From ad88b47816cc812cc5af4d394c1bae96e7965ce4 Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Tue, 18 Mar 2025 15:11:00 -0700 Subject: [PATCH 01/12] add pester tests for connectedk8s cli extension --- testing/.gitignore | 9 + testing/Bootstrap.ps1 | 30 ++ testing/README.md | 116 ++++++ testing/Test.ps1 | 99 +++++ .../bin/connectedk8s-1.0.0-py3-none-any.whl | Bin 0 -> 62802 bytes testing/bin/connectedk8s-values.yaml | 3 + .../k8s_configuration-1.0.0-py3-none-any.whl | Bin 0 -> 42351 bytes .../bin/k8s_extension-0.3.0-py3-none-any.whl | Bin 0 -> 52893 bytes testing/owners.txt | 2 + testing/pipeline/k8s-custom-pipelines.yml | 374 ++++++++++++++++++ testing/pipeline/templates/run-test.yml | 112 ++++++ testing/settings.template.json | 12 + .../test/configurations/AutoUpdate.Tests.ps1 | 62 +++ .../configurations/BasicOnboarding.Tests.ps1 | 62 +++ .../configurations/ConnectProxy.Tests.ps1 | 98 +++++ testing/test/configurations/Gateway.Tests.ps1 | 116 ++++++ testing/test/configurations/Proxy.Tests.ps1 | 65 +++ .../configurations/Troubleshoot.Tests.ps1 | 40 ++ .../configurations/WorkloadIdentity.Tests.ps1 | 239 +++++++++++ testing/test/helper/Constants.ps1 | 5 + 20 files changed, 1444 insertions(+) create mode 100644 testing/.gitignore create mode 100644 testing/Bootstrap.ps1 create mode 100644 testing/README.md create mode 100644 testing/Test.ps1 create mode 100644 testing/bin/connectedk8s-1.0.0-py3-none-any.whl create mode 100644 testing/bin/connectedk8s-values.yaml create mode 100644 testing/bin/k8s_configuration-1.0.0-py3-none-any.whl create mode 100644 testing/bin/k8s_extension-0.3.0-py3-none-any.whl create mode 100644 testing/owners.txt create mode 100644 testing/pipeline/k8s-custom-pipelines.yml create mode 100644 testing/pipeline/templates/run-test.yml create mode 100644 testing/settings.template.json create mode 100644 testing/test/configurations/AutoUpdate.Tests.ps1 create mode 100644 testing/test/configurations/BasicOnboarding.Tests.ps1 create mode 100644 testing/test/configurations/ConnectProxy.Tests.ps1 create mode 100644 testing/test/configurations/Gateway.Tests.ps1 create mode 100644 testing/test/configurations/Proxy.Tests.ps1 create mode 100644 testing/test/configurations/Troubleshoot.Tests.ps1 create mode 100644 testing/test/configurations/WorkloadIdentity.Tests.ps1 create mode 100644 testing/test/helper/Constants.ps1 diff --git a/testing/.gitignore b/testing/.gitignore new file mode 100644 index 00000000000..29f33294b8b --- /dev/null +++ b/testing/.gitignore @@ -0,0 +1,9 @@ +settings.json +tmp/ +bin/* +!bin/connectedk8s-1.0.0-py3-none-any.whl +!bin/k8s_extension-0.3.0-py3-none-any.whl +!bin/k8s_extension_private-0.1.0-py3-none-any.whl +!bin/k8s_configuration-1.0.0-py3-none-any.whl +!bin/connectedk8s-values.yaml +*.xml \ No newline at end of file diff --git a/testing/Bootstrap.ps1 b/testing/Bootstrap.ps1 new file mode 100644 index 00000000000..ad21cfddad2 --- /dev/null +++ b/testing/Bootstrap.ps1 @@ -0,0 +1,30 @@ +param ( + [switch] $SkipInstall, + [switch] $CI +) + +# Disable confirm prompt for script +az config set core.disable_confirm_prompt=true + +# Configuring the environment +$ENVCONFIG = Get-Content -Path $PSScriptRoot/settings.json | ConvertFrom-Json + +az account set --subscription $ENVCONFIG.subscriptionId + +if (-not (Test-Path -Path $PSScriptRoot/tmp)) { + New-Item -ItemType Directory -Path $PSScriptRoot/tmp +} + +az group show --name $envConfig.resourceGroup +if (!$?) { + Write-Host "Resource group does not exist, creating it now in region 'eastus2euap'" + az group create --name $envConfig.resourceGroup --location eastus2euap + + if (!$?) { + Write-Host "Failed to create Resource Group - exiting!" + Exit 1 + } +} + + +Copy-Item $HOME/.kube/config -Destination $PSScriptRoot/tmp/KUBECONFIG \ No newline at end of file diff --git a/testing/README.md b/testing/README.md new file mode 100644 index 00000000000..33f12b5b1a3 --- /dev/null +++ b/testing/README.md @@ -0,0 +1,116 @@ +# K8s Partner Extension Test Suite + +This repository serves as the integration testing suite for the `k8s-extension` Azure CLI module. + +## Testing Requirements + +All partners who wish to merge their __Custom Private Preview Release__ (owner: _Partner_) into the __Official Private Preview Release__ are required to author additional integration tests for their extension to ensure that their extension will continue to function correctly as more extensions are added into the __Official Private Preview Release__. + +For more information on creating these tests, see [Authoring Tests](docs/test_authoring.md) + +## Pre-Requisites + +In order to properly test all regression tests within the test suite, you must onboard an AKS cluster which you will use to generate your Azure Arc resource to test the extensions. Ensure that you have a resource group where you can onboard this cluster. + +### Required Installations + +The following installations are required in your environment for the integration tests to run correctly: + +1. [Helm 3](https://helm.sh/docs/intro/install/) +2. [Kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/) +3. [Azure CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli) + +## Setup + +### Step 1: Install Pester + +This project contains [Pester](https://pester.dev/) test framework commands that are required for the integration tests to run. In an admin powershell terminal, run + +```powershell +Install-Module Pester -Force -SkipPublisherCheck +Import-Module Pester -PassThru +``` + +If you run into issues installing the framework, refer to the [Installation Guide](https://pester.dev/docs/introduction/installation) provided by the Pester docs. + +### Step 2: Get Test suite files + +You can either clone this repo (preferred option, since you will be adding your tests to this suite) or copy the files in this repo locally. Rest of the instructions here assume your working directory is k8spartner-extension-testing. + +### Step 3: Update the `k8s-extension`/`k8s-extension-private` .whl package + +This integration test suite references the .whl packages found in the `\bin` directory. After generating your `k8s-extension`/`k8s-extension-private` .whl package, copy your updated package into the `\bin` directory. + +### Step 4: Create a `settings.json` + +To onboard the AKS and Arc clusters correctly, you will need to create a `settings.json` configuration. Create a new `settings.json` file by copying the contents of the `settings.template.json` into this file. Update the subscription id, resource group, and AKS and Arc cluster name fields with your specific values. + +### Step 5: Update the extension version value in `settings.json` + +To ensure that the tests point to your `k8s-extension-private` `.whl` package, change the value of the `k8s-extension-private` to match your package versioning in the format (Major.Minor.Patch.Extension). For example, the `k8s_extension_private-0.1.0.openservicemesh_5-py3-none-any.whl` whl package would have extension versions set to +```json +{ + "k8s-extension": "0.1.0", + "k8s-extension-private": "0.1.0.openservicemesh_5", + "connectedk8s": "0.3.5" +} + +``` + +_Note: Updates to the `connectedk8s` version and `k8s-extension` version can also be made by adding a different version of the `connectedk8s` and `k8s-extension` whl packages and changing the `connectedk8s` and `k8s-extension` values to match the (Major.Minor.Patch) version format shown above_ + +### Step 6: Run the Bootstrap Command +To bootstrap the environment with AKS and Arc clusters, run +```powershell +.\Bootstrap.ps1 +``` +This script will provision the AKS and Arc clusters needed to run the integration test suite + +## Testing + +### Testing All Extension Suites +To test all extension test suites, you must call `.\Test.ps1` with the `-ExtensionType` parameter set to either `Public` or `Private`. Based on this flag, the test suite will install the extension type specified below + +| `-ExtensionType` | Installs `az extension` | +| ---------------- | --------------------- | +| `Public` | `k8s-extension` | +| `Private` | `k8s-extension-private` | + +For example, when calling +```bash +.\Test.ps1 -ExtensionType Public +``` +the script will install your `k8s-extension` whl package and run the full test suite of `*.Tests.ps1` files included in the `\test\extensions` directory + +### Testing Public Extensions Only +If you only want to run the test cases against public-preview or GA extension test cases, you can use the `-OnlyPublicTests` flag to specify this +```bash +.\Test.ps1 -ExtensionType Public -OnlyPublicTests +``` + +### Testing Specific Extension Suite + +If you only want to run the test script on your specific test file, you can do so by specifying path to your extension test suite in the execution call + +```powershell +.\Test.ps1 -Path +``` +For example to call the `AzureMonitor.Tests.ps1` test suite, we run +```powershell +.\Test.ps1 -ExtensionType Public -Path .\test\extensions\public\AzureMonitor.Tests.ps1 +``` + +### Skipping Extension Re-Install + +By default the `Test.ps1` script will uninstall any old versions of `k8s-extension`/'`k8s-extension-private` and re-install the version specified in `settings.json`. If you do not want this re-installation to occur, you can specify the `-SkipInstall` flag to skip this process. + +```powershell +.\Test.ps1 -ExtensionType Public -SkipInstall +``` + +## Cleanup +To cleanup the AKS and Arc clusters you have provisioned in testing, run +```powershell +.\Cleanup.ps1 +``` +This will remove the AKS and Arc clusters as well as the `\tmp` directory that were created by the bootstrapping script. \ No newline at end of file diff --git a/testing/Test.ps1 b/testing/Test.ps1 new file mode 100644 index 00000000000..7c6f522d082 --- /dev/null +++ b/testing/Test.ps1 @@ -0,0 +1,99 @@ +param ( + [string] $Path, + [switch] $SkipInstall, + [switch] $CI, + [switch] $ParallelCI, + [switch] $OnlyPublicTests, + + [Parameter(Mandatory=$True)] + [ValidateSet('connectedk8s')] + [string]$Type +) + +# Disable confirm prompt for script +# Only show errors, don't show warnings +az config set core.disable_confirm_prompt=true +az config set core.only_show_errors=true + +$ENVCONFIG = Get-Content -Path $PSScriptRoot/settings.json | ConvertFrom-Json + +# Install the powershell-yaml module +# Needed to parse the kubeconfig file +Install-Module -Name powershell-yaml -Force -Scope CurrentUser + +az account set --subscription $ENVCONFIG.subscriptionId + +$Env:KUBECONFIG="$PSScriptRoot/tmp/KUBECONFIG" +$TestFileDirectory="$PSScriptRoot/results" + +if (-not (Test-Path -Path $TestFileDirectory)) { + New-Item -ItemType Directory -Path $TestFileDirectory +} + +if ($Type -eq 'connectedk8s') { + $connectedk8sVersion = $ENVCONFIG.extensionVersion.'connectedk8s' + if (!