From 4e751bd728fd5980de4a19f9f4656af91f98b748 Mon Sep 17 00:00:00 2001 From: Justin SB Date: Tue, 1 Nov 2022 23:16:59 -0400 Subject: [PATCH] Simple non-image redirect server Copying the archeio design for non-image artifacts. We serve hash files (and gpg files) directly, everything else can be redirected to a mirror. --- Makefile | 7 +- cmd/archeio/app/buckets.go | 11 +- cmd/archeio/app/buckets_integration_test.go | 3 +- cmd/archeio/app/clientip.go | 2 +- cmd/archeio/app/clientip_test.go | 2 +- cmd/archeio/app/handlers.go | 6 +- cmd/archeio/main_test.go | 2 +- cmd/redirectserver/README.md | 53 ++ cmd/redirectserver/app/buckets.go | 72 ++ cmd/redirectserver/app/buckets_test.go | 38 + cmd/redirectserver/app/content_cache.go | 173 +++++ cmd/redirectserver/app/content_cache_test.go | 80 +++ cmd/redirectserver/app/handlers.go | 226 ++++++ cmd/redirectserver/app/handlers_test.go | 307 ++++++++ cmd/redirectserver/docs/request-handling.md | 21 + cmd/redirectserver/docs/testing.md | 51 ++ cmd/redirectserver/main.go | 99 +++ cmd/redirectserver/main_test.go | 153 ++++ cmd/redirectserver/pkg/mockgcs/server.go | 106 +++ cmd/redirectserver/pkg/mockgcs/server_test.go | 85 +++ cmd/redirectserver/pkg/mocks3/server.go | 89 +++ cmd/redirectserver/pkg/mocks3/server_test.go | 73 ++ go.mod | 29 +- go.sum | 668 ++++++++++++++++++ 24 files changed, 2340 insertions(+), 16 deletions(-) create mode 100644 cmd/redirectserver/README.md create mode 100644 cmd/redirectserver/app/buckets.go create mode 100644 cmd/redirectserver/app/buckets_test.go create mode 100644 cmd/redirectserver/app/content_cache.go create mode 100644 cmd/redirectserver/app/content_cache_test.go create mode 100644 cmd/redirectserver/app/handlers.go create mode 100644 cmd/redirectserver/app/handlers_test.go create mode 100644 cmd/redirectserver/docs/request-handling.md create mode 100644 cmd/redirectserver/docs/testing.md create mode 100644 cmd/redirectserver/main.go create mode 100644 cmd/redirectserver/main_test.go create mode 100644 cmd/redirectserver/pkg/mockgcs/server.go create mode 100644 cmd/redirectserver/pkg/mockgcs/server_test.go create mode 100644 cmd/redirectserver/pkg/mocks3/server.go create mode 100644 cmd/redirectserver/pkg/mocks3/server_test.go diff --git a/Makefile b/Makefile index d81b20da..28b57a3a 100644 --- a/Makefile +++ b/Makefile @@ -56,8 +56,11 @@ all: build # builds archeio, outputs to $(OUT_DIR) archeio: go build -v -o "$(OUT_DIR)/$(ARCHEIO_BINARY_NAME)" $(ARCHEIO_BUILD_FLAGS) ./cmd/archeio -# alias for building archeio -build: archeio +redirectserver: + go build -v -o "$(OUT_DIR)/redirectserver" $(ARCHEIO_BUILD_FLAGS) ./cmd/redirectserver +# alias for building archeio and redirectserver +build: archeio redirectserver + # build images to local tarball images: hack/make-rules/images.sh diff --git a/cmd/archeio/app/buckets.go b/cmd/archeio/app/buckets.go index 20133533..e5004a2a 100644 --- a/cmd/archeio/app/buckets.go +++ b/cmd/archeio/app/buckets.go @@ -78,8 +78,8 @@ func awsRegionToS3URL(region string) string { } } -// blobChecker are used to check if a blob exists, possibly with caching -type blobChecker interface { +// BlobChecker are used to check if a blob exists, possibly with caching +type BlobChecker interface { // BlobExists should check that blobURL exists // bucket and layerHash may be used for caching purposes BlobExists(blobURL, bucket, layerHash string) bool @@ -90,12 +90,13 @@ type blobChecker interface { // TODO: potentially replace with a caching implementation // should be plenty fast for now, HTTP HEAD on s3 is cheap type cachedBlobChecker struct { - http.Client + httpClient *http.Client blobCache } -func newCachedBlobChecker() *cachedBlobChecker { +func NewCachedBlobChecker(httpClient *http.Client) BlobChecker { return &cachedBlobChecker{ + httpClient: httpClient, blobCache: blobCache{ cache: make(map[string]map[string]struct{}), }, @@ -135,7 +136,7 @@ func (c *cachedBlobChecker) BlobExists(blobURL, bucket, layerHash string) bool { return true } klog.V(3).InfoS("blob existence cache miss", "url", blobURL) - r, err := c.Client.Head(blobURL) + r, err := c.httpClient.Head(blobURL) // fallback to assuming blob is unavailable on errors if err != nil { return false diff --git a/cmd/archeio/app/buckets_integration_test.go b/cmd/archeio/app/buckets_integration_test.go index 36274102..65e559b1 100644 --- a/cmd/archeio/app/buckets_integration_test.go +++ b/cmd/archeio/app/buckets_integration_test.go @@ -20,12 +20,13 @@ limitations under the License. package app import ( + "net/http" "testing" ) func TestCachedBlobChecker(t *testing.T) { bucket := awsRegionToS3URL("us-east-1") - blobs := newCachedBlobChecker() + blobs := NewCachedBlobChecker(http.DefaultClient) testCases := []struct { Name string BlobURL string diff --git a/cmd/archeio/app/clientip.go b/cmd/archeio/app/clientip.go index e50d4c1c..2611fdb2 100644 --- a/cmd/archeio/app/clientip.go +++ b/cmd/archeio/app/clientip.go @@ -31,7 +31,7 @@ import ( // 2. behind Google Cloud LoadBalancer // // At this time we have no need to complicate it further -func getClientIP(r *http.Request) (netip.Addr, error) { +func GetClientIP(r *http.Request) (netip.Addr, error) { // Upstream docs: // https://cloud.google.com/load-balancing/docs/https#x-forwarded-for_header // diff --git a/cmd/archeio/app/clientip_test.go b/cmd/archeio/app/clientip_test.go index 64121133..789a97e5 100644 --- a/cmd/archeio/app/clientip_test.go +++ b/cmd/archeio/app/clientip_test.go @@ -88,7 +88,7 @@ func TestGetClientIP(t *testing.T) { tc := testCases[i] t.Run(tc.Name, func(t *testing.T) { //t.Parallel() - ip, err := getClientIP(&tc.Request) + ip, err := GetClientIP(&tc.Request) if err != nil { if !tc.ExpectError { t.Fatalf("unexpted error: %v", err) diff --git a/cmd/archeio/app/handlers.go b/cmd/archeio/app/handlers.go index 5b8b6e99..41508ecf 100644 --- a/cmd/archeio/app/handlers.go +++ b/cmd/archeio/app/handlers.go @@ -41,7 +41,7 @@ type RegistryConfig struct { // // Exact behavior should be documented in docs/request-handling.md func MakeHandler(rc RegistryConfig) http.Handler { - blobs := newCachedBlobChecker() + blobs := NewCachedBlobChecker(http.DefaultClient) doV2 := makeV2Handler(rc, blobs) return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { // only allow GET, HEAD @@ -68,7 +68,7 @@ func MakeHandler(rc RegistryConfig) http.Handler { }) } -func makeV2Handler(rc RegistryConfig, blobs blobChecker) func(w http.ResponseWriter, r *http.Request) { +func makeV2Handler(rc RegistryConfig, blobs BlobChecker) func(w http.ResponseWriter, r *http.Request) { // matches blob requests, captures the requested blob hash reBlob := regexp.MustCompile("^/v2/.*/blobs/sha256:([0-9a-f]{64})$") // initialize map of clientIP to AWS region @@ -111,7 +111,7 @@ func makeV2Handler(rc RegistryConfig, blobs blobChecker) func(w http.ResponseWri hash := matches[1] // for blob requests, check the client IP and determine the best backend - clientIP, err := getClientIP(r) + clientIP, err := GetClientIP(r) if err != nil { // this should not happen klog.ErrorS(err, "failed to get client IP") diff --git a/cmd/archeio/main_test.go b/cmd/archeio/main_test.go index c9dd2830..23b7c784 100644 --- a/cmd/archeio/main_test.go +++ b/cmd/archeio/main_test.go @@ -67,7 +67,7 @@ func TestIntegrationMain(t *testing.T) { // wait for server to be up and running startErr := <-serverErrChan if startErr != nil { - t.Fatalf("Failed to start archeio: %v", err) + t.Fatalf("Failed to start archeio: %v", startErr) } if !tryUntil(time.Now().Add(time.Second), func() bool { _, err := http.Get("http://" + testAddr + "/v2/") diff --git a/cmd/redirectserver/README.md b/cmd/redirectserver/README.md new file mode 100644 index 00000000..cc846960 --- /dev/null +++ b/cmd/redirectserver/README.md @@ -0,0 +1,53 @@ +# Archeio + +αρχείο (archeío) is roughly? Greek for "registry" + +This binary is a custom redirect/alias server for the Kubernetes project's +OCI artifact ("docker image") hosting. + +Current design details will be detailed here as they mature. + +The original design doc is shared with members of +[dev@kubernetes.io](https://groups.google.com/a/kubernetes.io/g/dev), +anyone can join this list and gain access to read +[the document](https://docs.google.com/document/d/1yNQ7DaDE5LbDJf9ku82YtlKZK0tcg5Wpk9L72-x2S2k/). +It is not accessible to accounts that are not members of the Kubernetes mailinglist +due to organization constraints and joining the list is the most reliable way to gain +access. See https://git.k8s.io/community/community-membership.md + +For more current details see also: https://github.com/kubernetes/k8s.io/wiki/New-Registry-url-for-Kubernetes-(registry.k8s.io) + +**NOTE**: The code in this binary is **not** intended to be fully reusable, +it is the most efficient and expedient implementation of +Kubernetes SIG K8s-Infra's needs. However, some of the packages under +[`pkg/`](./../../pkg/) may be useful if you have a similar problem, +and they should be pretty generalized and re-usable. + +We are looking towards making this application easily re-usable by other projects +in the future, if you're interested please reach out to SIG K8s Infra to discuss. + +----- + +For a rough TLDR of the current design: + +- Images are hosted primarily in the existing Kubernetes [GCR](https://gcr.io/) registry +- Mirrors *of content* blobs are hosted in S3 buckets in AWS +- AWS clients are detected by client IP address and redirect to a local S3 bucket copy +*only* when requesting content blobs, *not* manifests, manifest lists, tags etc. +- All other requests are redirected to the original upstream registry + +For more detail see: +- [docs/request-handling.md](./docs/request-handling.md) +- [docs/testing.md](./docs/testing.md) + +In addition, in order to get the registry.k8s.io domain in place, initially this +binary is *only* serving the trivial redirect to the existing registry +(https://k8s.gcr.io), so we can safely move users / clients to the new domain +that will eventually serve the more complex version. + +Development is at https://registry-sandbox.k8s.io which is *not* supported for +any usage outside of the development of this project and may or may not be +working at any given time. Changes will be deployed there before we deploy +to production, and be exercised by a subset of Kubernetes' own CI. + +For AWS client-IP matching, see [`pkg/net/cidrs/aws`](./../../pkg/net/cidrs/aws) diff --git a/cmd/redirectserver/app/buckets.go b/cmd/redirectserver/app/buckets.go new file mode 100644 index 00000000..36e29185 --- /dev/null +++ b/cmd/redirectserver/app/buckets.go @@ -0,0 +1,72 @@ +/* +Copyright 2022 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package app + +// awsRegionToS3URL returns the base S3 bucket URL for an OCI layer blob given the AWS region +// +// blobs in the buckets should be stored at /containers/images/sha256:$hash +func awsRegionToS3URL(region string) string { + switch region { + // each of these has the region in which we have a bucket listed first + // and then additional regions we're mapping to that bucket + // based roughly on physical adjacency (and therefore _presumed_ latency) + // + // if you add a bucket, add a case for the region it is in, and consider + // shifting other regions that do not have their own bucket + + // US East (N. Virginia) + case "us-east-1", "sa-east-1", "us-gov-east-1", "GLOBAL": + return "https://prod-artifacts-k8s-io-us-east-1.s3.dualstack.us-east-1.amazonaws.com" + // US East (Ohio) + case "us-east-2", "ca-central-1": + return "https://prod-artifacts-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.com" + // US West (N. California) + case "us-west-1", "us-gov-west-1": + return "https://prod-artifacts-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.com" + // US West (Oregon) + case "us-west-2", "ca-west-1": + return "https://prod-artifacts-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com" + // Asia Pacific (Mumbai) + case "ap-south-1", "ap-south-2", "me-south-1", "me-central-1": + return "https://prod-artifacts-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com" + // Asia Pacific (Tokyo) + case "ap-northeast-1", "ap-northeast-2", "ap-northeast-3": + return "https://prod-artifacts-k8s-io-ap-northeast-1.s3.dualstack.ap-northeast-1.amazonaws.com" + // Asia Pacific (Singapore) + case "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-southeast-4", "ap-southeast-6", "ap-east-1", "cn-northwest-1", "cn-north-1": + return "https://prod-artifacts-k8s-io-ap-southeast-1.s3.dualstack.ap-southeast-1.amazonaws.com" + // Europe (Frankfurt) + case "eu-central-1", "eu-central-2", "eu-south-1", "eu-south-2", "il-central-1": + return "https://prod-artifacts-k8s-io-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com" + // Europe (Ireland) + case "eu-west-1", "af-south-1": + return "https://prod-artifacts-k8s-io-eu-west-1.s3.dualstack.eu-west-1.amazonaws.com" + // Europe (London) + case "eu-west-2", "eu-west-3", "eu-north-1": + return "https://prod-artifacts-k8s-io-eu-west-2.s3.dualstack.eu-west-2.amazonaws.com" + default: + // TestRegionToAWSRegionToS3URL checks we return a non-empty result for all regions + // that this app knows about + // + // we will not attempt to route to a region we do now know about + // + // if we see empty string returned, then we've failed to account for all regions + // + // we want to precompute the mapping for all regions + return "" + } +} diff --git a/cmd/redirectserver/app/buckets_test.go b/cmd/redirectserver/app/buckets_test.go new file mode 100644 index 00000000..03055e29 --- /dev/null +++ b/cmd/redirectserver/app/buckets_test.go @@ -0,0 +1,38 @@ +/* +Copyright 2022 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package app + +import ( + "testing" + + "k8s.io/registry.k8s.io/pkg/net/cidrs/aws" +) + +func TestRegionToAWSRegionToS3URL(t *testing.T) { + // ensure all known regions return a configured bucket + regions := aws.Regions() + for region := range regions { + url := awsRegionToS3URL(region) + if url == "" { + t.Fatalf("received empty string for known region %q url", region) + } + } + // ensure bogus region would return "" so we know above test is valid + if url := awsRegionToS3URL("nonsensical-region"); url != "" { + t.Fatalf("received non-empty URL string for made up region \"nonsensical-region\": %q", url) + } +} diff --git a/cmd/redirectserver/app/content_cache.go b/cmd/redirectserver/app/content_cache.go new file mode 100644 index 00000000..1db5816d --- /dev/null +++ b/cmd/redirectserver/app/content_cache.go @@ -0,0 +1,173 @@ +package app + +import ( + "errors" + "fmt" + "io" + "os" + "strings" + "sync" + "time" + + "cloud.google.com/go/storage" + "golang.org/x/net/context" +) + +const ( + // gcsMetadataTimeout is the timeout when querying GCS object metadata (attributes) + gcsMetadataTimeout = 5 * time.Second + // gcsDataTimeout is the timeout when reading the full GCS object + // Note that we only normally do this on smaller files - hash files + gcsDataTimeout = 10 * time.Second +) + +type fileCache struct { + mutex sync.RWMutex + // cache contains the data for all cached files + // Though it is not bounded, we only intend to store the contents of hash files so we should be OK + // (and the cloud run container will spin down after an idle period) + cache map[GCSKey]*fileInfo +} + +type fileInfo struct { + mutex sync.Mutex + body []byte + attrs *fileAttrs +} + +type fileAttrs struct { + Size int64 +} + +type GCSKey struct { + Bucket string + ObjectKey string +} + +func (k GCSKey) String() string { + return urlJoin("gs://"+k.Bucket, k.ObjectKey) +} + +func (k *GCSKey) Join(path string) GCSKey { + joined := urlJoin(k.ObjectKey, path) + joined = strings.TrimPrefix(joined, "/") + return GCSKey{ + Bucket: k.Bucket, + ObjectKey: joined, + } +} + +// func (f *fileInfo) getStat(ctx context.Context, storageClient storage.Client, k GCSKey) (*fileAttrs, error) { +// f.mutex.Lock() +// defer f.mutex.Unlock() + +// if f.attrs != nil { +// return f.attrs, nil +// } + +// ctx, cancel := context.WithTimeout(ctx, gcsMetadataTimeout) +// defer cancel() + +// attrs, err := storageClient.Bucket(k.Bucket).Object(k.ObjectKey).Attrs(ctx) +// if err != nil { +// // TODO: Cache negative lookups? +// return nil, fmt.Errorf("error reading metadata for %q: %w", k, err) +// } +// // We avoid storing the full attributes, they are quite large +// f.attrs = &fileAttrs{ +// Size: attrs.Size, +// } +// return f.attrs, nil +// } + +func (f *fileInfo) getContent(ctx context.Context, storageClient *storage.Client, k GCSKey) ([]byte, error) { + f.mutex.Lock() + defer f.mutex.Unlock() + + if f.body != nil { + return f.body, nil + } + + ctx, cancel := context.WithTimeout(ctx, gcsDataTimeout) + defer cancel() + + r, err := storageClient.Bucket(k.Bucket).Object(k.ObjectKey).NewReader(ctx) + if err != nil { + // TODO: Cache negative lookups? + return nil, fmt.Errorf("error opening reader for %q: %w", k, err) + } + defer r.Close() + + // if f.attrs == nil { + // f.attrs = &fileAttrs{ + // Size: r.Attrs.Size, + // } + // } + + data, err := io.ReadAll(r) + if err != nil { + return nil, fmt.Errorf("error reading data for %q: %w", k, err) + } + f.body = data + return data, nil +} + +type contentCache struct { + storageClient *storage.Client + fileCache +} + +func newContentCache(storageClient *storage.Client) *contentCache { + return &contentCache{ + storageClient: storageClient, + fileCache: fileCache{ + cache: make(map[GCSKey]*fileInfo), + }, + } +} + +// func (c *fileCache) getFileInfo(k GCSKey, create bool) *fileInfo { +// if !create { +// c.mutex.RLock() +// defer c.mutex.RUnlock() +// content, exists := c.cache[k] +// if !exists { +// return nil +// } +// return content +// } else { +// c.mutex.Lock() +// defer c.mutex.Unlock() +// content, exists := c.cache[k] +// if !exists { +// content = &fileInfo{} +// c.cache[k] = content +// } +// return content +// } +// } + +func (c *fileCache) getFileInfo(k GCSKey) *fileInfo { + c.mutex.Lock() + defer c.mutex.Unlock() + content, exists := c.cache[k] + if !exists { + content = &fileInfo{} + c.cache[k] = content + } + return content +} + +func (c *contentCache) GetContents(ctx context.Context, k GCSKey) ([]byte, error) { + fileInfo := c.fileCache.getFileInfo(k) + + data, err := fileInfo.getContent(ctx, c.storageClient, k) + if err != nil { + // Map to a cloud agnostic error + if errors.Is(err, storage.ErrObjectNotExist) { + return nil, os.ErrNotExist + } + return nil, err + } + return data, nil +} diff --git a/cmd/redirectserver/app/content_cache_test.go b/cmd/redirectserver/app/content_cache_test.go new file mode 100644 index 00000000..7634e19f --- /dev/null +++ b/cmd/redirectserver/app/content_cache_test.go @@ -0,0 +1,80 @@ +package app + +import ( + "fmt" + "io" + "net/http" + "os" + "testing" + "testing/iotest" + + "cloud.google.com/go/storage" + "golang.org/x/net/context" + "google.golang.org/api/option" + "k8s.io/registry.k8s.io/cmd/redirectserver/pkg/mockgcs" +) + +func TestContentCache(t *testing.T) { + ctx := context.Background() + + mockGCS := mockgcs.New() + + k1Count := 0 + + root := GCSKey{Bucket: "some-bucket"} + bucket := mockGCS.AddBucket(root.Bucket) + bucket.AddObject("k1", mockgcs.Object{ + Contents: []byte("v1"), + Override: func(response *http.Response) { + k1Count++ + }, + }) + bucket.AddObject("inject-error", mockgcs.Object{ + Override: func(response *http.Response) { + response.Body = io.NopCloser(iotest.ErrReader(fmt.Errorf("internal error"))) + }, + }) + + storageClient, err := storage.NewClient(ctx, option.WithHTTPClient(mockGCS.HTTPClient())) + if err != nil { + t.Fatalf("error from storage.NewClient: %v", err) + } + contentCache := newContentCache(storageClient) + + goodKey := root.Join("k1") + want := "v1" + content1, err := contentCache.GetContents(ctx, goodKey) + if err != nil { + t.Fatalf("error getting %v: %v", goodKey, err) + } + if got := string(content1); got != want { + t.Errorf("content of %v was not as expected; got %q, want %q", goodKey, got, want) + } + if k1Count != 1 { + t.Errorf("count of requests to %v was %d, want 1", goodKey, k1Count) + } + + content2, err := contentCache.GetContents(ctx, goodKey) + if err != nil { + t.Fatalf("error getting %v: %v", goodKey, err) + } + if got := string(content2); got != want { + t.Errorf("content of %v was not as expected; got %q, want %q", goodKey, got, want) + } + // Should have been cached + if k1Count != 1 { + t.Errorf("count of requests to %v was %d, want 1", goodKey, k1Count) + } + + badKey := root.Join("does-not-exist") + _, err = contentCache.GetContents(ctx, badKey) + if err == nil || !os.IsNotExist(err) { + t.Fatalf("unexpected error from GetContents; got %v, want IsNotExist", err) + } + + errorKey := root.Join("inject-error") + _, err = contentCache.GetContents(ctx, errorKey) + if err == nil || os.IsNotExist(err) { + t.Fatalf("unexpected error from GetContents; got %v, want internal error", err) + } +} diff --git a/cmd/redirectserver/app/handlers.go b/cmd/redirectserver/app/handlers.go new file mode 100644 index 00000000..da587fc2 --- /dev/null +++ b/cmd/redirectserver/app/handlers.go @@ -0,0 +1,226 @@ +/* +Copyright 2022 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package app + +import ( + "net/http" + "os" + "strings" + + "cloud.google.com/go/storage" + "k8s.io/klog/v2" + + "k8s.io/registry.k8s.io/cmd/archeio/app" + "k8s.io/registry.k8s.io/pkg/net/cidrs" + "k8s.io/registry.k8s.io/pkg/net/cidrs/aws" +) + +type MirrorConfig struct { + CanonicalLocation GCSKey + // CanonicalFallback is the fallback URL direct to a public bucket or similar, + // this is used when we're having problems finding a redirect bucket. + CanonicalFallback string + + InfoURL string + PrivacyURL string +} + +type Server struct { + MirrorConfig + + // contentCache stores the content of files, in particular the hash files + contentCache *contentCache + + // regionMapper maps from a client IP to a cloud & region + regionMapper cidrs.IPMapper[string] + + // mirrorCache records whether the mirrors have the various files. + // We use a lookup so we don't require 100% perfect replication to all mirrors. + mirrorCache app.BlobChecker +} + +func NewServer(cfg MirrorConfig, storageClient *storage.Client, mirrorCache app.BlobChecker) *Server { + s := &Server{ + MirrorConfig: cfg, + } + // cache of hash files + s.contentCache = newContentCache(storageClient) + // initialize map of clientIP to AWS region + s.regionMapper = aws.NewAWSRegionMapper() + // cache of whether the mirrors have blobs + s.mirrorCache = mirrorCache + + return s +} + +// ServeHTTP is the main entry point +func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) { + // only allow GET, HEAD; we don't allow + if r.Method != http.MethodGet && r.Method != http.MethodHead { + http.Error(w, "Only GET and HEAD are allowed.", http.StatusMethodNotAllowed) + return + } + path := r.URL.Path + switch { + case strings.HasPrefix(path, "/binaries/"): + s.serveBinaries(w, r) + case path == "/": + http.Redirect(w, r, s.InfoURL, http.StatusTemporaryRedirect) + case strings.HasPrefix(path, "/privacy"): + http.Redirect(w, r, s.PrivacyURL, http.StatusTemporaryRedirect) + default: + klog.V(2).InfoS("unknown request", "path", path) + http.NotFound(w, r) + } +} + +func (s *Server) serveBinaries(w http.ResponseWriter, r *http.Request) { + rPath := r.URL.Path + + serveDirectly := false + + suffix := getSuffix(rPath) + switch strings.ToLower(suffix) { + case ".sha1", ".sha224", ".sha256", ".sha384", ".sha512", ".md5": + // Hashes are not redirected, both for security and because they're so small + serveDirectly = true + case ".gpg": + // Like hashes, we serve small security-critical key/signature information directly + serveDirectly = true + } + + if serveDirectly { + s.serveDirectly(w, r) + return + } + + // for blob requests, check the client IP and determine the best backend + clientIP, err := app.GetClientIP(r) + if err != nil { + // this should not happen + klog.ErrorS(err, "failed to get client IP") + http.Error(w, err.Error(), http.StatusBadRequest) + return + } + + // check if client is known to be coming from an AWS region + awsRegion, ipIsKnown := s.regionMapper.GetIP(clientIP) + if !ipIsKnown { + // no region match, redirect to fallback location + klog.V(2).InfoS("region not known; redirecting request to fallback location", "path", rPath) + s.redirectToCanonical(w, r) + return + } + + // check if blob is available in our S3 bucket for the region + mirrorBase := awsRegionToS3URL(awsRegion) + mirrorURL := urlJoin(mirrorBase, rPath) + if s.mirrorCache.BlobExists(mirrorURL, mirrorBase, rPath) { + // blob known to be available in S3, redirect client there + klog.V(2).InfoS("redirecting blob request to mirror", "path", rPath, "mirror", mirrorBase) + http.Redirect(w, r, mirrorURL, http.StatusTemporaryRedirect) + return + } + + // fall back to redirect to upstream + klog.V(2).InfoS("blob not found; redirecting blob request to fallback location", "path", rPath) + s.redirectToCanonical(w, r) +} + +func (s *Server) serveDirectly(w http.ResponseWriter, r *http.Request) { + ctx := r.Context() + + rPath := r.URL.Path + + u := s.CanonicalLocation.Join(rPath) + data, err := s.contentCache.GetContents(ctx, u) + if err != nil { + if os.IsNotExist(err) { + klog.V(2).InfoS("object not found in canonical location", "url", u) + http.Error(w, http.StatusText(http.StatusNotFound), http.StatusNotFound) + return + } + klog.V(2).ErrorS(err, "error reading object in canonical location", "url", u) + http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError) + return + } + + // TODO: Headers + // < HTTP/1.1 200 OK + // < X-GUploader-UploadID: ADPycdvBD5IWSlLZPTD17ArlCH9Aq8rNp-XRiefxNuI3e1rq2ZSZEs_E8nZ8Zg5wJcn47E9udEoCiGff6zCrS2WpkjNS + // < x-goog-generation: 1666089540728742 + // < x-goog-metageneration: 1 + // < x-goog-stored-content-encoding: identity + // < x-goog-stored-content-length: 65 + // < x-goog-hash: crc32c=aET7Hg== + // < x-goog-hash: md5=moj7swqz3Hi/1S99ecNCsA== + // < x-goog-storage-class: STANDARD + // < Accept-Ranges: bytes + // < Content-Length: 65 + // < Server: UploadServer + // < Date: Tue, 01 Nov 2022 20:28:07 GMT + // < Cache-Control: public,max-age=86400 + // < Last-Modified: Tue, 18 Oct 2022 10:39:00 GMT + // < ETag: "9a88fbb30ab3dc78bfd52f7d79c342b0" + // < Content-Type: text/plain; charset=utf-8 + // < Age: 24263 + + klog.V(2).InfoS("serving object from canonical location", "url", u) + w.WriteHeader(http.StatusOK) + _, err = w.Write(data) + ignoreErrorTooLate(err) +} + +func ignoreErrorTooLate(_ error) { + // It's too late to do anything about errors, we're written the response etc +} + +func (s *Server) redirectToCanonical(w http.ResponseWriter, r *http.Request) { + rPath := r.URL.Path + + // Our canonical bucket isn't currently publicly readable. + // We could construct a signedurl here, but this is a bit of a pain because we need a keypair. + // Maybe: https://gist.github.com/pdecat/80f21e36583420abbfdeae0494a53501 + // u := s.CanonicalLocation.Join(rPath) + // opts := storage.SignedURLOptions{} + // s.storageClient.Bucket(u.Bucket).SignedURL(u.ObjectKey, opts) + + // Instead, we redirect to a "primary bucket" that is assumed public, for now. + + redirectURL := urlJoin(s.CanonicalFallback, rPath) + http.Redirect(w, r, redirectURL, http.StatusTemporaryRedirect) +} + +// urlJoin performs simple url joining without canonicalization +func urlJoin(base string, path string) string { + var s strings.Builder + s.WriteString(base) + if !strings.HasSuffix(base, "/") { + s.WriteString("/") + } + s.WriteString(strings.TrimPrefix(path, "/")) + return s.String() +} + +// getSuffix returns the file suffix (the component from the last dot character) +func getSuffix(urlPath string) string { + lastDot := strings.LastIndex(urlPath, ".") + if lastDot == -1 { + return "" + } + return urlPath[lastDot:] +} diff --git a/cmd/redirectserver/app/handlers_test.go b/cmd/redirectserver/app/handlers_test.go new file mode 100644 index 00000000..9c0f8998 --- /dev/null +++ b/cmd/redirectserver/app/handlers_test.go @@ -0,0 +1,307 @@ +/* +Copyright 2022 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package app + +import ( + "context" + "errors" + "fmt" + "io" + "net/http" + "net/http/httptest" + "strings" + "testing" + + "cloud.google.com/go/storage" + "github.com/google/go-cmp/cmp" + "google.golang.org/api/option" + "k8s.io/registry.k8s.io/cmd/archeio/app" + "k8s.io/registry.k8s.io/cmd/redirectserver/pkg/mockgcs" + "k8s.io/registry.k8s.io/cmd/redirectserver/pkg/mocks3" +) + +type Harness struct { + Server *Server + Config MirrorConfig +} + +func NewHarness(t *testing.T) *Harness { + cfg := MirrorConfig{ + CanonicalLocation: GCSKey{ + Bucket: "canonical-bucket", + ObjectKey: "", + }, + CanonicalFallback: "https://artifacts-fallback.k8s.io", + InfoURL: "https://github.com/kubernetes/k8s.io/tree/main/artifacts.k8s.io", + PrivacyURL: "https://www.linuxfoundation.org/privacy-policy/", + } + mockGCS := mockgcs.New() + bucket := mockGCS.AddBucket(cfg.CanonicalLocation.Bucket) + bucket.AddObject("binaries/1.2.3/darwin/arm64/evolution", mockgcs.Object{}) + bucket.AddObject("binaries/1.2.3/darwin/arm64/evolution.sha256", mockgcs.Object{ + Contents: []byte("536241c501f4f77c17c999ae822f4bbc28f724d190a68315bad07aac9ad1229c"), + }) + bucket.AddObject("binaries/kube.gpg", mockgcs.Object{ + Contents: []byte("k8s is the key"), + }) + bucket.AddObject("binaries/trigger-500.sha256", mockgcs.Object{ + Override: func(response *http.Response) { + response.StatusCode = http.StatusInternalServerError + response.Status = http.StatusText(response.StatusCode) + }, + }) + + ctx := context.Background() + + storageClient, err := storage.NewClient(ctx, option.WithHTTPClient(mockGCS.HTTPClient())) + if err != nil { + t.Fatalf("error from storage.NewClient: %v", err) + } + + hosts := []string{ + "prod-artifacts-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com", + "prod-artifacts-k8s-io-ap-southeast-1.s3.dualstack.ap-southeast-1.amazonaws.com", + "prod-artifacts-k8s-io-eu-central-1.s3.dualstack.eu-central-1.amazonaws.com", + "prod-artifacts-k8s-io-eu-west-1.s3.dualstack.eu-west-1.amazonaws.com", + "prod-artifacts-k8s-io-us-east-1.s3.dualstack.us-east-2.amazonaws.com", + "prod-artifacts-k8s-io-us-east-2.s3.dualstack.us-east-2.amazonaws.com", + "prod-artifacts-k8s-io-us-west-1.s3.dualstack.us-west-1.amazonaws.com", + "prod-artifacts-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com", + "prod-artifacts-k8s-io-eu-west-2.s3.dualstack.eu-west-2.amazonaws.com", + } + s3 := mocks3.New() + for _, host := range hosts { + bucket := s3.AddBucket(host) + bucket.AddObject("binaries/1.2.3/darwin/arm64/evolution", mocks3.Object{}) + } + + mirrorCache := app.NewCachedBlobChecker(s3.HTTPClient()) + server := NewServer(cfg, storageClient, mirrorCache) + h := &Harness{} + h.Config = cfg + h.Server = server + return h +} + +type TestRequest struct { + Name string + Request *http.Request + ExpectedStatus int + ExpectedURL string + ExpectedContent string +} + +func (tc *TestRequest) Run(t *testing.T, harness *Harness) { + recorder := httptest.NewRecorder() + harness.Server.ServeHTTP(recorder, tc.Request) + response := recorder.Result() + if response == nil { + t.Fatalf("nil response") + } + if response.StatusCode != tc.ExpectedStatus { + t.Fatalf( + "expected status: %v, but got status: %v", + http.StatusText(tc.ExpectedStatus), + http.StatusText(response.StatusCode), + ) + } + body, err := io.ReadAll(response.Body) + if err != nil { + t.Fatalf("error reading body: %v", err) + } + want := tc.ExpectedContent + if want == "" && tc.ExpectedStatus == http.StatusTemporaryRedirect && tc.Request.Method != "HEAD" { + want = expectedContentForRedirect(tc.ExpectedURL) + } + got := strings.TrimSpace(string(body)) + if diff := cmp.Diff(got, want); diff != "" { + t.Errorf("content did not match expected; got %q, want %q\ndiff=%v", got, want, diff) + } + location, err := response.Location() + if err != nil { + if !errors.Is(err, http.ErrNoLocation) { + t.Fatalf("failed to get response location with error: %v", err) + } else if tc.ExpectedURL != "" { + t.Fatalf("expected url: %q but no location was available", tc.ExpectedURL) + } + } else if location.String() != tc.ExpectedURL { + t.Fatalf( + "expected url: %q, but got: %q", + tc.ExpectedURL, + location, + ) + } +} + +func TestHTTPRequest(t *testing.T) { + h := NewHarness(t) + + testCases := []TestRequest{ + { + Name: "/", + Request: httptest.NewRequest("GET", "http://localhost:8080/", nil), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: h.Config.InfoURL, + }, + { + Name: "/privacy", + Request: httptest.NewRequest("GET", "http://localhost:8080/privacy", nil), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: h.Config.PrivacyURL, + }, + { + Name: "/not-binaries/", + Request: httptest.NewRequest("GET", "http://localhost:8080/v3/", nil), + ExpectedStatus: http.StatusNotFound, + ExpectedContent: "404 page not found", + }, + { + Name: "/binaries", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries", nil), + ExpectedStatus: http.StatusNotFound, + ExpectedContent: "404 page not found", + }, + { + Name: "/binaries/", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/", nil), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://artifacts-fallback.k8s.io/binaries/", + }, + { + Name: "HEAD /binaries/", + Request: httptest.NewRequest("HEAD", "http://localhost:8080/binaries/", nil), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://artifacts-fallback.k8s.io/binaries/", + }, + { + Name: "POST /binaries/", + Request: httptest.NewRequest("POST", "http://localhost:8080/binaries/", nil), + ExpectedStatus: http.StatusMethodNotAllowed, + ExpectedContent: "Only GET and HEAD are allowed.", + }, + { + Name: "/binaries/1.2.3/darwin/arm64/evolution", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/evolution", nil), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://artifacts-fallback.k8s.io/binaries/1.2.3/darwin/arm64/evolution", + }, + { + Name: "/binaries/not-a-file.sha256", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/not-a-file.sha256", nil), + ExpectedStatus: http.StatusNotFound, + ExpectedContent: "Not Found", + }, + { + Name: "/binaries/trigger-500.sha256", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/trigger-500.sha256", nil), + ExpectedStatus: http.StatusInternalServerError, + ExpectedContent: "Internal Server Error", + }, + { + Name: "/binaries/1.2.3/darwin/arm64/evolution.sha256", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/evolution.sha256", nil), + ExpectedStatus: http.StatusOK, + ExpectedContent: "536241c501f4f77c17c999ae822f4bbc28f724d190a68315bad07aac9ad1229c", + }, + { + Name: "/binaries/kube.gpg", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/kube.gpg", nil), + ExpectedStatus: http.StatusOK, + ExpectedContent: "k8s is the key", + }, + { + Name: "AWS IP, /binaries/1.2.3/darwin/arm64/evolution", + Request: func() *http.Request { + r := httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/evolution", nil) + r.RemoteAddr = "35.180.1.1:888" + return r + }(), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://prod-artifacts-k8s-io-eu-west-2.s3.dualstack.eu-west-2.amazonaws.com/binaries/1.2.3/darwin/arm64/evolution", + }, + } + for i := range testCases { + tc := testCases[i] + t.Run(tc.Name, func(t *testing.T) { + t.Parallel() + tc.Run(t, h) + }) + } +} + +// expectedContentForRedirect is the body for a redirect response. +func expectedContentForRedirect(url string) string { + return fmt.Sprintf("Temporary Redirect.", url) +} + +func TestBinaryRedirection(t *testing.T) { + h := NewHarness(t) + + testCases := []TestRequest{ + { + Name: "/binaries/1.2.3/darwin/arm64/evolution", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/evolution", nil), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://artifacts-fallback.k8s.io/binaries/1.2.3/darwin/arm64/evolution", + }, + { + Name: "Somehow bogus remote addr, /binaries/1.2.3/darwin/arm64/evolution", + Request: func() *http.Request { + r := httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/evolution", nil) + r.RemoteAddr = "35.180.1.1asdfasdfsd:888" + return r + }(), + // NOTE: this one really shouldn't happen, but we want full test coverage + // This should only happen with a bug in the stdlib http server ... + ExpectedStatus: http.StatusBadRequest, + ExpectedContent: `ParseAddr("35.180.1.1asdfasdfsd"): unexpected character (at "asdfasdfsd")`, + }, + { + Name: "AWS IP, exists in mirror", + Request: func() *http.Request { + r := httptest.NewRequest("GET", "http://localhost:80800/binaries/1.2.3/darwin/arm64/evolution", nil) + r.RemoteAddr = "35.180.1.1:888" + return r + }(), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://prod-artifacts-k8s-io-eu-west-2.s3.dualstack.eu-west-2.amazonaws.com/binaries/1.2.3/darwin/arm64/evolution", + }, + { + Name: "AWS IP, sha file", + Request: httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/evolution.sha256", nil), + ExpectedStatus: http.StatusOK, + ExpectedContent: "536241c501f4f77c17c999ae822f4bbc28f724d190a68315bad07aac9ad1229c", + }, + { + Name: "AWS IP, not in mirror", + Request: func() *http.Request { + r := httptest.NewRequest("GET", "http://localhost:8080/binaries/1.2.3/darwin/arm64/something-else", nil) + r.RemoteAddr = "35.180.1.1:888" + return r + }(), + ExpectedStatus: http.StatusTemporaryRedirect, + ExpectedURL: "https://artifacts-fallback.k8s.io/binaries/1.2.3/darwin/arm64/something-else", + }, + } + for i := range testCases { + tc := testCases[i] + t.Run(tc.Name, func(t *testing.T) { + t.Parallel() + tc.Run(t, h) + }) + } +} diff --git a/cmd/redirectserver/docs/request-handling.md b/cmd/redirectserver/docs/request-handling.md new file mode 100644 index 00000000..857275ad --- /dev/null +++ b/cmd/redirectserver/docs/request-handling.md @@ -0,0 +1,21 @@ +# Request Handling + +Requests to artifacts.k8s.io follow the following flow: + +1. If it's a request for `/`: redirect to our wiki page about the project +1. If it's a request for `/privacy`: redirect to linux foundation privacy policy page +1. If it's not a request for `/` or `/privacy` and does not start with `/binaries/`: 404 error +1. For binary requests, all of which start with `/binaries/`: + - If it's security sensitive: serve it directly. + - If it's not a known AWS IP: redirect to the canonical location + - If it's a known AWS IP AND HEAD request for the layer succeeeds in S3: redirect to S3 + - If it's a known AWS IP AND HEAD fails: redirect to canonical location + +Currently the `canonical location` is https://artifacts.k8s.io. This will obviously need to be changed before we stand this up on artifacts.k8s.io. + + +# Security considerations + +We assume that users trust artifacts.k8s.io, they need not trust the mirrors as long as they are verifying hashes. + +For this to work, we identify hashes (and gpg keys) and serve them directly from artifacts.k8s.io without a redirect. They are also typically small (<1 KB), so this doesn't cost us much vs redirecting. \ No newline at end of file diff --git a/cmd/redirectserver/docs/testing.md b/cmd/redirectserver/docs/testing.md new file mode 100644 index 00000000..32485c6a --- /dev/null +++ b/cmd/redirectserver/docs/testing.md @@ -0,0 +1,51 @@ +# Testing + +## Unit Tests + +Archeio has unit tests covering 100% of application code (`cmd/archeio/app/...