhYnE_`o$vW%R=Yxw=T+YB)C(&zSttQ3MW`aw0>0tN4< z%a+&tvx6$b`oe^1fcVxesvm;o_uO5YbDY6ob*K-*{X<6Y z-}7SydO?{XY|DvBR*U|RdM)1L9P~2VY(mi7jhW+`*Xam_gX!_!lHIQ$1dLUUS2yof z1B1aPTlH@ra~?KUGrn&ORH|8{&0(9CcaE^Zx`2(#T4Tbi}BfU}W3 zFPPySX9-W>8~tQPg@|3Mn|~URKmC!GlA+fK6*D-%pR0VNa;0%YF~&2y6&tp&ep?%g zzS+#1o|93$Uwv40vUd8A5X{j^E8yK7A{%;~QG|VU^VXQ`XcsOV5uzL=RLB!+_Ue7g zt`q9CuQZ^}&j7ok;SCu|({0dA`@+6W*Y-&l|M^q4rQ%dYs)U&Gv%$(qS_CG zU-d$T*f5Q44Ht&ZBM<#IIWL(AbRNAWGru~8hse?J-2J{$y9CTUu2j%>N5z#+)z^n} zsTLLL2B$wYG=%@jIuH(Wx;)Cxf5?BfZ&dAu`NKvxxp8)aXGW%fS=|aCcryTcPLGKDiqPB$|dDoP}AT+bzu-i^@-2 z?U{wcW)Wm+dj_5%^Mi{9PdK9iMdq~r6dNHt3(L7L%f>5w zGSI66yH>W9(%~0`G=)jWsJb{=7p4Or@yw8qIWQ6b7jikXK467-xfN zGDj_ij=c_lu_5*PK0x0bCHp61Aib7CP^v*0WkrKSzOYhq*c+6Uhs}gE&>mv1PitWsuB~tAJn_oFK^{#od2nzdpps_|IRmYjx z%JJYL^Dryujj0r!K3~*tOiM$|^>loA4esA8x66 z3z~yYA!ZMk`cGY+es%{YmLef&bdH@oXQn|)PO92`#|$aT1Gzx9v4MpfaI66j>1M|GpzRGkNo#v@175jk(2>ct>4)AM=oryiJqwmJZTn|3*=2# z+B#D*5Qew{jj!(?=>)hYq`@jtYt3Yb1~TxKXO#f|AB>r{7AU(@*LTa==A*z?P?bbx zS8;Tl0ExWuxjqmy!odB~-ar72W-J}bq7m7LH4s7L*AdIJyJu%|Op7Ti-JO{!x6J8{DlQ(#|iK%S9)3v}9w4i7$Uk1I^F- z?bXFP&@cSdQn8onFG+qN^1gXx6-5T1(k*UECL>ES6Dn{HHK^Z)%WPA`*QzN@I@Zy+Ab9hHVd&jk4s+{G=iFMJ(2kh5N?i5R3H z=zWDO#S(_T_w87qSsI|iCtb5)e*T)M5zBG0;^AH>gRGCvvb3*rql_=)r`W{P0m`sA z{vB2o9y!UPG0xSekp*SS&nj_|DqBEH4RbdI8GjOaklcUN#IoGw(27XVE5dqy01+B6P`i;5DUz`iBjr`~uyR*Ut>W z#$Ji(WZC=%k&=5NTfO<05`e0sq29yzbvZ8fktAVVfW9S8Z4=`nd}Z0_AJ|;T^2QNq zuSaAlXYSLP#GP0#1F5wN>1@g`SuxZs!4>d8u53M2uV{@cO_qUcHGxz>ICTOH9$X2o zS-@(7AS(k#Z^P$U`&XW__RWyPeu-3U*{I3W;&$<8V)bRe&u1zcZF^iJvDoI+3f^-J znXto1;E)--asK{eL-ata%+o^5A^3@$m7OzMHL`buyEW$P)vQy)-3ZiZdGpY0D3LZb zF|kn1GIV^wG$e0&WKNH4tT(s z7;k(a6FKZo>oCVFCw9t@=UOs2u*Gvxg+hIk!eDPnXamL{&m@ti1_{3*nmM~w)}brlfd&8&bhn55-1M=#k zi}<>ux#EMNs5I+Qag<4e6&K1B@>CWIJhRboFLu0gguo`8ZW8S)6`tvnZz`~*)u_+A zzd@G0e$B<>9pu8a!akDTrBS6 zi^l3FyvlI!+sOBk=ZE3G{t`#Gsa|v(i;ytCC&^o2r%g=|=SK@5bQ(TSG%I&yO=N&N z^UJ}n*muW`U{CQ5AN)GX@ByWCul!Z#&x!tSS8`8&7J!W zb;-X6ui_1v9tJ9U#N%MLdZrx;+v~)eEv{v*6z)br|4_AA$5#^VB_^;pIBer+H)7Fl zERQmjSJkHj_Q6Kh8Y`snCW|%8&m;XcAq_rv9MSyykk)&S%mp+niA6`0mA@-E z4Q;;F8IOhBeIt)kp?Ic!dv_vBG$(O@{MVV5o>4+8`JC;;tB%EpFN?B+V6D<=w{d|c zyR~RKx}t*}MUzq6-mFIQcuFx9(!{RMG#c{uhGYY}! zoh9D4?YWf`$`;ztu=Y2#t(F?-W17R=rdsmZeNDWVL-2bd#kr@GBA=rdGda2M@M$Qx zr6>Hg%a5V6_(iUd+qt^KAOcOT6EH=~_9M8zqlLU08ak0F~dEG|aiVKlJ|7^Qx)W`8iu zQ{$pfjrtbu-gR2kFr?fp3j2sx5p5YGu*@d@<~_QoZqTMF_Z}$3 zL|5fia_kH8`&x^>Lzzl$VTpn_Wq|&gUz(tT{{7Z-Cq8+ug1)R5IAGXl=4XLdgvL5G zH&kdn_M-aT9ILaQdrZ(2s6tWO%R5tPN~r0Vy{#`s@4%a?v1%5H91R~R6K3lo!wnf}*bApU7v zmICyu(*&e|F*9g>@E~jsG78(c&+gq>H!37O);OGmay|;G;!~>v@Oo@8Bx0ju=U1ve z@8jzA?x2&_maY_%&XsO}ZOH{HjMc~&TC?5n-s(j0fKw}_D<48ULH+&$k*Imh>J&fD zSq3GUIHR!x{g$yG!(bcB`SuFq>oL^%-}_e9E;v=dD9ztgeOH|m2~-9pkNu8SQvBB2 zSV|ND=e7Mgnx^pdIoql{-{w%#a+X1RR@&^*yBCZJbY;&8cr z!3CWmzQ#LPd|Z#h9+oeU5Paz3e#Dg?3%ta~o~N&pq?A`aUwL=^zc zs2+A2AguJwxxBdYy3<0<`zzME-(58n4yE$WMiTb!bD5YsTPam#(d`$1&UDlaeY9Yw zf69?B5X%Z$-hHx`XPVL7-)k>CM)M>;;Rl`u_`k)+s_pH}3T1G`0;pSAx5wEx$fIVD z_$%&qa7f1c|51{b2OQ11D0z|dT`!GaJEl*8uFC`W*hWcT<=lQ>-pAeH9Lnl-(eo!` zhwjljcnqR>IodV|RrzGY$Q`9K&rYRWC@m`P5SCgyk$#&ff6Em1)EH^wDb&fwUr2qOKL*U7elVxHv3eCW>k6Wv%lqn&1|}AuSL;MV>IA9 z3!t!>DRy_1f5#lB)b{{-0WQBj$@kr}Nz_2`3WfyS0^M`EgZ@~CBa&`Es$H0^-fJHbSGn%olQmVAKyN9>&xyZ5 z`cw_At~K+=M)pqeT?xu7v&F~4LS4Hw*^^xczfM;OYyym-vI|59#M#Nm_nppNwwkDq z;duGv5CM_iLgHWpJjW>O_D5mt?q2~*=v_kHeOyBD6h2f|r`QU{GX#itrv`nK(gD%P zqGRY7v(Xxd=L=JywE3okXM)jN^^7^E+a`W!zCh4bI`zJIK~pBEV(}#T6eXDW0BG|9 z-`XpJ3$do;$2Q+}Q}+(job0FIA#=>=@mqb|TgE5X*0%akkY!^$42S>rVyz)rS9F0J z;1pUCtvA(za;Z|`bsv!XZ+q!atX3WQEfNC7}x021lSW*JP z31_Q-sZ-Ir3q~&Wk^ySt4m<90ROrSj1(nXqw+B`T#INJTlY#28Xiwemls*jF9=kw) zPUJPBoyVpBb5oMwwb;SW$VsDjJ=*s_6LGLH^b8{QESA#6%G8mjo$zd-g4=)M`JqX&THx+ zb3_hJAd^SXXUQWpIg?H8dJFxs@!NJ_-;(pXM--~lGkZ9B%<;Y#<$*`0*ykHhQcj*+ z@749Ic|(yx{8HoA+#}TIj@yp8-3cMPKaxYWpN?q;POt- z^4rgi=&rC}7rTw6lK|g>*|O9g%%*fr16LJk=tKU_JCHQs54l^b$yceK_(j6m0Y_C5 zlvT9hO+`dAr;w5CXe0vED9#x{M}5;l>e@a|n*+0CfxG&RAnT0Fek^#^K)03i{iPuw z6TVa-4UO5uE5AP>Y-p#c0)G)l5d>+#Dt8j0lq9W2W)ybVE7{MH+N?R~$UH?T*s^gL z@mw2Gi^!F#G}FzN1SXv=VOkfQs!K&SZQMnO^_BCD$vV2;w3dji5j*VJXgz@?Mu#8g z_DAj9L!cJ8GEZl%!;o>XdIh@-xTg z$zJt_LTERseIYr*a96j=p1sQOhLFr|Z~Z zx55m9)n*(DbdFc{Ut9IYuQ`cq*Y23?(Hz-8VElQ&XA37%fVS zfC(ao=ayq@NKhl=_}g9oA>)5BtznWTbTILpQ)zAg2Wq7;#ly2m;p7^T`#&ry4JWMq zDH#V!YyY(2zY$s3T_PupdHqF_xl8wdlQRA$DSQ5K{y(Jb5DDxlb}&cX@&9j<^4}!J zHm&CWgmM27zJrP2Ck^=d^Jf$c4?Rg?zT9QP_#>wjp`aC4)yyJ#QAlvC%t`IAuSUDraBQ)XH(Pekca=XElvI$H$)-9H*NkzKXGwU@>mx z(6tY0^~WM-4pCXkIz&E9dT)pn`U(GFszRW#%DBIBb;9Gr6bx{4J`|=ErprA$o(q+T zW%Nv5K2sG@GF37Boveq4yF6bi9apCJy>C!`vKn)q5X_|XSJfr)H2xxZ;gONr7IS1e zmHw2h1SIN=$~?8^LSC#n@f6~+j(Qv*nNp~(fg6+nKS%QP>{)v4CjF)BJ0<1-(R;LS zzgh9$E5N1_)|Bca^#bzgtjbQ1hte8+6X^Jq)0UCQR3 z)Vx|;XN{${K*y}_SH5!#?PE-Fx~W}7BvlXx2bWsG6a>$QIHS{35eGqp$1 z-bghT4K~p*c)E0^*nYp4-p_w2lH*vK-9g8@eZW?mWM(!kXKmU`TDsKkVY5m3>Z?b< zi7YWT1^2pNE{RB?mhMP@Y1u86xO^6KJ!03WOorDUR87YkHSmvP&n~7#=wF`jOx585 zupBOTd@#XCo_kLP@xa;EAMgtly<|B39o*~{LRPujl`((9l5a`LOjAdXmTQe9Ee#O% zJe5MXX7lY#8zWzsY|}*!u^B#AMRKd7!L=J(Ipp&FLMIT}^!BT+goJHA#$j-DjceKR zjgoDiB0J~TsKvS++*-wwsbnSQd2MTY<%}ZmUgvCZFkTK*kZIxF&YlWj+WxHOIPdh< zrZ%K-HLT5>(;^h(k3ZGG0Z8rxY8PldC0>Ud>5H(E(0U)Qd zI^~hxC3^41mxT{sa?){8uRtxCEI|iN#*IPLLFfBM!r4iO-fFL4>PiE_M?&0xglrJyBmMZCSZwx;hT)(_$Bto&!PJ~JU?vHeSI8ifq>>f1~ zpO;J@`MxZ_9O!tbFH1D}@SYl+yqvhhTD~t(Cgo!?IS@_cz5W!0!@jC>x8XSFtM`&T zA0Lgl`r+6>w?sz=$=iPX;WRbvH1lwyjx&ylU5po4$&=eJajys%T~SeCQFU4MOj7zI z2N-o<3^^+ED3waX_#Cn5>1d>FUxq_D;!3(>2r1{HY%bSMGniBI6litqJJJbzk-B{6 zajIwgaN@OMe?KoaZmA03D!sU^Q`Jd|wzQBYEu%1vQQFHS%NO;Ei3q-DhUfhIQX4Y; zt9h`+LD|sg`kKh9LBU7HEQ5x_Z_~Gs6;;fA6^{{mbX#iJ2XMVW%9&qa-I4R7ZH@_) zCuNMOOw&W6L)>m7^V@qse#;+xf3GFt`gjxf5uzJvD<=wy5j-v)E0!AxvW!nNlM&hfyDT1_PF z{%j%won?gl6W;`8F&H5%MHBLO$S>x0Fau1B9-ZrW)F)FFk!J?M3t~v_T{`^+gr-HG z4U>T6`<@O6X|RpisrY*dO_f#$ov*eXsMwu~ab628uyH18;C zfE;qf3CEVP?!t3N1(lfNPl^zaZMBaET0MoKqdl^w>I=G!Pje@WWb#>qTK15b5YM`0 zs^z*x`57JQ#>&7a4#Jc~S^OWbSS}Bwh$!Ii&8PPgb}|M~y2Oac^AxPh_`a94#2lF< zP%kPe_*54Kl^55$OqplwN%v{RaZhQrE`1)hI=eaqEOSGc^D3HrK~Oz)55+zyt|!S4 zT47JKtnVO-Zn|WpU7u`AS7N+Z(4&y@p-Fj;EKX32GxdFq*5%WdKwaUc5X@5(o~b>d zwgp0#S}8LmBN6ddQn_@F>W8CsUF}j8i=gg6z{Aa{GVDZ48STMKkwStVndxo%ZV<*J zzVK|hd|a9C_lYH!pM<&4-|K8dS^90(xM}h6W~MprCQmpV_PPlcbo6%o(BD1XTO9+9 zC4SdRWup#F{RMRv^_7P@>;gUx#;`v;Zg5t2#PUL=lIv!bo_M|%3>3C>7OTS3}Zp^C`Q^43&1 zLXFEUTyZJJDZqYy*~!^P?7_dJhFhZiL2*}i?d9#pPBKY7WP7jG@z>VnbebyU$gTB{ zwZ&al`uEdP`v&_7sr$g5o8un zcHE9R=BUrBd98Xfc<~AP$kbS)?C5j0zrTHi_`4LBP6MIJ31hVU*|@V`rEYC-v&#c$ zW!*$VNvgJjOR?ujU1)z2X=U4h?nE2xlej@#@q_iGFH9V%yP80s*&aKi-(%E9^}UIr zb2RqyXCEXL-J(S+qCef$OjF{|YcgkMst}8Oq&FDL#$Gai6!2II(RMIvTQ`%tL}5Gb zSy`lfUej5m@dz=BRXMu#D^3*HM;Oii9mu#P(|Z_YerHZ)qkE`SRH^46MY_`_iAtAUV1CcGS zYFRA(OW+~{k5oxeubB6kj(u?*ul@A|Cksy@uiW4V(0p@1!ZhfTE)ykH=f&Q=_}`mD2dzAaxom`<3+4I&SOow%v> zZiw`x*YNyPb@yHu82)_&7L{n`4aA2s@X*7rvA^PGSF|Rg03F4{y9@Wc+IPo2^2YCO z=d%uzaB>x7T800xl^QfHPeo|BJ3>L1S_esV-;6h7Pk57g9dy4R(h4ZcQd#hH__hoL zw~{xlz)1a#7NEEpb8vg;H)U%nDkN#ZRUzIpvUOG_Lv2>Nu4tBHFT+8X$!QvCVk1^O z?j_bkXF928kXZZUd_zv;(@C;t@Qi`yieIJC^eCce%Ddp4Qnc(W=d}r3m?7D)Vqsy> z(x$R7`ef5NX8!HJ>CM>m?G#=l-pt<;yf=Qb*XHDJeS zipbl9gO$$_+wND1o%>-&l-M>noL(KK(`KNzsUw%yPGvwAew5A>V1%M}?e8N_T?0#0 zZQTXUw}e*|v5gY|uvs#VAkv@Qe@xHKR2k*-r|Ye0=^VL4M#`9)rGLCcG%YYA>unU{ z`Sh4dLmfK1!6;c@N#C#3>DW6C&)E-7B~c=Fv-5UY#Kj*+3U?W3JGhT2ACa;604C&# zo&`nQutZiCeq`3orOpq0u_OA>n1p$+WuA)vP2^JWhm$erXgcJkGOKF%*b*S}ud^wv z*b^5)Zz`gfdu59W)2y-Kt1uN;+EVqNuPT;rub3sGROh@u2uVBhz7cG*1v(u6`a(}= z_!TtGbI`>8?9TP0*!e@Gxn`{nHAU?!Y~-vMIz;;_Xy7MqQsej~sWs$+2pu7Q($9=p9|k(h`cSx;~&S$3wxL zcF~(Z;N@{TRu6M(fJMrc`z4M;DWlfMOzA~Mhgr@bspj(@5+sbUhpi1bDV;LUJ}VsF z$G+#>;_*X?jHXic1uuu;@N+&VnAyOaQuteg=o}3G=atEWOu0PYkXf@!M8)}G%dUrc z@AV{kvJM)6nkc*tpq_zG8$2Z4#h4#g5S&nv$f&{{A_`xeEKj4~y!M5Nd(Nt8L2-?y zHLu+$BzdEINV}rq6v;v%b?gC$chM?dL3Y1rX!z0on8hdp665!AohaYK@r7(LQW79+ zOqhH{3)L6UfoA*eq%Rguh_Bp=&b^(Xz}CFrLunf`{FozTzGaX-A`Y+(CVHs&N0(p! z)#V01BX{K3BeR9M;$F#IL*s%wnR0y?yXAb z4t^s6NZRj)IucxLQd;P%^uH86(g+A=FOPo~E%_bV`6kK}<%Kj#x7>Pfq%t9{`>AJ^ zgK~Ko|0vi$KWFQ1r(f4mS{2F@x(hF)fcMUQF~GJaa>FZ&hixTfr^Ov>U@Rzb@CP87SkZov*Y4c5TLkg}@|SRkwM@=1 zU3%Ob6k_w@CW*sF@%sy*QY8LNe;LaOC<|rEO_d^6t4pVyef75X-eruK?0G`k*5hpd z+ORM!v_mMEn0@WHZ}rw|ChuG0Rrq#3%Q3wN81Cd?`U2ndx{%&Clo@??P+ma*3ZwH$ zc%mQ7=ObLZ@a%>wzQ4~Ky0=WmQD0`^?QX5EZJfc%zIT0DsJp@0i<ZSR6d9P!LejaNM0rf5M%Y{3#nVAeFZ% zLGy*H_0emKY&qnvMJ>G&wn#?`mCS#Y17@8Qa+S25s|X4Z(m7cT0oqw?ar}mSnr9FY zA$d}IGb7>Cda<|A{Z*RMk}|Ee@1ZrF3Dg+N0<`I#* z-))-6=)%4oQ4xyC%)f9gwhxzuJJ)(R=g9a;BfZ@Ow*x%uMg+Q}RLh_HQX{ZQ3SR6( zOtcRY9Yv~w^MCuTkq%8)N7gmj)nCGP)hCx}85-^D&_W7`-*p!Kan2VQcJ$;8iH-~Q zE}4yQ@qGPA8HwjJTDFq6fIWe$-N2Q9AtzgJa&l?GpMszn>N2oHlp`uU)Q7q`NA6$3 zl(S{3%07-4ALjY#n5UmX;Py-I=I@u#-u04zDh)*KN7qE6lDHUBKP#4t$tuwOU}qf4{Pe~U9tE9G=e6=My(cMIYBfnN|0sw=uGpWB zTHH$kMvs?Hb7*5LnS6vpU<;}g!k;SBZS$Ip^JSg=;S>m_Als!t?N~*Cq+oYmtxEe)0gNwD=;9{p;Vqc3+9+_$EI;LEm|!jbl}K$kf%h9PoV_sQL0*6ujJ(9 zghqZhhoe3Gmm7bJ0 z_56TFQ`MQBZutue58Ue5yoQb&xppxIL%M;AF9>m@V_hRdvA)*KTrpfmEiCwA%=_Ym z;O!7$unZVjwy5%(EaJ6PUq4#0nKz^!K_3xq?ySlzQBv>fkp2zTtxj?hV(gKN@oL+V zPq7E;Z zy<4%eD~!y?MYQQq`vV!;J^5EC_{*0D9UFKhCcO(3%gJz_WkxSr3J1VlxACaUHoM)) z9;i-m{_wIX=Y4u=)A{Hi-w){NJ=%IXFQroo4OIu*?x3OHcY*J0ht-=eSb^Kt{f%F{ z{wYz|J)pa?E1_H4d2cQxtpvFCxPb-sJ90duY7X*9yMu3=5s<|wjE3_q$0f)I;>XS@ zz9sCDF~4M4pqK@|QML}5wl0~(1f~xz8m?o_*4z<<9WJPJ==B*~p=941A0wb=eJS>D zF4*L>q<7FE~l+;ymje&uIM-_k*y-dT6+JJGs{5<6POI z=ZM|=FXs^^4k)1UyjCf1=YRMnfTsHzE~&?SUBb6AQiUQ{ies)pl+L1XXh8S6@8nyt zcPgO|jwX;;D7cP!6S$MMUKB()BNVG0qklrFZ4{h-7-cU2Qa}I^@6k|E#nQ%`6SH&h zz*qh33Z`FMn}cb`KonTWZfkvlU>~|fXA-~w3}31XCLjNKH~)f>0?LhfcP=ta2(3#r zC_DYms_jLzF8auR$TgPb8*#caKyD+cwMfN7T^6bv`M~KzhloKf6GLsflNRka8DZfIhW4U=1NfQWjMr2 z%DY{$L_MJBdPTysKuW=%>&iqAe3~!ugBsaPk4OwdVs|Ia81?MZUEZOlmHeP_%7RWG z<|{5Cp&Ck)D>M)Fdf7VQ{`x`vgFp%|b-KmOzBMR_NFm{ zp2@Fl3c;#U@@%^U&;VB zy^5zu>aXNFJ5H7cFo;F#k+0g>FR9KkC3G|LZREO1y$g-Dr zFJ7({8L^Q7itWQ5xd(Z9P83@md0Bo$6ugol7hQq6I#D-8po8H< zg9wDV>%1}bpRPr6z=zW5$c)d7JbmA657>~Y5k~o7kF}>0Un~fz-aJk}-Ey>pka(`` zO4wX7Ms`NBAvIDKUYJlwiE?d~&X$HqJ}k6>pCQ+sS) z3kS_b9P!<21$$ohjJWj50FJm%N{=|g2{pYj@I7J*=N|}^61!E|pQwZG?M+Z9`%&jc zWGSIa@GB(vN6<4lK>1#6?UwN=mb7S_EGMASk*qga7|&c!Kg`N7LG?-b7xu&)r}YQ2 zx+Y2V8(|Ap^loi)4nU){>R)0V_9A`NX}pg}MXfy<4zI7mo5pgOEc8NPC$d zy~%rGKee>U7d&~$E>TqUkoTJs$j$PjfTMdpc_SID5AF?w0_q*avs z@xuf5Ud&er8Kst5P*aG6{AC4y>(61q+qbu1gVt*VeyVM{jB>f7dJL)_sq!8jG zaLP1S9%{UXb0T^r-+q-=vl$a_Wz)mkINjI%ER|**-7zR?8xv+db16}AzI~hi_)!b%F2jz8 zG%@+cN;4z*0<3k;35l3|lPwe$<*!sP-n*Iv49Y~kf)lk$TeR6|)2xK)mH%v`xhg8v z2`B^(4aNwiN~ZX8c+-+W4H%OPQO`C>GGtM`s9nfS!hGe1LGk){vW)!L7>UYWq<rPVHVI3E0&K9y3}UjVhk~ zBvCT=45Qu+TS#OddstUX2-Kf5U&4C=BG(S$9R9fIjxj^Tsc8c^g|2r%qbo(%Wo)xm zF)~&~_f-yjIb_&ZFKEnW(~BXHo0LQtb-!2liq)|xg(hLI2!b(E5nZus#18xct#8DW zvF+Ok$p|JesrEt2BJ%EmpkNY83n(07x@mMX&KNXW4{mzh;}qk-SjWoBLtlfngbfgd zuS>Pm1Ml~^$K^jJHavJ@y=vvLtyf#o%&4)-LKGzB3dB=A1XjUnPS$&Ko`ozB#sI2> zNK5+LUPR-r_96}$o}=@|jgRxCP8$R6OSg+Gt-EA#1QZQpkN&qbZy`Cpd5gQ2(K)RhVkQ#xV~^6b z$FQ_;MhB=wQX%wu;FgHB02KB!5;e?P5fCF?x52@9CMcCJ9{^`QVUfb6T(`v{x-rcw zetu`l+_4b=Mmun5OJCe8A?Fvw5#EZLLT&jZJ8Jhxk`m0`V0zgf8&#hWaeSeO6~^~^ z3(ic#Ea*!Ac8UsS>+>cBszp&=2`ZZJiGm`^pun&_Kk*bUb@=LnjE%nbfFfZ%+smG) z7kh&}tW8t1(TO?3HQrndcE}=Ak8Yf?%2`TvSx`bXAF}>Jr4j=gUZ-nKZ$0p0CdnP@ zRCnzoOqYNsrqX?EE2$7hShr=lNa<9YUIiwV}xF=sO(#bPJ3Z5jZwux1Gp083?S?#;{r%+zl?6eFqp4@~LryK#ud{(7re~Iv2wT`a}wv0R?4z zJy3=j2g6yfc5}r^Lm_jUcfZZ&iWQYjzc|d$PiG+PNFHAe_d~fOzz>*pp5eY~b$Ix0 z0KsU3v08+nkvrU5d2|6v(v*2%#I>bS`_&%`W^s|nKVWx0;5ZgK1XV5+zrQYg@!v&H zu3WXmP@|Bvk+h|r_aX?Wp0=^})U+Sqfe$?xt%bJ_PEWHI%r0>p1NCD)IZW1_;Mdq} zkJ*c=2cI#{=8CBD@wWWo z+f9xS0XBAzqTK`KthPD=@1k7jt%-SIq~{;HyO~S}i5}EEm1L0ojR-Y4KbmY&4(;A% zRiU6d)_)MEs>&=oHSQ`rO-u_UVsHa!*@UH50Wy|^>d&s?B7O-kga1Q}2uhF?Ed)Z7 zU?MvxZtht35ov`SUJ1}~jCcg0G0aYTXd3l(@mtutX5|$nC`$XKx+g+sj5?#hIVa^L zmu>7DIqI1qj`-n8>E#UTt{WhIKQU^M(gU|6ODxwJUYRB1j2Fwcf9bT6QXsZ=(7AaG z5P92)7Di45Cj;c$aZ^J8DnCqs>*OwKA|K?pfLQIUzW~$MZ3nsGEDC6T`Vc5E$lzT_ zp)y7p%JX*t3tljXkUVk;7~Ef(-5R9X8kP_yCA-^9=b$#7-kIw(UnI9Ye@Pd*L>ivh zpMqTPEB)BePsiiONUdLU$@8aQLQGG$_q8Jp$l-p}d>6F=N5YoTblhDkyB=JFzs_1p zN7U1o7Wu={_fw}_-A^HT;YT$GvOwaR;b_*4=0~QGLhnUMmv=k{;Tg(%L3XtUSy+S< zs;(_rZ3cuYl~~u`jKE#2^N){kmNYDzdSohI9F-fh((U8KTpj-SkxmiZ_J|WOh*zPo z1l>F_{N?jm;u~`SB>q;77^rZTjjd^&&7_3QS!P^AORBQSZFcA0r-9eb8*ZQuyj!7+J>XeE3B0*EY2K-#FlCw^*^2G1ePInWEj z!`5s1Dm{rg2N&i`-Ie-IYT!W6pOYRyH(Wik`>aUM@4GMuIJ7O1;gN^!vyBy+kenHW zjq@gOKX#Y}1573e#igWX3&szXkrx;fkH>Y>c@Fj@*AOiG{Qb@Kd?H6C0$B>>J9j+d zuSOo!w~QMR9VPX^uZo{I2E6b`vcVAgvMejh?>6L}y`b|Qht%boQR>xdD(#1@@~W!i z=gHM~Gx40&&S~zvuGAY7KORCfF}D{XyT0CY`w1lqe*kKkHh$mm36K4kE@~U(Hxv*1M-l zolBm8gRyYi?r=z3rqIDlR{Bq#m8R7MA5a)#%2|Hcvd1^4e(9W5Ybe<2w1^I@^L7hj z{oth)BAOtSf|7>>flHpnH>!DZ>pJIb_>Q!4j^KaSbYfE|Uq=RGKn$kMDD9%n&_f)$ zP}JHFC-H`?mM!3$pLFK`F0N9XQ%eiV+fV5N6oyL756pLs;N6B8yuFKNvdSbZ2L-GS zk=++R!2y|q9F!9(1WyeBP`L`0(rqRX^K6F?Q<3fVzGH@zS@@FdgbJ>(AcLJpCE7 zTSipW+MiEahI*L6E?3z|*D0L1=V05W-RX);eff@%nw9DBzwHT|@E&QNBe|szK3}^= z-NJ(2{2KzG#p{N%@{~NNVozxRV-gkyV&DMQ!WZt-2L>e#LM*XoMdJO1WfBYlA<`x`sp|f7`YH%lwS|bsLGc$hiw@-; z#2??e<}-eAd<5b4+s&DBewY&Aw8Kk?{B;4)Y|l&tp|tW7d4Dxp{`;qYsRCwF5`p$m z@<=se{@*?S@0|C3i=^lwr{PW&XUL?GNvFxL#5e=e{R`R!rn|KrLB++~`u)QvG#n{i zU9yAysI8AHGK0}%R9SAgd3pF*$H&KBL+PUIe+Wu;(7z)) zHqnL@>aZOOH6Fx2qp1gr$9^ay;shbNpuGc3R}S;+b=Iufu}PCIk-ZPotTTs3>8_nS z@vc1c(?a^5Mhcio>yD-Bn%0VtFvFWdq;XeEWYTUdAH)rd*3uFb;;@5?X@@aOvlzQQ z>nv3c{>a;3%8`IU$x&kMT3XN9GVrA*V z#hI|CelmSc0aO6RwcXE2@WgpaW8AII+%J`jJ8uN$=+?gHtm1De8x34J$;KVVtxS#j zQlS}5W$;Nc$7tNrH&x>}v}GbTaHV&3;hprooGvzMYuer2GLK(osX)o+Yp!?`qI}Yu&a{;%RxQYyKeAeDic+RaJ7bMV9npq(PZtl(pKV@c zHz!EuN-2omgSz7LH@%oxjimDSC%9rIK2lo$3H!CPCHpG3RUoOk2se) zJ)52_n}!@5MR?2!r>fUFuj{iZY$@NQn$D%2@xH_vNolQ1dYsfyP}bXrUM&E}g8j@7 zrsvyk3{Q(z%O}N zDSo9lZ&lG_#EzEYJ2mv#d?i>aw%P*+k1ttz6v&$GPkYE&@^lcgX1a7%lh&WSfXfvv zP1#^~WX0*WPswUI?RCgjBqhffMQv>)g27{d6cT!8YOH!BZJ-G8vQ|hzNzAnDJcL;_ z$mr6u2?{Bk7m?y0jCIw})|)m!Z))nx8c94()Fj`I~>>JwTySWs*!vTdbp| zYol@CY$)KY^E{(dW4{~mTBK{wP2+*!T)pFoLx{*Oy=F-U<>3X`ax+m=fc_eyWn64Z zcQwZS9?9&EOeD2E9rk;yW%=g7P3~3Q%vN6goW5C#h#p zGzA89k?2!d0^x?f1IwO`KAF{KD^M^WoZq6?x-OCqal3TXmnMPKGpVrf#RwTM21hBY z?VUli5wa6a*0>?kxx3;1eCxHg&jbV&$sfvk_a}3xzJ9$9Kb%MU6Kcj8?t(41p z;bO%jAKbbqMTAF@;_(Uib+KaU&(a7R?Fh!w;Wk2C$`GZZa z_Up@*6)5+fkW#4T8bAOE6Pk85?0r*Xdg43ZsHQTVCoSZm2hY^!bS4r^l`%4Qh@?Q_ z{-Us$RQvN-!QSAGGtHnG(RaaXpcVv?2@a$^Ql8I>6^@mysT04$;9mbrEG|5=!0>#% zv)1#?!#&X$2r7c!wYh3RLV3mO?}v>)tgPakHAZtfI<4!o>QBe5J6#V>iQ-hkqtW=L>Ru?le?>>0U{>#F%fC$z4v?o7S89axq38JvcBdgC4;sW z+935jWg!#6&6_xfghS&BcB!2$&PYb<`*}rGOhcQC|CLB3{RBRG*-01g9@Bxx*Zt@!rK%so;dD3(t(PN0avLPY)nCj-$9k( zH_`q(Yq@jb9&*_uAYXoE;1|bZUNJlWo1E!I<2e|nASn<)v39pXMTz5?@o0tj40?(4 z3TKbwC>#Xv`Bw4{GS~zGu%?FyG8~na>Q3Smw^G&9`i0{bxNpY56&s7YZC?{AC?>bp zjM&c>mmAkF%V)~X;dks5;$O^upyogzy>5xTnVR2120Rz6y7TX(F?r+oJEs~h_?}zpC<@-EMj~D=7fC0BT%4x}kc54w| zWSC#mjZ%+iaW9pDCWj0QRj&i- zJ256(d<0z9qojmS^P`y#XlwTA-O?bD#n|Pl3~?aCf%~mt(k8d{rxa&`HAxEQaQ5*y zO1bEFwOm$+4PGBG5cZ;084k0GgbokNv*3GT!Bvy3-|S~Zb0Faqw!s<*B;EyncBuXn zsP}@!{2QBzU*YQYD%}T)`>FG-P;jTZ)L}4F)Y?;Z_JF>M3Qb$QjKj|6jR+6}pVL!} zPSvJ?W!#KX_~9db?YAoBz0ry>6op&@4*SrY>@p>^&$L_sqHXW{qloJ=&Sf*s{iKtk%y`*?9 z{C@w4jEqd~a{%OgbaZsK)0KS+4nYcMm|3OJ8=iQ|PwJ=7JY4s*oc0}8f+-9~zx&8j zyIK2t6CC|r`Ve1VhCQ!=4W5n5N012)dAw|Qil!MYoN9iWecqs~R3}t@>DpL(74s5z ztfi-wMAN})iBgK~b0>U8iR{<{eYd5HVNcG264-QAf`8i?3m15ib5ggK`OmAR9D+t+ z$!Wu?lbKe;6&o3XID>}1h$NN&nT79`MFB9{LbfRmeEmxEtmys(9jz{bpxWAt#EbxQ-et+WfiRoBos6=+)Y!4I9cw3X_blm>4)SqEPF33sBEIG6L(wqnmXE5c< z_{M(q3s|JYm-Ko!rAZy)EJeD%Zw13?fzrqTP8SsoV)$ z;}IsVVqO(*%;U_ATy^m=c6d%(Z+c_ZnksaD^upj#x%nwAcHjue9}Iep`R{?Gt%JhD z>Dm_=!-f@j8A{9Dr6dF)ILAYy;FTgUu8P$ z`K33uOymcF@z@g*VyvnhD5%(toR?CJX47Lf7(fyKuJcBM!JgRuS4Gdtn!JF?Z(oKm z-{i}AcM^g0L*yIzXiim5-(E4<2I|JUr!D40BH$F4S>0g}JGN7h;VdwQ1~#E4lKg(L zCnRK1O;QaG++PQ)_Y3U-XeKMXL6^%>fhK1bsm_}z%BP@$f@v%{&k$9NOu!w1!m zrrwfI?f|0enza4ONs~4GhIYaJh@F?3TJwP1|E|UOFTN3y_K>t)bn(hC{j#${Co9VeqAxa@UDxNbGP zoP>tSpA+FxIjNXv6sL-6Uk=0-WZ0)yC(>G3{rwg{nLzNIX+67DZ?8dRD6&h1{bLR2 zqR;?RQh&Jl%4X-wGVc&{Ontkf?^B;%3xUXR#0Br}Hf@nzZ!b>{ zAhI;I>*fHj8vCVmUBz2s4>{M>pG()l??53Cx_D-@uYrn_SI$uL3ivg)$u^x%q-v++ zt5mpj;k-Fail|?aFgM$?gHh*Tjw_&Adn`!@Dk^Un4P)O|he$qgOqWPLGI^J+C99UB zY3#S41$INJ=ni$f(r9pS5UGhMVSqgHG-yRq;{L44ZR|JQuyer%1xlO5&2rq=N#Y)L zK8GrOetTgZ#}Ye!HMTBTLM)yR7Cth$jrGGNcWy4O5x*I-H*LqCsg(lXyWvKKH105qgR}ra|;EFNw5m8fKCZe7y5uc-XG4ENjmfgf}CJ zYUMK)_p1wbC1|>^+uN4n6f@!7AR3q4x8c~dw6y7B<`hwmLczM^aF5%aC%%c_Si@tf zu{{5D1(zSaBT;d*EqQu9@ZO}7zGEF2<7T_ZQCaM52u)k9CycRbOn4wXZxC!P$T+26 ziCgFl`^4coyCzFhRcBGJ^C=_3PJv1xS81Hizfnf`L(=N=1%03`)wL-MEbixg>}HjwGv;mD?Jpwu0Uol|qFxkEc{-mn2Os z=97z$6;qSA#-1QQC1sXWV0ouPzrs(@dOVT8XvFXd^zQs&*O!v1?*8a$EciXe8TAHX za=g}SJrg+_#|(@4nJxKY+|7M|nK&8vm4raWndjkvoq0I?pTU^3FUVLCE#6WZPQRg3 zli6h_C5>hY9<28h@?HHv37<(>IG%<=h_h6P_Z&J8UupJuQw?t-=blmfwnnK-h@)1jE@27-yhTco% z#es&loIE>~A{v)0G3$q$#{R^GeM+M}?KwZXrcDiMbj%W&W{VmonW@~2f{V8Ux`S0D zV$i%g!EH}Hu{gX*?wx_}fe7(GWSE+3s*Kz}XKTw_0p6*}a70wCA`;iA9`UIh8iy2*8 zl_fVZG_T*~WJ-eBSaRO$3A=IFWUmxZbTb6=e$O-LbA@rNoS;w53f$ZqK9* zYijXoo#tP;eTbU3ByhsiLjgn{mXG^sLXb(ki zsN0H{h`E>7`1W4XjQ@LE15oB(!2myR`MnDJKUZ~ozp7hC>vH4&-Shv>A(Z`BAM7OI zyr-sEn^pxCvms72Ig-LpR_u3kk72<)2+uo&k!8RAfOx6DXH#o%O(P&94f$tZ8e_hP z(1_R#xxsNIgoDnxEhu8q{B(q8(|zs1TlUQb*TLNAM3BM)>C~CT#7U-xM#^&tJ0%Iyi`|p82dq+c`D$CWKl_y9 zRj-*8rb*578{$o+0=?+9ej|UTBgB-ufFnlU7;C?~!F_$&jM9)gd!4^bcYodESevYS z9dEt6W1Gdoy$o&Zv_DVxTjfbRTt(r8^AiO>G^a=2!f_>rUmo0u>INO|6>k@2(?o-O&5@E>b?dv*E{FdyYaJ5+6)Hj! zYiRKyEF|TR3`F~YdB;iv!KiB09!|$OZR4-|0I%^5_Qv4j!)!@*b@!R#wur=v0&RxW zk_x|^=Jr}M73#+bX{hTDv-n?s#{@9Nn%T|<-UWlV2UcBctZ=*ax+=xUb{0kRD31q# z+wy3rPzmT+h4rChkEiJL@$TKm6oruy{o=%lo5#e#qGoSY2E|k4BR6OJ5icG%6~p*-JdFdgh-$KU$q~ zJA3+~_Ai(JYisK;5KXBI8ay6Mznq^0O~p_@@1Fd|u}%^hKcVR%H=Pt&D$PLs*0Ey! z;m;pOwkIpv(Xhz&4d=qD92QnWQ~!nYu}nr+-ehQ7;STp-3yZX!}`!E<#s&cDVGtweM`+A$3%= zs*e5VVD0VZ6EpI6o#zvV{UwfgP0Ll4-Iou-d@Y8v{subyQ<5bvr6%m|2$ukEXhc>e zvu0X7G{zlRfzUp=jK1WpO5<5K6RTpC{sAcJ5#iOxQ1Rc}fZ7tsDyrv4B?dr-LJEU% zfpLZaarP(-)>k6|yDil^DaPlnXu`{S<;qNnq{T$d^vX1HB*LtUN~Gw=!B5mdJLR5G3>4p}{>Yu; zuq9b(err}~|6YB9inIJ{3ko;HKy`d028*we_RmA5GMd&nj#jpOZW`0eL%kkL2&2AB-wH<1WMxdkshd4 z3_tC*Y!C1CsyqI-NvEmS*0;QbAVf!QTS`16w`Rpl7!yJU4{F@Cx002}`tagxGVbbN zz}}ytzR@~EteSNNxMo2am`^y3z8Y+p;h4`B-B-EZ8+WuhmCVQ1*3;pZX@gahE)PP_ z;Afvu1)cYgXG6ZhsIy878Lt0%A~KmF7@&K&(We}LOtnZdSa+q)g~xGfyYtdSsKOIV zBklq@AJidB`XYSFu#m4kV}cvrD96--ix>hc7kbrlv4pmrF2o-DJWDsP8pSFe8p4Ho zo7@{&sBg+<)NteQ7?fpYD&&B&AC(go0ovATAI~56yNsW`d$CHY28W*Opzup~pfR0ZSsa zJ-q9~q=f&5!w&;JeE|QmV$hW;l1KYUwOXspuU};LM~flc=J&LWGU9ZrF9BVZ%@_)C zdGiuTH{G%gH59`$Spu-0EO?pJW^nD#1*6Z{$0I!=exZo}_UP}9eMvY|B2bEdjqpp9 z&XDTD>o9pCW8y2tN>UIa9Q5()Icf>Am%&Fd@Lg>S&y{W6NUp)2-E$eL%yB@}w?-LP zN6{ce|HiOn^P!YZ(mSD)RoQ~@d{ zq~Pf)eo^k{&GS83iS30X206?Gv$UkI15bniL%p&o)f$MIk zqT5@GWo{C<$pqrxqv7uL_C>{k8p1uYR{_CSjL-{5VaGin*)0B`$P0?0vz7w|H_E5+bH zbQdpCe~&+=@^SEApmYbSNmxl}$4lz!GgWnJ?sXOb}u71p) zU~`@VSd0X8O#m7Rs|0@g9G(6GhYdxQowV$E87@lU-Q!|!Arr>GY_3XLc(&q&;R&f^zd<8edZ2~xSTo{O zEK?dl=9S#Jzh=u@UKRh6i45GYX|G!pE&5hup}9n{IcI_qoDY136*JN2<8WSMdLRJG zxe*!lm6*Wk`Z5tYwE9@M@==~>m=dY3u-%fwv~I{@|K0@qBfXIOfWlx;JbUt}Q;uR# zSk1OWR%WbcC$_QIi}fBL{TI%~{`^Ao$On}Qc81)*<$#_a1_JP+XGXfByWeKm-d zIGvk@7U8)j+Sy)b7{1Gdc;n0H7cQ(h!HgbDqy2Iz!lATTnyyB4mR56WDhq)%mQI7t zG!4(mwIh5q-m{x6FbdE3@31nIACu_4Stk52zQVl=Zn%oyr_EN15MiZ+x>ecdXL5t# z7jW&9RH%EP^1PW)Yw~z7*zt4a_{e*}?O3=^fe0`oJ*3NQ*(SuUAwm4?1I0*AB8x-EH&8JY*ua@t@-B z0}<;>0!-m>kbyM!6=FLGKs{qRR0C=-sSFuF4G+%aiKOsuE2#79|za>fiUrxwsj!{!b5QL6D$7>1I?|02R&pJXb~YW^;?nE z7%F3YTdoP7wuSYpSz&Tv*}@h2etkublW<&}?leZpS)k7nF`)bO5&G91fr#BveMO!| zdOj!kiux;|bB7HJTN#DlK-}5#_akZuC@~V3phv_EK@N7Z_VO&MB@)2p13NoExm|TN zR&f#DXM9YAc?EHqb{)=y0s5abX~GI6e1$AYn&@B!iqu4&L#?e}(QsS`YU0v1Jn^{?XDQlU9)m1~IGgqfEdleNWmA5A2 zqKcB$l3Z+7v(#wr>g{cV1DD=2`x9V;Rcr?4$Vd)zuT0$u{=Hgsw7ej8Y+Mr2V3D7X zspy?mv>(Bnw$0jV;p8cK(c~?88jJDz*^Yrolly{0^Uvv1`GPCW^8VByXaH@zcDu_` z63w3GU1)6iB28kO@vNjO<73`>TdQ1)9-gVou(@M&Dz~kq{8aFM?MP^MwAvrvRV|(k zsl|t*?Z_6Rf^R#IQ`@@&8awpH`FxshX9IUjYmcuO-2Hn@= z_KR?c^zn}ge1#2cWA}=H@fXfq>0?E6_p+I$eLz~e!{wh5*9MtLu2aZUu?gw4=$NEK zHHFzaax%ym%(p#Mjuv;N_hv0!QWvdMSu>bkU?LBLIGH|A8vrer1F|C38l&^`1Z@v0 zkdAumOD6)aRSR%WQxiDBA!ImIO~pGmQvBTu;$It~H4N!aUZt3P*KYN6mk}@?vHHG1 z)!7c+R%_WJB+Kz0gPAB2dn@%f}RHH7|U6O&2PmgtL%u(y0YO~fT*Cqg682d<)^M!x*jn?;=B>0CF|P2B(pa&JRUo@98h}!<@E6v~*e3cB z)Deso<)rtKI-A3HSp!A(hMbwR*T}JI-KG9&!`E{iN7o$TH39itd-SwgryC1Z-b252 z-P(&~tq2LVN%>BenvauB)-N*EMw|SD+>QgJ0d7Jw^)KzZoF_e#;7n&}K%wvepz}p9 zW}b4HT4#5+KVr;A_X?0;WP2LQFHD9|6%jV_!(SVJ8|r|9Zj7}Gswf2GQsg>)cwdOQP-{NGtLc0)~O_U8m*2~ znS1)24%4Ms)uy+yqT%^E|LU9=>b@CZ&nsqn8l-e97c&KV84 zCP|0HX5UQ5GSz=iFK<2wQdw+1oK{+r@`L@oSwT=*EEjGQhjo!-p2Nw?NhW>OD6Uqt zwrh>$XwGY^c0a<{Hw_H3N%{;3vPoDF`9%2f?=9tnUzk*PfF&Fb0U?GL^%5UD@isNe zw$6s=-QY#HtKig@LqHd~))@j&_+PgoMG61lC&kW$KMh=Yiz6i~7&=9tHrQEE;hF2w z3zF`D!TF}jRc)8%fx(1yDw#N(T`88R-s>Oz?-r(lTG%b>4e^~2$6M5eo7j}flu54> zMzzVow0=wS-_P}l(EAq&s4J|Ud{2n}^{oGT=mEx$a4EPX`v3du|G(q6rtun|FNYnZ zw)(=ZibRx!{@uvGI~L_D=vF_(ga<`+(I8QfWB%QScT3{O|CCvI0ZaG4#`V_`zX~DTqr%~^QA?8i^Fh6zi9q|%jNx!H_^Yx1GYs$lob!8i^?|cA5Pt?(DJF{i&yzd| zf%Z|1eFpG)8?gRo)ZhPE_Xdq1w277Qy8$qal1HY-lJ$l>IuY;=FZ#?=lR|>+Y{;?2Fs*p%F4|~uYULB}Gsw66Xl4awP4$KhoM5uWG{p_U z)W^)cNf*7HaJfl}jHuJ`720J~i>GPlWG}DO#l>y5HU0$RKioOlU3a#xOo+jgA6qQh z@vna20@h7zsc4h#j8oI~Gs_I2y$!xtU%cX5=6UQ?6YULgI*8xm^HOsm<3@?Km&V1Z z-}&M;I7QD$M_}v?ppPC&1ZDfN;NXhl0dEQ78%qGgP9e&}a%7HOi#{r~(-yXF2l1Lr zHqR|Ksyqb=vU=BkYud?W&#+`2x47a7Cx>eNv>Ie7clZc{cFr{}Kl7S+firo7AIU77 z@VJRX=ByKnB<6tuK0vK>AL+2M_#--#!lQe=zE4SwdJ2`idwmiOTI9WOc|&a^{o6&l zYh1_@;y)je0O^7XzRL0}+sXij$KN_^8vOCLLH5LZda#7S@ zMtJbbO)+=z!AFgmhA(P#Gg8MU6U%4;<%Z%Zi$f689zrCw+vK`0<3l@XtYQ&UhnPBC;Sl2`baGtaoK5*Jvjvup6=Vs zA#w!z(w|(4`S00JTAN*{yc3FJT-$HLu57~Zv=7{q6seVn^%@I0b=Z(We75YI$4|5I z;I_YYQLP@NTQDno2eIdeC%1XBdM6t2O#5?pkN2-(@#6Zp<~Mq4nX}RY`2+5|q!7%*qzAPUK_AT7k3{fMZ@l z9H%p6d^;=2d*`sywHx3CXf6&hvuS)9@kg3URZ@re4S_d-v^OW8o%sj5N|l~K@_{N5 z^vT9(v(GsmHtoHON_oFFSX%ki!*teZ*(|!t!I@t7W?g_(786Jf4d>2O7Lw}0=yas4 zLvgW7=;BB98~PiMmX}NWs-5l@-1dfCrdrLx(n8RfIhZvwI41_I^0EbbSdH5)OF!e2 zlQF~=>@9vsoE}dx<*t5z5MtWZ=|7#o|ISDL2e~r37p|l}e)eusF(4|eVh`eVY_SV! zKEO32pYu;#+!u=(0(d6aL6&t!nZyF?EqGTWQu(HG*x{CiCB2 z>MSy+35$u!)BGp@D4X?60Z2rSSz!D`Sg9Ap4xMR9QA8LtfZ2$kXhF!yqcGhWMpk`c zM6*ViX{H8cj8{G<`yO$xj~EuG1^3r&pR|05+xntrt9!*KcRmPF#gn~`lcrZ9oJ7@ExsMeA+ z365L2R$ovUeiv}3mB)4a6pkAQJ*$2kqq_KFwv?eDq}AM+0LSGCh;dxEqJ?Tp_BSzLdFAe1L2Hd^66>a12F&Q3kfj zoW@iHM3=rumzrpGI;i^g2+HvUCyA(JuD$bi$@QFQ#Ya`)SUPAym$RK3E3{Il2t z+ON7FoV6kgnF@$L1mjGzK^|HT`If^nx;|IgHU82#$6;qi!_TZA339KBRU-McR|E=> zGnysaCQx7YuRphB#L)`|5t|PEf8CvBP+Uvb?~|Z`0D%C(-4iUp;I4rT1h*g) z2s*eE++BhMhd^)}g1aWT+u#t~2?V#hNzQYgJm(;jQ=ERPCAByVvesz1I5w zx_dGQ+7TU+lGeTwnJs=1PG^j>QYhD-!;NP? z_2-PqC*JDwh&w~Rx4-wMbrKZR9JyDoB}{$bU#Az2%exEZdV8|7&$ns#s;oisd{`g1 zYd6t0{;LNS8u6v(+$Xo3o2##%7dP^1ziFf)#7v%BaQNTCv(k}rqN&oaPuH>Insi8W ze@C2mG1hXpc9jw?Xez1$EJg!C5Ds^`JRP&T7_c~Hf-YV~a<{_{5M6gAMaB9j7`jmGD^X|h3Kn* z>z37~`F!wx55D64`}5o62mC&sqocQ}I7+lvkj1A6$$2>$?r+bX62sh8TEbY?QQUkf ze%`_xi_OekuIo3BP7W5wp2sYlr<$~_HCbBt+<#1Q!ZzZ+87&{W%4;28cDief=qsmUCapEy}mr{3aEUxVrX>Y$uOH7n~;wS`tg1t z4A#2Qy_~Kvg27yr`B_!Hi6W@S@Je)zVIjEs+aSiBR~}-&wVAqDWPgt!gpgoo^{9!9 zK+tQ|(G~ohR7)E!@L38yEUSLBnzq?LT#&hktc)?+O?iIH$$!lk)dZCV)Gka(TpWk^(UtW&;2vCW-_G$4eZ^#NJhVt{l!&9j!dcTLndg;?oio+hjd+Zu5g60 zkz`ne@p^d0Zb}HUFuz2MFR4oNlC+8lrXPtD$0e^u4%I=U#dWduny~#(=L4i*UgUIk z*w;M5oZIUk?fX97NC!#}?jy`1#xV|B{R(ZpHxS*Pf-G|-7QG~ojJwiwKFNQ!ba}!B zq$wWzDcGQBt)OV%YWhBmACNMB`{j`d*;Ychz2XZkQzmYY#FtjHSd1IS zAhzSh&Sm=vQO_Esz!iVrTQ5ojYP`W=_ImMcP@CU|)4?E{Bd{Gn;Dj^|C{FHUlqW-= zjYO|c>!(@fl^UTup|>uWujYwo(#aoj?1n|1vaVkG$k@w!zEH-ej0hJ=se}49luEV3 znucba5dHF$uaa#~s?{L|lS{J$yRq`h>C8|Hmc?zuN27-aBmsa8Q9pKmZhm2w;~HOn z``&2|X}x>AcyN3QdYf%6O7hD6itbmk5ESlJ+O{_I>DpF*fs8jTno=?p?;~1VA!F`* z%LYc9ph7CA(u)ZH+d%3nx=v#jwB)k}Ruk3dZODpYj|(O}47OC^30*3dsh#l-1$o?6 z-J%)?p{*6!)|4Rzz<{F$JqF>$#T*v)Xc7j<7$DI1jn25xLSLVU6yNW3mPme<%h&15 zZ_(Gk+0fvsd{d<5**Rc*Xdp|Gv+2h3PBDn!MJG1Lt*3+>(B&Y_2AbzsP{@#B)JlLOv?O$HUws)D_)@p z7}7f4VK49rh@hA-53wfLKFD^-Ej7i#HvPB5=ew`x2bMJ}z-4(OF+vJSW2Y^C8Cs=O zX1hp!qr+d-qhKdanv})O&TgB+2=T3yKznvmMwGd?NUmf5;71OxnmEdp2baTx(Q2|? z2gRbV_D#WZ6J1^B&jz}9hwo8C59r93ydWDZOU373*T*sCCB^+%USY8tp%Xus=W#m5 zw_{kjT*)tr@@EJi5~*O}U$OkablmM_F5dIDlT6iyEDRX91IFn2^d*~l*HqREY+644 z7)MHQo|$m>pnHCURqgsS=a0LK-j`pDRK84IME&Sa^2zfylS+azDb*sO$=~!1+k1%z znLoVAcJ1qumm7o@m#8N&nfdapZ$Om67La8}t=UphS$nZZlI6f8P>*R>x+~+QA@ij9 zJ;4LK4C;MOjt>FrIfFCQKGeq7tQPs=vDCu&PLg9V>orw)1FvO7(nzA981aB_e%b)i z>-JP(r8>d4zHT+@sO%AosBA@yex^p2M#3m({1@jH2cZ^i&D|a^-%c6}=gL&4L-@&W zZr+SDvDF#mN>6*(U6EW@cWpPL2RjbPJa-O5lv(tQ0n$%89KN75ITmH}XAIFXaSlp! z5$7+IPW%KNbNs?LD>~5z?B~HKbQ88+fs7!GG2*S}Jb63$z9K9;x`ALvA}L4uK}%tL zD$Z@oM`;xzIm`;|!y1 zUb}7v#}MJG4+ZaJO>Q5N1cqzYCbGZl zrCzVYTTblzn#fjxBFw%9i55Jc;x{2h zh-TO`y`bw4w!9wR0r|~T`D6IeUb$|mu~47dTNH(2 zo8kvCBI|f-xiA|v9sz3By!^LD;qlg1pB=>C2o14+BVtXc zLJ+sUXU_wvYDPIpEv#wx>`0jL`LL!T-_+=6vilwy_&z`nqfKYB@QoU`!I%%8&mwO0 z^W3%^)wu%O<`5&~_Bx@nYeI6GSE27!ByVhqq*!l zM{!y*$J&({Ogs78Eb(?@ZM87oLek!O#lLlV z+n=Hu1yezH9;jrmyh`}Bv_SQxfK9tzpMZk5qZ4}G^wI)4DdU3EXW+*tL@NL^} z@mo;aw{W!4yAnIaDWV%T=%rcG13s{&T3t~Hk^NHk#nA9i>ciy~MawB1p}QEy3c?97 z7<^XUKIMuBqJUgZT^%GIB3w%w!kKv=$NQ|#WGLX05=w>K=oulwN+t?{qSzn9GJU;S3571)d;D5AOr?f`Y(Q<(*8B~P*yvIdgIU(YM zTD}?rys#97pR!Twu z?!dd+EhINQK54vo3x)XJL$xNrG!D9FBpuS0>3Kc&Hi*q0hV6E5yP`#tU@3uo*Wr^2 z6P`5{H>uOg*I0rhHIhs2JnjoTIsDF?6PvbVLxL+3n3iB4GgFd~^##KA2ZCGFm^AV> zdD-_t!qriACwWtmAtZqoY;9q&tcmkK$?$5J5fB==~Swgqvo?=Hd$?)cOi3^ z;9cZWoyIL`(H*gy{BF2mN7*(L|5enZyObj<3>G}mwp5Vi!`Au@3NaXIb8qJ*R?dN5 zUQ32M@EGu8kcvI|fxfvhyO5g_7;e`v_v1@1Z}qMS>abrp>DuI2j9we^c0&S#t5LKh zHBip!tB%1KNk6v@DN@YBV5@%uy`0Uf zm=d|o{i(K50Oh2%zlxBT^YWxZC?>$_2|JbrtX*Kn1vYm(qQ}wzJ+cTmh|*&P=7`@CSno ze+vP6sAp7At?K>f?|PBuVSL(gE-#ehnKdc2xr^<{m|kDr*@VCSA+dyqPdiA;L|taPoTWB#@{L z559;XJ&F=|n|nX%Q5c#Hc@3{oybII*XxR!Da4nrj z8GeTNVf@bvQC=tya6x1lwRoTY_8xz$XI3?WRQNoCaD)7%acpr*l5&3M&YJIO%o@cl@KTcuUYPCd2Y4Gs?yUbEDV1v6GI?)w_VLc4-+IU&_WaJ>xQ; zjFCh)>d{3@mhd!!d;Ia+`#3@TcWTGV3hw5}wN~rtkL6ColgKBl8^hF;06=E9HI^S$ z;ZxC$o$O=J4b+DJC8h!&f~A0QqFnCiZVIo-ZaPU{yJDz!v;=cv)>^XqgG;c#Jot|r z9lQd*KDyS%qLc$g;jZb%4E(D*M?v97R zlY9Dde5*41?dsNtoHjvnz8VF`{b`nD?xL6WYS=RhkSEw!SbyuMzeY(K&VeM{zVSQq zu3kC#VKN$CAtK;?nT4J8OZ(CVRU^0Hn@I1H+j25yU+SX#(Vs-9aJnjCFXiRqOVqDe zR;ICb7M{&iL5Hx17d@3LG;G}6dUG5Odoy_{UC?_l{lTKOF%6i1G}T*zCdwS*E6G!D z-^}8?%kKn@2KGKiI;C`D*|L{>J$uDts!|nX+S>Q9K@<|x!W{{w|JR@g`lgKYgIatL z#Zd7&SoATlxHr~7derw4o~N}8HJ#mgkXmJOV?R}9Vb}G;2PO_te!NFj3h2cDW*!vp zELZolMpsE$2?^a!p5*8q2;Vr4iF%jcadfjVo;4oWhSI1vX5%5ylRQwS{_G9j5_F3| ztOU=_O*0Gl%9|TT9vv=S_MP^#`1&)4i#o2}ciAB+YD3S-{JD9mzkp~Z$URPKL2*5VUBD4ube==9VPC>06th(LiHSr49!RH&^kirdgE`^{d@=Pi2FgtLTi%cO@U`;#=C z`m)<@m`KSa%?vEw$d2L5qLXP=c+@xWxf)rg6aU#uX`;yQZi>gG8iQ}aw{gPqJ31pD zIgtX-$Q&m**iX+A#=KjY*P-l0Z<7}QmJqt?Fo4a}(7p?}UitkbC((hwDe&vx#e{I^ zcM4=tuX}fssi(_9kD}!E|CP zbMfV4845;5&C+)UIO~IHRPP;k+3JzDlH2I4`5B>TV+Q@9|8`>Dew2VuXvO=;s4klH z%qB)H&l=S$EG)~+B6-tR|28e^r%%NbthN9l5YlGw_sTzg=E|M(`IbV^mZP%y#r1Tk z_4z!eNOo-i0V| z{R2~=@YVpP=nh#XSs}D!1~2D?KSrn*;$hUCQLO*pCOLk8u#{AQ0$2Hef)NznCcvDP zi5>ET#~&P)k?@ac)$8t#um7)i)XKzRP-6gpS&1b9&I-u;*y8v%&T$oqediTrWj~xQ zceZG6eYZEK=!WO< zbFJ>>!$pqoYAeN+8~GiVWY2FtI=Eiep%28!hnposZND4F@9m1)tj8pamfWuH9n0PpkKlJo8Y`fwc7W31$>PVXj5e<; z7i3>XlEnBITsfhucb{AbrhfIg#L^v>-%?}BI{j!lMT^imh)#B7o+S}2cG$Mh+OI}R zu+JOI0vrVvZBvl?3vN)Z7c+IKF}{rA+#%t&QCc9L{m3p{ta3T!|He%A%hh&O@AyIu z^s6||PymWBS?(ww7oT=XJ;lKzcXor|zBgrzG^LG4BgG$ImWkzmQLynagP)#IHl}_^ zp(*{jM`v0<3d25%@BK_`4wO)A%me90syv{BwTywrE1wj;6&nBiTv4Q~dZ9bgM-p;& zy@VBN*g9Q|eI&u}>=7Pf>olpxr_CefucW-vZO$({g(KyetVg%W=!2k`8!|z8$fXc z7?ecZS#IKwT*c2C70{D|LnpiFg>QLwt=O}8vxY3+HV zm0j2|uSn}xVyCWNYGVdS!Y{~S(c}C7203)|P@XmkYkkSM_g9Q*qX4`HWNI!f;VYQP zqF?!1fAY4t=2p1T{)}ty%VS4a2H~%Y!e4s)oB5vP3D3{-5_)qNvyUOZ1`4-MAw@H_ zgNCCEWvIkq11(I21DbIowD!5O^m&ooP07qhlPi10)%m^nAcE9ZRK=vN7F8BiF(Nfq z)|XqJY(dGw9zRnJ3l=ij!&rW9+h1@O@LBhcnV`?x?hCr9n5i<*?hfWt0&v3znYJ8* zb}d`ukMTLO*VlD8__gkZDf4N^2+4? zG;8t+BI4GMz8IhNPB7&`nPTj)Nugc4} zEKtFy^6+f~<9uW1yzX59QoM$y+|&2b(p= zkNuKA9CdJ!R)~nulUYpMe15XWbsdOOT$+ZpZlV;gOF z*sV*Y8_2>2M&j3-Ub;ttQ4l|ADqJ{l`^-#&IR(j zKt>>1mX5%Gbi}P!AYt$_)jpDlkjHJO#$Ch8paM1PQ36iTc3|V}wSrGUC=v&f60ZGc28qtUK{{R|pP=QhEvX!6vSusoMq9@&DjZm}6&E-n*;FBbf z_=)soG1*c>7r7yB#3`wxDQLuYE>ej43yd#brKNZPQfFRaXp+&``cF>kGlm9pFyp0R z3zw?|iU*yiDrsX15nm?xoKrYHhww8!KOD)C*i!IR5H%jJU|=`7T;Pc+?RTd5M`5!9 zXWcwg?rb^$E;FVh8-CU>zK`Zk6s9s)DplF0S=9E8jP%TC?*(DWO*zK*{jAH9iJkV; zqn(gBSZA{IxC$iImM-xfeYr& z)k#%9ZkAId6T8);QIc?Hzpls?Wuu;hzvvDR)RlbLOF6k11)*~Zg>xANg^wQB7hebC zE@yFo+}Zm=L&p+eWA?;b^qD4cxUyHXtvrw74w#?=iZ@RcQcs#&ICJQ4ICv-3iNSFF zIy^)?=xUYV;q0XHF-W4D9-(A>=77HDvQg2MpPszR#4GDq)68&v4V`$KDaES8PN`IT z9sowLbf)B!CQC9yn{%YX@C%};>%#}IiS5X!4=9W-F^C`^%H2Depdoo)_x6vm&PX9d z)Hxi}$esjeUt6H$%=}nVXLTuh()19C^~kxIg6OhCSNr0@nRZ|0@|_najzD33W)l4^ z7VDGQ2YeleByf_HnG=q~{r$Br0WQgL{M+ap9lq`Fzi~2=tH%K0Y}d~<*%i(`pI7SG z=J)W0VOP{yt!=tCkoR-ECNC`a$C$q%hO)P zbbg)EYPisx1L;EH<}307Q?Q37fI7@bKR6}E9?5)|d}!7)(JZepg~sjrwuDj*;(KK@ z{Ul{DRqS)=q4`$PRkHpP;-dDoYu@l@Dpw++2iow_uexMh)H`D$I{6pCJ6r6#UH)>M zlN4ojwyIC`&a$5u593Du;M9jykI>MP>qo7BLHYn9`W8(*O;MN%L zE2<8bU{BD(BDwGt3xUSHHvBtQK@}cz@Vne1^5)KJM+5x(GMgj!*9U>ayLwxFKT&Ed z`*g&teOF{{8lNw7qAH6lX2TTNtd*x!aJjI~HLPnESh1 z{qHTAKfv;feDJTtc_rEv5Rd~+dE|-36BaGO+lj!bH@>%MH@@kQI&^6`+EB4`UezrB zSCqn*zN- z_lr_MH+rOepOURT@fvW81|v(XNX?A7l+XDe__zGV6H-=d6@DdxkAWR1U%|&pbhLGy zmyq1QYF9y{g|9aiemETqRRJ1`bb^q2oHpcW_iFVpFX_dY2AI@G{KB0)Y}~5I4k$b4 z;(v5q*T=Ku{)i5lZZk>_+3@F{M^*D0DAPnhTu;iL*eBqDkb!)W*U#xo8#T66S%_b8 z5ZBBD#P5cQ-asWJDi@#@4+lrLd*Gw_JBlRlV|&N8k7xFVEETEQ^#&iF6}L#Qz2TDV z#VilsluR%}ESH831xsm4*h|!+^^kWK%^)~>Dq=2cOwy*TO2FZ6JB-$j&d?_jaF?b+ zmE23$@$-Pjyc`j#x~F|%-}NQ#4-ZpmW}*_WbMZ*yrFH@wpi5sZxjcL^4NK)ggY%Ne zYmC@Xkk)!p^5tJKrzFLoU%x@5ARS%b(fj>I`WX84`ACYUA^)niS3teGf+>XvRh4*} z>QqqTqE-0khV%Db$D#nty=${NDF?jP&0*d9&0ZS4@^8LKNe$@PNDTyo04A>A#x9nj zo6H66oUIW#)oDEl!w;;AH-Gw7yN)V3p?bX*8&u_c>CW_m$WO+y4d6}ch zu&DnLcVhN>=He`pyVP3yQ4-Igsk2jZxFB_t*i1fTEYu-8r zB)hfg4k{SUztEdj;!Dw%Gw!^Q4I;uHXh0)=es8N`a*c#u;hkxj`AMV43^gbZ;gm@; z7>X$E1?i`K#bF149W4tLgSpH$y*Z^Lj)yaqHgdw5Ujzu7{1Wklms7-dDhO)@{h<({2}=xgRp|C3^e%V&@y*_vSxn zYMDyJ0ew@ao_t+093DkL0ZMXhZ2~N%2T6~;Egbv>F#xz_y(HG9^18EmvcD`adnlj$C)fs${ zM$3|1z0?s}E9z4bzx(rJH!JM#%c6tAV{ zdpyuN=^o)A{?(^{Q3b5`l_}Wywm_}`&ta*IV}U$e1w2P(gd0Kk0!Ehi`Lz=k_Q4Kg z=5Pr@Czt}U^p=GuH+yX*rEKLL*|J;PGWXuY^{3KdO3+?*)}Jyb}Dl#DQyn`d@?0#Lw84GIg0i$ zI}bE43M-qfd$U^)x`SLn;Pdw_P*1EKes!C`+aUI8B-;M66gNOk4S0g^a%*K$JJj$k zq=!CGicDu9A7-jrT`*gknb-;g2u<{FC=Znv$W)`7QyhP|RIXyBYHzIc6%{=$L!vaw zc`B967st@H_N+2$tJ+Ldm4FJF%9a8;V74m#Sqd!`(9W$VeBI0CUw?MU9_UyQl;}5K z$OzDmY0rTel28^j-qc4W+XYzQV*M)S3gL7;fgG(RTgm#P;r)Ck@T23&7suUcw}#Ig zb_E=?(1E^jx(Q9d9yMm=8B~19dWFLz<*&1L^>D!OmRtmMqqdZ7lMM+h@+Civ0-qWe zbxEOiT=K9Y3N-CHv|W=@Cb`hrQ5SOE?ZYU)MkvQmYe=7FFT82frTb-rXM zC|((25UC64nHoxz^D$p@E9A@6>mOj@On;q~Nx&8Q75Nb%HOk0b?hCpQm^VCNBS4g` z*@f>d;mO=y;3S~p@iOB>mY=t~|0wz&d*> zGV~V}aM<}U>|%*8C4kZ5u_O#n+o=~=I53<@+j$9~0f5Ts9`0z*U5&h^0?)vtPGRfE zP$sr%*0&55d5hcq+&N^^M)_lj^u*&r#gf=XO+O6PCQ*a7Gi2IKSS#0*d5<9ja!`@+ zWw$ec@>h>CKvN`YeocA7axG4fqZR}#nVBkY)2GzZ5wWaIXH+(uD;cY}AYQMyLCtGi zkV)O{nH3AI8U!Kt$NT!qi6(l2<61eexZQ<%0-xO>DWKpRwgd};&zo8%m*-DAQQgq= zHzWp>MenyEvB7*9-8dbhU#Uf`CS;zp3O4?9kidEH?IS9+q&v#Z+P(A`^YSCt-61JJ zLG9ElZKmOQH~4(VG<^p89vjrC#T7+7jqJAyoL%))$3H2+Zk zuFX@%=`RaHM*KDIJIxL&jEo|L64LSH=Jn^ofhrh~d)l?7a0u zFhap%JJ+7bFQD>3>ZpH-P7k#fLVe1U&;43)!%Y3GzqEVM1TyT0G40~JDtG8hgmfly z{;CzZz(G+Kmzl;+-D23hrbUy~B48hX;=Cr)MV}OZWoMT$5cSOaYU$C^7iviZboBxG>a5Hu<>6Ok71w&zPNUxmO-mzFnb9YZ&!z|O z`zVJc5TjmN04SHUE;tX$KL=HY6X5)UJH0#T7YkvVWBD<&4wE`bJr~E@z)|$%3T|TT zy7%wOn*$;sZMX!#pqnUD921!$JR<_A3%yqC3_&aeOzA^dgb}9eCS*~DkF91~0y4k` z9aOgFVWbQW6G|C!pG}Lv^=TbvfL_Af_ZcfWyN!|+)la-C@kSiXu3eIo1T_0WyTi&{ zkH1_wFkbk!97%y{%1U(>QWKwR&fcsqF<*0;#%KR$sVQKJ`^JrQ0-Sr%q-#@&rMKC| zD)9A|*l(gw*1P-gl2bGfq2BU{A|jV|2Eg0gYWlLuYim${bZq*V*TM@eJgww`C45k{ z0we+#i3;REOSU#lkiY9!!O|`25Z?{sN;9Mhb?4=9Zo`S9+3WU?GCaVl##2kd+44rt zVpZN8WU4LoY$e(;Eldo1k8192o}o_==FNrdcQE<)m9CfJ_1)GI4}<0cBf7rLp{S~S z(G$yjlPFMozE_;NOu0p}Q)@Mbc50>w=H8ykueG?j`F$D#|FLWS$N*QK5Qd{Mo)ude^+mz7MQAr3kQ~eF ziwB|b?w|$w%gZ;9YOQ$v!Fz;X0yyOEndhn~en(F2dTYjYl8O@1g^x!@VopB%Z$XM; z9;nfu*#|QGHxZk^18W*x{;{T!CW;#<>$`oI1=d5#{A1-M8R~1ev)7uM-`{xBzg0j_ z;M!S7;{Q>0377o09e(}ldnmAA)ol)|>OX0Mf649|e*d9h$WSx^H|UtW);Ish|NO=e t{-^!DRlX|Dy?gf*?oKQI|7NH&&-^oZgIgB&5b)RcUP{VKl!)p3{4eUtwiEyW diff --git a/docs/images/backstage-github-app.png b/docs/images/backstage-github-app.png deleted file mode 100644 index 1bc87dfc6f10e65a2dd9420dbd49a9f7bab75754..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 74537 zcmdS>gmnek~OS{bcAff(^} z*`vP9PSB4_hVhnw0x+c0pSlVtj_Pxk;59D2iFbOn8Z>sAx+#WYgkbQIPEkR+dU#{dTZ_i zWqrXY-A9%&xut8a)@siST?>#mV+`Vj*Wun7?-O;rn8>16lemW8CIpy2Y-NxT&@{f& zrWQ%emPhPWDGWy$ix=ttq&F9)#csWPca2(M*pBnPx1my_%@HvhBC_Z*v(NWwROBlY z&B(YvlMVesy$yLga#Ob0RG?KmV^9IHY+UiJzkOyAxutJV#X7anqRAJJJ{eD_xFgN9 zWy}>6VCbOF02l;Ve3%!|Cs^nu2utwaXGvHZ82G=!;b36GtY8rSiK7U;|Ng~8uit6@ zzQZSm!XQH5Frk;{XSn~whS&WJ|DR`AS?D(y5j8Ox8R%Wj#M#Wu-o?_v^^zjl92$V+ zD6QiH1A|NX`+}8Gr8t4+|IPd|>!Jd7+PXX09Jd zJnd}lU3fhO$o`7K3w{0_%uGh|R}@zp0Wxg`WfCz5XEPE`CKe_ZGC^b#5)yuAQ*&Nb zamjy@L*E3*EL~k4d6}6#JUo~@*q9ugEtuc&@bECRurjlwZ`KMDDnf4BS(N&GG5ze1sM7DVP}{%@ZNB9Az;*+IMU zt(CZvI`j@5WPkmNpnqwg*Y7*@0$av@y?zY?BMc)WE~4%UdtiX*tKK);wwr>U~r0yJ2k0M1?> zT!kuJHS%wi=#TUm@AJ20*_#<9SHF|4;^N@+5mgd|30)8W5$W$-DS@z5x|AnHXUVT& zB|l=kNBH-)`kky(eE<9USR31a3ja@4gptHQMrb1Wmhn^mpF|%qzSaU*CR%E5T#o+} z`@i*9hJ)5i1I~y}DdK-h`dzL)1DrhAp5bYU@6Xo$l|`~JLb_#2XPT~hF}8LUuLS2I zV;I&qQ?f17GuUXDo}QjhvLOiLedjWY9pxWYpEkF*CDRgBv#T~DgLcl(%miV(akQNY z{;iFp3#qcD_|Wol4xMJXOi*~MpnHJ1bCxD8HBoUt)gf=CWQ1$dajI0qVDD$e zCx+w0ea5F(8FkFR42!4btS+vr_Xt+e7!hMd; zy6{CvYQBi^7aRo6_9wyQtR%T#8_eTp0Y4`LP<|3@O^=|MgsOSovRv+*w3r=^!fhPX zh>V*4(aWF1$yS~7x7K!LQs`zsmvihVl!TSMJG{71*R8dzIvwVcKn&CsFe^3~}7k0>j9JSQJ`}W#*9Kt(p-mF zkx=0&(BItZipbp_BDLasQ_yCsXz^!Ddr4MR^S6kB(ucg4Bpx37FDS7p^Y3$zDkefj zD;il|zBVjj>k4tcbwYPuF`@pR2P&0bMZA=eck-jQv(J~VZidqJuT5j4E$ zN}kx<%DEN`63EASjV)|K6+_15ktBx<$}`Zrnu;JVDbqK7V?9^LbbEIRuno^-QzCUX5W8?V)@(>UFW-W&DTIJg%6i~dTP6!RXwk@U;-X8H3kqWCdr%X=gRL@%>u$buisScHAV_a{n@3$_ml z1_c`{7tPpOfgc*1o14wK@9%Dvy>&x%GQCSzzHp)v%qR(hV&pzIV78&L$) z8Qb89;%_MSs+I69{NR@oNBI!X9Q}rB$bdUd`q^g>%Ov1u4!Uc>ksse+D>%uHtUln~Qam<87^w^EZF2UNjhhugR7#UWOm=Y>>eC#8DrSAfBnvd42M}%(U9y# z{qvDd?5?}KiRzg(WoI%&Tb3J~FnVlccRqwS|6qT1aaGd0!AC3bPVwj)a)iBT^L$3K zt1)%op|)^F+UVk!3ToVB%Vr;MENKl#b@(&1R|SPh-)Q`=S?O?8rpg3#uOU9nFAx!j zNQFH=++FM@r=%324^UoTqaR6VSZgHu1jiEbivZJa-Vf5(*;zzrUbdv{W^f@6@vit^ zu%UXLe(-XLvJ|;kPug{mPJ~sxn(VyRXGLdcJu2ZcqcPSr=X_itcgSeCpF~s&7YdMZ z1`R}{mD*Haxq3Vw)kTx%UvBQes+TyS>ew&f)em1ew_T6WAS0tDdyzOYzw*ptWjhOy zBJuPi{wDTQug#Ktr84RNrDwHG(6)r z66dsR`Us?E<=jL+y0~fh$NnMZ^v*+ftpLjs+;82az zxEH|dag^=N0Jaf{z{S3Sg6a@WC> zfzm3T`}k1&O3L-S+$O_>s!yeGA;{-OVQ^p|VWR=Zna6EOet|BS@vOe-yO2^*kHUSg zB>HW<@Wb4{8WO7P-TRP>CuFyRMcQ_KsK$HnsF`o0LjX~NI~=!kB$}CpP!%1 zD_DkFxAdc*Dju3cDul(e1vrVw*I>p(sPj$(Qh_c3o_4wGQ%m+VPCF^pDDDI#mB1b5 zjV;+Oey}Rl1Ln{8{=nYt6BUT>?=|707@*f^$4z`ik0iby*zYsYCae79<2I)~C_UyV z4YuE(O7Iq#RxmzUlfx?fDv`vAx(Q(jegWcfOWl5IjR!{l`jQd@NFsZiVv|0N=HVb9 zjJ5LI^})>|0{2H&SV@>V$6Jmc6r->&x;?1dE#rAhf!$9xPOyv_-v&Q)yxu1;;-?>a zA2-i8=6_VfZ^8P9ZJ?a^w=~%5te6L76$JFv~wzN8vX=5^id1MiWy%NcC8PY9?!b? zWqM+=>@oi}PZ34Q!j}rn97A?zind?R| zqg_^dXe|3cdoN(z1zk0X^V0M-V`a2JBkC-zK+9yC{!go>j}U5fajl|yd)}&6U=*{Z zjrKBpp6kPkQP~OJS$fg{KRZkXY2k!hpOZ*5_$vz%>7Rtmp){zQWnfgIV%@8`d)FoW z+TK>I%ze`Eq~brvX?9Gtq^&08t(7R$jk%FX6!p2acI+c{Jqa*+B2K{&r@mC>jlnlv zut_1Fz`y-29JCH%jW2IoL#`5@y{lHTLTf^8KMMUhX=v7<79!my-Yb#t&!u;p1gfCc5UI!|dBRZ5cLQa5 ziL^PEhZ*Ob2EhAl*K;J~67x^g0~Bvbd|fpR=hDwCMF1v4(`()wUPi}|rjYj`%AHvB zPaL_IwS!tnqnMT3aZ0IV#8=ZuHdnrZgVVOmSq&1s>H%9rY1G8TYSQ?Vv2S_u>yR(^ z4u}|YN_Qr=Z!s#LeWZSTu`%7NxGqM@cNSd9AfjF7&AT?l4Li>D5Z#0Ft?#nQIIu0>mKZF>u8iv##!YI5>x)x~A3Y+>LH;!JF&oSMPgR0AHQ`G*Ese_N=!Q6?vhHogn|@lDRSu0bP}qg z+hDJRJaD~edX{<|s&?1MJw$dkuaiG>rBgeOYYLlqxftL(TFzKXZ7f)`E(<0i^5<&U zos=K_urYXOexJu5;)sBD7D8I+*b|^ibEGBUV?9=BBYH=bc zN_yV~whGwSC4NG8)5MKjZLJ8d$2&}QPqp;BI@e27-rn9shC5_h%z9iF0vkW+daX2D z=y`F!BibI*l{|@^XU$#I7P-r=$KyG zC>CV5#3u*V6}V*c3U~Q-5JIPU$RAABd#n3f02lCKs2|@h?F5(EI5_#wkT09uLI*Wiy!=6aG)k(=b=g}k&lrAXTZ}PgXXr+wRPn+-+YA$To(ub%8)+UC zFlcW6TH$syQ+)#d4|^WE9mW-dtltFBHU*~3)vz*(gT;oCPvHMt9Jyej8$skX%6(FA z8=-Gfp7hQm-bm%zaeFHknCgz=U}HR`&us6uqs~IfSMnE~&ah(Xb~5 zN56^_P^I(Bc=yNL2QZ-t#-GzJ{B#}M z+a}{SiZS7RHE%&nK_RZ$7uaXgA6o=wU;Gf`eLw4cEWbk%t{QekRh?`W0C+qixdau4|AnbuW)*d zLhe>%^WZGUpcAs%mp_P%J|$^HxcjNHq<`Y}hCgm^5zFxNIBOT{^9V+6=GLxXz*!H$ z=HWhNn=3O)hG#Hg-Mc@utz$iDr+5Vr;yJtpFmQjj))6%LwNQjLjH#XEE3JRrKe@8G3{rN$ArcI=(%lK%oV#e!3MbygVl%)x0Z zV8zB{_y@*>XkJp*_V`4KQ24hY^(ud^a`%0J4j1_?gB^%p9BPf_SZCeT#yifN1L~c6K=F+b$Y70W_75b8R;acWyec`FeP%5yQ_Z<;$8;M(=7mNPNEl0I) zQ>2f(=5^?&42-?-PZ=V0_<|1!7w%=<5+Rl|cKTum5y&Y$qUqVlhu_lU#ZmnA@e)#D?H${p?LGY$gcOYuY1~iAs!50LUM)F^< zr%q5#aNuy$}SQdTN+}He;v~+h~0Ejfi+n$DnJj z`6dsA?%WA{T>MwVVtpBZQ~33s$xp$qIhJM4>%oY2e~TXh<|+oeBnES8bES34~} z6^jkEa|~7cF9MLOXGf2uQXaq>CLCx_JOdd2Oh=WGp1VzXrQW{|D{*; z759W$En{!#k?uB`&W1B&I2j@G)(o42kX?m{$d-1Zssiok@m!#M#wMAe1i#C_RKNv- zLl^oJ1SbI=FHQ@HuN9J=X@lYm6qc!EukXCH%D+_Z?^Xs(tZgM#*5xl=WhKc8&SZ#ml=(Z>9dm;2={7Yz7FzeU!Zr~g2_r> zlSRg2YVrrhvT82Txh1}D{$di+ijj&3G}Q0}Ptu%fM{|E0boyGT2>$7J`|;I^*rV`i zz}fC&viDPZTh*($pSO<{5?|M)SWQ{L&T12q#U$oC-%iAl9NV?xfqN%NOj0DSzc0ZCR`C^o5ZJ51+15{~u)ZGdDDYitx6EQciRgb(<+3 z@%{EzqoZnQsdk_Y#t^pALp_=M=iA#Mapdm6r3n&r5Ir)cyaIBoDsf`)@1$E%0O1 zZ&=${xS8kwi1v4$>6WJ+|F=timy1WPTq-^U#fX25#5mX08}QrOkK)3m@S%}8JOf)C zJ+X3@?{h23IH$Vz-HPI6V`#{EK(SSK6XqHD$=X$2cG&v0f@VdOlWSXQk(1+JzN^yJ zp+Prgopb_gtGbbkwVia2l2qz(Gzv`|UnHB;n5U-A^k~`meo3N*-J2s+@xgg;R?6fB z`n#@PcVOQQ^;VA;)tg6a3P@p`;}D^KZh<=Q>vpj&6;v8(`k0?_0Y7%Vxys*vLWEEQ z)0eX4b+7v#6;XSb*%S9xo1}^NTatpppM`@ZNX96cm z5j753hszg2dI+q>h>K6P%^;tHiDGQVdkzVHK&1Sy(GBEfm`|jA+xW}mX#-?_DjG;L zDL=A`JZ;iHp~=V&#XsYfI=^E&VDgW~KX>FpzBtWqD;b@*3E<)u$Qr#YS6olTy)+;biq2n*NXs^88*dFM{POMphxu-Y?X;8?W-8TDXVeDv41Ej_E<(H_OI z!+p{=8et$fIhq0g>5#u<-$`TCj+QBC?5rhfo6FuWq*!VU*Hmc<+GLRskt1@JbV=Bk|^fi8+$O>ZEbT>hr zS;9sRnJ1n~&REZc(NKKYoS7MOV_oE*Ne^{zK|A~wb?YbSdcaRlC*uv+wJZA}5^v~1 z)=t7Qoh4kQkaDvlgSXDg;p_sn5Q?tuuB)8K%L3GcHSH8hkd8ot$<9=%n8veF0@?(2 z#syfFJ#rmIjD=>6g7Y= zd%k(D90XEs(UlWz`&g%8dRBDv$@mMw?s@{F_qz%oW>N^OQpSJL`l?WNSauH#hr4 z{?f$OtPr>jNygLen}8YudTmmElY4|Xy#+IQVu4(A*%g6#<7nHhkx>;b5D~&j$us54YC1GMo?P) z#dw#*nsPzw=Ql6LZhy)HRK525aM{$^^bHHkjvb>nxW&r^8fkIQhdi>Ru|+VZ=vcTw@*3`eY0w(3Z+sQ_}JBn$wzC0bFu*#ka%PWLvVqjy)h zGYSwyeiNs+E?-vjiixj}6}N)mY4qOnUSxSCr)*@y$n@+uUl=n_p=+IU9v2wR9(A+W z>Y7^8wiL*qMgouuNlq2jdih`_35=B{Q+rBi`KXWm$~}UvadVSJ1tbKxP8Cy+c}3~3 ziHht|%Vo1w5RYd;?-3wzzQpU_lttc$Jbj$VC#*$ta>HV?G@{P5mPk!Frc?va_I)?_ z{4Bl_Qv3XBqgCRNUdN85Xpo^7DXiJBVydLVcFG=0?)^l$7I|= zcrcnVep2IBuBRh-j7LV;*lsbW73%SdkMT;fYCb?8;sJC)K}U`cxH=J- zSZQD&5zN$xN!H%*a*}7DEH=mfCU_72LjHUt{WV!~$bBBItuIa(RuFO)hV&k`!XWR} zOvP)aW3590Nej%%=aC2|EcuaYPkfBYh~sx(xG!lDhlzjN;bOqARpJ%yM}~uB(j_QFTn>6taXuI=6;+!1ql}G^aOc0vWFPZuZBrGQPve;bAWK zS`$wlLXGmc2;*7S*F*}W6ET%%@s3ZOx(m-^{jNHId~N(~t#8-#i8b2WTjmzyM?4NF zL6&VF!BSvh=q`vo6|TEtV0#p)?pwf9$r%KPs1j-nA;0KCH1pBx2uQ@gd>%$NF+IB3 zl4!y95KgUsP(Cgt5w|&*t5q*kr7S4ZsW+c+=y){e|F$PdtvmI+sQBn$Wje!