$SkipInstall) { + Write-Host "Removing the old connectedk8s extension..." + az extension remove -n connectedk8s + Write-Host "Installing connectedk8s version $connectedk8sVersion..." + az extension add --source ./bin/connectedk8s-$connectedk8sVersion-py2.py3-none-any.whl + } + $testFilePaths = "$PSScriptRoot/test/configurations" +} + +if ($ParallelCI) { + # This runs the tests in parallel during the CI pipline to speed up testing + + Write-Host "Invoking Pester to run tests from '$testFilePath'..." + $testFiles = @() + foreach ($paths in $testFilePaths) + { + $temp = Get-ChildItem $paths + $testFiles += $temp + } + $resultFileNumber = 0 + foreach ($testFile in $testFiles) + { + $resultFileNumber++ + $testName = Split-Path $testFile –leaf + Start-Job -ArgumentList $testName, $testFile, $resultFileNumber, $TestFileDirectory -Name $testName -ScriptBlock { + param($name, $testFile, $resultFileNumber, $testFileDirectory) + + Write-Host "$testFile to result file #$resultFileNumber" + $testResult = Invoke-Pester $testFile -Passthru -Output Detailed + $testResult | Export-JUnitReport -Path "$testFileDirectory/$name.xml" + } + } + + do { + Write-Host ">> Still running tests @ $(Get-Date –Format "HH:mm:ss")" –ForegroundColor Blue + Get-Job | Where-Object { $_.State -eq "Running" } | Format-Table –AutoSize + Start-Sleep –Seconds 30 + } while((Get-Job | Where-Object { $_.State -eq "Running" } | Measure-Object).Count -ge 1) + + Get-Job | Wait-Job + $failedJobs = Get-Job | Where-Object { -not ($_.State -eq "Completed")} + Get-Job | Receive-Job –AutoRemoveJob –Wait –ErrorAction 'Continue' + + if ($failedJobs.Count -gt 0) { + Write-Host "Failed Jobs" –ForegroundColor Red + $failedJobs + throw "One or more tests failed" + } +} elseif ($CI) { + if ($Path) { + $testFilePath = "$PSScriptRoot/$Path" + } + Write-Host "Invoking Pester to run tests from '$testFilePath'..." + $testResult = Invoke-Pester $testFilePath -Passthru -Output Detailed + $testName = Split-Path $testFilePath –leaf + $testResult | Export-JUnitReport -Path "$testFileDirectory/$testName.xml" +} else { + if ($Path) { + Write-Host "Invoking Pester to run tests from '$PSScriptRoot/$Path'" + Invoke-Pester -Output Detailed $PSScriptRoot/$Path + } else { + Write-Host "Invoking Pester to run tests from '$testFilePath'..." + Invoke-Pester -Output Detailed $testFilePath + } +} \ No newline at end of file diff --git a/testing/bin/connectedk8s-1.0.0-py3-none-any.whl b/testing/bin/connectedk8s-1.0.0-py3-none-any.whl new file mode 100644 index 0000000000000000000000000000000000000000..08f34250036f455aad7e3e820c65d08d790e1201 GIT binary patch literal 62802 zcmZ^~LzJk|)+Cs=ZQHhO+qP}nwrywLv~AnYylFe@zUp4vhl{?ky`7z@v5TpRHHS03zP_cM zrHj5kor7nqvTS@d147Ruwb-Pg;G|QX+95(CuZomg>CGHR={X>T{b=Jd5~-&j&8sv%4S+{d0kWYse+9S6tLU_qYN#yy<|0+pkp^-pn82 zT=G_T*zwm{3&~}r#K*Bn(G_Nml6PchO;imXGI8JKpMCYihKjrU+PEc1e5jzA(O3ns`e2_c(XBuM&Y6 zLntHc5!Ct(PouERxwjvYnC9dkTAkUe#YZE%bf3h-y;`DaV%Ocgnp5YZ4vV@=tXWo> zaNGW$aI*y|`s|M5akg~tYRF%TlSjKho?a+hXER4<^+nsgPvYmNcS-yT{}=wD`_bws zKmY(IU;qH5{{??z8%t9=7kx8BV;6fT&wn)NQIU<`{NFU7xdv5RKC40shpJUm&29to zYK!58ydiUAaYJ}obI%z*FpjLyvh|G$_q5-|p1bSc?K#NgX(+9Zw}{d;P-ZpGR6OsV z0v>5}qX>3PYmPUa*d&=l;MvDxA-_T|?)RFnX~aqh#cjA+A`9iz28Ky@fS6uqD;Il3 zRxvo&G3XFhbK`vC-l?i1Tj;BN#L*o&t_KUOUUWD)46mlLY>h{35Ij}_4Hq|~vJy1_ z1yMv*MQ8*j(R8t7uN*hFle&ZK0=mUgY2aLSKql}K0rI)6^DkEB%+3x%AR^dmdif@{>s~~eZ0^WzrOL;vJ zqnUl9jzZ>sfv1LYk@a0g+q3BrQXaEJ6Ql3tf=)lV>Ey=8%HuW1ZuHXf|7_IagT?>r zIpuMtW8Kj?_m&#HyF0OcQt<7c?2bz^a;*_R>5F5=YP&^5t0kpXB5uEg5=$F9kptS0 zgb_<75`VIwbpd58DpMRJmgdLREpDY}RATEId)fli%FN~=cR7t0!Uj=0tM@hkWKoT} z&{;TGOwD!e0!Q>~L2){|$AIkB|N26w50yyC&{O<&E zCD5qGclbDOqn5Xlg>+R!pzoWOc&@;&t~?(QsF}Lti9BR_94*y7TCd1y>nv66T)!GwqwbjA6_QO`jie9{avLj_m1JhXkW@$)&Me$jS78 z36by#sD6_{En9hlA8a*AIeQnpDoX$)FvE=y3JUar3S<- zXoRe=XKgbuCd587vgRV>4y3%5}gn1U~&2Oo8$sIU<7j)<2N0m*Bre7~eZgx;{Z*=XudmL&QLr0mnMf;~i;L7(B^Hkbdc(8*Zfc{~d4Y}J0UU4OHyee)GV5TD4ls6qjMVG|W*(g!e--Yu z1ikC3=yMx6^J4A<(&=AAE%BSg+g{r!2mvK9o5QlGU+x1oj?z8*qM~wClZnF zsY_mzkzj8^-`lIb3F$)ZbNzCNU~GoG@EPuQ6<%RrcW-AKz6!ElGgW}CE%JoW7MhXj zufn;)r*=X)0nv3bT(-1>O4?+9KC)>x#1cXgqDpv3=%CQ|Pj&)clO~|ZaE^NfT1~n_ zqWPtyRFTk9WXEZii5gpp@W&2zUr+&?A(yj=Gl>i>rZQ&u<098cO4M-X5CMw4;vPB) z^y)(Ecp=Mk5(=JCu5Rk^FxXwspVP7QfNJ|bUQij13p_n-X)z>}dXhMhk?44GrbasL z#o-Y^*kp$kn$V*i5!nni;)5mZ83s5lU}Ba0Hy0`cTwqM^4qZ(Ua!!Ddv84~+YM($S zJ+usjTAU_zxQauHbCFT8H7)fmWws+8vw^ei$Xdrhf4oB>yb#lX7;pmLgs4_!a5dW|A> zqy{l2RVX2F>U7~6jrc?c4;xRb z=LZSnJViF2S=E_cm$mA4`TV z!3lhW+Q9D_%7Qwhr%_Ntk?@_2gN5B(gs&US$p$LuFN3Ot5WOIsgV8TJNzXJihE}(u zx@&?Q5N?F{`-)_L#nu0$#yrK}`+EwpTWj-jv8LpPS_=%Z?#G1DLola{5`L@!>Cn;w z#53hC-WVd5N$Io>%IcSyQU(rx>akz(4_snil}} zkg5bPi!