`) +and general packages (`pkg/...`). The only code without 100% coverage is in main. + +These are standard Go unit tests. In addition to typical unit tests with granular +methods, we also have unit tests covering the HTTP Handlers and full +[request handling flow](./request-handling.md). + + +**This level of coverage must be maintained**, it is imperative that we have robust +testing in this project that may soon serve all Kubernetes project image downloads. +TODO: this should be enforced by CI. Currently it is enforced by reviewers. + +Coverage results are visible by clicking the `pull-oci-proxy-test` context link +at the bottom of the pull request. + +Coverage results can be viewed locally by `make test` + open `bin/all-filtered.html`. + +## Integration Tests + +Package `main` code not covered by unit tests is covered by integration tests. + +Integration tests are written as a go unit test named with prefix `TestIntegration` +in the `main` package which allows `make unit` to skip them. + +The integration tests run the actual application `main()`, and pull image(s) +through a running instance using [crane]. + +`make integration` runs only integration tests. + +Because our CI runs primarily in GCP, this currently covers pulling from outside AWS. + +## E2E Testing + +Changes to archeio are auto-deployed to registry-sandbox.k8s.io and NOT to +registry.k8s.io. registry.k8s.io serves stable releases. + +The instance at registry-sandbox.k8s.io has [kops] cluster CI running in AWS +pointed at it to validate pulling from AWS. The kops clusters run in random +regions. + +This E2E CI should be consulted before promoting code to stable release + registry.k8s.io. + +Results are visible in [testgrid] at: https://testgrid.k8s.io/sig-k8s-infra-oci-proxy#Summary + +[crane]: https://github.com/google/go-containerregistry/blob/main/cmd/crane/README.md +[kops]: https://github.com/kubernetes/kops +[testgrid]: https://github.com/GoogleCloudPlatform/testgrid diff --git a/cmd/redirectserver/main.go b/cmd/redirectserver/main.go new file mode 100644 index 00000000..829ee172 --- /dev/null +++ b/cmd/redirectserver/main.go @@ -0,0 +1,99 @@ +/* +Copyright 2022 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package main + +import ( + "context" + "flag" + "net/http" + "os" + "os/signal" + "syscall" + "time" + + "cloud.google.com/go/storage" + "google.golang.org/api/option" + "k8s.io/klog/v2" + utils "k8s.io/registry.k8s.io/cmd/archeio/app" + "k8s.io/registry.k8s.io/cmd/redirectserver/app" +) + +func main() { + // klog setup + klog.InitFlags(nil) + flag.Parse() + defer klog.Flush() + + // cloud run expects us to listen to HTTP on $PORT + // https://cloud.google.com/run/docs/container-contract#port + port := getEnv("PORT", "8080") + + cfg := app.MirrorConfig{ + CanonicalLocation: app.GCSKey{ + Bucket: getEnv("CANONICAL_BUCKET", "k8s-artifacts-prod"), + ObjectKey: "", + }, + CanonicalFallback: getEnv("FALLBACK_LOCATION", "https://artifacts.k8s.io/"), + InfoURL: "https://github.com/kubernetes/registry.k8s.io", + PrivacyURL: "https://www.linuxfoundation.org/privacy-policy/", + } + + storageClient, err := storage.NewClient(context.Background(), option.WithScopes(storage.ScopeReadOnly)) + if err != nil { + klog.Fatalf("error building GCS client: %v", err) + } + mirrorCache := utils.NewCachedBlobChecker(http.DefaultClient) + redirectServer := app.NewServer(cfg, storageClient, mirrorCache) + + // configure server with reasonable timeout + // we only serve redirects and small hashes, 10s should be sufficient + httpServer := &http.Server{ + Addr: ":" + port, + Handler: redirectServer, + ReadTimeout: 10 * time.Second, + ReadHeaderTimeout: 2 * time.Second, + } + + // signal handler for graceful shutdown + done := make(chan os.Signal, 1) + signal.Notify(done, os.Interrupt, syscall.SIGINT, syscall.SIGTERM) + + // start serving + go func() { + if err := httpServer.ListenAndServe(); err != nil && err != http.ErrServerClosed { + klog.Fatal(err) + } + }() + klog.InfoS("listening", "port", port) + klog.InfoS("registry", "configuration", cfg) + + // Graceful shutdown + <-done + ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second) + defer cancel() + if err := httpServer.Shutdown(ctx); err != nil { + klog.Fatalf("Server didn't exit gracefully %v", err) + } +} + +// getEnv returns defaultValue if key is not set, else the value of os.LookupEnv(key) +func getEnv(key, defaultValue string) string { + if value, ok := os.LookupEnv(key); ok { + return value + } + return defaultValue +} diff --git a/cmd/redirectserver/main_test.go b/cmd/redirectserver/main_test.go new file mode 100644 index 00000000..a9b5d34d --- /dev/null +++ b/cmd/redirectserver/main_test.go @@ -0,0 +1,153 @@ +//go:build !nointegration +// +build !nointegration + +/* +Copyright 2022 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package main + +import ( + "context" + "io" + "net/http" + "os" + "os/exec" + "testing" + "time" + + "k8s.io/registry.k8s.io/internal/integration" +) + +// TestIntegrationMain tests the entire, built binary with an integration +// test, pulling images with crane +func TestIntegrationMain(t *testing.T) { + ctx := context.Background() + + rootDir, err := integration.ModuleRootDir() + if err != nil { + t.Fatalf("Failed to detect module root dir: %v", err) + } + + // build binary + buildCmd := exec.Command("make", "redirectserver") + buildCmd.Dir = rootDir + if err := buildCmd.Run(); err != nil { + t.Fatalf("Failed to build redirectserver for integration testing: %v", err) + } + + // start server in background + testPort := "61337" + testAddr := "localhost:" + testPort + serverErrChan := make(chan error) + cmdContext, serverCancel := context.WithCancel(context.TODO()) + serverCmd := exec.CommandContext(cmdContext, "bin/redirectserver") + serverCmd.Dir = rootDir + serverCmd.Env = append(serverCmd.Env, "HOME="+os.Getenv("HOME")) + serverCmd.Env = append(serverCmd.Env, "USER="+os.Getenv("USER")) + serverCmd.Env = append(serverCmd.Env, "PORT="+testPort) + serverCmd.Stderr = os.Stderr + defer serverCancel() + go func() { + serverErrChan <- serverCmd.Start() + serverErrChan <- serverCmd.Wait() + }() + + // wait for server to be up and running + startErr := <-serverErrChan + if startErr != nil { + t.Fatalf("Failed to start redirectserver: %v", startErr) + } + if !tryUntil(time.Now().Add(time.Second), func() bool { + _, err := http.Get("http://" + testAddr + "/") + return err == nil + }) { + t.Fatal("timed out waiting for redirectserver to be ready") + } + + // TODO: fake being on AWS + testGet := func(ctx context.Context, relativePath string, wantStatusCode int, wantContent string) { + url := "http://" + testAddr + "/" + relativePath + // Do not follow redirects + httpClient := &http.Client{ + CheckRedirect: func(req *http.Request, via []*http.Request) error { + return http.ErrUseLastResponse + }, + } + req, err := http.NewRequestWithContext(ctx, "GET", url, nil) + if err != nil { + t.Errorf("error building HTTP requst for GET %q: %v", url, err) + return + } + response, err := httpClient.Do(req) + if err != nil { + t.Errorf("GET for %q failed: %v", url, err) + return + } + defer response.Body.Close() + b, err := io.ReadAll(response.Body) + if err != nil { + t.Errorf("error reading response body for %q failed: %v", url, err) + return + } + body := string(b) + if response.StatusCode != wantStatusCode { + t.Errorf("GET for %q gave unexpected response code: got %v, want %v. Body=%q", url, response.StatusCode, wantStatusCode, body) + return + } + if body != wantContent { + t.Errorf("GET for %q gave unexpected body: got %q, want %q", url, body, wantContent) + return + } + } + + // test fetching sha256, should be served directly + testGet(ctx, "binaries/kops/1.24.3/darwin/arm64/kops.sha256", http.StatusOK, "1a946447cdd9baeaff6780ac05f3c1fbb9486c57436a31b4476ea2b161f8739a\n") + + // test fetching non-hash, should be served via redirect + testGet(ctx, "binaries/kops/1.24.3/darwin/arm64/kops", http.StatusTemporaryRedirect, "Temporary Redirect.\n\n") + + // test fetching non-existent, should be served via redirect + testGet(ctx, "binaries/not-a-file", http.StatusTemporaryRedirect, "Temporary Redirect.\n\n") + + // test fetching non-existent hash, should give not-found + testGet(ctx, "binaries/not-a-file.sha256", http.StatusNotFound, "Not Found\n") + + // test fetching privacy, should be served via redirect + testGet(ctx, "privacy", http.StatusTemporaryRedirect, "Temporary Redirect.\n\n") + + // test fetching root, should be served via redirect + testGet(ctx, "", http.StatusTemporaryRedirect, "Temporary Redirect.\n\n") + + // we're done, cleanup + if err := serverCmd.Process.Signal(os.Interrupt); err != nil { + t.Fatalf("failed to signal archeio: %v", err) + } + if err := <-serverErrChan; err != nil { + t.Fatalf("archeio did not exit cleanly: %v", err) + } +} + +// helper that calls `try()` in a loop until the deadline `until` +// has passed or `try()`returns true, returns whether try ever returned true +func tryUntil(until time.Time, try func() bool) bool { + for until.After(time.Now()) { + if try() { + return true + } + time.Sleep(time.Millisecond * 10) + } + return false +} diff --git a/cmd/redirectserver/pkg/mockgcs/server.go b/cmd/redirectserver/pkg/mockgcs/server.go new file mode 100644 index 00000000..f7dd4516 --- /dev/null +++ b/cmd/redirectserver/pkg/mockgcs/server.go @@ -0,0 +1,106 @@ +package mockgcs + +import ( + "bytes" + "io" + "net/http" + "strings" + + "k8s.io/klog/v2" +) + +const expectedHost = "storage.googleapis.com" + +// Server implements a simple mock Google Cloud Storage (GCS) server +type Server struct { + buckets map[string]*Bucket +} + +// Bucket is a (mock) bucket in a server +type Bucket struct { + objects map[string]*Object +} + +// Object is an object in a (mock) bucket +type Object struct { + // Contents are the contents of this blob + Contents []byte + // Override can be set to force an error or similar + Override func(response *http.Response) +} + +// HTTPClient returns an http.Client bound to the mock server +func (s *Server) HTTPClient() *http.Client { + return &http.Client{Transport: s} +} + +// New constructs a new mock GCS server +func New() *Server { + return &Server{ + buckets: make(map[string]*Bucket), + } +} + +// AddBucket creates a bucket with the specified name +func (s *Server) AddBucket(bucketName string) *Bucket { + bucket := &Bucket{ + objects: make(map[string]*Object), + } + s.buckets[bucketName] = bucket + return bucket +} + +// AddObject creates an object in the bucket +func (b *Bucket) AddObject(objectPath string, obj Object) { + b.objects[objectPath] = &obj +} + +// RoundTrip implements the GCS protocol +func (s *Server) RoundTrip(request *http.Request) (*http.Response, error) { + host := request.Host + if host != expectedHost { + return s.serve404(request) + } + + url := request.URL + + pathTokens := strings.Split(strings.TrimPrefix(url.Path, "/"), "/") + + if len(pathTokens) >= 2 { + bucket := pathTokens[0] + objectKey := strings.Join(pathTokens[1:], "/") + + if bucket := s.buckets[bucket]; bucket != nil { + if object := bucket.objects[objectKey]; object != nil { + return s.serveObject(request, object) + } + return s.serve404(request) + } + } + + klog.Warningf("unhandled request: %s %s %#v", request.Method, request.URL, request) + return s.serve404(request) +} + +func (s *Server) serve404(_ *http.Request) (*http.Response, error) { + httpResponse := &http.Response{ + Status: http.StatusText(http.StatusNotFound), + StatusCode: http.StatusNotFound, + Body: io.NopCloser(bytes.NewReader([]byte{})), + } + return httpResponse, nil +} + +func (s *Server) serveObject(_ *http.Request, object *Object) (*http.Response, error) { + httpResponse := &http.Response{ + StatusCode: http.StatusOK, + Body: io.NopCloser(bytes.NewReader(object.Contents)), + Status: http.StatusText(http.StatusOK), + } + + if object.Override != nil { + object.Override(httpResponse) + } + + return httpResponse, nil +} diff --git a/cmd/redirectserver/pkg/mockgcs/server_test.go b/cmd/redirectserver/pkg/mockgcs/server_test.go new file mode 100644 index 00000000..69baae29 --- /dev/null +++ b/cmd/redirectserver/pkg/mockgcs/server_test.go @@ -0,0 +1,85 @@ +package mockgcs + +import ( + "io" + "net/http" + "strings" + "testing" + + "github.com/google/go-cmp/cmp" +) + +type TestRequest struct { + URL string + ExpectedStatus int + ExpectedBody string +} + +func (tc *TestRequest) Run(t *testing.T, httpClient *http.Client) { + response, err := httpClient.Get(tc.URL) + if err != nil { + t.Fatalf("unexpected error from request: %v", err) + } + if