-%gQWo zWGM+Ke$^4xDxlEKrHR9Uc^CJ*EIo10hIzR3(NjUErSC^2CXuYe%8HJlgMf2praF_u zW?7btvD5S2a1kfo6=QF=m1$h+|PSGREC6)_k{)&{$o^%JZdRGSpE_^=`G2 zG}&0A4LeE-G-e)pSx)={8Z8K{NrLHZ=OsmqJ9KL%NGG%|$A2~%2ax%j!pL~p6CYaMeS2eaXZ++{-*_n` zb(65xZ1pTVX6dwl9%5)mxz@Ky#W*id-xtT+vWA#)zc`&FbK|sH@q()B%|i{#_FC21 zabWMXtM|6gu+VWBV)(r;&kkBQPQcF-j}@I$c!d8QruO1Pvtzlu?)!|?Z#?#1+pXxc za@}zfvxc<7_x#5H7dRi^gfZg~edhJ(pc*=OIt*||`!-JaiTO|^F@tfQ43mD^c(lgKFVC<(&iWK zL3i=8)zM*b9r1o+uS^pBBb(U;)~0PwD9BNJDWHJqZCWKmtFeZ{E_BJK7NDAb#*A_PS}Oq-zJbC5;=o}Voh$ia zxJU#3iPB%z`6*tzt-fQ*g7O`Xna=fW1I!Gv-jl}W(fOupDfMR1#oR4Fq}Jp^pwZ>p zh_z}FzgJ5Z?kL;rQDFz?F;_8{FpyQ+xF^3ms3`2^^$A^(*)|3Y!+Tc=0S0F`OqgRB z(UM8l`c0xY;JjBvR1DZDyC~u*p?yyJ#>gCBuod%Qi%+w$QD)QZ81$*pxfpF#@XSbl z#oS7UyudI$VlFb9ObU?)L%cpmT~NF~<@cR5N~YUBjNWx=qWJ9n$cr;Lxg$tuin;C1 z{S@@TL49r6a>H&AGY`Uu&`U~dV&wc@JcT4qh)!;$)KtpZiohPn)l%FcB@fU@LV~`@5`m#-P zDh>qHWsvz=p_4r7_`ScloRR6qSik$)NH7-~h1%mzjrYpCJMRgq0y`frKfRfvZ+huh zEbwygt*v-T$B{4wch_3>UqrkP2oW#kGz5aiB)j2}r%rpg`%y4q9bUH+&*9-RKRwXU zEBfvA0$nDMF!)uE`R63swd4+1v~r^NC|-GyJl!aEo-my%rr$(e(rhj)wvHLr*6^Id%BgvG=}=C^Y+Po zwMIqia;N)xR#Z^Qaz}@m=cmH{?X|d=lUAs`jT3wnJ`twdOAbrwa{{2PnA`JL{ScE1 z;moltGU8`MA`6FSXtl>Hhdf$&1yGsikuYOz3JAK^1+!H)`adU&tO7CTTvrj!POhlC zFe?E`isO#BxcuIOs~kbsfMTB_^>)gMAd8v_@{J!_!N*-dCQsKbb`5<)0|oH-ju(b% z^K-5e`&fP!K<_}|*HtAM@SR>UL`8*KS6ev_6G4KpwFYmezTZAA3MV*O;JF7*Z;DOt z0;hQIvmz%;{6P0&gYh*650&Rj2quIn7@-?-P*BJj7=Iq?%+U4jKOp(N~Vc1uUnBwdB!N3OHs{0gl7!i(BzX7?c!l!xBTTM^Xb}R_MBU zKje-XNo5%;W#EWOlZrBlSSIhDci)GJKSu>|b6_JN7uURX@{zOFXvQspa0VT|&gDjS83M1Op}Ycq-~oODu=(o~u?~Rl6wh zzMDT=#zI(!tC%^LaK;N>o!%CT85f9$Kd>5<7L?1PMo-w%eRUt(`XCk(M)8SL{(xD4 zl67NHO1aNl{ki>mQ|%vuPK<3sxKwws3_LB{R!~A%)=zQ^S!OJLrTzY_@K=*=`3>i@ zTD|_Y0@9pcM%e1jJdN^Cz8+$NxXd(o1(?FubIwjzgP5U21=SSFYLWz!q?(O=^YPP$ zVip3hhWU!7rY zx7IZyPR~Xu@}B=kdF}(|G#}lbxXn`|{Ka|s>-ybRHzSL3T_$z!uS9rzo{jR)Zjas= zjKL4l>DKMSebsZvf^!;Z6O%Rt%tRPfVKr?*nTpcNO`pa0x4tbB5P^bLgZ(tMfAnw? z@=D}B*DFF6@5bAh#(afxfma#1yXUGOKnYWuL1SFzD%u)LWBQ{fQmHU}~cnd$H z^QrA^NQWMouGV+&Pfhc0lu6@ANaJF2$rsP?h*BJSZ#8PfESSch%^8!f?+{~Ob$Xy& z<;6dFm_H{QuFU&DeO{v0wagftR|=_vwVZ5(=Z+kw)kY|&kj1u@98s?X{1Mt0M^Qp^#{E(4jwKTg1{Mf`OA%DRH z$>+M>AJwD?_z<9v?)#JY2MPeCf2}*GEBa*(%cnG@H~jd66?u~f2Bh{U87JeN$lm62 zF2+Vc(cSlBQSf#t{VG)2zWj4l?ZA2#jKV2Vx`&b!J_?bE>(AQi@A%!czY5)@>=M$e z7Ikdg6Y6vi-&pg!# z1+#8Ai00L@48O@Q!a{$K@XEEv1O6WO!)?NAH#Gciv)b9wR?0SwsWwHxg}$fRT8^73 zNm%MVlLAGzuTi2IL0_fP<6~*_<~5PBB6UGI5#&%#NcT8G?RHN$`%e9DqJcg!0&%3OoUXuutM6Jfzqz8VykGZEv31wzRiO@nqE#Vyhjuzg zJLSYXo8MPP_Et$-9$^CK1z7#=m7b+&Ps5^FUrw;9%5z!aDTbfM)JSs(v}9WHEQFc4 zz-VF4@X-M#oTowb=dSseOX$y&&4udq+r-BU(Y%H#mTC~Rdbss9Ng(5pG8+dKWkBo+ z)6k>lV154JdZbu@$J?kR5I=)3%8;Zh-Ukn@X6%9wYUv!OTxPSg2PJG+*`syp`(q!r`QD=rtZ+kzZ z*FBM4ik4MsFw9>fg$8mpcAaapW zG+UB^R+Q(#;R44!>U``|-Z9eDfE>|;EEZ`9`mV-in*fxOw4;88M#H!{rDpZ0g|0Uv z7KE>MCxO9wmt)lq_2vvH%We|u-Zh-OdW_OztC*`}*07#6Dn5LARA3u$Wy_}o@QX6n z8oe?fs|W!q1Y38ndoUJ%Lg^p!d4!jZ`@pgAgCZxqoV8_d^?NlUz#-EG#Z-e>D?|!v zt<2FI%Wy{0O=LD2XC>p$I(>hnhHsIxvdL!SxY-vPsjH3KZH;AIHLEn_6+31R49s#-Ip* zvL^r=dE)HkqL8!6wdCVRRp(8<#xF%v)P(&YJP3Amz)-@-aq%D_Q4*mEvpRITlY06o zMzM4wkKB(#sZ=43V!_xWAIn!mk>Y;T0b@UMy?Uv0;V0VNMpBG>no8 zuUCN8YHXmM-F#Gb$aZq(joo1wxZIHv7Uga%geHc!NioGG6u5d{d1Y4SeN%rL(Ct$R z>5!eR?yDU8b!;maLoc zuiG&}AESBsjb6NK2p=1$JIt`A!A5}}ia_03PaEdQ{ScQrP?c&avI-BOO=mnsU5S@2 z;}3se6pM>NWIe6lu9j8r32V5G5g1hgHgAEhTAu zebwfxPMSlfWUznf7ZpU$kr-#w@l{I=i#=srKvzo+ocsf^@SsVNpsdB+^Kh|=nZt6t zljai}*x1-O+Cpo2C+}0$iRELi@}sK7C^ws=1o(ha@siUuKg0zr_-IoJVx0cI1TcKT z(C*Z^qgS7nwYBIY%>CAXCUhRlRTxynExJ1Y}`b07;f04@q(xRKm^i_eA zALg^kWaySvy$y@_TFN=!hM1SPMOya%%*8UO=>E zp^C_(w_cDWGk#u;XU`gJa7JDLRR}{~=WNi9#}@nzjnCaIwJKQ95t<`!EOc1#5eixw zIhCE1cx-qp2O|}}6sli;OY5mB%t9hnb#QVvAiD6td`W}8q+wym!+V3PdYl>tL!Te= z-F?J622<&Pec|!~>2s=5Ccl)jXfRoR9dyc*#6x{$i6c9ROcm~=DCjtnb6p{#DUMno zy1Z^!2umpF<2xx-ybzYScECE(lLXVN>ZO(Fk;>8~bEqgSkE1dcf&t*S- z7D4=DO6x70jm207eYj>)e>npB#;$vEidDm1~X8jI_7rTTPVv zi{l2c27`MxM?(qn`$!ii{`ck9^w)58OSGE4lf`N#nb0~tpz54NW>?Ur|kNL>cb(_Z~QRMEKXYIZ0pl=;hky+PcHCk zI>WIr5_EFRejDME2~4!QOXs+>YA0C5luU zG-n3uwrmoThanbF9dOBWF7VIXmj#ooq0xHG6>W+yH2GvL>m*-1>e78tg#Da+Zhh?^ zBCBOnlsLf3pm+@@!oBe^ULnjlm-V?uR=sws4eD+n>>KvXAo0zUr`A2OhEj69psF(& zd)spQ*aV~MHEq<<^Dh&xpGoB&4dN)K=y|cqcnD7Mrq0L6^S0tWN9qj~5yKf*j+a=w zUWNHkUS4mrp)~pK+T!UD&2Avvgw@T7)Fy!~@}u%#Ox~?PeCcD>B&e2+OnvKk zrtX;`IeZc#l|VNRGAhZW9CP&Ew z?&ZmsKtN|j2v1pkiMpSZRy5vy`ukXla>m7vCxN*Do?zJ(_cf=UT)}Ag`-b>1pVb1> zpDIQp`_|#Od;2Iq3DCS6=!zk5|6Tnpl?G)Yx$pXo4e|5Z2bUlcB z_JB#Hx|{@8woq(FV|E{kD_#lzU?JXp1R~C_3)`g=fh?3{PB@%W)6eSW?nJ~!q&oIc zyu%y$8LyPfk1PFGYb(z|7i{_dx(%P6mfe*(QFZ*ni{2BFOvIuwFzxvT$(NtkohTaS zl43Jf`v$D~`9FeUoktsglroLQiv1M2F-d`KL&lN_qI|<>?}wkXP5|{$ey#fLn0DKR zgtfNzZh#vygIN;m{^}K$wW7T5?)sC$f2j7W}5Gp zHxG00aDQ3yQs!8`&?ptVJPt4tb#&gawwQYAVs_FyRTu7&+R}M zsN4973niMN)ucOcXjkiE;H1W4B=x`<*W zd5Ip?6XB*>yw{Bd7)zjZ(!8ZRP!jlct$1-htWM~omE&2?dP5`vgAnDod=gu00rWv- zJbZ(pxu_pJ+r26hiKV@1aR*}Yxqm6*C<6FMAWh6)Oj5c*bjY*Yj2=tw)!;@{KmDj8ftN!2yEhXPJ6t( z@pOkr)H_6<5DCThwI2}$b^j3=NA)zndmMGkoAX)r2H>q2!e@++P+3tzs%iCL75u9uebFZb3Hc~#9m9Sb5 z!Z1Pbu)u?YdNb|uIAY&03PJAV+rxQ!TbvE{e`q0?!7x~rm=~;GbkUt7K_40OHPnAq zjmiZj^LCGA&sT>w3+Ln4O|T3Bg))8+_aVb>VSN9Lva$2g_{B@~)ZdJ;z$}E{2TKN` zwyjv>{yzOHfds9Y#ID_m_Uk}`j~@%f-aB+UewF(-xAzFL z2v81>Y_H9x3=5oATxX}E!lp=t)(YJ0f9O(?fM}q_C(2^oTofJb{y`IC1X;4*N!InY zc;3Oi5QZK}hV5L>|BFP1O%AO-PC;6q7-PckY9>^tQ1=12<6y$jc;j%={yYKOsRND5 z6NUZ%!TFQyl==M)2^;VKgF^TJN9mwwpqHn2V%BRJclXBnjWuVuK4c=DJ2aM=1 zS7TNEP}fT(B7Vx3`LhtDV6FT)x9LV?XK+Qs_*DtBVLmGKwCsZ&BCSGvwR2bCMSke+ z*>YIl!?oTe;$Pbk@fLzZAwLimBg9nWC6Y&^|KiWc{P1|y?|dVpBSrA}qsP#r43MN> z(cXDb_Wme*&er+avXoULN#%=oMh;51M46hjO8yW-Ney3Ov>chwGxxDk*Iskd*Vrqy zPVn|=p7uPxnZ-9gh?&f=3X+)%>HT^Y91tL36}$^epp!0vlnfN`}q%<|5Q#GvfyLJ@ z++L&^hEG-rr(ag4tCT|x4_%@_rsw|uc%-ttprFf-r&ZWm3lk_=G2O)Cz$}SPyuzST z)?9q3?j6Ili003T7cBzkjvgh)x!`9|Zq5~RP7_IrArTS#Re~Or9=T7tv&WX*oPdvH1w#hdg_*|717+j zqBj6yjcyF<+(+Cn$bE07C>w{^|7M?(uIJMdoNpk+Z`LGqhg1!A2LA?I2K(`fK6J_o z`!jZ2FC$SZuKtanzPC31^3dscMgXT>q}HOF+NtYH^^~#eTJ*kr&5Pcv$l3ODsrffR z%mWR@Obftf&@8I6rKQ{S5G*JtjA@KUOJE?C+T5kb(+fFGn^#&X`N0F-F)uiP#B|0M z_#T>wBm)waF<*HrC+a<{u%|oR$+RF*1ac~&=kD&EkxMWPje%Skv6cN_WTc0H1-}PW zhMV)Qgn0z~QJEeKMSGb_C67}C0IJuevBviJS7SP9B;Y|5IMs3bCH=)7cVk-$TL%6s zT7vn(i1++-kU#BgUK@8#uaio#>x=aZuMyT4dId&f5o{{#Fw6N^dE@>kZss6ZG z(%a^g6+-J$L7;||q*wXy`y+>+Q@y0D>ytQ?+}alxRxyH0;a;fM5@SQWdayhZSKUJf zxX|mS`0X)*T#EozbaMT8Y^r)fcRQ&0pYt#KH^pBz0W(fF0v5~Y z3T0%Im?Z3;Gy^mKsah$eCs4V>eaJfyertSsxo+&8$csH&AP^pQ@a6E`swhz4`)>Q& zRDl=v=2%!!-B&s{JKuB1+}q;AA z3(ksb)Dp0pKv!_uV;F;kUe-dJBMdcck{_K^7F-ePN#k<(qod5jf(Ncw{Xt}WB4!dN zU@0(3bqs$Zo8jLBUk}0Q5!!Z>1BiT+7e5qZ&rQh8c5On90`CSA)+?ReDFSN2%A$aM zY`D=&W-$Zc!two1eCMu^_rIxdYJ6}3z2e0OT*R=xy1Ofgh~NZtTui)#B_(^W&A*-ThxL42Ei;>_c zcw$Z%OONa2&zs;xfVeSs;MS03 zp*QP3)JfojAq$T}1oPR!%RF67Rw4w_q~X;ZCZiZrrP?)&?RL)ai=#v}q)6_$R~#9p zMb733B@sI0OfdZ5QjUHwG>NoAkz-L>k=q zGZrq=E+YunH|%B{V(0|V!Ep(?Tw64|`wMOcdp@4DhW8skeC2RUCtURoqiiiccQg|x z=G+A-{l$?&@UIW6I4hE|B5g27`;BW4@9IDm#O8GJtyHZfPT6~|T zHrwL0w6=hj=3Pqh-joTa%m|?eBifT|Kt_j51nlFYAbfnWnPdME&vIif9hoa{o}`b6 z7LwPl{F(Z6&p)_z=t7d|>)H}l?_jiP_cpt$i_PJzANqjLr9ER>!{bSa>0u^yzz44@ z&9@zSuo4GF;efg6g+AP+$Fw_LD-GHRe6iagwkyAoiF!FBP1|lraH*HHP}-+qAH}i~ zpA^S!tDcRPVUWvJuk*lbUu(=eIeK`MJe*a1y-N6dFZf#_`4ozvgPXg1x-H9f%$bj* zTnM|pxgZ4czQ2nLDOyZ-!1VdxQUxYq&?v5}sFixigJBg|Yw=^C{b=XWqeC=UY5;I{ zSxGW)*$C@Qd{O}n27FncT5NaC zG3K9&!|s#5I`oW>b@}Wz`!~dA_uqZx(vXYfSvE?4Fl-|Z^M)^_B;Lg`SQ(Y);QYn6 z-q`HPKg!lC#~;WQh%PpPYjiu3WPbooUH2d-Ddec9$totAH-5sXxb#1ZDfKq@U6U_< z6mpXqJI`}1GaFF07emT0Wx_r35ec~v`9_yh9xS8*Ex<)yyxmR1yz<53_ZpSakH7=J zt1m+IUx)^E#6IZ76YR>4&?_COe#ZjuOp}v%);u!wKBKwN65TV0**umGtvXEHDir?Kc|yzx^}Oub;Cg!QhHQ zs~sATFC7v`x>_n*uuIj(h`aF@b@ieu=wU%Iye^JT?{_rRnF}QbF`6!|9)6Tmi0mVi zB;a!zRJv2%=3XJ7pIc2p0~wH4=9T@6@LFxK?Zv+!onKIhPwNl_+@b`BfE{S!sHc{| zVE}&bNy#uWz?8?JAzP3VUq09NQ%Koq;PdTL9=Jhiv&*MNg|i@F+-4YHwWZ5N%&UxP z@S&j?Tv^=g_&%YW+Gbey(e=T+I`q@Rl6xK&6JlE=TEGX2lQFw!TyZ1}00IQEHEyYx*G(p z5zgP;#^}NL#!}U+ACxdWN8a2Ql))eEEF^}&^&3opx1`7Lnoajy22}B%hT+NkpD#Ow zc11Ew7YTo5>M7;ko>s5z9Pb{+ohJ*UcKizl3ZsAu6bGTxxGZO&eH*(!Nl^t^P1BPn z1KS^0N`JB`7K70h7fUyZb-WEv(il!W&!xs{3zEq0B>rjLQ2RelY~k*78o z?obk}i-E1u1POY2$z$f4fjzxVYCq41eflL=LA^Bw7Tk~5*}}zX9FoY-5jX?C0Yj|} zHvYS7OzoZ~=ekm$ASa8@#OBf?*0fA(a^N)lm@@(xXaMfz+%&{k%qO6z=fzmBe=?lu z)NYUuf}>c)nQEy3aviaZ1LBK%J`F|>OzJ3%+pCpm}O=rq0ZvH9gmSm$h^B^A% z4dI$?9~HzW7*#d}w#6CVp1UXc(a+&3q>q5^!rcQkM;Zuzc-b>s=3+DUe^ZRWhGPrc zQ5An28{?#R3@Izpr^7hYRHPAK*?L&g-)UC>DcC%xp|U*Bsa+16EG`k3e2(7VQ5_vk zl3I2jyPEC2B?BOol!MEbCx0|Ta$1WTd9#i+Q_e&FCqyKDczAd;RiL@++WnS4(DBrJ z0Xo?Eal;aR*u=Y`nW6w9BZEXk@_G<$GLRxa_j2Dp3c7hb@*FrgmP%7oPZi!GaXm*; z=hehu@~oP29%;nvxx1=+0n7c{26`b@qK;_K6^u+0F$`LytF_?^NZ4kQRfC?80UB(@14KnZ>yPJ;$}@|(VN_^vK(aPlv` zrq|}yI#Qq;j;g;=E?(#122C~6Jg|qxa?a92O^Aenp3V?h_T;-+%sYR~CDvex!8FrZ z)_lQ>gbCf-{GApn&XVL?#Px3yO9n3o3~u*T>nHnPr=&!Nkm1o5)Brd81&(>S!GXpy zY$>HWHEzwpqY2EbC)Ny8-4WluyF1g8m=V8_v|`);bu?Q4JsJx{%@!*e0uz}TNRyb7 zB~ntT@8{(lX|VFgcsvEZi79PZ0I~jpGY~wxFi{Z^T`-^y2AN4#f#@_Dro;g5(5;4) zvJ!0S+`zg9vUJGh%WGtZ!%?v^vj(px&63n_A44<-!1Sg|X8Bz_jPb%jbWG924Iy8k z_Y}waMAH2OcrwU|P(Y^%_0(tRdt*r^nJXau&cK2Eut}eLI}WWIA(7~)a$w2}K8W44 zfqoGl^y8SS`_3rXP(-mgzBh#kTmgqB(cKK(W~MfD_g*UL_*@zR&VPGXS_2UV8XRJ@qHehFnkwfg#|KWVD9{Fr9fsSrho3vfAihu}g*>YCgeK zy+lvC7%laV%ko=$05jFj`>}&9Z0FFA?I9Kr#qOTrpB9$0&Lgvr+*3$Z%YmiNJf{`4 z*ed&`8(_^)%q8D^o_5FKZqzl68KF;1*5WyRC|vbp$lQT&;}?AA5w;~a61H0#89A<3 z)6EZ4=34Dgk!`D>!MS$)s#SaB*)T@RRu_vqJAS+*gEE1lKj5Vk?*hf|nE2A};p|?j zIYpK2>u)PYh4h`}&RQC!&$qMsK7bymp%5jX8~6ghJX-|TN47N1W>uPwBxPx3VH3FK zkFC+&2RhO__3n1V&;l#Ybm_sPlLk=$3MR6E=Ot$Q&9=Cvod5sGQ(=sM--cOq%yad! zG;u5L3T=h`iGFM?gGxt(diQp@g0jZMG0RN$c=ouhs?wpWNOzTlaS20RcXFFM0;kW8 zlVIkU`O5l7Bp36MEC<6r=eyK88E39389@?>R^v|V+2}kNligMSJOY(=_w_{iML{ga z{5CZbNl0nQGMn{|nQY%fblvzqd;l98Ta#l7Fnr}+)9W#KBd~yI46}NI$qT>O{rN{?7s=~r$Y5>CJ%jc6>Kll&s_3`=O9r!|6%)B}ad9U0A z)d=~QX}haFEe4Jj-~?h+Ag`P?bPgZeGCbbkIUX4t zOuPE$Q~`WdOTbIKne6^Aw?}%gc}b;NRi7%oBq1ZSoTQ?XU+mK-47(sxu^?h#6t5}X zS|bV;Ne)=0EVCtpG;&l%)5Q3T`uWRnqr!)!V+!Gu1?9JFVTlY0eLD=b1sNUvtg|k4 zbdMY6YLYMHqX5ircYXIn!%@2<%Qi53a#e~s^|I>6)cOt1VM=lAb{MQi>a5*Q|uMkOOjulvul1zUOz3*p8iYo65%Qb~x3T4Yi{3b|>GgY42WWT#?I z@D1x!p+@o8m*E-oJ;05s=K~W;KzZ$gfFrno5$jkl$)GYgulW(rn%Cuzscffjgvic% zyW~S2v$Fm-$uh^tup7gB9J_ZyaiA>?!1!(!5$5oE!~I`L;S=Qs`(H_6v+=GidK{5u z_L34FVc*CozbF*8Em+A6IS)(#R575N-lC>s^PPLsyz2c7mPaLp#R}1BPP}`3JNZ(~ zuAU*9FH^TJRz_tJQPCLhE`nZKLdiA+D}SZEWj|zu2P6Y4Eg1w}<5tg;z#~e6ZI|sV zGtCwx;+>Fpn{>&3)S%Pq$_ibRibN^6?0^(eY>fkVNS|x;i8G8Oy5cbuOuou5pOIYb zybUG{oDIk=XdR`eL?zeA?0s0>QktXGHsT+DQZaEW;m+nqxE1@h67}d{Iz(mboZ{dp zxwC4T%asf61W@A?vW75jSkh_-1=__ZB|y^=2-;SDu$>N_tHiqG^e!`FAsF|d$Hn}T z@q3M>z7tszCdcu~uhID$;Glo(Rx6NB3(IGh&IZf(lW{F)1|C*OdRu%KY|^G9HhjHN zRdzX|M^bJ7T_b|b%!_Z{_`kiDqSumQG z$7=i_0*uJpqMOegsh}8b;1$Up(&D|CIJr{BGOXfUNXh#GcCXT@_>^tWwh#&iO1?HG zQ^s!!@AVS+6yp3~-qaj+z^kpnrrAcL$duYz__q*}Be>n(bKS@Pw{L4TawOs985 z%uk*`$J{k=udt^sL5f6=1}$Gk`&mmrPYe7R?g}B8xyXr*aJnUosRZBrBdCbdSKM~w zwilT}nZ~=?l7^vv%t4ew$m*lH)rb6B(+U7cZ(L{%i zOy}ywKUx6^2%Cmcmf(w<--#9Z>T`ZbqTYm^$Dq6N31k?SyRU<)q^x3Zd&Lv@u0nIs z9K$jt{#pdX7c~Dlg?dVyzs<1f_Vg2C4!y}@m5~q_Zo(f`Nw21Y!PH)Eq(9i3Vy1{( zl|ivwNda){JR&i?qs@s4y>9)NBo5tC@g9LL{1X!-EL-$<@{!<&ZqcTv2^&kkw5$U}ce=v2ZiRZ+_c(bN37Ou+80v zV3_;P0&?=-qkqVF-WNrV584)f<;&q_E1BI@%51e+jeYWim*I)PIQ_1OBd7qckTqYo z+n#h0hjy}(oShE8WoVX6iHgxc4IACA_R7zhuOW_3wIFgX4bzS?YIF66$w5sA7$ffe z{5F2Imbt?>zV-Co08I;yw5abvzqY36gUS`ljkWA7rA!)z=8SLfB^vqb+x*_EOT2No zTB)G6rW9zS!cR&1$0oj-doSZiZ}>y6_wv|y?VnJbHtTaFHgwtP-LoV_Y$+EZU<<9r zEM%-eQo8uSIQ3Lj&vS8^Nh$l^ZqR?BKEMM#GbMmuw4>uKz(35>!?Tazj=i8zC+@vB z&9RQ)j^{Bcv`}<&cNk~Wzr+MhbtzC)3KR9*M+t-Gn?Jf+GFWB7Y#EJ5ma;3?6!>)B z#fnri6T%)hq5Nk^*VuicvSBRl+r<3xFY^Qz%3hRBD?XY#f8W86*w7esEIae$BdC5( z;sKE2@jdvxTHlMqxi^OVF-gXI>_GRUDNY$o{z{_+yS)f1`((yX-P7X@n{s@`uifB0 zY{3)1<7V6kF2_RQq<^;*Jl`^jY^9L7S(HGFf1QVaBNtTj+}M|3RN*BmAXlA+&!WLHggm^*_(Ye*n9{2@&^$b^rcx|9Re*;;(5>al`KN z>HmHy@K68${Btu(;7Q8Q!*94mdivIm`84Am5?t?2EfR3CyT2&}Uy4FjRz7*nW6Fez z>|{G!j`au%wRzAnFqJ$g_(?NkeA?ZYz}H%gPsvc-!npkDoCiT_BO^2N)2$NhAwF!& zmEdbB%qznx^9ax;)!HFNRUE`Imj#7g%=WJ88XT#U$;~>1Z9B6}&TGH84$(~t+}`}8 z)n`#`i9dVkq(;gsYuB^Nn!obwT&l?>>0fRz{-_T2YQ?tBsTLk(%{cAH6kKi2q1SU{ zwuw=NZ!5#*-a?#3v{AVU$$T0U1ZOU z`n|q-F?pZs2AegPhZEl3ch@Uyw4hf290^qy?PBf9ixf!;7G7H`9apGZyuj&v8Z;a4 zGCu1UH&NfgfFy5(dT?gia{pl1%)xG&sEj*Y+)q*I0XsMTi&jaf0?H5%Rh+p4=~u{2 zZ~}k&292D4&#>@MU*0mE^|ObJU`KCBgN!vf&lOsD+_bEsAmx{qYviZnz_0Ug>Lv1# zVQS5m2#+CsS+yrCI{aSDv4xDQ;?jLwA{IP9AkGH-rw$W<} zdRwFt(%j$_JHI3OqA>>JZ<6yr@nC1Oz`$ESPwu-p|7+_j*=xOPXKYYf3-*XgbU&Bj zqo{}t80*n($D&^dQ*!|}57hjptjw=b+nNJliKtXtAOtT zo;duW`+GT8-*=>N`CEm5#wTK4V3|NtK2Z6_VEIW+h(fNR(dpgx$?DZQ&C0*Lp%Oz1 z46Mit1G?J(?zvV0(7e_giHzZH*Vo6lC7!R=F1BNRIdPEY>ebO)3W)suHMMH`^3srs<~vm6Yu&u&q+>!02-muMb$Vi^m&ZP z6@DnHb%!1()Cq~gy<+dE6I@zB%>_4?c=j%rMhhI+s9yoWDK@X-w1Av~5tR`q-ALcx z8T_A@d8*hlANvV>|J%SHMF0b{#juZtpTYbcKx8s`=p1+jo8F(>0HD9eLV1*~^7l~8 zzOemw1JQL${tgCe8C=ZgJMJCnD41S;W41%^V5^1?gnQs4ng?Moo7zUy^WbN?Jm;0kGlX)v0hUak;4^51w=acdxdP)83qp2e5_%LbBRuk7BMKSLwwnEm!b zh_7i~_}-X-a~4uB*HO5Cu>s+hFCk&B(%hycupFJ46TM%-Evt$a?PMvpdZjhmM_Vu{ zE5eK!KBuEDuUEC(>ddqbT_+Y2?E5`-O)7@gh-`waE-~o*ImUXd#Qz)bQr*OURi1oJ z(P%BDIMiXUS0e$kUEL@H8iNyQ&d`=Liss_%oh#G2vu5P$Dts&ETX~PD8){}VnP4|x zoZ#j;#p;=jYP4G@smsY?hw46+Z}klU&=#e(vdyUBXxsgH>n89@8e8Z+k$=h#SXrdC z=FR5aPUS{Vyq-aN_1KDR_*#!Id(cE?5ha(!F{oQk_HfY^aufjD@O0Uq;#~3s$p`(l z&g6Y!O{>dF-O$_PASV6{Cnn~jGP;}^y5nj8Z-Aq&#cOMs#qkkAINm}{WoX3$Bt?M( z_`6IVMb=$;lU(=O6-AoD*Ls8Ro1M>AQkw1e$J5tKzBVendp$jt$VQ|2P}`rR@0M9{ z?fnh9{el3N}hZRKK*i(7wBPe}SBg8)>`WXqHYh-yL~S@5`XfwySUS zdBm*}q+?dB{pIb&IrAcDp^u@?`#na$VlV_)47#wes~fHOt90Nzsvz$HO&9P|Q}%!5G-a zXOHdYDF#dtEi@&Tkbj^E2zc1j?EI8X?RFKnU6GPJw)46;EsET4@W;$S+woMsc4 zTDsI`grm{qk{dmH z2?{-Xlc`m|nVFV5MtR%pe7v5E4rR*tQ!!mtq*XDz_pZP{L(?f@9@duk+wtMv*e>%F z;P840f1Vk>o6$xE#W*Vc$c)`JJ%KCqn921#$GyvbPB*zkW4t4xkX9ts|B9N}Y?M37 zBojeePKY$}6dTgQU1q`p*};-{_tX<8c~31nvG4IyXPIViR07baexC*bkWXy{e*?q0 z4R^V|#T}jMxUc~XXlu=W_?M24#&FL&n7RlBA|RQXSF`afw|WFAl5mgEcx!Lag@tpY zSJxZ9;KEkEW@6sKWy9vRYK>C$97IR}QZudY>yp-p*_wSGli4L%vA%4u4yZ!Z6#3$G zLDxk&Aj-=}LlZ2YnC^QF@!~>AGnO)w$Eq6-$?rF5$pb0g(0@=EvuInr(Ho=7=t>=V zmL%ti0x>(a6^_iuLYks*P~hYcufyCY`2S?~B)?1fBsUzHvP}szT6{o{#IVnU7kLn~ z89Bs_fnD%p_3c$d$3g=yNd7h>Xw|Qxzunn|U%bT2uDbZ7wF=|Cg!GfelkD)_kwEOk z@Yb(H3}oF7YVu!ueQ>r7MAz4xA`CPFhDNq#kGI2QIlVI5Phirbg_|xA@v<|zJ(Fvk zmODFy6gipwN6knk=l)rEMT?;L#Yt8nFJ;9v7Rzy41Smk!(LYrrEFh7c10g-^D~KGks6r`J2x){%5#4q)rn zVsu<8ld(4KbuaAd@)AwHTczZw9Ia4VJpx0-TWdc6udC1SrJR|~;G*rJqq)$dc@+Fc zpnuV2A;|EEVPGZT_Ut&kH)~U3SmwXtA|*@r08P|5y-9Xur|z_qm_nAf5ILovuIH?K z8}mCye)aN-2Jc9nGS_E?a`pX%@eiXXD-C^?0KN%EOp)B%aOBjGCVzHtXHhW$uF#_$ zk8&rm&bol+kB zBeAC2qOqRDW-Yz_=m6hIT@ypMB)9<{MMuNQyfbR(C`6D7bD^KD*Q)2oqL|3vupQA@ zu?d}6jY@fH-b@J-M_Cz6K5#IYL|vrOc&>NHS71QX_Q@pi%mQw!UFVpS4d%w9llGWM z1d6*_r=VJ$zyPUb77bK0eXqxY6e0Hpy*G6)U^Xd+nP5Qs{p&eOR9RA}ear*bCFxEriON5P6n6>&rDDaWosMkPs&!>a-+d3ZJQCa3Q?-`#RpX=vj8;@m! z>=*-v=0fVm&c}LFWX(hB=kWf0)JqB91CbZM_@^)saVH!C8Em%7AE{LP{0Cg2ORpZ$ z4~*8yLfplGZiqF6B?$Y6f-f7dcj;7nSrF24n6VALgWWn}Lq3UPF*_3(MWoiR?}Jdi zNZYBX1qAMk5zw7_RCCFaUJh<%kMH-6^8sf}7@x@uehyV!-{x#1KX|mbuKoxRMexr~>cp)xxWrK1 zT9zuSoN1L%UFP=C?!fq^nk0-~5i5YRVsTc3%x=u2YxH*4KYwNC2f+9=KZZ5}vWv{l&RIH7SSd4kCoI=%yX6}O zGOAohKGN&Vl&8PtEw(w8wB@bAURi$Qo{n(cZ6V7r4U>0YHT1QJIUp*>%;tLReI8>G zaIy#hq}vtI>C@7{+Sdk=D7f7-*O|`^PFkP|Uig$~^YmN(+8pCq=d|f0et(m&8U2wv zQe8kvJ@U~MgAIA829Eq9Eh;*|W;hAOKN6asfa*X5v;Kr~s$VPd+jxP^;9h_0H)`NxH$(v2gl|x&tC7e=Tb#r2gMF1hbeBx3EbEsfk!v72A_u8s z%kHsl?PaAa-aKx|Vy5{a=j!Y2>w?Z{W!i+uoj>r?uYGTKH+^_E=(fED|C5p`VpSBB z^@TpgGww@Dj%y6#{uq|zZo!yyB&Z#9#zE?&%`upmR){DcdJ(xrlpWo%Fm25R+m`i( zL(G#x&DLZxv|oDq#R;+*rm9l``MHwathHLWFD-wx!lTTl7t&X$;jAyMdfS$1A&A5@ z9{N2Z+p^|`6uHlL2~97@gq$A{oht7K${G$8YsVX~#N;WyTeoai*dQZ_VeZljWjy+L zl)~<5ODs4oi7|N*ik4Zw(iFNf#Lk?r06R!-DqmlPpeg{w3hcKnnG>xI0e47Qxw+IM zfC`CA_Jn{bVk4S%_abAui!{2)(wU~Z5-(9XWTkK7nMoBG_A~Nuph=KJ+ldr1jA_^2 zEV7gYhu)G_|H<+}7uhP$ti5j{x5sKOopHEilSG+DxteQQ1dhoIVWTO|R5DjIwEr_V zrYZt(Fa)p3_{@5UpT~fp>HE^;#@Zh38y5u0&FT)?StK-pSbvPaW!A4;By2i!)V3FF zLXf}xvc}YRtL3Jpr=T1waR#2P5@GI0L1ysu)?g+-$zpnOz>q7ESgzFTH#NngPq;GI zpeUkR`du!r$#cZ5&V28SE$^CHmj1I--we6&u=G2^+2*QdF`;%y_@KM`WS_ullb{zx z7RN(D0AT!`ds5tdd}ovbTIlLB8rDP6FL=!{W_+vge&Zx+x)n1U>79gvSe3_^6G$U6 zY>+4BcSs$#ZWqeR?Y&EI{T4!}L6~QB#Nx$OTG6zbFd?TpwX*RekQ?}F919BXoa+Mq z5>T^v)>iTtG?XfCLCbS4JSky_aRZ|JFdc4*rTAo@U|3CQ6a+xgYo? z$k#7cC6#W8lPW3RS0A5@GGP(e;gcwge2&zWf?B|FSBnpCz3MG;%Q~$DDmEwh{OQtA zR91d$vi8Hn6|KG6aS$AeD&3SZGbSR_>tpvIT@J*DY}f~1YuD3ovIWRgjojneGM#R{ zYx%J+RP1ZNdTuNvl{yeXf@M;zy*yB4Mshm0E7DL%4GVS;zhpDS$j8M>FDtcduvGya zEC_oJwID}d(=TPnUse_SNhUVIWXNu1&$J6ONmi&!>y<9_pP_O=&9}~$5GKHoyhJ>d_#WgkWgN` zp4626q869aEgGX_uFGo&b(=0jy-w4QrVj7<~ zzE?Q7uW(&m2OlX=Oi$@-V{N19B=0q%~Az|PV+pu*r@UE!iUbG)ll6ei74pn z^lx71+m9+W!y%-IcPhRjhvV=N)&V##xvm57XQd>$p34O}s}@`UYMFS>)hK?kJ&Kr42CP|nvt z^O1!rzx+=tSl5w1w_$zsf5eYHX2n{mv8uy=`^^Vged#+Fk9NkxP&go}oYNyE7c85J zfv!B2c-z}cJ7n`f8y_02@yK5xAFg_auoR4AR^cN)dH_MJ&GS3$3oQOF+46pVL{P9U z1wm_OL(^=XH~X)(R_(Q8RQGXGknZzs+nSu$d1gKV)79BZ&8(c;epJ(?XwwtY?Q(M8 zcP|8>d8w})f~v@6MkoC3RAa@2+oS;v66AP~oPho1)Kk4L4)V(4_ZFxhnw>IIBa92d zzeIYeO@DV%g=x^snAlFUJJf6n%K7`KUBj@&UV6sFchA|q=&!qG99M#p0~zI(Q2no$ zHZJELS6P19--z>MEJ!8i^dxp0*{VT(TD@9Ivi%Tc!5^Z9y2r=dO!K2-F(;L)S(xlW zwmV`=_QLN0S%)qhdxxc*nXH%b$oD?zBSN)LLpXx}J3gieY0K#d{3J!&4PC}vV_#G} z1Vl8_H?%ynmOJ&+2S2Usm*pn1nxDl*{ZZH^=O0NK#&IssHN!>09 z{t0LQW1patG)VaHbcI-ANgN4L^*ne6U8%5L+v<6Ym{xSxj;<+T43|J)JBK25~Z>E~Tr* zTV*gOi<$1EMLyjg2~Z3Da_nZI&8QzFt^)eLy}w)p z2Xsuo30b>(Qpbb|pqYYIUoqi@(%yZjsUurr85rKW6tqu@V%QMp>{Bgu(fNh8o>j1b zQvpYggt9r-PX_3nlI6XZu$Xo7P*ONO7H9)cC&JD_?a`{}jy0)r+wuMZ*wr_Y zw|~fJz2oTrMNYe|Cza6@zr+hzodT+12*wca`B1k5MVjC8r8;3HG=o!gHfHF0^m}YF z&&P^H3l-n~5j49lA;uQqrsEXOs?bF%)MzpxRH~^l>mYOUo(gN2d7|GAn%Sp(Pye}y zgKy~WtJU9t*Qk$svS+!6vPY*VW^Y5-rZu>KJWWW=Qoi8LGDvOb#(8%lE=IIl_Cww# zGU}-jZMbV?bE;8z-I8+laMR*X+O3B+5Th^_dLeMOp6iR?c?(NaJx)2Tuxvi5*A*PT z&~UJ+PRf&FPIkj;S>po-7U#Zdr9?TOO$|B_G5GBAVu3gI=4+I_ECl8F$&WepEKRoCGq#hpel_L%Ny zxmI7K7X3(==4TtGH9Xi=l^Yz5p+I)v>FBQY2PKB69dy-(K+t1_Y{#Qva#clI*0#f* zkPk*I+oiI0t(!l#_11JT1{ocE%s38YNr;ccJMX?}n*4mY+Wo`)<7b2$Xlf+p_%RP3 z#l%Y0O4rg>lJf-7GV@zNq18Y#OAp#Q3j6Wg@BHFU>Fn97nO3>xrSHO&SnHDm3PZ_k z^W9BFz8bD(KakBB0_c`o0>Ag5WBr8vCs;6y(z zjJ_P1xu*}2!UB?spk`EJp#(rV3?>L14aXTjvt-Ebt%&O0^*aq)@So3*kw2y&PnIg> z_-%In+3E`)+Z#)}jO>0cVw=F0|mbwgj zn#T{R>3135*d?DRyPN@%k&Nf_&GPz7KeHVm==fRk%W8F`K#4zsKkJ++O=-wZMjyPm zj4Yn{s7QR%=NS$NWXUGIyLP{3fgA~rR=&c$z#;ysECg`LI^u{Fs?IsHi;h5R80}!Qkvy#?X^b~pk2o(PmLc<% z6~Y^QEq+$`1Pyn1&K`7Q0TBZHo^P-Ye+&a7>Yu$0dx~hVxC%iSNecLJPbhKxMMS&< zF->0Xigua5eo$^e;J&0eKJ|yWR>})__2|(2x_s+L!?OGt=xOvu@h2n5xyVZnoo!hS z>H;(3^F6wupyf*K>CNLXQaJ_pNz25SB@Boik~r|HaMILa8l z7$WCSn0W*VMcyaFc&39KIZjtay`_;#U~jQmn?)|(at&%9FDvDICL@D`^drsHdoG{dE)jmlCQiF z)nR~w9Pd3zU)$1un6I=s8MUe-h|BC66%)$r(54=Gbm;_#GFkYr>@1Y|YQ*MB$vd;* zGXg-#TC6sO_#$qNpEvIjK>Rva<=yZMy8TO0wJ{>@1g04Akdf*wAj>~I#!E%f3n$Ez zsjsK@#+!=g1K9rFnssZ93m`i%;R>?TQ}l&_A#+J|bdx>5CvJO@7zSX!0Ow!99vdd!Z`#K6_gR$iSMFmz z<#lUJds-+6(T>p6J$vtI-4&fsW=JX>pRL5CL)%>Rp|dw>A6$`I!f*skAv{vKYi6wL za5Wfv`DXf*&vlMz$&t+gEU=!r;VJGYK?DOvctUtKJTIWsK46`Q)XQ8*&mI)CX78@_ z$RAMxuN3RmLn0Go5X8}armG~Y^#!iMiJ|yngizy)@f__B!H#a16y* zf>-Mjc7C7b0@8N30K9|wpiQzK1YXDYnDiRQ2NS-n{-_vYE^RY2A0aw+X+=0XL69}QN^1Z}t{ z!H7|iKowpSa0Nhh5r{LMWi{;;?#-`zn+l`w$tZ6tkgfYr_!@iy-?pTi6hi~}RK>f( z5e?V@LME0F$vW9w*T+TB?-cFt^H2Z)X{UTt^XHc|)Vi+^;hQ{gyI1M6%S0vwBu*tv zCSj6~_Wt$@zd7GNO#-+q0$@Z!Q(mZBA|Yrh#zX4er%NBXRe-r|`8Im(ybcr9?f9mb zI;?(*AsRu5Ld5+-t9>Zm33HeL+#bX6gstV@jPFfy0VByR+}EKvEJowHrz-qolco+k zDB2-f8zGW#22v^tkM>Db3Gzw2#{zsq{)O= z1YHPur*MC&@i|_8p-lRHeLbejm0I7u--0I_%tuU#5^6k=+}^0 zc$mz^r-MjD)q_xa`A5glb6|5&kNDZIvsAH`4k-dPA3{+c^ zZ|EQfVSIi}zlU%vmr^RV-FQl+Nwa{IivB7}f(=3Dll-Zpkbx>B-h5W!qc`AF3QNV< z#_Ly3(qcshaW#F3Wvh2L$c?<{OEaSm`2owhGU3x{amS+>W#j;m4bsR$_0U`4*Sa}i zlK8Y&EbMk2nm$_loi-R9V+$kva9J~5>yI^e5qvrS(d1(tgMF z)d=Cy>4JdZB>E~TrWR_aPURv!8W7t)?B#VCedlWDsxW^tiG~wrZ9)egDpOs8tfAP^9g$3Ds*aa)HOhr37I|3-3othCIW`ko|7u3NsQq$<^tamfy)g)?j?- z`C204xc!V~IyqFho&l_&TtZ4y;yfg59Ygr7+epciDK~LHZu_WeHI5}EKepdC z@GvVM|LVGKRw&da%?KZIgn$8p?N-8Tz9!EO=9;9=)Oz&;FVxUIXyOrTp`obWr36Or z!ucyWFj>INfPlvW8z6Gm3%>2v&O?0DZa|1zZD2x3#BiI|%Un2l0ADC3Bi!y(7H6Ey zG!)e&C|0>*LYyZbc;2hJ3hRcDyGeDexF_k zA5mPDQI-lHXR=YA9s|oPF`5NwftzS;Tk6`VX();w`*#s(1y(ZfrpirwXvpkw*1OCH z>94ETLG9yz3VtaHFM`bLpWThoDr~p=3*6n;u7nr~amuPBNL!0k+jN_?m0QBokUdnS zaO_7E9X))LuS#yFV1<}_69yMGvp7_J>@G1*<#|FW;9ifXflhh5YNtE=UIe(ZJM4p8 zx?3v=snEk0d0lc}hhRT+;EZ{~d%GQ~ww6?^B@NjWijJTpMXKIq)Y8gUVoG|_f&^w4 z?6a7rcnw%e3%?g)f9?xdR5~U1M9ofRG%kFg5g-0(d*VkvP7VS-K#5m=#c?csm!QZ( z<}qIgRBXeAF(6BZU1I+93&Fm5#*9JsigwXOlQs2gvT0|jj&GuN=5gAgd6rK9wGiU* zTVjCo{ZQoH0o?pl^+70ST6~^yVTx%2o6xl9tp`fudV{4{v;eaQWTbwucjn(kQsGgF zd?t7>5&Kq0&F@?f3Wbv2abL60tx9d)e2}pG6?f_wGDPW>qeL$neG9FDuC%bSYYzNp zVfcG(Wff%4YMi`?`4{iqKz#Ekfk(|sXWgo@x0nldg$4`(F5GXXO6RV=Odk~E{mP2q zGf}KKP3xtGyeT0Z7gQySN1dcl<28=5l@K% zF!-pH8o?^PQfuA3SnXhJ$~}KFzWRe6e4)#QX7OG;^X|V?oX`i}6KpR~LoD7g5mJ|s zg%@?v>1NM9jl#>N96c{?g~EK59Av#(4^0cU0ITTBG)%)sLiU77KRpp8>PZGcur3_J1haI+@KHcTsFIC3GGIpw{F!mlgX zMSkWETM@w5Scgz;?jFGStk|)nVTV)@$EBDnm@5%Wjj_TTVW`{^b~DYRe7hVP$rKo zj2ICud=7f~x|_F~Y7t~6rAsph`&fyeXQ5Iozaezf*;M42<(2Gx^~q(EH#VMBwBajf z!4vGRib<_)ta)2&7fmcgptEMV=_VNh;>4~>hYyYdICZncbR$qgxp{ZKSRb5KR`0O9 z>F3e7?)c7ig=rP<*`ouc#(_h|jcFobJLoOVJ@qKzldg)ov|gCML?lc&2|fKhYSeD! zO*K8vD<38>TBv|D2xDs0%KV$lVg75SD6)N5T88}oxyQaXhvQ~gQ)z9=ecYJt$1@~d z9sP->u-)I-FfZ;GP5+0kuZ(K@+1AFjcyTR7io1J(7Fyh03j`~rxI2{M#e%zAf#8zj z7Tld8p+IpB65jmJd++^l?ztbb)~wjbZ}!YQdq2bcdmo+@d;tceF zJ%0Kn6nXgHd1<3plO#+}bRlE}lW=XIi`<<|{qNKGnykM*72kzyHcP1cqa1B!@M3Bx zDOXX|WF~!cV5wt2@urT|bfNE~C0E7r3*XLfG>| zyUGyZevxl)|3qm{-iXlQVR@6;HjdRU1k>Nz1*`1T(xejI!3=L%1rZ3c z|8~x&gjk?D^vb()AccJdxVg)4Fnzu4l34nz@qrFVOhycuT1)H*PVOacIwj!?0y3yT zW`w9YmqOYOW@}UlfAc_`j^`%0Lf>cs#|e)KBT*}up@Nl7ZUMP-#i8ZOydzHKDmh41 zh$U)CDx{SjCz-uByYW|ms6%B2+XFz8&TolO2Z;eS;+o@tswd8x!cW-m6Uo%7+6i4a zmO6;ALxnL3XPH`2zKW#cxYAlYI?_oyL~3+tv0}S+zi0A@czQuDrk@F2TcyO+Z5ff? zQ|g#4>vdkequZxP=_QC))|DegJ!a|&U+TYXBD^UEq$3*xND|Gh$|Ixpt{SoZhc}V` zB1Im|YwPv%vN^FzwIt|_WJc8}=|dmH-eCWy>rv=uP|aV(chcXGUf#Lp_$YBKFWv9t zyEN7aES|@o67=FjtX>H=Asl=2H|T6N3PwQ#)0it)JT~3fMJgeBc_+?JeCDw^Y}D`T zlD}1y;K?bd$+SkGlbT#LiGb9@u)fefr|oycm+z|>kXm<#Jxkq^#ZA~5EDpIIzUHt$ zxXB?|Ly4g1SmVF0Q5tm4w(p~@CYGB6@dONRYI>ubyRn#%hIGf$`G#WX^Cluvc2GPf z0!A^eT7&nGup9qg-tVzUOqQyRx*d50tP{_tjDI z9lo26>+gf!IPFW_=zl75^2dl$H@Dc=`xJ{M^f26>pM^=15-qD4jTUn+4b8Cs2|W|Hj?9(;vP!_t1(WzI6ow?ERHIzagzzs3${?jM zzRk9PEVQd{d|xw#uac6l$&z{UbxVCoX73?EXnXCL!L^j;{YaPx2&cGY_*6?J5i5~w z56iT)4I)1JZq`gh*}V_w6R(==>oxq~{s8FL4!A%8y~&drUW(ylFy6G)E-vp(Hie)q z{;=;nbeEou>>(Kag3p52`5GxktwHLsDVQuNSBr>+cd<+G&6n)?$In+1s<;n$xVI3d z_$#$O4mbKhf)~u_UWmOt^(JCoo(e*M+m3=f9wi9>oMfe+`t&iy!la3N<`G?&oN7Gp z4|&Z?;R`t2IFJJH3|H{`l0<;gJTem~iY52)b zLNhog!<5P25@c0E`WTZ!XD?O!dlwhV4&;{=wto6NL*s{>pL+by(*M#)my;RckxsAT z+ReV55X`sbEsj91`65!sLI9a=K9<-~arBnam%4Qgas3#`NYD-;ymcXs)S&deFkya3 zVf(fxnI-NEI#C<5noaM<4B~;-V%I(My$yqkukW!vr5|isnJVQ*kcAGeMB7-VAII0 zp}zFMw9XpD^%b?~&PNRMY>nkK>A_^wbK?^Hu|-7+`p|uJeEOHB&i;gF+Nn;8dk|9< z2%f`XTR(#H1$=iYc)+uws=17M2#7@H0!uziPT%kE&t7hFPO&o`-WU1h+UB`Uhl<($ zRp;w)3pm@naGCyL;{-Un@Gv6vhB#*}EJC zoFIbNZk|&9t@X+yhQ(O*TNai^)#h=is73jr{ZWJR=68Zcw@jv$_Vo}}+raDMzkH;p z-p2KEn6r=l2%Z(T%Z9^00h_fW`jnbw6Gqfr>(K=#vS5viJ6T-qQSlsgo<#LA`J*A| z6k?~Kw1bu}!p5(}*8QpkC3IBY)`5%|MQHH@5HuU-{Ft0oudFP4Iw4w!U@Q95O!e)! z>#6A&8mLG&>)hv=30fARGJeDFDXuivptZMsFHAYr{tSOm?ee__v0vUF)n$dCTKjRK zM~l(Tk&t9|zxNPq;z*6NCTlWad7M<#db}st*-=@&^5ux8@h(yzR8a&de16HWO`;+* zb4TY)MOsczcy;i{eqmGbw2v3q38XBrgMg^`WnJbteZ}kB9&D+vY}e>EnqMa{`Le~R&nAMV2a?E zwZ(`1^epu0@5jIqz?<`%%Dqqvh@`QNP_1Y(7nA`5+~Ub<77q$xZasBS%NKZws?9_I zCdS|`#X|I(BOA%soW?na_O<#f)tt6?FK3C<8>4f5ZLa##%NTq6prmrv6{bZYdbg&r z&y*+i)UrLQQAz%0peUqtg>cV|fNv(23D5!c@4+mUH8bvkmIlidoyIY~=uobWAvKzn>h^=*gYl+80c$9VNT**n6xF!}ZZ=(HozFKhkYF(OasO8TeELJ# zEAX`>usIdMluaSxTJ+?Dt+qO)A>hyN=Ur>^&9XuuwlE)%?z3TIKT3NIwce9@Q!1QO zw?2)H4MD^(r}R@s#8k{zIt+N#ReIAad)g%J>Sy*;4bKbMSpu5u=TVLXN^J`&4#%P5 zEX6jJLc%3CHTKQ5$#$k~40Gz7Sq;ytw?BW*|M=O!`wpn}>znmT=u36g{2O;_OAIR9 ze9Ny<*jXL^9)NY;L=Q!4c?pi;!5-dpx3rpOqVySO4qFR_AH5LQp2{ZMo0)m+o(yS` zV`~E9L&ebd&s(okvE~i}K;-$6BXm!(Fq+Ip6)b3DM0n7k6H(b;_q=3r?}e3%Y(U%8 z#W<;elKEwtvhhWZ$ZCChf@|Vfd1>Pd`&zuq?lRQG;Aiygw{*jN##W3H_=fr7%~; zxPpji!v?>dWN;&cyjcOWcY{l^UQN!iPu(_uK%gta-#%}mpqYmcjwnht%6+2XE%H1{M znbthgx8Yj)9P##GLTY70Wf5$$npOAkIzP28H+D4Im*Fs^9J7$_+rJe&uVv9dg$0Dy zvU8}K1PW6BUf6BJWXw<9$B+9S^KZZWpZ{XaCyo1$|NXCTOiB?V*GPH+bWHwp1&At< zYXC3)cg_Fxj?YO57GSSUzG(Y@D*X2X7C_PZ|L9&J-LM;hf-J`*Efp#G|J6st=T!f( z^Z#l>t{(%6kigjT zG5!itiTiZlg7tDG1lhU&^CLvm6s#wR@jn&*dqMIR@rWZ zYV5k5z$8lx;m;$VXeNhSC=f8*a%?SJg7A|TK=tV;Gg`w z+`R6zp1bUy_%Ww#W3@EUW48Dmvo_)uN{PTXJoDa@O%q+m@J^JPfYB5IX9-W`6-?un z&q94s{z-!B?tC3|qJIuWRDLrKjE`pYjql!`D0d{1m95#2F5268I<0<+yp|9+et;WO z8s`Mou^BhEEw@=$!4Pgxey4Y@w5$4}OG_Vl^cu43*S@Emjqyl8pt`u@7Zvi5Ud_`i z1ZTt6;KYSP0tsYLaly|boW4B&rS+UC9R+sd>6a+k3q1j!>xMg?DXu@r`0k$FK4b_ z)$J8V-R@I*8{@#Xj}WjlrQQ~u$nSiXCe^wdRj-g?bI7LIv-m5*TD|UAv1Vs$H;W=8 zIk46OVn&RsAcvrKKPsak9j$L4pTnD~ux2;<1uOOVPNX+RMz6CVj`D*Uzh}u`woa-B zM|T+9NAi!Rb5oiaHM%y!+#&8hb=qNq_!pXG#umo`V;Na$e+sp0+pe$cAcuHaVVu0D z38r66zDTtuZf%WBzRx^ISxTP%%|#8Ap;=n9HDva9(mlLl%d?*3dib*t_hM7(sw`bv zXl&0>#UwN6V&Y60T6NwS zy6c}1=Dwfrv^j#;MZkB>o=&im_jd~c2Y15#-Vd*B7(x^787bK7KVl6$t+Y%AUMFX~ z4tNAB1wZ;tO1@nHHK1qSmXX_Z)~!ly;C@OB*SVBik~%2OnX1na`*1HzYxMJLPTTGJ z>Fh|RM=oNvshP&BtN_hFS>FBaTTF&VbK5Q=mc9=gE)g+gBF+zzpFgD3{1Dth zIN^mj%2@4ce~_I~w=Qj`NTB(*Y&ib%Vljm~qHRVZ2XHGSJ1fb{Z5%hRRheZ`dak`%xnty`4LbK^I0eihasUpx1Y7jiiV_Z6|!z}B+8guPx6RT zP9bJa@$5p0qX>}N9A*OAlXzlbmQ+UvOk7&MdV*<5Qp4szC5&t7!Nw)iErY#?P4#XLab0_hdm@sM#X zuxl%Th~F#aiBys$KccqR1;GTS4Nfp#@#5zwTu3S2`}KC(=p99fy<7ne7V^pNV0AI5 zWZ+sT%X8fK4|JjY3JLe`k3~m$yJ)mE>jM@Sp3F0+Qn(5JS|RY}(_)XSa~4p5z@9Yy zFDh3qQk?Q{)6!hm46ht_XT3?fo+VSxe71~(V=n$1ULrk2pkt5!21NIyih$bU_`IhQ zg*Nh4rf_9hC`gf`8e8yfQtojk+FLw96@+%IR#h36g#&2Y#I`=G!fvca`csUWg>HR1 z(E=9IE|EfzYTsHv?10W-*aavn4kiBaVJc7tbfb)J62WI7d64+MB(0)f4a+P%8*OTv zDwGwHS+BKaO81Y@PV*Iug}jCPWtBNFqH4iD>6rw4n-h>y!8|$cKfiw-;(DZ4iBT#* zU(Eh``T7RW5r}xPKxPaO%!Qy$YO#UNYwPVMHp^F(CQH_`jzA!0tyzXQ(L{cn=7Qiq zN3&>&N{!!)rI+(AhT1(fNBTg`Ni&DQWy2}__79En#L z+Oi)h*4>~gr`YxGu}OS|61zrB4{!B|krI0NbOXGJO0v;C~#Um9yX zxSWFTROsj*x1z#z+k?l0xSv_b0TK3zkB`w4buw@ZN0j01pl(k1$goZC6w?MAx`^)o zI|{(3p$ z&j^mQ6+)kazrp}eN_6{V<4Pk}Dh&tV_)VA`x+CmQdS%}L_v#E=eijWTJJ!Yew>2KH zcOtff+V+bxAQ{UA1|rE4UZjK%CWm$XsGhyemOH+zz_s7xRu8FcHQvxvdTB6tb- zP2krB;JuW~h($bp#NMLZV7J}j3vD2&{_?#(Xs?lez(&29JKI(1<7}fdB>UdfXY&~^ zXuEaLmsLHc2_-Pg(k(t+=tR)`QqH7+GS^}tKeUEpH;3WVYVu12NVxsH9yZy)OdM-9 zJNl)=re!qq*f$HoLkA*spPBP++vKt+Iyz2Eav&~MmEVQTkVs|$$S7rBKc-{2vBHDDem;SekOQ%HKcE6d6{~a_#(OR1Ch+N&R5o72<#~HAR&eHNv+9SDV@{aAi7>#le;Ch0VkV?87rSiFToogNo27{JsILQyS~egOA5X*%hkx&P@D?Vm zLg;+H1A0|~L6>Vx#%mQ;IBJ!!)Ay<#A=*wONN0OXInRsFc-nFh>(XdgA7RqZNWR|B zuaNMoR0*}40tT?XyMaxrW(+^f&V{h7A?tom)`GmeeN$tbG1&2F&PwULO;&vB{R&$6 zQ0Y513qAdhz*15xc0SYGOEX_1_%v`lR2{pW|#vJ`2I!tCT0Z`NS=AOnAeC2cU~AX+g)Q!BiqemhSI5phXcq7vWg7&a`^xNO zHz|sucouXg187Xft{F6Q0^5L`{P-5bY2Om)GsWI$=X=caVXow}uf+tBZ+cPiu@I6W z)mmtHs4(5XYoPTr61k>j-l3ycfud}zTTGAk4l`d&&-nEPx=~`r(w{_4eUF4a6kxk> z1a~(h>HAkteJ&hO-7T8G9me;B=c}M`Ah9!}Yh|N4Ji%n^_DKLGRG7;Xa`!5h;N|XQ zgeI3Soqm3rEQ8GeMMLH*obSfWpXfBm<%_|rlM%}iy$F(L`>^OwInGhy{=%P-ILGS9 zfNuux!jTD(S^_&#rV*;Ej+-qz*m(ak6MA_5nPs)TuS0l>K?GevsYo>=^c&_3TDd4Scw@F1S`P~iA$)5nSa-bV$KWiX%fa>$E0$&n ziouJKP2(++bUC#&by}y=z^nW`PNbi$_6rYW+687=D2qx4e9q+=_vc{+E3b3w3{SxZ zXIq<{ZVzMvu3NMygt(RNB*qRmY7rP$zt55~LlBBG zu1?kiQk%VERkkdm7*svH;``Zd zDs^UEp&w_<)J0l0d>y~!o}$uxZBS!S@+Nb)HJ@Z;B1s1gL@$_p`-Mj?@uGPlE)AV99~ziB!2^~2 zhg97fjFLK*Dol_^ZoEcfk7qJCwx}b;F=I?Isk4jOH=MRy!)P1y{PGg)KJ0a&U!zl+ z&r)6Mk2tGj0z_VcgL)6=1cQZlg3Zkx@GpbLluex%p1;vU-WLXpVKP_Ea?z8N%h1h^ z@c-t8m(k8KS}gD*8~N`~ng)gj4C(}HJ_#V*00@x?gHNT9K}dRc0_{DDSFoWE45SeC zS27flQ0#|sPa2Ihj*8o+>8sxe6e7&!pwFejWr0f~GW@JImw?6KfshcQx~b}0m!YFz ztRXSOFpLgj!<_aR0wRBIBA|;DF=t^s8dnH+5VTL!Qrkf4GnH)4EjDvzOrznm30EH1 z+CyLaS;B1;P#HIE!1NWxq@n5dc+d{NC@Xwv_Tw@Hvzk?(ewFPf#Z8@HQrK701< z#!r`Y{GML%Ntip&`W@I`bp~39>=0-bi=A_Ky*puL(x&Q-yD zVEk()&7*!K#cO@{PgR)T=%R!yD0F*^12$FI4w4&v%R%uDEIie&t5TZz{orLd8EVZ8 z%CwOVdE9K^c1Nhr>aDS6e#!CBGjM#nuHEp6?9clKo?Z{Fb+tm;WDWP`Myq>xdYG5=QKcml$M5 z*vVc+3jJD)lO{(k@{3Z(l+1kD?jVJgp!2zOl@HzMX9QJAG!91 zwdGl)Wl0o^tFobbAz461Dq-=c1?F$(0+eQ z@PS%#9jyjh_Po2iZn`UIMKV3YdKkx?I%Lx%pCn{KDpUnBl`>KUK;F+go%>A>N*|-W za~=Qa;=L#EP?H}$K=A3wcKUwQn?lq{E4!3uQT#fPg6SS;4l3hO{uN&3`%RA>H!kgg zW(1|)qSvPbz+QkEZulwtIyso)0HsD{kj~=`)^CbeV`$To`9gy(6D2CadjBX`v=WIh z*y}{wi+bn@-VTSeAU#WYP3&Y6fIuqHHiYOboYS+`-voq$b23lk{wuu*;x*BXhXVp~ zoNMlN$W#2HQMJH&rf!O0g(Xjj4twH%(5kru+uS-A!Xl@(HsMf_8_^sYz!ZG0v2i}} z$8%Cb5D4A{?^>=7x=YE~Xe-HiZO3KEmGo)R5XnGaFdIRH{Y*@vxya)L&P;XM)$WS- z;dW#`+D982ia$~h;;WS9jdj`&!|c~FeNDYRBxw{(x>FHXo#P;tg!RqAc-{QE4qan= zU)j(v^M+yy$5Awd_gw;wl^&-tjVDYbso8w;NOkY2{Tqf|2j%@AHs!nux!V|(xaOf% zNqKsyWrqM>F2}EsCSkns*?uoL9U!cF5L%6idfAE44{`*5_SA?%@P{P<;VBMY;^XCp zMRm?@Aqxm_!6_Ra9mOlggamRMnkG`0fU;T^1bz=C+Hd|XJaCq95j97bQ zgLuyRC-S#wlFYf=w=WXM(D+Z{jL|gIa4I?UJ0k3T98|KR+77+j=-w^g1D-Nv$Iyv+ zkz2aXRkJfJG_m==zzdw6?%YE)-n7ZaDAFr;yi@A!KUhd6Xu|#GauUim)VF{8bCI{E zRnfn2?QE`A_321HLi48AM*F#7{K!y%h9Z8Yut!5{IxQl5B&&*q*kRDD zFYV|ZvSX@?)+fv~ogHUKLbta(te#DlBLO7hA_PO+^3n<@7Of$QYn@1EQOxb8?4zUr zWPD^aEDUe+MeI8~+ysbU*Fisb?-p6}uUyw+g}_4oLj#ue`Ly1pNc+Hw)25!Can_=~ z@pOS2?Nvl_W#=Os#&OJF4pct;(*U-|gP*>;pcOJvommWt`HHLQSw`uXmZd{`!ZNCUh@K zE4Y1Ktym9j8^$!MgrSFTa6&{BfPvvuyxly*be8%!!IA!if4fDpdL9In(X0XUFtgcL zEu9FaIu~oQ*l^dR)Wl5=(j6~b1pNBoXYnczA!!O1i$UX|eg%bH2(Jk!&eB-rQwQAD zT%HJY*7X1l0Qw0;y{-5alZoHRx{ay~p>npocn^M3fugEx)aM6d0YlFeitHK7A0O<2 z^+PEH)kDBume+%v*5pT=QfX zu=l3Za_7OKcei;LJ~{C5>T!=)=M@W)%gQB&wgFNP!aa>%>KBaapE<=I>kB1bU5F3J zYw6|#P9PAXNmbJq`d*t9@|e1DNF63xx@o@9#Q`p40k105k%s1KXt5>@dwlk1ARmK# zJ1%Gtd`>!TyxQbB z+;YTR`SlVBM5LZur-%X0sr4Oq(CJ00!UesPTpj|6oob$+epj}F;svN4`bxbSl0u?r zmOi2n(VOaeCj}HMM8CY9LYUysXu&}5skK*iKv>`A*D6&X1n5LWNHdev&4E{Rp+16Q zH{w~CG9cb@Z6wh>i3)?F=d zJ>X|GYhE`=WSr;6Ca|^luGCCbWMRg=Z|fV$Q!>TcWpTOCsJN6K=#JTr!iOuX!4e$suC{tmDg6uvnRSxHkMjj6>f=A=O71)uEcgH(H z4}8~(B0rz`aO^(m5x{WF^9*Nvt=es@RyyQ^Zlu^RSECU9!?uWgftI9q;TWG^w`vIT zJB`Z_5J&|#Ep=Y!xFF}yRTISFS#F+qyti-kz8bP>XPvm&Hb!k@vBHTpnH5K8;Dw_l zCuRsRqz0aHAUK29A4{|9pSz`7YxfE&C}EHRxpul%qhfkGY2_c*dEL06K<_&R#9mRD z)bnXtBx=pvKbQR*522tAg{S%J@B@Y|{I9CC*f`U_XZD@j>zEs(FWw7D=zFb&8Ogynkz0j*MvRSB(#$@UlpdpwmW+p0E*6G9r-Cw0!un|LkF_ZVV zPHfgjH4L}4n;h_d={7=R3n<_Ad%cZ^@^vD1av0_A zyNWTd-pIDzmrnFa!}8IxMO|-#++V4dOm9p5^r<8E3)O7?f%}F82DUc~bVD|BQo@@G z*NU@|wqbm6!Oa&{#VGB8gEifmAL2fQLPbulV%d#0TeaKm7;L*Vn3J)f?6(BQu^lHU z|A9AU)#r$Jbn;+)==KXDW=1@yLnD7`*M?^+TuIE!2fI+;Pgv`9lYx*j&;8g`=lnLFKBdU zqWfd(^*8ogzZr1`IuvJxM!kWwKH;)f%F0?ig>T`TY{Dfbp#v5gIHUs_klZ7snu)D ze!+LU`uPzAggr$54&Dmp+FjT6!aj42=}T|iv)@cz2$}i@J;Y!d#7&p#;#T|QmsV{O zOUuhhduFl>J+Ujf%Dtlg?SS@6EX$@!b8ZuCtYa55!x=F5=BAecwBqjy&Qn7Fnn@#PD0nazpjuiu+_e`uol zw=@r=vG-%^lqu?6e~Npv&fe^f?gG|p1qF5ASO%Qv$d09s79lfe8R@&E!3A2b6jsLaTLt#D+QvmZS+yN>MUT4;sUsFtrm-7qKudusrH~dajWe>g!4s6uN zNRIj4lt~8#-1|#+eEW_k!OlKYd`sqgN{doJ!jOsvzg*wL_p)F(DNk+TY& z@M7(_&C>p?fLP!rwDFazZcHouBiIie8cQG5>?TX0Q>kt@{Bcp8Z<(uFisuA|0I>aA z%__fl8U?msK(+Ko*zCc=Ub&xX*3$ct1f=1{Vm&B zO-G~gz8Db|2L(pzmhD)B%i%k>H6?h~=FJx#g$ug3nk9Oua|fC9a5d~GuS)l1YO^BZ z`Ap6GWv1_xu2r?4X;;^t#Yo@i#s5(2pQ)TqFoHSLKYqU;XHz|>h<(aP;M9RyVcnk8MTCZp0>Ih#93)0pB0j(BdYCQ zEuH`Ioflt!J1@RbsFoh!OP-@DUJ~<2XS@NECgnEPP95N;K5B{2pltD^LL|>}vaR^1 zPkVNSZ94+LXBnadK9I2~(c>ML)wX{bGrM=czsP@oc7dm_)%D%x&7Kq0`t!1Po+n;a zN=cB}qUv6PadSps%yRk6CO$Zx@eW)(*C=S6v+pugb{-My_E>Yj`UCGJB;9eRa_%h;;PY=qdiK*UkHqD$C;yS9h6oCWPv#b&fY;O8@p2W3QS5kFvHoJ3G5ZQZR+pr%O(Y6|YjGuzWPD-Bx0NwX}TS z?lvje?D|T1A7lPc(#G-J!Q;3eU@n%leOP>f-Tb>*S4D^T5KYbM(Nln@>BGC1v>6E# z=Pmvb<;Tt)AN+UOxl&I7KlcHWU81(7>iVdw!uiw^!kRGkK#76<(~lxp*J9tc z@XgxKOe4Fq&*U<4tu4OX4t2YkWaQ;MUkISVEPIUVd>#&ydT?YUi|(ky{rR0KxmMcM zOF9Ir)d;Q~s%ADJra8a8iYkZcy`j9^O8KW!DVUcu`MIWVpYU-!)V@4fJxWPkbUV&# z#OJCNvx3h}Hvi>Z_NsJJ%IGeH_y2`9WIY^u(?5 zb7E>H$*a6Q35M&oPOp2v)I0#PDU5Qjh-Hu#tWcJ0kJ1aeZB>u))t6D*qw)z%w36;l zjSjc_O@hez>-r#}Q|wPG9wePZ2A1jH_Z|N8xGS1U4|btV2B+(^E5TOgwr{+2eV=E{ z?N58@bygnB*PoCpmu4<)nl7rM-iX1sttOa^sDmEJbK+M&Fa$6NCSHT#$!f=&7M|of z?dKjm+9R1Yx~A*z_4fOjmOn~&vX#36Q&kE{1%8Z}f4{X_s*Z6FgHLK@_~z)`{7Cp* z>SoV&!!DPz?^zg;HHDkQg&98s4$32+3n=)(Vx)#U*6hJPyR+!7^JHlmh5iCfCijkL z0OewuhqXeoMf$3X21?%<!@4( zxp)rbZklpn{iz#E@#L!49gAlT^Ad&bBH^@j#u6TK$y&hu_3`@p02OsE0X+LwvjrQG zu#@O=IV?9_jrx|p;5jy{uH$Dsi!yAhjv3@1bx9Cl8%;KhOeV>|)LNz=m?O{NU+`TS zM{chEON6_lP8i*v<##2=xPa6VdIN}sCTg4AE`3UT3!2=wS)uDj8U^x7oMDPVs5*ok zV-n7rgMSt}#tn@j^2?Zo9X$rrXMjaQiOTF;UdqVab-3SWbyXST_7;+ED}WjfR-(j=aO+{{W#=!nB)1sAfotX>R?5OA=G|)V zCdH@ac!T@1I-u-0N?JxSmw-3=UqO-xu@4||&tp~Q4{4fxS;7b8;*%~)7lkj`O;e55 zrQWWugrx3Nd_4+r|9bmjMao66sq;wwgLrqsg(A6*Q6Wi(-c+e;oguHguRo{aZcJgn zwO=Z9j2(-yAUZACwi4#-qCJh{5uHKA<@+pNHKY+u2GW{RlS@mW`cQ$rfg2IZ%%Oc$ z@LCsEa6M~3bd{hh{^PW(?~IQiIo$Ws8OaUO1P5{d^@U9+lv5 zW%t*;4^%RNogOE)+sO|P+S8%1)SGR&1vBqw6H#+z60W(kGJC#gG_sclXtMCr!4sX1 zw`@(k-M7iEay&}9J4p0Nk7?e5j!q2T9Jeo%$+a)uD^|9Q+r*ISErWU16@t#dvY{<^ ziAyx0vwOhk4=aNz7Afm_Pv zB--8w7Iwli#cuZ91PCD)fWXWy?llON;bAJxIUeuxbX}dDOs4e{;KK{9b-Jp`xi|Vh z-~ny~sgVm8N6S@zRS&v4>R2R=f$EZrJ>O@A-mk4DoI&oBLt#ZJ7z8#9&j+0tch(2C z_m0=Xd50x2WQ7DLZSVFlGriV!WDEuVFd3o7eg$AKFc?iK*f53UO4Ure^&Sr#b!di- z+RQUQ64g{oV)osGiqx*FD!N++Xp0sHC-Cl`yjYXFrOB1@z;-Yr7K|2Nx!|SfG#~mq z;~@Vlb2F+{5knHafdpY)53;QypE#VWE2PPL%ZbSKtG&OefsU9DGJO4JlJ)6^C7OGBU`~k0`FlvcwumUB#HU{IbJwB#! zf26HFE00blCIM_fu-o6L(_L@V6h|IU16EUR4~9#{zFPzX0Lw!AxZ9?>*bMxZ6r=uhtV%>bKCVJ>J4RfC4u&sZ> zA4Z&1K#1%@=Y`q)WREThU@@DgMmni{^_Gu)bLsLmIAA5p-Mf#oiberfRF)dUZNSZ* zd|Z?f_owYC5go^lr!ZS?T7YlMJU(_1B299s{cgol90;CHo>+tCt?M8qYZ)NDUc|U) zbHB75e_O89W^_2m6mOW3jHBwOnX}QSo5vdzPFXAy&2A7o^CMt$!8Q$$vC=D0ePH}B zD*)#%yLgn6Z~rQl+wqkg`g!ENh|hRJ?arz95UrQSGyJKh@OZUlHioAgkkgUjeX*i8 z*RIDrUy>Y&iCglg+}}*blLcWxGq;yro25abS5)k}#fe5}GIx~E8W#kV{Y*TRNwg;V z&u_?VXFG~h8sl*b~REFm-k#!iNkEIiWY z9Y23j*7Y<`Y8YrH5Hu5a&4_ z#6k#b!1W7tPv|w9vzzKgt;u%oB8TPVDxx86sU!soK0g(3!!cNlGQV{SxDwTD98XIZ z(6jd7qSt7G7Lk1@dt3@E2T}P{FIIjeusWvlIw6x*U0O_TsEoY$QqaX8>0uo-Wcqg zqp(7x9+1ZTGsdJk^`Z0XQe_BCI~N7AY+PVn>LlGxnCt8_iod8nMi>uSxAnOxZoOmf zC>c++AXBUQgOzB}DJkGj6XgMUqn>zXfX$xRFvLqk52_H-M_+17Xj|la0;8ePio!Db9w9I$DZz!DuNZ2DJKcq2GFKvpYDB2TN)25#CgM&!I+%2U+Jjhw2|&`dzC1bK(Kh69i+Lh(bN~G z(;}D;HEGnt=6Fx`ddT=WLu=AS3E%e6ugxUs{NW0mV z()@ItYtw94u47X9<+$!psY`npPMp1S^c6ebbe*?TDh=*cX3t z=>E2Qlkn`l5q;*-QdyR(@;6{}yBvX@JQbxu`u>-3&)58^GI-7UDLjUeO z+;fl!gR)w!sxCHX(2#cy#sZbQvgY*yalo86z&dbb6P9UjoeLOvVCs7o= zGGoGCNghu(nw&WgUfU1725dtAUuxOPi~u}ek-Bl*F{(GvqwKP%`qAS)0tT>!6yW0xmxhO7tQX8L$s9o;*Jt zfi{Sm{0<9xI2MJ;hWEnkg_HF$6GTX^I#Y+^y_c6`g-U?NVjgt=-Axm~!OmUXD}BSs+#JsJ0Gp53v;uBVYS-C)lNhHtattR2 z8>2I!%x9b8D)rYfY#v02={PC(^IvC6>+;b>GU-CX2d_3mf&&h!pDxCy!XVGdSJ!^^ z`%0Y`)?AvcNFKjW4Gr{uwGg6gzTR^D@CF>jFnGGY=Tncewwe2L>OPR)yzsYpTL|E{ z$X1Zom1axaY4xNn=k5JOcpX<@-`NFpzTWMTnD3G@*afN|2)bvfT~6{uEDp3=e1_#zrNrjD~Flu zx)%`VzJP-ggs!hNjo<^QCRW_^IYLH%%4J>g9b8W%^2uUX4^Q(L?yBtzBgD@*b-gaA ztJAGOVqROGSnvx^0KQ0c`e`1;$xjlMP-tytP^vWJQ3_L$_c!gq+9r89tLY zX(D$id|dxs#TkSDc+;o7(6lJRAJCNB+FW$~RDN{$S|!;s-rnKkc~|V|zHI2}kDzDa z$!U;S)ql_CfFN(!#X;E9|6}hh!>Zi2uwm(vF6k1GZji18NOvt-1QsA6-6<_44N{A4 zkp&1!D(WP`XV#c=jQhUFn1r$_fypjLp~b8E7yIq*_4-VSi{hgM1is7PsF_DjXTz>uDT-G$BlI6qpQZ~{pgGF6 zak}{WcbPV0D=Ffg1#%UBQr;w1F2`MafW5T-u5{Y_0k+l1Q6CF+aR zH3m*OPh4Ch+^94Bz0+Fr>sK7kJj$?`!|-J!Cm7+BWW6+Rd$j*|1-DVb{n%9kQ8n8) zIB4(2A+aQ%4)En5s-$QBol!$HRN&hFJ%5XIPFfQTqSGU@5x5sFVliEH9EBAL3+G(1 zptSQvC)(1&24kD{ck5Mzxbd+zPGdj6{1(=9S=QLWfe@3l1HH{luGWiPIJ&%$f z^~UTQZ~t@Wxzo=WaJrmfgQvdZ8?Ve5(0FG}t54}$j@`U0m%WesTG^A`#@=E$j}I1B zEg?^G>FlXn&&Z7_Dke+CpY@#WwSvoOU%M1^|OU4X?g1%v-8bZ4=7tui%<7tt(>q-T5`D< zN}C^wg@wwQo^mt}%p-5Jd_u-A_R`NcoX$pvO|$RNo#%6Avs)2*F&zBi^R&A=1R9@m z6O`Yg*5?tn)Js2H_XTPB{U=iwB`rlWCt8$k_2^Lg^sg<2o*jU3rRrtUgYHJvk%O(t6ew8xqIe|V3oevQDKqDL za^3|v5?1KNN-ycEOG*ro&m2f22X8Y@2@PEWU`L2DJj*+LtjYd-y6q`3!q?)dVqdr! zsU<>sCvu?W>k6yIu@U9k3PSIwQ+q@8!st4aO7o9G&RHXrepXxG^5tNCDT&dN_&MA(EUkldv%8g%j;k{>}q1Q(G5}==xfcCT# z<@5{pPjn`Yckeq&f}iXlrH;DJb$5BUpuY_bq*B9)d^rJof#3P0(4W&R(9?*7pH0~D zmbYztVbMTapfgM?ClDdo(GMlJ6`PL8{G3X)zS8OtWl&l4UJ_+E)Wkr=Xi_XjVpH#B zYZcNnN$&u`_YO)qA*s_;S+0FdSshdOMUac-1d_V`9lrkE%?THsY*8FdR^;AlYohkv zS-$0l{pPac3mv0-_Nf8?(LkklchO{vD9U;@*r(b)KLAkk(UpJtIP zCu@6Bv@9E*aTvdu=DTb-rZi*(HykrqCMs7Mnt2m0!;t-7Am}8L;z03 zCy+rU{r@~l0aA)!>`~Uq83h0M7GmHhkVLqS3Y2XU?|&Zk!UGLS`N`X>jQ(H!0(vQ- zLQ4%|VH{4jMf>NYR*OKOA-%8D*BOxht6xALs2Oo_ph*dk-rE1}GVrIRFA@^r6BbY>!#_qeE&&*=9(mY0_QhsLcE6-rHpu^d4F7n2w>&Uf>(6JL*#76yS5};E zTqq%7X7)fq(J*ia8asxXbFcD7RF5iOvOm!2F1!m|S!dz~ZsbsoEUJk(p62fSIBuZUWSgbt zdzdAh9`iP9*E!Qi9jSO*xk@wewS~y<4PW4b$o}IJcR>puw?V5Nx2_)_a;GyaO;qaH zFPQ(f0wj`gx{09LE$=W&wTt3cTa!7ml)GXmomf-g-EmNfq2p$k&tzaK2l~on{{BBR zGXRRIayUuraEDR*U?F62_`aaUb38o!12oyaSv5pKTl?zRdvYjr@qS%<(@6vu>MA(U zI9K!60{` zEFhLirI4qfzs#fkDV%PEPP0$^*lGGMTG!av8!)$n5IsG;ha`Nv>-~3D((M z;YhWOpr2*DIyG?~F4z@U%ZDymCV1gEXu}_i{$_%RfkQZsNf4l|v7~&qd9q))Eh#Ak zeW+pT>w!8+vsi`2w;@b^i(U#bv3cnIUYfs1E4B>5%$YMSSt}DN1wgn=eh32y5v@Xd zIT?kEu3IVGE9m8S01+4pK~E~rzZUswgV#1UkVw03qaH!Z*2kJ8R&CBipLvuS`(@5# znR}dx?dmCop5Q`J=0Nd`AF8CZ+r|-=P_wA4)hSodVHr|ViGK*Gu1ow!9}`BcrRW52 zovRPnnD0albrlH@glU6*dA7e3`tBDxpd)v-oFBoW)mXYyq*oByQ^kC|WgHnhFA+AO zWH$F5q3UHC7C-4NUQ+40r)7dFW&Zf0Xyrz?ElwwzPm{v9y`l`ugr>)H^4B76KZcGo zdq04)-mFg`FqN9BD~OTEg$WFtFkQR>snx~^oZfEa@r2bmn<)D3xbDv+?MzlVtPg$? zOmI6~u*)MC^{m$PfySHah2hQUs0)LA z#<+VwOPI#`L~yxtrXzZ&di|lfR`WY-ZM*f!j#Prnk6dw)8};|9&#+c5L%E-?#gMu4&2Nr?TBs2OH` z$MKM#I4W1}ptZ0h8DUI?*kxUs z2n`PN)wXVyIZmg)4fM!*ExRDQUD6C^+B3Ef!bBD+OW!lOX4yBo47RtYSoGRuD>ZIv zbiLoLY8i28@w`dZ4`F9~4{3N>?85k$g{NS`1Ae}J6S79GR0z{StMSa2cYNBF;DjFC za)n{?g}bv7e3!FVhe=Z#F;7nLHAAHmZ~As+voU zP{vI1{{ykwGgk5L)7l4>NgSh>TkNft^bTX``rV-x6g@9>_NS^iATdMgd8H`W@x!KJ zBwdn>$f)?ejnms*sTuBH(y!vpj7QNPECn9IBDK#EWAv|oWtQuU>^pnXfW_ioh5ogf zp~5#%KJF}swhmhN`Y1qMOcs-0=)3k%N9OyNY$n{g)=ho4-;?!GXh=Z@~2 zr1tD$&Oj#Y8N;yDPxD#g(TQJ&&qxzcOXn=9DdxYl4kL0+6$kHA-pj@#v7S^<)hl+j z+?DsOSGsE^)lHV1Wg#tU?0s3(o_Q|%RaF^Y{p;=N4LKJ`@KqreGhT}Wo1E;e zxS}+1+kJSygEVzCxVWbNJ@1wIE6krQtp}I*uYd&YFx``3@{DjqcppJ{O+@f9Vh^tNc z&4IYW#P0gagRd8#kzx2t!c*4PT(qD?!tVAjs)y$dRtXSE1DFp1j3+I@G$L7E1qZc# zZt5$jc4KTURChe&g8eqD0~(9zg|klT^y;^*2+g>_{V{XqT+@idEP#n$Pm0M{?0VmR zoA7yfPES6)KF+9gEA;e1KFv-l3f1{lxIFAT>CrFT1uC1_MC`rk3D0j~&4pX-1&JHD z&S>JonvuG8QpyfKMi$exL50=~O85yehxO??*6vMK($)jh05{iiuV2gx>J3uD`@8e; z9y z-59T)-ntVt9S*lX(%QAo6IKNE8yqz+i(LTx-ZH|D>Qdu(L=NU`kssvuqT|wOzS7N0 zt8GU2;v5p4+@$cF5!YFk3Y9iILVbfZnlWld8J02aS^%nLcfb=Fv@v6NL>BSIEHs|I zt1d#t>Vsoa&nw_Ad#}H|av?gHp9yI*#GiQ)XVeXlI&Ve?ely!WY~3Q>kkNuS8h9C` zdtdrihc;VUV;RCrN<`I)i&<#D(EGw&ODUw0Ig4hLaU;G-O}S1GXmB#zuS4byee>(% zdw=lC%E}8tfFVq)T%Az&fz3&2T;u-7l??2~gqsW}3fL8H#s3bs-N4hS>GZLFP;uR+ zwpd^Byvt0#$p?-?$m4jwxu;K>Djkv;Io};fVtmw41Beg?z{v;9;v1_5zVP&^px%S9 z_0cqGSzxI84Y2RtqdW0RBL;_)4^m)eGe7bj5E z?VUygZnV#_O|ys+e+KQlRe~a!)Q>NUsr+P~sOPmm!ZtXc78RQ*h5y;>twh+bf{?$g zilPb9lz>Tmb)2WC3R25t1S!3By+GAwv)?y?Id525CKx6VL6d9?rI2a=+KJ6V1Ij>U zRxM;Nn7JcAs~?}qw_Ho8mxGvg<|?Xs7VA9O_UGz`i&Tt%4S_H=oH#RT6f=!G%1xiL zwD{?TJQ3JU1=&s)xmQOlGd(T|%W$IGbWE<5Xjn_}+UmYh_#PdLekcFI2ZbyS9tz2pblUx8xh&X5~= z=KZrkwS%y?G&?N(hl;h{V$gJIJ>*Kw`awtL#r%{WgX47sa?`bN&6E^glkf@p5EFLx zzYWTV$3Za|gzMqO$sioe5*k2BZkLJFn54{ty!