_$Fs}$3aH}@PDb2oAAVZiH1oT_0@KR-W5_6F}!Roi{k5#p|T zLg7UYaie6MP&7R+cuD_7+T8e!#TaE!(YkH1uH#XXgElAQVmOOy8 zvU8rG#HF^m1nTxkXha(VydLPv;DN~ZL&v_7n}p2vswzPEEbO4P(St4M3)7M=K2wW6 zjRw_x^ZcwjAYE78K1xFdcu#|G8cAPuLMHj-17aFYC7qScg>2$&&K12|2q^y@DosLD z8D{XeWqk@wl;pv;Eqz3OKfnFuiB$2-k(!2;91j!iWXogrH$S*KAjgSYd*V z7b4L_m`U4YpU=f5>yp@8kpG1uPjtgv!eX1qDWNi!2!dfRmTd5B@v+_MmaO5KCKEJyMdSWvIt74yZ#)0agG!PCb!(Kgk=wE(m6qJxiWzEvgFTi#C$Hyh$Pt8*};S38^ zQGI2^wXAGO!w;EC$FSQmE5Wj8>6p+fpKiG*-y3Ifq=;CmmRSB^i{= ze~WRb%ajdj&2rtZ+zT0BxEuyfITKl*njuKCk9Mo@+H-}XFsVbHKjnCikO|@AR;=_R%*3KU;^zPN| zurlX~XGvC(w-c05ma*r5oH)2Re|PkCj@ac;5-tOmeY2l6{$lHN`%+R3!Ad7Y-9R^7 zUaNSf&L8I=bagbLdrs20QD5zSVU9Vc#!M2iSqFra& zQuXDNrdZ+VG=)_6A-9#`g?Dffcu$Hukr0oo8cPMd)xeDZ($uUq24@!>@Bb9;LbriF zZ}d3aySx-7O+CI5^|sr@RqU4;t9wY3yFC}q+~1dD`ZBgyIp71=2;p)azYN|wurP?$ z#mg3X-tgfXI5(mGq1&~k+8q0XYsV5!AsVPl{ng6f{8!RUXh9igcU`J(bNe0W$}$9N zi0pa`_la=Fgy8&cs}nztZl|99KDMBzkGuI4K*fKLh@Fh^WKH-F%9jv1M2M-*+fPyM zZX3^I7S2H_+iyTym9^=r;YAuP+!Ox){a{@bMQYanJy_9yW5<6h&JKo7hPMBiIj+@Z z?YG$wdT#46IKXQGES+g#t_oYRhbw?lEVHB$AapEA7|SFA@!Qz@_=GQqsI|M=-~@vQ zy_q=ePiJ7l;~%gk{15G)!RS=F*1D@`YaTK9?sTY&rKCSQRkJkfj=}uUfq=#X#DYK2 zqG8|l9&t(sfO2RQf@=}^bbPVe*ze#E+Z$fd+F>%(s_iqh=cP0$Qo$As$K|Taj!N$M zJ09HV+gr{Q9ERM0{8+YR#)`eL}wqs+Xk>NV?*Dz3pg{{yyETU zlGW^otPNBeHZf$US+2@-Q@3O)cv7%8f1)Kfgf6lgcChSrmbe6&`)od^LFzG7msO%@ zFpD{>(vDMLUkK!m~^>=UvdAizC~mQ z_LtjL7Pz`-AU;J?fQdyv?qB)8pSQ>PTv2!yM3^fI3qwj~1Gf7*y%b96E2M3Gas=MT zw9)fsdp_uJ2w#trw1y%n)Vi~07A$S}MJ~4N#VcX@$`*(%*cHpWh=21{Fm10j($9-; zi9DLH+lBY$lGdNLcXM9P5O3_ozztUk90Se+_QO9q^ZcyKA%cF6Kc#OyH+n0xOLZ(| z6$uSJWTEV1nA_S~GbPo1e&d)jlmI^UzwOc!X6*09ul34M%_kb=8F@lZq!=THs>~r~ zVDFY?O+evW)IlDe1#(PpMORP7lTp0t&OCOOv$r}G0Z118_@E7tPASge8KjFhD1jY} z#vG>gQw(oa0@NRM6h0_=Ok5lqU{oczuLZs@M**K?N!uCa>tJOuEGH>3IzU`@xr|+) zmbO`tlcu9m{9-vVyZ7Kxj=Yi7#8+DJ=tJd8TvPcfg?OzLP`s!gZu94W<1gX5siIl*s>g{7pA%5vZCxE|*k zq~=%dqIOe1)%}<;6tvCY}zi{_d$JDH}pYy)5D2( zu~Z0wbI^jPE%&LNyn)`SGB?9rkD*UyR$vXrBlPK&8 z7=c9maXN+Om)@^28QkAk^XTYyUFp8u@-MJwLDJ;7xk~$?<$91s2Dkvg$mDm&J{lIt zAo^7cZGsfBTy{YSqnXO*mH#!N&@!7I{XMh3|Nl4=$Zurzf5daLhzByJ1(rW`E&BuQ^I5`9$J z1IWcpeXyW=oAf4g8zrr`;3P{wOK1Kg(TK{+^k_fD(iMwXl;wX3S~X1w;5 zmew2|1(~%~h`$tca*czZOepo6Z$rdO?UDQ0U29)KQCSqH%{XWwQL{cB=%8H&Pc`A8 z8KkxN^}>xwZpa2)O;Rr^=6#zB1VRW{N<};1rX=|ke3g9Bk6pk4zo&^KE-o%cKfbJ- zWSEq45k)p}4k1&jg5Y|(gZOq)nNeE79z~saFIk2s=9O82)qu46^|TP9rI(kfEC0u74V>dm=P03Y#;hI5SfnR898LLWV_VrnM6F*|SoX&QaQj(Y|2!h1fa*%7{0% zrs){(%p@IRW=%%HLz_;5nC*^J%`O`ojWW36>TuP;VO4+GDj(2hzKz0DvqpD0{}Biz zxLw;a0q}ju*cbPfqjb7ePUvhTbP^ zCrxxvCKJhM)P;ZuI2gEuyirq`DQ+^4cjYH9w|lb8??)#$*B`T&myahRPj@#wUy!b- zIAY!|pajT4=8$XorNmN5A*S&Pd)d-SXb ztiAH0kXU$de5t4X3T(G2EmxL}WEB%UbAmGT0)%%g9jXdg5k|Wf-&8Z{hyg}UddW1Y zT21G>RsbUzssJcqK8JN|)=aS{Z%jl3Os1fc=#*4Oj`3RV1>h~v-bOoo-1efX)tWn3 z0QA4Fv`q#3z!=40uE^sNi=cNCl3noNGEgnP6|CP^&lfAMEKO1fUc%4@#_@RBTKjN3 z=c`8fHh5y11n`nRE&#B`n*d`BQ5S|^0rvau;N6fK4VduK)xm)C2HXuNK5t6~OarWD z69vMjV~Y4xN!|$Sk-9ABb{j%qt#$pdi~YS@NffKC^9%tni>#@STC$BYi|{HC-v<5U z#zKtkApQ13HPVHh!$`q!+1K{Dwkm{2oTPo(N$9lJc<^U}lZQD(4F?3Nn8v}16m7-E z@_IvD*BfwASF$4Zxe2G@{9*-54womPH-6)M08o*9zHtO3V`UJxn_wav4Fw-p7@E@F zdUGf&{LO4O0jIiqAO|BRNy4<_Qn)+9anA(Itbcoh3c~>L?W$no@tD<^?uMJ(x3#=@h)G7MNHFdnnfTRqkK@z3IAfNTn!v1cO9xs{W zhzQ^&GkvTym(8<@>jhenV>+{hTZuI$bxR4TQ%PhE+` z^j&pZLruJ@TqM<^$;7vWR#qF=&cO2d{-FK%%CCS@1gea`{%a1QIbTRPBYR6xvNsh8 z6qEeD96x`L-#i`;J%C1LaEo7IsfDoD6OY~9=3Bq2H%6|WzOOzmpT4fes`k7qo4+Nf zP_&Mh+57*f>AOD=3f!VIlL^RH`)#fRHC^FmJZGTl6sZTa4D>)d_<8sh=a%I9#5$Mf z^Lcmv1;liX*EcM5?}h5~%pJ2sXOd$cxv^M8skkPjor=f$rgmQDcTX(v4b>kz+Hn2t zEcC9z4!p0l=oU3O+BGZR8FOsTto&^F+x~*!kM^M9A!W^jro{@HR}jZD<8G-ga+AJ4 zFdb=Ee`N>61NMO1dqu$Uu@8F~fw8EF4Pk_vD@EVtYGUCcwzfj_qY0EP_D?ms=A`Rl z;UE0eQwN$S4x&pBnmGM>{NC6iN3e$m$K4{7#_l>9nOefnv+nORJ~>}Hq1$FbHjjY) zx?Ml3?FJ`Jd+MG-42?SF8^U4XO>gS3`cyvb+q+*?;ArE@t@BWJNU>C1RHJCv3{hqP zCClt>n5qOr>R83KO%QtoH-x9TSLA|0cpdq) zmfON-Y{2}e_OeIFMW74dIC+b;PZY;~ZtoF=vm|QBG2UC>Sv=xx8zW6Cx5~Jz@`7R= zi7oW7`_V0EGLZWF-JAQ`;3(WC!0&-wY}rrTN26oy)5(8RLm_rZv>PAM(+ujx585kE zXe0R>?zY%sbS;1UZf^G|iG-Xc&g%sd zrz%_>8D^~|7}K}QOSFiSSuO;4MU~JgLk#IO{LXKyaxI->6%;2W<|sSU_sQH=oWg*~ zC_%b`v(WCB_6Tg3fL2ahs@}0KpqC%3n1oys$K5{g%8hIO-Mq%;Qp>69=cbl-CO*EW*8}FLB#;&qu4vUdx&N)mE$jnY|QK z@?+%quG|~cWF83QG&wCz7DCUoWiV9*Qk~5HD;au2NSm-A7K;&YSiwhrM?_c z?|G@5ed+6}SCNx@5S`eC$Gpl@2LxC#5H*_*Tv#H-c??}JuXzggZAB%fy|{*t4+Jjc z$w%?xy;7keOfTX)Jq>W;ACqEgm3Gg|x(qKe9cX@CmRgO&?=A%W)={x@?FIaJ!SVPX z#dkJZT;BUO)`;4QdPl0Heo^;*gl0rzdp+~FvU&kt%lA@0$9tSeJ(SjNv1Cs^ekk!hR+O>DN!w18oxWE-|uXxKd58JwG+YU|6H&~jDN-^n$Y z3u*mwD&U>Tg#zrBHIte3yw`rPx8_}ta6vpL^lgShcWj$c_%3)mgHVMlXL1{JyB^dq zP(+J2*ePc%vGaDehF5wCMhH>1#-=bAAw6fmXx|j%=2Hg=iw90Yc>jE+YgR@wYwIydg}k9DhrgnVdQ7=bynelxmn49o=A`C#6btHskKq^cmCvGYxgS8;cXX z?w5H?Bp2Ye-Zu8k=Od?GxE)YY#dMNI?&hv1B0{$X55}dI*$h*e&G(MSS?^PdRcxyw z*JJ9aVIbVL+;VJv4a`qH{;_P>UChM}AMfH!8jyPGts^7gHqT8ue|J}|7a%{NSqj=z zGJ{H$P|eMuO`o)z!sDCdpHveR@4>qSfTjEVn916gMIM5D%rzPI3)cwpeO(&_2oNb@Ve&zH1y^*S<&> zfO)ka`c|a1WP7; z{35G;S@7oZs_2JML|OvJMAOO*DBr>0z-Nc%#cFySWfVYpM6iZ21M8>kc68|p>HQt$EhX%6 zt*$5DwwC!=vy2d_Df2zF6=8#*svr3O@gx5e7U}RfkhuH{i(dYDl7#=od~h?gu{1IK zw^{Qa2clJZz-s7UV01=)w!b26pYnmRH<@=ZIor+Vc6aA(`FM!YfxU z;dQGiPsHr;HYQ=#Q1a66)`ct~3ueE{;8{ho+(Ei(R5@`_Syu?