response.StatusCode != tc.ExpectedStatus { + t.Fatalf( + "expected status: %v, but got status: %v", + http.StatusText(tc.ExpectedStatus), + http.StatusText(response.StatusCode), + ) + } + body, err := io.ReadAll(response.Body) + if err != nil { + t.Fatalf("error reading body: %v", err) + } + want := tc.ExpectedBody + + got := strings.TrimSpace(string(body)) + if diff := cmp.Diff(got, want); diff != "" { + t.Errorf("content did not match expected; got %q, want %q\ndiff=%v", got, want, diff) + } + +} + +func TestGCSGet(t *testing.T) { + gcs := New() + bucket := gcs.AddBucket("test-bucket") + + bucket.AddObject("k1", Object{Contents: []byte("v1")}) + + bucket.AddObject("with-override", Object{Contents: []byte("v1"), Override: func(response *http.Response) { response.StatusCode = http.StatusAccepted }}) + + grid := []TestRequest{ + { + URL: "https://storage.googleapis.com/test-bucket/k1", + ExpectedStatus: http.StatusOK, + ExpectedBody: "v1", + }, + { + URL: "https://storage.googleapis.com/test-bucket/with-override", + ExpectedStatus: http.StatusAccepted, + ExpectedBody: "v1", + }, + { + URL: "https://storage.googleapis.com/test-bucket/bad-key", + ExpectedStatus: http.StatusNotFound, + ExpectedBody: "", + }, + { + URL: "https://storage.googleapis.com/not-a-bucket/k1", + ExpectedStatus: http.StatusNotFound, + ExpectedBody: "", + }, + { + URL: "https://incorrecthost.googleapis.com/not-a-bucket/k1", + ExpectedStatus: http.StatusNotFound, + ExpectedBody: "", + }, + } + for _, tc := range grid { + tc := tc + t.Run(tc.URL, func(t *testing.T) { + t.Parallel() + tc.Run(t, gcs.HTTPClient()) + }) + } +} diff --git a/cmd/redirectserver/pkg/mocks3/server.go b/cmd/redirectserver/pkg/mocks3/server.go new file mode 100644 index 00000000..9e89940d --- /dev/null +++ b/cmd/redirectserver/pkg/mocks3/server.go @@ -0,0 +1,89 @@ +package mocks3 + +import ( + "bytes" + "io" + "net/http" + "strings" + + "k8s.io/klog/v2" +) + +// Server implements a simple mock s3 server +type Server struct { + bucketsByHost map[string]*Bucket +} + +// Bucket is a mock S3 bucket +type Bucket struct { + objects map[string]*Object +} + +// Object mocks an object in an S3 bucket +type Object struct { + Contents []byte +} + +// HTTPClient returns an http.Client bound to the mocks3 "server" +func (s *Server) HTTPClient() *http.Client { + return &http.Client{Transport: s} +} + +// New constructs a new mocks3 Server +func New() *Server { + return &Server{ + bucketsByHost: make(map[string]*Bucket), + } +} + +// AddBucket creates a new bucket, for the given S3 hostname +func (s *Server) AddBucket(bucketHost string) *Bucket { + bucket := &Bucket{ + objects: make(map[string]*Object), + } + s.bucketsByHost[bucketHost] = bucket + return bucket +} + +// AddObject adds an object to an existing bucket. +func (b *Bucket) AddObject(objectPath string, obj Object) { + b.objects[objectPath] = &obj +} + +// RoundTrip implements the (mock) S3 protocol +func (s *Server) RoundTrip(request *http.Request) (*http.Response, error) { + host := request.Host + + bucket := s.bucketsByHost[host] + if bucket != nil { + url := request.URL + + objectKey := strings.TrimPrefix(url.Path, "/") + + if object := bucket.objects[objectKey]; object != nil { + return s.serveObject(request, object) + } + return s.serve404(request) + } + + klog.Warningf("unhandled request: %s %s %#v", request.Method, request.URL, request) + return s.serve404(request) +} + +func (s *Server) serve404(_ *http.Request) (*http.Response, error) { + httpResponse := &http.Response{ + Status: http.StatusText(http.StatusNotFound), + StatusCode: http.StatusNotFound, + Body: io.NopCloser(bytes.NewReader([]byte{})), + } + return httpResponse, nil +} + +func (s *Server) serveObject(_ *http.Request, object *Object) (*http.Response, error) { + httpResponse := &http.Response{ + Status: http.StatusText(http.StatusOK), + StatusCode: http.StatusOK, + Body: io.NopCloser(bytes.NewReader(object.Contents)), + } + return httpResponse, nil +} diff --git a/cmd/redirectserver/pkg/mocks3/server_test.go b/cmd/redirectserver/pkg/mocks3/server_test.go new file mode 100644 index 00000000..78659910 --- /dev/null +++ b/cmd/redirectserver/pkg/mocks3/server_test.go @@ -0,0 +1,73 @@ +package mocks3 + +import ( + "io" + "net/http" + "strings" + "testing" + + "github.com/google/go-cmp/cmp" +) + +type TestRequest struct { + URL string + ExpectedStatus int + ExpectedBody string +} + +func (tc *TestRequest) Run(t *testing.T, httpClient *http.Client) { + response, err := httpClient.Get(tc.URL) + if err != nil { + t.Fatalf("unexpected error from request: %v", err) + } + if response.StatusCode != tc.ExpectedStatus { + t.Fatalf( + "expected status: %v, but got status: %v", + http.StatusText(tc.ExpectedStatus), + http.StatusText(response.StatusCode), + ) + } + body, err := io.ReadAll(response.Body) + if err != nil { + t.Fatalf("error reading body: %v", err) + } + want := tc.ExpectedBody + + got := strings.TrimSpace(string(body)) + if diff := cmp.Diff(got, want); diff != "" { + t.Errorf("content did not match expected; got %q, want %q\ndiff=%v", got, want, diff) + } + +} + +func TestS3Get(t *testing.T) { + mocks3 := New() + bucket := mocks3.AddBucket("prod-artifacts-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com") + + bucket.AddObject("k1", Object{Contents: []byte("v1")}) + + grid := []TestRequest{ + { + URL: "https://prod-artifacts-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com/k1", + ExpectedStatus: http.StatusOK, + ExpectedBody: "v1", + }, + { + URL: "https://prod-artifacts-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com/not-found", + ExpectedStatus: http.StatusNotFound, + ExpectedBody: "", + }, + { + URL: "https://not-a-bucket.s3.dualstack.ap-south-1.amazonaws.com/k1", + ExpectedStatus: http.StatusNotFound, + ExpectedBody: "", + }, + } + for _, tc := range grid { + tc := tc + t.Run(tc.URL, func(t *testing.T) { + t.Parallel() + tc.Run(t, mocks3.HTTPClient()) + }) + } +} diff --git a/go.mod b/go.mod index 9c032206..bf151e03 100644 --- a/go.mod +++ b/go.mod @@ -2,6 +2,31 @@ module k8s.io/registry.k8s.io go 1.19 -require k8s.io/klog/v2 v2.80.1 +require ( + cloud.google.com/go/storage v1.27.0 + golang.org/x/net v0.0.0-20220909164309-bea034e7d591 + k8s.io/klog/v2 v2.80.1 +) -require github.com/go-logr/logr v1.2.0 // indirect +require ( + cloud.google.com/go v0.104.0 // indirect + cloud.google.com/go/compute v1.7.0 // indirect + cloud.google.com/go/iam v0.3.0 // indirect + github.com/go-logr/logr v1.2.0 // indirect + github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e // indirect + github.com/golang/protobuf v1.5.2 // indirect + github.com/google/go-cmp v0.5.8 // indirect + github.com/google/uuid v1.3.0 // indirect + github.com/googleapis/enterprise-certificate-proxy v0.1.0 // indirect + github.com/googleapis/gax-go/v2 v2.5.1 // indirect + go.opencensus.io v0.23.0 // indirect + golang.org/x/oauth2 v0.0.0-20220909003341-f21342109be1 // indirect + golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 // indirect + golang.org/x/text v0.3.7 // indirect + golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f // indirect + google.golang.org/api v0.97.0 // indirect + google.golang.org/appengine v1.6.7 // indirect + google.golang.org/genproto v0.0.0-20220920201722-2b89144ce006 // indirect + google.golang.org/grpc v1.49.0 // indirect + google.golang.org/protobuf v1.28.1 // indirect +) diff --git a/go.sum b/go.sum index 1f74cf67..44d8767c 100644 --- a/go.sum +++ b/go.sum @@ -1,4 +1,672 @@ +cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= +cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= +cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU= +cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU= +cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY= +cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc= +cloud.google.com/go v0.46.3/go.mod h1:a6bKKbmY7er1mI7TEI4lsAkts/mkhTSZK8w33B4RAg0= +cloud.google.com/go v0.50.0/go.mod h1:r9sluTvynVuxRIOHXQEHMFffphuXHOMZMycpNR5e6To= +cloud.google.com/go v0.52.0/go.mod h1:pXajvRH/6o3+F9jDHZWQ5PbGhn+o8w9qiu/CffaVdO4= +cloud.google.com/go v0.53.0/go.mod h1:fp/UouUEsRkN6ryDKNW/Upv/JBKnv6WDthjR6+vze6M= +cloud.google.com/go v0.54.0/go.mod h1:1rq2OEkV3YMf6n/9ZvGWI3GWw0VoqH/1x2nd8Is/bPc= +cloud.google.com/go v0.56.0/go.mod h1:jr7tqZxxKOVYizybht9+26Z/gUq7tiRzu+ACVAMbKVk= +cloud.google.com/go v0.57.0/go.mod h1:oXiQ6Rzq3RAkkY7N6t3TcE6jE+CIBBbA36lwQ1JyzZs= +cloud.google.com/go v0.62.0/go.mod h1:jmCYTdRCQuc1PHIIJ/maLInMho30T/Y0M4hTdTShOYc= +cloud.google.com/go v0.65.0/go.mod h1:O5N8zS7uWy9vkA9vayVHs65eM1ubvY4h553ofrNHObY= +cloud.google.com/go v0.72.0/go.mod h1:M+5Vjvlc2wnp6tjzE102Dw08nGShTscUx2nZMufOKPI= +cloud.google.com/go v0.74.0/go.mod h1:VV1xSbzvo+9QJOxLDaJfTjx5e+MePCpCWwvftOeQmWk= +cloud.google.com/go v0.78.0/go.mod h1:QjdrLG0uq+YwhjoVOLsS1t7TW8fs36kLs4XO5R5ECHg= +cloud.google.com/go v0.79.0/go.mod h1:3bzgcEeQlzbuEAYu4mrWhKqWjmpprinYgKJLgKHnbb8= +cloud.google.com/go v0.81.0/go.mod h1:mk/AM35KwGk/Nm2YSeZbxXdrNK3KZOYHmLkOqC2V6E0= +cloud.google.com/go v0.83.0/go.mod h1:Z7MJUsANfY0pYPdw0lbnivPx4/vhy/e2FEkSkF7vAVY= +cloud.google.com/go v0.84.0/go.mod h1:RazrYuxIK6Kb7YrzzhPoLmCVzl7Sup4NrbKPg8KHSUM= +cloud.google.com/go v0.87.0/go.mod h1:TpDYlFy7vuLzZMMZ+B6iRiELaY7z/gJPaqbMx6mlWcY= +cloud.google.com/go v0.90.0/go.mod h1:kRX0mNRHe0e2rC6oNakvwQqzyDmg57xJ+SZU1eT2aDQ= +cloud.google.com/go v0.93.3/go.mod h1:8utlLll2EF5XMAV15woO4lSbWQlk8rer9aLOfLh7+YI= +cloud.google.com/go v0.94.1/go.mod h1:qAlAugsXlC+JWO+Bke5vCtc9ONxjQT3drlTTnAplMW4= +cloud.google.com/go v0.97.0/go.mod h1:GF7l59pYBVlXQIBLx3a761cZ41F9bBH3JUlihCt2Udc= +cloud.google.com/go v0.99.0/go.mod h1:w0Xx2nLzqWJPuozYQX+hFfCSI8WioryfRDzkoI/Y2ZA= +cloud.google.com/go v0.100.2/go.mod h1:4Xra9TjzAeYHrl5+oeLlzbM2k3mjVhZh4UqTZ//w99A= +cloud.google.com/go v0.102.0/go.mod h1:oWcCzKlqJ5zgHQt9YsaeTY9KzIvjyy0ArmiBUgpQ+nc= +cloud.google.com/go v0.104.0 h1:gSmWO7DY1vOm0MVU6DNXM11BWHHsTUmsC5cv1fuW5X8= +cloud.google.com/go v0.104.0/go.mod h1:OO6xxXdJyvuJPcEPBLN9BJPD+jep5G1+2U5B5gkRYtA= +cloud.google.com/go/bigquery v1.0.1/go.mod h1:i/xbL2UlR5RvWAURpBYZTtm/cXjCha9lbfbpx4poX+o= +cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE= +cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc= +cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg= +cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc= +cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ= +cloud.google.com/go/compute v0.1.0/go.mod h1:GAesmwr110a34z04OlxYkATPBEfVhkymfTBXtfbBFow= +cloud.google.com/go/compute v1.3.0/go.mod h1:cCZiE1NHEtai4wiufUhW8I8S1JKkAnhnQJWM7YD99wM= +cloud.google.com/go/compute v1.5.0/go.mod h1:9SMHyhJlzhlkJqrPAc839t2BZFTSk6Jdj6mkzQJeu0M= +cloud.google.com/go/compute v1.6.0/go.mod h1:T29tfhtVbq1wvAPo0E3+7vhgmkOYeXjhFvz/FMzPu0s= +cloud.google.com/go/compute v1.6.1/go.mod h1:g85FgpzFvNULZ+S8AYq87axRKuf2Kh7deLqV/jJ3thU= +cloud.google.com/go/compute v1.7.0 h1:v/k9Eueb8aAJ0vZuxKMrgm6kPhCLZU9HxFU+AFDs9Uk= +cloud.google.com/go/compute v1.7.0/go.mod h1:435lt8av5oL9P3fv1OEzSbSUe+ybHXGMPQHHZWZxy9U= +cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE= +cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk= +cloud.google.com/go/iam v0.3.0 h1:exkAomrVUuzx9kWFI1wm3KI0uoDeUFPB4kKGzx6x+Gc= +cloud.google.com/go/iam v0.3.0/go.mod h1:XzJPvDayI+9zsASAFO68Hk07u3z+f+JrT2xXNdp4bnY= +cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I= +cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw= +cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA= +cloud.google.com/go/pubsub v1.3.1/go.mod h1:i+ucay31+CNRpDW4Lu78I4xXG+O1r/MAHgjpRVR+TSU= +cloud.google.com/go/storage v1.0.0/go.mod h1:IhtSnM/ZTZV8YYJWCY8RULGVqBDmpoyjwiyrjsg+URw= +cloud.google.com/go/storage v1.5.0/go.mod h1:tpKbwo567HUNpVclU5sGELwQWBDZ8gh0ZeosJ0Rtdos= +cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohlUTyfDhBk= +cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs= +cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0= +cloud.google.com/go/storage v1.22.1/go.mod h1:S8N1cAStu7BOeFfE8KAQzmyyLkK8p/vmRq6kuBTW58Y= +cloud.google.com/go/storage v1.27.0 h1:YOO045NZI9RKfCj1c5A/ZtuuENUc8OAW+gHdGnDgyMQ= +cloud.google.com/go/storage v1.27.0/go.mod h1:x9DOL8TK/ygDUMieqwfhdpQryTeEkhGKMi80i/iqR2s= +dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU= +github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= +github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo= +github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU= +github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY= +github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU= +github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc= +github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= +github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI= +github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI= +github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU= +github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= +github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc= +github.com/cncf/udpa/go