+<%wy=Ucjk79}0gQUsybiKiuTXdlVP6Qm8cB*>L)aDMe2JE^T#H8l#Ap%QD{Bd0SPY zDslSsp)^vt#~D03`JE$1nB!o1D@grn?bz7N>gA`0nd~eY3e)G?mtt5f5A}U+Y39E} zAnVV@oM`?ED!R>4zXF$PyKi+4BeSrC7b@STO>Sll&5+iNSoCOq8xS4a4z2AyaVd5O zHUo5@?QUUS#EI(lO!D|x>G+OAt78-ay(^*kQ4q$Y-JdcWixnb3lo$Ebly3RbcNfwz zm2x&zZa#a{l5_jBr?fxe?kab@aYqcRLrh{EI}{>l)YVAM_&J-neYNAk=2w^iQ;kH; z9Me7srbe}VWP5RRIo#&rbY*qnv0pU4eO%q+!+ktu%rEHEw~YsPN@jQin;9cXGL?;> zCW)gMmAizrY6Tv1z3IlWnJ7<73KoS;R2W$Ozq@eSl~RN@^UY=Lw)3U*E~XFm9DC_7 zh^ltkq>iT|@jyO)mvd1=;$)7r$S`2M`(ipnP?+}?*?3KY?5YM%#fh>Pvp>tzJ%F7~ zo?hHQdoW87TznC)!z*?!8hN!v#2~&oCc2C;{O~!gdf|;A&hW_lev?a&vJMP1=e!l) zD1WH0qFk`u=v_Zmr6bx6RN!tf_>^` zDK@gwk99HQidY=(;|L+6(bJf9JYOT^X>hX4^GkNg_IzO%x8b2qLyk0iorah z*v@@fvELIa&^d0lwX;XQ{1BS`vRDo}W7q&hbp{vVjR5sBO7@`qvy5Mc?_d>W9m9>E z%Q$mZT*A^+?3s2>F}L*xqx+1;N(L?J>LIAM&9v&3vqUK$_XY6d@2n8oH~$A8BjGh=%mw zul?vrr5e3;S-vrjF|E(01kj%=^`6kzY){2YU-PO`Dnkn#aH7tDVDyaXuw-p78y|hR zbZUi^KhV2-M_dh_?9l$%%@@_APHE#@AczHDb=9%GZpp7Ncjn0rGUK%7MJjZUA4bw9 z>SG|JS*Zc0sxW{P?Tit%HBf@QkebzRmFD5gZK+!5?#3z`vguASz1y@NdNL$8x}l1Y z7LgX+>>6qDs||$%O^R7j%S$|X zG++{%=j;E~Q!zvUw)y%~!=gu>g~4F>isK{tT2cP<;{`Cri~BXMPaD?2I`tNnA!b(r zg2m%T6VTKw?*U>iLQyRS944Qc+SfF<<8#Fx51UnL0R(D>YG}7$TNJKiUmy_o;gPcFF14>a2*!BQK-ng;^_hX!|zjK zrh-niY;Gzuy!SV=d>1THXNk5`(b5eMM%wc{4`h)>1K#FWxD*?dGU1$GJ=-&M*gjM* zw{E^@R6}D?Wt4!bI==q}nC^+Od68?~BUBdDYxeMki=?h$j1WM#c1YrO z{}v*CrH!iqu^39eGoN#VuFGbR$a&BW?PTF<6>Dj)8xWoT+E3PhZQsm718(qid-L|M zX^zWy#F~_A=s+wP0hl%RW-EFD2-#WyFMlXFAsc=Fqmr=aEibvfOt{X=zKz zTEwh_3tkyH+0n0rtB}>e=my9eZi2rK8XQC?fk#a7;;(2fM)gzSTfIBY3!NeBOES0E<1G-WUWU0fAp#y=kc?u>Hn9X9TJ%`Y7R$b*5DM+R8ja9?4I)5fZ4eC z34LK!0qo3K|4_;6?+EP@9?cT-aN|m;?TaAd__prraW0pWAJwL%q1qI{8gy@5Xs+QP z{19_Svh?c*L8S1zbW6J_89)Sj%;cc?jT^J6v_Q4FG^A~zR zM;sX!v-B`<>d!dveDteDhBcPS&G+F_>)Mku$HO|=n1{8A;I6HXme*R#5A#z-xGz8L z2@|PODH*TS4?72cQ=5J*^Ma2p)A-UlbWtenm(O<-xl-L~m~Mje=HTctkG#uEu|Ui6 zMR^14mk$-IWO*jL*DiKtURp3UzYt6zX(|-etlWax^HGzsdQH3p4n|Kv6oqb(=Q zimr&=xs=q&Po1I5VPT@T=uV&EeU}QO2KnM{qV_E0;aJnywbEWc<@)q4t-W6MSP2&U zNg-$a+bZOsbKbH#32R+&YayQqb9?C3@8i{WR~V#MtW4Z{r9${xZTVK+g_b7G_}VkM zDV6qA2It-$N_SeqEmFoav42+LE;qR`R&A`EeJerIx^%dxQc$zK?c$xXF;?Q|xSxGx zCPZKOQXC_&vZPnZFq5-~icp@zcrjXmm@Pj&S|650^mai}WiaqyR)l?_G22h?bMnk& zg_OIiZEhry-Mk#2xw6tZRajii5Ux8l?N;WB2Y^~GimiF3B`KKaQ^#^(61kyEU#Ctdsi@d z&3+P99Y9m{n%kzdn6;JGGhQO!kmoGVG=**XuM(du`aSo(mhgx7>^Qx;a3~y6XV`Qr z>2wa-mBLF^!n%14opg_HYX0=+p|EC;Xh;XRDPEWvC}WWE(p}Hq^yDnrn)~bMfz>2S zO8iGFl;Rr>VzA=3jiW~Lh&QhEFtgDr_#~r2WIwH#tzu$758wjlH-*^M9L|hCgCrgrYjJeK08DgJlKReP|7B zU^tPn&UY_o_fqwV(>?oG;eqEaF$M4Vvl09+EMjc$nmdwZhkaCX1s?{#URi1j2vHsJ_}f z>9?%YC1p^;)Z;<+G$pWw)9@vR0=WW>93Rr;Z&JzAKN^8B9Ci*#kHb8fWEg7QkdO-b zX+K7^PIe$OLEq8RL}abi-)?XE+ABok8TrEe7*iRMsE5U! zBL9NHGeOATjwiv2{j+51LfY5vvIhBXWmYBV?`x`4i1VI$8AadFLQ@$BVb3AWaGpM$ z&}gi6mOW0Nb3h{}ww=a!o|#uNpBjoDzD0_F{eA&(_Y9R;|F5()EpNi>lVwQ-3;P;c=w=->|E^KTzTKPrDE;>ctmlgw2=03`Tu111?5?b$3;00x2 zq)eyXujI)?ET`I|xXeu3I7LOfBHN{{&*3uT`4FEroU6q3m)fzH)-tB zPq0h@m#h2yE<9i+W2mmLp(294xzA$qHuw}qH_V+qF1_b`aU09Sx?kPgWtxRxH0j67 z74opmv*_LDr#^Ul@0otO`ql7H>WTV0F2EupJyaOq*_%4&yps7W0Xr!LsLCcDvT#V- z;ARa9$_u+!q_)}zH*2cB0<>Dt5K|%#XRIr~dvNa$4ubbV`lhx}r06*({+68|>D1lg z%^5odm_2~HO9IW;U`*Sb>&~oC;F82zM9W;9s(-3#ljQs`klIm#YXWE9ONPhQe)3sy zAFB^yO)I}L&7wv04D&=e(g?)tC8t4%4iK3V}Bput@<%$D8bQ&PNuf+mhs=BK?iGSi-(KTzB1cO8%doB;c$HO2L?Q zDrMPbJcy*pCM$A$ztykXYklDqq59Vw{qn3T)z=dX6`$M0d zH<56;mhh1#KmuR%&BA7xdGL<}0|!HiE-fX$!T%~1)Z)Z=n*h1XtYs2%44xNYE{aID z?zFUlDSUPq4fht^_z}(-Zb~wHi+DKXaV?x4wTdFAY>NN=#r0B_t(G<@{x)4%bp9i- zstRKeq{hV{jIWt0&6n=^$ezn|eEWv2TM3r)64u|gsc(64D{!46A40P?p72b) zZp}^|Y-5OVysADn0&YGKVjA}{%j;coMtz&B{k~zt+~mOmsi##D53%(~?#RXaKgNjt zID|qj+cNZup0|pY_k77CBR-3Gq1bN%<(NS%oMI_owD2n=%mXafSFIJBd~*7bEOY8! z@Z??k{-Ij`floTqH&~4Azn(@9KH}n8{FKqG4(M=kNFUI!il4LvJuDA0da)%ges2=c zZorwwbj^{MaFI-ft6UAYgW$iCttP^|R}Nn~UlY*O8dp6ytder1GyQo~H8+}-f$`R# z^d%_ey?<=-x0g^lS*mb|HmiQ3@#YiMa9I?|07QR-r^QnDs2hSqt_}xtW9Tdnu@YC5 zH!3tEdGl22^)j!VmGw65XQWL&*Wuh``1)jrJ)1R=-E!OD(t=u?o2gojBkEpQ;jzV0 zT=rN8lF(;KGje4k6bT7E0Lht``sY~iL0@PnNJp34FtzzcANrYIL>#Eb{M&O2k*LG3 z2nsJChU=0cLAPH(}9;Hj+Z+Hzz*5Izd7xhX)1BB`ekt_UK2Tcbu%9RP+J9n3zRN!7)t0(J06zm;<=a|kmz z94BHdocLw@tPkG6WbnBghvB61)wtXkAEPwmLw`w8~f*KQ&~;~ilDjY z;CuF{tLyjjoZb4eczw>M=ee6RA7ByDA;<36l1rF47~deubXghRVw6_aL{xj@vUc(T z*He3>>Q|qhYe9bxCqCnE`yCw+zT3(>*-Qf){f)4mLCQAPVQ8iZhj+j!bd7&1 z*m|*reVQpi73%-#YNT^-&_^ZSL9D}4)aT);&F-*Y+Ew5Pm2$NDqD<~R`}2o0)iY*|%NaWUjyw76H8Uvr{BmeFLh7DzE6-1JZ}0j((qy^dn1?RhC& zOWOk@#|jUfmw&0^JLM0W=5N@A`j5@cb(#(bi%D1@_Zy<6Q_sO^5kfCN_Lt|Bw7njG z>YbGU>V0Y;4(PDkDM4Px(HXs^@^sgn0<7n(Ds;t8CD5K0l=V3IvbvGfkX=zmI5CVG z64O)QIvB-{ot^OR2ps?A%GxWkK8(YSrKeztxn{2)`1}jj!A3>`JaW!~c6A-M42AjC z9GZA2BGb$G_lwWL&jy(ouIZ=qVR-mHY}C0N4M(vM7j0s-e8@|Ad(+5T5^*3uiu}z#HHW%RX%yb9QJr; zDCS+}W>rj!$lW&_`^htRj*ovZ>k{@7)CLhc4d_WFuHJ*MeJ0P9VXmX;bB=@4LZON> zu!EfmDH&3rpfnb_xH7)3eSuj2u3G;|RgLffH`2Wv_}1=o zSueNqQ`bPdfohTk3O{{R2b22O)_fn(Sn6j2JG9#1*GDOSu+|HEn6yv-9c)6iNRN#it6vxXW8G|c-IPObTxbzUXkO~WCpJ& z>6ead$Q2I;PKT-N`u60MAhew^hT}{(1TqE{w>bHGekPajxK#5eZr@M8=Zq8i1Nm`6 zfS*=?&A9ETSoG+qT?jfbaD2qWcj^$e+I_}OINURl(LUB;jaC%*U=1as&-!kcO_ZURpa)#|ju1$i0aidOP%MU)`e4+=<)>OU z0=_^dRw!h<@!uQ*syO18XvjK;T3qABF)LX0CsonUQ+E5lXMUVW;;(7IZRSa%d_1&Z z%dhW7*I0q>r8E93>fR(n?KFIEMLY~Y;PB3+MS*-C+frlGQ?e>=&Z0d{eh5rx zlstUgcpkmwb&tX|dw-Kmsg+kQhmV2J|1E&me1RHuC~)XlKS_;vYJ>bS7Uj)RMrbV2 z#OD*CSRS-42W)LiF6>j7<<8)GMiLR>)jj{ukOMV`Czy*+AoD!0G(|!&s=tuNoT#Em zzMSNOarqU@k!mAL=Lj3LrZ76lJhs_NB`XEH&87AHW4l_TcRGR{-d|#jrOij zDW>XK4s(c>RNh07o^0X~TYz9nEr>imu7I~xZ+mThx0@n}xapzUC*$FU$L8#8dU`D= z3A0IL%O$$`T1gTr`Y{;Wly24fyBWJr*lh#@+KbUk5CC+f#6Ep$YZ?%_ zgRDF}6ia3?qn;9n$Y+E^;w`3m&0- z#9{LmmV4RoTo*rf3|mM= zM~X6gCgH@!BKA9;UM~??&Q3gEvM$Eh`w&jV9(hI4ozB)xK0)jI%P%fYEem0M=#mpH zcEIgKoOECqRoGEWDm9kT}uMqc3#{&%L5xZXoM}@Qe;8{ zZBH<+=Iq;atev`NH{R|S+HWX5!!;sX48pI-B~C@{OBnlFm|?z4hlXLD^@JswG~j!+ z_)QZR)SHr0Kh-)b)?KFmwo>aq_Ahg&!@O2N3FY~c~vLX(DZ?w3OF+k?@WqEn(zreV9j06iMpx#kVyYcs7uPHXnhJhWJr zR&6+JsZLU5A*T3W{Q(p&akKS%or-OLshB`Nrz>TQ5G{SDX{f8fF7=&hRUP?8Q)AEl zn`>?`%p$u9JwyTKBlN}M>$0=e%1$g~`QzQ}SW$*BpSEt-;-=&MjnbMa>xQ!_S^A)L z4kYMNe}cmO>kk;3T9qb_4OHftF`!lQWmE2@S@&s#_qJljw|>M;8IfdV#XT5x!I z=o7>t(>s`BX5@rL%-Gp9=jmNRKP1G`^P74#;j-WeMRh^c)LlR3Flc!Gt_j1p-yWubL2T+Nj{lS2Q{$ElN z{~s|R|NmzJ2JHVpGX=h71P>2iF|qBlW{UfZJzf5F8y5nxpyaXs6TtkB@PCaD@k>k(ag$qsUWdMcJ{Uy`+SLgx%r~oMB zx7{t|gW29N>?YIF(UolS3FsBRA7!}z#CTWt9-^#U&WAopz@ZaSK|$e&c@P8GvrpPtdqn>`QvwxUU;6P4FbkAYjf!N_ z;Sm|0?H|>2#(BFVt6*l0{M4Qdv2EQTPcvfx-uJYVUHAJZ&Dci=&~nV0m9(|{9!aD! zb8Wsbx1Y4VBA@jlG{zbXOtjrjeyB(4bJCsWVFnWcG_2{zH{pK*1^@n$;D3BcyWZ}Y zgOn>7uVzPR=Z>RcIeKVdz%v{Wg`tQ$Iz7WD^-a%x>2Mw64D|-8e+&fmDe6}h80Y&) z?NZICiA-PFgv7+|^zvDxP|A8Uayybuqu91J66tVz z=#QrB`QiXUr>!RyhC+iV`788_nnjhqTK5BXWY)7AwPLRAqI3c{6{yHuCSpEb@7Z2% zlZyq#y~?8~Ey~8IG!mQ8I(bO`wCdJY3rl|`^$+H`n+Nr)EDV}=stJV3x~=4*K5;rf z`hLTeyeZ)x%T;tpYH`2dpMlwjsAf72c4LBeOW-m~WTGR96498fwgK2nZ&M{AtKVi+ zRJZPoneu%7xlm@}O48=xo3UVoVzqln8RYlDOE0Sx+Fir{G1c|=kF;RU?>%<}85voo z7S>DCf}#RXGqf7XRBWkKtgqw^=MuyKIAZFM2 z@IYvB+NPzT^iuhkd_?2RK}u(Y;hvhMp6Gw(6qyA{)ZtceHuz75F@btrUlsh%dfNj; z6zeC6{~yW-{{KVt|9pu4pS2p)vk^KjE`CDZ{CrPy(d@dVU{W2*;B^&5^v&2pXP2yx znxjsePb{?ly;DCX+pTFl9=6&Q#$h(&cAyY+;#}ac6>?|KRLOcN`_27rE?wAbXC{J! zr;6dp!Y?i5IO^T4RWf&UF-v!?{8CjaY_*|n`=t86TT*L-_`4`;2V9{R{gEzmlSDf% zC#4mM?YBP&fLNs=K%=d6f1zpp$H*}zow%fA}yC$DTgw98ug`p3;^76X_alf82m3}As zZD1p7I&u8y!*A4&xnVKVQ{i)<$eKrcI_&Lk)W2vg*5Aa<8Oqp_20dvMD3OsC^2o}i zBCgDnF*x@e=Tlv1%)=%epps#HwwdCWWkFQp0@O7FY8*Bb^sfed04gO~md}=qY;*xx z$C_PUZK9iv6j|{t{=!Mw!!9;|YFOCOJ#M`QY{1p060Jfcg!~mcSwJGYj<$3A3xBQW zO&-1i%to-dQUS|hFYsqi4na|r`^p9nplT{mpU=jm9$kDft7THg;9@uyW8$i;^5o!f zIQ{4XlZ4M1sbb#wRl&OSzc+hSWMI$G*~OYKHoWSInOyj4kF-DA)L$(!2RKCQ3nV^X zON3+Jy+U%3FYBuqHM2KdArcwLI(NQZD#IA!{hxtpRgDsI*+hc!`R-#~yDgAv^WN^9 zkL6aL23>%p@a`PiX=l2A^s+VF^dyg!>F)>3XIhT@{zDppN-8>2?;9F*cJ;lLg3r8R z(U#yt40Mo+6p|E}gGnJ6Gcwqq$fWqMQj}IkT};)Vi2$^hW@-y!Nxx6aTaQD{&84ZY+S&7b`r;;?bUJLaklXl$uDE+P9IV&@Do+feh|Y*UiZ&mbp!+q@j4mwpTpHi;~fnY+4qHWmtM z)X?z?bxf}uE3)|lq2@slV;LB`3hU~Jp=lQ*!{|qhOCk=#0GkvJWkLml>U4>JX({aS zDuTDCr6wzGw1|E0A!f-iZ9iMZxv*mLs)WLY-7GYp!%g50MP zhCsO%D@*lw_^YH)qO{bTai7J)02F^w?*iH%48t=W9B}89qSiXU6;ussf*lX_;{o2C zbX?crK!vX-Su16V(*2YC7I_v$Z0cZO%MEu|t>2=VVje`S=+CNy4m#S_I3_rz-8Tuu zr#wDtf43{5$4Q-}yen~xhwjWc7e2@{{gR(}X(~HavH8RmNZl!-HPbPpRCwgG6Rhzn z%uG}?Fb05H*%8Dog|Zl~ch+Pww7O z=kvO+Jznqm7_B~P_P08w<_x`k=r0r z4d>-oAIsDye!{mx1;;_zBP|}wX@4jy@+O&_YD0bXBZ)p(npBLy@d>6ig;rAa!QW6Y zB&|nz^BMqkRzqU46!L*}=9^*~Jr(X_ROPC#`gy{qQdIgofvk zFLkrE+@VleDRSqBwE;F|-lShf*$A~fP!-s?U^({WXcJ#ch=+Sf+v z6{UJGOB+eE>vQ>v%QmWuvxd(haEtT;Z9|ar-RGiyt2IFH2_eZK$l#!ZPy01<^U?X= z?s#iVD?J^!muL{WDu+GWg@3*Y2!js^(g8(Nmnvh?CB<8t89@aFQN_aTr73!{5}_NW z+A2+%TF;=o9-2l9fPD(7^HRswJ3|S)T@4qpaT~s@cIs z+=U&J-s&qejB;U^cb)ok!^)(FB;5e74}SKny3L0U-b@x$#+otJl0)A&nk1 zlxl$La+hYxby?ww3S+@FV$BO3 zRMI{_1&pYcHlT=dFM1*zH2TT2d(^B|nf(7`b93T2MniH{dtHu>B*D0=o|^WCQLt_5 zlZi@0B^2|E)SsTTY>%duCl7;xhD>%xr901&R!!bkLD@T1B&#((N2sP5g4zSUsVnMo{>g>OG>5G4Ls zFdq2t9SPMfFo!s9dbCsBM&XOA5zjMZZUF~98E-eQu;W_huy;Tn_d(|Oa=Z%h6o*2q zsUKw|8D2E4?Ew9%<8W3Z1v{f9D;DL9?69?ZXKtDRp;!y|973hOL?+tx!lpH}GHWSzS!x6Kqn!&8nhK0_}nl&`HpfAtn1xyMLyNLx2Xcc za2ES$f=a-&goYRFMq;B8UPFxn=+7DJx~ zY}pzrCwM{~uCDU~kTqNfPORZG=uuOt1ohkBI2XU8n3*XLyQ1QWE zt!!hm?`}cj$=lMM6eBSqc&U4Q9JO?%Dod{f>tB zetwbVgj=kV&HCd4ty_4rtt-JdZ{@!S>#D2lmI933-iaCRTNv`0L*{h&nL$4^ANO5? zq^Mj*UN3Q|A&p}LCB;|tKlug~kWyEc`6M(vQuzry^(6isY6AR>(_P@F|L{p>q0^8H z_rSS4jYh@yui4hLl);6$1qK&``0^eQzbwH*tHuJ^i;=xm=w+~hTD9fT3x~hAK`x?&pO7YFY-yB@QlX>-eG9&w1qPxIYs+5?!Fg zoZR84Qkb8Hzk4)i6`y@`e#vUycUr=!95h>II!jxVV(ZB1X|*5O>Qe}{b7dfYCU&Q? zmR6$Dm-O`n|D-R+se&s8i6=dgdQ-zYFe2m^^YS+@>MyX4^R7hju86-H zC9XJ!7L4miIndSZ^@~sKvJp%_V{p=D$iZ9Q-DK*Nk;$}5-8j*}Wz2E`+Llgpp1ZSR>AcwT5=M!_P3lQiOay(D#~jQUagvB09li7+ z$DmkmD@j`(v%uG~zXh^kVscdHzK}94tQb*kGSN=dd`o2Up#?<^lLJbz7PaOmGZgIp zlDi!pH1QC9tr=gMfi~SS2Pw7TA+$jAF)j#rwQ_xhU_<}`s92d*y zi?Ev7yAjJTqf5GuB#Cy@t6T`gm}xCU7&7&frO-RYu{Ef4kapcuVd|ey4MKK@XByNf z480!g*O}geZt^RmyhrWqA!vihi$KSPG$2UbB1Hz2bvxo3&&U;>C2_S$1({_$hizW z_ec!&bT|gU^hq^&b|9DF_LST#yL>w5dUZ4eZY+O$uc|rTj^{QRXIFeNI=yPU~}BOzqkgiBa-HhTZ>L%XDd zD{JKM+F$CuXl=y5c&A;~d+2b+`~I&sr2eLAfiJDG(zLq8Zoa2ivXem>^K_41sc(B- z7}k6Gg&8829|MYvgk0wi7NhtLRsjB}D1PIaugsIX%Iei~rU2bB-DJhf&~A!K1rvv_NPOn#WkdMEI?8h}0~tD!Z= zq?2%guTV%)aZz(h02cT~^w8i1cS*iGFy8tUWHdiZn)O1GY&L66D6PtYg z3iGk|Y24S3_q2&tIk8T>jo5iN1jlu@2pYz?>;X)KO&SG90iJxYw8eGj$_e`|J zQHT19u=_f{G`ZHmO}QbE?5Y640$q~MrtnteDZe{4N!tvsSPPOn0sxQV`)8MzNS0sbOan1Jp7&wn@)3{WE=%;4@yGoXv$#o(d{g&0W?XMMKdhHV*0gqib%HYAf zF%bl8;(2B4r;<$Dhc!)Iq+`@T9`j0@QF7~A*Xxr}9vlX0t)U5sLu*5S_J?TAY)yMD zP!)6v>*_~B>xXVr@5b>>D>Eq!8hm5MuKbTzSe~UOc7;4}rdS$o{5`O?#@5ycih@aX zU6xb4%>i9BY{!9RF@DG~MYGBW@d@{SooGUAguOCxRbTzYQ{eWD8^`m`Wj*QZkg&nF zK(oqUChr`7yI8i|Mz+zvHPCY#g%zG&4HG%(uK|s-=oroLt^78WzyHKQMNHqDy$Y+| znu3IGaS>{_)QL<)K-|Oee8RVSTKiWc2g8xK3}xXy;U7cu-iKEW*SA;ZWS&RLMsY9b zc7ep?8Nuh}ZYe5GUqG6XIoYruXMBdO#(m@%F5$)%1Beqta`^cCOROU^ts+}N5tj?uUlr5vTV>)`y31EcD z{qVlg{g0`Ko}d3&@XWt@;;g{h4SJTkbktV%)xORo`xyP>#pN%qP}l_Tbq_SQ??GA6 zMqU2*GCP84pX!;ZWe`*UasAO+yimpaK81!&l2!vgKzeijV1E(pApJ0X@)+IaoN*`z zCl?Q|hibfZ<#@1Lfcapfk4^X|i!?fca?P}n(zxuK{!Npo=v(*Xa8O*?U8b|Z={|I3o~4F#H`tiIBK+T>0TiNp2<6`5h;-*l zRN>);?2Y(3BDzoGOCP0xpGxhlWcPW9;69$B&$)b%%;*mKgQnltL@uGJA?SB diff --git a/docs/images/overview.excalidraw b/docs/images/overview.excalidraw deleted file mode 100644 index 3db6b54..0000000 --- a/docs/images/overview.excalidraw +++ /dev/null @@ -1,7857 +0,0 @@ -{ - "type": "excalidraw", - "version": 2, - "source": "https://excalidraw.com", - "elements": [ - { - "type": "rectangle", - "version": 353, - "versionNonce": 1248564274, - "isDeleted": false, - "id": "vn4L3TqP_UdlyuUPojW7a", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 238.8207244873047, - "y": 298.19146728515625, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 941.3860626220703, - "height": 682.9640502929688, - "seed": 555254597, - "groupIds": [], - "roundness": { - "type": 3 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "a0", - "frameId": null - }, - { - "type": "line", - "version": 3018, - "versionNonce": 317489134, - "isDeleted": false, - "id": "HjQwYjWjGL1fkzMSaD_d8", - "fillStyle": "solid", - "strokeWidth": 4, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 591.4039183427105, - "y": 813.5178785655356, - "strokeColor": "#aaa", - "backgroundColor": "transparent", - "width": 88.4876449463024, - "height": 89.09464429436154, - "seed": 874480965, - "groupIds": [ - "4sQqudUe34Fh6IUsHzCsX", - "gBC--hkf3LNt1lTc_dPuz" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -34.52310960075043, - 16.671742440255233 - ], - [ - -42.57310974114554, - 56.171917038422464 - ], - [ - -17.654777647686025, - 87.2626911174663 - ], - [ - 21.109501084411047, - 88.15945967978124 - ], - [ - 45.91453520515687, - 56.30457375629711 - ], - [ - 39.50755929687648, - 20.076940969366618 - ], - [ - 0.7333503529994064, - -0.9351846145803028 - ] - ], - "index": "a1", - "frameId": null - }, - { - "type": "line", - "version": 1864, - "versionNonce": 1074675186, - "isDeleted": false, - "id": "-x9dTzIxnu1V0B_mn-q5i", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 592.3632632289987, - "y": 812.7628990961992, - "strokeColor": "#fff", - "backgroundColor": "#228be6", - "width": 87.73148910074318, - "height": 87.862041911905, - "seed": 1592300709, - "groupIds": [ - "4sQqudUe34Fh6IUsHzCsX", - "gBC--hkf3LNt1lTc_dPuz" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -34.988153391367796, - 16.841312639874804 - ], - [ - -43.47408611688612, - 56.1377087995827 - ], - [ - -19.452368863111197, - 87.33983066725774 - ], - [ - 19.452368863111236, - 87.862041911905 - ], - [ - 44.25740298385706, - 56.00715598842089 - ], - [ - 35.640917447176925, - 16.71075982871299 - ], - [ - 0, - 0 - ] - ], - "index": "a2", - "frameId": null - }, - { - "type": "line", - "version": 1514, - "versionNonce": 1030902318, - "isDeleted": false, - "id": "YBg-V5CciXEvJjugQ8YQG", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 3.141592653589793, - "x": 626.2597292535415, - "y": 824.2309354152129, - "strokeColor": "#228be6", - "backgroundColor": "#fff", - "width": 62.147469962747394, - "height": 52.678415870349795, - "seed": 546879493, - "groupIds": [ - "gBC--hkf3LNt1lTc_dPuz" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 11.972367243261315 - ], - [ - -7.836458559225603, - 11.645848136626924 - ], - [ - -32.32539155680556, - 44.51543820448981 - ], - [ - -44.62427790670128, - 44.51543820448981 - ], - [ - -44.84195731112421, - 52.56957616813833 - ], - [ - -62.147469962747394, - 38.85577368949355 - ], - [ - -46.14803373766181, - 25.359650615271704 - ], - [ - -45.603835226604474, - 33.413788578920226 - ], - [ - -38.4204148806477, - 32.869590067862895 - ], - [ - -13.278443669798916, - -0.1088397022114637 - ], - [ - 0, - 0 - ] - ], - "index": "a3", - "frameId": null - }, - { - "type": "line", - "version": 1232, - "versionNonce": 1194700722, - "isDeleted": false, - "id": "-DEHNruLVAm2L4FsOxFlc", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 564.8108863285298, - "y": 832.9155734557471, - "strokeColor": "#228be6", - "backgroundColor": "#fff", - "width": 62.147469962747394, - "height": 52.678415870349795, - "seed": 858615653, - "groupIds": [ - "gBC--hkf3LNt1lTc_dPuz" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 11.972367243261315 - ], - [ - 7.836458559225603, - 11.645848136626924 - ], - [ - 32.32539155680556, - 44.51543820448981 - ], - [ - 44.62427790670128, - 44.51543820448981 - ], - [ - 44.84195731112421, - 52.56957616813833 - ], - [ - 62.147469962747394, - 38.85577368949355 - ], - [ - 46.14803373766181, - 25.359650615271704 - ], - [ - 45.603835226604474, - 33.413788578920226 - ], - [ - 38.4204148806477, - 32.869590067862895 - ], - [ - 13.278443669798916, - -0.1088397022114637 - ], - [ - 0, - 0 - ] - ], - "index": "a4", - "frameId": null - }, - { - "type": "text", - "version": 835, - "versionNonce": 872668270, - "isDeleted": false, - "id": "nv5vGwTL62BrkLEykWfw4", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 581.9377184635864, - "y": 876.1173467530036, - "strokeColor": "#fff", - "backgroundColor": "transparent", - "width": 18.042373657226562, - "height": 19.00288064133774, - "seed": 888421061, - "groupIds": [ - "gBC--hkf3LNt1lTc_dPuz" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 15.20230451307019, - "fontFamily": 1, - "text": "ing", - "textAlign": "center", - "verticalAlign": "top", - "containerId": null, - "originalText": "ing", - "lineHeight": 1.25, - "baseline": 13, - "index": "a5", - "frameId": null, - "autoResize": true - }, - { - "type": "line", - "version": 2894, - "versionNonce": 1678305650, - "isDeleted": false, - "id": "CN-O-CY0TgUR1SWPMnZ5m", - "fillStyle": "solid", - "strokeWidth": 4, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 605.0785028189455, - "y": 833.4381739174127, - "strokeColor": "#aaa", - "backgroundColor": "transparent", - "width": 92.89979574376919, - "height": 93.53706115506488, - "seed": 2030186565, - "groupIds": [ - "7amUAOM1SuCqV2j5KZHFJ", - "9IpIV81LO2rnE4H_2nkBi" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -36.24449302832858, - 17.503025064485662 - ], - [ - -44.69588044217418, - 58.9727483715053 - ], - [ - -18.535076149523274, - 91.61376354612757 - ], - [ - 22.162058219367342, - 92.55524657823953 - ], - [ - 48.20391530159501, - 59.112019588431366 - ], - [ - 41.47747621989392, - 21.07801282705296 - ], - [ - 0.7699165012653298, - -0.9818145768253491 - ] - ], - "index": "a6", - "frameId": null - }, - { - "type": "line", - "version": 1740, - "versionNonce": 1818893998, - "isDeleted": false, - "id": "Uc_JCqjlNBFpuKizkBcCn", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 606.0856823414435, - "y": 832.6455498337377, - "strokeColor": "#fff", - "backgroundColor": "#228be6", - "width": 92.10593662766843, - "height": 92.24299903336436, - "seed": 1748885413, - "groupIds": [ - "7amUAOM1SuCqV2j5KZHFJ", - "9IpIV81LO2rnE4H_2nkBi" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -36.732724726510604, - 17.68105033477563 - ], - [ - -45.64178109674639, - 58.936834449252125 - ], - [ - -20.422298448694317, - 91.69474941058061 - ], - [ - 20.422298448694363, - 92.24299903336436 - ], - [ - 46.46415553092203, - 58.799772043556196 - ], - [ - 37.4180367549903, - 17.5439879290797 - ], - [ - 0, - 0 - ] - ], - "index": "a7", - "frameId": null - }, - { - "type": "line", - "version": 1390, - "versionNonce": 2110712626, - "isDeleted": false, - "id": "P3DtIjeMrdtdJikTdAljH", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 3.141592653589793, - "x": 641.6722862342983, - "y": 844.6854027676138, - "strokeColor": "#228be6", - "backgroundColor": "#fff", - "width": 65.24625295469022, - "height": 55.30505504390554, - "seed": 118268677, - "groupIds": [ - "9IpIV81LO2rnE4H_2nkBi" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 12.569330691796711 - ], - [ - -8.227198270994226, - 12.226530763838628 - ], - [ - -33.93719286785113, - 46.73505684495324 - ], - [ - -46.84932348760594, - 46.73505684495324 - ], - [ - -47.07785677291133, - 55.190788401252846 - ], - [ - -65.24625295469022, - 40.79319142701297 - ], - [ - -48.44905648474371, - 26.624127738078503 - ], - [ - -47.877723271480214, - 35.0798592943781 - ], - [ - -40.3361248564022, - 34.50852608111462 - ], - [ - -13.940530403629085, - -0.11426664265269444 - ], - [ - 0, - 0 - ] - ], - "index": "a8", - "frameId": null - }, - { - "type": "line", - "version": 1108, - "versionNonce": 994973934, - "isDeleted": false, - "id": "--P0g9enUq1BpoonToGUB", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 577.159495099573, - "y": 853.8030722520235, - "strokeColor": "#228be6", - "backgroundColor": "#fff", - "width": 65.24625295469022, - "height": 55.30505504390554, - "seed": 434895461, - "groupIds": [ - "9IpIV81LO2rnE4H_2nkBi" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 12.569330691796711 - ], - [ - 8.227198270994226, - 12.226530763838628 - ], - [ - 33.93719286785113, - 46.73505684495324 - ], - [ - 46.84932348760594, - 46.73505684495324 - ], - [ - 47.07785677291133, - 55.190788401252846 - ], - [ - 65.24625295469022, - 40.79319142701297 - ], - [ - 48.44905648474371, - 26.624127738078503 - ], - [ - 47.877723271480214, - 35.0798592943781 - ], - [ - 40.3361248564022, - 34.50852608111462 - ], - [ - 13.940530403629085, - -0.11426664265269444 - ], - [ - 0, - 0 - ] - ], - "index": "a9", - "frameId": null - }, - { - "type": "text", - "version": 714, - "versionNonce": 2062464242, - "isDeleted": false, - "id": "ytui7uP0Yr9N8cmZIpYaE", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 595.1390487369806, - "y": 899.1589625293525, - "strokeColor": "#fff", - "backgroundColor": "transparent", - "width": 18.944503784179688, - "height": 19.950397947586804, - "seed": 2041144773, - "groupIds": [ - "9IpIV81LO2rnE4H_2nkBi" - ], - "roundness": null, - "boundElements": [ - { - "id": "ulKOP7Ie6qS97tzT8a_fG", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 15.960318358069443, - "fontFamily": 1, - "text": "ing", - "textAlign": "center", - "verticalAlign": "top", - "containerId": null, - "originalText": "ing", - "lineHeight": 1.25, - "baseline": 13, - "index": "aA", - "frameId": null, - "autoResize": true - }, - { - "type": "line", - "version": 1160, - "versionNonce": 2016987950, - "isDeleted": false, - "id": "sm-jePtUALj1T2Ddq3e7W", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 926.2155701977683, - "y": 431.9237452255127, - "strokeColor": "#5c4ee5", - "backgroundColor": "#5c4ee5", - "width": 26.344081019804264, - "height": 45.6290470338052, - "seed": 1001787813, - "groupIds": [ - "ibkmz-uXncax2qrEG0PUM" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -4.263256414560601e-14, - -30.415217235824162 - ], - [ - -26.344081019804264, - -45.6290470338052 - ], - [ - -26.344081019804253, - -15.213835542376174 - ], - [ - 0, - 0 - ] - ], - "index": "aB", - "frameId": null - }, - { - "type": "line", - "version": 1161, - "versionNonce": 1559185074, - "isDeleted": false, - "id": "J-wdqgH0D5MEjc9098kXW", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 926.2155701977683, - "y": 398.1843900613612, - "strokeColor": "#5c4ee5", - "backgroundColor": "#5c4ee5", - "width": 26.344081019804264, - "height": 45.64149083004188, - "seed": 1622054149, - "groupIds": [ - "ibkmz-uXncax2qrEG0PUM" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -26.344081019804264, - -15.213829797981045 - ], - [ - -26.344081019804243, - -45.64149083004188 - ], - [ - 0, - -30.427662468159625 - ], - [ - 0, - 0 - ] - ], - "index": "aC", - "frameId": null - }, - { - "type": "line", - "version": 1158, - "versionNonce": 563295598, - "isDeleted": false, - "id": "JtC1t-W4xmKxT-zJmsB_8", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 955.4729356357634, - "y": 382.6164051867203, - "strokeColor": "#4040b2", - "backgroundColor": "#4040b2", - "width": 26.356526252139698, - "height": 45.64149513833831, - "seed": 243248229, - "groupIds": [ - "9B1Z1qksPKmFsS7ad2U-6", - "ibkmz-uXncax2qrEG0PUM" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -3.730349362740526e-14, - -30.42766246815965 - ], - [ - -26.356526252139673, - -15.213829797981017 - ], - [ - -26.356526252139698, - 15.213832670178657 - ], - [ - 0, - 0 - ] - ], - "index": "aD", - "frameId": null - }, - { - "type": "line", - "version": 1160, - "versionNonce": 1551343730, - "isDeleted": false, - "id": "LyTf8tx2SXgXTmZ-qwBxq", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 896.9831038410366, - "y": 380.848512973039, - "strokeColor": "#5c4ee5", - "backgroundColor": "#5c4ee5", - "width": 26.344081737853642, - "height": 45.641492273897896, - "seed": 1157027781, - "groupIds": [ - "3DrRfo19128VRfG9J6Ub1", - "ibkmz-uXncax2qrEG0PUM" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.2434497875801753e-14, - -30.427659595961984 - ], - [ - -26.34408173785362, - -45.641492273897896 - ], - [ - -26.34408173785363, - -15.213826925783337 - ], - [ - 0, - 0 - ] - ], - "index": "aE", - "frameId": null - }, - { - "type": "line", - "version": 824, - "versionNonce": 10901422, - "isDeleted": false, - "id": "OJHLKeWH7TWFlh-9hV5Pg", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1180.1930965512527, - "y": 262.0392297799182, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 112.10848168937872, - "height": 109.04520177933898, - "seed": 250359237, - "groupIds": [ - "lysVAYoWvsZji5avrutHT", - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - -2.8903123605366803, - 0.7655991670510398 - ], - [ - -42.0306918327765, - 19.434981923103336 - ], - [ - -42.0306918327765, - 19.434981923103336 - ], - [ - -44.62556353458088, - 21.487261514832213 - ], - [ - -46.069402629899486, - 24.46405435976294 - ], - [ - -55.649928439733834, - 66.36480357941818 - ], - [ - -55.649928439733834, - 66.36480357941818 - ], - [ - -55.722361858329315, - 69.32711100182458 - ], - [ - -54.596351576375994, - 72.07870492765181 - ], - [ - -54.17492081533347, - 72.66870539745764 - ], - [ - -27.13311549748797, - 106.29185955511704 - ], - [ - -27.13311549748797, - 106.29185955511704 - ], - [ - -24.526827943042044, - 108.33096494811727 - ], - [ - -21.296297384711558, - 109.04520177933898 - ], - [ - 22.07595138882307, - 109.04520177933873 - ], - [ - 22.07595138882307, - 109.04520177933873 - ], - [ - 25.313940683792183, - 108.30331369994101 - ], - [ - 27.91978948902387, - 106.2602495163222 - ], - [ - 54.94754488899165, - 72.6300753712384 - ], - [ - 54.94754488899165, - 72.6300753712384 - ], - [ - 56.3861198310494, - 69.6598704629796 - ], - [ - 56.352312696954215, - 66.35778359199382 - ], - [ - 46.70857817859907, - 24.421910990601052 - ], - [ - 46.70857817859907, - 24.421910990601052 - ], - [ - 45.26209905222739, - 21.445118145670435 - ], - [ - 42.669861520322485, - 19.392838553941303 - ], - [ - 3.5926996137486364, - 0.7691110447055087 - ], - [ - 3.5926996137486364, - 0.7691110447055087 - ], - [ - -0.035116683276071245, - 1.0408340855860843e-17 - ], - [ - 0, - 0 - ] - ], - "index": "aF", - "frameId": null - }, - { - "type": "line", - "version": 1348, - "versionNonce": 89047602, - "isDeleted": false, - "id": "ANrtgyt0IKy4YTtCMOL3d", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1180.1918300686923, - "y": 275.923183688987, - "strokeColor": "#326ce5", - "backgroundColor": "#fff", - "width": 82.09009851842713, - "height": 80.54812612800515, - "seed": 2064395557, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - -1.6822147250733799, - 0.8292527606811326 - ], - [ - -2.300311890730742, - 2.5988237939613565 - ], - [ - -2.300311890730742, - 3.2590643287806893 - ], - [ - -2.300311890730742, - 3.2590643287806893 - ], - [ - -1.9772149599763014, - 5.48211281784283 - ], - [ - -1.7454281042009423, - 9.731539623467835 - ], - [ - -2.511028736540518, - 10.943152276489371 - ], - [ - -2.563705436069943, - 11.933514753333686 - ], - [ - -2.563705436069943, - 11.933514753333686 - ], - [ - -6.788548888786308, - 12.586733626113125 - ], - [ - -11.067773799428698, - 13.892565160925889 - ], - [ - -15.08590608618264, - 15.80585000641738 - ], - [ - -18.778091246906204, - 18.291357605469692 - ], - [ - -22.079461382534944, - 21.31386075019558 - ], - [ - -22.92232206731249, - 20.716833594503825 - ], - [ - -22.92232206731249, - 20.716833594503825 - ], - [ - -24.309533208252297, - 20.576356813707584 - ], - [ - -27.459729120415858, - 17.731697816045106 - ], - [ - -28.994438704191825, - 16.09865649525014 - ], - [ - -29.514202458214907, - 15.6842494895166 - ], - [ - -29.514202458214907, - 15.6842494895166 - ], - [ - -31.140222116969973, - 15.069662317571485 - ], - [ - -33.00505364277094, - 15.898476329038562 - ], - [ - -33.4308748265307, - 17.743111994071334 - ], - [ - -32.429098171660165, - 19.350695812760296 - ], - [ - -31.944452775528493, - 19.737006122642335 - ], - [ - -31.944452775528493, - 19.737006122642335 - ], - [ - -30.0058711910018, - 20.871357048610523 - ], - [ - -26.50097165852001, - 23.329705736390956 - ], - [ - -26.033887953257018, - 24.678283501881133 - ], - [ - -25.268287320917516, - 25.38066740586237 - ], - [ - -25.268287320917516, - 25.38066740586237 - ], - [ - -27.906456201839827, - 30.2552716507209 - ], - [ - -29.600682942608962, - 35.485785238928585 - ], - [ - -30.321012024367377, - 40.93689590333846 - ], - [ - -30.037479555180916, - 46.47327463065014 - ], - [ - -31.020817020754695, - 46.75422819224259 - ], - [ - -31.020817020754695, - 46.75422819224259 - ], - [ - -32.02522784552475, - 47.765662353667885 - ], - [ - -36.21846293406207, - 48.45751292728166 - ], - [ - -38.46609477603278, - 48.633106391354005 - ], - [ - -39.08770361001778, - 48.773586521380956 - ], - [ - -39.1579420004159, - 48.773586521380956 - ], - [ - -39.1579420004159, - 48.773586521380956 - ], - [ - -40.31088283105971, - 49.26765162869178 - ], - [ - -41.01461814960482, - 50.2190273862538 - ], - [ - -40.69116452578706, - 52.54968330659652 - ], - [ - -40.51705644550424, - 52.74908310206863 - ], - [ - -39.39816891740782, - 53.37952888110118 - ], - [ - -38.11490114942682, - 53.32854689227637 - ], - [ - -38.06924611193727, - 53.32854689227637 - ], - [ - -37.43710059835413, - 53.25831352572419 - ], - [ - -37.43710059835413, - 53.25831352572419 - ], - [ - -35.33697054845022, - 52.49271289338472 - ], - [ - -31.256115544857646, - 51.29865858200122 - ], - [ - -29.914561116022693, - 51.77276897315004 - ], - [ - -28.860985260050793, - 51.597168810616424 - ], - [ - -28.860985260050793, - 51.597168810616424 - ], - [ - -26.691603168172644, - 56.68923860102734 - ], - [ - -23.664216845171488, - 61.26901007251484 - ], - [ - -19.863767803961544, - 65.22979683222526 - ], - [ - -15.375202581303123, - 68.46493928114903 - ], - [ - -15.803656260347097, - 69.36047666545595 - ], - [ - -15.803656260347097, - 69.36047666545595 - ], - [ - -15.592939414537428, - 70.68095773509464 - ], - [ - -17.710631155309986, - 74.51598088421673 - ], - [ - -18.967898845821086, - 76.3878323974423 - ], - [ - -19.266412423666935, - 77.01997958564077 - ], - [ - -19.266412423666935, - 77.01997958564077 - ], - [ - -19.584013266938697, - 78.23345273628367 - ], - [ - -19.26486507911056, - 79.37296817590105 - ], - [ - -18.436476419934923, - 80.21803265444068 - ], - [ - -17.226345801472295, - 80.54812612800515 - ], - [ - -16.983660549189537, - 80.53541914695136 - ], - [ - -15.798106585174137, - 80.0514352238715 - ], - [ - -15.041568970950518, - 79.01826455558277 - ], - [ - -14.750078729759887, - 78.42123739989097 - ], - [ - -14.750078729759887, - 78.42123739989097 - ], - [ - -14.075788172399477, - 76.27896230620993 - ], - [ - -13.257072091316518, - 73.9852417013815 - ], - [ - -12.267150038301518, - 72.07870555563268 - ], - [ - -11.26273921353146, - 71.58703849746111 - ], - [ - -10.735952122853199, - 70.62828103556521 - ], - [ - -10.735952122853199, - 70.62828103556521 - ], - [ - -5.412256239737756, - 72.13305687048285 - ], - [ - 0.051330308811588246, - 72.64364708177881 - ], - [ - 5.517348398806747, - 72.15973014331168 - ], - [ - 10.84832550933674, - 70.68095773509464 - ], - [ - 11.315415913061043, - 71.57650181786285 - ], - [ - 11.315415913061043, - 71.57650181786285 - ], - [ - 12.509463525983218, - 72.29644573809752 - ], - [ - 14.1109048556757, - 76.22979560039269 - ], - [ - 14.792218749691262, - 78.3755806877862 - ], - [ - 15.083708990881963, - 78.97260784347787 - ], - [ - 15.083708990881963, - 78.97260784347787 - ], - [ - 15.820512938165914, - 79.98773955553146 - ], - [ - 16.90396895530591, - 80.46365183276536 - ], - [ - 19.10537806519327, - 79.63278139368435 - ], - [ - 19.25235570266469, - 79.43267156131633 - ], - [ - 19.628213063714636, - 78.2096798971903 - ], - [ - 19.308549094367674, - 76.97081287982361 - ], - [ - 19.003012179866587, - 76.33866569162515 - ], - [ - 19.003012179866587, - 76.33866569162515 - ], - [ - 17.74574448935555, - 74.4738341658242 - ], - [ - 15.638589428181136, - 70.76173447970628 - ], - [ - 15.877402969842281, - 69.3569666717437 - ], - [ - 15.487579317017422, - 68.41225588315827 - ], - [ - 19.964348549356405, - 65.15741995806253 - ], - [ - 23.750693980335026, - 61.17989374360599 - ], - [ - 26.76200064702642, - 56.58667846032338 - ], - [ - 28.91366028496512, - 51.484788725671685 - ], - [ - 29.911041074618733, - 51.66038888820527 - ], - [ - 29.911041074618733, - 51.66038888820527 - ], - [ - 31.220992163120506, - 51.17574181745836 - ], - [ - 35.30184884132838, - 52.36979612884183 - ], - [ - 37.40197721661696, - 53.177536781112536 - ], - [ - 38.006024359733246, - 53.30748023154133 - ], - [ - 38.051681071838175, - 53.30748023154133 - ], - [ - 38.051681071838175, - 53.30748023154133 - ], - [ - 39.3047287317409, - 53.364423850908075 - ], - [ - 40.35237477486207, - 52.81414525651032 - ], - [ - 41.00561541764065, - 51.827421718758046 - ], - [ - 41.075480368822305, - 50.57502380959967 - ], - [ - 41.00520681150243, - 50.31883445937032 - ], - [ - 40.27206692254028, - 49.26477129034015 - ], - [ - 39.09472527205787, - 48.752513162184606 - ], - [ - 38.41341137804219, - 48.59096637142271 - ], - [ - 38.41341137804219, - 48.59096637142271 - ], - [ - 36.165776186840866, - 48.4153662088891 - ], - [ - 31.97254612214951, - 47.72352233373664 - ], - [ - 30.96111196072427, - 46.712088172311304 - ], - [ - 30.012891178426578, - 46.43113461071883 - ], - [ - 30.012891178426578, - 46.43113461071883 - ], - [ - 30.26196006431197, - 40.90057684626208 - ], - [ - 29.513179268254106, - 35.46036792759032 - ], - [ - 27.79737510907714, - 30.24380388500444 - ], - [ - 25.14536720714415, - 25.38418074880532 - ], - [ - 25.97418121861118, - 24.618580116465807 - ], - [ - 25.97418121861118, - 24.618580116465807 - ], - [ - 26.409654885079732, - 23.291072360941293 - ], - [ - 29.88645772171009, - 20.846773695701952 - ], - [ - 31.825039306236707, - 19.71242276973377 - ], - [ - 32.337779723604676, - 19.298015764000194 - ], - [ - 32.337779723604676, - 19.298015764000194 - ], - [ - 33.4487195273888, - 17.223800386184852 - ], - [ - 33.11820405076341, - 16.08752700182846 - ], - [ - 32.20786306702098, - 15.22459437781643 - ], - [ - 31.870696018341636, - 15.076685654226711 - ], - [ - 30.56690751422015, - 15.006448938443894 - ], - [ - 29.42640070233289, - 15.642106120354663 - ], - [ - 28.90663359907921, - 16.056513126088205 - ], - [ - 28.90663359907921, - 16.056513126088205 - ], - [ - 27.371922340687902, - 17.689557796113817 - ], - [ - 24.306016516078905, - 20.579870156650493 - ], - [ - 22.887195336344593, - 20.734393610757188 - ], - [ - 21.99868463792348, - 21.36654079895566 - ], - [ - 21.99868463792348, - 21.36654079895566 - ], - [ - 17.83935548578541, - 17.728405522324515 - ], - [ - 13.132835729900934, - 14.913380517378009 - ], - [ - 7.999610593367412, - 12.98072707108675 - ], - [ - 2.560192093126984, - 11.989704795806054 - ], - [ - 2.5075086951362873, - 10.946663944816983 - ], - [ - 1.741908062796814, - 9.780706329285 - ], - [ - 2.008814951078899, - 5.541814528642815 - ], - [ - 2.331915231063948, - 3.318767714195991 - ], - [ - 2.331915231063948, - 2.6163838102147206 - ], - [ - 2.331915231063948, - 2.6163838102147206 - ], - [ - 1.715134313048716, - 0.8468127769344931 - ], - [ - 0.031603340333149786, - 0.017560016253362044 - ], - [ - 0, - 0 - ] - ], - "index": "aG", - "frameId": null - }, - { - "type": "line", - "version": 988, - "versionNonce": 1302016494, - "isDeleted": false, - "id": "pKqvQSXRRajXDYh1ZLJsp", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1177.2732519323952, - "y": 294.35053510374206, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 14.089834845709976, - "height": 14.03715479694989, - "seed": 364200069, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -0.7023839039812847, - 12.267146689070966 - ], - [ - -0.7550639527413416, - 12.267146689071012 - ], - [ - -0.7550639527413416, - 12.267146689071012 - ], - [ - -1.9210215682733454, - 14.03715479694989 - ], - [ - -4.028176629447817, - 13.847511310336465 - ], - [ - -14.089834845709976, - 6.718308823772961 - ], - [ - -14.089834845709976, - 6.718308823772961 - ], - [ - -8.731343805460074, - 2.7488207628560843 - ], - [ - -2.4899553773442378, - 0.4003569831924758 - ], - [ - -0.007023336655209111, - 1.1676423716799889e-14 - ], - [ - 0, - 0 - ] - ], - "index": "aH", - "frameId": null - }, - { - "type": "line", - "version": 986, - "versionNonce": 1381739506, - "isDeleted": false, - "id": "vXWcVIClT4GIXZ3MefER1", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1183.2894684130893, - "y": 294.06577851705356, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 14.012571444041324, - "height": 14.093344839422272, - "seed": 1420093413, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - 7.560727410105791, - 2.227435981202493 - ], - [ - 14.012571444041324, - 6.756938849991942 - ], - [ - 4.045736645701156, - 13.840487973681258 - ], - [ - 4.045736645701156, - 13.840487973681258 - ], - [ - 1.8753682053990923, - 14.093344839422272 - ], - [ - 1.0219708410234363, - 13.34179422962383 - ], - [ - 0.6953605673260528, - 12.253096666529887 - ], - [ - 0, - 0 - ] - ], - "index": "aI", - "frameId": null - }, - { - "type": "line", - "version": 990, - "versionNonce": 1400554542, - "isDeleted": false, - "id": "3Wc7Q8u783TD6wNmdQyYT", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1159.7080924181435, - "y": 305.50417485059216, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 13.271557513841021, - "height": 15.241745787931523, - "seed": 434676549, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 9.201237515231274, - 8.210873363771656 - ], - [ - 9.201237515231318, - 8.263553412531751 - ], - [ - 9.201237515231318, - 8.263553412531751 - ], - [ - 9.854454713395407, - 10.27939839872711 - ], - [ - 8.38998352001753, - 11.807086320463151 - ], - [ - 8.389983520017541, - 11.84219965450862 - ], - [ - -3.4171028004456128, - 15.23823244498859 - ], - [ - -3.4171028004456128, - 15.23823244498859 - ], - [ - -2.9764043341763307, - 7.332427103428234 - ], - [ - 0.0035099937122777427, - -0.0035133429429322414 - ], - [ - 0, - 0 - ] - ], - "index": "aJ", - "frameId": null - }, - { - "type": "line", - "version": 988, - "versionNonce": 1235574194, - "isDeleted": false, - "id": "UR4GGcaTM9EyT6iw0za8U", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1200.796276879789, - "y": 305.50909917440066, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 13.28911753009438, - "height": 15.196085726596019, - "seed": 702411429, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - 3.000059950197258, - 