|Y49}8uW=gqX$8xM zCw-oUglQ6f_wwLKb=Dw=gS-K~UN+Vuvu6R4AyGgS=G7nKH@ItmtuBI z@?V9VVHuE=aBvXL-zmd$l02@82-b}kj~24-mdyo z2>_^cxN12Hsb_nd=PXC&?5k+GVY%pV`iqB@8kCfn7nqmXnY2#p|A-U+b6r*8?f(8h zhLr#J{X1iOTU$drlmC|&yxPu;#Srcs3qm=tR7e)dyS&0>sW1(kg9clGvEvu*SC& z<)+67=``*8El$2@$)-r!3L?R8SX4XdaW30{)NYz!20KdA;^%8ZD9TzqEc#o74!4|Ce}9tIp(koPXQWmrYh`ltQ}~5)%={!*HL=2p z`oNA?q9Lojai)X;-RG~<+B&sDIG&p`prr}MLq%^AYdv;2hQpnv5x5;svV(COyOkYr zOem0{$)fM+S}qZmtQf7tp4nZJ`lX}l6^hF+a|-fT@@(Eq1;{D&L3=2b~|L;wICbN|)4GCAfedAlbqSgM?wba!X6;jHxJMYN#_3MeJAUnQ)4%2PMNud)&(8)l*6lqf&^3*;<4_sLz zlDaAEX0`==Qj<2JJ6NWb=rNKCsd}QGh`uq+o9b$4)f+*yn!3ApLQ_y2#iybddl9}; z7=)_dZrv2Cl^g5Npw!N4%&I|uh$5&z(C)_^6Hwl1vLB_!PG+j;2GQ-8Epob>db@S? z0fc)@s*vU8;%b0yV@5|+e>B>Xe5;82Q-JN8o-XB8G2XdZv(oP`7vI}y6HL$q!%_b- z83NR6)K}F`C_LjznJoDv7_eM&gnPp1%D}6tJDNaKN%=#d!PRT#0TGuVI!K|?1umd_ zMVNjcjdWINa@uu!CIZ!J`abRt0MD)sEE_y1qMY0(i7pHPCjeAui>9rGTdIwqL$m3g zStqb1x98NS1BjqQm_&9`kTKxfkwp_l1|G&Cp_}HAr`I&YJgLqgq}HSGG(w{3qP*j1 zB{yj%q`+8d^l(U}U2r7i*u-Zu||-V7Lq8=Ex=nYIuVuE`*NIcye!t;-s=AAq)?32_N@SR6u9Gf-5(H&Wf zX&D3JYOf5CYSRQ;tEmOxBn(2(q7?+vt;3iiLt3Q)l{h%;hx+?vssfJN*KG!oR`zoB z8VTa~bWfwvzzpR(RmimV0phByDKIjWS^y}a^l>GrGBiD+jp2uyr!42gRCq!S!5z-4 zcnRua7@pr+DnxA|Ssh^WYPm1yE50dagx#xy&nxXc7=pp|7x0vz=(s`$$v7 z0g67MF^J1UtBKY}b8!hG6`89X;83+hE528+&i|gwxV)`e`a&@P+u*TUS4_|x!A$E~ zzQ+pKgy}%Ud?<>q$Xxgnj1HY2RNf<`*|bI=vtj)_Aw!%X{RHzbW8fWO5Rp$9(p0P+ zf+FapJ38Rfug)i7N{AISt@F%}wkIw&AKMjF-1!zpEVe1%T{X&jWrlzqVndG#M%Qp2p>(m%X_Iu= zD%-EI7Ys1NVDs~^@xx}-M4mt~OPx{g zBBfq6fB>F5gJL403MwuxACQc5lg7g7;Yr@72E@w%s}uwTSt2aOlrsaPa+U)oRM#br zz|;Jfa{J6$$!m|(DM%&zN0;mn!@#->OTRCM(yec?tS0z&7?ydi1jva(19so<2F9nv zlhmf$=n56mRC4G!KxnW-CDTY&*$UYaq(QM;macgdsuDF+dhNqOPE#|G{e=;;!}3uJ z2ph|}A1aS=fzSUTxF1Tdx{3GM4-3yD#IpyzpmeQ#Rrx}-hfF44BRaXz`LI6EBg22=tov$B!nn8i>>)Ky8w?5R%E?(LG-1<%nC zcz0!Q11cdScEw}rBs__agDh|&A+EajD`ZGko@%_2X!aktq%|0VUT`P?QNQ3jF;wKU z*W{`Z534Gwu7FHE)ZjZ{0W&mJ19K6<_!$b=HHwCS^%l?Q4+OH{f$cW%_CvH7r2CIh|$ zfi2h8XpYGoZ+Fm1FORn2PivNF)iXd4$9Ojhku{E38Q!HO)9N_FfvFk;2t&b?3lv$x z4TIj}$izF$w=9~}1nxR7$z_s0V8{E8mjfFnJ7!;MbQIG%(kv09>!6q1+m@QfCjWeD?9=+$z8toZ{_IXk-O!YA6)5%@->m)Wby;3Mva z)x^L?r%)P}{mphZ=8z;Rjnd@IhT8%N*UcOHxP4wN&@9TZo`obR4ARUIC!b>Kkf;D&oUL6IaLJNSx3eRdS5NZmhHHrXrf`uiBq13OCjX;*%ouPv^qRL7l z3xWFZ95pXtB?2)!Z{1obn~Gz}V5u@2N#0RCycbF!cK8}x{OjxPg_N6@)8pyx<%7h_ z@B4Ujy&nu7f+@HIbN0MYjSLLK6{uuLAwh&>STBIF9H-rYzpjjE5Rc_LBzljC@dY5O zBQK!g8y2~5ipy_?Ty@(cjQP_GD9EWh8d@dJm)|0M4dJlj#r)Ix@bT|6rMX&nD|-T|0r zeZ)(=DCNx}IyH_&aSDdbVv91l4-YN5uObe(s;_Lw8S&L&=SIr4Gr@!gly@D5U~+-? zu(X)H=}E0o_+6QCI9)a=>xl*XiW!x+*7}15$btdlry+7Zu-@KcCa5LAKojeRZ$9YY zjDBd}SWW+OlBDmx$IbFXT5m|e@(vy&Ovp45pmMxdG@EW}Ee09TY2LWVK^7wrF2-X< zap(aXy!P~PJd!frV~YVY~yF+l(aHx)>EUncFFLz>*1zdd8JM|1wq~5+j|vMCQPj@t@}+ z)hS0T=AdOiKRI09kI=*Hz?M4U;8F3um+p);?X1sFoIr#cfdKpU2&J#HPsWNl7~S;G zZJM;U)~&TrXb&^?lr+^SZXE2I=bWfa0luKyCGlq)toXXUO@i>Aqog$D<}%m34` z_qK~jv-H7uo3OsYC5^s(e7dF{3SjEg9vmjk`u<(pz|P zO??vlBOtVF4j3~op%td4uVqIKSL(-@^zD=GTh)XzfHzohZTp#mh_XO)6{45BUV-Z7 zj&*DN(4}re=`GjyZQ2=kwB^5N3Ab7G=)zk4x@}44^C<9ks#Eh-wA%%f=nT7S_sO@9 zT!QAuyPkn6y7F>%1udm_7fPaDsxq1t)Ui(j{7g*ihRvp5Uw1BiM<%vdd?1~|yu?Z%6mdrY$ky@jd-Z6zj^tY9j{@!73GUrEt zr(iPMlbgdvU!)8Yk+^tZH|fBub+DnrnDn6rw+d1@r^|u|8`TGL^GsnSBgEMec^aC5 z@N8gXDZQ}8LAIOfF+AF#<&v{1G#lip-m^+L#IA?#vjI%YL%Ch=g1Rx?g`YU!zK1;#rcpX(w*pixTF#~Q922P{IqzPXU{#L` zCALpbEsXR$x3|j= zFYT8@y~OZW0>R0$G7K#H=(-LA%|cIgP$pwT9eu1%iW#JrcDpKB%^_wTVK7*Zty9=7 z+0_Xvx7{2PnszrW^!YI<>B7Xpy&10^gzv6V`NUVuTh?qPm3_&0^ySEj7TYxh^QFlpiWQ~jx!}3!&CYRO18}92rLu^sm)su zdKwDkNKow{7{4OV_!vRq45lHvbcTs$q4=WJ8>w#P8@yo(^#;mk!J!+)`Rw}|RPQ!k zA%J__JPMdq4=Q+5166XJuYK6!!KgIz=SlZ;nwXU1_@krjNa)owtuW@VMmiHMdn%Bwa z@x)Wv^YKitnag<5NXzIgGdazuxyhu#46xn=J|ou4D6=QHv969Xt^tS;fV#4Az4qBl zY)d20G^ZGxtlFju7K+RwfsA%DD-&f~(IvMDHMydd=uEA&)3%ySzx;9Ak|4ZRdW2|c zt)mb(b8WD?Tw>~GqoZmL9X0qPCQpdnQ{mc8GDbKIaVq65DitiS>X&KX6CF^wa@D|t z-q=@QA65+T;0Y2_^uHbBLRQJ8vIK-3a~J2l0`o*}2BFY=IPC(7b+!d^BDsM(E%14n z#KM3xqlo#PX(CVSkQEq0=5I<*avHzrGS`bIQr60YWqo$ ze=d&9TEt^pY6rObCZpp$8MKF;Cy$;LQOaNhW566!O*ZP@SOqNdHDR0d3`~ zH=a9o*`S1&7(heWanKrXn_YU54a3#B57JUC=%0$|bzrDWTU63qr3N-#*NhHiK^zCu z{rzE+6M%2Cz%4}=%lf|I3&JDgRpknw#4O{JZEzvzWT}t-z+?gqJde4$#pt^CQcu~# zH4JvY;aahUwOw0(Z=mEMM!JpFqi+p%OFUu3TkD^4AWek~Y0dNjl8MetHvH$mptq;< zMg*f$Q;LXee6M7M;w~8^iSLMdf7HbxNmz^ z(nU9&`a4;7)sqqzT&=`e25#7nth)u;H5j*ze|uoZpuL4y6T6`b*JM?~<8|XbmKt`B z7uAMMsZ~h{AuIVwDEXbMs(4vl87X^|*h2LJOZ?g1{^!j_z`kxJH~&R z;VyA@0y(<#5zw)<#(878{L>iwHtEtK5=9vH=F?GZw|v&E!z|qO0gSdU*L4r2nEOCp zDz%|r)U<+Uyfl9L@fk7fgX_&XS`=PvV|Mj0xL^fCh!5;8^PcfEDbK^AHgez4$s!d^ z8qesS>yK!B94=}Zw(td1iZ!7!xq(lCrQT?0331UZji*$`SMnm(rrS);y7)(z0=g0lRl~P4quEDzcaEwm$#2S+40q15A4dBUDGSt=VG9TN2<{`ZTsdIdAn<8_(MZLiSPo~V z2{>#6v(S@B^^}cTxaNIB1wapdKMnf7^%g;NgBetz@52p(2-_suBhG9I`aWPqA63_) zeYN3kic@GfKfe*O2qRS#=-!IXMh`{VY2u*H@xa5};|6MrOQxTW@uT=uE4sb1b-*-R z3sR0kOgFO#^3uV#r*jU?QouC>2J4wmsww4$qD}*&#Gkv~TDHK?whgObQ_rO-YK)5Z zI>YXQ0}NNnM-RpcH6I7|6!6O0sXxkt@#eI}i_G1&*V<^1_WA;z5TaT*L4)m3ZxfyB zst%bZ2F1hDlL7?!O(xKJ*J%qKEzL1;yHE+D!w&I+Du0;qPwmVn`oHBsFp$ZBrh(NT zD>vN>FMS9_danNz`cH4P(c_NCmtNKa$s*a+f@^neRulM+g?+y~ANi%^@IcIDxphSRW644w>-Kv&^fbP0dX99Xn_9~M zRWo^)zz6LK(hOHDTe$mmFtn0zMxG-%f(XYWwQ7Owp>;)3u`qKKbLQ?yZNoBPsHPy^ z_V1q~Wn#II?&G`WmU+3DJv2GJe3HS#$Pe<5a_6n^=B(i(Q+uFOd<8BhHqVEn z8Fd+*((1TzA3Q5W4Lvp9jh>phf7URL4iy1Bl*j3$*t2LO8k#mC)hws|@*>YH!HTQ? zN#MJr$9%4Z3-+(~8x-~FXr9y5v!8YBrOeC!