v0.0.0-20200629203442-efcf912fb354/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk= +github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk= +github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4/go.mod h1:6pvJx4me5XPnfI9Z40ddWsdw2W/uZgQLFXToKeRcDiI= +github.com/cncf/xds/go v0.0.0-20210312221358-fbca930ec8ed/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= +github.com/cncf/xds/go v0.0.0-20210805033703-aa0b78936158/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= +github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= +github.com/cncf/xds/go v0.0.0-20211001041855-01bcc9b48dfe/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= +github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= +github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98= +github.com/envoyproxy/go-control-plane v0.9.7/go.mod h1:cwu0lG7PUMfa9snN8LXBig5ynNVH9qI8YYLbd1fK2po= +github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk= +github.com/envoyproxy/go-control-plane v0.9.9-0.20210217033140-668b12f5399d/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk= +github.com/envoyproxy/go-control-plane v0.9.9-0.20210512163311-63b5d3c536b0/go.mod h1:hliV/p42l8fGbc6Y9bQ70uLwIvmJyVE5k4iMKlh8wCQ= +github.com/envoyproxy/go-control-plane v0.9.10-0.20210907150352-cf90f659a021/go.mod h1:AFq3mo9L8Lqqiid3OhADV3RfLJnjiw63cSpi+fDTRC0= +github.com/envoyproxy/go-control-plane v0.10.2-0.20220325020618-49ff273808a1/go.mod h1:KJwIaB5Mv44NWtYuAOFCVOjcI94vtpEz2JU/D2v6IjE= +github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c= +github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= +github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU= +github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= +github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= github.com/go-logr/logr v1.2.0 h1:QK40JKJyMdUDz+h+xvCsru/bJhvG0UxvePV0ufL/AcE= github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= +github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= +github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/groupcache v0.0.0-20191227052852-215e87163ea7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e h1:1r7pUrabqp18hOBcwBwiTsbnFeTZHV9eER/QT5JVZxY= +github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A= +github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A= +github.com/golang/mock v1.3.1/go.mod h1:sBzyDLLjw3U8JLTeZvSv8jJB+tU5PVekmnlKIyFUx0Y= +github.com/golang/mock v1.4.0/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw= +github.com/golang/mock v1.4.1/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw= +github.com/golang/mock v1.4.3/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw= +github.com/golang/mock v1.4.4/go.mod h1:l3mdAwkq5BuhzHwde/uurv3sEJeZMXNpwsxVWU71h+4= +github.com/golang/mock v1.5.0/go.mod h1:CWnOUgYIOo4TcNZ0wHX3YZCqsaM1I1Jvs6v3mP3KVu8= +github.com/golang/mock v1.6.0/go.mod h1:p6yTPP+5HYm5mzsMV8JkE6ZKdX+/wYM6Hr+LicevLPs= +github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw= +github.com/golang/protobuf v1.3.4/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw= +github.com/golang/protobuf v1.3.5/go.mod h1:6O5/vntMXwX2lRkT1hjjk0nAC1IDOTvTlVgjlRvqsdk= +github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8= +github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA= +github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs= +github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w= +github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0= +github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8= +github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI= +github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI= +github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= +github.com/golang/protobuf v1.5.1/go.mod h1:DopwsBzvsk0Fs44TXzsVbJyPhcCPeIwnvohx4u74HPM= +github.com/golang/protobuf v1.5.2 h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw= +github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= +github.com/golang/snappy v0.0.3/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q= +github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= +github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= +github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= +github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.4.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.7/go.mod h1:n+brtR0CgQNWTVd5ZUFpTBC8YFBDLK/h/bpaJ8/DtOE= +github.com/google/go-cmp v0.5.8 h1:e6P7q2lk1O+qJJb4BtCQXlK8vWEO8V1ZeuEdJNOqZyg= +github.com/google/go-cmp v0.5.8/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= +github.com/google/martian v2.1.0+incompatible h1:/CP5g8u/VJHijgedC/Legn3BAbAaWPgecwXBIDzw5no= +github.com/google/martian v2.1.0+incompatible/go.mod h1:9I4somxYTbIHy5NJKHRl3wXiIaQGbYVAs8BPL6v8lEs= +github.com/google/martian/v3 v3.0.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0= +github.com/google/martian/v3 v3.1.0/go.mod h1:y5Zk1BBys9G+gd6Jrk0W3cC1+ELVxBWuIGO+w/tUAp0= +github.com/google/martian/v3 v3.2.1 h1:d8MncMlErDFTwQGBK1xhv026j9kqhvw1Qv9IbWT1VLQ= +github.com/google/martian/v3 v3.2.1/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3+6W4l/CUk= +github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc= +github.com/google/pprof v0.0.0-20190515194954-54271f7e092f/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc= +github.com/google/pprof v0.0.0-20191218002539-d4f498aebedc/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200212024743-f11f1df84d12/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200229191704-1ebb73c60ed3/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= +github.com/google/pprof v0.0.0-20201023163331-3e6fc7fc9c4c/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/pprof v0.0.0-20201203190320-1bf35d6f28c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/pprof v0.0.0-20210122040257-d980be63207e/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/pprof v0.0.0-20210226084205-cbba55b83ad5/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/pprof v0.0.0-20210601050228-01bbb1931b22/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/pprof v0.0.0-20210609004039-a478d1d731e9/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= +github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI= +github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I= +github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/googleapis/enterprise-certificate-proxy v0.0.0-20220520183353-fd19c99a87aa/go.mod h1:17drOmN3MwGY7t0e+Ei9b45FFGA3fBs3x36SsCg1hq8= +github.com/googleapis/enterprise-certificate-proxy v0.1.0 h1:zO8WHNx/MYiAKJ3d5spxZXZE6KHmIQGQcAzwUzV7qQw= +github.com/googleapis/enterprise-certificate-proxy v0.1.0/go.mod h1:17drOmN3MwGY7t0e+Ei9b45FFGA3fBs3x36SsCg1hq8= +github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg= +github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk= +github.com/googleapis/gax-go/v2 v2.1.0/go.mod h1:Q3nei7sK6ybPYH7twZdmQpAd1MKb7pfu6SK+H1/DsU0= +github.com/googleapis/gax-go/v2 v2.1.1/go.mod h1:hddJymUZASv3XPyGkUpKj8pPO47Rmb0eJc8R6ouapiM= +github.com/googleapis/gax-go/v2 v2.2.0/go.mod h1:as02EH8zWkzwUoLbBaFeQ+arQaj/OthfcblKl4IGNaM= +github.com/googleapis/gax-go/v2 v2.3.0/go.mod h1:b8LNqSzNabLiUpXKkY7HAR5jr6bIT99EXz9pXxye9YM= +github.com/googleapis/gax-go/v2 v2.4.0/go.mod h1:XOTVJ59hdnfJLIP/dh8n5CGryZR2LxK9wbMD5+iXC6c= +github.com/googleapis/gax-go/v2 v2.5.1 h1:kBRZU0PSuI7PspsSb/ChWoVResUcwNVIdpB049pKTiw= +github.com/googleapis/gax-go/v2 v2.5.1/go.mod h1:h6B0KMMFNtI2ddbGJn3T3ZbwkeT6yqEF02fYlzkUCyo= +github.com/googleapis/go-type-adapters v1.0.0/go.mod h1:zHW75FOG2aur7gAO2B+MLby+cLsWGBF62rFAi7WjWO4= +github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= +github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8= +github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8= +github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc= +github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc= +github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU= +github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk= +github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck= +github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= +github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= +github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= +github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= +github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ= +github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= +github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA= +github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= +github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA= +github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k= +go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU= +go.opencensus.io v0.22.0/go.mod h1:+kGneAE2xo2IficOXnaByMWTGM9T73dGwxeWcUqIpI8= +go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= +go.opencensus.io v0.22.3/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= +go.opencensus.io v0.22.4/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= +go.opencensus.io v0.22.5/go.mod h1:5pWMHQbX5EPX2/62yrJeAkowc+lfs/XD7Uxpq3pI6kk= +go.opencensus.io v0.23.0 h1:gqCw0LfLxScz8irSi8exQc7fyQ0fKQU/qnC/X8+V/1M= +go.opencensus.io v0.23.0/go.mod h1:XItmlyltB5F7CS4xOC1DcqMoFqwtC6OG2xF7mCv7P7E= +go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI= +golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= +golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= +golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= +golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= +golang.org/x/exp v0.0.0-20190829153037-c13cbed26979/go.mod h1:86+5VVa7VpoJ4kLfm080zCjGlMRFzhUhsZKEZO7MGek= +golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY= +golang.org/x/exp v0.0.0-20191129062945-2f5052295587/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= +golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= +golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= +golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM= +golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU= +golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js= +golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0= +golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= +golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU= +golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= +golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20190909230951-414d861bb4ac/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= +golang.org/x/lint v0.0.0-20191125180803-fdd1cda4f05f/go.mod h1:5qLYkcX4OjUUV8bRuDixDT3tpyyb+LUpUlRWLxfhWrs= +golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= +golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= +golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= +golang.org/x/lint v0.0.0-20210508222113-6edffad5e616/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY= +golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE= +golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o= +golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc= +golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY= +golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= +golang.org/x/mod v0.1.1-0.20191107180719-034126e5016b/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg= +golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190501004415-9ce7a6920f09/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190503192946-f4e77d36d62c/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks= +golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190628185345-da137c7871d7/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20190724013045-ca1201d0de80/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200114155413-6afb5195e5aa/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200202094626-16171245cfb2/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200222125558-5a598a2470a0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200301022130-244492dfa37a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200501053045-e0ff5e5a1de5/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200513185701-a91f0712d120/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200520182314-0ba52f642ac2/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A= +golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= +golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= +golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= +golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= +golang.org/x/net v0.0.0-20210119194325-5f4716e94777/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= +golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= +golang.org/x/net v0.0.0-20210316092652-d523dce5a7f4/go.mod h1:RBQZq4jEuRlivfhVLdyRGr576XBO4/greRjx4P4O3yc= +golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM= +golang.org/x/net