7.31094513809367 - ], - [ - 3.5189495550228385, - 15.196085726596019 - ], - [ - -8.30569678169369, - 11.789522954979198 - ], - [ - -8.30569678169368, - 11.743866242874333 - ], - [ - -8.30569678169368, - 11.743866242874333 - ], - [ - -9.77016797507154, - 10.216181670368872 - ], - [ - -9.116947427676779, - 8.200340033404148 - ], - [ - 0.01404667331043106, - 0.02809334662087555 - ], - [ - 0, - 0 - ] - ], - "index": "aK", - "frameId": null - }, - { - "type": "line", - "version": 987, - "versionNonce": 338562670, - "isDeleted": false, - "id": "0mjq3FKZSi0uPiDP3QnSO", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1178.3059251836955, - "y": 314.24879833499324, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 8.404030193327984, - "height": 8.200343382634781, - "seed": 1630688773, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 3.7647830841086476, - -6.661338147750939e-16 - ], - [ - 6.065088276378176, - 2.921922399331133 - ], - [ - 5.229254277486508, - 6.57431870003376 - ], - [ - 1.8472715095475976, - 8.200343382634781 - ], - [ - -1.5417345950465084, - 6.574318700033757 - ], - [ - -2.3389419169498087, - 2.9219223993311227 - ], - [ - 0, - 0 - ] - ], - "index": "aL", - "frameId": null - }, - { - "type": "line", - "version": 989, - "versionNonce": 408082290, - "isDeleted": false, - "id": "HG30rMYuLQYMI9cU4-Jjk", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1190.3658683698975, - "y": 324.2156331333332, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 14.451561802683445, - "height": 14.321625050715983, - "seed": 719539557, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - 0.4741103911488531, - 3.3029134982598407e-15 - ], - [ - 12.649943656010073, - 2.0544783616450184 - ], - [ - 12.649943656010073, - 2.0544783616450184 - ], - [ - 11.022498899617057, - 5.698260441137715 - ], - [ - 8.814927205349264, - 9.000621949036347 - ], - [ - 6.088465906255829, - 11.896694986276398 - ], - [ - 2.904359033847128, - 14.321625050715983 - ], - [ - -1.8016181466733718, - 2.9289490852169884 - ], - [ - -1.8016181466733718, - 2.9289490852169884 - ], - [ - -1.6533611030969253, - 1.0274769761980593 - ], - [ - -0.014046673310433085, - 0.05268339799072953 - ], - [ - 0, - 0 - ] - ], - "index": "aM", - "frameId": null - }, - { - "type": "line", - "version": 987, - "versionNonce": 1820201134, - "isDeleted": false, - "id": "7Nyo61H-irbQtWPBJN3bX", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1170.0901745052538, - "y": 324.50709936200195, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 14.363765070647274, - "height": 14.219774946908089, - "seed": 910055621, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - 1.6997713920961448, - 0.941194096411837 - ], - [ - 1.8648315258009713, - 2.872748995052662 - ], - [ - 1.8648315258009713, - 2.9184057071575475 - ], - [ - -2.8130523080986674, - 14.219774946908089 - ], - [ - -2.8130523080986674, - 14.219774946908089 - ], - [ - -8.65689040829963, - 8.950135646346407 - ], - [ - -12.498933544846302, - 2.079055016092303 - ], - [ - -0.4284536790439806, - 0.0316033403331451 - ], - [ - -0.4284536790439806, - 0.0316033403331451 - ], - [ - -0.02107335919627746, - 0.0316033403331422 - ], - [ - 0, - 0 - ] - ], - "index": "aN", - "frameId": null - }, - { - "type": "line", - "version": 991, - "versionNonce": 782965042, - "isDeleted": false, - "id": "1ryiRyS6YdNkEYqo9wspe", - "fillStyle": "cross-hatch", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1180.2368384991983, - "y": 329.1896867666935, - "strokeColor": "#326ce5", - "backgroundColor": "#326ce5", - "width": 15.575382747514755, - "height": 13.097273598949519, - "seed": 1826682917, - "groupIds": [ - "7S3GhZzWXocVZ77qreDht" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0, - 0 - ], - [ - 1.0962165858841206, - 0.2736254449489046 - ], - [ - 1.8859048849972682, - 1.0816742264387276 - ], - [ - 1.9315615971021343, - 1.0816742264387378 - ], - [ - 7.880759794823261, - 11.817619650830698 - ], - [ - 5.503187851654454, - 12.520006904042575 - ], - [ - 5.503187851654454, - 12.520006904042575 - ], - [ - -1.141813011837403, - 13.097273598949519 - ], - [ - -7.6946229526914935, - 11.83869301002699 - ], - [ - -1.7243513957740577, - 1.1027408871737396 - ], - [ - -1.7243513957740577, - 1.1027408871737396 - ], - [ - 0.03161003879443017, - 0.06672337283987056 - ], - [ - 0, - 0 - ] - ], - "index": "aO", - "frameId": null - }, - { - "type": "ellipse", - "version": 1341, - "versionNonce": 940821230, - "isDeleted": false, - "id": "A4UakLeJ8JOZUUdSEVChy", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 527.6035528405763, - "y": 396.2784074491934, - "strokeColor": "#e2f5fc", - "backgroundColor": "#e2f5fc", - "width": 76.74086980309508, - "height": 75.70102061877122, - "seed": 1230925125, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aP", - "frameId": null - }, - { - "type": "line", - "version": 2227, - "versionNonce": 1544889074, - "isDeleted": false, - "id": "lfhqUNmUZr-cGz35Bw9sY", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 548.3421297584724, - "y": 468.51206257167485, - "strokeColor": "#b5d2f3", - "backgroundColor": "#b5d2f3", - "width": 76.38674156251153, - "height": 72.98690646785005, - "seed": 1007320229, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -9.57644677841384, - -7.414919392987241 - ], - [ - -16.648460328739784, - -17.365633791090108 - ], - [ - -20.615233473825615, - -32.766952840213776 - ], - [ - -15.88175792896697, - -54.675991495342515 - ], - [ - -0.2955146748902271, - -68.46204756489097 - ], - [ - 17.24397079252844, - -72.84865622786072 - ], - [ - 36.51398862312378, - -68.06546592177692 - ], - [ - 51.632263613872134, - -52.94434947069916 - ], - [ - 55.77150808868592, - -34.22109020104702 - ], - [ - 52.851810808377714, - -18.5921126804865 - ], - [ - 44.63010883014228, - -6.919064655827333 - ], - [ - 34.91176971380033, - 0.13825023998932906 - ] - ], - "index": "aQ", - "frameId": null - }, - { - "type": "ellipse", - "version": 1394, - "versionNonce": 1970814254, - "isDeleted": false, - "id": "qMCCO8IFV9l7MGHBdgwem", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 535.4680085930369, - "y": 404.51606649569595, - "strokeColor": "#cdecf6", - "backgroundColor": "#cdecf6", - "width": 60.75357834978594, - "height": 59.5623317154764, - "seed": 1362993157, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [ - { - "id": "7Y8YYshl-bzNdQ6aC0uz3", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aR", - "frameId": null - }, - { - "type": "line", - "version": 5544, - "versionNonce": 1796732082, - "isDeleted": false, - "id": "7WWz63Q319FISfhKlmXgM", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 548.0659868347688, - "y": 449.6995302536387, - "strokeColor": "#fe6143", - "backgroundColor": "#fe6143", - "width": 48.82999045299772, - "height": 89.84768413842491, - "seed": 1324701541, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.125838167224423, - 22.67759736837751 - ], - [ - 2.2675645367787496, - 38.77493595903773 - ], - [ - 2.4328586113979283, - 41.50660631501411 - ], - [ - 1.3273686972334144, - 43.026585440796545 - ], - [ - -3.385516225919969, - 44.507865184964515 - ], - [ - -6.707364396356682, - 45.21024891519572 - ], - [ - 1.392873507143042, - 45.22613711752566 - ], - [ - 4.910873779645575, - 44.29987747972029 - ], - [ - 5.971207136960392, - 40.34703974253995 - ], - [ - 6.915863027235691, - 26.45817293006872 - ], - [ - 7.160598113504511, - 27.808397930502014 - ], - [ - 7.3983650989032945, - 40.95915548298702 - ], - [ - 6.816073762526181, - 45.78111209997288 - ], - [ - 0.9990948762480496, - 47.44301807153981 - ], - [ - -2.263104486048786, - 48.06902488981159 - ], - [ - 2.3450535478384817, - 48.06456483908154 - ], - [ - 7.195528747906996, - 48.02280135777685 - ], - [ - 10.345502186628696, - 45.97372252852195 - ], - [ - 11.21777529617683, - 37.62293866089905 - ], - [ - 11.70464728852194, - 29.520987484833558 - ], - [ - 11.978740859363011, - 32.80349009405318 - ], - [ - 12.005967083240439, - 36.6587292951381 - ], - [ - 12.11913650013988, - 46.526745510379286 - ], - [ - 10.021972268312835, - 49.21860438564095 - ], - [ - 5.3474695230262554, - 50.45064386889473 - ], - [ - 1.563183682042287, - 51.27427721599569 - ], - [ - 3.390700931976079, - 51.35655525364021 - ], - [ - 8.055081346650006, - 51.42619113842493 - ], - [ - 12.61752677413741, - 51.201804305216044 - ], - [ - 15.696229531232168, - 48.70093283376832 - ], - [ - 17.124317524717213, - 42.69604241547364 - ], - [ - 17.925049562481068, - 38.65675044185817 - ], - [ - 18.39259346336083, - 40.01454471662708 - ], - [ - 19.4926932952533, - 47.01816768350682 - ], - [ - 21.78060608509196, - 50.49742345047951 - ], - [ - 25.948910554021353, - 51.42619113842493 - ], - [ - 33.03212144084746, - 51.50150107519954 - ], - [ - 34.33458004990965, - 51.519012302264436 - ], - [ - 29.45492662537378, - 50.220911959550826 - ], - [ - 26.31768715923939, - 49.35569708092522 - ], - [ - 24.117953414952133, - 47.98656490238712 - ], - [ - 23.694726169432453, - 44.44287130068969 - ], - [ - 24.000506014880916, - 30.27303294655981 - ], - [ - 24.33537214729105, - 31.60768706618917 - ], - [ - 25.042443119725736, - 39.71262374844306 - ], - [ - 25.520485140663375, - 45.82877670696269 - ], - [ - 28.304280154359528, - 47.964775574372034 - ], - [ - 36.51082115827003, - 48.24022009011585 - ], - [ - 38.27849768563009, - 48.15738600292109 - ], - [ - 31.87245308399189, - 47.01565963336678 - ], - [ - 28.950124300056377, - 45.35519473675502 - ], - [ - 28.44727397532889, - 41.606395579723646 - ], - [ - 28.716817365387524, - 26.075460123110663 - ], - [ - 29.11858425874707, - 28.491351902664803 - ], - [ - 29.842655532611968, - 40.75010080255789 - ], - [ - 31.41726736625419, - 44.66670208434841 - ], - [ - 35.49620040735511, - 45.23259429276093 - ], - [ - 40.13446669725186, - 45.377540114320205 - ], - [ - 42.12262605664104, - 45.13777600441614 - ], - [ - 37.466803415763934, - 44.03423809084146 - ], - [ - 34.698998388779074, - 43.09464342476167 - ], - [ - 33.720614093254, - 41.753894575338364 - ], - [ - 33.76371686513248, - 36.46277091495941 - ], - [ - 36.18765537507046, - -0.482502071667604 - ], - [ - 36.477547018189, - -19.073744032905353 - ], - [ - 35.39937345795429, - -26.646323307887695 - ], - [ - 30.9843819021662, - -33.28121479346479 - ], - [ - 25.92977618444306, - -36.87921362056772 - ], - [ - 20.421834965190676, - -38.32867183616047 - ], - [ - 12.051213770142638, - -37.38652399602519 - ], - [ - 4.296612316721512, - -31.769873410603314 - ], - [ - 1.247927685583689, - -26.167725237399996 - ], - [ - 0.23330693466873642, - -19.857565899291462 - ], - [ - 0, - 0 - ] - ], - "index": "aS", - "frameId": null - }, - { - "type": "line", - "version": 1498, - "versionNonce": 1779722094, - "isDeleted": false, - "id": "pXk5gPsMD1764CB22NOB1", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 582.846062750753, - "y": 471.1694838575442, - "strokeColor": "#fe6446", - "backgroundColor": "#fe6446", - "width": 9.092347088597874, - "height": 5.005542996510358, - "seed": 1602167493, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.3939486825724963, - 2.281006935118638 - ], - [ - 4.18184604771749, - 3.421510402677937 - ], - [ - 9.092347088597874, - 4.18184604771751 - ], - [ - 7.4449531910122015, - 4.562013870237276 - ], - [ - 2.9779812764048765, - 5.005542996510358 - ], - [ - 0.12672260750656802, - 4.783778433373777 - ], - [ - 0, - 0 - ] - ], - "index": "aT", - "frameId": null - }, - { - "type": "line", - "version": 1660, - "versionNonce": 1029344882, - "isDeleted": false, - "id": "T5I0RxQEiXWj8ig98wcKx", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 548.9195768212625, - "y": 470.44431091765426, - "strokeColor": "#fe6446", - "backgroundColor": "#fe6446", - "width": 9.092347088597874, - "height": 5.005542996510358, - "seed": 125338149, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -1.3939486825724963, - 2.281006935118638 - ], - [ - -4.18184604771749, - 3.421510402677937 - ], - [ - -9.092347088597874, - 4.18184604771751 - ], - [ - -7.4449531910122015, - 4.562013870237276 - ], - [ - -2.9779812764048765, - 5.005542996510358 - ], - [ - -0.12672260750656802, - 4.783778433373777 - ], - [ - 0, - 0 - ] - ], - "index": "aU", - "frameId": null - }, - { - "type": "line", - "version": 1825, - "versionNonce": 1177635246, - "isDeleted": false, - "id": "dlsdP99Sw4h6jhYsoCkl4", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 559.6091806644253, - "y": 455.9603798994983, - "strokeColor": "#000000", - "backgroundColor": "#000000", - "width": 12.973097371121236, - "height": 10.473468713955947, - "seed": 1540289925, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0.4341866784024746, - 4.662559721200421 - ], - [ - 1.9958117813054725, - 7.936299455475296 - ], - [ - 5.017245357830358, - 10.473468713955947 - ], - [ - 9.295968447306697, - 9.723733109540554 - ], - [ - 12.137136401961898, - 5.612467891790697 - ], - [ - 12.973097371121236, - 0.770884271532447 - ], - [ - 12.428275268306388, - 3.3290668412216684 - ], - [ - 10.530391930204358, - 5.6839666055861 - ], - [ - 7.655080122693568, - 6.731313476981694 - ], - [ - 3.7860832674841114, - 6.34752722972473 - ], - [ - 1.2050709499349423, - 3.8949872266864527 - ], - [ - 0, - 0 - ] - ], - "index": "aV", - "frameId": null - }, - { - "type": "line", - "version": 1789, - "versionNonce": 1738797106, - "isDeleted": false, - "id": "twUf649jNQKILts7oW6Bz", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 559.6141594199133, - "y": 455.93334725170405, - "strokeColor": "#000000", - "backgroundColor": "#ffffff", - "width": 12.901378726130206, - "height": 6.7922538527886624, - "seed": 2009070821, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.6199915798317646, - 1.5809556381490955 - ], - [ - 5.621175602307855, - 3.708414459855853 - ], - [ - 9.036820499543554, - 3.5913066348077827 - ], - [ - 11.652228592284018, - 2.146976792548123 - ], - [ - 12.901378726130206, - 0.6245750669230835 - ], - [ - 12.49150133846192, - 3.4351628680770223 - ], - [ - 9.993201070769544, - 6.109124873341523 - ], - [ - 6.32382255259636, - 6.7922538527886624 - ], - [ - 3.532752722283767, - 6.187196756706904 - ], - [ - 1.1905962213221526, - 3.9035941682693456 - ], - [ - 0, - 0 - ] - ], - "index": "aW", - "frameId": null - }, - { - "type": "ellipse", - "version": 1415, - "versionNonce": 1224205294, - "isDeleted": false, - "id": "udhpVrI6mb4HH-RcQkaDJ", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 542.517213010591, - "y": 429.3540262316548, - "strokeColor": "#fe6143", - "backgroundColor": "#ffff", - "width": 20.472614782799795, - "height": 20.104252986150232, - "seed": 853088325, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aX", - "frameId": null - }, - { - "type": "ellipse", - "version": 1202, - "versionNonce": 1306204658, - "isDeleted": false, - "id": "qvuTNFECt_baiWbwRe0eI", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 549.83516109755, - "y": 436.02863822305676, - "strokeColor": "#000000", - "backgroundColor": "#000000", - "width": 5.307522788343683, - "height": 4.985854740565254, - "seed": 385337253, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aY", - "frameId": null - }, - { - "type": "ellipse", - "version": 1471, - "versionNonce": 1685141038, - "isDeleted": false, - "id": "Xzujhd8dOkZnYxXE95hOW", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 568.5828590830439, - "y": 429.4175027051807, - "strokeColor": "#fe6143", - "backgroundColor": "#ffffff", - "width": 20.472614782799795, - "height": 20.104252986150232, - "seed": 373918469, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aZ", - "frameId": null - }, - { - "type": "ellipse", - "version": 1247, - "versionNonce": 1057426354, - "isDeleted": false, - "id": "KH5ACum7H4jqLiWH6cqvq", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 575.9706899795452, - "y": 436.1090552350013, - "strokeColor": "#000000", - "backgroundColor": "#000000", - "width": 5.307522788343683, - "height": 4.985854740565254, - "seed": 21750373, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aa", - "frameId": null - }, - { - "type": "ellipse", - "version": 1265, - "versionNonce": 1636188270, - "isDeleted": false, - "id": "Lni_mHUvtvVXUmRTgXvjs", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 556.2640421586226, - "y": 416.96484492064883, - "strokeColor": "transparent", - "backgroundColor": "#fea777", - "width": 5.234359562503655, - "height": 5.149248024901954, - "seed": 1020022213, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ab", - "frameId": null - }, - { - "type": "line", - "version": 1599, - "versionNonce": 290375026, - "isDeleted": false, - "id": "h0xeBmndj4B-sIr7p-PH1", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 606.9774217765015, - "y": 427.4102906141297, - "strokeColor": "#b5d2f3", - "backgroundColor": "#b5d2f3", - "width": 3.105516456645895, - "height": 17.89758168435404, - "seed": 937970981, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0.12258617592022016, - 13.198444940745116 - ], - [ - -0.4903447036809221, - 16.222237280110853 - ], - [ - -2.574309694324892, - 16.181375221470752 - ], - [ - -2.982930280725675, - 15.323271990029127 - ], - [ - -2.4925855770447525, - 9.153101135377401 - ], - [ - -2.860344104805454, - 2.860344104805453 - ], - [ - -2.901206163445514, - -0.7763791141614217 - ], - [ - -2.0431029320038903, - -1.6753444042431873 - ], - [ - -0.7355170555214038, - -1.5936202869630267 - ], - [ - 0, - 0 - ] - ], - "index": "ac", - "frameId": null - }, - { - "type": "line", - "version": 1627, - "versionNonce": 67109550, - "isDeleted": false, - "id": "QGMfjodVkR6-bD_TqqMFx", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 524.7856963214725, - "y": 427.5426276956467, - "strokeColor": "#b5d2f3", - "backgroundColor": "#b5d2f3", - "width": 3.105516456645895, - "height": 17.89758168435404, - "seed": 571302021, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -0.12258617592022016, - 13.198444940745116 - ], - [ - 0.4903447036809221, - 16.222237280110853 - ], - [ - 2.574309694324892, - 16.181375221470752 - ], - [ - 2.982930280725675, - 15.323271990029127 - ], - [ - 2.4925855770447525, - 9.153101135377401 - ], - [ - 2.860344104805454, - 2.860344104805453 - ], - [ - 2.901206163445514, - -0.7763791141614217 - ], - [ - 2.0431029320038903, - -1.6753444042431873 - ], - [ - 0.7355170555214038, - -1.5936202869630267 - ], - [ - 0, - 0 - ] - ], - "index": "ad", - "frameId": null - }, - { - "type": "ellipse", - "version": 1347, - "versionNonce": 1039746866, - "isDeleted": false, - "id": "frUugfBjONA9s3NaGchKa", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 548.9147923107352, - "y": 408.73673554528193, - "strokeColor": "#ffffff", - "backgroundColor": "#ffffff", - "width": 0.8484311106230351, - "height": 0.8484311106230351, - "seed": 1626933221, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ae", - "frameId": null - }, - { - "type": "line", - "version": 1372, - "versionNonce": 780631278, - "isDeleted": false, - "id": "qOWan2yh3ehMSFWo9d19O", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 546.8284732368221, - "y": 410.88545408470316, - "strokeColor": "#ffffff", - "backgroundColor": "#ffffff", - "width": 11.441651380194392, - "height": 41.7527791548391, - "seed": 1186513733, - "groupIds": [ - "fzYu-sZH-UpnLhNMQlt_6" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -5.2417832713301795, - 5.231852213431794 - ], - [ - -9.355332306281209, - 13.0250522873815 - ], - [ - -11.441651380194392, - 22.886613113021575 - ], - [ - -9.9891728747739, - 31.889811770140273 - ], - [ - -7.730800608441646, - 37.65578188305211 - ], - [ - -5.082971489442303, - 41.7527791548391 - ] - ], - "index": "af", - "frameId": null - }, - { - "type": "ellipse", - "version": 1328, - "versionNonce": 2104332530, - "isDeleted": false, - "id": "tf48ygUhaGEyL2MkqVnE5", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1005.7267023860827, - "y": 497.2369557619938, - "strokeColor": "#e2f5fc", - "backgroundColor": "#e2f5fc", - "width": 85.10546896042078, - "height": 83.95227832410063, - "seed": 1827195845, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [ - { - "id": "F00H6hLfCZRL9sM0ts6Cl", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ag", - "frameId": null - }, - { - "type": "line", - "version": 2210, - "versionNonce": 111521582, - "isDeleted": false, - "id": "9QVT69XzYn7sb02n_uhQY", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1028.725742124594, - "y": 577.3439327834628, - "strokeColor": "#b5d2f3", - "backgroundColor": "#b5d2f3", - "width": 84.71274145988139, - "height": 80.94233123568563, - "seed": 1808075557, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -10.620260053640289, - -8.223130567363553 - ], - [ - -18.46310873699813, - -19.258452652123147 - ], - [ - -22.862252109210957, - -36.33848423956637 - ], - [ - -17.612837330729633, - -60.63556367065612 - ], - [ - -0.32772517506968274, - -75.92427188994003 - ], - [ - 19.123528633483684, - -80.7890119999463 - ], - [ - 40.49393932281293, - -75.48446365210124 - ], - [ - 57.26007562360773, - -58.71517617756437 - ], - [ - 61.85048935067042, - -37.951119623347104 - ], - [ - 58.61255098874331, - -20.618615252833287 - ], - [ - 49.494700170712505, - -7.673228669580552 - ], - [ - 38.71708180210593, - 0.15331923573933784 - ] - ], - "index": "ah", - "frameId": null - }, - { - "type": "ellipse", - "version": 1375, - "versionNonce": 1664262834, - "isDeleted": false, - "id": "hz4fr-yhdZuVWGWxMj70p", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1014.448367864321, - "y": 506.37250293636737, - "strokeColor": "#cdecf6", - "backgroundColor": "#cdecf6", - "width": 67.37559516524618, - "height": 66.05450506396683, - "seed": 2007129733, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ai", - "frameId": null - }, - { - "type": "line", - "version": 5528, - "versionNonce": 415471982, - "isDeleted": false, - "id": "IOjxM-6QQlXx8hVwcWCOU", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1028.419500182299, - "y": 556.4808725996575, - "strokeColor": "#fe6143", - "backgroundColor": "#fe6143", - "width": 54.15236037196486, - "height": 99.64089947414193, - "seed": 2000569829, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.2485522439479932, - 25.149409485237978 - ], - [ - 2.514724472054284, - 43.00132533252961 - ], - [ - 2.698035265545924, - 46.03074221674211 - ], - [ - 1.4720491929696164, - 47.716395984306615 - ], - [ - -3.754530627803912, - 49.35913221615348 - ], - [ - -7.438453511212906, - 50.13807434835597 - ], - [ - 1.5446938942979462, - 50.15569433251431 - ], - [ - 5.446149061048492, - 49.12847427289287 - ], - [ - 6.622056603668178, - 44.74478523978247 - ], - [ - 7.669678069966188, - 29.342060115125157 - ], - [ - 7.941088784249452, - 30.839456901984686 - ], - [ - 8.204771888801035, - 45.423620354402225 - ], - [ - 7.559011977802924, - 50.771160462409114 - ], - [ - 1.1079941913248226, - 52.61421081408265 - ], - [ - -2.5097782848409413, - 53.30845110583513 - ], - [ - 2.6006596281508827, - 53.3035049186217 - ], - [ - 7.979826786953047, - 53.257189302562416 - ], - [ - 11.473140941498471, - 50.98476503700405 - ], - [ - 12.440490050781884, - 41.723762665455496 - ], - [ - 12.980430102784707, - 32.73871524414418 - ], - [ - 13.28439931691166, - 36.379003979966846 - ], - [ - 13.314593143969592, - 40.65445643450363 - ], - [ - 13.440097797772928, - 51.59806640220386 - ], - [ - 11.11434691829224, - 54.58333243505218 - ], - [ - 5.930332854923574, - 55.94966172307178 - ], - [ - 1.7335675328261735, - 56.863069434455845 - ], - [ - 3.7602804563041534, - 56.95431561132154 - ], - [ - 8.93306887555421, - 57.03154166630741 - ], - [ - 13.992811600766098, - 56.78269712339586 - ], - [ - 17.407086713943436, - 54.00923573400316 - ], - [ - 18.990833402170175, - 47.34982443965406 - ], - [ - 19.878843607949438, - 42.870257833689635 - ], - [ - 20.39734884571978, - 44.37604893043482 - ], - [ - 21.617357327988934, - 52.1430525954654 - ], - [ - 24.154647971414906, - 56.00154018416767 - ], - [ - 28.777289173010278, - 57.03154166630741 - ], - [ - 36.63255567983558, - 57.11506023344156 - ], - [ - 38.076979635547694, - 57.13448014873903 - ], - [ - 32.66545388499255, - 55.69488950156775 - ], - [ - 29.18626168021852, - 54.73536795606142 - ], - [ - 26.746761419458135, - 53.21700314703253 - ], - [ - 26.277403262595975, - 49.28705413031785 - ], - [ - 26.616512490994204, - 33.57273213584727 - ], - [ - 26.987878352638077, - 35.052860847477184 - ], - [ - 27.772018626937232, - 44.04121918909601 - ], - [ - 28.30216625855874, - 50.82402041488412 - ], - [ - 31.38938928245958, - 53.19283882645844 - ], - [ - 40.490426610714586, - 53.498306235742454 - ], - [ - 42.450776294231446, - 53.40644340105337 - ], - [ - 35.346485824203405, - 52.1402711729471 - ], - [ - 32.10562913009102, - 50.298818970475956 - ], - [ - 31.54796913988451, - 46.141408308905405 - ], - [ - 31.84689221275274, - 28.917632388453615 - ], - [ - 32.2924508825967, - 31.5968514718981 - ], - [ - 33.095444456700754, - 45.19177913782568 - ], - [ - 34.84168578647188, - 49.53528201540609 - ], - [ - 39.365214255874875, - 50.16285532675332 - ], - [ - 44.50904216371354, - 50.32359994887329 - ], - [ - 46.713906860751955, - 50.05770203729605 - ], - [ - 41.550608995285096, - 48.83388072941469 - ], - [ - 38.48111883421507, - 47.79187215048397 - ], - [ - 37.39609263490537, - 46.30498439587432 - ], - [ - 37.443893521494545, - 40.43713898834198 - ], - [ - 40.13203641261376, - -0.5350938188348477 - ], - [ - 40.453525656853664, - -21.152743445787323 - ], - [ - 39.25783336538057, - -29.550718502506616 - ], - [ - 34.36161668480694, - -36.9087997026596 - ], - [ - 28.756069195957622, - -40.89897310420331 - ], - [ - 22.647773555399215, - -42.5064193254029 - ], - [ - 13.364771627971628, - -41.46157928162317 - ], - [ - 4.764934344553864, - -35.23272517447476 - ], - [ - 1.3839492721778996, - -29.019954213061915 - ], - [ - 0.258736917338149, - -22.02200030580706 - ], - [ - 0, - 0 - ] - ], - "index": "aj", - "frameId": null - }, - { - "type": "line", - "version": 1482, - "versionNonce": 2045738098, - "isDeleted": false, - "id": "Eo3bk-9tr0g8xHnt6KtLb", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1066.9905338297376, - "y": 580.2910075995237, - "strokeColor": "#fe6446", - "backgroundColor": "#fe6446", - "width": 10.083394479519304, - "height": 5.551137030536793, - "seed": 497434949, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.5458862616684648, - 2.5296320645484056 - ], - [ - 4.637658785005395, - 3.7944480968225855 - ], - [ - 10.083394479519304, - 4.637658785005418 - ], - [ - 8.256437988456579, - 5.059264129096811 - ], - [ - 3.302575195382627, - 5.551137030536793 - ], - [ - 0.14053511469710817, - 5.305200579816757 - ], - [ - 0, - 0 - ] - ], - "index": "ak", - "frameId": null - }, - { - "type": "line", - "version": 1644, - "versionNonce": 2083142574, - "isDeleted": false, - "id": "ir1iXBuqJjXveE0zRw31r", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1029.3661297460094, - "y": 579.4867922800324, - "strokeColor": "#fe6446", - "backgroundColor": "#fe6446", - "width": 10.083394479519304, - "height": 5.551137030536793, - "seed": 1614270629, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -1.5458862616684648, - 2.5296320645484056 - ], - [ - -4.637658785005395, - 3.7944480968225855 - ], - [ - -10.083394479519304, - 4.637658785005418 - ], - [ - -8.256437988456579, - 5.059264129096811 - ], - [ - -3.302575195382627, - 5.551137030536793 - ], - [ - -0.14053511469710817, - 5.305200579816757 - ], - [ - 0, - 0 - ] - ], - "index": "al", - "frameId": null - }, - { - "type": "line", - "version": 1809, - "versionNonce": 1600855602, - "isDeleted": false, - "id": "6dikwStlWv2UNvR6S6wZT", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1041.2208787266732, - "y": 563.4241421582217, - "strokeColor": "#000000", - "backgroundColor": "#000000", - "width": 14.38713867162795, - "height": 11.615055560753712, - "seed": 748712965, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0.4815121457004868, - 5.170769273880796 - ], - [ - 2.213351217422408, - 8.801339999163215 - ], - [ - 5.564114925505124, - 11.615055560753712 - ], - [ - 10.309210153328275, - 10.78360029612335 - ], - [ - 13.460059652384883, - 6.224215508395072 - ], - [ - 14.38713867162795, - 0.8549090935679654 - ], - [ - 13.782932064652664, - 3.691928374668096 - ], - [ - 11.678183292117541, - 6.303507436975471 - ], - [ - 8.489468329497042, - 7.465012993050841 - ], - [ - 4.198758664440392, - 7.039394823265038 - ], - [ - 1.3364212392684751, - 4.319532934309145 - ], - [ - 0, - 0 - ] - ], - "index": "am", - "frameId": null - }, - { - "type": "line", - "version": 1773, - "versionNonce": 1996658158, - "isDeleted": false, - "id": "DsFTLK-yOPkKZTvT8C8j1", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1041.2264001564113, - "y": 563.3941630066474, - "strokeColor": "#000000", - "backgroundColor": "#ffffff", - "width": 14.307602839797681, - "height": 7.532595746217226, - "seed": 1591585637, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 1.7965673762529435, - 1.7532765961022967 - ], - [ - 6.233872341697011, - 4.112624114313974 - ], - [ - 10.021815604880983, - 3.982751773861964 - ], - [ - 12.922297874976126, - 2.380992908287035 - ], - [ - 14.307602839797681, - 0.6926524824107663 - ], - [ - 13.8530496482156, - 3.809588653259284 - ], - [ - 11.08243971857249, - 6.775007093580432 - ], - [ - 7.013106384409163, - 7.532595746217226 - ], - [ - 3.917815603635981, - 6.861588653881773 - ], - [ - 1.3203687945955505, - 4.32907801506737 - ], - [ - 0, - 0 - ] - ], - "index": "an", - "frameId": null - }, - { - "type": "ellipse", - "version": 1399, - "versionNonce": 1619822578, - "isDeleted": false, - "id": "XEoeliSEmaCZDVOf-pyhK", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1022.2659212656981, - "y": 533.9177499054549, - "strokeColor": "#fe6143", - "backgroundColor": "#ffff", - "width": 22.70408827013254, - "height": 22.295575784785395, - "seed": 2000484037, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ao", - "frameId": null - }, - { - "type": "ellipse", - "version": 1186, - "versionNonce": 576038958, - "isDeleted": false, - "id": "zUuNBbNTuTUXHgK2jfp6z", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1030.38151085136, - "y": 541.3198810660037, - "strokeColor": "#000000", - "backgroundColor": "#000000", - "width": 5.886032007183369, - "height": 5.5293027946267745, - "seed": 274454053, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ap", - "frameId": null - }, - { - "type": "ellipse", - "version": 1455, - "versionNonce": 358267314, - "isDeleted": false, - "id": "YRgoVUVlFhsxlBTDUX89n", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1051.1726698918774, - "y": 533.9881451858475, - "strokeColor": "#fe6143", - "backgroundColor": "#ffffff", - "width": 22.70408827013254, - "height": 22.295575784785395, - "seed": 354929029, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "aq", - "frameId": null - }, - { - "type": "ellipse", - "version": 1231, - "versionNonce": 235696750, - "isDeleted": false, - "id": "SEnInaU4_SNpBLbNhu2XW", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1059.3657593715811, - "y": 541.4090633691428, - "strokeColor": "#000000", - "backgroundColor": "#000000", - "width": 5.886032007183369, - "height": 5.5293027946267745, - "seed": 920539365, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "ar", - "frameId": null - }, - { - "type": "ellipse", - "version": 1249, - "versionNonce": 2096935794, - "isDeleted": false, - "id": "M2bqdY0lNlEUSe2RHi-2J", - "fillStyle": "solid", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1037.5111269085824, - "y": 520.1781729601553, - "strokeColor": "transparent", - "backgroundColor": "#fea777", - "width": 5.80489413812156, - "height": 5.710505615550462, - "seed": 588049477, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "as", - "frameId": null - }, - { - "type": "line", - "version": 1583, - "versionNonce": 1693447342, - "isDeleted": false, - "id": "tQrdK15zdLj9K7o1tdIT_", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1093.7521620443786, - "y": 531.7621510480403, - "strokeColor": "#b5d2f3", - "backgroundColor": "#b5d2f3", - "width": 3.444011451594123, - "height": 19.84838178681884, - "seed": 2039552933, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0.13594782045764886, - 14.637048669275096 - ], - [ - -0.5437912818306414, - 17.990428240564107 - ], - [ - -2.8549042296109244, - 17.945112300411527 - ], - [ - -3.3080636311364744, - 16.993477557207893 - ], - [ - -2.7642723493058328, - 10.150770594172183 - ], - [ - -3.172115810678825, - 3.1721158106788243 - ], - [ - -3.21743175083136, - -0.8610028628984732 - ], - [ - -2.265797007627726, - -1.8579535462547325 - ], - [ - -0.815686922745985, - -1.767321665949618 - ], - [ - 0, - 0 - ] - ], - "index": "at", - "frameId": null - }, - { - "type": "line", - "version": 1611, - "versionNonce": 431584562, - "isDeleted": false, - "id": "EmqLIeU2ZZv9FZw2Qp1bg", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1002.6017052217708, - "y": 531.9089126030274, - "strokeColor": "#b5d2f3", - "backgroundColor": "#b5d2f3", - "width": 3.444011451594123, - "height": 19.84838178681884, - "seed": 43540229, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -0.13594782045764886, - 14.637048669275096 - ], - [ - 0.5437912818306414, - 17.990428240564107 - ], - [ - 2.8549042296109244, - 17.945112300411527 - ], - [ - 3.3080636311364744, - 16.993477557207893 - ], - [ - 2.7642723493058328, - 10.150770594172183 - ], - [ - 3.172115810678825, - 3.1721158106788243 - ], - [ - 3.21743175083136, - -0.8610028628984732 - ], - [ - 2.265797007627726, - -1.8579535462547325 - ], - [ - 0.815686922745985, - -1.767321665949618 - ], - [ - 0, - 0 - ] - ], - "index": "au", - "frameId": null - }, - { - "type": "ellipse", - "version": 1331, - "versionNonce": 279523054, - "isDeleted": false, - "id": "DscG7GIwpXxPLCAdAeRSV", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1029.3608237335388, - "y": 511.0532163517015, - "strokeColor": "#ffffff", - "backgroundColor": "#ffffff", - "width": 0.9409083808334925, - "height": 0.9409083808334925, - "seed": 614479461, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "av", - "frameId": null - }, - { - "type": "line", - "version": 1356, - "versionNonce": 217579250, - "isDeleted": false, - "id": "28K5d5YMRzQC8XKl5WHiY", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 2, - "opacity": 100, - "angle": 0, - "x": 1027.0471001121878, - "y": 513.4361408537382, - "strokeColor": "#ffffff", - "backgroundColor": "#ffffff", - "width": 12.688768173876193, - "height": 46.30374739680301, - "seed": 443949509, - "groupIds": [ - "RiYpA4AUeZ9I_0zIITM-Q" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - -5.813127016152889, - 5.802113493086448 - ], - [ - -10.37504455252507, - 14.44475656838198 - ], - [ - -12.688768173876193, - 25.38120752210786 - ], - [ - -11.07797245738359, - 35.36573657193386 - ], - [ - -8.573442194610063, - 41.760185732208306 - ], - [ - -5.637005072152424, - 46.30374739680301 - ] - ], - "index": "aw", - "frameId": null - }, - { - "type": "ellipse", - "version": 1206, - "versionNonce": 983590834, - "isDeleted": false, - "id": "tOpIYN08QRgdXtQMM6LsU", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1245.5238647460938, - "y": 500.29083251953125, - "strokeColor": "#000000", - "backgroundColor": "#868e96", - "width": 94.1639404296875, - "height": 94.1639404296875, - "seed": 1745775883, - "groupIds": [ - "hVDSYTKGBmcSRe0WIN2Eb" - ], - "roundness": null, - "boundElements": [ - { - "id": "F00H6hLfCZRL9sM0ts6Cl", - "type": "arrow" - }, - { - "id": "TyN6LuBVdV9Qzmb-pz1tU", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "b06", - "frameId": null - }, - { - "type": "line", - "version": 4528, - "versionNonce": 197174382, - "isDeleted": false, - "id": "Kcv9vjx83ziSlQc4p9B7J", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1274.1052057675852, - "y": 519.1808822529507, - "strokeColor": "#000000", - "backgroundColor": "#fff", - "width": 51.00477661111312, - "height": 58.90862694414545, - "seed": 225612715, - "groupIds": [ - "hVDSYTKGBmcSRe0WIN2Eb" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 4.577989705582852, - 1.6110723123024944 - ], - [ - 7.663156681084314, - 4.920120898692385 - ], - [ - 11.867504206272505, - 3.53821758749032 - ], - [ - 23.599257573639992, - 3.6978419484847387 - ], - [ - 27.258419253836482, - 4.058954771814256 - ], - [ - 30.088671470750953, - 1.804317406986476 - ], - [ - 34.019771326631854, - -0.9243199254767267 - ], - [ - 35.09792107613511, - 2.829305040332137 - ], - [ - 34.9983995607963, - 6.473107020943905 - ], - [ - 38.59776103221472, - 9.923213260288534 - ], - [ - 40.20669219685795, - 19.799912503877955 - ], - [ - 38.946086335900375, - 30.143943487190604 - ], - [ - 35.28037718758949, - 34.162888807110036 - ], - [ - 30.287714501428493, - 36.315723354402486 - ], - [ - 24.896965753912443, - 37.50513831069814 - ], - [ - 26.323440807101345, - 38.84544216715153 - ], - [ - 27.932371971744576, - 41.817125970096015 - ], - [ - 28.264110356207055, - 51.13833006270337 - ], - [ - 28.19776267931458, - 56.78184520194077 - ], - [ - 26.439549241663233, - 57.75857789243824 - ], - [ - 13.14098675452176, - 57.98430701866873 - ], - [ - 11.478148102403347, - 56.3564806703444 - ], - [ - 11.013714364155845, - 49.71679566949526 - ], - [ - 7.945134307877474, - 50.569716305420116 - ], - [ - 2.8695370256008443, - 50.89463845243909 - ], - [ - -1.8743218722132589, - 48.17341547115506 - ], - [ - -4.826793493929712, - 43.421429071002265 - ], - [ - -7.696330519530553, - 40.497129747831416 - ], - [ - -10.79808441425517, - 38.43928948337777 - ], - [ - -6.585006931581088, - 38.84544216715153 - ], - [ - -3.5993614714183884, - 41.146974041869356 - ], - [ - -0.21562994990064385, - 44.355580243681906 - ], - [ - 3.8979260174346724, - 46.359266816965636 - ], - [ - 8.45932880379438, - 45.790653059682455 - ], - [ - 10.71514981813956, - 44.01711967387047 - ], - [ - 10.930779768040178, - 41.22820457862409 - ], - [ - 12.141624871328403, - 