%h){YQmmK;t~B{^`M;QZ#~@3)Eo-zg zEA2|#c2=s=wpD4{wr$(CZQHghZL3mu*LhEOpSN#!#MfWnA9u%&cz&DRrFtS|G(4rfRza%TQZ;BXUt@K4Knd$lq23_GXG167u>zapxEGlv zUBWmJI196i`5pL5)?B|&vt;+iss1qq~b%**lO&{s*?;LpT zGs4l4o6{j7rRMO#%qO5{W1O1Icw%3!FZ7N4_p8vq;YH6k40!C8N`_>cu7wf_Rtms3 zWAr?br(QIzulKBguPW2RG!uCBMkwgpPz=f2I?g@W%8_67I zgwEHMw49N!@Kct<7OYoXg)uWASE$SFq|l7WWywbhL;r%<9*lH!4ev}iLT=D~Mf>Hd zFaW97d_3j3wQoPXe0i+@xXh+vvjK!}UAXoloRwosBGWx?&!UxF->hzSc_n{rpX}#j zvQ<)Z)sF1d%Q(@@(Xip?_*AT5f3obx--s;Mp1D8!qb^=T)cHH{ouzvi2~+a`)NSssro=vSg<$qs}wk8LXT;#;WEYNN&;Jdz)yV;#tg#zRb@s z{|es{T>JEcd`O_o2s=KKW{9`HYv>O^{b8F9Mn;mzZGA_s>nTZ#6D@~wEI9w+3Q8lv z;YWQK2_HmtQqQ(cAHAMqMO)Wza-3EDKe$CSXEhyxwr1mMtoou#xC>lHk51fzq?phvO>|+=$FBeq=^Z9x{c~*SS+SvSUU-k)S z>e#@jm26ogaM0q{raSK0@1AM{1=3V^{O`GSWij*^UM@RvdfG`IuXi9^rnA7Awy7_o znc-w~)g*5pI&slHw4}_Y>Ffb*>7+$sda#9EsGDLfTc_7X&V2Qg?xHL-({P(Tix<@V z(<=_JP$H*SXX>zuXAl?m)Gej1;QGBX-=09e6_%TC%+R!DP)l!Y=APx*VUJ=uP^;^a ztH(V#fW4T6^aNoSp@1ePddD}{heshetU7!=-^DnQ3jjaN%Z8_HvP4I!^FSqsRb3k&J}(%Uc+w?=sIq4nswJ?`Z_{9Cz| z_W5k9_Oi8kK&5i^aOgqX3-+Yiu~lG9P&&yb!_%@Jp#uU*Ck<3-rwh&my3$V>0;*k7k26CRICA( zfH?~-$iiXi4)Cgs06$r?NBai}71!`H6}OQ5yNM`7IgELs!A!4s`7bmJ%{p88o= zTI(~ydZL*6M}Y#vVE99R(OfKW@6p^K-Vk8HEgQzm+toPdTdXTy<2k)H&d%dGYWqn} zWvRgUTf5m~LxJFXc9lQt&FO*qaj1tNoxM5gx^sxDt{lja9kfCAS^7qRQ(&p#HI9%{ zeDQg*9eFc-YQqH|TYP|TI`RzzOKqbP9etBX#~`RJg@Rj1{mT@3Mg|On;w%-L`}c(w zdWiaU+jU06!QfDUADz_PnXJ(6F|H)O1<;q~Fs?9x(&%=2>inX3!Ay)Ie;i`u8)A+5 z1`%a1#QbKId{Cf56N{m&7f`QD>q&H&w!A zF7ng)yKqcvFglL}gBTI-x3HgMk{NWcTnR?|efM9ThgErLR6M7;erUR8hw|Rqym+

YVX(toUj*0P8con1X*tXmm22nWyt~gf zonT2L$69TdgrcPcaS2 zeVY|zk3+8K+0a4fbPg(*k1b9YRwuDfbf@+~1;HCfaI7LESoLnyc1tf8y|k&eR;-59 zw57ncg+8{`sntL4LT}KzDlF-*w1bK^YL>~GcXqZ)ztsuEF754AekY2W9GktdEl?nN zo>HjlXzHMuBJLxN4%%2*EbUNgoqhNf6piLVn-r;U#;Fm4Cae%9sKpeuu`U?c>pFaU zIdAn5*I{^yBr!NyhiEeEp?|;!LDMLKIUqYx9-8Q*Tcl~xwq-Mef5c*nAz<43OQu2? zf-d#d&Qkp1`2GjGn=@S4&B<(Q{$htsQEv|I@?~n-Yr4SCB%rf|E6JjKxgQSgQ*7o8&$; z2Ad=H8c)U=8P-dF)(a9Dx47+;eRW3s5LdL^ceW({xWmK6H05;G^{k^%A(hb%-&;9^xbp)l;1$EU$k^)d}Wd<7Ufc_nec3m z!)V7u{xLCN9_}XU&Sve~s|RF9zn?bK#A}SUaoe8Qt!eH8j$I_W`nH`+vWE8ChJ7v*-%O z^Px^(u?Ia7_Ig%r?-VqXD`9BQ!14=~uUN!QlCzl=n2CmwcTG0aVPst!qbDFD=dieN zaqznY7~VwY4I%N6jBKb&QJ^a^r)qlE6S?$p8HyQq7-H435wr~(`YnGv5d8CjRQ^|q z5y&sxRD207dLH(jtPG3x&2q})n8lO%DUJvwf_iOWV|TS?@04}^p2`EIMPrtql?E(l zzgJG0*!r3;n2QgTqptelxpruV^e9+MIr~Y*8n*Kn!$LcV;04o7u?C)wN2j$XtmY%U zuKC)RxrS}3F_uZK@)O&2?AvAqi-r3HTR$)0o=P{=i|k$_M_)BAx4meeNY`zj46KlD zhb%5X!T-Z4^T%gbA5b^w4KQnQ0i0CC|Fvn$!O-5}Z&_xQ(F|~X^e{rs(l>>)^f4Ux zq{QsKpt8T@^ASX%!gn53DtAC09<#G7-{D@FjpujCAM!o$VAop&rsWDpb*37_wjv5a zuw&P`-J(u+dgc10*~>|EqA_iC>;PSP=rBz3v>sAcKvtu zFQ+b>b=v>^0{%G9{)-s4zZPJj`{((unQZ^RT8FK!*g7h}?3f1u_%r?w*70XCe@mOw zw%0eb(zP?S{$qwz1Y|1wKS{beETtefJDY9NSisLg|I?fTR%m~A)2_E(ej;fDP#T@0TLXjwMk z`p{i_txA>*m`~+QnftJJP#dqO>UwsNd)@D)BbB@##}IdO$DCGfi#;r~tqaaB{b3}g z%{%oJ8u`vRiO+bgRqui;;{4)3Q#qPgmi=tx7YCKSFJMFhgd$(F_;)pJrk*#feZ#XH zheu&;o|5Ct49b=U^|-*fQ>nMMsl&W^wE8nN4=Z8DHMV{~r=KrvXEcr8=*lUs>Bto* zAh^=bCDbDSlwCk~Qw@ycd*l=IP;KqI_W*uNz>&*kf+crF`T9s5Fo!)?;7O@_JksY| zhl33rnxF^e&OKxrNeyV|yRNyrUsx$=BJZ?{EnO5AXz*9p- z6fOvV)yMr@DhUJJ{qLAgijx{gi(qY_uzm46VMLQ=hZ(z=AzL1c{%8CN86E$Fgk zcS=8va0%K^(>%H^*Qrb5J_g@>`zDvcGpz)Nt_8SVClH_CBvh|(m{g(D`i*vt7*{(L zrS=Xk*fct|Y-i}g616j2mttb!p8f2i7-(0B*qi7VDKTOeBjxW!QCj^A<~uZebc|~Y zqy~^!nG5S(3`Wb5{`p8_hEg9@7r$A<$TGUo7F|8qvetgOgwcYIn>Z92xjq||<;>hO zQrZx{sxc^h_t*!ym+f^;e&_uDx$({J`@!O1aPuTy7acSq^?<2x#s|EnR5ujgWEiO!LvNhHud7oiFz< z?VnSOGX@pa%bpcKomXLgvT_iv%R3vXvwlN$gLE%X1y+(f-S}2+GI~^F3x|m8!+@VX zvw!N8jO6frC_6BcP)W$(zOXn%YqS2cMba;f z08B1%WK+egPeBdrq?!{V9QuK89_W0(2sWGKx`w_~vitw^tTWfcRZCtei6;R&fb~$v zs1~####JwjaGP1h#~dp4^jbeKMp1xnCA}g+O8Zq#7t19K6X=B6SzvmA6tqh_vL|SP zWFwam<6m(e*1d@r)t-DrO$BwJA=iVsb@a)8i1*b+j@ZTR6Z$`X?mw2yi>V729FQ+x zP~pCO;rT!Lx&J*$Q`_88&(O}w5K!^7{|Z$6g{55z6jv- z9j3LSb*kq@t&|N+O{`(?1tfBaap*!&_p&%J@g9uUKe9UlG*C4x&>B}K zv?XbEKjyjRo8n&cf30Wwl1K02OeZeb>6>U@6zT;@#P-xt_xduCFO)UH&lLU|NYRm%?9Kv-yt_1fjm=zxXa!aXFc zKF(X1*&holX`XVRZo08gSjQBNih{*M{dLC8#E!Snba98f%gd$1)7zOn!Tnw*b6+09 z4iDA9s1mlUg2N&}8P@24;7WZ!Wn0B9zzU8MO0<+LUQFwIB}WqL17;$x{~AY`bEk>N z-jB>Lo@i)jotEjr+doeQFAMm_V2ym_y3SMePzVx&0OLKeF;oU{eJAXG9&~mf!k5bt zP+%&}XZH;H$lA+-agrOtrw)L5LtA-zN2qcuAm9`4U1~>)Q^r9=_x1~I=iPyF#$m3< z#=`x<`}w+LEFgcRudPjsFW-BJFIn|lcflv1tRzIs_R3{)SKGACG;TT{jE2IIxnm-m zS@AvjFp8Q?+)8F9VjEb>iZ{ts7$a3H#}c6ZR3<3S4tmBD(!&-M%gSl` z#56&(ag7RLe}|p;4Q}xjmdC(>EYjYcX_A&&r;X95dcM3o46{Fh?Kz4q9_+FODe`~oaHby8Jfw(`SrELrzK&!I5{xP|QzKVoibb z7J&{Q^81bmCldPDs4v8k{A_;Oi0}J^pUs$uF`;9T<1-UF|8@guK(?tc@2hwFr%bcE z_7!btsn@iJS;jC*_BxqJB?CR>iM=B@-}LQC+>0^N=C5%DDDY%S8OGlNGPd4=AfVHs z_`6_KID=03Hk%!adHpaJ1HY>MQQMAG@5~BTuit*Z)W1B?-JKcFbJLn<7lNGOR>)0v z@VQSx!4&otU&vY^*Lj6QWVjDzT?E!{%+N|L%;TH`Q&pq9$ zB?~Rz2_1s7w9+P%lY{qhW_0uVTxWw(KRVOID}Rtk(tmG=Hvqo`vvowOWunT+{065n z*pM70Br>d}yWNzM^Cg$pj;wrclht?xyzaP@gwF!vXnuHGZCCsr{g+I@9nw6ccWfxa zVMrKB>RPI}V4AhPS(3~HbuOt)sW=p6us2HbAk-_j9UsBejxCt#kW;YmYZ|bXo6qdK z0W0-);pBzmc75MR)NNX>YT||r&Z;!_G`S=GIS8&_i}pM`uO2j2#ZS;qDi#YrEzwjT z|5LrrA{$@H25gNHP+z_<{-4xqOKSr|i@)!ZKc}tN=#jgQs$JyaK|}3U4bv9B<}U^; zn4#RWNF~|g?l7;!UeMQdd(pvx1%nji*b#0=KUs872XG*;Cz`#hv@G^7@5AA8UkD5q zvC~CrSYyKsAZQiRubn0mZS1evkTqiV6OZ?VQ=>PSIHg35z7m2`hEpI@3VpTmzh-xb zzeYz583u25#!p<{7yjhi?J>E~DTGxTGee;`c2#$lx_rBp4`8M&D3r}N#GtXI$LlMw zaf@17?89r6O*eC#hgCLjs5u~k(0V@Q$5Lq2`W19lz|x}xM_Q5K2@G0p6MfCwr?fMhT!uCJ ztfD$hs%aHRRlPHNK#tc7#w?9{Sk!pMf!nQ(gcS4y^X7PxmlwY9>Z2E5H`jhM=v$Eu05s9E+vvw1x|c}%UIbm7`OKZ+ zv{NA?1rOuc>QQo$jm0c@gNTv*!Ab1mX=sxbD{DKr&zpgFe-v?hY}cTn?)ap#dGDaW z{HLF=cuN${#8o?exHkTa?HBHfyMgLY;-73kZv)`t0~oRlBYKJ6ZtGs}&Rlue`@h