v0.0.0-20210503060351-7fd8e65b6420/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= +golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= +golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= +golang.org/x/net v0.0.0-20220325170049-de3da57026de/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= +golang.org/x/net v0.0.0-20220412020605-290c469a71a5/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= +golang.org/x/net v0.0.0-20220425223048-2871e0cb64e4/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= +golang.org/x/net v0.0.0-20220607020251-c690dde0001d/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= +golang.org/x/net v0.0.0-20220624214902-1bab6f366d9e/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= +golang.org/x/net v0.0.0-20220909164309-bea034e7d591 h1:D0B/7al0LLrVC8aWF4+oxpv/m8bc7ViFfVS8/gXGdqI= +golang.org/x/net v0.0.0-20220909164309-bea034e7d591/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk= +golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= +golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20191202225959-858c2ad4c8b6/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= +golang.org/x/oauth2 v0.0.0-20200902213428-5d25da1a8d43/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20201109201403-9fd604954f58/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20201208152858-08078c50e5b5/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210218202405-ba52d332ba99/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210220000619-9bb904979d93/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210313182246-cd4f82c27b84/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210514164344-f6687ab2804c/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210628180205-a41e5a781914/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210805134026-6f1e6394065a/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20211104180415-d3ed0bb246c8/go.mod h1:KelEdhl1UZF7XfJ4dDtk6s++YSgaE7mD/BuKKDLBl4A= +golang.org/x/oauth2 v0.0.0-20220223155221-ee480838109b/go.mod h1:DAh4E804XQdzx2j+YRIaUnCqCV2RuMz24cGBJ5QYIrc= +golang.org/x/oauth2 v0.0.0-20220309155454-6242fa91716a/go.mod h1:DAh4E804XQdzx2j+YRIaUnCqCV2RuMz24cGBJ5QYIrc= +golang.org/x/oauth2 v0.0.0-20220411215720-9780585627b5/go.mod h1:DAh4E804XQdzx2j+YRIaUnCqCV2RuMz24cGBJ5QYIrc= +golang.org/x/oauth2 v0.0.0-20220608161450-d0670ef3b1eb/go.mod h1:jaDAt6Dkxork7LmZnYtzbRWj0W47D86a3TGe0YHBvmE= +golang.org/x/oauth2 v0.0.0-20220822191816-0ebed06d0094/go.mod h1:h4gKUeWbJ4rQPri7E0u6Gs4e9Ri2zaLxzw5DI5XGrYg= +golang.org/x/oauth2 v0.0.0-20220909003341-f21342109be1 h1:lxqLZaMad/dJHMFZH0NiNpiEZI/nhgWhe4wgzpE+MuA= +golang.org/x/oauth2 v0.0.0-20220909003341-f21342109be1/go.mod h1:h4gKUeWbJ4rQPri7E0u6Gs4e9Ri2zaLxzw5DI5XGrYg= +golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20190227155943-e225da77a7e6/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190502145724-3ef323f4f1fd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190507160741-ecd444e8653b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190606165138-5da285871e9c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190624142023-c5567b49c5d0/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190726091711-fc99dfbffb4e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191228213918-04cbcbbfeed8/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200113162924-86b910548bc1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200122134326-e047566fdf82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200202164722-d101bd2416d5/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200212091648-12a6c2dcc1e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200302150141-5c8b2ff67527/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200331124033-c3d80250170d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200501052902-10377860bb8e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200511232937-7e40ca221e25/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200515095857-1151b9dac4a9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200523222454-059865788121/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200803210538-64077c9b5642/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200905004654-be1d3432aa8f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20201201145000-ef89a241ccb3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210104204734-6f8348627aad/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210220050731-9a76102bfb43/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210305230114-8fe3ee5dd75b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210315160823-c6e025ad8005/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210514084401-e8d321eab015/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210603125802-9665404d3644/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210806184541-e5e7981a1069/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210823070655-63515b42dcdf/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210908233432-aa78b53d3365/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20211124211545-fe61309f8881/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20211210111614-af8b64212486/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220128215802-99c3d69c2c27/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220209214540-3681064d5158/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220227234510-4e6760a101f9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220328115105-d36c6a25d886/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220502124256-b6088ccd6cba/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220610221304-9f5ed59c137d/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 h1:WIoqL4EROvwiPdUtaip4VcDdpZ4kha7wBWZrbVKCIZg= +golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= +golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= +golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= +golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.4/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.7 h1:olpwvP2KacW1ZWvsR7uQhoyTYvKAupfQrRGBFM352Gk= +golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= +golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= +golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY= +golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190425150028-36563e24a262/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190506145303-2d16b83fe98c/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= +golang.org/x/tools v0.0.0-20190606124116-d0a3d012864b/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc= +golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc= +golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc= +golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191113191852-77e3bb0ad9e7/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191115202509-3a792d9c32b2/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191125144606-a911d9008d1f/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191130070609-6e064ea0cf2d/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20191216173652-a0e659d51361/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20191227053925-7b8e75db28f4/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200117161641-43d50277825c/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200122220014-bf1340f18c4a/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200204074204-1cc6d1ef6c74/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200207183749-b753a1ba74fa/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200212150539-ea181f53ac56/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200224181240-023911ca70b2/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200227222343-706bc42d1f0d/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28= +golang.org/x/tools v0.0.0-20200304193943-95d2e580d8eb/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw= +golang.org/x/tools v0.0.0-20200312045724-11d5b4c81c7d/go.mod h1:o4KQGtdN14AW+yjsvvwRTJJuXz8XRtIHtEnmAXLyFUw= +golang.org/x/tools v0.0.0-20200331025713-a30bf2db82d4/go.mod h1:Sl4aGygMT6LrqrWclx+PTx3U+LnKx/seiNR+3G19Ar8= +golang.org/x/tools v0.0.0-20200501065659-ab2804fb9c9d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200512131952-2bc93b1c0c88/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200515010526-7d3b6ebf133d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200618134242-20370b0cb4b2/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= +golang.org/x/tools v0.0.0-20200729194436-6467de6f59a7/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/tools v0.0.0-20200825202427-b303f430e36d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA= +golang.org/x/tools v0.0.0-20200904185747-39188db58858/go.mod h1:Cj7w3i3Rnn0Xh82ur9kSqwfTHTeVxaDqrfMjpcNT6bE= +golang.org/x/tools v0.0.0-20201110124207-079ba7bd75cd/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= +golang.org/x/tools v0.0.0-20201201161351-ac6f37ff4c2a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= +golang.org/x/tools v0.0.0-20201208233053-a543418bbed2/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= +golang.org/x/tools v0.0.0-20210105154028-b0ab187a4818/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= +golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0= +golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= +golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= +golang.org/x/tools v0.1.3/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= +golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= +golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= +golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20220411194840-2f41105eb62f/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20220517211312-f3a8303e98df/go.mod h1:K8+ghG5WaK9qNqU5K3HdILfMLy1f3aNYFI/wnl100a8= +golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f h1:uF6paiQQebLeSXkrTqHqz0MXhXXS1KgF41eUdBNvxK0= +golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f/go.mod h1:K8+ghG5WaK9qNqU5K3HdILfMLy1f3aNYFI/wnl100a8= +google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE= +google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M= +google.golang.org/api v0.8.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg= +google.golang.org/api v0.9.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg= +google.golang.org/api v0.13.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI= +google.golang.org/api v0.14.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI= +google.golang.org/api v0.15.0/go.mod h1:iLdEw5Ide6rF15KTC1Kkl0iskquN2gFfn9o9XIsbkAI= +google.golang.org/api v0.17.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.18.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.19.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.20.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.22.0/go.mod h1:BwFmGc8tA3vsd7r/7kR8DY7iEEGSU04BFxCo5jP/sfE= +google.golang.org/api v0.24.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE= +google.golang.org/api v0.28.0/go.mod h1:lIXQywCXRcnZPGlsd8NbLnOjtAoL6em04bJ9+z0MncE= +google.golang.org/api v0.29.0/go.mod h1:Lcubydp8VUV7KeIHD9z2Bys/sm/vGKnG1UHuDBSrHWM= +google.golang.org/api v0.30.0/go.mod h1:QGmEvQ87FHZNiUVJkT14jQNYJ4ZJjdRF23ZXz5138Fc= +google.golang.org/api v0.35.0/go.mod h1:/XrVsuzM0rZmrsbjJutiuftIzeuTQcEeaYcSk/mQ1dg= +google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE= +google.golang.org/api v0.40.0/go.mod h1:fYKFpnQN0DsDSKRVRcQSDQNtqWPfM9i+zNPxepjRCQ8= +google.golang.org/api v0.41.0/go.mod h1:RkxM5lITDfTzmyKFPt+wGrCJbVfniCr2ool8kTBzRTU= +google.golang.org/api v0.43.0/go.mod h1:nQsDGjRXMo4lvh5hP0TKqF244gqhGcr/YSIykhUk/94= +google.golang.org/api v0.47.0/go.mod h1:Wbvgpq1HddcWVtzsVLyfLp8lDg6AA241LmgIL59tHXo= +google.golang.org/api v0.48.0/go.mod h1:71Pr1vy+TAZRPkPs/xlCf5SsU8WjuAWv1Pfjbtukyy4= +google.golang.org/api v0.50.0/go.mod h1:4bNT5pAuq5ji4SRZm+5QIkjny9JAyVD/3gaSihNefaw= +google.golang.org/api v0.51.0/go.mod h1:t4HdrdoNgyN5cbEfm7Lum0lcLDLiise1F8qDKX00sOU= +google.golang.org/api v0.54.0/go.mod h1:7C4bFFOvVDGXjfDTAsgGwDgAxRDeQ4X8NvUedIt6z3k= +google.golang.org/api v0.55.0/go.mod h1:38yMfeP1kfjsl8isn0tliTjIb1rJXcQi4UXlbqivdVE= +google.golang.org/api v0.56.0/go.mod h1:38yMfeP1kfjsl8isn0tliTjIb1rJXcQi4UXlbqivdVE= +google.golang.org/api v0.57.0/go.mod h1:dVPlbZyBo2/OjBpmvNdpn2GRm6rPy75jyU7bmhdrMgI= +google.golang.org/api v0.61.0/go.mod h1:xQRti5UdCmoCEqFxcz93fTl338AVqDgyaDRuOZ3hg9I= +google.golang.org/api v0.63.0/go.mod h1:gs4ij2ffTRXwuzzgJl/56BdwJaA194ijkfn++9tDuPo= +google.golang.org/api v0.67.0/go.mod h1:ShHKP8E60yPsKNw/w8w+VYaj9H6buA5UqDp8dhbQZ6g= +google.golang.org/api v0.70.0/go.mod h1:Bs4ZM2HGifEvXwd50TtW70ovgJffJYw2oRCOFU/SkfA= +google.golang.org/api v0.71.0/go.mod h1:4PyU6e6JogV1f9eA4voyrTY2batOLdgZ5qZ5HOCc4j8= +google.golang.org/api v0.74.0/go.mod h1:ZpfMZOVRMywNyvJFeqL9HRWBgAuRfSjJFpe9QtRRyDs= +google.golang.org/api v0.75.0/go.mod