38.804826898774145 - ], - [ - 13.717382197525382, - 37.708214652585 - ], - [ - 7.762678196423073, - 36.17837287703734 - ], - [ - 2.073364902890782, - 34.30220553391577 - ], - [ - -0.8293459611563061, - 30.076251373228303 - ], - [ - -3.0022323793858483, - 19.897323682740478 - ], - [ - -1.277192780180718, - 10.31998534344254 - ], - [ - 1.21084510328823, - 7.695497571146284 - ], - [ - -0.21562994990064385, - 4.133151450580826 - ], - [ - 0, - 0 - ] - ], - "index": "b07", - "frameId": null - }, - { - "type": "ellipse", - "version": 604, - "versionNonce": 157065586, - "isDeleted": false, - "id": "9lf67miV03hu74py9QP2M", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 544.1116943359375, - "y": 1058.6329956054688, - "strokeColor": "#000000", - "backgroundColor": "#62a1d6", - "width": 97.27496337890626, - "height": 97.27496337890626, - "seed": 561589765, - "groupIds": [ - "iuq9J8vTzy8RhBTSQXxv_" - ], - "roundness": null, - "boundElements": [ - { - "id": "ulKOP7Ie6qS97tzT8a_fG", - "type": "arrow" - }, - { - "id": "IZJ1MVp8phkex30gsyi3P", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "b08", - "frameId": null - }, - { - "type": "line", - "version": 2503, - "versionNonce": 1095624366, - "isDeleted": false, - "id": "x4UY7Mpf7GOQkoF7_5ok_", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 556.9490265577924, - "y": 1090.8008703119967, - "strokeColor": "#000000", - "backgroundColor": "#fff", - "width": 65.0415958850497, - "height": 63.789090918214534, - "seed": 1821320549, - "groupIds": [ - "iuq9J8vTzy8RhBTSQXxv_" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 0.2606877590583155, - 28.822817915951823 - ], - [ - 15.380577784440616, - 28.958136309923425 - ], - [ - 15.61519676759309, - 17.889091683046164 - ], - [ - 45.85497681835769, - 39.052888500205164 - ], - [ - 43.66519964226784, - 43.11244031935331 - ], - [ - 53.649540814201316, - 44.97983415616145 - ], - [ - 53.649540814201316, - 49.25589540566417 - ], - [ - 65.01552710914387, - 48.687558150983435 - ], - [ - 65.0415958850497, - 36.94192155424812 - ], - [ - 53.72774714191881, - 37.07723994821973 - ], - [ - 53.67560959010715, - 40.514327155098506 - ], - [ - 49.37426156564493, - 33.47777066857505 - ], - [ - 47.21055316546092, - 36.481839014744665 - ], - [ - 21.21998358734688, - 16.941862925244926 - ], - [ - 43.300236779586186, - 16.91479924645062 - ], - [ - 43.16989290005706, - 20.054185986591843 - ], - [ - 52.86747753702637, - 16.91479924645062 - ], - [ - 52.86747753702637, - 22.516980756875054 - ], - [ - 64.91125200552058, - 22.43578972049208 - ], - [ - 65.0415958850497, - 10.284197941841969 - ], - [ - 52.91961508883803, - 10.284197941841969 - ], - [ - 52.73713365749721, - 14.046049294252585 - ], - [ - 43.19596167596287, - 10.203006905459008 - ], - [ - 43.40451188320951, - 12.801120069713818 - ], - [ - 21.48067134640519, - 12.557546960564933 - ], - [ - 46.48062744009763, - -1.9756485519854314 - ], - [ - 48.38364808122337, - 0.9201650790069131 - ], - [ - 52.841408761120555, - -5.764563583190367 - ], - [ - 52.86747753702637, - -2.0297759095740733 - ], - [ - 64.80697690189722, - -1.9215211943967885 - ], - [ - 64.72877057417972, - -14.397877118578757 - ], - [ - 52.55465222615639, - -14.533195512550362 - ], - [ - 52.45037712253306, - -9.472287578012338 - ], - [ - 43.613062090456175, - -8.010848923119012 - ], - [ - 44.89043210984192, - -4.43844332226864 - ], - [ - 15.510921663969771, - 12.313973851416042 - ], - [ - 15.119890025382297, - 0 - ], - [ - 0, - 0 - ] - ], - "index": "b09", - "frameId": null - }, - { - "type": "text", - "version": 1326, - "versionNonce": 803971890, - "isDeleted": false, - "id": "cXL5EM6bGMfoA-8jOLqdj", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 795.5076026416294, - "y": 1136.358994115453, - "strokeColor": "#f08c00", - "backgroundColor": "white", - "width": 42.87043762207031, - "height": 23.994218049796267, - "seed": 114415013, - "groupIds": [ - "12gUkgtRjEM744vBL70Ul" - ], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 19.195374439837014, - "fontFamily": 1, - "text": "User", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "User", - "lineHeight": 1.25, - "baseline": 16, - "index": "b0A", - "frameId": null, - "autoResize": true - }, - { - "type": "line", - "version": 1633, - "versionNonce": 1350099182, - "isDeleted": false, - "id": "5GzZpQwLq7x1vkKnKYgWw", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 792.8325154419023, - "y": 1127.0944176553737, - "strokeColor": "#f08c00", - "backgroundColor": "#ced4da", - "width": 47.287248955925605, - "height": 42.10793718115946, - "seed": 1538382085, - "groupIds": [ - "vmWxy2dhWHRhT9ZZ51Vtt", - "12gUkgtRjEM744vBL70Ul" - ], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 5.296171883063663, - -27.90284993932254 - ], - [ - 22.69787949884429, - -42.10793718115946 - ], - [ - 40.09958711462491, - -30.946797205430407 - ], - [ - 47.287248955925605, - -2.8973573804753303 - ], - [ - 0, - 0 - ] - ], - "index": "b0B", - "frameId": null - }, - { - "type": "ellipse", - "version": 1373, - "versionNonce": 951348466, - "isDeleted": false, - "id": "lO_A143u0QAjnvm5pPaBe", - "fillStyle": "cross-hatch", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 804.7853511383245, - "y": 1063.086435953645, - "strokeColor": "#f08c00", - "backgroundColor": "#ced4da", - "width": 24.211071465433932, - "height": 21.18468753225476, - "seed": 1350201445, - "groupIds": [ - "vmWxy2dhWHRhT9ZZ51Vtt", - "12gUkgtRjEM744vBL70Ul" - ], - "roundness": null, - "boundElements": [ - { - "id": "IZJ1MVp8phkex30gsyi3P", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "b0C", - "frameId": null - }, - { - "type": "image", - "version": 527, - "versionNonce": 751473454, - "isDeleted": false, - "id": "oUl-fEQyozTIRyQPMwHhq", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 266.4156256781684, - "y": 732.5435180664062, - "strokeColor": "transparent", - "backgroundColor": "transparent", - "width": 111.296985329522, - "height": 111.37432861328122, - "seed": 1554576267, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "AiBi6H2nRive_gR7y0uBd", - "type": "arrow" - }, - { - "id": "PselpFypJWvR4Z13sA2yK", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "status": "saved", - "fileId": "13d1ff693f54bbbeedf26c3e526980ff65199d93", - "scale": [ - 1, - 1 - ], - "index": "b0D", - "frameId": null, - "crop": null - }, - { - "type": "image", - "version": 579, - "versionNonce": 1228799666, - "isDeleted": false, - "id": "nqnYq_Zeqi-PRMNtxBe3d", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 428.195556640625, - "y": 620.419921875, - "strokeColor": "transparent", - "backgroundColor": "transparent", - "width": 82.44934082031247, - "height": 82.44934082031247, - "seed": 927139051, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "bWK77YuEUcdUQV4w8t1kn", - "type": "arrow" - }, - { - "id": "tnnlLZlewsDwvPrdkuyLI", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "status": "saved", - "fileId": "79a4a1b3c4bb90ec6270bfdf56a8ae57ee542e9d", - "scale": [ - 1, - 1 - ], - "index": "b0E", - "frameId": null, - "crop": null - }, - { - "type": "image", - "version": 732, - "versionNonce": 1890319726, - "isDeleted": false, - "id": "owSatnKy8Ku6Jk0EAop1j", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 657.99072265625, - "y": 599.9400329589844, - "strokeColor": "transparent", - "backgroundColor": "transparent", - "width": 100, - "height": 100, - "seed": 1612308203, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "TyN6LuBVdV9Qzmb-pz1tU", - "type": "arrow" - }, - { - "id": "7Y8YYshl-bzNdQ6aC0uz3", - "type": "arrow" - }, - { - "id": "hyyIRmM2EB2pXZ9fYKHJI", - "type": "arrow" - }, - { - "id": "7v0F9a3yZgwAXB2XGOM_f", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "status": "saved", - "fileId": "5e94a4c4846fab07295f462f6a528f4fe8776afa", - "scale": [ - 1, - 1 - ], - "index": "b0F", - "frameId": null, - "crop": null - }, - { - "type": "image", - "version": 612, - "versionNonce": 1043290226, - "isDeleted": false, - "id": "6HutLU9JtknhDjxB7_M6-", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 70, - "angle": 0, - "x": 450.76904296875, - "y": 142.83216857910156, - "strokeColor": "transparent", - "backgroundColor": "transparent", - "width": 195.47235107421872, - "height": 130.31490071614581, - "seed": 418707077, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "status": "saved", - "fileId": "e41f2f5bb0286ee12aaa71ba10373078d45ffd42", - "scale": [ - 1, - 1 - ], - "index": "b0G", - "frameId": null, - "crop": null - }, - { - "type": "arrow", - "version": 622, - "versionNonce": 23469998, - "isDeleted": false, - "id": "bWK77YuEUcdUQV4w8t1kn", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 451.5578783564344, - "y": 607.3438110351562, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 118.65158081054688, - "height": 380.7784423828125, - "seed": 1421022501, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "nqnYq_Zeqi-PRMNtxBe3d", - "focus": -0.0006410740714828033, - "gap": 13.07611083984375 - }, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -30.707994323231276, - -93.53482055664062 - ], - [ - 87.9435864873156, - -380.7784423828125 - ] - ], - "index": "b0H", - "frameId": null - }, - { - "type": "arrow", - "version": 597, - "versionNonce": 1916716018, - "isDeleted": false, - "id": "AiBi6H2nRive_gR7y0uBd", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 341.3355908463221, - "y": 251.61087036132812, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 76.78619108620592, - "height": 474.7823181152344, - "seed": 377146475, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740052200528, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": { - "elementId": "oUl-fEQyozTIRyQPMwHhq", - "focus": -0.42010927309746565, - "gap": 6.15032958984375 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 47.91263913414667, - 260.5113220214844 - ], - [ - -28.873551952059245, - 474.7823181152344 - ] - ], - "index": "b0I", - "frameId": null - }, - { - "type": "rectangle", - "version": 383, - "versionNonce": 857864686, - "isDeleted": false, - "id": "Y9q8xT0i_zI_NeajZKZwC", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 779.715576171875, - "y": 130.76611328125, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 171.5159912109375, - "height": 104.19076538085938, - "seed": 1000623269, - "groupIds": [], - "roundness": { - "type": 3 - }, - "boundElements": [ - { - "type": "text", - "id": "co1FHCAAACZ8nPVVV5yuB" - }, - { - "id": "n-CQfxk4dPZVSLJQy--Zu", - "type": "arrow" - }, - { - "id": "-jJ43xaAUAkMr2jZfZ6BP", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "index": "b0J", - "frameId": null - }, - { - "type": "text", - "version": 359, - "versionNonce": 59073522, - "isDeleted": false, - "id": "co1FHCAAACZ8nPVVV5yuB", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 790.603645324707, - "y": 157.8614959716797, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 149.73985290527344, - "height": 50, - "seed": 1390309765, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "infrastructure \nresources", - "textAlign": "center", - "verticalAlign": "middle", - "containerId": "Y9q8xT0i_zI_NeajZKZwC", - "originalText": "infrastructure resources", - "lineHeight": 1.25, - "baseline": 43, - "index": "b0K", - "frameId": null, - "autoResize": true - }, - { - "type": "arrow", - "version": 553, - "versionNonce": 1827179566, - "isDeleted": false, - "id": "n-CQfxk4dPZVSLJQy--Zu", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 728.5456227679983, - "y": 323.37971286475585, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 75.86297607421875, - "height": 135.97196750342772, - "seed": 2118477477, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "KklLzBnESEe1jVWJTJ33r", - "focus": -0.16540877554754754, - "gap": 15.091552734375 - }, - "endBinding": { - "elementId": "Y9q8xT0i_zI_NeajZKZwC", - "focus": 0.6227145643643112, - "gap": 10.809814453125 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -35.50283712346709, - -70.96732883155272 - ], - [ - 40.36013895075166, - -135.97196750342772 - ] - ], - "index": "b0L", - "frameId": null - }, - { - "type": "arrow", - "version": 402, - "versionNonce": 483923378, - "isDeleted": false, - "id": "-jJ43xaAUAkMr2jZfZ6BP", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 927.7974853515625, - "y": 354.86627197265625, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 80.4329833984375, - "height": 186.1707763671875, - "seed": 852247621, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": { - "elementId": "Y9q8xT0i_zI_NeajZKZwC", - "focus": -0.8672392287100714, - "gap": 5.2384033203125 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 80.4329833984375, - -89.6064453125 - ], - [ - 28.6724853515625, - -186.1707763671875 - ] - ], - "index": "b0M", - "frameId": null - }, - { - "type": "text", - "version": 427, - "versionNonce": 1285740142, - "isDeleted": false, - "id": "rM59U7lezwsauYEk_sSqp", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1009.209716796875, - "y": 650.2864379882812, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 135.75987243652344, - "height": 50, - "seed": 1653099589, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "manages\ninstalled Apps", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "manages\ninstalled Apps", - "lineHeight": 1.25, - "baseline": 43, - "index": "b0N", - "frameId": null, - "autoResize": true - }, - { - "type": "arrow", - "version": 485, - "versionNonce": 1684967282, - "isDeleted": false, - "id": "F00H6hLfCZRL9sM0ts6Cl", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1103.371826171875, - "y": 539.9364624023438, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 137.7347412109375, - "height": 0.88677978515625, - "seed": 1552442283, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "tf48ygUhaGEyL2MkqVnE5", - "focus": 0.008782547019396477, - "gap": 12.544504366515 - }, - "endBinding": { - "elementId": "tOpIYN08QRgdXtQMM6LsU", - "focus": 0.13206463305039637, - "gap": 4.832105953768725 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 137.7347412109375, - 0.88677978515625 - ] - ], - "index": "b0O", - "frameId": null - }, - { - "type": "arrow", - "version": 442, - "versionNonce": 1259985070, - "isDeleted": false, - "id": "TyN6LuBVdV9Qzmb-pz1tU", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 767.1802978515625, - "y": 710.46630859375, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 494.9842529296875, - "height": 179.88995361328125, - "seed": 1877820107, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "owSatnKy8Ku6Jk0EAop1j", - "focus": 0.7615772066357284, - "gap": 10.526275634765625 - }, - "endBinding": { - "elementId": "tOpIYN08QRgdXtQMM6LsU", - "focus": -0.3821314866970663, - "gap": 14.673196726286442 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 305.607666015625, - 70.52752685546875 - ], - [ - 494.9842529296875, - -109.3624267578125 - ] - ], - "index": "b0P", - "frameId": null - }, - { - "type": "image", - "version": 813, - "versionNonce": 1854918962, - "isDeleted": false, - "id": "lk_-alyL38aA-w9DD2UG4", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 846.5642700195312, - "y": 816.4213256835938, - "strokeColor": "transparent", - "backgroundColor": "transparent", - "width": 106.80432128906254, - "height": 106.80432128906254, - "seed": 1849056363, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "sTltD2n0-o0n2DxaLJR3f", - "type": "arrow" - }, - { - "id": "Wud3XoT9DFmyL4m-3TnLZ", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "status": "saved", - "fileId": "9efcff3c0a59ddc4d533483ccf38dadadd1ef788", - "scale": [ - 1, - 1 - ], - "index": "b0Q", - "frameId": null, - "crop": null - }, - { - "type": "arrow", - "version": 571, - "versionNonce": 1609994990, - "isDeleted": false, - "id": "ulKOP7Ie6qS97tzT8a_fG", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 593.7961766403456, - "y": 1054.7615265256593, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 0.7695833828155401, - "height": 134.78089437539575, - "seed": 499316677, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "9lf67miV03hu74py9QP2M", - "focus": 0.027655566224803904, - "gap": 3.8819063608331774 - }, - "endBinding": { - "elementId": "ytui7uP0Yr9N8cmZIpYaE", - "focus": 1.222572331494125, - "gap": 2.287731046575459 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -0.7695833828155401, - -134.78089437539575 - ] - ], - "index": "b0R", - "frameId": null - }, - { - "type": "arrow", - "version": 325, - "versionNonce": 782424818, - "isDeleted": false, - "id": "IZJ1MVp8phkex30gsyi3P", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 796.0870361328125, - "y": 1085.6331787109375, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 144.5086669921875, - "height": 20.82275390625, - "seed": 1438500331, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "lO_A143u0QAjnvm5pPaBe", - "focus": -0.8343448753941219, - "gap": 12.281293765981022 - }, - "endBinding": { - "elementId": "9lf67miV03hu74py9QP2M", - "focus": 0.1559297122704822, - "gap": 10.197350218367987 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -144.5086669921875, - 20.82275390625 - ] - ], - "index": "b0S", - "frameId": null - }, - { - "type": "arrow", - "version": 761, - "versionNonce": 633472302, - "isDeleted": false, - "id": "PselpFypJWvR4Z13sA2yK", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 382.1827115555846, - "y": 805.76708984375, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 180.13534264363415, - "height": 106.1990966796875, - "seed": 518801579, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "oUl-fEQyozTIRyQPMwHhq", - "focus": -0.08235065410961831, - "gap": 4.470100547894191 - }, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 111.38546471394665, - 44.3695068359375 - ], - [ - 180.13534264363415, - 106.1990966796875 - ] - ], - "index": "b0T", - "frameId": null - }, - { - "type": "text", - "version": 396, - "versionNonce": 321825970, - "isDeleted": false, - "id": "AHIzbTMx9qnzQm8TYY33M", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 857.502197265625, - "y": 923.7363891601562, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 82.03993225097656, - "height": 25, - "seed": 1124228389, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Keycloak", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Keycloak", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0U", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 507, - "versionNonce": 2112171886, - "isDeleted": false, - "id": "JZGMtlJxOuq2gKxRs3uEB", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 664.3381271362305, - "y": 711.8067626953125, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 104.11991882324219, - "height": 25, - "seed": 456711045, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "IJ9Qqnywv1HQo1s1iZacU", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Backstage", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Backstage", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0V", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 773, - "versionNonce": 567953010, - "isDeleted": false, - "id": "aOhxZB-pMwJpgMt8nLPSE", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 882.2986831665039, - "y": 436.50189208984375, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 99.61990356445312, - "height": 25, - "seed": 788361323, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "hyyIRmM2EB2pXZ9fYKHJI", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Terraform", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Terraform", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0W", - "frameId": null, - "autoResize": true - }, - { - "type": "image", - "version": 760, - "versionNonce": 883495342, - "isDeleted": false, - "id": "KklLzBnESEe1jVWJTJ33r", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 734.349365234375, - "y": 337.3106689453125, - "strokeColor": "transparent", - "backgroundColor": "transparent", - "width": 71.89355468750001, - "height": 98.91737311613477, - "seed": 367662629, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "n-CQfxk4dPZVSLJQy--Zu", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "status": "saved", - "fileId": "350522d68e4522431ae506d3d64ce50ff6ac2925", - "scale": [ - 1, - 1 - ], - "index": "b0X", - "frameId": null, - "crop": null - }, - { - "type": "text", - "version": 653, - "versionNonce": 325888050, - "isDeleted": false, - "id": "59cdB1B-TCFVoxNOy71Qt", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 723.4158782958984, - "y": 441.74627685546875, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 103.0198974609375, - "height": 25, - "seed": 1163349637, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "GPjpW9kq1k4rR3cX1_DxV", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Crossplane", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Crossplane", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0Y", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 432, - "versionNonce": 624339950, - "isDeleted": false, - "id": "2pfyd8It3eenChYHBdltw", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 427.6323013305664, - "y": 705.76806640625, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 129.11990356445312, - "height": 25, - "seed": 502887659, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "tnnlLZlewsDwvPrdkuyLI", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "cert manager", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "cert manager", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0Z", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 514, - "versionNonce": 1875694066, - "isDeleted": false, - "id": "4wxrsKwAIzLhlVuIqtmAq", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 258.22792053222656, - "y": 837.8240966796875, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 134.13990783691406, - "height": 25, - "seed": 956909515, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "External DNS", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "External DNS", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0a", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 397, - "versionNonce": 1570176558, - "isDeleted": false, - "id": "Kgt3yM_o5SLUxMXR5Zq0l", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1010.3701171875, - "y": 622.8636474609375, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 81.29994201660156, - "height": 25, - "seed": 1757368171, - "groupIds": [], - "roundness": null, - "boundElements": [ - { - "id": "7v0F9a3yZgwAXB2XGOM_f", - "type": "arrow" - } - ], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Argo CD", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Argo CD", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0b", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 675, - "versionNonce": 704758706, - "isDeleted": false, - "id": "VAipxdB9Eq3SG3Lrb0D86", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 500.58824920654297, - "y": 513.9823608398438, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 146.25987243652344, - "height": 25, - "seed": 1456098571, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Argo Workflows", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Argo Workflows", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0c", - "frameId": null, - "autoResize": true - }, - { - "type": "arrow", - "version": 349, - "versionNonce": 1119029358, - "isDeleted": false, - "id": "7Y8YYshl-bzNdQ6aC0uz3", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 701.3309326171875, - "y": 594.6924438476562, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 94.8944091796875, - "height": 157.41793823242188, - "seed": 1066428107, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "owSatnKy8Ku6Jk0EAop1j", - "focus": 0.1530973475194411, - "gap": 5.247589111328125 - }, - "endBinding": { - "elementId": "qMCCO8IFV9l7MGHBdgwem", - "focus": -0.9214280178664118, - "gap": 10.327226531390586 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -24.5264892578125, - -81.5445556640625 - ], - [ - -94.8944091796875, - -157.41793823242188 - ] - ], - "index": "b0d", - "frameId": null - }, - { - "type": "arrow", - "version": 439, - "versionNonce": 1009941874, - "isDeleted": false, - "id": "IJ9Qqnywv1HQo1s1iZacU", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 687.0926513671875, - "y": 740.2679443359375, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 51.890380859375, - "height": 80.6038818359375, - "seed": 1180277899, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "JZGMtlJxOuq2gKxRs3uEB", - "focus": 0.5071864939045251, - "gap": 3.461181640625 - }, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -7.38427734375, - 56.7591552734375 - ], - [ - -51.890380859375, - 80.6038818359375 - ] - ], - "index": "b0e", - "frameId": null - }, - { - "type": "arrow", - "version": 520, - "versionNonce": 877906606, - "isDeleted": false, - "id": "GPjpW9kq1k4rR3cX1_DxV", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 735.5555419921875, - "y": 600.5394897460938, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 49.2978515625, - "height": 126.92269897460938, - "seed": 1792355531, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": { - "elementId": "59cdB1B-TCFVoxNOy71Qt", - "focus": -0.30961095227684227, - "gap": 6.870513916015625 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 49.2978515625, - -126.92269897460938 - ] - ], - "index": "b0f", - "frameId": null - }, - { - "type": "arrow", - "version": 398, - "versionNonce": 1134952242, - "isDeleted": false, - "id": "hyyIRmM2EB2pXZ9fYKHJI", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 775.2035522460938, - "y": 622.5808715820312, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 152.85760498046875, - "height": 150.87921142578125, - "seed": 1556311717, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "owSatnKy8Ku6Jk0EAop1j", - "focus": 0.17144718893046257, - "gap": 17.21282958984375 - }, - "endBinding": { - "elementId": "aOhxZB-pMwJpgMt8nLPSE", - "focus": -0.19596741464544642, - "gap": 10.19976806640625 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 85.839111328125, - -52.5972900390625 - ], - [ - 152.85760498046875, - -150.87921142578125 - ] - ], - "index": "b0g", - "frameId": null - }, - { - "type": "arrow", - "version": 401, - "versionNonce": 824329454, - "isDeleted": false, - "id": "7v0F9a3yZgwAXB2XGOM_f", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 778.0997314453125, - "y": 649.023681640625, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 223.8197021484375, - "height": 15.443603515625, - "seed": 1567764645, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": { - "elementId": "owSatnKy8Ku6Jk0EAop1j", - "focus": 0.07336170943867788, - "gap": 20.1090087890625 - }, - "endBinding": { - "elementId": "Kgt3yM_o5SLUxMXR5Zq0l", - "focus": 0.3379008707934543, - "gap": 8.45068359375 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 223.8197021484375, - -15.443603515625 - ] - ], - "index": "b0h", - "frameId": null - }, - { - "type": "text", - "version": 576, - "versionNonce": 482560242, - "isDeleted": false, - "id": "NSZ6pph2zQb-v5eE3i5fO", - "fillStyle": "hachure", - "strokeWidth": 2, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 323.4345474243164, - "y": 446.2607727050781, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 148.85989379882812, - "height": 50, - "seed": 640391595, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "DNS records\nand TLS Certs", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "DNS records\nand TLS Certs", - "lineHeight": 1.25, - "baseline": 43, - "index": "b0i", - "frameId": null, - "autoResize": true - }, - { - "type": "arrow", - "version": 362, - "versionNonce": 2057795374, - "isDeleted": false, - "id": "tnnlLZlewsDwvPrdkuyLI", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 559.933837890625, - "y": 824.932861328125, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 80.68179321289062, - "height": 114.41412353515625, - "seed": 1313446859, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": { - "elementId": "nqnYq_Zeqi-PRMNtxBe3d", - "focus": 0.15175330232952633, - "gap": 7.64947509765625 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - -59.17266845703125, - -57.434326171875 - ], - [ - -80.68179321289062, - -114.41412353515625 - ] - ], - "index": "b0j", - "frameId": null - }, - { - "type": "arrow", - "version": 510, - "versionNonce": 2131843762, - "isDeleted": false, - "id": "sTltD2n0-o0n2DxaLJR3f", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "dashed", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 658.0011596679688, - "y": 866.764404296875, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 184.10125732421875, - "height": 19.59222412109375, - "seed": 1700299531, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": { - "elementId": "lk_-alyL38aA-w9DD2UG4", - "focus": 0.12568791656641695, - "gap": 4.46185302734375 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 52.89520263671875, - 19.59222412109375 - ], - [ - 184.10125732421875, - 2.867412625930001 - ] - ], - "index": "b0k", - "frameId": null - }, - { - "type": "arrow", - "version": 314, - "versionNonce": 961306990, - "isDeleted": false, - "id": "Wud3XoT9DFmyL4m-3TnLZ", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 849.0896606445312, - "y": 1083.1865234375, - "strokeColor": "#2f9e44", - "backgroundColor": "transparent", - "width": 59.9429931640625, - "height": 141.68231201171875, - "seed": 776842347, - "groupIds": [], - "roundness": { - "type": 2 - }, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "startBinding": null, - "endBinding": { - "elementId": "lk_-alyL38aA-w9DD2UG4", - "focus": -0.5183582275651765, - "gap": 18.278564453125 - }, - "lastCommittedPoint": null, - "startArrowhead": "arrow", - "endArrowhead": "arrow", - "points": [ - [ - 0, - 0 - ], - [ - 59.9429931640625, - -141.68231201171875 - ] - ], - "index": "b0l", - "frameId": null - }, - { - "type": "text", - "version": 346, - "versionNonce": 423048306, - "isDeleted": false, - "id": "wE5yVvS4h17lulJ1v3IIK", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 824.61474609375, - "y": 999.902099609375, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 138.55990600585938, - "height": 25, - "seed": 181705579, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "SSO and Auth", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "SSO and Auth", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0m", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 620, - "versionNonce": 542770094, - "isDeleted": false, - "id": "pjdwfRhOVvz0oJC2MdwdO", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 1244.9824752807617, - "y": 617.5133666992188, - "strokeColor": "#f08c00", - "backgroundColor": "transparent", - "width": 97.75991821289062, - "height": 25, - "seed": 766814885, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "Git Repos", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Git Repos", - "lineHeight": 1.25, - "baseline": 18, - "index": "b0n", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 416, - "versionNonce": 754701874, - "isDeleted": false, - "id": "FWXH_VUfBZRoaDKttm52l", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 691.9148559570312, - "y": 531.47705078125, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 190.15980529785156, - "height": 50, - "seed": 1206634443, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "developer workflows\ndrive interactions ", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "developer workflows\ndrive interactions ", - "lineHeight": 1.25, - "baseline": 43, - "index": "b0o", - "frameId": null, - "autoResize": true - }, - { - "type": "text", - "version": 372, - "versionNonce": 301555182, - "isDeleted": false, - "id": "psj-0_sJQiAwX1R-6ViX1", - "fillStyle": "hachure", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 1, - "opacity": 100, - "angle": 0, - "x": 426.3664855957031, - "y": 786.2203979492188, - "strokeColor": "#1971c2", - "backgroundColor": "transparent", - "width": 139.59988403320312, - "height": 50, - "seed": 1623377067, - "groupIds": [], - "roundness": null, - "boundElements": [], - "updated": 1740051953061, - "link": null, - "locked": false, - "fontSize": 20, - "fontFamily": 1, - "text": "TLS & ingress\nsupport", - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "TLS & ingress\nsupport", - "lineHeight": 1.25, - "baseline": 43, - "index": "b0p", - "frameId": null, - "autoResize": true - }, - { - "type": "ellipse", - "version": 650, - "versionNonce": 2091508718, - "isDeleted": false, - "id": "18WfTUr_qkrh1hW24QkKD", - "fillStyle": "solid", - "strokeWidth": 4, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 307.3809384910767, - "y": 146.2425423129156, - "strokeColor": "#2f8ce2", - "backgroundColor": "#2f8ce2", - "width": 66.7412151043143, - "height": 99.52637340117046, - "seed": 1228658286, - "groupIds": [ - "v6COSx9OOzf1YRYcap33L", - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "sharp", - "boundElements": [ - { - "id": "Me7hqPksbUjYeqeM60uUD", - "type": "text" - }, - { - "type": "text", - "id": "Me7hqPksbUjYeqeM60uUD" - } - ], - "updated": 1740052203727, - "link": null, - "index": "b0x", - "frameId": null, - "roundness": null, - "locked": false - }, - { - "type": "line", - "version": 463, - "versionNonce": 1354252398, - "isDeleted": false, - "id": "1uLEvOnOSdN7ZYlBEd7pA", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 349.0230223420459, - "y": 145.54795144284378, - "strokeColor": "#5a9eee", - "backgroundColor": "#5a9eee", - "width": 8.406450845347601, - "height": 63.04838134010797, - "seed": 1284692142, - "groupIds": [ - "v6COSx9OOzf1YRYcap33L", - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1740052203727, - "link": null, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 7.805990070679858, - 29.88074945028814 - ], - [ - -0.6004607746677428, - 63.04838134010797 - ] - ], - "index": "b0y", - "frameId": null, - "roundness": { - "type": 2 - }, - "locked": false - }, - { - "type": "line", - "version": 577, - "versionNonce": 1022493358, - "isDeleted": false, - "id": "F1usnG-rEBxyEDynNMbjh", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 3.129545043735611, - "x": 328.6073560033443, - "y": 145.8481818301775, - "strokeColor": "#5a9eee", - "backgroundColor": "#5a9eee", - "width": 8.406450845347601, - "height": 63.04838134010797, - "seed": 1246728942, - "groupIds": [ - "v6COSx9OOzf1YRYcap33L", - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1740052203727, - "link": null, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 7.805990070679858, - 29.88074945028814 - ], - [ - -0.6004607746677428, - 63.04838134010797 - ] - ], - "index": "b0z", - "frameId": null, - "roundness": { - "type": 2 - }, - "locked": false - }, - { - "type": "line", - "version": 449, - "versionNonce": 2033810670, - "isDeleted": false, - "id": "kw4gN-ceOCXhFJZX9CPnR", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 313.8960670239858, - "y": 155.4555542248606, - "strokeColor": "#5a9eee", - "backgroundColor": "#5a9eee", - "width": 53.14077855809085, - "height": 6.304838134010801, - "seed": 1559954734, - "groupIds": [ - "v6COSx9OOzf1YRYcap33L", - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1740052203727, - "link": null, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 26.120043698044817, - 6.304838134010801 - ], - [ - 53.14077855809085, - 0.3002303873338714 - ] - ], - "index": "b10", - "frameId": null, - "roundness": { - "type": 2 - }, - "locked": false - }, - { - "type": "line", - "version": 409, - "versionNonce": 722972462, - "isDeleted": false, - "id": "M0_8dPqUVabkUKfyyB4aL", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 308.4919200519763, - "y": 190.58250954292077, - "strokeColor": "#5a9eee", - "backgroundColor": "#5a9eee", - "width": 60.646538241437234, - "height": 10.508063556684668, - "seed": 1711157102, - "groupIds": [ - "v6COSx9OOzf1YRYcap33L", - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1740052203727, - "link": null, - "startBinding": null, - "endBinding": null, - "lastCommittedPoint": null, - "startArrowhead": null, - "endArrowhead": null, - "points": [ - [ - 0, - 0 - ], - [ - 32.42488183205572, - -5.4041469720092525 - ], - [ - 60.646538241437234, - 5.103916584675415 - ] - ], - "index": "b11", - "frameId": null, - "roundness": { - "type": 2 - }, - "locked": false - }, - { - "type": "text", - "version": 504, - "versionNonce": 1373845038, - "isDeleted": false, - "id": "Me7hqPksbUjYeqeM60uUD", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 327.31920875625724, - "y": 172.3998720320247, - "strokeColor": "#ffff", - "backgroundColor": "#5a9eee", - "width": 26.6715087890625, - "height": 46.83594042408021, - "seed": 832704942, - "groupIds": [ - "v6COSx9OOzf1YRYcap33L", - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1740052203727, - "link": null, - "fontSize": 18.734376169632085, - "fontFamily": 1, - "text": "DN\nS", - "baseline": 18, - "textAlign": "center", - "verticalAlign": "middle", - "containerId": "18WfTUr_qkrh1hW24QkKD", - "originalText": "DNS", - "index": "b12", - "frameId": null, - "roundness": { - "type": 2 - }, - "locked": false, - "autoResize": true, - "lineHeight": 1.25 - }, - { - "type": "text", - "version": 438, - "versionNonce": 1593153902, - "isDeleted": false, - "id": "L2ykBvLDDI3BOZbBzmfDg", - "fillStyle": "solid", - "strokeWidth": 1, - "strokeStyle": "solid", - "roughness": 0, - "opacity": 100, - "angle": 0, - "x": 291.1687549067831, - "y": 210.72878049149716, - "strokeColor": "#000000", - "backgroundColor": "#5a9eee", - "width": 101.91496276855469, - "height": 23.417970212040107, - "seed": 454011886, - "groupIds": [ - "R92eQ7PxzjnRpIM7s5Lqf" - ], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1740052203727, - "link": null, - "fontSize": 18.734376169632085, - "fontFamily": 1, - "text": "DNS Zones", - "baseline": 14, - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "DNS