4OLf9N*^x0^yG1@+&DtXglO();gI7nFsJg6 zsrU z8Ne;Lu5Duy%zeOQ)hmbboxwOqj&2qvhh3I)T_6`=Gi-&?UFLpQyNl0|1f}3G;}o+} zuHA#fUH>75s0wAS`>~9)WmdfLk%EQu8DR{0&4>b%0CJcI#;OoX!XWv%uuX!Sq}01W_AqxakG)`&S^V&CCdeJ>YqG5&jt(B>AZ)qAAZ_@7K}zuSVQb(Iv@cjX z|5b+gpjtVNUP6%OkQvN*b6s(Yin9lQy$M3YJ%qOd7%lgRnBH3-eU9>3q|`tvUmVd( zmD#zybtNmQxrjvSR@WwqoYIg%g2=F4OFSOA(f}*qgIIsmVIuw4jx_4qT_AXlcM4QS6Pm3k@(Bp@+B{QeDt)JB&wsd?X1d=)SdS77^YtsFgY`ib<=R?wj3K_#Vr!xy27 zngg1ipOje0L_ez1DrSYq=>*7S36lFlmtNx$Md0;Sew5?Qtbn zTGIc^M1*>Jg2BZ_+Ul99OEQj;$P|sK@|`PP7a9t#QAe%%D3zDp?{d!rpdwU?{I>eV zE^b(VVf~;^6>b=>h(e^`Fupr_%1?NQt-E<+))nq;Jf^oVFVWNQA+83wc>b5rVbzXG z9O3nq#N(ctVGcwnX+Sm{GCI+3LN_cEl6UQ*3Kt2?{$5H_pzmdGMHAair=--<(Tn&| z)LXko=c7r(8G+$ns&*PnGqQ6hg6v&z5W^;{vB0V9Tv9p+Je;}vo)_?RJq)jO;4E|d z)Z)x9_2ff;TU5#%mvW~$qz0e6xHJKH^2_-;(;pS@&m$f1xO-m0*!~tn{E;Ra7u)+i zyXW9wURqXni2fbyNo}`7LPsN#iQQgGs>goVmTWP!!xjVK)vv`8I2vV4>3GH#qflgVYNpF^4bi;Roo^aO7%DNqVkn7NX~N{M;1cA@Oo4vIihf#h zEnRLUO++ol4O+)|nCQ(Z8e!e0d3;d0x&*}E4dDVIG^#U~W~t1z#C65kgcM|FJIZ15uq7O~K#xefTlYjHvpO6?@Yx2nYfVWdag}A2O;&f*>ISimwM|I@tmx@!{1~ zu#g0Xk>^C!%A>uku0^0JmJm$E;zZJh&{gF|Ko+YQZZUB;J~UgoFeBq4$OE(NqPS-q zl2F7IT-SiJq(pqY$;il@nOK(xZ`L5(6vOy_?dQb~dJ@IOx(4|Y#`*26qT0oxsiIgT z!MY#VAqs}mw8lWVs>xY}%EpQ*D3Y8!0bdm;>coRPr|=yK#xVfO%8Cdkn)VCQA2JfGO4V<3|-2XphU|`kG+{CLJ@-?9UT!h&G2H z6EW@aG;_N;yOD&p-@p>m!GaEqKr<+^K#s=aSQ>^kRm_q?^e+XCt_=_k;pU$Yrj&SBJ>_m}V|W|Od3)Z^HkS#R#0_Ha zp{#3U^-0wV6XZ{wQRoibrLMw7<0ewcUAVQN)HSLGPKxA9fTfJrhDQ z*4{_v|Wc@Hvz2QjI&7-JW*aXQNEoQl<_+BNK=kE>h6;2|P2`p{%_W&D-fct+bI zH`w{B_Gf4Ab$;Ua0{uJwr^HZi^euD+4*4OvwV3uztQUU74JyP)+#id(xGR_AafzMe z(-liniKQA3c-sx^v9|TKJjYcujD6y$;h>4+OqNCkX?5(-_Vuw4sY?O+Yelw;lkZ@t z^LT9b@wOGIuCHDttUVS9qo>%kscFd}!^mrP8PbyCW?7v1w(JYG7?Mp4FmS(hEXuxG z`jT#Okf@5!DT~~E7)~XdAU3r!&VrR|Pky1j# zUK_=rW&pLUh;#?SM*2m!3FaClL-f>cLUQ-^)$j2d|J9OlvrX|!38%zxAY~ZXV9Pec)Wlw#nusT2)!L%0oImeDw2n*r7Y!f zH;6RJvu^X7esyqV?hd`j9n^L(yjJULj}rVwFh>#3MQ7KRQ>{!{G2BzA3meZDPl~%V zlP9o(n>2tMKC;xe+laXo$uXi*XCr-|WUUJP+OaR$r5(3#FInD))g1ma0+?wA1;CPCRadZ-WJ~vfd#ETtHmpbW1uZ3vQ?Y_S9c8@y$6vA91kD^az=kK z8*o)b(qV z0hOddjnH?UaAUJ7=mG{8VL0&hg7?J7bmVQI4+vu~hiO1kNsz&B+3`G01H=_k*B?_A zigm1=D0Kc6gIeAAa<&cP4beBKqb+h*BuUqS0DP0I*DybwuuL3sH9eU9q1n8QMGbu%tVC9~c zKP=O-(FmR}17TVcZr5D1di zylfvRNUSi@EJ!1e1xL#==c!S(`Y4UacYhW4qxi&0e9Fhd*n8pSN|n*^AAk!C?b~r3 zIf$D5{!H5Aq@n$lWBSf5^s5{oMO|Zghe~Q`HdZTG&4e{9QldIROe(i;-~FJ;So(yA zf?J+>3^w@d#}(+t6IqhbY*#=g&PYz9XFt-c++pl(*LP2dyrj;e*6si$D$hf(PEg&6 zo>?*7{cz;%h#_P%pLa{R-DWVpR687FrblkzGx zDngQ>NsCJ$@0WzN{oO4nMA-U1LlAb|6xuD;4+{46(}_&GKv~M)D;qJowTcRXgVo#h zl6Fal&#P5^<8E|Yf{sKdwcW5g9e}1OuqZrPTx#=BwGYA1U5>ASTfL)08Ga0Q+@}TD z7u+uGwxLdP)ZxyuvY&5@Tf1zN8}`rLiNCJ3yh!inc$D0n5xuEP7Z>Y`QR{a8RBL^3 zGpnUMvT=QBL2Iaef5psdPrCYbzhTb_uKivwYg#P+0W-6}x?<9N&^Ry@Z69En&q1gW?B>ZQq*9ee8{>oknx!)-e^~42s;GF>y z@O4CA(^=-NJr*pdaZSjWplPzkBUz1_XFe_*C#iXR27LCRMmVp}&Jf5W{A zE;TgYY@(SMW#@V%w{TR-S$^8Io-8cFZ8v|8TIC>K6G-sEJxc`fe$FxoOnaGP>UjjX zi~1*K9*Pk~S=FWm!}Bu4LN};-|FRViaOa9V$v9%Vz(&rzC2HIQsa2I=2P!#^gEdp1 zNmR&d02A+zw$`must|7f!9-1)X{k|MNPhY@i(D2*g~y+-Yc>C1ViSOga2)@^M2ok7 zFfp4vx(YNDs+FTUK*=RfpEW8d7l9CIAAzMo35k$hR4RtKeSA=4*L zC(K*q;O$VID!><+Rbb|sfy4&4LEuGP2!rVFx$W?8vs>aIgePX-yZ7I%5+nLpl< zY3@uG`U0%>W|qoOKE9m(g|BrpmFAsnkVwgYqXzrB8qH?gk~%!k6Ov;+o=?9$h%7IE zBKEfGA4JUjLqtO&&qKFPHUJS#6wqG?2bJ>~0-*w%awg?M>xNa?=#2AlL%J})>=tzC z#NkY;^=4zIwNE7(p92C-#L=jJ9r%q>m;q-t&MxoZs*lMrp{5JV{;uG_S zYk>FU$-M)0C}_p9I90Qj3{BD?Htmsa?J}M6v^6arykCN-cZJ9OKLL za|_4?rha>S&&5Ts1!VJ;Q-HNO4{v{o=ODlHxf^oa)0aRtK!s{@p`kP?-Ajcz&j#p`bGpI?ON-;bjys#f`eKBaMZ;|Kz+Q_;ZOD zc%R)d810jSR1sSM<|tu49XLbr(}Ck`F`13y#<{9|n_^h1Bo2BxU!)CqHDnZ7^K+k) z^*O%#IQBzPx@i(Hw)Z6*r+PQFbqT`7X;mM66i{Ks9Z?=`U#$Mt~#j2YA zG>VC}LFHxFE6wIDatp4ItieYvNa53-p6Ib*pO^ZuwQfpTqgAGLJby3Teq(_P&;WTZ z5pcc!zr~7!zR4e~$p8D%=~ajAucK27uX>J^KT~ra0=XSYeXOXj28ko=XQ#wmQ$o)0 zHNNlu#Q6m65q{-dQ7cwS*L%$5?&BtExTU4HP1`Ecz8xe7P3A)rDYtW{qhA9vsKpv8 z;fTLL^d*K;??$y+-c5-PJrvFiuI|&pjh#jh{J>ez2Z9L_LuY-r9O4giNV7AQQYmub z>n;hUde??x1WcxppDnVEDJm0qNi`TF+&RS{ZwWq2pw8=^^ssKn13(4nd2J0-fpaLA zgY`{t0dm)QY+8XcYD=?@_vHQ=kJNkDYF#edhsKTdI1X9r;-Jn-;XgkkSNWVbJp6Fl zP3o!RE3dPNF#8YXEZ2LH+T8imL20iMq88Qs2W{4M&u4@7O?F`a#|WED_`I1x#9~p$=t)54hQ@KRfru`w;pkp& z-2_+D1C*6jmR5lIn`@lzi|@njr*vlebcLZUO6!~m%h#}&!1mGd{ z)&%8I#2dW7L#>q5HVqK~wFCgvg#VXi2>`W!(}Lxt!T~4sKW2_m0=ysG$-GbmflV_F z<4)Fv=t7trr)zPsL+w%mAMPUZi0w0br#eI@lkV1ACQx&fmZwrOi>I0_fs5%hr0c7f z`wpJODdV8$jSfreVb2?mOOSI*$TgOjA^7lcTy1EIpvzvfh>;?oopQ%MQ4p`wGR=Fy zT|`@~_vyUpAtxE{fpI;m60(3~5h;EKzb8xi$)edT{*qaIb=};4Qv=(N79UHQ$8TID zJHsFiv@Pp6fu*woRMPlDc&mkuw4!*|x7&0rTu4( zb8%iSc5K&2M=cpgV*>@Ta(FWm#qiYWa~|*jIYkN^jBvn~cnVOlRE;d^SwKOb_UKA9B;x zOK>Z~nC-RAo|Le+wkB%F;RK>2kVFTM*ki)8jqZbE(i~YX_FU1OL1t zz^=S<@|d1^@x}w64jDxo)I5`BRAkJ77{eBSes^bh-Z`5s`2hYq>hx)vDM7%$e8~rh zs=WU@)ctk$pkiqaFb{oPYTJtP{Gh-#><`PMj{!