h1:pU9QmyHLnzlpar1Mjt4IbapUCy8J+6HD6GeELN69ljA= +google.golang.org/api v0.78.0/go.mod h1:1Sg78yoMLOhlQTeF+ARBoytAcH1NNyyl390YMy6rKmw= +google.golang.org/api v0.80.0/go.mod h1:xY3nI94gbvBrE0J6NHXhxOmW97HG7Khjkku6AFB3Hyg= +google.golang.org/api v0.84.0/go.mod h1:NTsGnUFJMYROtiquksZHBWtHfeMC7iYthki7Eq3pa8o= +google.golang.org/api v0.97.0 h1:x/vEL1XDF/2V4xzdNgFPaKHluRESo2aTsL7QzHnBtGQ= +google.golang.org/api v0.97.0/go.mod h1:w7wJQLTM+wvQpNf5JyEcBoxK0RH7EDrh/L4qfsuJ13s= +google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= +google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= +google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= +google.golang.org/appengine v1.6.1/go.mod h1:i06prIuMbXzDqacNJfV5OdTW448YApPu5ww/cMBSeb0= +google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= +google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= +google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c= +google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= +google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= +google.golang.org/genproto v0.0.0-20190307195333-5fe7a883aa19/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190418145605-e7d98fc518a7/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190425155659-357c62f0e4bb/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190502173448-54afdca5d873/go.mod h1:VzzqZJRnGkLBvHegQrXjBqPurQTc5/KpmUdxsrq26oE= +google.golang.org/genproto v0.0.0-20190801165951-fa694d86fc64/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= +google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= +google.golang.org/genproto v0.0.0-20190911173649-1774047e7e51/go.mod h1:IbNlFCBrqXvoKpeg0TB2l7cyZUmoaFKYIwrEpbDKLA8= +google.golang.org/genproto v0.0.0-20191108220845-16a3f7862a1a/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20191115194625-c23dd37a84c9/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20191216164720-4f79533eabd1/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20191230161307-f3c370f40bfb/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20200115191322-ca5a22157cba/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20200122232147-0452cf42e150/go.mod h1:n3cpQtvxv34hfy77yVDNjmbRyujviMdxYliBSkLhpCc= +google.golang.org/genproto v0.0.0-20200204135345-fa8e72b47b90/go.mod h1:GmwEX6Z4W5gMy59cAlVYjN9JhxgbQH6Gn+gFDQe2lzA= +google.golang.org/genproto v0.0.0-20200212174721-66ed5ce911ce/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200228133532-8c2c7df3a383/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200305110556-506484158171/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200312145019-da6875a35672/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200331122359-1ee6d9798940/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200430143042-b979b6f78d84/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200511104702-f5ebc3bea380/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200513103714-09dca8ec2884/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c= +google.golang.org/genproto v0.0.0-20200515170657-fc4c6c6a6587/go.mod h1:YsZOwe1myG/8QRHRsmBRE1LrgQY60beZKjly0O1fX9U= +google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= +google.golang.org/genproto v0.0.0-20200618031413-b414f8b61790/go.mod h1:jDfRM7FcilCzHH/e9qn6dsT145K34l5v+OpcnNgKAAA= +google.golang.org/genproto v0.0.0-20200729003335-053ba62fc06f/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20200804131852-c06518451d9c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20200825200019-8632dd797987/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20200904004341-0bd0a958aa1d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20201109203340-2640f1f9cdfb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20201201144952-b05cb90ed32e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20201210142538-e3217bee35cc/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20201214200347-8c77b98c765d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20210222152913-aa3ee6e6a81c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20210303154014-9728d6b83eeb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20210310155132-4ce2db91004e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20210319143718-93e7006c17a6/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= +google.golang.org/genproto v0.0.0-20210329143202-679c6ae281ee/go.mod h1:9lPAdzaEmUacj36I+k7YKbEc5CXzPIeORRgDAUOu28A= +google.golang.org/genproto v0.0.0-20210402141018-6c239bbf2bb1/go.mod h1:9lPAdzaEmUacj36I+k7YKbEc5CXzPIeORRgDAUOu28A= +google.golang.org/genproto v0.0.0-20210513213006-bf773b8c8384/go.mod h1:P3QM42oQyzQSnHPnZ/vqoCdDmzH28fzWByN9asMeM8A= +google.golang.org/genproto v0.0.0-20210602131652-f16073e35f0c/go.mod h1:UODoCrxHCcBojKKwX1terBiRUaqAsFqJiF615XL43r0= +google.golang.org/genproto v0.0.0-20210604141403-392c879c8b08/go.mod h1:UODoCrxHCcBojKKwX1terBiRUaqAsFqJiF615XL43r0= +google.golang.org/genproto v0.0.0-20210608205507-b6d2f5bf0d7d/go.mod h1:UODoCrxHCcBojKKwX1terBiRUaqAsFqJiF615XL43r0= +google.golang.org/genproto v0.0.0-20210624195500-8bfb893ecb84/go.mod h1:SzzZ/N+nwJDaO1kznhnlzqS8ocJICar6hYhVyhi++24= +google.golang.org/genproto v0.0.0-20210713002101-d411969a0d9a/go.mod h1:AxrInvYm1dci+enl5hChSFPOmmUF1+uAa/UsgNRWd7k= +google.golang.org/genproto v0.0.0-20210716133855-ce7ef5c701ea/go.mod h1:AxrInvYm1dci+enl5hChSFPOmmUF1+uAa/UsgNRWd7k= +google.golang.org/genproto v0.0.0-20210728212813-7823e685a01f/go.mod h1:ob2IJxKrgPT52GcgX759i1sleT07tiKowYBGbczaW48= +google.golang.org/genproto v0.0.0-20210805201207-89edb61ffb67/go.mod h1:ob2IJxKrgPT52GcgX759i1sleT07tiKowYBGbczaW48= +google.golang.org/genproto v0.0.0-20210813162853-db860fec028c/go.mod h1:cFeNkxwySK631ADgubI+/XFU/xp8FD5KIVV4rj8UC5w= +google.golang.org/genproto v0.0.0-20210821163610-241b8fcbd6c8/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY= +google.golang.org/genproto v0.0.0-20210828152312-66f60bf46e71/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY= +google.golang.org/genproto v0.0.0-20210831024726-fe130286e0e2/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY= +google.golang.org/genproto v0.0.0-20210903162649-d08c68adba83/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY= +google.golang.org/genproto v0.0.0-20210909211513-a8c4777a87af/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY= +google.golang.org/genproto v0.0.0-20210924002016-3dee208752a0/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20211118181313-81c1377c94b1/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20211206160659-862468c7d6e0/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20211221195035-429b39de9b1c/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20220126215142-9970aeb2e350/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20220207164111-0872dc986b00/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc= +google.golang.org/genproto v0.0.0-20220218161850-94dd64e39d7c/go.mod h1:kGP+zUP2Ddo0ayMi4YuN7C3WZyJvGLZRh8Z5wnAqvEI= +google.golang.org/genproto v0.0.0-20220222213610-43724f9ea8cf/go.mod h1:kGP+zUP2Ddo0ayMi4YuN7C3WZyJvGLZRh8Z5wnAqvEI= +google.golang.org/genproto v0.0.0-20220304144024-325a89244dc8/go.mod h1:kGP+zUP2Ddo0ayMi4YuN7C3WZyJvGLZRh8Z5wnAqvEI= +google.golang.org/genproto v0.0.0-20220310185008-1973136f34c6/go.mod h1:kGP+zUP2Ddo0ayMi4YuN7C3WZyJvGLZRh8Z5wnAqvEI= +google.golang.org/genproto v0.0.0-20220324131243-acbaeb5b85eb/go.mod h1:hAL49I2IFola2sVEjAn7MEwsja0xp51I0tlGAf9hz4E= +google.golang.org/genproto v0.0.0-20220407144326-9054f6ed7bac/go.mod h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo= +google.golang.org/genproto v0.0.0-20220413183235-5e96e2839df9/go.mod h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo= +google.golang.org/genproto v0.0.0-20220414192740-2d67ff6cf2b4/go.mod h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo= +google.golang.org/genproto v0.0.0-20220421151946-72621c1f0bd3/go.mod h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo= +google.golang.org/genproto v0.0.0-20220429170224-98d788798c3e/go.mod h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo= +google.golang.org/genproto v0.0.0-20220505152158-f39f71e6c8f3/go.mod h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4= +google.golang.org/genproto v0.0.0-20220518221133-4f43b3371335/go.mod h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4= +google.golang.org/genproto v0.0.0-20220523171625-347a074981d8/go.mod h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4= +google.golang.org/genproto v0.0.0-20220608133413-ed9918b62aac/go.mod h1:KEWEmljWE5zPzLBa/oHl6DaEt9LmfH6WtH1OHIvleBA= +google.golang.org/genproto v0.0.0-20220616135557-88e70c0c3a90/go.mod h1:KEWEmljWE5zPzLBa/oHl6DaEt9LmfH6WtH1OHIvleBA= +google.golang.org/genproto v0.0.0-20220624142145-8cd45d7dbd1f/go.mod h1:KEWEmljWE5zPzLBa/oHl6DaEt9LmfH6WtH1OHIvleBA= +google.golang.org/genproto v0.0.0-20220920201722-2b89144ce006 h1:mmbq5q8M1t7dhkLw320YK4PsOXm6jdnUAkErImaIqOg= +google.golang.org/genproto v0.0.0-20220920201722-2b89144ce006/go.mod h1:ht8XFiar2npT/g4vkk7O0WYS1sHOHbdujxbEp7CJWbw= +google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= +google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38= +google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM= +google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg= +google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= +google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.27.1/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.28.0/go.mod h1:rpkK4SK4GF4Ach/+MFLZUBavHOvF2JJB5uozKKal+60= +google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk= +google.golang.org/grpc v1.30.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= +google.golang.org/grpc v1.31.0/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= +google.golang.org/grpc v1.31.1/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM8pak= +google.golang.org/grpc v1.33.1/go.mod h1:fr5YgcSWrqhRRxogOsw7RzIpsmvOZ6IcH4kBYTpR3n0= +google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc= +google.golang.org/grpc v1.34.0/go.mod h1:WotjhfgOW/POjDeRt8vscBtXq+2VjORFy659qA51WJ8= +google.golang.org/grpc v1.35.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU= +google.golang.org/grpc v1.36.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU= +google.golang.org/grpc v1.36.1/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU= +google.golang.org/grpc v1.37.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM= +google.golang.org/grpc v1.37.1/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM= +google.golang.org/grpc v1.38.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQdJfM= +google.golang.org/grpc v1.39.0/go.mod h1:PImNr+rS9TWYb2O4/emRugxiyHZ5JyHW5F+RPnDzfrE= +google.golang.org/grpc v1.39.1/go.mod h1:PImNr+rS9TWYb2O4/emRugxiyHZ5JyHW5F+RPnDzfrE= +google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34= +google.golang.org/grpc v1.40.1/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34= +google.golang.org/grpc v1.44.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ590SU= +google.golang.org/grpc v1.45.0/go.mod h1:lN7owxKUQEqMfSyQikvvk5tf/6zMPsrK+ONuO11+0rQ= +google.golang.org/grpc v1.46.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk= +google.golang.org/grpc v1.46.2/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk= +google.golang.org/grpc v1.47.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk= +google.golang.org/grpc v1.49.0 h1:WTLtQzmQori5FUH25Pq4WT22oCsv8USpQ+F6rqtsmxw= +google.golang.org/grpc v1.49.0/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= +google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw= +google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= +google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= +google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM= +google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE= +google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo= +google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4= +google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c= +google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= +google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= +google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= +google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= +google.golang.org/protobuf v1.28.1 h1:d0NfwRgPtno5B1Wa6L2DAG+KivqkdutMf1UhdNx175w= +google.golang.org/protobuf v1.28.1/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= +gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI= +gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg= +honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= +honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= k8s.io/klog/v2 v2.80.1 h1:atnLQ121W371wYYFawwYx1aEY2eUfs4l3J72wtgAwV4= k8s.io/klog/v2 v2.80.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0= +rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= +rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= +rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=