Zones", - "index": "b13", - "frameId": null, - "roundness": { - "type": 2 - }, - "locked": false, - "autoResize": true, - "lineHeight": 1.25 - } - ], - "appState": { - "gridSize": 20, - "gridStep": 5, - "gridModeEnabled": false, - "viewBackgroundColor": "#ffffff" - }, - "files": { - "13d1ff693f54bbbeedf26c3e526980ff65199d93": { - "mimeType": "image/png", - "id": "13d1ff693f54bbbeedf26c3e526980ff65199d93", - "dataURL": "data:image/png;base64,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", - "created": 1691631835655, - "lastRetrieved": 1691631835655 - }, - "79a4a1b3c4bb90ec6270bfdf56a8ae57ee542e9d": { - "mimeType": "image/png", - "id": "79a4a1b3c4bb90ec6270bfdf56a8ae57ee542e9d", - "dataURL": "data:image/png;base64,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", - "created": 1691631856024, - "lastRetrieved": 1691631856024 - }, - "5e94a4c4846fab07295f462f6a528f4fe8776afa": { - "mimeType": "image/png", - "id": "5e94a4c4846fab07295f462f6a528f4fe8776afa", - "dataURL": "data:image/png;base64,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", - "created": 1691632026471, - "lastRetrieved": 1691632026471 - }, - "e41f2f5bb0286ee12aaa71ba10373078d45ffd42": { - "mimeType": "image/png", - "id": "e41f2f5bb0286ee12aaa71ba10373078d45ffd42", - "dataURL": "data:image/png;base64,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", - "created": 1691632270545, - "lastRetrieved": 1691632270545 - }, - "9efcff3c0a59ddc4d533483ccf38dadadd1ef788": { - "mimeType": "image/png", - "id": "9efcff3c0a59ddc4d533483ccf38dadadd1ef788", - "dataURL": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAQAAAAEACAYAAABccqhmAAAAAXNSR0IArs4c6QAAIABJREFUeF7tfQuYFdWV7n/6PPr0k24eKiDyEAQEtMEnigGjxEg4hEy8k5nkzkxM5t48nEyczOeda2KiyTXxmjsmxjCZaDRGE41jmAQtYnzEBwgqTlRwdASjQmOQV0N30+/uc/rcbx268PSh6tSuqrXrcWqf7+P7+Lp2rb332muvWnv9a68Vg/opDigORJYDscjOXE1ccUBxAEoBKCFQHIgwB5QCiPDiq6krDigFoGRAcSDCHFAKIMKLr6auOKAUgJIBxYEIc0ApgAgvvpq64oBSAEoGFAcizAGlACK8+GrqigNKASgZUByIMAeUAojw4qupKw4oBaBkQHEgwhxQCiDCi6+mrjigFICSAcWBCHNAKYAIL76auuKAUgBKBhQHIswBpQAivPhq6ooDSgEoGVAciDAHlAKI8OKrqSsOKAWgZEBxIMIcUAogwouvpq44oBSAkgHFgQhzQCmACC++mrrigFIARTKwYsWKlng8fiuApUo0KpIDrQCu1jRtXUXOzsGklAIYYdrq1aubstnsrlgsNsYBH9UrIeJALpdb+Mgjj2wN0ZClDVUpgBHWrlq16oZ8Pn+9NE4rwkHiwAZN05YFaUB+jUUpAACrV6+elsvldvq1CKpfXzhwpaZpP/Ol5wB1qhQAgEwm84w69wdIKr0ZSms8Hm9Zt25dhzfdBbOXyCuAlStXLovFYk8Hc3nUqGRyIBaLffPhhx++QWYfQacdeQWQyWR2AZga9IVS4+PnQD6f70wkEmQFkAxE8hdpBZDJZK4G8P1IrryatM6BezRN+3RU2RFZBaBgv6iK/PHzzufzF69fv578QJH7RVYBZDIZ8gD/TeRWXE3YiAPbNE1riSJrIqkARiL+Xonigqs5m3IgkrBgJBWAgv2UGijlwIhDcFrUYMHIKYBMJrMawG/UFlAcKOVAFGHBKCoABfupvW/KgXg8Pj1KsGCkFICK91c7X4ADD2maRlZiJH6RUQAU75/NZreq236RkGtXk4wSLBgZBaBgP1d7Imovt2qaNi0Kk46EAlDx/lEQZfY5/oOmaZQcpqJ/kVAACvaraBmWMrmowIIVrwAymQzFed8tRUoU0YrmQD6f/8H69evpvkjF/ipaAVC8fy6Xo9RP6rZfxYqw3IlVOixY0QpAwX5yN0dEqFd0+rCKVQAqzVdEtqc30/xYpWYSrlgFkMlkKPXzR72RD9VLhXOgYmHBilQACvar8O3ow/Qq9Z5ARSqATCZDjr8zfZAT1WWFcqBSYcGKUwAK9qvQHRiMaVVc+rCKUgAqzVcwdkklj6LSqgpVlAJYuXLlrbFY7MuVLIBqbr5zoKJgwYpRAAr2831jRGkAFZM+rGIUgIr3j9L+832uFVNVqCIUgIL9fN8QkRtApcCCFaEAVHWfyO0/3ydcKVWFQq8AVHUf3/dClAcQelgw1AogDLBfZ009Np40k2WTnDDQjfPee4uFliwie047Ezsn8iTTmbtrB8a1bpc1VBa6YU8fFmoFEPQ0X9r0FmAqZ0BiHkhVIfN4MMvaa0s/ASy6AKhvZNlcBSIvPoHMY/fz0eOnFGpYMLQKIOjVfQ7Wj8MLZ6/kFbdT5xc21+xffw+nvbuDl7ZLau2N47Hpym8DVTGgPumS2ujXL7j35qBbAqGFBUOrAIIO+2kLPwyMOZFvI1RXA3POOkqv6zAyP72WjzYDJe2KfwQmn3aUUmwQaKhnoDpCorMNmduu4aPHTCnM9wRCqQCCXt3njQmn4K15F/OJ2XAOmHcukKp+n+bGB5F55Um+PlxQenPKbOz4s6+8T4GkqgZAIuWC6uhXT338lzh9y+Ns9LgJhRUWDKsCCHR1H23xFUB1HZ+MNY0Dps4eTW+wD8vvvhbp/j6+fhxS0j5zE9AwdvTbVTmgnrQA02+gF5ffdg0S/b1MBPnJhDF9WOgUQNDTfLE7/vLDwILzgXjieInd+hQyG/6NX5JtUNQWZ4BzTXwd8X6gjtEh+OpmZB6608boPG8auqpCoVIAQa/uM5BI4fHzrwASjE6wSacAE042leQld38NzUfaPJd06rA/XYMnrrwJSJl86RNVQK2B4nIx2mU/uR4N+3a7oCD31bDBgqFSAIGH/eZcCDBh/gUxpdU544LyErvnTWTW3iJXqk2oax/6NDB3cfm+8z3AmGa+8bVuR+bem/no8VPapmlaCz9ZORRDowCCHu/f2nQSXm25jHeVTjsTqLH2JZzw23/FeW9REiTvfnsnTMEfPnmddYcEC1YPA8kiB6b1W2VbnP2rH2Li9pddUpH6emiqCoVGAUQa9rOSVR9gwVGwn9X4FCxoxSHfnodCAQQ9zdcLE2fi4OwL+RaxnOPPrJcX1yPzvMY3hjKUtsxswYGPfEG8L5Ky5BCQtrZmRIk2b1yHJRseEm3uebuwVBUKvAIIerx/wfF3zir5sJ+VCHsECxYcf5/8xvGwn9X4kAUaay1bCTcY6MXyO65HusMfB6jIOMMACwZeAUQS9mtZIiJfx7d543np9wTKwn5Wo471Ag1NVq3EnwcfFgz8PYFAK4Cgp/kq3PQ77+PiAivS8uQZwLiTRFoatjn7/hsx8eC7jt8v92Ih3v9T15nDfla9xmNAHSNECiDo9wSCDgsGWgEEvbqPtuCDwLgpVmIv/jweB+afJ97eqKVEWFAI9rMaffRgwUBXFQqsAogk7Df3rNHx/labyeS5DFjwuHh/h2MrxDak86yw4DztLszYusnpiKS/F+R7AoFVAEGv7qOR46+OMcClrgGYuYBHGCVYAa7O/qWzkgALXn7H9YG+JwDgnng8fvW6des6eBaZh0ogFcAtt9yypqWl5apZs2bxzNIllZ6eHlTTddyR3527D+E7L7W6pFr0eiJ+9KqvUby/k15qhvHOxEEnb5q+87mOJJ44HOejOSYB5KvY6H25dgB/X9NfoNfR0YFEIoGamhrk83m2PkoJ9fb2IpWyd+NxcHCwMLag/AKnAO68886pH/jAB3am0+lAjI0EKJfLHVuvjqEcFj32GjD0/t9cL+bJ04Bxk1yT0Qn81fgsvtmYZaNHhB7ojeOr+xgdeBLuCWxo7MBJMcZ1KcNBJ5tfV06NjYwXpFyuciA2WfEcHnvssVfnzp3LZAu75A6Azs5O1NW9H8By5Wt7sOGP+90T1imkq4HZI4k+OKgm83hnygAHpeNozNibAvr4vtpoJIuCz6pYkBzE2touKXMvJup08xONoaEhxMnZG5BfoBTAXXfdteTcc899dsyYMYFgz8DAwKjF2tU7gA8+9jrv2EbSfHERvX3SIJanh7nIjaLzTrYKl+62Z/KWHYiE9GH31R/B2fEhKfMnom42vz6o4WE56+Nk0oFSAM8991z7+PHjm9LptJO5sL5Dpn9fX9+oM96MTX8EDjJ+YZqbgVPm8o1bwtm/dHAfbE9iVzvjF6wuDnB+ERNZ7Kjr5ONpESWOzU/kurq6RlmVUgYrSDQwCuCOO+64bsWKFf+Hxh0EDXnkyBHU1r4fuvr0oW58duObgmwVbMYE++m9/f6UQcxIyP26tOeBs1rTAFc3JIGNvA7Br9X24K+TRx2CXL/u7m5wfZjIqUwOyiD8AqMAXnvttaGmpqaCe5S+vjK9t1aMLzX9qf0Mcvz1MnrWJ50MTDjFaijCz6c15/BUszzTt3gg1x9J4OdtjJ7s6jhA/7h+sWG81NCB+hgPAkDn9qqqKlaZDMJHjtgdCAXw8MMPP7No0aKl+vrTBkwmGT3ONgWLTP/i/r/79gH8+NU/2aRSpjk37FcFvDS1H80eruaMPSlggNEhyAwLfqq6H99I97heMxmbnwYVFDjQQ5ExXguC/ZYtWzYK9mtvb4dfjsBS018K7Dd1FtA0wbVw6gS+cuIQ/q7OG/hL7/OJ/ip87j1Gh6AEWPDpxnZMijk/q8ja/MRDilUIAhzouwJ44okn3po7d+6pxbvh0KFDaCYHmce/Usyful/+civebj3EN5L6WuBUxoxR1cN4ZzLj0cTGTGccSALdjKZ7fQKoYrQqkkPYUXvExozebypz81MvQYEDfVUA99xzzycuueSSB0pXyC/ziLyzxc6ZVzr78PGn3nAkQKYvhQj2s5p4pcKCsje/ztcg+AF8VQAE+51yyimGF8S9Zk6p6U+LxA77jZ8ATGYMb67P4Z0TvHH8mSkD9hDhmjiQZLQqqnLY0SAefu/V5id+BgEO9E0B3HPPPbddcsklXzITLC+RACPT/9/3deKa59+2+giKPyfH36wWltt+hU6rgN+fLB/2s5qgFFiwgRAGvqPA36X78KVq64IiXm5+4msQ4EBfFAA5/s4///y3dNjPSMi8ZE5puG/B8Uemf4Bhv+Vjc7i9yd+vv75ua3ri+N5+RtSmugqoZoQZBWBBrzd/UI4BviiAUtjPSAEcPnwYTU2M6aNMPmWlN/2o2T/t2Itf/ddeq4+f+HOK9595Jt9tv2QeL5084CnsZzXZoN8T+HBqAD+o6Tachl+bnwbjl79LZ4TnCoDi/ZcuXbrR6rafF0iAkelfiPd/ajvvbb8Zcxwk0TTfcn7AflYKIAywoFbfidPio29J+rn5iad+w4GeKwAj2M9MuGQ7Ao0cf+yw35hGYNp8q/0j/tyDeH/xwYxuOaMtCRxhdODVVwFVjEeBEljQ781P3PMbDvRUAfziF7+4etmyZd8XFTCZCsAo3FdKvL9gdR9Rnsi87Sc6BrN2BVjwTym+ewJ0W7Ahzpo45P/VdmNVcqCw8bjDe53yT6acW43JUwWwadOmrmnTptVbDUp/LgsJMLrpR30GHvZrzOGd8cFw/Jmt4WcPVeHpTsYIQQmw4AvVbWiMx1hj+0Vl2qidn3CgZwrgwQcfvPOCCy74rB1GkYleXy+sL4RJG5n+gU/z5UO8vzBDRxrSjbm+6hqct7cWyDKKFt0WZIQFv1jdi6sSjNe67TKqpL2XiFfpUBlXyZwLRvH+IjyTgQQYmf5S4v2Zb/sFCfYrXTvyZJNVRSY1/R7sT+DrBxmvu6ZiQJoRZowN48maw56lDxORdb+OAZ4oABHYz4hJMiyA0pt+1K8U2C8kab5EhLNcG/2efOn17dkHa4F+Rocgc/qwS5P9+EFKTuIQJzz1Cw6UrgAI9rvsssuedcIUeodTMxqZ/mFI8/Wdk4bwF7Xe3vYTWS8yXc2y4r6cjeMv6SjA9ZNQVejemnacVeXPRapStvgFB0pXAM8888zemTNnOq51xaUAjDD/guNvyzvAe+Kx4pbyTBlfp1c27Gf21S/lzez2NNDNaLpzpw+LD+H19GHLJfWigV9woFQFYBf2M2I0FxJQetOP+pIC+zGn+frVlEGclXR+p51beMt99Uv7as/HcP57dcAwk5gRGeZ7AjdVH8GqRB83mxzR4/rY2emcaWWMu9y6devg+PHjXX0COCICjcJ9C19/ivjrtL4kIszQE08CTpoh3NyqoZdpvqzGIvrVL6Xz+SPVvLCghHsCW2ra2NKHWfGx3HM/4EBpCmDt2rW/Wbhw4eriijpOmOM2O5CZ6a/SfImvhp2vvhHV2Xvrgw0LpnpwVdL4noA4l9y39AMOlKIACPa76KKLCmm+stnsqLJadtlEqZjdZGMtvelH/UuB/UJQ3ccu751+9Uv7eXIwgS/uZ4QFJaQPe7K2LRCwoNfHACkKYP369a8sWLDgWN4rt0rAKVOMMH8STvbqPtxpviRW9xFVAm6/+sc5BLlhQQoRjjHCjIlBvF7dLsoeae28hgPZFcAtt9yy4oorrvhtKYfcKAEnjkCzcN8wwH5+xvvrcRLcadl35mL48HuMUZ0SqgoFARb0Gg5kVwCbNm1qnzJliuFFfqdKwEmacCPMv+D4C3p1Hx/TfJETys1xy+qzuKwjjb1drnzCo7uQcE/g9Zo2q2lIfe41HMiqAKi6z2WXXVao7mP2c6IE7DoCzUx/9jRfNElm2M+L6j6layPrq1/aTxhgwWuru/DfE4zIkAN14fTI66Ar3sIg27ZtO1bdh1MJ2IUCjcJ9C1//gFf3WVzTjfsmMt5/F5AI2V/90iF8qyeF+w5XC4xMsEkFwoJewYHk52GzAB566KFnWlpajlX3sVo+O5aAHceImenPHu8f8uo+Xn31jeRg9v5aYJDRgdcQA2J8R4u/TPXiuqR/twW9gAN1Jy+LAiiG/aw2fvFzO0pAxCwyw/ylwH6SqvvQxpRdONLrr34YYcGfpg/jPIllxq32iYi8W9Ewe05+hljsaD4EFgXw6KOPHlfdR3RwokpABAkwCvelcQQ+zVdRdR+KeyiuSizKR5F2fn71i8dHAjj/UA0wxBgbUBsDElxWQA4YGMDrY/2zAuxYvSJrX/rh1VEe1wpgzZo1f5vJZH5idxB2LQErs8jM9A9jdR9afLNbdk757OdXn/qmTU+KLZFIFL48O3NxZA6OcTqd498rwIJ0rGCoJ9CbBbLDuGFsN/5btT8ZmGTBgeQg1/M2EBNdK4BysJ+d1bWyBMohAWamf8Hxxw37cVf3MUjzRRumoaHBDvtM29LGI97SxvPqR8Kby+UKad3LmbJX9dRiQ1eab1g1VUDS5TzzOaBr5Op1YhivT/AnZ4AMONAouMuVAnjggQfuXLx4sa00X+VWu5wSKIcEGIX7Uj9S0nyFqLoPhfK6vYthtTtJUKkfKqdOMQR2Aog68jEsOdjEfFuQrAAXDsbuIWA4f2zaSxv68aN6f24LcvoB6GhZXPJen6BjBUCOv3POOadsdR8r4TF6Xk4JGDHE7KZf2Kv70KZymg9R5lffyJx3ss76Oz/ur8aajjo3JEa/m6oC0g6tgGwW6C25el2Vx+YTOtEUe18p8A22PCUuOJDkweznWAHYhf3sMM1MCZQqgHKmPzvs53F1H1o0I41txUfur76oOW81rnLP57c3AANcDjzKGVAFxOwqgWGgKwsY7fO6Qbze2ONmio7etfJ7iRAlf1K59OeOFACl+VqyZIlldR+RAZq1MVICpUiAmeOvUqr72HEGcnz13Zjzbtb6qaEk/v4Qj8+jMA4n6cP6s8CgeeKVn084gkUJ79OyuT0G9Pf3Ix43PxI5UgCPPPLI7nnz5k1xs+gi75YqgeIkoWbhvkQ38LCfYHUf0WOA068+tzkvsqZmbeYfqQN6GSME62JAXNCqyGeBLousS6lBvJDaV0BnZPtVinnkBg40O/cX07etAO69996rly5dKlzdx41Q0LvFSkBPE25204/aS0nzxVzdhyvNl92vvhfmvNP1LsCChxqZHYKC9QRGYD+rsX+x8Qj+Z6q/AGnSxhwzZkwhoEbmzykcKHqd2/boX3zxxd4TTzyRMYLDmn26EtAtADPTnyixp/nyAPYrxwEzSNDqq++XOW+9muYtfIEFh7NAt2DOxfgwnmk6NMohSButsbFxFLbuhgel7zqBA0W+/Ho/thQAN+xnh1G6EqBoNrMzjRTYb85ZfGW9HVT3KXUGlhbh0HkYJHPezroWty3Agm1jgBxDMI9OuGw9gWGgOzcK9rMa+5K6XqwxKDOuy2VdHSOiMTIYkShYfdzFYb5Wc6HnwgrAaby/yCBE25ASKK5AM0p4hnJYRLf9hhgdNQGp7qM7A4tTdAXZnBddT6N2vxpI4ZvtjIlDkjGgxsQXMJQF+gS//sc+mXmsaz6EaVXm75FVwHk8oHUXDQ/X94joGggrAJmwX7nB0oanrxtFllGgiRk89tW3DuDXOw6Iztu6XToFzD7bup1oi6ocXqzf66giLUXx0VlT54GdYBvR4QWpHTssaFhmfCTizwm8Xz2ArQ3WEYI6jOfWaSgaD2Dl8TdaYyEFQLDfpZde6ri6j13hIgGnyRADS00q+vJRiGnxr7VvEJc99abdbsq3P3U+UN/IRvNfTujFJamsI3okAKQA6J9bYXI0AI9feiWXwF8d5OM9jNKHWcB+VlP+flMHLk6IVRWijxbJNH3FnToNreBAUadf6byEFMDvf//7g7NmzRpvxRS3z+kL19bWVnCqmP2MnGJzXtoN7Dvitvv3329sAKYv4KOXzmL7eGdZZkgR6lc3aUB01uS6J8A3QX5K7LBgbRWg34cQgf2sppQYwtYm+0lEyYE9duxY24qgHBzodPPTFC0VgGzYjzQbxfKTY89J5NuGwz343PM7rZbL3nPmNF+/m9iF6XEntiaOxdmT4Ogbn855lW4NyLknMAILCsJ+VkKjw4JW7Yye6+nuRS06MzjQidlfPB5LBSDj7F96rnfCQP2dOS/sBA4xhmkyV/dB/RC2Nzm7TKJfsqG50v9Lj0OVbg0s7arFoR7G24KUPiyRB3qcKePj5DQ+jK3N7pKI6rEcpNzLHQ+M4EC7Hn+jfeaZAtDP9RwJL+hqcHNzc2E+rArgpMnAyVOBmpQbnTTqXSpDbQQbWXVA/CKzr/hn5PyrZGvgxt2deOBdRuXeNBYYP8k43t9qQYyeMyiAYrJWx4NSOJA+AG6veVsqALdHAJFzvV3e05GBYBb6/eZAF679j1a7JI5vH08A888GYlVAfUrgcCTYZWwYT9V3YFLMHtxESq4U+inn/a80a6BzKIcLN75dSMzB8qP1nbeQNXegWUyA2/Hqfp/S26DFcKCdYJ/i8egBYmRt0PHbUgHQy3aTfhBhEmA60zs519tlIIsVMH0m0HjC0a6rY0C1YBy5wGA/lBrAbWnx9FJGX3/qhs6BuuIz6lYPlnLqaRaYimdNrnunDev+6M68HjXYKVOBsZP5xs/89TcaWGnIsQ4HWjn9Sje57lQ3QhKEFIAIDEhCSxqKOped1LKUWVuP9OMvnn3L+eKmqo/m9y/+1SYAqkHH9LuvrhNnCSaZpDsPRhFlxY7AcsMKuzXQ2j+Ej2x4m4nzAArru5AnXdjIqL7e2ImPpwb4xmhBiTY9WYSk5MlhbmeTlyMtpACIQGm9P/ob57neLidLfQmXvLoHe961D8sU+j39TCBZEsJJBgCjLwCJIWyvtQ4eIS1dLoGDaBAQmZGkRMJoDczfugfYL24xWcrOafOAGsb8g6lBbG3ssOyWu0Ehj38sxnrvQFgBFIcCyzjX22VWaUAQZQA6/+k37YcCU7APBf0Y/ZhLT91c04WPJst/Nci/Ua48l6gC0KcTNmtgY3svvvjibrviYN6+3Po67GXd2LayocAOyZq+RmtIST30jwM5h51miyrtRFgB0IsPPPDAT+fNm3elF+d6KyYa5c93FA58xrnm2WMoj0Itr0PwD/XtqDdJL6U7f8rN3QgOtOJVmKyB+c/vAo70W01J/Pl8uszFl2dgXE0fnqxjtE7KzESHCIub6NYhlxKwpQBoIM8++2zvhAkTPL0OLL7awBwKCe4TC9HElGnA2EnlyaergJTd9FLmJK9K9+FLKWNoi0w8K1hH1A9gNIKgWwPfb23HXdv321nu8m3HnwhMPpWPXiyPZ8a2eZIfkCxBChIqtvhKr4BzKAHbCuCuu+66+sILL/QsIUi51TO6GCQMC+qwn1UeefID1iZRiCdn+j3VcPg4WLA46MeqG7vHgGJ6QbUGpMB+BOtara8Vs4ue/3l9N76adhbSLdoNefop65CRx56OvaXOYbdKwJFU/+53v9s7ffr0k0QnJatdcTxAcR9CsOCsOUDtWLGhpWJAmg8WXJAcxK9qRt9d8EoB6BMOmjXwP3YcwPO7Douth0irkMF+9DHTI/vMpkfybnQt2I0ScKQAbr/99iVLly717HagGUPMsuVY3g6sqQMozZedn0RY0Cjop9zQCAHhgFqDYg3Igf1KYF07a23Q1s7tP7tdkRyTX83KsiM5MXP+OVUCjhQATfDBBx985owzzhCuBmyXKW7bf/aNfdj8jkkgybwWIFFrrwtyA5BDkOsXz2J7XUdh0UtDfq26oC9BuRuTVu+XPvfbGpj/H7uBw4ym9dwzgRRjZh7B+/92+U5Wn14qTeTd0rJepe84UQKOFcCaNWsKhUHGjBnD5yET4YJgG1NYcOx4YMppglRKmjHDgl+r6UamZ5/trzmZilbOQrsT9MsaiCLsRwqXzvjFNfpE1ksk249dJeBYAdCAf/7zn995zjnnsJUGE2FCaZtydfT+edch3Pn63vdfKcSDL3JQNGKEBHGL+Z7A5uR+1Nu8J0CjsTIXnfCS3vHaGphP8f59jAU4zzgnsPH+pLjpK27nq1+8jiIKgNrbUQKuFAB19uSTT7ZPnjx5dIoep9Ln4D0zR6BOahQsKAL7WY2B+Z7AJxI9+GrcflQZlx/AaLpeWQPs8f4nTAImTrNaQfHnjLCfXXPfaJDlIkSdHgdcKwC/YUGrElrHEoYU4sEXieRAsRaQel5Y8NHqfZgIe8lMuf0ARpOWaQ2EAfZzk/BD52dxFJ+1YJm3sLP5dSoiloBrBUCdaZr21qxZsxgjLtyw6vh3CynDGiaJw35W3XPfE4gPYFvC3s03EqxyIcNWUxB9TpaGVbIKUVrF7Za/vg97/2Tf8jHtq/g2p5MBlb7jMOWXTkY398uV5bIzTKMYAJH3rZQAiwIgh+CSJUt2ptNpFnoiEytuY2UFFGDBQ8wpDZlhwbtTbVgUs3e7TJYfwIj/JEiiqamt1m9b1wA+9RxjGjcnsK7FIN3AfkZRfFY8sXpOEaBOod9ySoBtw/oJCxplCi5l6Be60ni6kxPGA1DHSC+WxbaUvTBYWlgv72VwWQPssJ8TWLfcjqvpx9Y6+0lm9VBuqwy+Vpvd6Hm5GAAReuR8NEomy6YAaBBbtmwZ8gMWNLoYVMqU9nwMi/fW89Weow7ScSBlXnlVZGGK2/xTshOfrOoWfs0qQYgwIZsN3VgD6w5247qX/2SzxzLNm8cBp8zmoxezLvxR2plIFJ/bARLa5fbIRxZjaRJSVgVw991337R48eL/7Xayst7/cV8Stx5ivMfkMyzolR/AaD2cWAMFxx/d9mOF/crc5nQgSHbTfIlG8TkYyqhXRCFAq35KlQCrAqDO/YYFrRiB6eDaAAAPe0lEQVQw50AdMMj31eZOH3ZpvBe3JMQTm3jpB3DrG2CH/STE+5cW/zSTp3KXdqxk0MlzLgVAfRcrAXYF8JOf/OQTF1100QNOJunmHat4AJ32k4MJXHXAZhiw1cDqkkCcj5VrUwcxKyZ2pdlrP4BTa6AQ7795J1+STwlpvkRgP6dRfFYiZPXcCQxYjqauBPiktqi3tWvXvjJ//vwWq0lxPi9OFW5Fd05HDdDNd7sPPsKCbvIDWPHJ7vNyvgF22G/WbKB2nN0hmrcXSPPFEczjdMDcCkC3BKQoAL9hQSsm78zFcPl+ZodgbRxI8B0tbksdxtKYdUERJxmCrPjj5rmRbyAM8f4/a25Hi0nSVj83Pq1FaSIQN+tT+q4UBUCd3H///b9ZtGjRas7BctKqJFjQbz+AlW8grLAfVxSfW7l1GgQk0q80BUCdew0L2qk6VIAFyQrIMrKAOX3Y5xNd+ELcGo8OogKg9af1+HV3Hv/8n0UXskSkslwbD9J8cUfxuZ2yWSIQt3TpfUbpP344Xt8TEAkIKh4lOyzInT4sNoxHUwcs7wkEyQ9QzN/O7DCWbt7F5/hze5vTYMeUwn4yovjcblS3QUDl+peqAKhjL2FBq5BgI0bMaasF+hlTGjDfFhSBBYPmB9D5/I1dh/Hw2wFO81WVw9axhwrDlRnF51YBWFUCckNfugIISvowMya9nI3jk/sYs8dQRz7cEwjaMWB3/xBWbWao2agvnFH1JjeSD+DG5B5cVotCtZ0g/zhjAErnKV0BUIde3hNwZAVUACwYNAXQ8p/7gAPiYc2WG1BCdZ/N8T2FMltB410pL0KvALyEBUUDgoqZLOWeAHP6sG8n27GyyjxvXpCOAc929OFLL+2x3NPCDSRU91nbuB+Tc/2FTLxeXqgSnnNRQxkxADp5TywA6syr9GHlUoSVYz47LFiVB+qq+dyssSw2Jw+apg8LkiOw5cV3gS57V5vLbgwJ1X202NGbl4RUGBVidbJRZb1TEQqAmBP4qkL7GnhhQWaHoBUsGART9t59Xfje6/auNZfdOBJgv99Wt6K5qPBzkAuoyowBIL57ZgFQZ17DgnY1spR7Ah6mD/NbAUiB/Zir+3ys9gj+V6x91LmfrKcxYxirB9sVvDLt3SQCERmGpwqABuRF+jCnxwAaHzssyHxPYF5VP+5PHoWuSn9++wE+/8dDeGG3+E1GSwGVkObruZSxbyKoVoDMGADPLQDqkGDB8847b6PM9GFOHIG6MBbuCextsJRNWw08ggX99AOEAfb7TvVeLIsb+yYoY47bhBu2ZEKwccUpAJq3bFjQrWf34s409nYxpvtK5IFavhLVqBrCtuSB40RIRsEQQTlFy8t7gHbry0ui9MBd3SfVj+eT+00hP0qF7jTnnvCcHDTM5XKGhUIdkDJ8xfMjAI0i6FWFpMCCzOnDzGBBP/wAYYD97qt+F9Pj5VOvB/EYIDMGwJcjgK6GZMOCdi4GGanGb/VU4/52xq92LA/Uc8KCwzCqKiSzYIjZV6fluVbmNF+81X3OSnbgh0nrFOQUcmtWfJPri2uXjkwI0FcFQJ3LvCdg92KQ0cIEPX2YUVUhLwqGFPPqB+924O437dU0KLsJuNN8xfJ4tPZPaMyLFV4JmhVQ0QpAZvowkUzBVto4jLCgl36AMMB+n0kdxN8meqyW+thzkhuu+gfCnZo0pLFwF4Et7coXH0DxILyABd0sxJzDtUAv421B9jLjx1cV8soPcOkbB9D2nnW+AmH+z5wN1DGm+Yr34blqe0FJdOYOSmiw7CAg348AukPQz6pCVsIZRljQi0Shr3YP4q+37LZin/hzCdV9/m/NfnxAIK1a6SCDogRkJgLR5+y7BUADkQULuokHKBYKKfcEyCHI9SupKuRFwRB22O/0M4Ek47XsRBeeSxkHTFmxPSj3A2THAATCAtAXQ0b6MDuZgssJhRRYkPmeQHFVIdkFQ7S2Hnx9G2OaL/bqPsP4ZXovpsaGrPa66fMgOANlJgIJlAVAg4leVSG5sKBMPwAr7FdI87UQiPGlaW+JH8aPqt35JoIACcqOAQiUBUCDkQkLOv4UFL3Ifk+Agg3TfBGHxenDZPkBgp/mK4sncjsKnny3X3G377uVucgpABnpw9xcDCpdQCmwoKSqQjL8AIV4/y3v8iX5lFDd55rq/ViR7QDF9jc2Nrrag36HB8uOAQicBUAD4q4qxBEQpEsRmdVz25LAAGNpMe57AvGjsKAMP0DwYb9+bE7tBVk/9KMvqJtkH35fEIqkAuBOH+b2YlDxJ4ScigfS9fjo4bFAnhFAkVRViNMPEIZ4/3+teQ9nYOCYAqC1S6VSro4Cfh0DvIgBCKQFQIP67ne/u2b+/PlXzZgxw5UJx/kybSb9y3JVbx029TBaAdzpw0asAE4FwH7254b9kt3YnDhYWHJ9nfT/NzQ4v97tV7KQSCsAWrhMJrMVwJmcm5iTlvaZm4CGsYwkB4HGeh56rduRufdmHlojVLTpLcBUpuUYMxaYNodvfIN9WH73tUj3M15H5hudTumefD7/M36yzikmEoldjHas84EYvbly5cplsVjsaV6qfNS2zGzBgY98gY9gdhBoqgOq3C/JqY//EqdveZxvbABam07Cqy2XuadJsN/sFiDJh35g44PIvPKk+7FJohCLxb758MMP3yCJvCuy7qXNVfflX85kMusAfFRiF65Ia1f8IzD5NFc0Rr082A2Md2lVdLYhc9s1fGMqoqQt/DAw5kR3tLmTfHYdRuan17obk9y3WzVNmya3C+fUA60AVq9ePS2Xy+10Pj25b+6dMAV/+OR1vJ24TB92wb03Y1zrdt4xjVDrrKnHxvM+7py2hOo+s3/9PZz27g7nY5L/5sc0TaMPWSB/gVYAxLFVq1bdkM/nrw8k9yjJ6Yc+DcxdzDe8/i7gBIc34iSc/Usnps08Fzh5rrP5njwNGDfJ2btGb+15E5m1t/DR46e0QdO0Zfxk+SgGXgGsXr26KZvN7orFYoHM29yfrsETV94EpGr4ViUxDNSmbdNb/sNrkO5gTM5hMIKBRAqPn38FkLAZuiuhus+Su7+G5iNy52t7EYpeyOVyCx955BFyZgf2F3gFQJzLZDKfpusCQeWitvAS4AN/zje83NBRh6CN1WneuA5LNjzEN4YylLQppwOnnmOvrxlzeFGTrU8hs+Hf7I3B29b3aJpGchvonw0R83cemUzmGQBL/R2Fee++woIDvbj8tmuQ6DevHcjNN+2cVUBdsxjZsScAU2aKtRVpFXDYL5/PdyYSiWnr1q2zTkQoMl+JbUKjAIIOC745ZTZ2/NlXeJdKsKrQPO0uzNi6ibdvC2rCsGAB9qO7/oz5D574GTL/9byn87XZ2T9omnarzXd8aR4aBTByFKBAir/xhVMCnbLDgkO9wLim8j0f2I3M7f74SLUFHwTGTSk/vgkTgUnTBbgn2KTtXWTuu1GwsS/NAg37lXIkVAqAYMFsNrs1qA7B9sbx2HTlt3mlzgIWlAn7WU3EEhaMIOyXz+cvXr9+PR1XQ/ELlQIgjgYeFlycAc5dybf4g33AeBMA5NXNyDx0J19fDiiVDRGeOgtomuCAqskr72xDRvsRHz1+SoGH/UJtAdDgCRbM5XIErUzlXz/3FD2DBQd6sfyO66XDflYcMYUFuWG/wT4sue/GQMN+8Xh8+rp163ZZ8SxIz0NnAYz4AlYD+E2QGFk8Fu30xcByRgQoOwQ0j4YFvYT9rPj8wsSZODj7wtHNTlsA1Di/hXdcny+uR+Z5zWoovj3P5/M/WL9+/dW+DcBhx6FUACNKINiw4KeuA8ZbOMjsLFquB2gegd0623D5Hdd7CvtZDXXUPQEJ8f7L7/9WYG/7hQn2C/0RQJ/AihUrWuLx+CtWgunXc5mwoB+wnxUfj8GC0YT9rtQ0LVBXfa3WS38eWgtgxAoINizIfU9gsBfo2cd+119UWKzaFe4JnH0pcCKjeyb4jr9tmqa1WPEmqM9DrQCCfk+AFr1gCZzMdGU4l8Xlr24IlOlfKtjamRcDtUyJTehqc7ADfhA22K9ijgD6RIIOCwZV86txsXDgIU3TyCEd2l+oLQCd65lMhqAXRrsztOupBu4hB8II+1WcBUATCvo9AQ9lUnXlEQeCnObLDgsqwgIYcQgGGha0syiqbeA50BqPx1vCcNvPipMVowCCnj7MaiHU81BxILSwX0UeAfRJrVy58tZYLPblUImSGmzYOBC6eP9yDK4YC4AmGQZYMGzSrsY7mgNhh/0q2gIY8QVQPPb3leAqDkjgQCjSfNmZd0VZAPrEg15VyM4CqbbB4MBIvD85/kJ128+KexWpABQsaLXs6rldDlQK7FfxR4AiKyDQVYXsCqBq7ysHQpXmyw6nKtICGHEIBrqqkJ1FUm1950Cgq/u44U7FKgBiiron4EY01LsjHKgo2C8yR4ARKyDQVYXUFgs+B8JQ3ccNFyvaAiDGBL2qkJvFU+/K5UBY03zZ4UrFK4ARJaDuCdiRCtWW7vmHprqPm+WKhAJQsKAbEYnsu6Gp7uNmhSKhAEasgECnD3OziOpddg5ULOwXKSdg8WSDXlWIXYQVQcccqLR4/3KMiIwFoGBBx/shai9WNOwXWQtAhwWDXFUoajstiPOthDRfdvgaKQtgxBcQ6KpCdhZPteXlQKXG+6sjQAkHMpmMggV5907oqUUF9ov0EUCffNCrCoV+N4VzAhWT5ssO+yN3BNCZk8lkFCxoR1Iqu22oq/u4WZrIKgCVPsyN2FTWu1GC/dQRoIgDmUxGpQ+rrL3sZDahr+7jZNL6O5G1AIqOAqqqkBsJCvG7lZrmy86SRF4BqHsCdsSlstpGEfZTRwADGVawYGVtbMHZVEx1H8H5GjaLvAVAXFFVhdyIUGjfjSTspywAE3lVVYVCu5GdDDxS8f7lGKQsgBHuKFjQyT4K5ztRhv2UBVBGZkciBG8FsDScoq1GbcGBVgBXa5pGKePVD4CyAJQYKA5EmANKAUR48dXUFQeUAlAyoDgQYQ4oBRDhxVdTVxxQCkDJgOJAhDmgFECEF19NXXFAKQAlA4oDEeaAUgARXnw1dcUBpQCUDCgORJgDSgFEePHV1BUHlAJQMqA4EGEOKAUQ4cVXU1ccUApAyYDiQIQ5oBRAhBdfTV1xQCkAJQOKAxHmgFIAEV58NXXFAaUAlAwoDkSYA0oBRHjx1dQVB5QCUDKgOBBhDigFEOHFV1NXHFAKQMmA4kCEOaAUQIQXX01dcUApACUDigMR5oBSABFefDV1xYH/D7QmYuzyFqnGAAAAAElFTkSuQmCC", - "created": 1691632494153, - "lastRetrieved": 1691632494153 - }, - "350522d68e4522431ae506d3d64ce50ff6ac2925": { - "mimeType": "image/png", - "id": "350522d68e4522431ae506d3d64ce50ff6ac2925", - "dataURL": "data:image/png;base64,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", - "created": 1691632695315, - "lastRetrieved": 1691632695315 - } - } -} \ No newline at end of file diff --git a/docs/images/overview.png b/docs/images/overview.png index b9b4c6ca562ce00bbe724158b2c55e44c445d958..91a3dcfecea575e83796de17c7cc05a3d239e4df 100644 GIT binary patch literal 195653 zcmeFZXHZm46gD_!1PLZk5D*X$6p)+*bjTUW83iQgG-OZ-B1ss6WRT2|VaQP=CkaE& znSlYx8MX)CufD4NYJcq3)^63--m=~r?o9XX+kN_+=XuWQH$Xv793Phy7XpFcOG=0+ zLLj&PKp;21;amlGSpJwsK_Ix&rozGs_KM=rr;?(=T&%oYTuf}ttPqGqK!TF7veGKC zz`@imRQjuTgtWEdL!76I&_Hix)1UXkAt^qO?!8(6n$__2C-vutk001J^xgelME%Y8 zZPCFM7o6wwGtaq{rwFG=JxZ2pxvlpLYWI1K6E@>L1R-MY3q@jmbFLUlJ>32Zp?uB7 zOhFI3hO7Ma(>3omKbY_Wc0;d1W=^*Lu7ht6uU?<&wtNGDSdCowo8>w6QXuJAz=b@! z1IY;dJqm@S5kc7O9i zF3VB1<@gM;5hXA4;o%$dUQurS7yd&(Z{guKv$oue=t_aBcO^9~_1F_*XqDPST zKZ)>^uHfuL8orB*{)OPMUwIxBQQ+LKrcKqO1cCf5HVj-0k5Im0MOFHnTwABoIhluB zI9FlB=eE!4)k>V@j~_d(_cue}?AIXPVooC7ggpoIy!;h>{Np@heD27s3)0iTufc&A z(Lx2ku3Ulm4D5-Xl+@&sLN*>j%C-WdO39Ny;(HIBvBb7hKu}QcC4^pg(=3=9Wnbu$ zk#TffocW8pc$U7|dV5Dnx4o|D?UgKoZ>NX9oP2}d=(ux(;_l2Byb`wJ2)ox>bVT25 z&-847$M}td=Y%~<;I9NO@%kV^C!wKKZUQKdDJ0L316A-!ptvyRTQq% z7Tzs`K3woGxyod7wddE3imSsj#IL<|A9*jo!nJxT>9QWsE5AN z{1P>y@|1XW@6&Ip00~@b(TFxhLr%rd5i}}ox@inmA#xJx`1C@9|gs$u2PE%x6Q zub5k!pheCvAHxkgi}Z7^A{t4HxN`4Tf7;Wh8F9NB&_F$No$NC|)%RD?PoKS{en}s3 zF9+uqPPY%iFMKHFhlsy1ZO_p6@&c?x1X-hgK)Yy(@4ooz_}k$3&Tp;XSLVp>1^lLp zfon^AO5;%^HNBl3Q3@Xv;S)wv?ZI2x42!u&W7ppj(Bie>+TC^GKO#EfIO22hJ`I6p zK2mtXa310OEkf~4cJh<7_@CODcNAN)&6JgL$T%Yye==u8y))0Y97GIWLG#Ea7|HD< zi}v-KAWR}l#l~F5gvVa+C0L2T()|Z$cO!SDjz1iWx>BAA2!Hv|Ji~hLkyOjg7SEQ) zEdnhs=-{R;yZSBc54-TYT$gy443_vGMt#e})e}uChNf$#Yb;iE;Hl)~WapHlucF*h zxTw?|H5Ku}EHfjs*PNfm?2u;2c{A8x%b*6D0G)!4L8qf{p;)pBO}}$?ah!69kouCI zaP*k&mb{8$4Q#zvtXg8Gv8-{;;@)_Cw{d2X^vHBk^=N7=X)HTOD(4Odf>YjX-|kh& zWB=avnF!ku8!LN3nZCF=0nyhV&mvkFhBIqWu{n$Bv_p(TX8l#^dvD2x_Xp&Lr_v^W zo=Ny88>HXQha*a)muq_3l=qbnvVUbaD}~C`76hU-SH)JC`zABT)A=(p3rLdb2gdVZ za@HbAshjCZ8TFzU5$AHul@l2%iEkUy^^G7CG924dvmONI5 zRvg1w4O#6gVXWOh%;PO;nky!q2Y)v_`)!yl`K8@MDTiU01LY8Bnz^dQZeQ}K1Zl)% zB)p`#&q7K5zC&$mbUR%5y37t**Tlg3K zH}fvRU1=IV8jUbK8bYzUfb9UrK-X8p`uTQNZlz`pPzR6Q@ki4?wtq~iSC4!wQk!#_ zduE%rwQ#s{San$B;<;1SLndJ(^<1h#VA|bt>Qoxff!OdRPo;um%KOk>o!ql_P8>1uL(z8etqBPc^g%1D37HrtOwXDlo|DKZ*GQxf&C-Ib)0X{^dbnc`VN zr&#f_aXI4%Zp=?<(-iI0_0E_`rGy=3ZoUJPMAt-)0`nr&++N_VowJ>K9jH3Bc7NTV z&1z1%M`ukmMknN@yyjHhFK5x&Z=WKsydcc|nJ1;Ur}W9=txMw?iWM=AyN9brykBrz zeLx{i@fk~1$&d$T!_mhv+;MU(vtYXJ+`cI5&@RA3QnbBQ@x$t(^^>~nQzL!hZNCk+ zHW z))VJNj7YR9Qr>ZZV3K?dRx`;k=Hd}OoZm9(S}pD5H9|9L53_EVS|Tlp{pOM8!F!T8 zBsT2i*?Cr0CzqL@wlUzjdOmgS?kzsF4tk9cP4UwF4Os+!lm9&eos*t}>LIbXmRi~P zjPNEKb(h1@gMjI2!FvvAXU`8z<_R-|)_Gd^R40NsSga^4B`sGigUvC#f+x;yac<*9 zl$Kr-Ucdf|>`8XRKW3U_;>yd$_Xr6%i8&c9Sagh@@B3m1dzurgNAFJcc?hnYHshU> z^f)>OSiJvvy^Mw*7Z*;4mz&WXC{R>^250G94p6MyZ1D;db<*ph6M_e zYG>W%f61PAzbIdtKvxPJ>`(IFhPiHj+aQ?itT@>A>^a-I^@8#qC9#mAoAQ?Wfo*qh zlo0nG-$CN~4ra~u-qFI_`ofDNq2h}z+vL9tJEqOajqlIC&;JSda4~D%yCgv7%}Qsk|&bNu?`M|UM-veqqrO_+Za)D{Li zpd$McjGy$PcOtm5q^Jm=jLc%hj}QhM#(kiPmgP)*%|g&ARZGiZdE_DFW@~4cWS?)S zAa_w|KgotbF@i^4UJaNq{;L1+2PEg(RoMUdW8J%f{C|Are`<5I1^X?`&{_{ z|NQ@-ng7oi!JE|;K>aGd$QbR+DlLa3R@y8c2j|9Xi${O?HlL=7x`S)dm*qKJ#`Jn} z@`(-sb`Q+tKP}PB3&{sKo_}t)IZJ5BLJDQbQ$@rRE|vXcta`0sBVoZVCe{3M$0*xh z-+*|dO$Ro<$v zKQe^a_BNSB71tm+4^!J67It04)jmlv%EDb(mva6`_gdKDnb9t3)=a&30Ih3!#C2>P zZe!ben*{=Ippf@0J%hjMy0Te&HmP_t_6tZ>8P*@5zD>Qiak!l|*hO5DDt-BdGPb+_ zu8}KXVE;0|&SAL%C-~iTUM((y^=AeD;Pgd8&&TQ+4Y~s4hH*XZ?JFeFpacx@fWoZPr~Gizd51Sp%K~Tz+w05ov%R@@Y_E|*}gSTE7ig2 zn>d3?hwg+h{Wo)=VCKBd+N5I^bN(z%-k*zD$neFgl{rLytohDQhgCgOzp z|GKY@2w?`DOhB1S9R9w3H^4BP!@O%^WRLjHTSa|$$vri=)%1&~$I}wWs=m&?#mna@ zNZ!Q`qVn~_s=}BPQPb+UgW05ciZ0G-p2EbsI=9yAdGOl^BK_ox9(nylnOE0&3Mnod zGBRm)Kp+YMKK!kt{Z3RO2IXzTX1%z!Qg#xoQZX+2ZQCbbhNMiZiGGRZugzEYQZ@g3 z-qGdr0-T?h>|kyyXVz(+_%CgcbT}l+z^j{GJL|VUTHct??((EMU1pvV-@(9?7NS;P zU$&hPz}i}t$WP>~W}tmtLXX{<(g(a-$C#IAEz|5dR91C4HJFK4FZ!(nqT z%GrBbf3w*~@uj`~4SR!e7tC++y>?Fi3meQVJ=DuyWo3IK`u5sN1Aa=+ZM^wSPEF~( z-h=+%DO-LGE%{-lberATllI+5_NPBfcV2U5x7bB?ssGJpGMywaEM;DFxg1-?_~l|& zYIg)5E_5i#`!d~8q+fQ+`LZ1FMx`Tkm~!aHYw6daqHVBr*hJ)1(Qb6q?KOcbasG$a zEQb-JIqDIw>;_U6(+u3nHNVf5?gY9mXDbQa6s*=`RZo~eok%pE4LeX# z>bWpVky#zQ!0KEOh3-F!HzD3q9n=di!u_;|{bg{Dq#4*3Jv!tgtqwYGWGUfoypA1p zZwzL=8Q8J$Z(AfEQ(@;&k^e^@U;E63;fi%)$II~^Jl;L2*MC$}_Ed~`+V^fE_=eZR zjdqK1HCX3Uk;oubl_{j+@UsK0=>E*ZRP4hc-uPI*5UCTywchk2lM+wo!R$TryW1Gk zgaflNVm?J$_OflB;f{IjYr{WkuGA9!GEvd(^GobBwRxVZ@~tm(rij;QxYE{u-sdGu zWu>^=s($j32Q{Ld+(qEBe`O_rbo#W{R_)6wDK<+#xS zkFk^em=tcDauQdm=l=ZAno>oKp?9EvUfVttPfM{nPm1DwG2^!2$I=`{yts>hK2J&n z>rWoi-5>gJMa%yv+C{NmTm9xC#%zZ4>})SUgYJO;-G6>14t->43xRChBfMU~EIwwX zG`@KJVz#68MgRC&%#A86Pc&W4!}ibxK0#4eUT>^524K@iyRa2)0`Cd`ngG zfV06+CBDn-UOIknd42XcEz3vMcj6j8r=dP>PU*0&>K#8p8`1um+E^!f|1;8LIVSW7 zv#vPa&5gI{h!EY@gvDch-A+!OVBr|1ZdFlMgUi>=+Q+&N8*g2~TT&%*t8eOccIGyP zfDLc<5O0ut<25w>Rp@S7E&G{jW^E+fdhlpUHcV^9+h~Jiku9+KSg*BmjCok^&V>do zdz8AFc__P(c9Oyz0PWz)VRZ#=bOzFNtt`SR?PAE?4PB|rU}h7+S7Zhv+Re(+rV|4{NYOR|q3Hpq zvzw-^X|IRx;XD+PXyX z>%ME1|Gpoa+tD^LCMvL&-qmyRcQ8+lMJ#`mmXX`5`k(jOV8j{*UX-?zeLwP?QZ-tvzec#NN zWwd>CITB6^eVB+zXmD5z#!Dn+=+*14T3|B$br(U5m(w?EzCG2}Xz-$7I$m+nd}zj1Emo)6LIe+0?9|Nnk=^bd=0m(wm%&kbR|+;HAzA(x=y`R`$az0CXLoY^k~YMf|X7R+}-b?RnE zaxSMdYs!S-8sv>54ZNMpof8#RhDY@adX>xT#HYNvDbjphH{{pYVWcOn`rF2C0Cga7aFCUXbs|L&q!TY%hs?< zLYb42q)M51v`jqSgz@hcJZ@&ZHFUX-4UWyYlvo5tX-?6y7>CNx+Zym5b{4aDY zEAieyiN$z(ti>(W%NK6Y!7dv>;XPFb#xw@LL;=~cgv0=i^IncX*-J{C1bo`~s+~|Y z`n$mVrt_pkcj^C}dGsZmL%(F^ZR(@FY+_TMoPOu>6Zp^nS#*1eKN*o6vP&B@^gX&E zA@VY;u`*zpAO4<1r8}8O#AV>~mzv}#Zn5~%w0{iAe}hBiqpiw|hIng<>ekk6j;wa7 z>B9#&R1v7Y#boL>!(YAQ)w-BJa(S_w`C8+bC~rYL=xVYJ9o%IxDnaXjyiEOYZ!aI7 zfDo`}IPOYcL1{S&Irlb11+Vc}{j65|Q7|xCq1`$(lN)~GX43>owv!w%WY(@ccVBoY zPV)Ji5%ODvgRE55Qo|Pe-Y;SL5DL2U==4LQ z?+PM>`8o&`b0G?wDJu3v1YiaD)c^GY%= z<4pjZwpBrM#Re}yxBkPhCzevR8gdm(RgL$l026XrrcR9^_Wqnt|BRg1qY--#f&(Jm z(qjQ(s4+OReMk-!ZA8qosl$0jhQ#Yb0b znb^EHu}Q9uGuH?uAE`B%?!m+-3_@`trDDE^yWYZm>7$skGMs)EbRnQh^E_EU|A)MU z_cTC*9_ydp5maKkd)SQaj*$U8Uz?5ux^l-gu-WWjr*o0bc&~dON3(Xy40%BdNhUQJ z&kZXra$U0mEPQ>v`CH{i#q3#ixw#7KFk{?Y3k{4tVWk#>>DJ?z$T0 z5B+k@mx$e{yWWXri>r5Oa}BeMab!Ktv6LS;zAG>ES_~&FquqTTF$$cl!gFhRLMorB z_v+;y)}p#<*$T=Fi`!wHhIW-*pRln^`Q4=}wztY>ZaQ&T>#N%n;y+l#pIGztmn0h} zcv7VPk|2iw@`UE)GYQS>oInzYLr8;D0IWlyev$UDj5Xw*-Dnoqq z;612zeOLryKysW8&Ty>h9{lElZV$bJ-vWNmUR<1RfMQhn!uR1youHgqBpv$+bXP^z zNVSgi^Qi~fVD=($QzUy6hv8c|EXzH$s%F2Dis)aXq}` zbSvUx5)Ak);jYMQr|v;w1A9Jcz(E~NfDoZf_-_iC$WUvO*_MrGj^?NbP!q@FNq>1| z2U*CB$pPW&3*TSnWthi`|qvN`5fBz>CyM-g*$PX6S3OvD#*jQ$5j+LAKORg zhkOg(*|mW)Q{Dc%7eyhZS04My?CUNDQ4_s_%C-dCW?T2y{`tCqD>|`mGW|nB0oTcT z^t3Ngf+i;!cWynV_90ZeI_z*K>4iqZLokEaUd954HYt(veV73ME_7Yc4w}i$Q}qO5 z^JCVd3acvkAOd$%=f!d&(qm&5=2t&RkNXlK$~TCiGNb|)>Pc2E1K>B>%xlBQCLpz? z`Rk08e(&Gk4eGKFV;!y3jFH(jna*)b#Hn+(jO8j$#{mBg)VK843OIeQs86%~TNY$N zkHBJjbMnL~dC zC+!@M0S_IH6iDuW=a%S8Y?gJ~?Trzk`r%+3xe zbXLi>r0IS(_90Y=M=DRzrK(zVFvo@U7`?+@M+|k}S#khgGEa_0pi7!LdTrMaJiyp! z`OwuRvGxg*&!PFi{&%qY@}a3u9Hk6VE9@*xkSermSCM*#W;Vu1>l&uJco=nT!i4K%#P| zEA=#|=hhcjQjM7<9+!tki!%`F73xoJ*^}&S05Igazq1KEVfO0d{=~eKPzUqjVlf5p zX#eUGI9#q^n9Rx(xsvU_ISyOjJ<9sw(m5QFZ2@mTJz@#O-S=gAmq*(8_Ph@Ib!DXD z>HK)uHAcn>{cG|5GE4NHPjg(gMRzt{SegIb51gm&H9kcAgyj4#=fy<74A~0C ziV?zrbmw(bd8EVi0GvZq$S-986%(78h!el|MLQ~yLDX6$pU2r)N{^geEk9CLLT=Lb zuez()Q2Gyb7D5<Zz!Se(POeC8ybdYCoV$nVYgfR;eHr?*A5gaT?t`i z#oUvi#XSvM=P)0=l9jKY-#T74z;3lPY!{Qu(Hh&e1Si3j%+lh_p00GX7qVs{4*NWc@!PSIMUfY&Md=%FUeDQHCzYbX`oA>>_ zsc>v43kW$oQISkry@)LCPD8e&$_J6KP>i%17=ZO;X^LfibagcmHBUpq1Sd9t-MjR@ zD#C8C$o~D&zzaUljc}r01Cy9YamxLJJ&K8vogU%V(1co>^>trn%UJm*0?If=7bB+G zUin1Sth7wv-{z><^&1k#{LXXhV;DC8C=Q+gw>j#kb4z0Uin76|ODq^v6dO4LwTef< zmMdRA>r$tqoCRR0UY8Ds>zjgOWK)^|*!CF{+!Mo{J4p#A()O$C+LjD~UBi!b&a9hU z^UjF>wpE{+>S|P05_d9Pe13jm8M3*Ao?AkPTh}NyZf1fg-!bn8G&n{{=4eiHA}Svc zszPeRo_h%E;n9|GFf(dezcMKSMAZyVL zFaIZf1>)Vw5USrPO2(n_b>9ydyeO?r_ws;gsAxHj?pIgx5Tg4kRp2+l<5fQd2g^@5 zt{i^4pBX4gxD%zE1z1A*Dd(e#ftuH^(}pmdpRWqK&IWwG=3e`{<3R;|rfC^Qs6W%5 zpGss>lXGn-$3=d6gF9T&Qx8eCjdpa4#D}2b0^#sM0XiyP$IdC?{+_2^dR|Fd)TU}A z%l_g7n&-Xy%CaqhitRrU*xDaZGQWOYu_ipY z>G*3qB%sD_(hS*QSWLhan>${orfJF9Fnls;Oc_w)YPmDjbQIgL5LcVHv)Oh0wUD$w z8sT2^dTj`o>7(zvBJPW~*(x+Ey~wz9`Im-l8q>@e!bBdW<8(a${}`D7UMCnx(@lUb z3!6F~V{V1yPZ#x?u#Gwm;SpLYWJVGF^u!bf_7%B!QQF%&nT=M|RqT;KfwNbma2sju z94Mow&J`0;4{q5r>(#5v$m*)i3ipFcHF2%;5k>!aLVWMh!X~|s#DL*g|9)5Q6Vp_+*0P(a?G{`~wNI2zQ3cxdeQCPn zRKLF*+`%FE%l;^6atx`=V11M>50CUX96Tamio^DMJmMoDF3bX zzu8*Irqms&k?TJ2I8xL|HKbV|M7S+UhRyDHgJ}B>!#NAX-FCd_goHuaHSwU8VVbt- zVaYr*RK@wwnfSWhZAjKst}37h8(Rl=9zgGO4zvrXW!gJB)m7%9bb|u$3I6Ulz~FW1 z#yi6qKK1rN+^-k&lAONh#%xW_YJa1BuWkN!{c0z*x-UcJ4tE*?rp?(q1 z-7A0m3F#9Bn&%DE!)}HbiDhRbsRdR-&N~$C7G?1@HkBY6Lcg+pIl-Ya>WWQ@gjes( zY$cM9@noxjP*A42$6Gn}8Gkfz`=kS(MdkP(Z`9 zsTr<6e1{mWuHw0Md|YZeRA?R-Wmoy~r)sxt(=iEYF3f7ueX~yq5bqagA6(xW(WYZ4 z4noEKwOh)dN~%_M6hI;Fz#0HmCRUPcOgO75rDRVl04V^ryz#n%CoDu2_k-w^7EtDZ zdF0$(nMPU$0#|gKDgw7z;H+xd#E}d}{@nR%bfz0Cy)xs2`{INuj1K{b9a_Z~@6`sd z8weNFX=1eyg~&zpZa=r9gKKRmJv+bnm;tL6F4?}G{eEeXjBx_r^fQR*4>}se4AP05 z&+65qTYKwI?#MyClT|GP(VR;0UT#q@VBg+M_{3s^959Mp%}a ziJ_pb*XwL)2MV;c4KGShgA-mgz^7%H0G9`g7%O;mB^%ZX5a&LnP=d90LAh~ZeNwvx zki>d=Y8Tb?e4!g@ig;8(M({q9?XB(HyDJ3)YXy@Mj1?`hM8CS5d7u56mdulq8+gE1 zE1jq4>vz41k3Zemu$i7#?X-9EgGUv9FS|y8-B{J;-~K%;C^FBmksiwVsa3G}}`B~oRJ(>}? z=H_I=MgarzWAfIRnF0RSc>jGxh6+@H9-y$6dsAe%u?K&8Lrpz|2f2hLOWJ!CLjV! z5G6Y!DQ9XH6U=8JnnR_N<4tE_MKo!p9<7ZANB#R>H91=eF!YW&ccJQeLvRvi5JzZb z;S3nlspP5q^Wu0^PL#Z}a|;vsE~#;gtGk`&qm13+QNXEA3Z>~~s>)j8>lV;IW70%Y zS^wtE63?Wnt&&(PyiL{55#wb!<_WevTP?LR`!Y?zDbltz>q@O5+w2-d^ijZtv`h-O@09bot z6*}q3apXPdARb}&!QeOiak^=K8RlrP8TbBX?=Y;!e)iYO(+4vHK-pdB?#5u5Bm8DH zVbX}pit|*us&tz2a|*Zj5xcY-SioN{7i*ARq<9ty<6T>^GB>_ z=XSWxcxhX;a%^D9fX_SOdrJM(1-jA9yAx?e{RhRCKm)qqUTl>2I>(F!i%^Li?B|K$ zuh9Aws=owm7cg}_>t54?&_85BnamGyq4XHba$a=0)r4;|UmxsqQb^6Ca{9z|FGvy z)&WOZE!;^5V3U04tVcB=di1CvfE`i3-qY2?Ad7F{w;PWP6#%l?%VMPo9uN^Q@%)AYQPkP05&VA2t3^vW30 z5|6=V6P2A8QI-@Kq*3W&ESI1EG1V0)gsF-Qz-|wk<3*ug0anAIa&T?Z(z}R=Nw`n? zgvWCIE8aV`9?_^mXVRQflol-7Xaq?X5U6JT(o@FBspn^S3l7yw;?BnV#sH#evzJb=w1nia#iWYPig#Q8z4#96ML~d)=dZ3xO@|Uect;4gKulju;IfS0P9!7~uhL1^DpMeGI^02YuVR-3VzXT!CPY zy?BVQTQuvuK5zWKVm~gq&FMrsd-Ts(&aAchRaU^*psf{^JkplAKw1MhF;9D+qTGGL66=il}fc)uOLRGUPpkIaQdo3ru(hAwDCCHAd2GTxGXfvZwDBjKUn%a5C zDlOt$B_5?SOLG&&wr8J*!UpvU;DdJ-$n@8Ivab{OHhVpbeL-JyKjxCRlvR?Ss z5&avc@+$z0B0~a8lmMAa!{CW#wtMA{o^IIBGNu>56LFq8>ybm>@*~XB;|KlKo~|Ac zcXn@Z0C2?bj@Aad+=pl?@kpyl+K_E@5NwHV-MM>kFTFkal%`^P>zgZy6dNwa#V4-Q z@ljSkSX#o0_B5M@g(lnWf;e)-HjjOlhj zs#*3@R~T#ulmlD}VIbq0Y?n<=%I2|s4G0a;uU+f$9xkqB3-IuKjd}yU#xvJ1DF99b zk_NDdM|EilCc0h3#yhE0XRs=}$rWZf^c0E%n8R6xiSN|=mkuLb zZGKW=+S>>cVmBs9`GBh)Kc}HNId}k_;LegaQJ7hkeh2WUaA3xsx&Lh{J4Ze({X{h& zTBOukJ7xA68iM6T{t0AOFWP8}*#YQnciYB#xTa`SpVwhKS2KNMpfXRneYCSLK-A$E z!{GURrugm}h}*iZ3n}EcLeoDQ4&m%>PFChM>nC7ySR*_zwP z-{UpQRkPrlv_9X7L;t0k-+TmRat&L+kmIc7LsSpOr`JN0s+CVa0qC(6D?30R+F9;3 zkoYBdZOH1;U1pz^!77c+q3&(LljYcM*Dr4$5UniJz$Yj2?>+!q0e?+SE36RS+qyROwsuDlm8moi1{{cDY+eHh z&GjhEf4jDyO$YCvS;GjJK0=hK0Vx1-tMss?%UK|$l*~9S$Jf{udIa=`c5&-Nq7 z50=mlE(i4K8NJ6IM~!e}>-s^wJ~g3>qk}fYMRx>91&hliT^zRRamHwT& ztR_f$6?-1ngQX$vO=Unv!=bW6R`q(GTXxnpxoAxQV0&I?*HmX9TJ~R>>dg(fMxbs7 zVS~;J&=+;&C31e4^YZhyTPk&ctmIzvsfe8-;-Ot75!CpP*30rcO3xSM7?DK3fKU-v zm9NbB%l!I@vy1x6A)kdovUY~%(=H{(2WF8uzl(Q#4}m@j6cnS9BQZs@x=ah-$K7;V z)=y$&K&*4Ly=k91$ojQx19kDp!qs zIc}YahUFy8dG#2Sj{dY^k?|-5BBiK+8w1@w$O615rl>~T*Q5ag)wG^ZN5;qbWBHK! zVURw29y+)iG+ck$*Qb)a?YfiQ4)`o60|ga-7?A02_~78`v3iSS?7EmfmzG_(?=5#a zI4>htenj-Em~Og~%3WGX;8jIsO<77`AvnDZty8%l0XF`w3mGJ))U|h5tcs)T{nTqZ z?98pqbnNdQi&yRf&~qZbNTuJ|Ke&(0ZGgltAbbgbNFQsAM(1mnc$@w@?eG3s z#qS%Q!_EK09NkI%%k22XnJg${gzPrZvOkk3GCl-arbq4Ty_*K$N$v-a>ZTF_%!PjS ziBKLlJ_78r4y0{xKt4!S4(M}j(`vE8Kut(f&5j#HSRyr9^eUqg5Xc0^XMgIAzSk?J z$Vf=ml13~1HSqL>QruM?7#<&Z|4JvIIxI2FYxGf!jL-0$+uH}6aoxlB!|#VHb#8}% zdHPqAs$80d7~aXC2(S2U=>NcggfRG#a@T?fBn$od>}<;2te9wS!MC&BG}cpRO!@>y z&R1u$Cq^Yw?!>f7J~)mV)flrzemiTGKPxgSX>=|j*T($$F5VLI_h73mVF!fkqZdPq z!Gms&7WP1X0vWb4f!1Cf?NYPU2dQ{e8>{2BAXfnW`nY6CuR82G#sXB9{q7U?C6XSt zo&*k%Xs*weMi`syvyaNB@ala7)O{)u0L0AoPTzBB0UZz!S4H|#KMW(tX6~rv2KTUw zr+5Um82IlW*w`a6ysk^XtY2L8p{;tNvhF_kyE1Z@>eG4I6|g!ax$0UOj`P6J=g?xQ zI^$ReQ#Et*Z)|e-O$=wYmN;r@4NW z+<4O3(w6QdiIFSeY*%q3-$}z^Q9-n?9Fyer>yYiwrt5!14>~CUOT_4^RU)P)SVU5xg%B$)N(N zWyAnhXV*uP250yzD1+3<$;~}t=z@u3eZD$u->$TveECb$Ev|gEYQXFPFBPP8Ne2nn z2-^#!X={tlEg%*agjj;NWHoMQTrCBzKyl29BR0x<#7PkSEi|)L;LLR}Plf$YuQ3Sl z^#v0OA!d=d&7ia$t~da!D82V)%bisk6}x@At{f(QS-KsNLE|ekL#L?*Q;fI`ZFYiR zSA4kULv%CMc6Ry#@Z0u*Cd;lFL4f&kNhrq3H0GN!dr-Ky!~6GTs|oW*Ds(QXB{`7Z zCq9}32_2L>VAC|(e)}8fWelwkPQl%YA{C|ab1H%AF6{~qG}>`BMKQ(Md2j|q=h2(H z=#iyF!Aaw@I&HMvK(bukiU00H=(><+m1vV|8O06T0O0XHfvnYisB>lY8Pe3hR4?Vb z{3C(iP2DK7ht{5){MNKc=x09U`6l#>n`2Dn`v8Z?E0g?E!FU$UcvPSW1(eApYZhxZ zbMKtjkS4t!AIOosMvv6QDYDz?0Yny$3c!)&mpXgR=DqEPKP^kd00$j8u7LsGj2Hj{ zX6;!+ABgIse3=L9e>BI`i>*2VJMke3U@%ql)H&`8lm~bdt8J}T<&|x4q#uB6*bDB> zQUM2;qv>eYCn9Q^7bmUFFVYB2mJ8I^)^kHDiR(dDf=UGL>X;_SM&?A${aQwS4DxBH#(Be9%?f=IODPS|Ce_!5P#LJKHuSP=I+UDR>Vjt-Zn$$+>IlnJkA5KUP;)JdeZ`qAbXy zq}Z8)**hFx3_Xq_J(mKNNOg}qIDs05J28$lIXze+SA_OgY;=DI;^_*A0#j1k8JJ56 z9NToGOKA`ct6R@f||!dud;)2V%dQ zY|fBY>z}F7|-o zR`6ez#`dB8{D~(jKTglOy8$Miv^T!3ose(kyn?4hq5OP->WU{I#UN4u*&Lu-EPAZk zBxVi_2?mMJSUw}?K(Rf*yhw-hJODAN$sB{N4+8pFD>YnW zotyDs&fyrwb(Y`Mx}#!8yU|kcVu&^^jVoWvt>cH=gpQ7TtpGpLtZe7cmR?lu18B{w zy|>vO-7vi9j0|HONLGf$TJ#uL=k(yh@5!I%QD%|YgrOI&aUYNZ0kV58It2hs>aAU~ z(ZVSbdlIde#M#}^C^OXRo(o~`>49CpH&@HB%5n$KXrnniDqPPMbAuB;<=|xR z&%FS;Q~976jn1nU&Z*8o?)7DKCrF+P>VhPkB`U2kQ;2DhtmE~4kf2TGyDS3?KXw}k z(N2)Vx$C&+x{Is;MAU}}6n20a1LRoB0Gl!(Cj(OI>Rx@p*q=qsowHUsb1Ta|&!Y~c z-i2n;=0Y_AWi<8nK2xkna|>@aiis3O0>zen)IExUrGc`r+QZG=AQ`IPqn)f?`IFC> zGKK;3PVnCr-+?I9j?(#!FPv9rGy`=#e_EpJz(Q=O+xir=@76sn_m49NIWSFb(?2yI z1Y%?c@d*KMnFACP9QpxysTi3h%xvO;v9ot*d1+XThxDJ#czVNwGuXr6&uLyF7Ivj$ zP{MbN56YNXH7-0wO*i}CVHaGiB_Qz1z3=To^=Q>C^*YAIac7O^NS>(%leH~w$G*LS ziRGSh+f{zI2Qc&m{-uL70p)V;40L6`KY&z08D=-=rKxa=0uB}Q>S?-vm|Fg5i=pAi zixPXU#vP#GFjVXSNlJsa5^yijnQoP*G@@lMJ@J)WNPMZfmFX`x0V+wUaoSAgiJ``(W*2cWCS^Z%1k)AT(($$S-vvSW(IERQ zATCF+F*@4RjkKK{>qqAT+|oOH|43{pu7?3hMhtzvuzimO@mcaCWIU*c^LnHe2jC{eht(G+2IpOce(U?qumi#GIU#hnS?2Y{`OJ zfIT0q{22oiVLNu%?M4vW6{Sl)et6`3bmY9aVAdzl@L!CA`BL1ERrm5z%FPFMj=VK<0VH}_Uv!ULuf#z1MPI7lwfExKb& zfK&W@6)4c{4(y`^Dm3b2ZTcUTAw<94b6`1d`_=*DgKZ;xG?)3`Y4;u1*$;sA-)_%d zjftTv(a2V~gPC+R+04I$m%XB5cvuY=?_84~C^>eOHPUfQI%5;XBS_4+G>~)1rpl|U zfxZkM_(A27p1@Z-HJaT?&n&igw;p35@E* zCtxMjyzS*Q)zHW8>~ob7nQ_6vz*lJK;X#xgjhRI~cwv1&(8#@TTIeSWItfXL-8!oQ z7>?>U09Qh1tL1jIgJ>`mo6wrnEwk zkUl$^j*8sAvkauSV0i$@wAr7}Bp7ETfUs%4M@ITY{kU=&l$(^xw#Y~h#D`WXt`q_q zRBocqLPg67ViZ_DY*g9gwd?14x-_C{y{!mw|Dm!opd3j_FvwoH zxPCiH1kqXTC!WHgF?xgFJ2GI@LQ+QZg=dhQHK0x&+Mx&+ef~^D^S8 z+Jli%yw)BdpzACTb*nI@6U~A0=CY028y}a=Nb<%MPO}M;_`E=RXRZ~zB9Izui%dX{ z3dR5m_0S_?V^fZYKEnSF%O>+-Pae!Lqn`gP8;m+@sXsHjY|?=F?>=IndlgenNDj03 zSB9@lh&|Xh!;Cy=%RX!E!BR6l28V{t7u;DYIke;NSiKeFby_(*s=3m&p=9L=9n1F=UMF0M*xu@J>TeUHt|?l~W&a z+rbGif8J8whWHIkppJ%I=PDzMmor*>o`cFMdgK_;b;85j z4S_atDeHjK4h?ze;rzvwdkT{6hQ%Q7My?~;4zjv4fuzsHYR5icA9aLUE_n4#fu2Jo zUHN}jd7F*r-mOO@D|C~JI9F8iRecMuJ1ZW^F| zODou87(QTvzlQ>c*BfH_MCS%0d5p}RwSn$Fm58A~Q#uQF#}27PAl3Db@gW%GnD9KcRESB%{1&=uOZyKA{{BxA#SX6>C%-dHS`{00a1#mAiXIa1e9JAmENV7Ktk_HfIvbBA!o*Y_V0f_ z=jq;u`*zpM-jb}9wdR^-jPWhge|>B`5{&J4B}dqLKr{mqe!$veImzq^R0`{TwlX{l z0dDloLEZ18J@%1VUH`Ov=(6)sb@q0eYVazu_x=bHmQO%R`CPBx)^2IhsfRrzrTAb- z=u=*O3RrBjPJWk4!@U3S$@S(XE{o$rFZDjV`+4oSd-;Ip5PCW8!l;MzJN@~nsJuKO zPf-~>!tET!nE&^9&h^dvUkwlV_aBMNz0UT|cN&_$-fTZy8N6zS7G}NAsZwR9cd1L( z1vClxX3Y^$K0L3TCmR(w`w0nwrlsb3c#Gbacb)M1MtQ#pqTcmoRd7L4YeG5VamDP< zB`l_4>HQzM{0{^OXfjU&lI(gp%mwPcZM{AGQ$M}0z0=qG-t8nDG$e3-PMlLKmjjwE z4;u$^^us{pDZVJO=T9nCJ)YGeJ-eB}ny$3A90Bgc{T#THd522V8>p?HtHt#>;b2+4 zusNmy@NS!;zdGlEc>kwWH3 z?l0Acbz#!v^YR@KR+Tfg5M*I{;PW!Tb2yc}9}IFa)r_9u)z_M7+MrI89|2lQ5i}TJ z)aV}mVm)_MJ5WrSujnd6Bz9W`P%YgDK}j)yL=$&~0P@n2w(}Y7hu?k58fHyWpmpb{ zZh7aZ^15a_N*>b@l>Bgv$v_)GI4tQ~4X$>qU}{6_18ilys?R*)lJtT+dphW^?pMG9 z2ZTQWXVnQ=IE-$pt8^MEW^)P}0{||X6eP72T>nHZjQv>L%b(9KZ;o|^Yp0jvE<&v{ zU4y#cBZYGGCP4q=zPUNh$!HLvt6Qr(FJkE_b@qYzT zUw_sAxZjZRJPZvElj<8##)%HXYn4;%9}I!KEQKQ^&p^oK@JJ7(5DdVo@V>s?z!~hC zaGiSQGyC#|7fV<`96{aEwMyKZhQHby;|7D>`5+HA&V9e7l_haIl|Qx$#9HGmH*!D| zr{eVWKIzr2*T*PSyT$u;r|4*<1A+^>Ni+xom7}?$qglYK5;_Y;ZT%F$MIR`UKH?N7 z0Fuke5o~s&;yy+KOc7@6Ay(B!TIlqS((cENK7L{BC(i!_qin170m60iDO$>|d!x?^ z&X4`J$#*n_+5^%TTS)@s7Z%WM4Ay&8o_N*<|8#&cz^v(ZaVv!H7QD#? zV(c<@FqV?>Z43yBZ?^y`pu2JXX&;}BxD`Oi9=HRLs!A`Uiz)QWbUTw3p%~Ruc=7xd z<%-85HW_dm>WeHkW8p`kj1h>Sn4+8d4+qhd=5B$ij{E!|Bqo4PdEg3xq{>OHzBPUZ ze&LgTiIMEHPOkvt#a(H?wqI?~%@c?8biJD?tn4C<$6DD{%uL5T-KBUns;c*f4==A{Qp2YQ%K@+yf3V?fa( zx_CNF^>$2@fVhQ3&@_YnB zewdS9X>XmpRX|OxIz+16>$N5g3-DjR3WH36at`{=qH(z^M6tr9Y&EZMNXT&W0eolA z3oz0umCZ?gBR4Pyag5g$kk}J{EDzOaM?eUBX=d#I0DVSm^LC|rB{&V7ZH*@GaX=5Y z+pvDw>fnaXzXtKalmMS_&~&x~$i(f@QcGE8$S{j2K%xAaO0&vM`dG38ok;?bw4&~f zM^V6@Bye>~+y#Y~fg4k{Ww8U{z z@J_2&!01I`T>yE3lZ`L3_8dI<6_7V%+P2Rj2+oigS1sRG=`B&i4!a7%z+k%FL!{qB1Z_)IzpECBqnLg04T7y;eX z^&7^1xcgslGoZiGp6uByC=O=_g@=IVstWILT+#G=(DEjtu|)Plj;lC?taZ{JaD7GF z0)XobV`>7Gjw)qFQ9A23({1@3+`z$4;wl14dp7Q!CSKd(nC%exHn1C7IUKxP)19t4a zoEhDDBohw?Lv4M0gX9AVP-7wYHNbwUzN|VpfWH-P0uk{Ku|G~FLdnv6y8!XD3Rr(? z#zXQ90u#oRg#|xWR_VtmntS+Ajwd!##nNlC_}4_O4-u`z&^U}>kyt?Bvw=jFX}B^y zM{ln;Q+c>#2gcRl)V$S!+<^J2g@tr}P!@k)2DrTLvYtL3@%FjsmaZ5Tms0&hIe_eT zEGVte(q91E2V(OUF~|B)u!JyWUhV(?ItKtR_0RGDVao9T|2kOt{~Z7CWa|HiE%UFI zp78_Eg<7r8jOuA7lya6{PuaO&gvwL;^1AS8{yLS|0>xj=yM7gqpOke- z5e-v9Usa_IG+IVC8M0Y&{L$t9d%FTA>bVrEp@}nOkzH!hpkijGFZK?N4fc-gXr?0? zYxvlQN$3b8k7pd2a+?LYu!G)7UsdDI%~AdC7(~kK(r16K2IJA(UQcVke_b&CeD^$F z{mV)gRJ!dd%YvNDtu7_FZ*qO)`tWxQ4P7I!jAxxZ!YKDKj_3QmZI_@2cf9b)Ko%NX zT#2l`LVMMcOphjA!gSm#wyjfql*Yg^{v5I<#j^%cGgD#7&Vu}k=|-?`A^UlY#PPk3~3GHc>c|_<$$<%G4ht$B_dZ{==fEnMbhR}VH7iM>ITV=?Ebmy z)T1e|EZ&~sM!0)hdorw~I!gg-zP?X8wkpWiWp2!xah=X?mosRc6?+l&z7bR5X;1c| z$KM2le&()AOj+=7&Cbky&VL^HSN;XbqROiw@BaMux@v6F!eB0{VygVk8doI3+eMk_ zQO?Dl5g!2hiFEzGc$xhJ%d@rpeSy;3Fl)a|1;AbVb0QO7Au!8lykyd(NGjU?Sl|6A zZ-eTU{1UHoc?oU)VMk7n95UoYg#X)m?i?NcW(e#@WxqS|Ig&f@F@!dBwK03qX9%V= zZBcsk1J@(N&1#N+FYFf%3TU;R;uhVv+6&`0G`&Q-IzHoBqTK*`jh9(79U?mu!!;MRYg!@$f#FjqX@ z0k4t;QYSn145yH-`tv+~Eh%%2b+SJ3U0fEYpX)IyAOBwbyie2i%GsXp4_{@StQB1u zU*rf;_wxJDsMH#C+l(XU7vti8++i4BFZ@LO-g+@onqw~NomjJ5S>;GIM=s*qL*g&E zCE43kw`f`Nuz}uxFFl|2tC5Guz{bxn+iQaM4@Ny7T<96miGQYIl^fvlX6Z0|(tM~H ze>;bf05J|Af3#)`>RVOWwcX_L{*Lm`z{ z?>N-de<1}QU=pZg@uUS^XD*p+xx@N^!J5Y`?AP9*IaiwBsxkc3M7gtqqY4 zll$W3t*d(61E1`%e?!gZ)u&SE@|2`1ZrSsB{mK8DL8x^86tNoN;3oG44HLyz(wS0t<5j)~HvQeC^YZh2V`6Tby>oo2>*Kn-D!$>d*%s7Idw)6gN04BVu zL+J%9U0GS^=lrs&`t*v?L+tT@1^o5TQjf7Fi7GZ9*2h1jlYPAmi{4BfqW(7~p1%UK z&&Ktp2Z(Gd9SOy{c)gBJ(QIhsu<2%4TvERa>OCD8f!jve_$`2h_u?{eGnXH_c7o zWRDyRG9n**iP~N-JX5Jr!k<(p?a^7SUsNh-F(7KRIat@7G3uZ)*5*2K8v+^aRF>z- zSNPxQO!kpu!3NY0J*}!Lq3%6RZWVm=g#1$kvaJfVP+ z8A%z(|0z+r`HyXKvt(QK}9U+ev8xnIKa3}lHkKap2 z=ctJzHrA}x{vf^_GNR1P+ttcB9o<`wgI3397G_H1k@qGXWz1UX1l;wts(D2UpUs1P z={dusuXUn#%Rvk2>NEgZiQB*!43mmq_B^pPRcCeI$QMJ`3WyHgUjUN9PyT0}=MSMH zx%x}nI>$5EZfzBpB9bMXLy&2Q>wNa9Z8{bfsa=ojY4=)M8+UeeN|pB9fgFPiFc>rU zUC6wuZ_>F;36J-)Y}O7vm+WZ&9u+JrQFMazUhvrx$4|H3>T7s{_`p|8##(;h`tptk zCaWIQQcq;6TmRx>I?j97z-4j{23G(%ZLO)rPY00t9gzF0ucyza96kbSl<3__>1QR5L}D8LN<0-OD~GJ!X~^n3jCmc<`%L5Rq~iSWJ7;k-XT=jL|_n{ z^CP18*Tx{RMGq##LfeOz5WF0vhB!y63=ge9KDd8+S?IaYTi_Fi*Rw)x1{d+OlzDmD zlwcp%yY}TO9}7EeM&eH2T8)CD(sbSTGn{30YGM9#H?9czrC+E~4Nj}Z&B^T!2%w(B z5Efe~2#Tfj;v^6oDsBq7ryxU!6u*oV`ye^exGZ2#pWr>%_r2fr#?($3{gTZ&C;CBK zbm|U914z9W7Sra^g9e9NYBf^WNrknOzC0>Vr44a}YEW&-EKK<>$9KKF&{tkuKzQ`h zv`<(1SoW${7p)sofQCYRb&abDPKW(2F$y6D;28paT=-m}Qct^q(&FEenk69F5M$dw z)%WW(FUUH_S9T&n5$awV(aHQ}g@nh@BZdb+h6?3{Deuo$LB3*e#WO$#o7(~Mx2|fa zagjz}_la$yu3+STKPZ8M>=RHBxZUoB?C9jlW;;m&?8G8f<5@>S*6`}~Q7FL-&%<)x zMm_L#Ms-50sbTkbK<)viDKc#+=?Vq7r)gbjbwYiS#wMTsz%Bdo>%aT*^2L+^7f&c> zpsg#bIdX)#_yhSfPTBE-Zjs^K(H!A@D1gVZqu*wQ3$dNxZEinMHl}R{tnssGP>g`& zBzwpkXdP>>w{26AXhziKiP5W z^XhN67XG{+r~HaPCu?FjR1>>Lk`N9Jk|StPf;Kz_xVgYA2+uV{tyQzh!O3eFEd?2! zNZb9_g~`SM!kL&xZ!t-JtQu>YlC1lHms?L@m@gN8yiBL-DFoCx zMX`xMa^lTHPW0xkUTjpr%DUpJlmm__?X|Y)T?b@^26~dLk{M|SCi`uC`WSdEs&4>3 z+J@P0uI_oBZ1FmvYF%n!_#&u8QN*6gn1N#Ejheyt)7p1lDzK7V(ewg86`es_cH$N= z7s1lq+~!``SfuQnB1jBm-6QZHZUZ>gC)c+hy4Nok6!PllF$fgkD~Bf_C-BnOvWdR| zQ>V+X3e=oN@$!0g-sm&uAQ=kA-8nchKtG+>4aD%6rddvKk2UH$4v-Gt=-p1)h|(BL ze>#QVeAZvTv%w6AUEPYHM9V12L?4aX0e`hmc*-prh^2RP0=lKkVZg@YZ`8HwqtBIR zAWlAm3S<)>p?nV;!=^-O8K01?yrCB)cMz39?}9hyk_MUppKgbno^3|7tgMT1cbv!~ z!UsoOu|ZS<1Dtx_*SA*AW$}yaMyciC&jdop@WrCO2gh%>fVl8^3il=XhZ8_^^cb0E znW$h{tjEl&azEMp-}cSTfK`(>m@rAy24dS=Vlz(Wzlt*G8=%U9 zemMb9{u8{IeJ4_rctg;lUR=fC6X_C6T|Kx9?NpSlVpAP1s6HC*4N7SI#2$iudfjRH z#g$Q1Iz8OA+W|_KdA3Ca?=?<^8F24Gr@45r9LZ3=a>m9biy3bHAi_kc4n@+E?O53# zqh@)s+y2v=K=qQ8HLPyeZG|M|=pehurs;5c7XUT^uoBCi>tIX!_Uv9BHP_yjEyM;s zzfEa9+}23Mi35)Lgl~FG-PSTE4{DDB8MqVKa@7z}SXO3YkWV<15&kbIdjNjV(kq>HIsb0o70{VZ15* z^LF3g_#7)5-UfCiF+m5x$|B!PZ^eT2t3yDc_OKlz)|R~md!#e*CR(SPYyh;rrAnl4 z4335hMf*dM6>@+1PSc)uY?V$rN@-;Q@+&AR5v+nglcvKWqIKMT^#Fh5scL2ZyMW{CY{rucQKPcq` znYNB)px*J#@jg^q-D$zl_gxD%N6GM=O=e)pqN%Rc7ZhidN4M(`;=NnH7@bvB`UbN( zS`?!LzDH(V#TngwbsjLF3!(rGkf2O%*O9VJleDkd9!l`y7+0uxC|OpfJT-+u9P}r_ zP`?2+&~a%AwJ+vsj`YN(!4UCPfVjIcF?S9KzY;#h+T1jnOuomrx048J@s3o``?n#e zf^oZD@SnFj>Vk{;&2be4r6B_F$DZ`}NXC=D-OS2SxhWo^L}W6*Hg-K5NSlvl>E_AKui4V}&c(79 zPh5bDx~(Cb0Gr|RK#|5zsrW=@&L|KV0j{|zk(j{XaUq$2 zitupP(nu+neTwsb6G1pTx)K#U&R{n*zqbT+z#(ul)Z<_P(8d5Ywc<&Og5#wfP$=XG zCdEr5fvyF7jsPYQf&uh(tifJFjAe#5;gMs#ah{A#dWgmG%?_QDMA4&YnvbAN`>80n_l!$BZi}wq1Yo z=3DZ;#`)YGKGu>%@^AwX-zytBH4v9;J{T4G9Bfqr><}<;1}a@bX!~ivP>7iqAP%>q zdz(((XNV90Bs<&^01zI4sh+k59Ht_BM9HJ}u+xA?xDVzkHhL9$)EK5T3Y6u>DpVCA z8SUdAvW7#X=zRfQBl{Fw)K6taj==W)1?O^4&#==mQCyqE@KQC!Cg;##35Whr-B&sD z7RjqX4^e$Uf;VnF;%x>1x~S0_Q0Td$5!V(2gE98oPM@6mK4xV1UCX|V0*rChQx6?(?10fKXS?dn+e}y4t8zxi zho#>YOMveDhU>RYmfKD(5)ft~z#p8qdAKGN0IsNS0gjtpFSJ4E2xgrDwQOa;$mCE3 zTHfL*q#q9DTA5YaqQMEsUC!vQ{qJ7Ma!xDl{BEq$SC%-y+-Su*n~i#d9;kX8Oa#nX zN71d5ir@TzGuUo+9FU#@{IJ-2n^(Ae*hDc)$n~ z{;*cq=>ru@<%#Na${Mh7@Qxh58v3Ro&>~O> zdnyn-@B4IF=+Xv}RCvzl&T6Uk%}XF7fTSx4EAIf6bPix8OSnCz`ypvLiDI|?el@-d zjJfpNYw8`mJj4v?K|aKL7f3%Fbs7T$X|r{eCn)Rx?4d+L{U!V8KUefywK62Noos=~ z0KOY~`d8cF9NCc5#pa_PtO^g*Vdj`0@a-R#RWPRWsBeX*zgUfup!8ZW7XrK+ySKLl zXwZO_CQwb)yxV%Pj@Y-Pk zhAT)-N7WDe;!FR8v0ealdvMpKW8ah|uH%4cM`Y0es0l%^seM^_yEIynzi~grNZZZa zdW)f5e#dRvtqXK#MBInu&(1!34QV5;dbg6QBvjuhJf+_&smixtXmI&?)y@A|uwF!mi?-Te=zjfd(P`CAn(N0wx1(5~KkKcBVsG*`ZxNtKa)EKqq7;xs z1EgusrYHB%ltRe?C9>iAIN&*uGj?5cHBu(*_cQ>p)m5$T^i^#5RYAu~j#>T1Fq^D5 z8z)#N!%hR7(m%ruxYD5!``a~37_fc;LrH+QP&zbp*e(b22^vo1TSzrm4YF6B1cERH z#}mPY{8_)D%zE{{DMx*rJ|TyIg9Vc4()|D`ax+ni$TH{h}-jmd7f0U=d3?tE{*4}xqhqR|S4k!$&4CG17*Bc>k*M3+i0 z`lSzm0-cmugnYhUr1s6~e64BLI7XRmavN8wksXb+nBcgzxF(y9{YJd~&Zyphr!`oo z2T0yXhaZ5@5)m?&q33s=w|V(RBe0g+Kk)Oqm;M%gPf+gSIItN2)@KEVbFWzhs4ogmVqw@i zIEQgB&xDkFYT5f@I$h0E)3WKW04q7`7)eYn(~E*$$Vhx+TM~IxVb#jYm(uVh^ zpt{brVFOmeJRs!^X%c55Ut_E6ts;u7r+iq`Ml16z+D{2Fg#oyS>GSXkcGr^xx_VA{ zjPlLG{0~4FKu}WLSvnci8E8^YCVB@5XUG1 z<|*J*fRfI5vY*wPxgpZ@^3z4DccJ-1B%r>U3v<-n`onL`MRPKUVa)+hspLmh|a%cbxmwXWvL_fdHmS z8ps1ceA%<_Q&0iL{>sh)PAX7Go3RQGBR5Qd%4#Qw+Q+k#PVfp1k$ygCV7RTzAUy>ZCE!HX$H_P}4^4=^rY>3}032J)Cf zej6Zk*0-d&gHXtVfS3nv3#!Kpe30WV7nK$$K4>z?p30oMO1L3Pm=#PxLg{%G59F0< zM8av1MJ6(Gixa${s^~t(Cq7ABj{LsKta=Am-$_JYCWZDX>L)3=XbB&PS8KXSeDBJpHGOSdn>ot-ZYGj-@bi>;WAJ^1RQn6 zYlz>E-G`G&ku5xcu5ORmP$zrDETHMzp%P$+6s*@gP)(Jy7Is<(MQy3a_5z*KMH31Y6E^^=v3uTb)vok2<>Ol; zqfkcCaY0e%ZLfL6$6VZ!p`x@c@Ld9-mXzPP6K^x9!-?-xrqa^)6{+Hi(+QF)-Gc z`A#%Nz4$!_%zkaqgFr&23KU7-0{moVULgFxfU&WSzCxcji0-#Ns|v^ugKd%WBH$f< zi`fasm0K6qmw&YjRk%Lrxml-NUv_F`dTa8b4zw@AE&sx5X)xktp9VQVbc_MhcpeBD zA3icW7{a`?t-jd&&)sBZ*CVbEHOiYco7)Lki=+qq+_M?7V+f*z~n2{ z8+PzFkPNt_(s7{FJFoakl^0?EE73|Nu=sLVfngyafHda8$idWO6esy@? zGAP*k?aujYu^mR;do_Tk8Q_N`u2%%(RtWhS_6>W0>;RUzEga7{YH32=ihU3Q+kK``MuDk>Tahq`hZ1dYHEvql4kJ18^SwrRU~`>)?ai;5p^6t z+FCo`q&`saeXtJl5|c5lzv);X9bUAbbS51QJ;{yvz9AN8cXqjWmzws&4t4~2@SIH6 zq2TtfW~+%RR#-vV?P_STOn%Hs!(tg;hicM zsJ;Q{0kC%q$QS^!L*O3D$ocCkos-A~z_SmSY62ri*_0lj?WX#zod)UwO*P{ZY|UA} ztlvdrfCY&pFLwYr6G$jaT+K#`4a=t!fzujb-c3DJ_wez+V@eFO>Sm6#0e&Mv$zMe9 z))XM%8@I{m$+>wg>KT9GpZ|uE&)x zz++7d<>^FYVHjn{$f1JdKl6Hlq_Xu4dz&^_eo*am;(t^HLuOF6FSP3?rIs4of*nYF zgU_tv&D%#maJcm*)fRT&$WUmf_4B6Z>;{$}1`frz&y$dl(Z`*MW4BHiiu!k06$k)s zc9+*cRa#B4%${eGoLu?+r{{*5=8Xjr6<~G(N2ckRzW|w}Gn*}MMGM(3}| z>q2Wf|2LX%;9(yr=hwq}GBwwpef;bKAXo4yBnWvCCYl2VAN)M?vl@NB^;s3L59xu9 za>A-JLSw>%H=Pfiqb4}16<*_O`^A_p`WHKZQU2_r@pB zFt3o*98p%W@-|;|bo-FEFlNWUJ0U#uS9myADecpG3!_I&im!@x1uJ#d5aWE?1k;RQ zv^@_Lz9%)}(xlHGOOEQumv@E6!U^wK(wvS67~JdrE&ke^KmFp&c*%=FFK9OVpe29% zgYWyrw>f-1EJ4rNXm);Un%_>#t5iXW=Omq%nui@DK* z#rcO|(PUq}w>kAE`X-@itLW-VFB5TKW0!b$aLZy`nC!?>t?fv57nGci?*I^srv2LY zhfRQVP*HAicqcT3+jXrdEh0VKGQT%E%?QaUhtHZfhx2|8@_)WX9{npq4Q&&v8510< zmn+O}N7TicK?2bW2Df+a|3@8Aw5AFcH)`)t%A(4RSxRGwzG7FcLMS1G-%P{C)ndPa z_fLTM-_oTPRWgz$rd`R0Crq3rcV7Qmimzv{dRY`*U#=uYj^~zpAa?PcxjLKbDW|2a z-J3Cw=#tkwZ|%o9Lyy-X?t69?TMQ}Q^4;5$zc;0tQ&8np{VC2HX@1gXaDreC9Hr4_oMlkbKvM##Rz`l1|jRpqbM; ztSxr+ZfAXy%*L&lEW(WKihH^EDXuQfJOIN3?s; z@PJ(Zf((Bjm*|Gabj!Ctz*N5VA}`+S9f$f2@2)mf>>4PFdtFL<;-;JOgG=ClJEyIS z^R-z^qa8zbP~bfTp>q06KT&Y8NR~S%nZNSA{KTWP$)-BLEaGSq|LysJy_G`N&KlcA zVN%@bN{!S=+^KWR#c!g-O9J5DFIQ&zKBj~g*lTVU7}lMz7%E$U9kJAr87?(3*UZSN zY>TA9UOL6`n z^%>S2oa&p(W4Mtk$MakNgX^Clf_hi+%aqZ}-8icHuW{k(N-^iE-mP|7L73P>*-v(o zA-ZXU*O8WX&ji2Q8oSX)&-S)pMvB@8O!-67_YVk{G-lFV*5?8vIv&;a9erNU*ck86 zu?}mRQB>hIb^fNke>I@LDs_u1WG~`7UHEMqAB&yxBVCs-i#VgIAEIW?X&WY6`_bbI zX4BhFUmT~M-&S87PZ(ecB8MF-w)$6WDcPcitc|Cv7d z!6J7vLv%Q}@@m#(LM&TKetmtMl)ECkqyIExd|ezMwsZ0m(_Hvs`*QhmT)iNZmH%rv zhX>-=f*i$@mDDKwe&qnk;4Sj02yHL_$fv}-pqhB7d;P~}$ta1UxK}Lq*XmCWcEO81 zd98^c3)^8l*s(-7e<}VJrVq(r6!?Ozj%fyMO$% zQD;aJo<5|Uo^u%?+3J72-vH_SDW*k8Pq!BJ3WEPGK@sqxKf+xke2r zX3!A1vGCmCf&ZsDQzS5T71Lf|oN#Gya!fl4iqBCRwMC zlCX1|xA{SAaA#n<>qJ1EDyp98|9Q1?V|BFllvwa28=pdbJYj6(_QKx97k3onW;V_q z4$Lc?U%W*-zov5hQh!eBPEdUp&&731q)nFtQTH#uOu7GaSGXHpsB4b$4YK`amc1n_ zsvuNq$D~Ztru0M9?-lgU&grVA=NiRVC2zu~4gzlo{H}M=UneFh{kWt1g4ya%ea~QW z=Xv4(Is~Z#myP^Y!nRzz>=L80n8vB-dT=e@1ozP_Kd3hTeO`h3hm87sJEGO8M3v4p zQn_cPI!UuOxj(_o`>(a!zwR;0A&lesl<2Ebx`zEz7KL#F?pEM21HOADld( z*H?#bObk|rGOtH`Ttxf1&Nfg6rxz;?b40pL2Q+F>;cK|=P4S{TOFnFV5}Ad%3Uz>& zkj-99IOYkb)3V9DVd&DHIfb&5Y~trJub`o1eVL5d?>L)x6{x)P&*6nVFEee4? zdc8XGL+BBK(FUIFj>9&r| zf<;;OXN$BxRN@E7wr|n5A2id5jwfaDNJC|J- zI!BSAl8lrc?z80iT!S~VJlhAGCWzr;;ew-q!cOOv2PYR-&ZJXFnirRm+r>X5b8sCO z7iVDCLE$9qblw*hz`u&TxW4xJnPpx@hQK6})3L(i*a^mFm46QE%?rhElTSoggIT^| zG9t37Dr0En6ulCP@cX=&uw!CZcb9r}RW##>AGO+9>syTVX3?RR>ZpXM<@r5#@J?-C zB^N@iApV{;4oMSVA57iE5PkLHNvJ*O-W~mY-WW)6jg0t>FQ?diMKhiL&vVY1s<&tb zr^{s51dlthWr%gOR}=GgOx|81azgwQ_@xtSv`kPWvt7E>N4ZkdXzN6g@AsL9_&2>JY#!G$ z3!nZ+_*|d6YYTqY4gI4a(V@@sR;~lb$Ai+z1S(*dtZq_mo$$UgD=UG8Eq49z9|!Y4ZMZ&{!N)fAqfz_)Ku-DEm>&Y^fsI7e{WXtVTZKwj>y{wP?%rEqt$MMp-pdFayMcY+k&XP7GHL#_^mhwchFLH|ODPQ86P+zkGu< zSI?c1AdFUnd+}_iSX}QjF1p9SOk~cU=a0{kfnMK3Do5ES}cfinTbQstbQpEyo~ zN7L!W<%`Qgx;osMAOFwQT$FYH(N7Pm5)sqa?vdtz9&5;?)8eXJjE{(tla0+I9Cy)g z1(WQYoxQg8JiKQ3RE6?$qE27s|EwoHe@KWeC+lQ>!$6q`%B39xzn_pVIMY_4$NMt) zJls@H=i)Se!PhL~>0=S=@$^)~V-*t2{BX5MJ8EFN*{C7-7$djt%h4>y?wE*@r*<3K z+}CENU#*qzxT+clsEnMLpZAO=t*5VR3?weObYp_FGx8W0@mtQ9~`Y6Ee)tAZ2XMe3p4ZVwGbXwG)LvGBJm}6 zCTb@a@0}ay@shD8C>QDUicq*pX7ZM?69Lu;@+?Py_=kQMiv~Wwsn3&RwqBbjkzKaG zM(<#d$U(kWlWTut@qJ$!m$p%^UA68#k7pxf@nU6rw}2Yjb8U3h7fOuLxJBRB8TlFc zI_^|?&KOk7Dd%f0%K8asLO8XqHXpXeHNshpf_06%8w81to9|C-gNi%R!24N#y3B87 zr43)~3|F3aWYv;+gp{45hJU!S#R7|yP#f8IZG0bmSfrL~C1cBjw0+nE?ws}Hqf<_6 zTaS2T^S&(A#@#Q$?4hetwc08?1h1o-4lEisIrw3iRYK6uGv5{pG= z9>nGqHRvWfsq$2dX+^A=m|W^-&XwmZgIJB^*_lMZDhrG{KnnEQ*B$;Xp-A1sjNtwb zQwLJn__?}WgYtg!bwv@5L+KGET4}i~-VjnPsB_cK;L0p&KWw&MhBFhsC8RW{i4Hd- z-MB7c@QT6my}Mnn*XML!4}Cp*Fe_JJ>+>@1j$%y|ZYH;(aWpx}ISD22KvlB{PVO*R zFNL0{J-%(^?Yt`Oni=$b)YSqQPC2tKmW-uv!kY||{c22VoIDX^nVq3(FR*V)?c=!y zt??UQSR8Zw!$EWoc-9vOd$dA=&S^_}iV$V&V2U{!nz9MItj7X`1Eu{yTThM7Rh59` z3q@WyXoSk{y;gG;nBgLMB*>N)rz`w!48WlqU&zB-`b^+@f|!}pR(2We+OfxKg6c5fS_2mH z&X7+t{J|4f$VaQ;=R$TrKK&WL?)5#Vj=9wM&aK>VF1KIjZY^5L#F6-wnvMHW(Zp+t zQ=z5MuZ_vJLJL~ELoe_?cihPA9$0zWud>O|n6;G=R3$hIG5#Jt{Sp}`J9F4n5jr_K zwL`)@ZS3Epl2W4|RD92=XNG|SMEe!R$xwn49Ne%p!M!QD@K{j&j@#4ll#N=>a)_k} zPHXo^m00Xvz2Jf*@7?&3FQO~jKP;1n#qjrMovZ`&rgajW&Pr+OK*%C6T{~a-Ub%z8 z`B{X~d8anPsb#kkut(;aiN_1-3u2vpHN5MPfs~|kn5eyOj=7G64n^Vm^>P;|Q8k#2 zm`gnpkU(5YZn=6u*4QhNvZJ1j)#Fu3UG`G+6Gh;9XzptFP3Tu92m2S&HZcpxsTj4J z%92u*%~mnQ0=CRl#i_p122|Olo{=T{Jf50N@j+duob^aYm8s--sIN(b@=_#9vMX?i zHf3Seh%K7rX!M`j-Su<4XlD*nzWP|69DwpfxMjIYl zyOAew7yH#DN#A?kJ|E%aP}o}C0;DR$JYlEn^=$lt;8519DIT6#U3?^WjHD9L#?K#wLLYMsQ6Rw0ffCkH*A9 zfH`-0r&)M_q}Zn&L>_kx$e2R>Lq}x{YG^8NIa(Og=Jb)PTOoxXKG-B}X*p>YphSf? zJwMU6zY=iGVm#tKkE`mtiJvSl<0wyH)t*+~WD{B>Dw~7;S@oZ^OY(4PjZQ6e7;N0A zN#nmIQ|m(bRvI4M>lIS@s`KKB$HlXa_mYQ?b;+b@iJb#ghf7mA?N;YCDkwGhXsf}< zn1++9{oRzJ2f>|bwKsB8@`7Unv!XPLj`#~Mst`C;t>hHyMH3vZg zAh<^d%kH$NI5f&JBF6N@Dt3Z0*P*h|J2|JIvPG%KA#!*mx&Kct`GS?__YLCkFpjzyM*S@mZ~y;1tu@ zyyujm6OVe~n7+R9ec745K5eX3Yl{0PRZ@#|2EL~g5xLveo7$IVi%Pv_si8#l93h7G0f*gyB?^SC;36IT@HY1OEyf@rSx>yMpWf_0}?=5|95UCU6O z9n77hJI5bR|s8!{Ys3;eB_KSgD)e4ntfuO)BC*cI$(?9PtWU{~OvikQOz@LG)c&bas4 zYFBw`?Lk<|LW>P0)*zXHFlngLMi_1;t1Q zE#YZ=l|h!k7IcX^6SL?!moWFyJUs{>uzvXqj_DizhK;sK^@BCLZ#QFHracWVx4XNH z{aoc}5Ks=z#R^>0c zAmLw}$b(pSY!j#N<2p{Tv3f!{e4bdREj5Ua)yIeU@Fm2SM5kgrEKePFR+;lWYx!s; zWb+t4?+uUZEk9YHDQD%NwjYJ(RbQ`M()=8G2k1(X7{_t=YpUArD|4M+R@Apt!CA!= zEylw<@99w4b*zpBu1j4Wo^QY($gH|hQb96Ue>fNg(R#vMYS__6XI*VTWArpv^pEC}LqdHW%1G(=CW5wn+SQOVckAq

?qDxhJwge9lC5?)Yq^`kCDU>$FJo6yAn5fp!^6*F(T7tYo|oNoFy-NEkd)}4 z8p6|FiG(SK%fmf*Dz z!`+m$-kTd{WWF6svzReCtAd5#hjAl;a(}Zl4s4|bn4^;A2~YD<7A_~zKzE!=X6BmS z-$}NbQTe%(7ILNOC#7gSA=bT@SpaqUn@@F(`{Ca3=5cG|`x0$_dw405X^An19M4&M z&MtWpZO~G934Av^RGhGlYjaIw$2&uotXKl2h_a*SGctnZn3sZ2@pO2`kGKct!Q@@m zDy|u)Omgprtwk0~NYc|6cUxwz z%5=&oSJ>*M(XsmVoYj#Vtx!U_oBU)B>{w(|o^MtwtGF6J#XPuXt+S@}=V=AwG`>UR zPKCavj1`B{;sz>w3I|)WFD?jPGd{N@C%F`RP2BB;_Uj|PYL-mztvWo$|KgD`{o#`p zX3p_9Q+$}UwoR412`jTciyT3qH;9=jLJl?*ZZp=z6u$nDDPKw|Rsa2uaB`YB>~U|x z^83>LR9Ebg;0BO5$|$DZY2nnbTYGQg2?^sX!s-#-sl-z^J2yybSp z3b_(Yi4$1bYn`dP^7r!Ea6$`Qo*B|E(M@X@3ODX7yR35tr(N}NEscG;>w*3iq$ONl z-0p(F*V(cxIfQtS2c37NiF@%taHdIO-Mic_Rjh0Hk}`WeB=5~3O5j4BNcG%Pe{=Yg z(V6+0*xEBE6${aNHq!^lL>2QfM=OEXFF37=9SK`>8_reFF2$H#>R4<+??C^Dap#M8 zrXMrfexbdtG?nSzvJDz)q$|Au<69vSGqz$sN_PywE555%R#(^`!pBAF-{JkpWMwL- zUi)r5A==YzeQ=X(4G|T~WbO=~OC!G9%8`dGMSF^!!C#-Ns4;lBJMb%#D6!tfX(Yt@ z10n3rRUR{CB#$BlJI=IF5N&N>2c$d+>eyG2E3n6I1S2c*E^KA&F>((Nx29oJ^_Un*kb-U`-{FUL=q#T{9d3?^(=DgZ3Ii3kmPmC_oylk-{yzSbS zV+po+#z{!8Y2gC<#&Ii!zdS;|Bc%gp8`f*C9a{2rKdid)M7#JC+u4DHs?<~~ktO=2 zjhQUR1_)tDX-pLGJA*b5{Z4h@Wm8Wuq>rB&=u44(XRNc*Bx0&f@qFg15yW@BD zZ}Lkp1tk*SCC}d}!VTHJ%eeV=Mu}xK{&g_7ge2J9qeeU^k8 zeB*Vi=VX%#e9!~_{ZPQ%smM96cbXk7w(8Ptu>XsyuK>NxobzS) z+nZ}kq4KqTK#x1UyImmY*?2LhCLGz zGTa|*J9+bZ9IqwV@NRjQ2TQ2yR0WoqvJ4bX6FwO6gl+{b;$0eoqfbV6YZ9YL6WNuDE&sK&5C39U(9!4u(Nh+f{Ku^*wcj^=6n_9h>Hj)1eq@$ zQoh{ADht|b->eRAr`sDU)5qIBMle~YQ&PolsU2?)ZqDn{^Gkyir)Q=}m)UVpzR_h2 z8L9dHR7!Hnq@TJ7JO{%*? zwtRb5D#3~WD$#sG2G!)$Lh3)omOQWPc5X-ysKZziSF9)$Th-{ob^1#8WWx2;;ji>y zi$vC7b4u5HTGQz8;hGSXR=5()8&s%|QCl(u(#}>n^CESR0PH*9;9~3C^Hc z>)n>)_0OvTB%CK3=Yud-ldwctO%VM^_hcC~8Z0}_o5*|Sv7BuTd!yx=91)7MBE%iL zFEE{TIbD_T@|VA=D$%VHGm7{Rzu%SwfK6ZhWp0C5;9v?_RgwbvI;}$JXGe&M&G;ilnP(aG<{Ek z5}+dyAv;4d<^n4bopi}{nN+ISzW4~DG8!~7mQ8E@$=GH2_4~@au~h%7FlSq<+Go@I zvC3O!)bkMdBuaYhai$hnC>%I8)<|c@?#T*vbASbST`OXD-S7g4Lk_zAO~SNR4vA3- zzIWKBaS;bU(&-wY!qFq8)9&{<8kYpC)+%zEu=dZxL;05$Z;QTc(26vcA~B>AdToot z^*SO=p)*+~pGoGF<#O)`#u2+#t(3lpFb?iKTYHt3PrAN(ZC0jf@Nn~~={D4wglcN7 zb=xuB_ppT?baVFcK@k!Mi+|k18*y+-AD%!L?8LwdCTP->wjCYZo9da?>#E~1adaLc zM2y^M^D0ZV_eX~!&qw%(xohF<2Bsq2uAQUt6jKbJ{loP8Do4^}P6IBMRFh50t_q1i zHo!yw0{M3ck4j_eWW?uAZ-{b2Znv@=wrjxJb9?vWZQZool)MO=r_&!@!HSpzEJ0ICt|DD===aD$u)oy)gCfDjS(S}+LGOK>_i@BBD z#Ly;!ZiS%t!;YE9HCEH08S3IBD|y6IFE0f@ACy)?PDj$Eh3nbhtZOJ=oVD_3lg1|Y*Z{IZUzwqhVI>LZN2<;o${uXKA=g_4 zq-vD<%uRgd%MwW+IJy!0x+l>J1$1uAL%V}#$=E$f_aDb0@^DI#q1c!TdRIHt;*5%q zCfU&r!oUSB;f-PO-*s^_u@hU|Z{BNZb`L;%_!9oP04{pz)bA}wr}uX^-JY&iUHvU- z(kR`v7mms6m{CQsfxW`>jsRI4;HFfK_$hNq-_Fs_!6&P9e+mDdR2mF>PA!Dn_sa5q zxpzS|Um8x1Hv+bL&6B9Vp6aC%7b2l$p1g?N9c5(rJ6m|fc5d#kiZw}o zDhJ2(+(R7$)PPC8o?v9Ieq;;&)}yT~g&TOjlA|GpL2j%8tL;>=Pf+#bySjlwYXNI} zW}KXSV%hNz8w3W8C8J5Ze6oE+V{XzG8Xmok=j-{PDhqQg)KywSZ^pFkc zoYu*A9%G!}q?Be|5sf&dX2));mBk`tc85I>=-7ZzMkponkGf2eD;zO26ITqu=)vv+ zrYfd1##a{c<&&`+Mk$o@4dD2TS5Z+r38rR}6Fb=JnG=37y-0J9Gk&Lfp6iwHlafM- z7z}~As{2Cvu}^JerGs`ta4=H{j85e;tFD^pu)T3Y3wK43=u}UqjoTemJHyU5-1u3S z$ZZExq@a=#Kq&Z>Z?0lf7`HR%CLR)w{rfDBiE#cy0*ovo43GQF>qb{CH$?SY*#czeOQ zcC?@fh>=1ZEVXyKKbYtEcep^he^Qh5j`IOJ6L~T|cl8UYrZsEHcddO-v%{tsaJyHP z1}+ea!LxkPY8EX_j6;LJhmbz$7S`rBNVxxXFE2-3=^TzoJrrTq82Ig}uQP>Gw0Pgi zNNqkEAuVMb|8Dn0TUoZPiSmF@T9Gf!aKm_y*;9z+8k21 zeRF&n*&vU$cZc7*Ik@TY#_iW57{})7aK36;IHkA`6Ad#wTGC0oWOfKT>OH=*UpuL3 zy~z9BU*Wt`5Z4o>S#VrGN;KVn-SP8r)uF!>$x$n$VG8}Jj(wg%#||OqQdR}#1mW69 z>s=FxKk{Le$4B6A^xCugknJgaeOq(y8*BeY70D1Iz2hNfC_=HOAMrnayPQXVZI6n` z)0odXQN6bksp23{UcFPTCTK)}nt40^`{Uj%c;uj$9?E5JEPMK9_=9)L=+lXH23E{1 zR!Q{ywYX}PC1MU=W!B1xZNvOb@3IqA(<3V9_azh%0uj)28F+J><}b2nYZYz`vSjd1 zCtPpu4ILDMMZw`Gt!*^bRirqtYc^<}3o(mQ795qq0A8G07T-h4w#em`9<0yTeh_YNR+-5%2ayCGpzUPbjjM+cuFb}Q=%|#r(dd2AY zcq*Wj&Sfz#>#P`-AA{QF0F8XBO?@eW!Sk;N`g@aU=&+0fWfjAYi8M8~+e}ZdXk=;c zR&fQz9j_Pe=M6~;C{f{_MRP^Kl05(U)Fp!5JEpz5=~H_{^y|fx$WPXL&Kl;#7#IAk zN--yK&!Z2K?|rg;>9B9mF~hXpVv-COrnYxvW1xe!mxED;M=_U%gH zP-vny2c~SvAfsgzn0*oKlNcOobqOq`#z{l9PLkDDr3~a%YwZvJW|s-h&K={W@EM!J z=xD!O*Bokbs)8;>!~DcqYO4D9c!_~bbKk}Il|dZZa8=QPZ@dWwW_654Tu~qp>>wpy z6}(QuH&JbV3A<<7cip}VefyGPWY7eS=FCrwXeTbvXFnyvq!kj z`UxBbb5A+WL^@QLBz@;{$VJv*1oU9||C@biwBsdihKQ7l4_0R5iJTi|6Z=Bn(6>%i zevwXPgFj}MKH}WWd(EcW_i?+!Q6ze;|8kOG7s-o*od^9a_}3dagIHKUV%HdTaWay7 z-fDPJm~DM|dU68|Bk)rC@wj`%5j(bOmif2^uYQ{$%&PZK*^c*3GJqRn)qHV(8cwe9 z+{+P=tm&Shzl)%!3m^DzqC4P=58L0j$8Nm2BUsJLace*R)!jRb!z-+mc||<8A^8}h znKV3Qm3%LnczJLADN3vCY75G4ctt7?vPuNuG+47Q{Ds&aEfX$we2(n#1|_S>ti@24 z^>la6%tLc#(t=_b#z$#+(zS{oZW&s4?8jt0QI{WfB()!fqHu%^CW70=Ebe~^M5bkb zd3)9N48~z*a09oNMa7_k<_@RECSSTKf8v%yOG{Gk^OE3E-W=ugXTjB^lYIw#a4iJ+ zsmV~#4xK?>$P^=f&2N!p^Pc7V`&Ygbg;$M0=!`)$(xN9eYX654FHE2a;@8h)zAp-k z|IsZlAx0ar-}g|qBTJ0(HSh2u-{ZoZbjoPxT8 zK{Da)GthUTR`_I4h;cn~%$e64jQDTfL+0Asm&EV0#^d1LaHutTuSHD z?jFpfvn%L1TTCMY3CW0}9G`;9{>&k7| z?)5cW*sJ$5^XDJG(}10X@SwuQ*T?Z_A`uH|95Tn9lkJ9|ZEAg!rg|?-Uz3tWiV1%I zTQ`pw<32t$x*>jO2QS>+y!vt_>y66q`1VtS!RoO;O}n`m)=wOMsdUI{ z$sXL$Uz}v5GKoD!V&zb&I^|r&RTQ2eQaMHway8|B)z&Kj4^7-Fy=SnlPdSOqp=pt4 zz|XPAO^g@(4`-}kmVENS-vj){Nc)ZM>FF63(iJTTpq{nFRJ^Y)xvYU4#b?YD7jR+a zhmd;}X$)s)9$4scIu%Er@uiG{##=-|tQ%a=9{XP>;Qv%cjukHEoEW?FscOf}^7%&^ ztRb?l6JejKqiT*46}g1Rs;yD38fIFa`+}S)xEW?MLyudh70)Cp^w>yWm$x5kSt8us zRlPSZgDW+Q1@@N%p`HKz(?rvjBrVu%Cq!${=1giSh{o%aJsQpqicW5uFz7`kO6y$?>WCEbQtUY@BQ7>hs+EKAVEW|_pi)SdjiQA z742M61YmS5HJ?+?#tWd|L7@XEHnjJzg(^;{aatQqos(S?lG_)ZXJbF>(`LW z9Yd4Jnl+@w!x6mR+qv>NCOnL0Xs9L^&Ak~Fs}!0HX2tn)9=L=PynYy+HasY8wH(AN zWaL9MK!5$;&Jy{5b#pdCj(YC_R7y6FwV8au8z;d;UgIf;xYUJ_JE6imx6JRgPdf8N zt&Ti7Rmb5l=tJ91?nn9_)QWtt&X^M`aZU^XuT?-?GFQ(#cS84dC9Opepx*qKvI=HN zNq*Yqlgbu>hN^x*%joWP;sJa%&*$ofwl6n>egVw36u)X@8d5Yfr5j+N#=XsLoY<2w zuo`h?fEmgjZfbk)w$@$^s45`&iP8+oY~n6PCYD+#T;96>z1y})sH5&bN|-0|pn~E& ztDpZIege=3sVKO{ls&KhE@|eWPnf$?mb;Z7`yhJ!t7eBTne)h8iZkEm7O+VIs@5t` z>T0ACRxgLX3#q)F%FC^rt{wiB{1FuKKh*NDyEi;f|CND7c53QAHs6T<3m71qANaB} zsGCx(HljtA_x8JkJo?W4>6OLa0_2)+#h5*rn`)=s%yxLTB#b;%r&UhMK{>y_yR*W2 z+QE~N*Ixt$7k@(jv(C5T5U;bq>aX+5cFy%gXB-2B{}z%Qc3#&E>INjmb1w%WEwKpj z)PirqbfSq+90@LW`>MMd#Q{WkX2nY8VcGd1(j=Mrn*e)AMU`5qCZNKmfV?TsYeah! z*BL1yn5a8x6x>*85vb^$T>wPlENgrL-Ra4gZUin_mg@JY-zOJV_du zu_4$wf`V7i2=|jM%R#%UFrXuHDXf$`^yTu$W@?H&R5U^`gR(h88tuuD89>74){eNs z^0xIHngpuJ*0DXIeV!@jHz#jt?7LeQ`6K6-U$rWSsU25tlp!Z$>e9fJ;3CAr3~c7x z!}KoHH5H|bsVKF&rzE`BhjwcJma#28E3L<_44Kx=q*L~T~j(o87BfN#UO-h6Yo=g=A#zw@mGjw1(lT5X4uQSFaAD^=`#4~y`8m5}}l@3oej04?~a zQQ+HV8LI?uz9A6xtfb+#>)doI0R5P>9hS_3;v@`<1f}%`1BR6g_qJs^b|d{vO`h05 zK%l3p4{Hrk8WMM*kV`BUjtrV+!O4Q>cQ@7pOE?V|Trl*os94_2L?kCP4Vn$w?C>UgroxKTiRwV{WL z_l?UY4U16O#pRp1M$Wd8j9lrJ!i^Pt@rgiEvzyj^y=3b^&Fc#_2;#aK5!JDFk#u`% zva0sF_+b6D>TsMlsIq;J$-3SruZX3x?bi17BMPA4DFD*h-A)~~dY|&xTn&No&mGA4 zYw5@^lxi!hI%3t!I7Zse@mu5G5lx$8N}-P9V%;t8b*GHM^UvHDyx(ddVb2J0|9ut2 zS8_Sb=s-TcBcsyH3q2-;aTaoo^rKo1Sj_?0IugeKY?8R+=wtof2l=oFR4-`F<7VC6 zUE2(IY1N+8O}B)PWWS>obvao?9}ZH3dzR-`ZA6E? z>iF+EmZasIpTk<-{3+iHJb=Q0XO?dOL#9g-@IUO*V6yW(8TEH?@IKK7MdHnHJqr(? zP}5eN@sWyM_?h6#59E8{QUWGz_uM?;-G)!q$@8r(_>{@HD9!UwqK(14n8~f7K2BxP zkt@z*5=}{2WW9{f!zt@K`5_oZ*dGRQ4IhZ}$LLhFFE$Tf*?4$7m^~*g%OH_fSBA!F zH-$l2mg z810#-^hQJ{@|Wd6fjxhjLZVCIuGJd~lFxjreZdO!RwJo<)^ zqb(47cHSnKE5IQO_p>8v$=bWDFRA?OdP$N#D{d(3;ZM=~!JU?NR7)NA1ZF1Uvm|-s z!{NUwn2Vr7+jiv;V~&mI_=IlhmhZMNP%7eGZ_;?m-+QBcTbCi5yca4{e!1>lLLpK= z6$;d=Y&D0hJw`d$o-gPA;pAA>GGTNj2=(_}<8y|FR@nacF4T&$pG5>D2jUB2(054!*s^b?kSC{Xf%BH$Wq0=nim1oKdI~C9oggWjrru+mgv}|UD>rk};^KnVcvKp;dMCVfK0SKW-}sP)s^$5M zn}R!_O+!TyimKAdUGI&r$7Ns%Tu6?~g6e>Tk#A+au;oV5^XyKQBFh(Uw>t&U*V9S! zcprQ?&@&X?J~W}ftS&O_`KkiaVZ<)MOR+WI{k@Ea;`@aoa}~$xX>OgDyZIvmcAhW% z`UB&qZ9RJ%&kmG~v0DZ&cUSc(b1MfBA>D?>-8GN3%BnTI^sm`%!dKs?gojVZ=%}yx zND($`lkhY64eS^qJ_Fo07cAVx&*us8EojUb8@iTOyWcLOZhlIYFm7x_NNg2CxR%0- z!oVALdTJfV+4uR``HTT$D+MtrLVvorZWkAq@fDUW#k z=96Mu=JR*&M-4VFs`0M85M441G|B#;$w9f+CRrc_B`@}jX30=)$KX<48ue`nTDSWR zP6={eFoNT|b|t{Vvz^i{p?ycRO#ZVi|LY$_|M9bSm$xYj@xu)WP=M|r? z-Eapd3EaM_<5F$BWMUl%cN_A;j{x1-m4a37eLfi&)GS~GgLJa~)`DB3s3+B{(^ZM_v1aRn5DcfDjDJSv-ius9J{tz(| zey^~2baH`m*;L=@QuHVz@qa4GZE?Ctpuu^sF@=tSff=hKzw1evB;Lwa11(Sx{d{@- zC=|E3q>Tddx!esrJ@sh9jYOAcQKov!7*rNHBkTR5A(=)L6g)T5il1~l2rrtV@2 z_S{R=hPYX@yj&TF%PT%QL0XK;{8_ElK8nJ`#(o7=<;gP(p*k&E z)R*&vqtBKio>N-Gl`c<}X}I|80E11lT$ z;D)kBG#CtW`vb=X+`|F?=qo!d=ZNN6Y@Cwxcdu9a_ZDOb9_i5hC0@305?XE3W>H z;MbM_koE^au{C}*3Y2=ex=_+VYi)10+5BH^{D6D86CrZiW;MCYo`u7~vy+6R-B;QU zd_zWy-F;DHoNswo!K~mZN=AnO8Dnx-2sjpaLj3M-9X~=5{f?1dP(WT0m!i*@n`Ni{ z0)YAwW?S6#!B$A=^ftUT+PACLee5QxUV2$gatA3!rOCQnf0;<<5PbRtC99fqsl8r= z{NvLeGiYBk0U#{{K`ZNRpVB8f`8Ga}o19+zLU=Pp1V=nUF7DFxI` zcJDfA@&lpUGh)CFRN^Ml7PF+Dc)yGmqV*DQB+6)a$2tQX1k5>XSFLC}E-CGF!qDWB zBHpeKXTVTy(Rul;>sU?jtoN{w6elV$f=iLgCeA|{nuyR$QBgy?FPUkuFs6g3ie&Wl zGiEm5=6DvfqJY9^;4j0{ySB9mpA}9ONtAJXzZEo;&EivbskYO+mJA9=MbV{ePlJgs zhW^N?2*P!?)RGgOT61Ae>BulrMeFOXISe2{SUr7A3^Je@C?)NBWLVJe`HMX{CH&Y@g0TDT9J;{C-?a!zl&ab_M_l z57&dym>2|W_cKji;FP1VOC`Wo)WZMu5tpx5e!5#VKQ1PjtKU{NIaXfHhCTL-vLWQy zFFg=&tldqpKvnPF?2NBEYh(xc$u?q3?yAjI@z@<&*hHJ1-V%`Ye0%E#IPLyVyOI4m zZl`5Zq+(vLyR|N8_@Lq}^~S-o>$Sw677sB1-Y#w7bW}7oD&1DqwX=armPZBZd=r*o z;14M|Qo@QdPn14!sAW-BnO~xMn#jv1-i$I4688AmNYaCM-Ge3r>-N!7VR#_s{K+q6 zED(t{)E}22cGc-uc&9TjsCX|z5*tuHo5bBZ?%SCHQE)``{xB~ESW=I-6Xyi0ZdS4& z3*Z5eK?7O4k}1(zsvhGPG*!)pPTBpw$e=F(ri(vdqj=yBwl|GWbbC@)3S0lvKyuR| zJ>OIjt@nFJsO`2}Ez$^!{ezPnDHCIC$2CI#xy^Uvvz63!Le81tCE@)qQ_d{QZRzwk z0)=_SLnK&eC1SqF80~xiK|;phoUpj9Een2kUG0A7;Klz^VYx7UmK#LlSh$M#%yFk* z?JjGlV54Vkg_2`0uT$kewuhn+h)|V5r1n)ieDd#H&wrt2 zIrf3kA|Aigr_vHWT4hjJ<5@D4Il?mn)xEe*$?7s5mxydLVYc8h6Hy>@5v_A|{m~iF zU~(pm*pkpk3%+h>Q6gpA%)jplR?gRFJ5STA*RIO(I?qLj0mMFW@LAOz8{9QGO~0aO?*_J;Spe>6XkeDgYmZ<`cg zqmO@iiCLdLe+JZr=amR9(dla4X+0xf)y{xZRzsCr2gl9G#MhUi+nd7#B>yozx~c=f zCwfyfe7$nY-Tvfy)NVjAs{BzQQzy3zM4y`OHvC6IJ_rf%O4UQ3RfF$-V~*hU?s1^x zW6_7LkUbP%!nb|G49QIQvt{(Xfxj$=2IxFq)1(0RAWcCPb^lkkHre`RAEJaBv-56* z1g2NJ9;CTxz1>D3Qou$fbuEq+#9OHL7;YT6=WbKc!4!y zBZ5$GIUZAoi|>Jx$M|D#Ipvi9Ia{3y=}MsK?l8#`FwvFD)(8N73FXk64+G0Gn{U}A zU95F$xs^NaZooR0hRNC$Nudt_%gumgDz$k`+_K@jgoPa;73Mm3fIIGkkMO=)@cdU+ z+tqy21{LrxXh4PbLu0#~J#7&@$?&B@uZ(7q1#es3tmojC5^v)QJx&&}%VT8r?9{N? z$_IBl7g*>H9+WTm{#4Bf_oK~DEL5NYhV}=er8;w~{vX^hKM7v$%#RB=wlR|4x)HA2 zoY9H}=sBr7C!Y3*eb9_ZCly4W&&>T#FiJPQwe zEm1+0*?7_pu&_{H(=-_GhcIv(Pd;7=AcNY85nLX<1*uJuR%>gXavRFzAe@l><_M>i zoLWQ~4HJ_MK?fTdb~X>k0GvDs!adesq>=8qd2iwxiRZxdvJ5{X=^|8OZ?&n^8;%Bu zNgy9iz475Z(+F=|wt~?{TOUeY|5&+?42`=`{2|Vr~<39Mp9Q#*&fa|WN zu7VXLm zt$o1QndkK-@b87dvODhXqy8>i*tNId$b0$Az8sDFPvwx2`4SbmphDGak$w`yR{7 z?L7DF;32fExs>wJ*oCzvi{nZ5iZ9D|W{&kaOc+^48!1&+UL9~5q#I!~IDAOmkpF*w zoSDNldp z7f$~mCbPK>1rs`UjcgGg3GI%sy9AzZN!Bu8Z9INmtTn{SO zdUI@WhxxU+Sngb|9Xe+@J$X$u?1v1|1wFqG-t<8Pa}Mz>dO{~$5tooj{Bd?L6W_Wa z6w3_L9Kwr;O6!RMIe~||)=e*)&$q}P&e@T`1(5_yq!W4j-<$+(|9(mzsCN-I9QZLD zU}t2ISLYsz4o`8)?T-TQIPeO-(@I~vS2w|MS0C?egnKz}-Amf8D8)zAtBD~L&`%%( zl~Y*m^okWIw1?VQRKYIf89oyj#B> zK?KJbWx=**egF@*t;Eh4=&;0R7Z)xz`JddyHRo0=BiFGE4(B!I-%t1c_fuhx@dRnf z-wzaC0G!h6hr<`K;pFf3KbZqrg6qTg^~xc5e4f`gudM2DC*S?u-u!oNL6)F5FN8tG zoHAVZe*NbD!dC1FV9=aPI4{lrBvEqOX+)*lys_A2cYf%Ht`~Ct`R5vh|M{UTc4i;% zJ-|s=v{WYpZtDna@5Fro;uRFvFP71lVQ3AxdJQ6S3M3TT4B{AsUu|#xoh6&NH@X-8 zQ^&J+GIaw4Qft|wcXsuGK@svOhgzN-e+%kI8UwR#)Nl*)ceuTIbsx{@9T9GZ{*z|s z8gF$7GdovMGOEu6e!$!1m0l|Pi@^_s>xOm>`Q16c*}_Sus!g-o#ZM0cAOEXN0uD8b zn0>jbfJ$=VWI5x*4hh;{rw)1oK%R9Vb#0|B>y82vM_&`gyRtJ9M7o2-9784#^j>%F-vqgQ}+L-$m1LB77AEB%LfDgYwP zVgZ(E{-ucZ@5?9d4^y#Yfm8$_D>~l{X7K!BDo+2K%E)F@_QNwMg7YYK1xTle@`H@a zL9&D!+{pjgtZNolxU8z#3&sR+h&vWd;HOSNWx##@2a);f?o8MA5TE~Sf_`WFCYL0S zRS>5D^n2@^GSsPAQ@Uu%kbP!)Ha;;aAwJR2&;&ai&|E-31;FCD(a~AUMa?e-hX8?P zl9}XPt{uewN^sXd>9A@3n0Nt9R>fS&?J!>|aagF2TNh1q^g*kT32^$`sNt?AOZ=z| zQq$1HXdb4~xJ%ggnF7M+hUmZ`$v{W&F;^MUoMPIp-Ts@WSmcYw;Im*VG>Rx}CN5W9 zRAJvq#Ur~#QQw_OSg9CvVHgA+{LF4L$>7Q8X`2$-;M_Z5vR;u$f|WLJ8Dl5R;f6Kk zf1El`0l-WDO%u=HRRst(4DELb{zgr_zbY5%A1rYXFt1KvR~{}_)~2SWk5IX}UBkm= z%T~_t61{!j>6*+!Zcj@uLcJRylnhmex?Z8VUEM;hM^V8D6{V$)&6+RnCxj%k&%nsIs=N#I&-ZZi+R2*e)AZ#XKru{51 zc~Ik)H>gKuq8;7hvXMJfT1w|_wbEk1z1#XX^)vy6T)V{2NSxT(V@#6uFasrmV6Xbf{m)6 zp4Uvg#u#45Aem;EMCWzi4N%c`3J@o%S1aqP59hKKXq?TCAMX1o^A@UT*ocL@s`V1Ya2|TUurzH+7BKz4}XSj$m@y9%_*ZWCno@DJKp+dLh%rOvApalVh;v4b85pW^Osbj5m3lq%Bd(RZ%)kx_gGRX@E9NTO3Y*#EF@?NqIu4D(n-cu zKQ*^ibNYKwV1`(CnD&;JOpO-)*$~4?MZDe`ibKUP4m<8nmh6=nYWO|ZG|F*ZEgGW8zupN(gO^2JcYXk3R8)A4_96ER=5e;8n3G$?Nw+wmB@d3!b%p+-}WHjq$1a)42{Xl%cqno7fOFV8-qP! z=oNN8rD5S(dQKMsqI=cg&=$RhtH1?$q&HSbN1Tm(A6!|_D9iEvWV8O(HcT{Em6ken z{@e%J`qwV#vum`}hz2XSIUJugk%-*e#^_)q5XcR1AvAFS+U3H92P%8ASVDrv1CIj) zpizlP!34F56tWHX7Ilf4Z1P{7vUR`lWXUvo?$TkP$fH0(`F94pv^x_IgPc;1WDB>} z6mATf$7Xx!#l(^M-K5S_kjz3~uf~C@A$Z9S-9=vKa)=hU}I~ap^MO%b0#R8 zuPhA2)G$!u)TK0~W_Z$Ag0UX>QMr_jOOSI$tHv-91+xSX0YzBh`ZNl1#d zTTV?@DS%0Wy7d~lxrS(sy&$n+Sj$dZ zboeGaJ(HG-8g|XgtNheuj%4+H`vames+d?bN4f!Aac#x<(_6Mk_@4nVPz%vlo&4mktsl-<3h}t1Cls{N*o^M|rHA!wOWyy}dF3Ay zeI475YeVq)_b{aucWDCp;L*-+LjMOaV%M4npH5EnV18^*Q*l#p_1T1Ovm`O{dpMYO z4mCT3?j|j(uwG+8|CTx)G{ZFq^peN*{$Opy^594r;k_20aP`ZFMG>1bHK4a*(jq6W z%A{B0QX`jlM~oQeF^Zz$8MX*Qox{TazZ*V7$NH zQ#ds&G0cXlXIf8BN^N)avgP4JNKW*tEul^z*3iNM9ZD5%WH9_{J~+C1J$tq`Ajk|3 z=1uoUHTT!<@z$r-B|j$TZ4)#hxDFlGbmN`&D)HeDTrG^(Eh`jWbo=?4`2V;@7hwR= zI=l)EM@=4Przi>#-umCH=#lt8d@5XGZ-iwKbIcFV!wRmhk`=Sw8y@Q$d` zSmc9uGJBxzQhUGe8&p^wEk@&l^&XQH#}{>qe+XqJvlgK_j!id2>E!vMQfoF096_U~ zQhNIXNV?j?N-3yU7z1t4KNQK#`v2%%BvfDSvtBI9^tc|Q!8-WZSCr)iIqyHclr~gV z&W{g^zc}-GBVQzw&f>1#w{V;RADPJ&r=*Z)PD$m5Yy#+OX4htB2T<4n0Mm(7%72Gt zD=bK}9O-MD9fhx;L;V9TZd%j=ju6^L3Dc46g`;TM`jCoCyaDP$mYH&a!&0YK?4FlV z%|yO3@?8Uh9I(P;l+v&B<=oxpJ4D+^RAPQ7&Ck+NWi_T&;88O&3wG-|&)ajBp$P=S zC)rvyCa<5X7Q+nGxa^cUy$a$1v|R`3?DxKZYHF-GJWn4RkYRp`<@gd5MqC)wJ@Zd% zYz5--265~-l%#z6hg6&8fMX54o+*4G<`>X`UyZ5UoPcU~p}UcLPRxh&s72_17(dtIf$8uaK zdNEnlQgZvwG*0>p-+8~zYvxzihK7d9DISqnQjGW5!g9v7a1w2KZ(#>Ngn&s|U+iMd zloKBoqEL2*5Ed6-A>8`u?mLbjC6$kAPxnKL#t$^4qI+aHm88K*A# zVz(jdYw0Qypd$-2+=$eyfFGECn5oM94;f46ir$<+F|x<-v&R^4fAyc>WMC)XoHb8k z%-Pr>GZMKy8UGq5r?F%OD@%+*2ApWP4wWD_ATdJ8p%rikT0jsYbJ_{^dIG(e~EvfAQkqOA?MOxD)MC5o}p$c_5vtv$&DGTw_9k2>Ip@3eQ3 z0;Ex4xL#4RI5YZg-+=gP^e}Lj?Bg4tl+g9mIZp=!kz%5?;5K`_OosdkiRH!`YK7Yr z>ACE1lLe|dS5~i#RRR_D;&vA0dJhN=#9z-(8IcdChcr&N$9bRn3B2RP?}b!W7Jf5+e7j{o-bRIjU`X9tszgIB{iW9H zx$*Iqz>?*vN^vMC0*BA>L|8q+!R?STG5=4^#h-CQJD2-?O;mJF8n?6ez83cdJRVTq zD|BWBbuW~oluo?&34CRB5al-QcN?v8@1E`$xkSIOy#A^@P(Z;sYzW&q5FYDR8%wWg zQ0c0!wyoMZWnJ0ZvsS%Kl+{Tn#olBoa2^)5Sji9O5>3 z^`WpZ5+4Jt&pcV5Nex5_N&q=A(?mtX)jLy=4%ajX-4>=l82J{o_9_sk5v>{r&+Q4U z5@7rZ4k!A6+9zdYPsSt{vmm_l#-IxhMtka@gd`5B0At1DIijlLworxvDPzq_Du!H4 z-(7$7Rd{Iy3K?Ip-G!>w4ek5CDlgr{!7=1Orff?!kxi`}YMqX0bnEhM6g~zfCT*Np z>ezQVLy*Tv>Qa@C-2#uP#dcN4X)>SwKxC9o+mGX500#t4Ys&_`gqi5&fS1km!+73^tb%hwm3;ZH|q zT#*fLI;Cn0ZfRpB{I?H4CSgT=qzJp=m{J7v4>v@RCtJK38lZ!NIma~bdBN(5A@onu z^_SkzgbzCvdmls7vH1^kX8lBpDT2S{rd4%J8dWI|8Ld*$4xed85*BPaIPnpE@O8?C zC>a@z>_tg)pLy8;aPEhk-9M)AtInP;E{?*&X)OLhf%$vruBnX_nW3Oa@zdn;eqo6+GX?wq%a-U|AJ*^x^)JCJY=ZR!b*?~&()2aqkN5X zs5&kzl$;#O&Q5}I+31GNA67O}qji!-I)%P(?+t;P4X%t>LN+MTZ^WK*YTb($7w@C+ zxRq2D%~&PJE;{P(1hyTwEaHq|5v3dW0`lGP?&?HL-n6*_YAO z7V_WzI93$N;8A-VkYh-pK&?Ccit;X5^D2i(@X>86H5Gk=15RM@s9hXEmyJz-#{7al zTFaGu`obh)hAw2_nug?9Q@VzzJ{6W;wT6jaSqPo zVB~^uzZojQfc1WWsTn_u`zZr> zhC7|*=#7f3h{({dcFZh}J=uk5B;7(6NCj1@PE(%dD$brl2yCh>@>H<(Ybr}zK)S2$ zr^}=GMc{bKP2xZL9n{_l;5)?xG&E&TCwp`x{VGuzJTbY&YxoqKXgq&?|2E$_pI zP~m%cnlH%Z3_lN6bv%2YZ@NbDKKvQ$?jJTg%=B`rUpbj?wmoAY!SYPjywgRz3fhAHJ=*}gMH^UG_wn_r$SO0iU;#VklpB^B>(qw$;!>w|ANw{5m zF-ALcNz&@b*Rwz)4^I^DJ#A~uX=?JA==@rus;N}Ov2S+d;7DCRwBwM$8RPWSnR9Vb z+Ih@94L{)_e6_BjAw!VR>AlhS@B`dCR_W2mPS;`7(jxgy`>XgsUa$_5s^wVU5LB}f zJzo@MnWHtYnIjv+RV?~oEqHz}vFszJ(-fciR1s>IE0E3ZXk1VIMjMV9OJpiU?5>H%jpikHhiufx@OK_PYiG)6*tI$jeOanMvqcWhpQ`1n~) z_aEtu=!U#P}L_kej3 zGjE|diVf#P0#?#u7;sr_AeM6vBWx65+QpOmJ|sOLM5@?qa@Og8{Mun1#Ok|GG%@%xc1|FQM2e@_z>uT33XxwXkv zD4W$Eijf3KM>bt`9~PD9lnv>Hg)Zb<{)9MRPe?jzs?ZM{dXMyV~(K$NSANcqFSlhtr81zeHNK zv;RlbTd+m-{omh*MnF0QWJu|hh5@9dyGy#e8xcf6Kw4V5YiNd2nh_8wX=&+_uKW1; z{{Gi}UGoUe>~r?s@3q!zU5*<;s>?$d`Tkr$;S&ceTx{U9qG_&OV+F_we63g(ojGk$ zp#Q2PAl8tP4yk9=;_9& zxNvo?2H*QHh3k(q<X*G%_rlfSKwNiA+f>98%U>s!Gi0f3SI`#<8{1?gq-hq7R4md1i79pc zef&zP^|a?02btr$s$`8-4C^|E>qud9g|fgg$Wi#a8nHsO8~T=c zBURzaVwvk5*XNm}Y#kOcR(9-<%Xr?{xn=V{jd2zya%`TnflbRX$3dBXtLRPoKTZz{ zaJ#=Wkj3H4mlqDQ5dSoPx2M#K4?J0=1wLtMESRc%EXe7$uTJf96;aJg4)k-)QhULO z!(3b8EFw!;^pc`->wD(Gt5 zXSKn13hT1-G+o+@7U(StXRA?WTj|rPd4i&%V!id=ds#0ZV1KxIRJuUt%`=8lsO4V-cdNUzEn;r=(E zUj|%e?WkZBCf^eS0Rs;(Usv61E{{ULb8!SgIi=3c zcy(~KgO*WFG{)IpWGpn7mgZ1MoFi+p2VZtRg{V>TTy7$2iK8RX&}4so!2z4}Xt62g z|JEBTi?!UN0dT63 z=Tv?4IbhiDq?JK((v~Gxo1OYM;x)blktDvQeB2XFzU5)sd=_Ac*`dWrX?1mpu5``} z1(QFWbla-wT06+Ns(*feUSBiFt4^1Qh~%KQy3jK>3>ng>Oz^v8@89k2^|LSil|`7e z8yFx_0Xo|zxTI0zxSmcU^#>a9Z%8Wq;w9aFsGivX-ekKmN2qhi-HBezkK^OA4=CNv z{wWw|y^SGrYwE@Og?-Eu!;SQTmw4p-QbkyX-4E~*-d1DIcVCNi*|xuD)J!yX;Dn8- zNht`8x~7f$EkH92b+@OT4o_`jd#uE+F-6S*=`;+SPfL*Kb4_ zsn|YNl0EipVpUxGM`&m4ufM@};1CdzV@zel{ctMo)s`(y2wnqpq8b-Gq>VPVeUJ~o z(>tp&DV!?nnohD1)(=@#QDwgD>qdFCUH6)07`DjuDELRWami8r!%>zjH~?Lmg|jz6 z$~$(>=Tnb%w!}=mXK&jn=m*~)fXf2?KcN7(Uf=6HJT@Eofk>_MVpw!T@vP za@gMzdgHJj%he@jIk1sPA9Xy>%9b!DNT}053fC|U7`6h%Eii3`xN&p9>FvQ@q3jTJ z06)fDIn4GqRWgxCz8h+uHl~fc@$ee6faAo3 z(d%!H3u9oq7Gn0pA_ie?8ghP~P#wbH|Aun3k-&jgc`b_16Bk?xKNLmsz!SbYhWL_8 zh&5=Ca_orpA15Cit(_If3C9<~Ghf7@^*a0zkJbGre2P6MMBjJ{fp>Q_RQ?fT<>qRq zR4-4+oe}=U>1WjrJmld(A=2)Pae#oe`iLwq*0>GaiX6t)Id^aoNRm zdG=Eg%ObrpaW-Ekg5UuudpL&Cuu(L}ii!eb+(%r-dBbH>l$o**Zs`lXj+!_|>_uo6 z!x8T53NZm|*QIx&gb{}8q|V?bwo%C1xqZ)3GBX)lv6S~{-DTNTbr}V2ZS-I*8|@UH zI&r!72wHe^GI?i&)GCRmjSy-OD8!i9y0sglS#Lri&JA;+*9YS#lO@k@e8)NXMD=M= z01@c^{@23qCqyUy{vOpfeZ^-MsyWfi7q*h-?xSQYpHc6U3f4{~eA^due@>G3=Y^09 z@b$kSq`KW(fw_jHlrUt4Pwixdh;}}(F}}>kk2SUmcA2+)qH);RSP?UFGFkd?ynck! z8zWOdU&;##5S8cXZ(ngc>5qJ(9p)2Y5j`3Xr$DHHn566S^G;2PIUA4m`!rn76a9%x z$8fxEg0Az7Pap#(GN^lc_uj8^_`n>AMoM~=YEnPoGuISmpR-`SOc`98wfG;Q6Kc9X zL0O=S3~)HKY&GQz)pnK&tqXJb1TF-Bd=k#g%;^YjZ`vyflI(=n!3>y9zm*zI7Edp5 zz)fwb?x?DFX)LZBuG$)`_1$)~H4O?m1&RV%iJ0T30Oi z&Q7tK7->kFPb+Qd1wNK;?ZZlmiqRSd9w!$ImA>vv(fs;YDh|?xev3EHN_&xj#=)lm zBt7fRv$P@^!e~=g65;3bDGc74QUhrcZ%f{y4XhJjT>+n3{qmPU<&fDz3`cTGKHQJt z+RtlfB-B?8eh2$9G}QgL-03hKqqlrDWCi=4C8)(f2=sg;PmZUS&@nKWTq6M`rgCj| z(%3!=0!e%Wg9p54`QqVRSfn2)9o5W)b)>XVft0CMFo<{U$TmBgvfNPCrQD$_x#X6} zCmhpq+G*I`cu+kR7$WxOjIqs3R2p{uscDtP;D>q?$5kcz3t}VKO zsYr-cdN0%ePQ+Z`VU95RmqXK>lTVtp7(~s$;05rBftE1(KNXwr83oEAgMuoR;7_@_ z<)8aX>70h`UIc))-s~1>nre<{;8B7^FfrvaclV$Jc1&Ci&od9Pk3BY`-p8LE-A2AN zCi5kr1NEbfo zRBam^pFkl??HKI4-5Z(aPeYR#jG@iqNmrXIX{v$6KHfwYr}6$T0ly2Qdshr65L&UP zTL#*TK!(*{z4lQs&EJW1*@tPW$-vc6^zbFsQGSZp^%B8|??970v)vH5=#r}s=4A8> z;uiQSSw{*5yNl{|XITo_)|ieP6QPN}OpRU)Nst-^;C$xvmUqKuxSm*_`$PQJcn6lb z^kQxT?Y2K{Ug1{a7XpSNm*Cp@q4L@&eXtPe#)S#pYph4{C74Fhce>4B|7ezEj4yRh z`fs-iPFy$u$2vknuNer1b5#E+Q-&O*S%d2*a>Yj9xzd%mvbp6*Nf*~TY!GSPT5|D1 zo_8B0K~jo>A!{$FM2y`9==;`J;Y)w17tkOHs_e+X*AlZAx|Q>GQ=uo-nKXR5l{>R5 z(oW6oA|{`w2a<|BJo!RCU|_`NA;gM}^)0Jt!Hkpu#?OQh_R!b1__h*y zl)-BoFiAVX$8XX1>F?kDlG=i@vc?@KgF=jqRJ05O*vm?nKe@vW>grc)q_N1LidesT z1j3QzRFT3aM;}(Z|6Y9Mfr=*xWgIOw&SC*fXF1@BsVz9y34|6 ztgFg+e%FvIfN$zM-wC?VB*bo@Xr{8wCnbm7zpt9uS+q(g`yX$zBiy$}4fq2_J|d0g zW}E5jZ`_^es5mnT;%&ZAR%#9E7xJGhsN{VgO-)U84LSg7gckL$^FKvKqBXGVR||k!E1$rgYN7T} zZ?BXg161UB{I{f2`(AnC!?_0LW&@L*k5^Z%JIU5B%hhSz+Lrodi>H}X%XxWUkYWQ? zva-WWABhzDR1?){iDB%HTr9O>ZbJF3m_QM!lDQkVn7x#-MRwA7%N*5RMdr^!CSuz$ zKRs2zn1v`b6zXiX`%7%0c|2FFT9)1B>No|Q;XAm`g)t~Z%k1AX;U7B*zy%kU9Gbj8 ziM+j`>UvF&N3neDHum}E??tHE+^9geiI#gi65!{x{+4M2oTZ(bz4Zfrc?|77Z5^kg z54pE3ycBxD@)n%BIS-qKEaFT34Nc{Ox(EWTix4{S8%#~fVQ=6boPd^h8&OR=vy++%CSDzG4R>(xAgE8_|N2At`F3w*VOr1Y5A zR9|_cOLOTWKvV92m&DkcfJyC!xcmE02c0V_pfPMi@3-&^scm}r61bRRV-dW(XC9u| zPtl1IW=}0vKcvXWSEBZ!V8lnt$#2_k8o!o|-R?snYRsg`e+2;0Ob9m(<2mfQ-;?uH zd@nvm@%b}qastvKU4=fnav3N$OUMSS*gr85ctfa^uJE5TgG&&V(xyr6Qbzk2lhlgvcl>XqOA|rc|u0(|^56YYY0X`ui?x1AeZ_#ge zD=bIEPnr3=vRvVuYVYpzGA>YxmCZ=W%N*l77-W!=mMdoHwW<9Ccs}BFwyKyI!ApQQ~YBb()>pmYv86SKn>^j~>YV^4$U_?oAJsATc>;dc7B9`s%m(^1F zCg;*3D%euj*jP|A_S;S92{P!>kv-o@u6jxx*)F!H7?1-7phk z1>~?6e{Zcd-pAckjl$AVr_V__S%N|P5v_0E2?U)x_x8Q1W)$6#vWpFz*HNJsuiL7R zkd&_JI7CkYWcPmGelJsXQ`upe#W;}sEMA+E8YPP^DJDF#I`Xibd=3AN( zyXWdU8TuLorh2m$o0C(gN#Rl%Ql^F)O97LKiK~PP4M;?&uNewH;U9z{O$-l5o11f( zF^XW6eJlBKH=sytNx1iJioBmwVkY@yKIFU4nIr#P@wsG%o*+5o5w@wZ3xAIpG6_W4Wi7pqfqE9KEQnNFnt z`wZVpf&R_zOZf1Cz2%J_oLz*-rj6bU;@-9>lGD}N%FfFxDAE1PshNA!)tdlRAIuSi zNd5iRFN-VM3p`M3&qVL7`T9k&fmdv)Ko2rDpzCNEHekbt1gJ~`++QlBT)B~Ze#Mqh z)^@T=&=rh&<7y7=Pfr6qL|95n2qP#Z0Rf$pxJ{}eIdPE>e9786m7IL;`dZcpE|Hw5 zVTS))w05VrXz0d~RsKHRuO=lan&7-r1>t*mS1Y?)!v`0{5Y(3KN4>3nhp5lK!MS{! zI9h|pBBgmPrDCK+(-*ng9VRN7q?)e8O3ITv@T_HWhj{L=4ao1 zxe^*SnLg%M7?P7nK0yO|T$?cW>~T)co{wcdHKXLrpe7+c4UZ<pH1#wbMU|~J2o9YreHM-kyvekV{4{zS@tIu!fNIG;MEu{o z98z>-(<*9wpxfIhRHx1;RhFn*?GP-XEGwI;S^Sdn^hjlmP$$SRU35|cxH(NDaNwYKU!y! z>E1H^<|Im1eDVaK5GE-p`8JiJuTG7LqdTKUt3dMvQ}4EP(6V^h(z_0Lh5v)j-IPjv znk(zoHb-d#PxBvhiiBT=@16jk8E1vAk-M~Lyl40;SI(yj9bukl7Z9k|-`~q6lWc5; z%O0ozmZQp~$bLTU*UjSo6{oxMx-z$cDeTNKmZoXsF!i~8bllVegJ{am{LM)7h@c72 zi3_QgpGP1^;NNlR*`XvR*g3B#ERAo|aNc<--k@JKYtq6XECO z;CnUL6~>xR8$Jbu&Tnd5rq>n31Dl)6K6Lrm*9q7i|5?50_I+Dwuwm9)82jC(UfZF9 z9VKiDj_0)8Azhxb5_~!OGNaLcQrk;h9W}xE=F>QR_{Mp9XKckCky~xm8T6{$H13ozdx^c5!vi<|dg|e+dClleqI4 zzPYfR&%OtFEUIRDrL|ftI=~loR6%817A(NxTcgTev(@lgI95Ee@v_%bjYI;CM2^Z3 zogymj=6TWsZrf~OUb~@B?^y_=H-4g>8Gg6n%jk84K^wXG7@N)MdSNF#qs?n>uw}MR zo#|25ahg8KaoGjIOgWNc9N@wA=?Mw6!`wBp`0B~=u#d!_4w67I_ADw=EQTjQL4^QCcJmft^b;g%Ai^bm$)(neWZ`s+ zQdm}GA6GojwPDUlV6e*sqbuYgv63sh*<~q;K>-W(7tuNN8&SnIo%1Bi)3$Bki{Ndw z;IJ9f{?WaQh{^Bo?C#cStrbtt$=;3;3yl-Ezf>{?&*5`*z5AzE2c|shVB1nLT|vJV zp$@FOIebhlLHxFFRw5|yaUSDIlAeKyS(F$%6bC?;c|XS<7rnuMlKhQz+$vjq=>&^I z*JyEv!&!WDzO#JtB>R3H-{A~6ZlNsLoO4Bi-Is#iew2TawDUkZBx=lWP68a+JO(}6vQg+p?7HvGUnf~X zo%zik64=>`wnh-vw3*s%&w-d2#dS7Tpl5ymPkOZygXW5_ZLc&x0Axe`_}QDBIn~7L74lb7` zMx723?Joo+xCABe0GJ1?Dt`^%86Uuu{r3H?ps3Xjp0CP~7_j}E+s9%qW5uewt0dM> zr&_bQ<=Z}&S!{iC&N!t`(A7}9!~p1MScdJ`+oP!6kElZ()(T1{#SU%E$OGPKFsFoG z%?-*W*T-@Z{I=40adMF(;`OquveTIVUtX%XCZgPMnv!H4Uu{dTnMXdp+FBe z4(P{77+tQ~TppGlEWG5aB-pn;=Vp-gUv$Y=e@0lK!o}WomNBa<{y2~=Jc-m}({Q_e zUic8UHf*Sz7`@jWUVY!eqmUdHh>(F~G98?+e({`q+Z&}{P%o}uJ%b|HMey0=av*ETn@|j+=#}$_{FRV53pX=DH{&b$S-D6FftNpu zznaIX)R}P3)@?+Tc-m~FWskiEgMFt2|F*ZXqpTFVFY`|-RH$MOCJ97p!Ny8Z-fIxe z?tv+#eXlJmW96zf?AXTwexF_YWW_PzYcJ&F(@Dn450J593=`@ zqMN@?MjFVWzLo|DZ{-tovPDLbUnAL-PTt>$_R}S1j5CpgO3>ik0%ugUXP}Hl;;2pf zYX;!>?r3-H$E)ebdr{1G$ulzrjU2KzEp)?{8(<%o+Slc3e;#coT;G^Trl z=XlMgo|#_Zq~nw#@BxBv3DdVGbYGf#?(KIUM@&%fep_0rc)$I0xwJCAU)c&n1vBO& zEsLU=iT$V$MP38%y!nnDCHSvJ-%4=3euP{6P}Y%(Q7(r)i)#;OpPn;8sb~N`h_R&i zt7R;CMc;)N{Fr!`rAo^(*Buyox$Y>xO&e}YYUY-Ne_h%sul3)pO9D$nL(r7r-p&zW zvt#bCdt;Ckh6AE}h@?6zi2*jdIw-t=Z5v zx?vQ%&{->&=hCFp2E|Q#0T2_Df8CDL8G6tBsHEuwPi0JoHN4enUCejTF}3jt@>B0E z>j<5i`U9m(gG+8dOE0u0!OkjN>N|GvzoXc6lpv?XD);OueUgL2_merWBM_6pR-vi-tF zI~RmBb-;^w6{Vw3d(eeI!#Dczg{j-bHZU2JAr0;Psp{83Gl$w(h+3-gAd1`VMq^vi99WOTh>w<-e5R z4NtKqXR<;L$UVg#U4jXbb=$KLVUB5W>ktx%=(;~JbRqC8{}ALHd1KXeR&6GXKKSC> zO&(FRE|PC0Pr`x-fx|)RXg9R^#ylNyaG*|+jIXC-ME1Ohkk>YywEL^jjRyO5t3Apbk9Z`h(D zflH~=BWA5zqW?pYJeTjZoGvz_{Td{9>KYKMWK3dGU79hXW( zoJH9DXt_6;DFN{vN?GYrmLGT=xT z-uM|R@Mx-4SP9`_78g%rplmTVG~|(Bof0?y&L#RV4TeE_U{#3CfyPVE)IsM4iqpQB ztM@Fr7`=7B#hCf9V8(-+-68XCv;bHh((RRe(}m}~6gQ8M*${oy!i!&>6!$uIwtHd? zYid30&-Au!ttHFf!le>3Hq>?DPgi@EgA6c8lFm$_VU%mGS^7f6s-x}pe;|%!Lsr^T zNt>Aa9k?^)@KhW`itCDuS+SR|V)HET|J+S9O!)ih)qm1OigrgfnnsETqKQmtl)s`y*dCeGc${a+qbx-!UR}ylBuX|f& z7o08{8~=hnlg|4KCgiujS3>ci7r#1*Wh-73B$)X_51htq_m;bCUs(o~{;;@hXg|cn z?)de`oGc+HJ>?CL(X)goE@D9Pxp?-)m}s6NLlS5T!=n`VP_lD+I%34nx|$Su`*X~$ zNiyiIdhxX1;^A)0NX1CSu0u|XB%4V3A2vLJr>%j{m}}2v?3jTMGd~xR4=1ChF-WzN zuPl?VZhulyjjs@^5P)unzNiV{6X7V)=@VSxQ{pFynKz!%-zsc2-;a9R))(QN(x+L^ zhTdP#-|A&?=$6ai00bHY@?%!<~Uf_U#QU-c|WwiuUAns1&os+6YaE%;I|>gj46 zURD>LA^qR&YK;7U&)?AbM^VOPR00(mK-$n&Qb5PY_bg1zn!7W}h@rTQ2qPYXU}NU2 z{_qipn%`llDBAK_th1eym4&`tui`$Z?}u0FViw#S#CM(>8}I*q|DBnMDvpQwjUnyW zPLUlP3}OSMvHT(;u!;&1=GXn)PBu0*GIZ#`d-E`~%z`4q2}mVoB-w*EZKL(`KIO$#WRA%a?4%d45qa3>D|NZ*irEi4t z`M9^;Mv;`1$dbDHMCV0-3tpDi)+zd;eay4xy%L#A2Rt$kcCM3pAWqzU^p#$FCEQWE z%<>kGN+?*M*GXHAB5OZ~kN|}Li!E4rqO#4scPuMX-@jB5^&dq(6!!Nor`OC>6?PZN z`m#aU^{{x9CAW?84|4+^p>vdOtb3M94?&oE$ZI-+@n<|Akkv@ko2HwFpG+h(eso`; zqHCMl@gN~djYAc9`7&ExBW05Rr8uKprF|zMZ9=X%I~wraC#tU(hdPNN>BAXz4EcM7 zii*yi6EKjkm~Pte4A>gW;qkJInR9wLXgLsE_S123dAoE70B>Kt!O-_OvQ&(;_6y|sl(uv!7g1$pG?z(ZD3+1(dv~} z4k#R4Ph{DAJQN?w{D`P&V{fP{`%>2j*YFy1n|Hv`ktg{YXZ;1caxobL1z?bC)W|Jk z%Y7XCWcnvypQ0GF3VFod#QQp&Z`CYQ@^C6}dq&^`AX+k*diSNG@pJSa+^64I)h6LD zp)Qp*PIyrybW`;$5DEw<|7tl8U>FqWAT9R08j^Cy8dcNO2f&g-?xs`6MrwyF6XHj?kMQ;Y-f_3ULH5!Ua?SP#jRHpP_IlSA(;++xIU^cEVcPa z;W4O_erh+rd6F{oC)-6WLXLyr7=Fs?N6hd2hX#0qgvBq3-ta=E8b^nAAjVj)6s4XOB4(E(sLCgz@rihN!7Xp=U`6>c z8zyQ(MG{4D8r`4F;A=ux$bt;aIKKo#(QVGbUQ+i%iXsq`i{E*UD$i!=5X^9lZVpq$QD)s^ zci+|~q=}56fg%lbqTODIJR|s-CVqvyI^_Rf>mcg!@Y#fIXr_@Go|abcdMgGas19j( zHywiis|lZ_M~JtHZpg%^BB7+Jqer=Erf@zZN*{4fjIb<<4-KirjAEpDbvQdA3n7slz| z|KGn1N{#MDjP~@K7fe88FYW)y5m;aTrJ?MbyYk#v&ZeO$ zmbZcZc23P`8I*WBSk^1O-xuy=M0MRBZ^@epO1J#i-Leuiv;FX^?brqh z(6d1xy=({{+4Mn?{Md0C;;#}{1A`5uQ$^kgne0d;4kKPG{t0dsT!K(DqJ_l{#t307B7JF{@7$lxBy-XB zzGtjEdT8os9{zLcHa^_x=M)Ta*DbG9T=|@9W)cy}uRadbXHSs0+)z^MtUG!=(6_~N zdG#3+-mnDD;tNO`bXP(r{+6R8C)2itNP_YFyYr(iSMiX?@C;|OA3F9^!@Y*4u`1&u z7=~xx*tl%0tUW?`Ft17e@A!cnj{^c9=m-e$O!9wSTl}F`!#D~N{#ywDukyj-^BBT~ zI7O%9WO{%*?j~B)wW53y4hl^p6%Ni9Hw8a6^5@famokYd?{Cs2VC?X%I6V1MoS?l` zc&f*a$#_?;k@2oqU_p43()M@EN%S3+67?nrJ1OJ1uU9)IqprbiJYwC)(F^Idtw9gV zjl88W5Arl~1D}yHb0w}^??=SZXQvB6h_SHk=`Xy{tEa$44wRk{^AP?JlSStHfbwf| zm-!ZwgYqn)v&JH{w|50^I^C0;U_9ZtT3R7>*%PtH&-G}>tuL~Z70}+(wl+GS9>RS^ z=!_BOUw-b)kVRVTF6=ch&u69^tFD)#lTsVJ<(`&uAeJ<-#zLESR1HjKrl|2S-d7or zK}14e<^{bwK}X3?)44v2GRaLWZ(V5`#Ilr*ZMDBTAIYjc5^e1smBrr;{(m|o_KjE1 zQfvv0j6yV;%yt6^asz-rqom<9;(-qYNi-iANkUe;|5#|hK8{Qt7*(d~M}Dp}Zh_3Enc;Igr^9~6bSe!%N~K0aiw?e_BcnHWyE%U$%s z@mmH5=%$D(zjwETgSjFhUW&V)X{Fzrb{zj?nY4+p^MS2?(8J)NdtOyB!?-UXN--c*aOC8mN z_S3Uk8hQetII@X!`8`$*Oa9Xq)rRKv!hTQ(5Mda4z1KY3b#-#mB9S9#EmeDfI%S*T zWgBMwwyc}@@0s}C?h7oSH3(*P@6#|mbK0Zy@porHEJ*acxsB-j0y_(&slvU8T1un# zG1{;=JrJFGXL&^`8hClzH0Zfd-7tYH`;D@t0(_8AcKFp!#m{*G7q&L{=BeAkF0a72 zdUtfK(cu|h`YCBe1me)>wrBo!_J?icg!#80kC_?^%=xe!*_zisgFNW|TDi-r>e`Hj z7QcBN^I)-BhbzF4I4ytd>~mW`8A)6nw2?75sk%B5e-k6|UD{Op&A-7QK1d1wgYn-$ z*<`|;R*5s)0X7FQynHC;Ed_e|TWUG0$}Z3spCHGV*m7L0ybGlk7x!_~ERz#s5T7~p z>O9_=9S=R7Hp7Sy(32t@6{md?4glr)jW+$~J+OZ#vL-yRFw>F?>#E~PF9s1R&(??$ zr%Bt^1sfMqm}stnZ+~aP%Jp}V_vZ3u?g&Z{{Pi{!GqSUjUOjKaJ)?SH@qH9n>l+Z; z172Kz+H)i?+TxJabn6inFo5gwk{qr%AIIfVnA)~ZwY2qaW?|(}4jeZew#(!`?}tC6 zIzVKhZfzEl6`$q#;p0wr>=OLtT`YU03!^Hz<|<94?OmX!Nw0EJ?D&`Tg73YNjy$!P z0rjhv6B#OY*!5{XN^j#+yiLuW1ig4l${80;C;%#iz|as2G|Q2>_T^IB4S3Kh?6R!% zKTeKO`UiviH=@_ZDXxN{&l`s_PJE6+v{9+2hp#UboX7yC$vBo3!(*>T1#hln{6x1$@mL>v9tYpcA zwC+d6G4cXa{Lu5eOLX9ws5%WvBKbhx-ZY(QkXC!8U3MPxCLHD~Y<_c0L-lUyaC~k>-$nu zHTN}LZ}-~vWvuwkUG!;;$4XSpr|$pvYUBN5{**nsw=W)EG+>)R#`EOWs7JZnC%pXa z{Y_M=!JFiW)$J+5?hQs6$(g3S9f@-~?i>A!qjg(cD>4!Lc372^p3$B=+}h*%@J=)4 z1ZS#(O!XNHS&K<|nE71J;3VD_@w`GsJ4{heYu%?!R&)5_PLnnv{!=trQ9KTwW^)@m zLdw0Vrb2h+Ao%SKQ>=L5j&yPy82Fuhr$h{J+kX6$jxr;iF`AjlD0?b5a3*-z)N%K& zUY1QeG%0SC{DJc9L}O z-}-yEl8{G5NB|A?Q~YF%1)x_Rj2D)wrtA7Mw{v%Ysj3??=Qo4;ZiPknvc%Msm5Brj zz{`s0q-%!CCeB!1N-^dNy7(2zJq180My+LO!Uh@K&eUB}!(KAqxYmq@h*3cXISFc@ ze!e}N{KCTB#%d#DR|Har(zJ^$kM~q#1nAjybCw7=)pn0eE>OaXtx!aS6DPezS?79| zOh=6MFz@L!n^w)2Kt@5HVNjeLBTH-XbsxO8%SKw>m@&HE4B!v#yVmD@Gx*{U17}t{L0x!NIWyF z8r1Zix%^7AL2qQzB=rrWb48cgYoWnI@xECk;_m-BFoOScBHn+Tb`bUXV`r+X>Se6# z<299EfR(6@3HZP}i|Wd%>dIQbsMiW+DwD>^>1b$(dGDeEn0R1@z=0VcCQaM_RWHh0 zO2a@$*I8v)u8SOo*yQA32jh7!o@mx+vQ9Z75R#AwU267wabhpZJ% zgY$fcgmmp85|1=A_>!rizP71$Rgw}Is}?czGZN{5|Ry)jct;dY4W}`uSh8f zAt@m_S+a&MRnZe6X-*Eb#_CP)hnWxnKB!|H8CLs*Nvo%# zIFGSx>GUd^#uPn!jSI%;J&CjL=jS=&|7|@H?N9zCSRTNJzsylxNCM{wmz#(Q^4nL; zAUsz`Q`3eo)1X=WO5ecXtQW6aBq!dnrY)OcFEj-mt=vg&y;F(ozQZ%2tE#o8acI+H zc=KiHL|;33n{M?J+?fcwVwerTEf}-jeX2u}iYi$Lk;8-xXs4%UsU#KkTTFkDy)@=| zTsVNseSCc)w_uRA)PD9O|2`@n0(C#LW_OIp)eCC?;<3 z`v6q*0w<|J=z#rs%!RN00_J(qocZ1KyMB@gGx|f|C_b5E!S*|kd9C(FXa+w30V*ob zZh2Zds~R`s6#sKF4Eg>yxK*mJPi$)P7RiAC+N`p6c5WIP<-=AkJVrV?2Lo|N6_wtC zi*BikFEGNw!`JNTqfC4zv{Q}SMFm4=s#u=#!k2QZsuu6=3fBJeGA7ThdIUn*fgi+Q z3t5UaArOd&d*4)FpHPw$&Zg5sv!k5H+LSwe>aizs&-3}*J=6IX#{_D&9-9T#gmsYCUTDO{7ZB9yII|` zR837+8_wYN5j$(}Oq=-h2Fz_i3@U~=e8J${rn{)n`^TRu4l$?z^Q=GQz9Zf_Ri~D1 zX?ip`>=U&*Dvr+2!f7v9IHbHlzQP{B9Fsszkx+7GK$N3+YRfw;VK^GgdmoDFsOB`t zx3hqe?S8a05xIh$pE`6BatkjwjZ73ww$H#L>#n+a>TR#Ycd$yAR5S};)l6KWgGNXB zO+Qz}nCt)ko3^${b_5|R0muMI{NU+C7PP(B}F*C}3v$lsom&MV8OS^ZC)3VS67&QdkN`745jH5TD1cb&8 zFLiJ^dJrFtE=&>9A_2M>fh+PN?}|4G9IM1_cuB4;2Wh6nq*MP!n%}+kU^P^hjZpxY z8+h_IenF^MPi7gFIduo^ycO?ydMA*Es*aNFmYI2AL(67IfLF zda9~O2pC-=w}?mq4Aw5&Lj`=dK|FLuArwcnxSmPafBUoN+Rn`m3@h_JL?eBY+t}hI9!mW+9>i1zA_seq^4f<9z86oR{b?< z-+L;Kqh+wS*G0@i2~mmHiZMJ~^g4I?YmI3Eje^i;jZpOo;`$Bb`cG=cywazOE$783 zIHZiqD#QIUUfeH;X2BuP@4Xz3h8?6gUdWG4M(;W%d|IM9A1zI66cBJ8{Q(mXpH40~ zGVPe^RGS)Kc@1X)CR6Vi*5<7{5#{NAt*yQa=ghXx6U?TAuX(?ElSRr|*DpECZ9~P@ zYIVRl`t|UR#jMj0L74^0yMUg|%s#O6o%oXm=pz2bCR>mXbmlR}vASU;j+4e@u&g zZ&>1_VsHr-9@_NPb5InVmYvH_n4}L;cNz|F^JBxf*})KJO}@+b2uZ2;Z^2C4TJN9i zmwHY4A#)l}g33SLxy9O#+13B<=D+j*F7Pr}f<^Xql1zxKd@v1}3UPO!tz~2IIg|I( z{JWBvNr^@yMfm*j-k$l_KMr?0j&AkOH7Bq+;;7ec1dX=)>_m4ZE_>wNlj3AP^~hb*(}+R@S)qcu9FyNhh@cjCWz09Y?&Ia zx0#!$NE3XPCF(O#v55?b=Z(XvT8aWo5vSL8@^tUCh+kGNoL%Jiu274) zU+GK9$k=&V*^TrFL6+F-#9h99mi4Vh3L_|tYSveiO+9q-k*r?U*3~r3Ob=}e>v&1W z7dnq78+ss|nt0&h?d7xS(FT6G>FA`Sr5ZsIN4JuLsgwq!doU2DrRjPF`hIyBuTmOc zd^`@*sEkbd0NNDKb17%0!6oL!1g@6*?v7k~1g>J9KQD~6KlRlsJU}O_ygHKmG|$))l|C<`C?+?=r5NXS&32eK z`vbMx;7xF)^$^ji()}~%QiFt@PFJ>=zYm7Apb*(&e6aGc)g!u&FVg*=$6@@>`2fhF zl=fQM@zT}S_O+Ibp;Jim%P-o+N*DFt*&G(WHmiEP_&)5Fsz^XUMFOEJ*R8bj0P|v+ zELMckc7Hz5t}}h~ZZi>puPfW+F24~l1bvmGPW8Hax;m+8>7?nvt8BSoXQ`mnrTS~P z`TCE~3$RDsJI<{rAni+scX!{u(C|y*o3uHFjfweqx(_U4&?VJO4t#&hs6p~BvhARH zUMGFzUuj&}2Q{!wH%PMLPd_!zpl6PAO@-`mdjGh#f8iNeSaNa45m8W3 z%rV|}liW^Wi3lq+NH_J{rHX2Lj=vjdn36*9>D-mAAuILgL5L#RXR%(L^X&mNQaoV% zwxt|F8yFFE;wWN#(QzAvVP|L@nsOudZ;6f`g$Dl3GY+l(A5FLEAI4E#V$%J=FAy^v z{5-9l_(i&mBZ{Xh61t{#o~EYqbEYHg_`o1Ph_V157U7dktTt^pzA`KiZti`HHC zjIS~}WF6t@$I{2hk?ptommL7Cc>zezuO!Jc^(M8R7z0dlk&)Yf){bb{^r{=pm1 zW7ut?sm+dXf(u|B6M%5wl&4VPihXyTeIG+Ej z<_^%8z-%?zcWN7>CnBO9@j)ph_mh=qxof07$q?inX@OYQGeHEGj zHv*V~Wjb%I4mw=MeD1#u~9num*ccaoJ-7VeSpdek+ z-QAr-{Cjxc?_1ycXR#Cx!<=*WzV{v1b=~{m6{x;R5V+S1P<#v?gtuvTEzMg?G0GWJ zM1QBCWBpq1-*KA%7Fr~DXk`G)8PSF6fhHYMB;BF3WZ){b2*bYGulF%4?<3au;rc9RVin>vf){Tl$f0{U(GgG$L7xa``lmF8d@p;y7(R$hm58U zW})dSF{Ra)sq>4A&+h%KA$4|JJB+LI(?bozk09gGl-GSHOoIxD%tTkC8Z12<9Oh8R zz~i4G=r4hC?<;#gxqhb;*a{_0mXRsOVMfH}OVu>;$8=R+&NiM2;gCP!}Yf!&BhTJuVY4En0 zVnZ~heLOsO;cfk-|NY(9xJh=urm6%Q?=#;Fb`JCopCbpH_gT2(!+{+Vmw#XNA5x?2 z^_!QnHaOy*c9cHs@E{8ZJDc9NF|C6wRQa$4Tq-2L)e@MvTF@ye833_I#4U+I#r zwMFxvFUKp_{YDidTY73Sub(GS`I_S7JVOUcs1EepE>YinO5=-pGC`LRF}yju>%7Ms zS_eBBm8b3cA}1YzlkF5rmkE-7n_O}t<^*Yon8G^md9uQ8)(>X6V*y9o= zUBbZ%V8oS(Crx~$KVGMFRg90Ujtep0N>&+7gSFCk;4=D>m%bCsE4GNcuE4zx?5%C9LN<^3t&&XDa>9 zA_is{k-L;0WXNQp{1KZuTP=<>{l3C+!dlKwi}?58zPyCv^T0qKpNuc*U%oj0@9SA$ zh))^?9ylKO&5o;gzu8kW$#{V}YU6`L_`<~sndAO!Ja+}N{rY|#1o3K-amL=4L#gv{ z<9dUhx{K`P_WT7Je07J{^!V@~9W#utso4{w-_C+DoXg!#@s1rKTXYh zg19>`H@W#Aybz%eC>UWp8y+jw6O?7D#H6IuSOLeRCF$uMD@Or;2?@6WsPiV~s|m`9 z02P}8@!`6={Kt&ubX}atRU_NP-G=^IwgissMbU3O*coWgo} z-7@$R3anWR3RKh_SJXdl(%0BSJwD4|>ksfEt{ZYgh_w%qee?J4-}b+MZ-*p)WoNrz z9>#B;kTs#==ns>TN&lkpU{tcN6k5ZV@w&_OFWDzQK-UjYq*IsVxD4r6OiU=?;8bC| zQPbEm`r6S6eRsdXZeJ|Ui|H! zL8*vHkageJ_!4U9A<+^0lulJ%PtV0PA?lZW_dWkJtnLzLG{i-sdLhPEdy+6h^%f@z zYQFhB>QW{vKXmwA{vGW=Y6{lfZGZ6(x)woe8!tgTSKm?=U2*ZjkbVQS-V!~S%_ zA4^tPS)S&^zB=9^EWnbp3Zzmqs{2-R6c0V+*-zbd&JZJvqq8u`&mY*RDp#B#i#r$i zuxp;3e_OFGiG~zS_>@5>l6s>h%a+3!f|?pr?O>xPuWmXZq5TLVwDfOy@jgfkB1`;w z2_5qKpfl`wnQ9+lAr3r@%o*3}8J*-7{Suiw{x;#n+cJwHGx^9)>{S6}h5B7 zfO}F$q=;1ffD2kWN#V|W|E?4;WFNh(tSKJYN;};VWIgu~4-yl$Ac=Yr*2z}&Htac? z@Bj%!$U8q)t{)bwMNrim40a?y19J~Kj);g@BkbU_MfB)shOc9^(*fDm!~|AUz%s=9k9HJa|Eswj+xP6bbq7k#>MyDf1cW)Bk0!~ zN}V<#!;Q|-amN+kSZsCEW5%ugQFdAKjDL#Vy_0>h*6}LBtTv5wLQ4;~u>@|zmagP{ zHS?zA8N*}3Nl6KE@<(0~Laiha@EqI-|B*<&`Mdou0b&t&l;S~GndFb?lx52=4~>tO z22E^kqt6ualqU$)rN6_p;o*Pq6#9Su%XXwcDKNntYBWvQer$s=@ZVaZYL_n3&5N!& zBnaJX&!49&jvb9CSl0Ze`Hk)FXAIGO_Mq_z=b2b75-`!<3%;U?+A51*eyMkgwNFX* zi?bC(<%@l!{XV>YO>Ilb)gpm==oHC-!lC2@&eLC#jhn!56pAy4fzKa^>v4rB)^J#9yarFD# zqE=TT77wCS2I|26pFeUw-{`Tfh}_41jKwO#5SzLqugdlgOy`kNIZIU<*d{Dc9>twS z>FpB2b(B^9pA&k?^zZqAuRwHQ6weVx0f8K0GTO<7GJcimPIF_0yJ=qWUuC^=gEXKp?Nm_YnVyi{)YOLw{xW*yd+QN7?c_A`brV zi`pAy<^OyS{zrzO{6D|-dW>*||Mw;I=)vUw&(CQPI(SANM7A%QLDwQTCvj%}W%%Y^ z4vP=LV5*UYo`Hoq6sq&h^Diw8JrA)gv-(HfNS7+}!Xmq>DhhqQ)aw@4ZL-(V;3E1APC_@1nA@ysr{&T|$uq0fTy#{0mA0KXDHRqW`P1sH z8W<@zIbCk|bbWHcHH^1*JS;#4wzNVdL zAlx?9zjn~7IdJk$B}n^yW;${6JKq_~uD9PaM>~f@g8p!39I!Dq5~STmmC zG{vnT#jIO6YPMdWirxD|oKQ$r6k`~ZE?f#H6^y}4=__N{(%+(+TeuJXmUIm9z6 z8FuBuQBYRx9vxVfuk3PuovbJP7;!?c<(FVS=?G`}_%Ko$GB)WTs2YAoA%xtcR2eVB zb2olC<6F$HI227fZ(jOR?-C4OPhk%%)W(uy(bGvnd=w5j^_Rzb~0sujyMl3#+b5DDY4qK#qR1%V}+67y2#w;PqfrIEv9m{r{t+e6_r~2 ze0A#JhnHDI8GU`NPFZQs3FmTNm=(@Ct8&grL$?SrJQVPGrjw;VOYtr{NNGt$OVsjC zE0Ipt!Pbrq6`y>oNo^*!ZdgD28^&Ae2*(Q@W5gaBr!?+S(+Js}n-bF*ycnB_=EaaA zoz=)q9~djvwS=$ibGhj>->%f4{`3TkVj+|%fR2HanP1qz#Avuc>x90StDC0Bhj5!Q zJCr8l=V2GHOQX=ug@5UvB;8uQD`KZ6qGDvS%*`bL$Toh1(;Hs!R*y<%OYl&B@z+L?P_o2NV`KI^qEZBO%ZcgSHf>e--n8L7i%n13!f zMmU;3z>}%J0w%0Pv-stVnXyK5xGOKelme*MZG+kX3+f=9X9 zw)+>RZRg8nPNLC#fkII~rH0Tx&5DpSc1IfnGfa(yL_65j4}0Z;uN7|aKXUFoy?Bwj zmgX&97-F^GZMLVzl|&^X{X=!?<0BF{Z4EqOQo1D${f4p9N-7Ha2dje%!cQGxD%~9k zXDzpvYpwmR%In#VVK5eBSUbz9Nvu|Gd&e{Ew{en!S)h)>&wCM4~vDxY<2 zDjc)Ub1#vTDx)i|R<|OyLU(6F^6k6PnztNAJN)8V!`>sYf2paik=^+0?s|H?!ptWl zRV*=*TWq$f@n`r-T}XSYJyGtg4`-uiFj8NIHy01o!5F8AouyF}^qFUvd-{@UbZd6C zV|mUqB#(-o$!L2%H{cI-h=x0S?VdjAMAMx*UmYC!o=!15~}%``2?Tu@)c-U=9Ui-qx~b?0zY3G8!D( zti1%sNqIbd;9c$DiQDMOEywh9wZAP;(u6`b$HFQ$!x6pJozzst zv-WZR=OszK<$I63b$}6Jpa*?Ha=X#y+Gpbtc-Jkab1;1e`Xfm(Nn9s3)MUl}!z9?; z(wuI}{unRsxsON*gyOF}arsfj2Io`hvyn*Sq>yC`L2D-j2aTGk&%hX;)%Uu-aLJ?7 z^`7A3&)hV@)=p6>o1B91_x|BIr$eelkInU^t@Wiks~cI~nPaHk?Cp97675tOhdE=V z*)kLgdahs`PFRdR?`k!8InA0qbCeS?l4F`S!F-4gXy6hOz!Z9pPcB|fX%SG!B{P3l zQ}^usMz0UIr=*DGsX9+-hC=uJWM-=DvSo$cM{ktMjsl>Hoy9$w6|T;F+BM2j*>4sU z|CJEnICngCDa52vn4_}QCJ3xiW)3}pfJmBb{$Mm(qx}2GFq`jy z_WIJEMxMDz^}y;TazQ|DW&s-<`0kKYwd(>#1rZQ4TRbp7Gamn0KFI$aGaVH_ZY9chqsG*)~`=}{a)aw|3}J!@+6?e5k~o}W}nO9iKjHE0d8qKx(9RUyKxC{^Muv7sx4s) zJLvs{Q!061({kEK&)*Ajk1uGk;UW2yhW#8})*aDTIgUR-yqz7ZDW^{d9P2{9`qV4K^;(#htBed-?cuLhJYd zcw(-TFzr$+1UVkdDxR87Xlk(SoCr^x zTSmvA)$xdd4qiUh8kFu19LngE=7TD)SMdI%%t`Sj=F!!S*ust`wTstoXv2agyY7FOMTz`Nci4h; zv_f+lT!zs>G18>EawSs#!V0-gnmPwHUM3y(MoOqLV5U9qff*`JJ+eW$*iCg_KDkor zi8X|AC@EFDv#t`j+daYenXivcS0?fp|FfB-p9e~Np>Dh>1TC$Wu zL{zSZse5B8aZGdlK0&WMpG$t0Qm}&p7Ya#hjN)JNm|@w=km;#;URI1(qKg}%J)l1Q zQ4$%ME;JbJR6;|o%ihQ+@OvADs_Vuufl-Gqv~uS!GLw`p$a%#z)Cz%9tq!&{bs106 zkzm6vKFOX~X~*`%9-1BcPR8eY#_>MNKZ(SwIOUziVP6*LT44TpIW{(`O3A~VQV`4U zY*jK_zDMJGjclVuw_Q!b&8sVfA?!YPoF#FcvLI;RzD}ea#sLpO2E{@~BXWNX9e2 zC;DxSxnfK?6?a_6HEZ<;qpe^?bg*b&T&@veSn8dtWkR{E} zI9-7 z=1|$1M64p_a~=-Ip|NrGa{K!O&C|At1H9}GsGZ@#b?kuvX@e60ZU$3pdA&T14Gs#| zd~NBRZY|Xu?3y9BT<5ofgNY8IW3k1~B$3FjIG^+}!;Xlc)L+gn z>gf^OR}+{K(+R6$S#UmNe(Uf5gK+znr`mK?_WRjIJm39MFBkOh#tB$(t9au4?q?3a zb4rl0enBY+1dNdxzsfE&PhUQoBjO$n4h)IZGLH5yo_Fn{k;pH|+ukw7@5)NgwQX6M zGumAJc_>!hy>etwv8QstZ$9hDev!KlDx4tB1H&pk;G4{0;vif?Pnq8$YRQGh^R8*nw{Z#fupT_0T@fGXXk#%y5PZ$PJCU~%!Pw{WNcW~&7&;*+*txIoreoX)GB zs}>pAC!HZ(a^-KmxSlFvB%CN}@A&(dx{{dv-J!;FMC!$Em;0xD4@@h}PfGXp@M7u6 z$+-H>M){tlp!<}=>26Q5AIrj#QIPKDSCjfZ&HiYrhst%4?%?GGc1kz*x!`@&5jj-x zk9-vZ@bRhL+Dq)@$$EE$0$o*YI+m;1fu2%QY=acsd;-))5^8Z}VK)=SM!oABM*h$c zmykGt##G_69tt@cE)yoK{U>r&<4vMxTk>tye5r$;+hnB{3rBcpJL83#-nM&MZ4mDFGG#ZyI2cX4zl+i&_U_!PfwSI-T^zl z8)`u6ie;si*yXkl_m>|YCT%(#6!?9yHnYZyZi?b#eh7wi(s4!R!yg+;koYmrokuV} zv((F7$TD1EW+J*sdV2wqLg?xFNUUj*>&4Dw&sg_RU)Nhs@}uIx3M6Be-l9B+XCyNd zVFM30RyeRg4$rd`1^hY@7KWIr=0;;JZZpPo-|O|O$i#D^f`4KN&`W6RFv{Ui<@Aa$ zb={9@J1>u&>DDCBaOY`taCFk){)v$XRaSdEW?hFLpe*ey=6qH*!{s4?p^u|f03C5 z0p38O%3=8>mNPJP8UNIblktZr35N7Ro~2HRe~kHDYLk_$4{MgT4sS{dIgjJ*K$mmD z@Gx6_wRuJnHC4vPA4RIFeTvWRG%E`}Y@Z$-H)>y&wlu@=QT~#&ENmaE`jew0Z)$E++6#Ka=rZ6A8hy z(X^6@K{C_g6-GO2NketZ7D8V`xSv(@MxA$}M0H$UL*YL{0{0#75^%@+2Y=OK==<4iJ1>4vJC5EqNrcZr-q%>H^y4RNe zYqS#7Y^!c9>3jsaF>WZP*{_c|38R9MAKaOqd<=aCiSj!huo`3nh(^3>BBJDk+z}P? zMCOHi`_&vwEXo3}FSD>Q$V^H>5ug~cF?2XFJTg?Qk%@|#W$e#M{65_MH!!Ir*ASPh zeSL9L!W}hUvqq4!U@8@TVKWr79H087%>+M3`X!HuISwp|h9E;u*1d|7OGHmjXf_Q} zO*-S$c<-@!V=e5&N6NMC`qe2hJ#uPe6}Te{(&@f&R3p4#GMCod_1{|(tWb(62yi81 zEed89lZ|EHHPBMJ+$WiN!Q7lx(4HQQs=vO>0o~a{NS1%|LMl_QOa;Xq9~ z9{(R0`O+3$r;Fi{r`=oz83qeHY3Aa*qnj2Vy>tM3p9>eCkWN1O*znR#0F&SIgqc&| zUFW+n?MvG!2Q|&=WPhW=X_{zp4bFU5mtNKwn2eM}Sb)T93U4n#kgnKQ(3FOQBJmA? zDmzz@{Y1=pUCt9WC#7~aevHzX9TpVR?oG~IChqum_Ldmg(X-Ap;-Y(4h7hd zjmd<%RQe|it_JJ}>hw~OAE^&Z%q%G&NsTMa$&`Y6JR(bNMExpTQ14rx;FBi@@DQ%ad-uh2{f$W< zPSW?>m9DN7-00M854Y3@GQL4l<8 z6-wDk<*k*y0OXL{3&h&-T9#mlZoay_>hBx`oK6&SuLZUoaJt8?yCLu}L#_hlQr(aS zfk6W}Sgk#Tpc*01FiXKmZFJd@Z7Q$Mwz8^m_});}ixV`c)xvAN2n_u0lY z-#jc|eEgKg;iI&=%XqeLJrBZV5?&CnfmB}E%f}yp2Vfb`ao2|=FWp7rqbEO2skaGY zOtCOBueIL)l_w1EN>Sctn5Du03s}9!`=F$B+YV)( z5>a~uxkKO1Z!|=&UTHHs7IB6cdA_Q60KsASMGM6!S8?>o$}N6V#nm6&=0( z$21w$Qc2?jgq{bNp%^s-xdpchYkc(7A{MJPWNK%s`6>*wGnU30DICpi_kRfUwzec{ zNa$9E^VD|)UU2T|2DoY@4og??brhg#>59Ksv1rSRk(!g0Rk!iLvn8*b66q z5*X(jI3Ek5rj^J|XReU|TP?z{bJFK#E=(sH&AXFwT0b29%Fj6Nts%P@AD$S~J+pmu z_jo$t<9YFbzA4OM+f+>lUA^^j9Da6samPT6`%>p@6pL258qzZWfEpHx-&{b_Hr3B6 zP@P3pHuQJ!)#3;%JU~ke@VhDVjlr;a=Tmlm;iyjMeSVJt`HiNTs>O(1^^Z%ta!6|M zV=YSxEYsZ7`9|~OMQ!NmweaFH6TF(3r|oHJ>WgzF27v~rQn#&$Jd-U%hA!x43cNVx z*4Ec&^YtO6E}xD0RGx??Sqv7u-=&JN~>Ip z#6kREDy)Eukyu2KkOw#+2lL2e8I%Q*h>-J!bvok3*#mKx0* zp((`-IwTi}2t3*NN%kf;NXz-<^G-#fQQ)IM!cxC*6q8thYqt<`yT+}5#%W>AmhA{% z2e=VshSW0|Db0Fs1ff%>|FoZYNJk;}PY9nY$gk=OCUsh6`vCQ`2#B#+qkf0m+s6W3 zA!_{kyFa}7Re1&8eQq(TXbr+x44bOA+V&cN`G1}F)dEKMbIvd=_RO4~hMAn4Ud>?w za6O;S_a&i>4x|Z94xOICy6gUTfCQsPV0gp;{5tqE5Xw>WCQiL518w4j zPfFOr?iAvKul9J|1NIDe3f1EXT~nvsH*cc(bC{c5F7iMnMlBgKXsP3THs4lG%_MrU z7g4fdkW}RwRtNI&p>8ROoR?d-98{y@+3W>+I{81QK!tzT&W#9FffNXqaoMMHMJ*xz z^y^3;Y-2me;+d_+C-XnGj)Hz6|oA`UHK`A~7+kL|s<}p^>7XHo}I@)Z~R`eo=Ii9^$NX8G5(%h+%J&Y_t6)!|MHS$)_7dKgf$IvjGS>xjZlgvQ51M~B9oFUr-}M9(M2#+MnER(nBhkEoJie%sN2i0Ucdi`P4f zO|9B`7+A1D=rb=pat@~3>MA2J&(;`SqcK1yIKxLv$*aLuqlfa#bKFn(5S>$K~qaEEw;&6jgZ!_Qvf5~rokDVm&j?wr1Cp0CNHO#%^kYaTa_dZv&_mi6KFsKUM zbeg#B?zWdsRM^_}EJ^{mT|%Dzx%-%7HbCr6%*(jy%bO5a0G(Bq$jga{fPy4!M8(pQ z*Cj?{badoG1eC+H82e+u5*TeqPG1h4a2+_33VI%myW@3_;wG}p9TN(sxy~ghRdM)$ ziL4>LES_|J?`kw#H_;V6(oy+UQAJAW>?+aG?3_6A7G}`*jU%6d;cTy<{V(m4Cmz%p zfZQKF;50waePnN@2xvD~_*QR^mY+l%;l*m)Ppv;}kV`XCl+q`b@ z06u$X3$7=*P>enX0|a?nrXHWW4k$K{fimHKOAsN9NE1WI=Tc?rih42`=w@Ysrw{TE z-Ft7tV|L=ys62oGZ{>zt`&vhxc3SghnbiR8w)?LT6RyD}s>B#&Xz!hR{VZ6kHU^R8 zk+rz7dG7u^3YsWu(SKwB;sjUG#_yEdw*X9$|H9XjY2yB@gw}%~qcIQ%$sjf^Y5D5X z2e2opgO*#G7nAKog$q+dDHI%#TL)Jkaz_WHVeN>I)I#t{)RrjKYlU=x_a z>KQLm8*A@Z+gXr8g9C_I&D1PhK?I(8nfzwrYE&@oWHa6-*;QI=b$VV#r~Z_bn(H+H zs$FR@=gyoRCN`#6RuG!Q%OHBo)~1Xs)87|K_l+e6XAO)xk01uL(c%EGm@K@njg1X6 z%`LG1I-aYiwsVpCy*zA|&+{0R>613b+$nw>FVF196qVFI4etb`?s!>yGCR>_P-N&& zZ7^Kho3>NW+E=pk*7IP?sTx!QlIc7X=qz|S9IY!0%+1qMqmr&~`WrIwOGH6Vgk%)D zTaum~6BAzMFjxixGH0j2Ku#3m5K}u(qex`-HZw@f~PC=#v%&v@I45&;C^71_Z4ST)42S5ZHSB}v!!0pRGb>-eY8>q+F z87d3c51G9D3+~nR_MRaeP%^1+)BK97@i5(AUVH2=hX9g4k%*|A;)|PrCGhCh0iTI5 zlKNJflT2sqEtceaTKNE|bK!-1#!bY?N(jWV+7= zw2k-y$Ah+8fE^A1h?s;oFvEAHwu$+;=6|ueLAf8QRe#6))-P2&O^AR3lawEU%l$r( zo&Vu_pRHbj-eGv)n4h8Dq3PWA)GK4TE!HxpWPW=gj{_5wGPJQ)E%&P;lzs_W;&Gs1 zkE(`x=;pBiKz{)~WhkNUk~+-+Tf;k_GWFWE;6H?o{~j9cN>i{k21L8OI0L4=#Za8o z8UL~a4CM6XD_3rJh2gixA%tnvI5x@dJe8_%J-*hIRn$e@_F>+FWe)hQ8BPaN*#e%O z-Pu;d<+POkXThGQt*QP`9^Zk$4qO#eL$MHG9`J&RrmaWqnCVUQay?=99RS|9*00Ud zOg5bXY&{K4&S+V|a6vW@b@O<6J^IvfQhY;p6Rrnp9LgPa19fF3LXbyT*>IIo-2 zU})mHRE+zMG|BXa|4bDi^K*>-{l$c}lAG4%J<+#k(y1?$grHN{`+TGa|F)6A{eF4G zzRexs|LJ_&0A%WD|3-$i!3Y3;zyigQDgAKs+Gm%WU<8Oqs3ZL_5}THPz@;dLu}n*y zi1+yoP#l59_n+hd@e6&P2}teAACpvkLjS5+gNIo~$QSNE&2C|3F(YnY|*t#F^dQ!A53`>|~nqng8abqxXlxSAHNbKDjB( zcm%TBK2naKS#Kya^mQJ%DN01a%%%}zi*oDExKVBn2Z|H3lrWI+skI#R*4Q_^1exAD z&VMcCmLS!5_Qa#f=Hi2*IWeX^Y|3Embjaoi5X-cYFpT#gk@a*wOY^@bB;H1l$-sF5 zRR?(npfRSR%BeDdk6oxe5Qc(qRnbnKIOZse`P{$jrWz8GeMrZlqv zMZ<=JXeSr5(Ue1;;x(WPq|7I>MMcytvS1_1WBaB-XEgY}9> zXAp;a1N-ZECHXl^*RuL|j~}HLN%gqT82EwZL$oewzz=XQ7P%If$i%(_4DKuP30v-7 zx`gB)!S7L2k!t9Yr}|-{&Vh-n-ORthX6t<^6Y_D z=}ESt%}C%heF5J-NHwT5`K4Rqn~?u4$yOTzxqp0dbt_r+9zJgm53TT#K`5tc%^GH< z%kP6-)nW&NYIgNaUQ?8_ay3<&NdcS}RX~rfN4p7rx_ib;VXD0Fr**Uz1i9T0(&t-y z!HIsxpL5Q0if0*2bk(POTDyb>SB$9%%p`2<{(wDP@C=Qx5aNp3z)7CzghK0^;gAUF zJrHs&VJ6z(?Xo%-*Y0Ff3Tp9*tl!I#kM zNylp}OdufzIy8Es!G_;yk4EqW&oB-T&)tvC+dQ47(!ScZBrAm^^ADMbn$jbw& zc18IU4E$7Nm~7ugVo8y2tW)&MhX7Nnd8O&%l)AbXz+~T~TvavpT??TUTdYRoK$HV6 z#I^qLlEl{c? zr?AkKRG}61_8LriS1QiBm%xK5cj9Y53E^aA;0%=tJeV3k%bWQFKrUql4VR8>SXZ@h z^X#d|?t|1QZ&L`wUcj(m1O1X`s1!ZpxPNd!Z!?!L6=8!FlUYg1yYWdO!I~3jdk52G zWsYJS`fc``8&X1Pgzo0#rrS-RxwG|Nx6WQ5b)iA)#DhcwOU_r!Zuz*M_?e^G*lBwf zW%u1hvrD~uo#Rq((+dgOFoTB4Q&s6~)xKd*NinBivw7F{=4+m3PUZLf4k;`b%zY$m z{(D#m8j+tpN$O*XrH+=4il6^(fucc$MO#LB3Y8L_LZCmO5i?TfgWdQ4+*wESuckbj zb-f8*lTVL3aX*XUuPduy(rLE)3@{g{-N=r$i!V?@4s;%%A#w!IukjRv5n@dn=DbnTUY>R(=DW0f1IHidC~mQ&C9*vjKlFwVW~HduC{cqzTv~Kpuc+ zICUoE)VwJ$(7)x)k&^x#T{P92U2h8jUBO0&58P%2d;@?-AB=Hh=U~0G+bF!qo71Ls zEaN_a57t(^vr)Tiw6>2)i;EPa0#3kS&%T1Tw0u3*!gwrRSD{fV7hCtFG}ei4e&tTq0>LJxTz?Pl zQwI|X1Tt@SL8`w)A^G3rclUSmC(Z-?x;j8VJ>sFyGIy?ry%dlOKBPUlKyAtOVZ`Xv z5rCbZ>5bR^nW-`*XnA|d+#Wf%3VIx3e)P+)f(#35$@R8xd<{sYBc-69pqJ3^BF99|<+^5bzCZ<#Jp=cXuizs;9mbO8;sOD*<`UEp8J1g;hC3~r3G`!~I5_t-{ z++OXG7){f_IO$I@Dsv+)#Hwd%2r>}==XQtJN(dmj?vxOwJqf7y!Z%Mr->$g#Iizh< zNQzA9RujYVS1lN*FHysTmW+R>jcl|aVAI_gXTJHxVpzat!bWE0X)uwt0F*t=c09IP za|`1jhlMvd&PcJrIY*9d66=MVK+E8uee?sfkoNooLi2_!keX9cps#CcZl+Lgtf6u- zXEycN5n6fHMPP9@x(gIzMkRCMO$#iG!ibCoNbZ~UyY0~IImQomRU`X9OG*qbMzBDV zzHi)jm->l(svy>M(7Za+z;KV0mk$tA(FkI?iqmo7Q7^P^>!s!9h(_czerKDnd9!u* z2oWl@4B#{eRhwWyfen-yc|*kuUM4|xQw=p_0^}5c?49(`TEUK7#=-*s*4J3@c+M{V zT{YmeC40?_anMDmd4y5Co8x>D1P%QSjpI`#v|LOP=6F`DMZfilB0u+M=w;$2Y7Ft9fj8PWr z>eA^wL}*B9xb@9>o#^=;02Zv;ZEY(~{$7FNu}8{8a_|+?WUcW`h6zIA3=b_H0NI7) zOSIa&&}V~MM%_{nwF!PQP*0Z8vVIr16g_r07hr8v#yp; zmhFLvIbid2eGLdF+O-}lr(D|H9{ z?p%i$_K3sQ`JJX8-K0e|v=7iAwKymr*qtZ;jo|qjApR3A3S6 z=2%$E&WU+XU_UY`+YK^n`!a~K9Q$nb)~Q1U4kX>M$>KbRntG`TEbUVePXf+SFabLB2HGvWJ3u-rLZLF74!<85K6Jcj8hKo+n2qOD`rs z@t-o&XGo{qeEVGgKxisH|IICvADYDHe)Y?D)Eq@}CE?gl&%Yv6G<{T5e8)gvq_WSi ziV!MZA-fs0P4dR@2G*TynrMEcz@(+lW!^(rbXKy>#0le2{@|xS4xRr3=q6H zHka3!O}Cdm{uKJl;JokZW$^c@woUULs@L|+d&9Oz>Hzm^&UsW8#FcX0LNu2n0U#Qn zxC3t|<#VmN-JJTJx>j8WU!!>P8c~|@D%MbE{P-2+^}D3Jp)s|2*0UqINOXJYR@EU^ zks-NW?*xcvMNhXCD{MsUImQ5fXk0ueue@+?f;qmBGJFq(K<`sUEsgAp3b+g<8>#Wp|t&}9Z7^I_BunjzBz#xHU z1b%mt(v`_8buk`+O`R6ds z{(NP+-i;GMPYiDNvvZ(}KeT=5`Awr+HcYKRfwYeUu_w_5LD43ikh7Xbg6El?f*npv z>Cx}c#gAEUvVjN!ZFkt$|5{S}@Jd4rNMWOUqb(LH<*13wz{yttN*HE%0)vOfgEe-k)r)Q4D@B2hApK%J6DnD|_mDKFOKd^_yw>vC zo>fbbxKh-+n!|e?$-aMVt^Cni&rwj`RDPEI5D&dk#)#O460UaY!0m8;}DS|F2W0I+Lqs>Ga5RT zBKl}cnDY}^sznCVDm?=OME3ndOJg8!o?^Y-j5o;BM{7!y)9vUvIF!m%Z#dqc0>W)n z{Gs=*i+tzObMWYYIwJq~ zum1lHd1<>r*)-YW`%U8ac;R`O-3SP7TyqNPDcvwT2RjbQV>%98Z=oUbn}qCFmik>m zLb7hgM7afd^gK^wP4gK<7P(;d97-a75b+|hn_`4#_TqT#HU zyYNjIso%z3X^DDt_lC$!;^F<~c@&4}^v1BP%~wKs(M)Pj<~uyaK#B^y5iSWbT?xgJ znGg^R12_ipBfUVXPPPGxh$v!K+mny8ix-{*WbXy7mGAYLltlI8W8>gr{ni--8JqZ3 z`GX8>rM?P>q_t!$PfkRbWW^;jVg3gkSWWyg@pagOM5uJsYAF%~we>eM3^6A3-d>>Y0kX0qGthAbD7=R& z1gd9HlL4*STNn{9X!D>4D?q+!rbbqQ>G7EQwWDeK$`KCYR&GcULWdq9u&02Gpwa3i zOU%EZ-${-@+s0MyXbi;5;4XWT2%co6>%4!_+Jzp9>*co zq{E#zRKZK^CAakK(R z3^IZ=!`rpzjG#L2gtRC9%1r zWgvCe*o-R!)tc!-WjZ)%dqoxf?c(YF0Fx#T$#V#fVBO&AB0l^xDWsiPhCylg_|5ss zN86dI(h?6ikE%QAVp#9103dpDAKknDZp;D_Wn2<;oP5Bl0TS-z&Qv;}-9$Q%Q>mz^ z4+K{{)~EM!?hb%BO~en$$FFk*)VKLs*f{`CTRPGWokxDU$K$+oOmgtsl3X1Ag8T*r zgfR3mMo?ed0fozSf(Sfz8&p<%{O(79*dxP~1Hx|9=+GD=kQKX6*KE#b#|H|ff$rY4 z_dNHn4Y#^4i5;g@bCcpjvW6gmEQk(?8o>H@P*VYmp?jI1&+xRK2b4M@&*Xpq)%&ce zr>7?$n1STonwDN{l$KLa>|15)383~*njiJldGNAW@a!r%(CqB*ng_Y4afAM6R%rw^72jz zTlv1di-pDWMl$)^^lc%JiBX8GVU$6|n1Pqd(^cxBw5fo8H$-*jK96b~TwVGufWGvc zu-eXP*JpfYk|Off4WT``i(`J)$8v;FBQW|t9D(nT(h+xoO+)~Ac0TNME6(&~C*{Ct z5%zxq?lR%a;M#KixnMxmOc?0$I$`4XzDO6|iAh->iC%-&RtUoV>3Ladrat(CXPTau z9xHhT5=jF`6NAHBAf9r5oj^^b_wo)Q8~JEW^{sXz8+0iJA2*1M#KbZ2ff}+Vy@3$= z#ig?{&toCQ4CyMjqv`6Cq9+@P^HsYoo4?L)yOqU*Ivn2hE7hl~*RFcrJ$E_q*^s3f z>?sFqR{IYr3nL#U%h#Pg{YD5BU%&5I$I!Ef&8t-`eg@CT+C9uCU62laRJQIea0=_E zPP0{vDx8hL7X(nakOv{sE>(o2IIF7L-kf>)5!?wm*!2xy0Hd+Lo2=nRGt?VA=94!|1Kj^-nz@ zS79D4$bAE6A{U}P<}=cMQWC9J%bkNQtix3*Wq8OM<;g!KT~=y!Wg5}1$W^~qr#uS| z@GlXSxMv<|v^Ia7rl;XA0PzCUD7>!`3Lj;SxR}+oi#p*rZhWnUv^IG8K6;<}fFs}2 z%@-7dNG(IyKtDC;JoyNof1?9JKlRHoS4i;cxSaTRI}V{c8TrHv=!l9sMUia0rw4)) zcy6;8pqybHXTn(J?Y60O=L;Fug_r??T8jxon<+W4YLshTZBe&b#MP-OzQJ)qj7OLU zCKThLX6E6P1&vZ4^V2zQkY*nX_g1CF55R@%u6OVr#!neJXd24xVV9)o0;jQoWt6`6 zCziYHBTW&wcqePU^Q2+HemEUl1-G@S-(7Y{SZskGi?PFkOrjb#?6K&dfYfm4a_rX#QO?dDo?5r7r31r1o{ub?AD#wj0KA(| z;*Aex?b@~Mx=WH4g>Qp4n~gt}OV99f?mL*Yna9^SyMWaZIcV&3Mc!xi_)u8W?0^+* z4y`i5HPB9CsnGlueS<@<$sqa*R`X4`&V6tE;i6j$Xb?SOmmcV@27(7^O zZ2>v_@-~p~w5wNE%Y8Z}=Y>c!tt#uyx1RNwp}!gzU_-jal6=U_*zhZtSakGAL&xfd z+vBvyCns4%Y3ATQg94Ri$J>Y054L|(@um2f?*>-(pX2NuG_=)pZMjcSd+M0JR~R!+ z{lfXj+t2OjC*JCm3(I|c4r^r$#KauG`RE{(Y@U&kra4@m608-mKpiDRjud8l!yPd`sg$AE0dv-lj)v`C6yyC`A1Hn_I`*FPP6tPhOzRJc;<8oK$;JF`4 z~xS6Nc3*AL8!!pzFp{f69m?D7SCT@$v4b9T!d!=9-SPYAe)MxbzA1ON;Aqu8w zHWzdrA9LDhg=%>S>O6A72NBRwU9jry-)!#fS_wv)9j&2ns1SRo# zFerb6-SUNdlAio^^|wl{-J=8t5_)pg@vKURX;0Y~OL7YX3+MetWj$=S5{Bm11;8YL z=t&3G{P)Q$bBv($ z4;tU*froH{1TLHBGZ-{&;>4FP021Uh5v_2%ynK)P<@l97(VGK>cH_OHiyD*jG*emG z{Fg2J`}%c}RUNJ?7_{GQKgN<=f^s9oA)w{@k&^%7DCkvevuZ@+z{4{RrnfZc_IG2q z$sRlseSDdo;})ySYwbKAbe4S0LPYgENV0Z$n?PO(HJv)l)VuMrPjvxsMpz%NV9s{S zR3&b3nbrhXWvNAlTh~Ta%g5=)?{ddmq2_RYkgJcAQ20`#4F6|{dhM|nOkTs&e^(&_n#mNtoK5g1aN^l6Qxh*aON(?$%I`55|-;9D8VUkP0 zO=m&yxAK(}Cl5qib-UAcGil#u4bDOyMN=p*bYHl88H}`uXL;be|NNj^cN<91?$=?) zM>!^e9t8#D{?;1}Lr@SGD6kk`4i{|;El%ET6OA1l`&@r!ZvfZq7k(6$M{iar_8D7? zZ$n{cHe>h4(Q;|bp%-p%Q z5Io!GUo5`01Z^Tm|s zh}Ru!#|DT$ki>Wz%Ucuz1O^ze?Up*b`%`i@ishQoOfCbs?`wXT&zMC1IzfNx5PB)B=RufeYAcuG;^l3i(BCU|QQL6acanu-%|Gw2 zJm`PhYgy|*>K?eg|2{u2M9_K(tM0n{_CH&TMqk@d+x{>2SkUcO9`BtOjWa|ayo>Cpocv|Nvjhn| z_6=fCA}D>mk9U&`Ek-2g0)jEdia)OvjtB2nh-@T|I>po~6%%;4UVMz!D{UBdiAd=z z`_CJ~f2}`Mo!{0Pc>D6xWJ{w&Qqh7Uf27MFh7{&i2A{w{973GVvn75@;@~9v1)gjF z{cF!E(Dw=O-hYeE$t#2W)PH|N@3lsUfq?yeD&We$P6jxqu>O^=+Wn9mYAPu$?q@~{ z`8v!0zRNBI)Fu{{84=1%trA$mm?{15`@O;KYf0l#R_qwfrTTC`NBxie;$NS!W>hD9 zn2~&J8DCk!XgP@WDnPkh#vL@y!eU+j{RBd`GeZZj!h$SoC0q_D1$Zz6OGEr4pcuQX zPI$gVhSh&Q(bAQ?e8{wH$dsP<3YHudf_nPrA&2$(pXrHp|HPil)6O9S-MMCv&>#2Za8PMO2(8%I?uRF@UIurw}iH7vg_i?Ek;Cur&IAr$WW4l3jAU z$!le0A4Uzm%Ph+NWSkXPp8W?M^`G;)OAtj9UBBceoMT*ZGH1`zHC69xtO+ zH8dI(Y@ucLKaVva&#^>wC+b;6k*6LlT&X>ztN0aL;Zhaq{ZTkH^uL1~OaD_9twFoc zqtK=jqx1em9XvNu{V+JVzwfn{2y=h}Vw>JSZCHg%bk+LKKc9ky<%DEOXYyKy?N1}q z+CL9rO5^}Srz@BgH2tjpc^Uv;XJEMhcbI}0>|Yby*-2w zp0dVj|G#tG9BEk=iMJZ9R1l99X1e9K!N%J0P6}59?ovRoNV(!|J?36H6 z9|B2I$#Dg_yhKqf`jdjEPtVVrfQy(mG4+#HeTG-!r^W~{XXm4`X6eI4oI*4@sclyLEuw(`0Q8r zk_<>8EsRBY9RyyGac)i)Eqnm`3MSqFP0j@#D)6mfva?t4`WRE~ZDUq*O#N$?@5*;4 z8?-7_aQ7}K>V)~iTv$i??+H=4U(=xPCN`1=Z$8cW?|JkBmLZ(lNnvRvJK-5fFNu^p z3T<9IAOcF;S}KSbrn00Mc`qdYRIM(6FD6F?Xt9ads;s2&aHyI?!u6mF|3YPn3A{Yq zJ0=73<>B1lMlR5#utJ*E^G$w8ZEK#9(UG6TUlOf!xc1{T4=2`}fl9YP2rQx8L%Rl$ z7C`0%UD{j;gYpcdgWrJRaeRh6hJ^f2X%Tr6%kwShBi$|+%(Hd4Y* zLRwm>D<58R1uxk^;;=TL`)(49l&sgMkpv+j?w={fQx{%V*IrTu>3n7-rXhM>$gz0> ztDmegwrWCB*Tg4$vo|}bCNCsDU9cNQ7l~x^KZiKku{8g1o|WeLpgq-^Qc!&|o?rjH+~JN}{c_{RFWmM;`QwgBvK%;K2|NAkyS~B29ZN9^uo<2DouFKnkL78N zMAUyDHz}xo*<_Q3!G-@H(M}_7I!CF%+u{FJ%0kX6CRvR6^JXeu7C~xJeaJ?C%t@J5 zMV|aH`*`d6(s>5_QgMb@R$B6khz$k~g|2bTA6&s3*>Kk!D%S(<32aE2CZ*2$iseb+ zCKM*VVbvO`XP;8s{@3%}O!X(IXp*rvid7vtK|Z6!1R0xkDA;FH1iuWn>sIm<;8s zi@V)oQa%zJv8;+Is>1-(fVMu?0w8*T9Tg-ya4!d`3K@NcT{!YNM^w#x-wrobx?W@F zg9V%iGWRXXUys86EKWzd4J_J5gIfUx*|L^u({|Pa09+Yl@mEaj>_ql`!JJW z3RfdgxcY2ajr;;j?#`0Xs$NhrdjnKSdecj^U^jgs2$PHpV4PxRSfA8;5PXP#zIx|< zSC-EM$_C6dU8iQNc_0?DuOlkbCjGji=-GR89+-20_Hy!Mt)bstrf?Q8vDLhYzl^r~ z*5Z5hl%-rt`**nnzR9M{Qp)jA6v)eKUMrpN-(|VeIPt<#|4|ljXrM3$y1s+Bn{~SW zsmnGX6H(~y&SGxU;K(vHuwdl-**tPKvGoy{(`{0D9o*ubgxs2D)=ibNdxx7sJE9T- z34q2nwe$)MMv$w4nk_&VK4h$QB;dk}>wpaRIJW+hpvOh4^)l87$yn~JFo9l>$Wqh} zp!7}jRmW;b=3POS0QwUrer@x1ILG{IFAjX#L2~SsqFX{u!HtxwGnh)Fx0U7feTTJutJCf zsy$(c244j)G*WJMZnDuwz;$VP^E)d8ZL(MTL(`}|s0%uM$6QuPB&~g&%Gjb(zT0L5 zvm=oEIlSz+9b52bD$4&EC~dGSi<$%%z$@%_ixo7S?VFHgTu|pNbeT^<+0Hd*1D}JS z3p@?LH*Gy5LGw14I`!Dkk1ElVG!@v>G$g?408vtb(Nbqt7ZmzH4YYo4tqzR~Z}+5J z>w%J(LHAE>NJHSCD|n0WiTq?AF)Do>hD_b~MV0bUknB~KnFcNBd4keKMx$KJzNr&< zK&jlUxyo!zV~FM<>I8-VGf3^SE1S0w2Kqni`KSQqz)m@puuHcAd&XgM1}{4H+M%Ok zbi)K*7eH{91>9v&ti!kidD+4!(1|4!xDwz6E%kWQ4#WL+Rz}Aaq(lpYfa6)#;fZRo z0wZ`&&-Q7&?07bN@P_`rPDQ0&D9$%qqp=k=3!EG6Hs{bC&{`ryn37 z?52mzsVeLorF!-*qb8@vd7kg#Q_YQ5q-TZ!>O#HLst_Dbjd5WO6L7!=08|_Hz|d(4 zukM`2EEhLf!L$WrAfhPnQ|^3Ef@(w4rF}xeVZ%oKNb`Y#J~nPPszlh2YZJ^k39M2l zKCb2~3~d;(d@erXa`4^&4TD&@AfJv3_Np`MQW1BI9-=|TvK`MM6moOS=4$Qhu25A4r=HVjnYoiE>t}lYUq1qFiUj@}brc#@TF;cEC2QDBUZE6bF zZ@vdC@WG&}Ydae(D;0HoZvl*^ssOr3xilYpIPL|d8!l10LbH7!I}%A>dw?P_F@ZW7 z~Wux{}nCWFg0`w|-#83j~iWaZY43ZKL$F4T1hoH;^JZ|AsGjNOBjyY6>dTen21(5`tJ(&CJKlOK>9&u zuA`;=MHq-bz-l2Us%7!xy&WG&y)i?zOV-j$u)=zNg$Q`SD5~g6cVavq#oX5B?5c}6 zYZrGu2lG0w@|wP07>V`+N&EMLMNl6JjR{cLjxo2+m|!&ebJf0@Z+R=vOL65XT7%~Q zn`@3?jfbQ8@dGetQVqFv2PxTxDpkg0gG%>>Lx(wF9{PC7w|96n?r|vGhUD}`Jg^vz z3X}+JbVbajaw|U~lSVqzxchgWHtQt$YFEF(QmS>B84>QDV9<(@MK2^k)4=eVJ(+rNmo z19c)*Z(rwfDMwLJCaO`N{VupIfxE(6U_t5f`Hs;@I|!uw(q5S=d%p+mhkxU|KgGVs z$Al0f8vG{d+=c}^y@Be@&L}@fawcf;+q&;JcQ|waWoWK<+5oQRRxTaUMBYr0jKCzT2WS6^`?QczxNA?Vz}jMeYo@ zD^$&IQh}`(0c3JiSQ2v`O&Z`*f&KfQ!yyY^^tCw$i*XTD*48t@aP}4RToC zov*S*Gd0{4rB3|8F$cW3B@Ld2)*o^=f0mjlIvl<~Z-&KW@C~Bt+$D4;IFBHW1_VGh zmkr_mj+7@bU<0HpC5LztESn+ia|-A6V7$ z>q2qiJ>Xl>Q7LQG0}6O0?V9Wuv6(xs%Iv|)ZYC;;>I#Sv6M_DO8NZV$$qQ+(W>{LZ zbiwxuD7SfdtBl`z9Nx#JKNX(ohf6I#23akNqsV2yZT;5FHT_X?L656D%wB#moX=GS z?ZRPgipek;yUd)5yDW}O8DQECYyEUOQpq8zya!aLqwafaK=+K?c1SnvNEs)c`;C$2 zh1KYR0u$QDx;ZYMRQ7>5BRtYyJBNX@=TC(9H;e4QegwkAZ8dW8haa81Ssl^;D z%W5?M6?pvSp-g~|Lmr3 z$ATAjD(kq+ukKq+<;M*4_Zn`3yYf2;xWUTj=uy1|j|KXF()F?j-7sy8G+o|X*M=H1 zRicVeM+tBQ2VKBs_r!tG!H%Ww{aFC9F6_R5I_YGuqVj!%XWLt@f;x;5+SS`{GAqBz zulqMKKv_Kx8^Qm~q|2p*L!ANvoi?_GMhV;zuVF2WOr}ko?By7(jd9$WbL(&E&S^Rx zu>>)%+607sGzvlutUvYiAKh>%>MRwN+QRt>N{{*N!liJfcFM$uLJ6IY0;{BjPo&G~ zv@(ho?0{rcdk!BmCeo0BVdPP{Nj+mi!m|ttixYnXf6e5iF4Is(u2}DNsiVg zCV*$z4#_--r);JHSVmHqi8C(7!c;#v?J>Ri@e9EwXJ5A8P0d68YaPP+26%#DvZ2KEeKCjy;~N~xdh=)E zPeI_Gyq&bG5%PYQ*y<#7vAEMijAQ&Uta_|lwKF$ec^tymX6l&`*FQ3|7V6SaSP4{!JQeHOC=VI{8vE8u442l69^i}j5|E889`Yp_ zkbFat^V7sHFgzWvlnc3>?aNSqxFu8vP`wd7Gz3Kubd>EUp+SQJqV3}*@S;vJNkD$% z(Kihf)AV(F&4-WL8rAKpWW+W>C}7LUR(sgS(}PN}&O;t8?vv4F{%5o<6W!WlErW zJ3so=Nk6&KzS zH)ooX+hBMoaQ(qA{s;wlB%|!Xqu7Q3lp6aUMD%s!TnH}Y-tCum5Gf#T7V{iW*-gnQ zz>q$7n3HeNmVzu%x2GR)R8((&JZAM=r`-_;T?9BLqe-sgEOgiJ_p&HZV^amZ_CGvy zIfdoO?5*jXXW5p>$zg7_AcW8(eH3;lBmoOhtq zWP99nvA^UFrv>`EKe`X{H{e$iud83=v0H@_U>u1OL0A|77bG9atggDa+0S3lGG_)k zE7uOt{2=HIqUfyFZZjzq$9-327Dmrr_%sCXkhl0QTkrPD*5;~1!utRdAnHSBypUS@nRjS;v?NAAtPsCZ} zhbzVr7YuaHxZ19-=%>bTT7O>F8TuidfWhVpv=|Nm&RyX)c>P=f@Uiab__@tP2*{Ws z@@rque>0O*3!dw70`xm@?Y9>9feRs@ma{ZH-X!?oC!nPk*gZj>Z_eu&P>klV5JpYY zJpev<&vBL(+FqoPK3I@?V-p=A6~p_$Ni@>u&-qqePUA)_Ev!w|2&@ByK7+X z!L%L-ixL3e57;U`$HShG5|*dlxP}g-lY#*{Xk(LQNu657O-w}t=tuiN19LNCL3k(T z8ux;vv*;2>S`71x9|Do&a(rdMeiCVmKZM&&N-`b9EG?}w>*c#Y7u^LdpQmX@XEuwV zE}1Be@q66WP}&4DC&EA(w144Q>oRy7R@P%GPndP3$@+c$;06cL)Or~)JPliUgg)Z1 z@oN)|KvW<^y&da7ah;%a^>fozKHPjW7XVqowlPdAP|5xzUu>PMPy*YP$A|>U|6_L~ z(QRr95 zeG=lvH2q^Rvb2!7W6DqI)XQ}~WpfRVY{RJwKoLRdgDE&u%SLFM`c*|qguq7_sl6ZF zevFG&6o*x6!lIr~K?WRaZ_qkbR>0B%4*qfv>sw4sUnf?Bvoz%DGfv@MpPMhxy$dlk z_+}u6&Hg)4R=$Gwb`S0Eajzy&E2--RMv_EGH70?h@D-(UQ%wU(XQE+YF&3LN?a-sA57Ry<= zSIqMnw1oE0`e(ZatIfpJkjq7{?kJzG*u^&4>aO|BqLOH{&r;%n5|gg`fK{8Y&irQK`RJ`CX7tg%3S2oSBecJS*iAXdlDG@An+L?! zttA9_2_38}a5qr`BMXvoy$JmzTeRKg2XoM=zLqC!|H?tju{6g%rx+Hglz+JUn+B?X zVj$cj6#Dj0c?xOPLwJyS^CCaHC{nt})5C_#68C1+%Rl1h#EraEJsnp5vULicR$2R-d_5wT~ zvAR5s%YgxppO_(UxT3;%GB5=b8G7QI@I3npwsAr-F>Q668xT9yf^Hcep1P<07VVOI zij@cuM{!a%?ZGEv;P$mfxez1ycux34hWYRIGS(*QTkZbXE;tLrK7Jc^#TNyrkoVYW z`I}T&5vNH`a&{Ct!oyP<>P}R{ZdkyEjni97e7wh(&=-J+0CwBSb*DCxd+IUKes#af zzN4t*m4FZdx=e`c@j~s+U&Iz5Tf%|uJy34^8hab_ywcemMl^6;K?espx%vJybx^M@ z-y8HU;^Z8hhKvrvG*)b{NK$01-u%4n@(gvJU2ot_ursgP^*JEw$oKSsvuiK~YF=dK z(l&b32(`Tkv}xq~)zIdqh=bi2h#n5N@gSq>cK+x-iq7W@h;=|E4UGph!HWU!b@IM) zSIdtb6l|I)pN5`1Q41D?y)B4Ft#>A-Hhn*XlMm#&Q6&Wc2Z=06S&706xLc^L0sc7O z>u@E(OfJYQ@aa(#K7iK%mNv|iulnnFoB;29UmsIsu{-g#$-@N$L&KCm9f_LaZr!{6 zb>3e`(X6W6A8G#t%huWvE9QFDp7~oRJG~5BDe&GssQ;ed2HWv1vw24D6fg(^Z~|ou zx_MAwzxvJP5~m}=C7f!y*2?3_ z(|B4x@-vV`mifKsz}eJdxXWG%Kp~zylN_@ejsB38w3x*`g3v;}HkSs6D_y|4f_@_+ zDDW?iK(w*bAu5ya&u#jfHufT|wRWAuej2ri?3`hgC)5aqt(Fg4zbV?4NSWN6ot2GuZqB!(W9^fXj_`DKN z=EP5q7gyt~al5^F(tRIqdb2kKG1H?tjU`a%;P|*IGlG_q%yh#Dzj6RofzdHp-q?Lv zw+qmUcUuCW3(n^IJKWIbXq(y(!t93t9K;qv1dZa)cS8K(Zz%2=lXEF!u(##+; znK<#ww@teSC>Z5mj+U_vfSqd#n~dw3rTK`PZeW3jF;oJm!_bE)=TmYt15qy8L38N} z-28m5ms{Rj-7Hysy~0cI%{e=O_xKL&v5+NLD_{MQ4GEu!Ew=XsMZ8~zavo2q`4n_y z0TLf`)cwc^1|r<$K`R&o5OI)oW$JC60Nvh?$tB46u(Y@ybW2A*py;ly7XBO}CGkGr zgcJ`9MuoEq0|VPFxlY_07v#KpFwLt=~$uJIEC=v_Q#+)y~V5c)R5k zq3&w{P3U+~FSz~2eeG!vIz+2t{BVO7kJBMzy=`9C*>eDn3M6R$&)WCMG=qpAghv}I zG+V>|2y92H+%8o)C6OO%mO%Z-(c1@QohlGKPlnBd6BclBl;A41WihYTpFhg|@(}|~ zE)4V)A=lRCbi+YIutt=w7$fdAcqyR}3gZ5L6-8zXGwzd>+sUAD%e%l;*l&hl8TeEg zBlekb>U}kgs$>^0J2{pE${I5Gua|mgYjcGlgead$ zxVx9*zvdWElt6{&pS=7^OiK29hY*SHdp=<{jAvs-gSUc@6yYbZ0yi42|^m+PA&4Y2-U@^2^#c5u6j*yaaK?Z zLG;dkpNhS`>ppyV2Jif-gQo(#S3+YO4k3#~rOxYwLP`SqhGve>+76^jmjmnGLg^jC z9(o<_yGbrC%JIn%bwO0G&%U8{={^6A+VHD=U7LZbF*VSiE|3lffvo}Y9W<-iT5~q9 zVAhA$ai%8vH(h+R7h_adR8jx}iogm$i#>M7K{q0@+HV#px+t0mNkAh$K$&D@5Zh+~ zM1n5y_qTnpPR~Cx2Ai0V8_7>@wWNvch1L0o>s$-qFbOHs z(%^XdZh;asli8~MF@BImE#6PkfZGTB8Y1!qFbaGsNJx8Jx({Ax4M9QfIpk@_a3N?3 z2*60^%8GDyC-<(7_3~crL-QUDa(0~fn{=;DhIuvfa@Hht;NMZ}!Wn z@J#S+bo++!7*(m4%koy6htm+yXK%MX0()$Sc4Z-GNnt5F7(0vq7+o&|%M)s2O-s3H z4UjX-{8lgc-iY%PDY;uFfdE3YvIq*1S7rod6P#AJu<=%%TnA1}l(i>K684`vcfc6? z+`;@OJyLXmDsE;xt|g1x4U+3|k?}Gp{D;cCqBPAkFmaqy9;~mC6ua2t5q| z>=T6>(vYdAVz9STv+xPd)yjb53YWlL?e`NbP|gPJ1)s7LwzeLWd3t^P_hrAodw_-1JXe$eH zH!-9mX{K^#CKb?hIbY*!xU*;Q(1ku?!ozBEncotVay|-c64rb?pj_5naa=FLk%y8fN=Z;4o z>;5YfPe_BUMb^Kwvsr0&yq|E<-LRpLvIz~VK$HcVl}IXBtLlqeLiT6$eb|b59lYp=@Wm6zokQ zst>$%nbr6y^ecvquCvU$mY{J#Za_`q4(b8Xt=MZf{_(S?Z#l)am+sfiB;1NRe0LH! zKZn1BGU3MSU?n>uBy`;k-iErR+O*qhMaL)E ztvaD*!}(VOFEobXbO}CcV2^^V%0Ln&9+n422eqZvvXz&&3Bh= zta&!RXrVWkdn=&d5iHAK%GYnW2AR3+C!z?Mx*Wok`BuU}E$5J&5v!j$1jI>$k(tmz ztz$6&TnqV|kD;$gowgFyTghb7%kQ5o8VXSu9|V7&3!7u=?l?w7NUpUX_yy`4zG6Zf4SSI7Pd0N6- z8Hs9_Un7P(=s`8WPf@U`ZUFfyH)t@4>UG~Kdics2jt=M%Ujnk{e?NoXlm3_3_j%?$ z`f|QOIicX(luUANCVQevD&Wb%4cWhVS08rdU`HVqSQ^`Ke}sZL#f`7%ppBS@j^!ix zwZNBTA>eq|q4h&d1QWE!+acVDLn4=A&c_{y#^~p=$|?LM|Ma(S=<|c=#=2)6E{bFJ z8uXprP1Hc)yn;_29T}g$+)CSToR&*U5Vbi#}Gtb%5#yoH?yB zCsqL70!u`*Hne6mxUQ$X4W?SvQP<_)QZBMOx_E}Qvvb$=fW8bQs_W4Dib&D`N^;!1;k%!h?1V+Dg;a@8h*jP_=+Lp*y@H>5=VA{h^v4_3U3=a)V7u z?bTXQ|c7Vfx{C4$oA^E0y-Uhi{S8~4Cl1RGw zF2amL@X1E4Y&{jqW zSYqoOw3wPaqJ~6CX^5E?uao}6i|qZMKIZfTJQ^^{yG^3 zor3THj-x4MGgF1p!Ek;Jurkv-dx#+CvyM+xbfRq3&y433NZ` zGzIjF$+x|=qT$ikN$_ZUJE0L|hl{?VnWnsThIe{?g?f8t)imByd)S~~rwUCE{j!{U zJ@yl55X!u0K#31|t7B^*CCJJAX%-Sb!SX+vh0qPF#67%cC&c4Y8_IIrETX`vq&@C? z3djerjC&YORRir3GV~5m%11;)9OkMzfchIg1K=Ucd(YPZ4)YQ3F&wU)iDDc_n$e<3 zNi9JKSgp1a?6zI@p&jy%p>Xn{>Q@U{u&8~fy**kH0z4wynGn)7KH@(mAh|OznG0Kl zm-I)Q}B31FUq0{XGa2sh-a9` zkM91|13VSfS3Kf{SXML|)0xPDv`7JU^-&cbr$N2XMRkxjLT{{Wjks?NgXIix&oSFC z&OdBgU;$xM=zmfrp0%FP7$oFjI4FRr1VI6e^+rcNy=XZcXkt0p3}&-(--f^Y`F+=I zf`*Df1)j7rgMJwR=4D4AoJ0_ILU^dC^tg#Iuz^LBiD<%w6S=$KLC6ZaF_@yQ6|zOj z0lq#w4NlX288u-P#EM8utoZ@C<7`~)YA8f)`U)egF*m!ZcgfKYeIz&>r@J9JgEKqq zqw$(WJiev_R!e^bzXK&>YUG2VGzOO*;8g}u*~mCV9y{|$c0+FC+$mSL5f9}j2r)}i zT}e!=jI%-jTEK6p*|M}?$3p#kV= zZ?E*UbBIUDitQU{_(F7QrIO_V2nY_E1#D>8_%%_t$cuz4IqTHPsl(3yxDyC3BO3Go zzMQ;$w=rTswHOu;05;b>8X~_3!JM#*fsQ`*ab&M(s8ZDpbvrz zW2RDQ&cp@{f{+FffRyHHjnfAM>!p>8J9n&?812QVp!`D7Q#wD)_A1mKvlXYmT*P60 z*rp@yCv*WTfD>u1LBGTp&d}HS@eBg18);}W?lqkpoOe*A+lzu0d$6WTBgHOLhZ{dE zn?=$U8GGf%%Ju6#&j0>A*aDmKDI(oVL4I>QPnQ6|SuPC-GpH)kAM$(=q~eX7s(~>- zRG)mpAs$Flk*{v$LAn#Ldkr(|z}p&F=4x&G7FO8+*9myy>NxM;#E06|v0dyp6SR#n zK!Xr3MRmcwp;CJQ0feFmuM-SFTxu`IwJCU)&H`2?DDNDxI$#p9SYqBN`|)$!au%gMQ=04e}^RBO8V`UB^=OB|+hzCjmDRBwrY&xFmsteNK5=7E*n zgT=s9;|rW+>-v5uP>BG$7wD{30ACOD-JnYZy_mO`I6lJfgcf%bPP*cibTX)oovB!6 zUs-}sdiM1dZ&TFdGZmiEW&38+4zj>ha2%#wUeq(u7lyj|7}DJ*5ukheH6AN{J=w6I zh2c)^Y_~_u{YPFeCR5y0uFYkIs50ppVl1T{O~3Z zFuI&`Ja@SSb6-0_teN>GOwe_=eiLc5m!=sHq@dNbG4ppXs^`JizeXAYhQF!mdANiK zH;j2bHLo3drx(;iYE)IPqd*NB_qvqWk#&||!h1;b_Ezr6Ng2)(ol;oBIxMtS=bG67 zv^$nboGb6tFgTJ6S z2?})`3}>`5N6%1ev~U!LCURp9^_i`czP5>rfzBTNIojzrOd)SuaHiCgF=|IfO4jJo zW5bl;bi>!Pw<>p`uH}#V8XQ+ok_9ZEUS-xqnzZ`iX}tfmJoF#%rr z1KJAUm6{?lqI=4@x4C~b4=dV-^(9hL!3GgJVf;FByKsSy3UW5@-%6sy2UvBX08X!P z8}2!7`*C&XSTN{%3@KObANc`%Hi~A$fY<`^ZuztI(SuP2%&I}CY2EO;H z%Q!)Px(s&EXVV6)0^$;sEmVv5MttGE)~r~p^9h<8+0{WMXT%JIq(TZNYt&7VDs&iw zpT9mJWV!GJGTnorgEohndo`e21SVZUf~J&$1Z24PqU>|sj(KLkO3QBZY2zmB6LbOm z4G?!a&<+6)O4i4_qr1Rp0zA9*dKnZP#ZZAI3#4#gF!ADo+Yp6n2nP0hFchoE7$#nb{qBXx@19J#r z7tSIXY#;A*ww4lt#{k|UcF3_>5(tPe&o5>eNiVl~(ZFw4M+Ad#Z3v3y&{``yBcdL6 zcC=KqMTZ>vpvQAU1(drry3wS7pexfMfpJh35~^1u7r9-6@(J}Y<^+Kq#ydtofS82s%9pBoT>FsvqS2YZJprIsxZ>@IFS zU;z~z2(WK#-A;gHX=cXcgi*9KLkq9H66CbkXT3dO#P8dgC4WkGnja4X5iOT>mJ>$H zkPR6l5RejXP~V0mxYr2**u}sSRrn2X82-QKyvYA)g(jb zq5)J+fftJJufH1U2DS&VI-Av`0;dTwF8;GHN8|g`(9>iA1#eiJDnq4EJt%>F_OC1K z!!`L)F$GdZ<&JzE=?Im=_ZV);3UOfxhlj1bB`j#xgLAOI8R0J)Ob&LlIEysYg?%2( zn1eD9pVg45pBWYCua}#ykg+>P5Bt? zCOf)*iL%7=PycO8(ueLlpK%@=%Oq!KlB3ezEw7=Px47KyS*G&@!`YtHup%FqgG`ON zKQkEE|6*dFi=XqZUyX{>O`ZxKtrkwJcV z&VB4U@8EUC-_vwS(pWnpb`eH++85rEXB?kvC;EV^r^dtHZx+Q@=`_x9*FP!p^FM!z z#UX%kZZ&=#e-7&bX=m}bsr`tVxB^jAH8r=PpC3=kLRg7-Mej zz2nI5?&;A`u%-K7hqfFsy+20X|DP9QDW3S7+5P7krGHzWk!OXkdXm5@fh9S_xqmskg?lhItIw9k(Svah+ILo&WQNw*Xbx8DG{m`C zt`DYWl3-^t?k;=<;rpQKJLzk^QX`0;?9byv$qS6}&7HK?mO9eBVf?vFi82n!Rm$(g z=jvIsj~O<6D?aUObO^axJsY$9_Ci6d?uK2%pS?A_gQxmA#D0iH9~#%-ys{=B;`fNE zy2dswy;S@uo6*7BOHs>0rhT0nDzQ0BSjWn$lessPYbrkd{qSCV-SZdDO}htAU$vsW zZ1{aiI<5ZE%ZgVgvC^(%&S|)WOviWfGQJ_s%`M?`Y|nZXG*q_MO~=M^u`m1X$9}O< z-PO(iE|H+-Ub?^^iF(<*9Qm!8_=4Djy+`~A97{LZVkWRak0xLE4lB3e~G!vz&zK2=n8iNIrSydT@vn9aNy5_=%GMX zJr{ikT~e)aDQ0I&D$RH7%BOnwdg+6Op-mq9sbEb<@4ELObJ8eTc>1Gpph!*S)q@&> zNQ*~pt&#S~x7WSKZ@T+Uh2qB0HoNI)(9)pAR1Wp6oY7))w98`6glb3eez2abI;YOP zKPOdqq;P{!iVGcl<=1(d7MYpDM?~Rv&~TB(69e9qd`EKK_Sxv{t}iQ9XxYA(lK@{y zJg2kVzTu^*>5^2VDVn4tYA-L5(4x>fmhU7N10|b3-AXm0OG*lRn8fnQkm#t^&{=Ln_J7`icBM#_nN)?N3xRVJ|3(u54-^rb?+@SnZ5bf5E%;(r(>J%3T3iqWg z>U>qr@)Nr!@3Td5=b1LphKcW%@#zK4ZzcG>e)wilS+#Y1b@x@JgEoh;S5zQ0A~PB2 zDw|YXSp9Agn`c(}DQL>aDa?U6p(pVLu?RgiU+HqMm`JFEebGkNjTdsWzZW_`e@hm_ z&K-?IZ_WPLoBqPAcXs15?`yKo3HX1ISEmmL{vC9^Rv+^Z3S`^@S=R}XD}j`OJ;$=z zq+eMiz{!78w6t5Az(zfty~JVtK(I2;S}%UEWNt0~66uWWuIsvD$mQ%SB2=L}t!-zm zM_3lMJ*);Q+AgM?9^;uuS6mm7pvRA^+&o7~81+6tDI@yqTZ#TmyqagB)y?JZl;VU%;6sDrv3yJ(;tE1v*)&r@5Ny z?_eTR`Oa)3gCDEV^ji|kbLbCLRI=-7C!CnDjjeV#MaKQCBb9=Jbb{=4__kBQHn%jZ7MP}Dr}g%j4}EXV7S|XQy`{mlaNkfSzI*F!=8c8Cv*lSQz2wvlFWWyeeM*OJ8y&jg@+LBZ z8NH;hN2}t1p}bIV{Gj9FFWoWV?f|FY1a@gz#8}){u5s|e};mn zmD4AGPh{PQTzhIGRXkG|n0MATL;3fX{H95PwN&@2Z48l!1aD^bhdhZA(##K&jK*hi zXwd&y?>`Ws?9R%O`=1iH1f=iJ51WZh6jrl`8K`-?i_@Qn!J%ZtOVDVS&-|wfEkN$KBCCnxndz`7o!aAJ+u4m~E%Cf9L9L-?dxCS`HF}04?pwU{{MO)1BE^l5T z;}Qeb+9C8WmxO!PLB{2YQ>kjVrmv;Z(m-G^vXv8aOnHx=FC?Oc@m-N?;qc(1lo5Ez zygKu=-Ca5~#m=4fad%j}n|8ovbx+ewUUDow(0~-pwYqAF)+{+4(jZ<>vk_k{ z)|ALGVjiB191cGFecWP_Xi?qW(55@LK*5?3ALRYp*R)}X)BNT@PG;M^3aj6Zf?E0C zQbx%&h-9d*xF4Uk$}hb>k{jF2W_NAl(mLJ5YAv6G$>7fPm+S)ObCgW%6H3QpaaVha zwF0Fo2c&RG2W&jtEov+E(nUB@9-L9xHor02B3nnS+Rn!|yT_1rme(iWJ;y~K{3*J){(*);-1tnBhuO?%$29_!wI=S?7vGuOX6 zxG(E1cH{qH>n)(F+S;gLKqVz56bWf0B?P3qQ@W))q`Q%l?gr`ZPU%LvySuyoh4<@+G{<}eCC`BtSU*Jn5m~9x;uwRux@NY#JmYQD41(|mlHbBeSJQ* zG*VcS-H|Ox`Qj#gHAKq^Ekc|dP~*%erC5hFxa;iZZ273ua|P7A;Y$04Iy1#aeDF6{ zsV@K)0FL2`p5?(8#+Dqgq|O$5&xOU_W8<6lQ05fikK)zQCN9^0WWLj zgT@(cLhA=EZ7n26mS1&@K6vTb+Lc#Xl~>)aoz+jz)snC8>8+exVxW6vxE)PGP2*7emW*AiK8rICPFe4*jq^Y;SECd zakKx2?3vbPD&e0f$S?uiF1RbW|DMyohXnql!TDO`Q_219an1Vv2SnW0>qhCi4 z)6834gASoMVq|^29KITtgDhP5(TzM@xN+x?k)6!R67oOcG`FvzIifujUi5`zN@1PM z3kdF_i%T&>ac%m`TA}XA+j`dB;2bJ0w@z22J5LVtnbx_H$*)Z(V5D{O<>$A>`@+B$ zDnN`Pc(r%Q%!grJ+eAw3aPg6aoc(k@WCDbU`Ck06S-QG6!ST3w7?I)0cS{lR?hH{t z+*U%2IKh(jO*d^wYdrnQ;<{f!Un6Bd*-!oFVvZB{6Guj z_cow*zxeo;z~(}Wn@4LTnP@JbVhb-dY0_x@{5g60bGe2EB3iMWpT*~f2sQg`ZWlRUY!y>r_B+v4VEq7=eQ#_DRo;310JU+AXXi-b-=iI(etU%8ZEL;pld&QEW>5Y zpKJ*l8|gaT*=eeuCGjQsqNXwR-MWp?J=%TZu4L&}T$vaJzKjoqSvfgZDhb$64J`jO z8ghic2^rXR?t_z^sjKlG{En8mw&<1&!|9B#-bKrsWBq|&7o&VICI~Zf*DY%stH;M3 zlKGgg*r>>K|8fnoVZ7uEd{Q*vJl)C{Hb)i#(-m1d!so-!-Y%v067{6vDK_7?EJgehRrn(mZ}{u zy8oIM0*{wp_5W37cSGPC(Mhz$zp{@Npe zpT797neP(jV{S~Q7a?+}V@MsSF*(aEnNQ$Hd}YBo{8Qig;+~Bn1)D9cySkGhp9{ox z5Zw83WH)bnopFaG2GAbsm?6@T{sC6NcjJIp@Y9dXuIe5AM|x78*;?(}=@}j90y+u- z;J64z1OS+jS-i*!ez>2-S8jRf*PciB3H;7Bp5JTeB|4s?QqM~4{?0;&Z@GS4aR44q zlP4s^IKp2r1gs`)|89pNHD%F6Pu~ky^8KRw!G6FlqR2=30GqSr82t;5vUW-8_nOmn zG29-Z&wjAun>~D&hjUzaV6so<%+<0II*&UOrgcq@O?c0S9^Z2#ogkc>?0>+zJUjMb-x%O1t##3A-Jvo z&oI5qN~T(XJQbpxm}uzWisxRImbx+Zy)uHLi) z0l^6SUnc<3Gt%{SfgrbIyoY;%0IUu{UXV6WPp5n%{T14S6%p-lB9ImZ-MV%+1WFDD z%;g>P<++t|2X1I6x9?x`tgKKgZf zC1O9X#4tK#T~=c>Q<_rb8(-fp14lgnRMd`TK{H#=m0G0x9#ML4qXI$G<+alZo#91F z#$4z_3Iv~^MGsV-9aF<4tS50MfjBWh+SK<1Z zQX1`~z&!07YX5=z0k7$CI&G^5^z%*)U-H;6(@<9$04tC{IDYEWS`*FwPSCjp;H?u)WQ<&x?-k${hkxADu zGnn$rRA5+kC1d+{P7n`wb1dp8g0H23?Jw8ro-cICh28S89w3?61~(z?;7rCr6pU@Wzj`s_NcH>+F$EeE z@D8;9T+n4mYP58(oPulihsyEQ{#gP?g8+zNgz(CvCG}gb^T~6#$CxFRZR)_Y4T9aql>k+A0tZJ_y?d1VMo zxQ|tSfbuMg)Bz-OVAbHu`*tj_>hlxm4z&p5Wd)>7v7VaGi2^nZC%&guYmE@@6$1^= z^L8=b6#zsE+=P-kHxl9kwwGxm%WTgfY;MtV2|Kyw>%t(Iv`TFxW)dQ?1sRCJ=%f_5 zi-x_zHf^N)BX29+&GkGsA9|j)rrk1l_z7I7KZe-Nk$=71D2htsG7eEZ1Oce9iv$TV z*oFl=4py*XZ~mcx(Y0c!m)r(2vfPmFu|H2vX#^eGg9~eK&<^FL$iG(4P(C03KT9sg z&v?D;@t?K?bI{z$&@KOFXn()V^}sYoC*--wtJYANc#rU$3H@K!GjIXmKk1{9UK>$X zt74-G+Wk^=2gKUJf6W{I-8_Z97ru^$CT{)YQQ*Pg0(rN=dqdg3yAqW9EC2p?J&1Ak z_Svz!nqR)12(>N&O>iS^r9UYcKz0b2r~j=3{>nl7`k3tVD?Hy=M5rLO|M?0W5Cz14 z(IS6%L>BY&tHXWtJ>pV4hH|V2K;X`+_+hFc_!5Khuc)%E4bUNjO@Iyp+bY| zA9J?eU9+@;sQ~_W!S>5Ngy`eTSl+xGi62uXYY`UDSrvXcP5qaZ{ok4%KSsBG*r5IR z#D8oKb^Kod==u9F(%7hfBANfzHb(hdh~b7!x8Ty@C;T4$8Y49cpu%|(>FAv#ISLcY zAOwi|SxE8je?*!S{t@)t2f4&vKhXcst_JaI2Y_cJ4YU60{-8C!ALN#H-v--Sa45cT zR2=;Im@RmF6?*V#Tt`8`rp5K{-I(6FxV=yV7_K8kGF#r|$F*PJvyst#ez>W77_ys` z$M`#v{yo55df{4ct`DfkW(OC-FN2j{qo#J>#B@F1({Uy&FjrucWimH8yTc&dJLAF5h`WM?7yauGhPXlR4A{6A*c&&S}wDn?YE%N<$wcH}cLs3(+595sf*d+R8z!&E;EzSlMXP2|y ze&F6BOdPFzN{AL9G@$wbK(PH!Y@xO{k7E=;f4RcX`^+T-<;V`{rM`iVq0xEp0{={N zhe}R-wO0d#r-qjsBiSfs7kRrOtIRmOc%(l=1E_3aptuh_yVor6=11M8$3aY>)ZZA~ z0Aw=V=SLdp-yK|dj(QQe{2s!ppMy*X+7^n}w!?jn@4nPc;WxD+fnmQSC!<1VrVt*H zFkCphc-Coy$D>k@-{MK)EJs1>-(X%2He7goYRurzI~DXmCBn_KS86nV(W#mP9~JBk zL4h)>J&kQvNhL8+CGIV7d)Q{M^?&I#n!=k-4%SLZj*LjbNR7ZujBBIuT6&uRN}p-$ zc-gOma~EjZ{dt(Q!WiIhc9C9s%{=Pw1atnB}a(5{5f0 z|IB&@#{lw&Q)ap9pC23v!s+R{>i5ov751rRG09}Ky9~B5QtvZvKlE4Qvs&%MoReATg*f{oQh~?DQm9UK9=$e8^zlx^1vh+Yj)PR>jS_WP~r(H-wLPW_< zLAov^r)FiGrQq#N0fKjFQdzS=)a1fL@~Goa6GMT$o`bTGxx9k610EH32^a5UBf@=A zK$826eK=?vbYliTITY~|zH4xJNcLbJje+xaGSfJg+WZMBP;-9ORrs72vWC5Kx1ega z$6%X{w3pMj@r29P0>=IwEl|gzJ(`i;;XVF)q7ZVhNPY!J8w*){TV06Q^oER>l-NfIb!D zMYef?;NqYw`vsW$$c+)<4H0;OoUq(l`N+Ga=?<;$)?G$HdJt49qT1IiLEGfIl7(T7 z|5hLrH0T>m4;%A(vrz>U}N8*Ar|AOh?gpOs7^2j+O}WL8qbr z;y&Dg;-vNmt4lemQaXIzjg4}o$$PpM;;n446Zn4ZJ9M_^ajbTem`Vr*9_nhs+bdIA z+aA9)`Mi(VYe7UE+jn5}GGAIe;TYs2cd&S|v}Ft=NTw1;QxVVzhQILvANHo&Xm{=K zl$Mk2{Vs#Eo#{f8Yya>PVM-&Mxa4r*X%55&&^byEEqaI&QI?=(!6gN6i`=Mr3Kt%7 zL*&Yfmt}A^{1iALV1#83XdbT*0chYk$!LfK1r^h#dcEtYx@8( z4yOM~Pqdi&?Futm3CjXEH<-dhT(78&1ET*o_{=`iPWmCBrb9L%qs zs4t>jLpF!mM)IJv+G9_Tg`=?_3f0DPxo4)lQU!9 z7AiX4_q&-r5LvoE{N#q89C<-f>F+?s2ZBR#nr}{%g@>7z6yCDtrs=M6tQf1fSM3|Z|kxXO%vH9uak=_OUCt3?K6nK~crQ1zw|Is1f zwu8;;oTa2@6*Sa0unqtm@BkV6|KqPau9sqtclR{MV1E4x7rQ1r*0J4*hJSTQ5={8a zWH`~$-W6roN^GW5XFk)|=_KAn5r8QNEA>IyjzTKIEY|7T*ZSy<5H$fLVva!i>%&FI z&hzgRVP>&yE7C-?HS!GIR~KfA9I2C#Uf{;|4f^nOnA|QXsk%~lLy0j$b@bTFF{x>wEr*lrHNm zH{QjQd-n8JwkJ+tFVhcc5>ra*DDM%TT7w1&z=csm-LzojW49tz@WzWwO4<1zbj#q9 zWkyBb`tSIWE1}`?de(9|>N#bQ(3EnYn;l$mW!sYuQem`;O`b@JO^ii*kA?px$03@V zysuABZ(|(;9WzfUabaM()bRxyeM*znNVyE3(DF&xdLHM=yS8#k65SX__;DU$!tcVN zG-E=q!z8g}u>fQ>U&eQ5XLME4-wGA?;q|&>++-Y8HJ!KVzy|}&Q;-KiRQ);DaC5xb zk2ew9EcFxW)YW}TS#P%N*Vsw=j_?K){I38_AeTVYCt>2M(bZ73=ESNRqrPpt(o>gz6(oWqx%q{qiC+# z{Pa^@Zr|9V!eurtox>Gby|!$vqjUS37(9)`Aw|rzaTL^qekg%rk_(QjtAOr+Cd+UQ zsgGYBE#EHBBh`U?{;+U|~?P}&pfybP)nqQ1atiI(g_i6^(UTNn_-ffqFo!xSZ@`W3Ore+0x=q?5ya%I)N8XNL6@*1}O%mSgOk`BN4eQ906(30c*@`iJvuY4<~_1W*7(xcz@L&h>a zu<0B*B?C*9LQYfo1W|DbZrg3aiBcNS8eE=P4CPj5rN6;Q7#;SNo~0r8x-Gf;sO5*N zv!y3b2B8lV9($G56l(ak{TF{gG64wwqSNi|Sn!)^ai}t-d6Q8nBX&TinM(E6bVm|| z1<+PK+YEuvSB8qL_jN=*wd{{`wCNTtJ~XM9CJRX-N^5|{5~^13%dv^@QY*Y=(`^1> zU1Iq`hwWR4*1_89db!pOc6iuCdAdp78#ECol^^kS9~D3F!wQgPW?~>*oX3SAA?YCs zv@BDcof(=<>ZL#lWS^o@uQDD}!3$N?qlJTzR%Y7F9uq?P zqh&ac=L4u#Vx*z7)|;X#`qlM1dCAKqY}dj5-E|X{gw(I$e=CIMACg1lRw)dzLHg|Z)t;rp!)p1^s%0(UMcJ4vm9z4JyY!*It>0+9Or9~jT90E3 zF1Grb=B-3}yDEzZn(Wx!O_e6QW2VjSl6UM8K*p6bU?koz;um0Jy^FL2q?!Hw5+7o! zxkd0~be@-;bs=`@7aHhp6;C@VnIHQ^*&vhMZH#sOJe)!-s6b6kvb)^m^9d6s4v`S= zEI%m1b}UJvGk>ljv)^V`{(Pn;5eZj3Dd>|nC=RGI8${SNB!F@5TmL30?b1)ZIksv; z7t4b-YJ?mu)y~2t_fx>2@{!h;Tpa1ILFIj}`!>4Wciy}JqpkpK-Iv)wlD+~i?}YxL zF1xk9Dm2sry^OCjmxTjVs10eJ84|kuaw?Ey>_n+TTH8Bx^7!%GA6TYm5)$HtI&)sR z$1YXDW^|9ASdQD5SEy7O-Yi)R!b4n(6<;y|@OrA%lnp#u6^5&@Y+}~n(PEqM(ENQP zu$pNaj)Z7nCimi3(MZzk9Tk50qu;u8gPcybUrm|AU=v;HMb@q5-w`)!I9oN~`4@ZR zu67V6d4!@6>Stl6%oVO$>0l8FT5(E!@Uky}xPQYIJ2=#DkXm=cU7XBM3}S++yc$21 zUtbyBz703td-JmG3`>A5-`_Pq4l0*s zZ&IbSxEQx2&~queeh9u-D8x89Q;8a?ChO>6y0GkA`#$4%gZ?9=;?8`z{e#;Z|)_WC*M`{kDd z=qVTw(%{q&J2p2!#pOAh5oE`6H@dn7M3DlzPXeIb4fh-9;OAsb4#qQ@Ik?;U0_3Z; zI$$fTDJTHFT#cGw_ z!6%d7y_oU16E%AUt;^n97RQg8SqVHD0DNY!K1GM=E2Ik7` z;^TGe&EEafR9{Az2zxWPieP9zr6atNynXwVl!!hS27!-;>un%zLgL$$<`ZW-uW(L= z&kSsz&e?bY{@*7Z8V^{Xk1IirL5G}&L(N5rhzB!Sgqmd1FTzCDHxOb_zO&DmHt@zDw9YV7;9673qyIkGhTd;Wy{JKEUiKb>!H?O(pk{iL=0odtu9EbdFij(DeCV*p9p%4#Fqw2Qmg@GymYSgJ%lLgn@h>^ti^ zIqI9IF|TUZNK$*{fpzlVz0^7I!*T>q@hd? zsLkOsT07d|i4lgoJUpI(hcXcU~9Q3Ht0IQYa&%y5&-Z`UkYgkbK{j<=m??1;bS z&4+}0YS@|IPiti~3jsHQ!2AAKXmIa9uKTh5w(mjCn4TJ5@3sdL?0+a`rW)~{WbomL z>pYA)(X88_#PBToei9FzUSwkYle8~EvT1(N?kFT=IGWK~(R492xxOkZflr4++m*sY z;yjnq&<9_q>=O;M((V&NuS8xLI*Eo-J>=vqML9S)KR&$dS#hBSwSJ+k6{1&ZccYNO?V^`B9 ztSNP?WUi0u*Z-b1hj{LA^V^=OL2%WQ`-vp^?E`_$ZmAn^t)(WXs=vFZR$zr5%MZ5) zNCyh-Z zMyiI!?e;Z|uUdJ65FsX(zFx!Z-1;UKf97UPq!|{x?{^;jV4cMVz{K!%sjJwTjo})^ ze#f}eIv)E3-9D|N`tVb#ii!D8dTjoigH7GLN3jmCcx$rZfo*ne)k1=Y?XFu>Rb=1nM_|5leVvfOEv39c8TEWMhG8%^33`7CL6Q2ywWQ z&q1juF$$ox&efSRRU;Gxsf*Z(KUELf(?>4!_zb^(D}^D zu~~uU-By==OFVA^NgvN{a(b?9XUws+^rn|SGQxE}$?6Q@7XyOL`FUUcR4*f!qussrrXBQ^WAhnf+uj7AyJeC%@bYx?P(c4c0X-?V zIiiPqpKxm4%8cFXczzX@@BG2!&$7j;ukD`dP8QM;W(Ecu$#^xp(oc0Qi_nx!f6AhV z*G<@F#dkF&F|ef#!bM1yFdT1QDOFvyX%G2iy?1;nX)R_2i4xz?P=EJkBDmba>Wz5) z`C_;YRxkwP4c3YCX*rta$+uQ}avH}KAimw+G1kFltug*3kwf5fnc4(SG#Hdc&kK`4 zwRN`opki;Gr0|)Kkw_597MgT&DMrpKoG5u_XWJn;k}FMF#k9RtP{Ncv+OcK7bLkVO zgwITd6pIxdFEuu);3Ur()Y)8`wUCo>t7kBmWl5-2aSah^9fa1Oi>za+d(FTkKumLi zDEi-4Pp3 zt~UnBX#1Ch>zWg-8?q4#$nsUBtPN_tchhq+n%stzy!rxmC6pcD6q^}Dh{=ylDW-ZR zna57w%W;t@d=K+BU)WIbK@-82(#<1jS&iFMl4{X2U^6ccT=`OKZ50^ZxbldJfff1k z?jO$8y|sj&{T{u0lr|e1!_`3TM4iYEYxsNRa9x-4IvIX`^fL6oP)!W{do z3*n}^@aLDWjo|@x$AUTMkN-Acn(a+C;h0f@I&x`HASGQ?Y>;100ZS!jC-I^zw;g$@Qw(4RFG5FO${VS!-01X3NJ8CYSFywbN%SC`DbME-Jb@0 z@2@^jPt;vWh5Olf#jxqaGAB-5*`g(V;!+h24I-f#yIX2MX_!lH#s*7fB5|;p6xmJm zj2^!*mMiaY$l)FoF1`{7#i7^UJA9%zSA*~fEU)^sH`y$I|&IC6xC1E!yLzweZ*3BVTXx5WC`yMYQdsDFQ-LP7cbPzO_7)4=Wl|)CnvD zOH+!SL!oFD?Gd~fb9pvSkRr`JKbi2T4@P-Y|L~T%%g~t1X1nN+YU&DinS31Z5j7dn zDRvvdH+FyQjaiEYNHL>=>DRssAzIEKK0tec{yj=@45|t)ocoW#Ztd)xjnTw-jRXT4 z>LVslXNAVB-P**_@t1MXeq7u4`Fyj}LI&glPv~cym4lg&gMv1Sg=fVUdaO22qy9Pg zsis`&VMwXB+yRu%OxK~wZxW;0D89MhV0xk$PxK`Aujz!!`*p9C94*b8-Oqz;O-+G^ zW)FrpSF9jAFMdXe2?yjt{+ao!!0x-Val?3s40&L~c7Si(yOyW1^3%CQaK1{x&e?6(MY zIPGpqOM&DEUmg&-l5IYADbU`zZfIKBbB*<_PcSZyjRse{CvCU$l6hzmAK3B2! zbx2A>GmIdW8OzcUvSHY7(Q&86rqN6Xxf5Z5mD$>K<81fOM62~xC%vk&SAuzOlne-3 z_+V$06U5$!nks!ASn11t55(l=c=KK;^b9o0a4V(;4{Ik`Y>*{Wfo?Lmf8;t&K$#}(pu6Ay-i88$pwgyqo9>~W%jIH4 zk(VAX)VjLjaJJYt9q)}ZAr2C=!9ZBJYyBdk1AyNk3D$LWCMsl2j9{d#WvVLc@9Z+d z5wfUH=)Mm&sf|@w+5C(?ilD#@vOPQ~R;$MKegpTuh2yPRvxw9TQ@)BEYbx!BNcZ8G zDn^D7ses*;CE%i+5$*Oh4PCup06u0`j@(?i2FRRx+B&vF7gnPNUk(~zY1BRKZ*-?= zak#4Enr0nP*=ech+u6}jrmDvc)1U|PGs@_i^HBZncL->bZ^CPnEZuPEM@cKE91SzcJ< zi~BWKSVu@OqG9;Pi2h7k#ua2=Uo&z`Og2qRjdHcRq zpey0>NedAc?SIQ^urX$zid3TcT6O^v;`3Xit%h$lk?D_t2K4SE$;qYJEF}ZHSu@{1 z8juy9oLfvdE(-r3kUgXd5Zz%ksP(f5nxnil=p>dm8|PL}aH6bh8O@4z2^PhcFR