=3^~;e!B{uDb@#mFjm=q#ainBWf zUA5khU4W(-tz&G!!;JN~Y(?A3l=cD*6~)lbLUXhIZFLVN?Y+W7oF3{ywQ5(m`-9Dw zDoHeVfPb%RB9J%@61P_<$rqF&Mp3Rc*EFE6yFS29NP*l%oa7iKuzdX0jKhyZ{4DUJ z%GWl0wD38d6te&U6P2G(;ZQcD=V8qhr?c*`5IHG9fe934vNg7sz1r44s4-a zzT*IWaImwt6}Gm1k5U$yDVK*qBtwg&zNCtcm|%oKjYS5TZi)%-7%59h4_Pr!j>p%t z7!4F0*$cCi2ndrb%cB(QMscAl1WxB|>4#w_i>sh88*b;Lf|1LIwHFjkm+Gra?MC}V zj!TkMXd*yVVGoQJ3UczI5*Z<#HtFA_!hW(|kW?BAGSE>G?u0s4#S9JqpNw^d) zuY}@4fRWD08^%;+)eWt2m{iLs6iv;Nry@$@YlkT$?z72%FwA+s{7MzIu%}0+O(#6t ziwm1SoiHFWs=cCpOomm;$_gqr#M2^Jmb6}nDto7l;YwVnSth3K`9w_bK08noDZkLD zyU$Hg7_9|SY#0)bFD=oWNhS%j#tKS1`$2cOLbC_n7Kud3e8}C#@9FMM6xQYWH6fk! zzf)Ifm;mZ3@88r_tN*FG>i93}Dx7=l2Q9~5TRzUV6xW(Dt9DPuc~ee@s_{?`Xjjk- zu(PV8O;->=FCu`RlCnnoBm$=S_&K}kWF{TM{d0|UB(fRY>8htZdPkUi@Y)g#D-MN) z<68>h(Q}n3qIfO&5E8mKF}1x6V;_=PHqPRTveg&uTjcdXcdzJ?Qw$Eg$=SHtP4u&G9f(Y#f0_S$t+d$$LWnxS&o3ehcn$2Vq zDtEao)yi~Ah1OG^E>lOsJtKYZ8BKMgfJACkXi7PgwFyyXLr2s@BcgBLDw(Sp#_EZ?}9^YlHeOAfi7uhtvGt+&Grf4`YWM`l#b-j%kI*}bVq+cDP|8d+| zTME|!S=LJ6Kjfm9qzA;LfL%ep=5LQNdo4OKkuB@tTciX2Q{8{db7|;mZd2dL=ev;n zN@)(RQYU*ex=jjx*{1R}??LjY?2=_BrsLpet%|{q(-Z;sctwBQj@_Tw3mi_*<`SN5#_J+Lo1#sW+7CzR&OW0 zN`npXtW34%@fT6(?pzkIpuxN8%Fo;$*JGRDRc<@n8xp_gx6aNi(OwJOPHnP7lJCCG z9DT12b+YEgtQOl!UrWJ!UIv8S5_g%v|bi)d6S2_HoDl&mfdmf zsMioLb+hJGkmYW?I>;hxK0`8k%fqBX*+DjB$Lkk15VEQmFmB6qeFn;RUeHhO1WFRP z(wTWRYZ^DzT@Fc8jS&e^aE8|{FL6egLTF5`QGeh7cJpc86mtUC-NIE4R(bzs53cyTg~w?z0a@w6U5>v_&KBc} zlX?8qVyNww&eVpMCgaj}J>WZnF59?zF{6+HD6lTXcBRrg_saC@^X!OaJzsE}vCcpu zSjprrG8)I)xLn>~X~IMvhDTg+0ubnt5s)$2;X>Ow(FY^*0V1phIImRyIVfNW zXtSN%0gkK!xjXB>Ia^MCn)FBix?4I3-YKiRUweu3nv264;fTHFY~E30S!{7>$e zq0LdIJwUs80yx)6{$K5||1Xm+z!T&6kGI7QDoXu%!6V>whcHS4w3HDH#ATq$ifrDL zdomSBI2*;H&P2{u{`qbq_wprd6KVo2-eWo%FOL&kVk-F1N%Udz)eMf+`Y~iB=y$BA zy=YC1#ERQEa;Y@pQPv8vj4tR|Q=nv64|;6$@z2`}|7LVTc62|1AP3%+EuPFisuhB) z%=@^W;E9t|uUx4fK}a(_IkQ9(m>Z5swMlzdxZGYJ`7q+OXk`*w+~gWuL@qr^@wYs| zU!`r6y#ZiE4n`p6K^0b^uHv1;{%me~^u4`!bQc%j)DUsBk1#KYkMc+8v*xR}oSu~? z7l49tziyA#AZ>(dDkWMI$E1PH#2zfEQm+QT)|86elekjtZc(@^BOEeK<^I^?HI!p(rn{Qc*&cr% zNhW-9u|>I(q=#)Y)zpP8b3gQzzU zK$Fl00Mq~ExMpZ)XKkmgYhYmN0I*-`T4D{>a32A=Ush)|7ut#0 zAl<29EKg)~v@Q=ITu5&ej5w89C2YBSc>F>ZFKe*;*;#$XL!!{~Swo};zks94$^l<* z2ZyEkovo~M!(ODKgEYN&4Lt-OJOa)&T8VU{x=rw`#&7HA$c{5a`tZdIyZ=>){;s$C z42vFnQMQVk4k0{qEqN*s2}J37uKD-KN6G*&nlKboMQl3isjS1AOD?Y5yRX;dUx?u@ zah=9kj&qbm$d&LGCG_Abp*Ko9Nx=-MewbiX^U@Quw?*NO;}>U+&_`X=N5k@zrmC4_ z3Z62GDN*Hr4y^JuBX$Kxw$O{kB?z;DXQzfPD;0hfOcfb5L;ZGV2y90hKl-yG9Q#2d z55`K#pGFNHy(CB23Wi;R@FF;FDloPHnJ9)?63WV-pVebU#~OEF9{ZWQ1mjS71u5Vh?R8UtCp`(VKw?k8el{( zT8LFa0m|2iSAAk%=`{N!#!AX!e2~>IZyaxeAnQJRJF?WsuT;@GhdY!udD=Mj@!=oz zI%Ett?u~|#xR=nLbqDU(cmtXDTbtI7UM6x&(QKTbJY+Xo=FSHwRi^bxVYXx|Dz%JgD|-o0u=}V!ukLR6Z{{PtN#*V|K5c5My>s2 z*t3DCz(0Zt6*o~*qDsVVDp?*Oj^C-;6B~w0sCwMyaKeYCYASxP9J1bWzdL6@Ry0$m z|6uw5ri+Yllni<}2w{RQ__dV61qLGTl^^qU#Kr`NyQ9JsO z-{GrD5$d&x@=lpBt%W$|=0`y%3|5xa@|^+olb7hSfMt@{o);q?RQ?lXCZ!h>e^BOO zpQSliX#N+WF2j2W>jV&bl&z>?VdqAvWgNR z>vYEx=bh0neNjhJCEKNyw|fN#m}0!g+Lgd6XX5b4K-V@O^MAPAu#45=Yvjw(r^XRE zN516pt?8jMK9x(#VNB%6{lo3{uxN=EwacOBUDHh?dceSZlAWT4UrDo{rc!Dl7qMf% zxP^)Hdiy;97{!jlL#_@h;YYV>kE{LzEap0JcLT3fRa8;6 zNqy+gk_9J-l`#h!#;D~G&wm=rgSgp3g1eU=x2br3Lh*4@2mv`tt^R7uQmd{f><@bd z2P2TGdD9=pY)73#C=wga?(@>Nod=WSYm*%Q zM?bT>Q`6ThK&Kh`V_P3~`)Qb;>o)ZJY~Xs=D6siK>*0GzqdLBNL*hW0i;+eSI+C2S zrg`v+SWQb*rF1$QZ>6uQ!-9*Wxdk&H^ThD)<4ny&@}Ba4UD~wSHVU?YV%KYc{~VKg zG-PRF?8jcJptx}3VpTbm_`&AtvL7Vr691MzyC8bU=O|&bBDA64K9|++v%=G5d@V(V zP3AXUeW=EvEd@HSH7Uh;O7HzILvVlWYNYF3@{s^|djjCi@qY>Lf2*GWh_C-;=(G{_ z^P5&8rX)~P5-kJ|bK@gdTh})pUpt$s68H*$_^Rf5ttNh1fHlY6R(dLHJhng?qbiDV zgky6_u1?=$1GN(|r4J+cIWIDo2$5R{0%1FbLQ=)cTZGZNsp{ zUYImW0pNDNmbQ+QJ_ZkwbG*l9P*qoeqm%649G&t&gAiWHxn>UM>*EMe6*20&{G(Pg zzuw${jv^PAO)S26K>{G&9v)c&#UvYsQ;>H9aCF)g{sr;8u^ql!7f8Q30K~Wd3GptE zx2{7Gwi870{-m`O%|!lD5gv|_xXI@KhqHG8j{M!WhGW~dt%)bj#F=~X%?Ti7r056rc3h3-ax#}M(PSzB365SA3Edg$O!{eDYfRC`3cn~H3Z zvls#rRA)%s_<--m!`8y6?ube=ORN0bHN+94x%F4Z$uVQ+>0l*7;S>yO3evnwvuoM8 z!z@Qhv~w%Jo~p0;_I!Zj5eh}J-X@(VJR+r%norItECC1~9qrxw)uT9dV6)%IuF*3a zA!m5*`DiB$&&T+X;>;DIs|On*SFs$Tiz>G6%io0h4}?=6{|Igu6GONlcNtr67BCen z+!*&Mw4GAA{*^9#q8#D5rq33D@>Rg95U&3ic_rYrN$@+DGK3Zn4Hb#~MisX*PTOwZc|Fx&^Q&V7 zSbgZN;-}^s{+z`wmzG>u&LEeqARixOhe=Wf2j2CaBL1pdNcK=9QDc`PxM(QeP2PL_ z>3!js)ZQAdzyZ!(e21X027W(>@-zdT^xUHgvSwKQ#U2pBYkLi@vzhN42chA& zRJFY-p5$d4gI7We%KMe`Xm8NY5ehMGuvKz%x&5~c!YV?Vfo}p@I?QTp=Fwvxu|>@a zeg#ycx~TgZ;0+sxLmB?c$OshPn6NF)Me3?{qTjnZ9D9JOcdhq4h7yFb5-Yh?=V*=T zWc1PD(WP}gH_gIZVllL$!Mt{OqJ*yxP$(kmWQ;`BHvyMdc0TdH<48`s!-e*%B!vI6 zYN1u1=C}rmY0H@E6(#fPSVGX(h5x=5v*&bwJl}WOE+F&XFDR^l&sD^@eTQkM?#;w6;9uY z(`ohZ16%jjWpkQ8oj<%=WIe;9pSd8TGfSA=q&>z_e2-s~3q|Z#MiF*`J#F$s>eeRJ7w&nK+qZzDH}MY%#t0YZ6!=A+al|b*I;QKkmK} z>>3?6dk{8z`esH;>%Xr*eW>xf-&8_o#dNm3$&vqeZLxp|l#~+y#_IqW|9@Bn{QDr= zKSr|tp7s6{#{Vzj`e#6ICaqKn8nAh+WQngwedEwQ#;V15l%MZmlZ!Jx5A;;#l2mP- z&3d~R>xsdzrS*#avV+|-Id|~vcL0=)+u&1c^?%lJX{JV$*MUoAa7(2{TA`O8;U``qBoLjkYnDZ(`W3T%rb;ffka!;Icy0CgoIal|sH;>vBBS#+crGU5DTh=;bO<{qFoP!90$bBfe^rq~T=Qni<4F zltcCqG15gTWOG{HLMR;8?}qJg<$U1d`s zK%DT576=zBJIF)|oVrhtsB$WkI(j)?EC6lvKgetx@uL@8D0C+7it(8d;GuDX*>3yI zN$jkGu zRzA}k5Z)0@nGD5e1}Px(OY@eqg%DH+<_Yyz??Gn=#}j_YHrc0xespOE7!`tqW~MZz zxJiVzl$}Q)u$GmL89vMMxKB90??PYf?HyP95n^?OXiH1$yH?YNzMI_aj`MVV2tM!M z8zdew{(D&dDxVJUqW}UT1mKzNKM2b!p67EKkz6}d80tis}GYC>W9a+kLgL=?C3F4c$fiG?2SL)p^{Uw)O zU#a4m@RzexU5PBdDkY^zAX0s^T|-c;8zrj}0o)x*Z3(*hkl4Lf`#N3T1OFoQC4|f_ zC_ZnDE&K*qahelDT!WcJ6*W;4%VPwcPrW5k(}5?bu`jPYqbkC^mlAA?!?@1=T28Vm zbi%2?$f-=;;4Zr^*nrm=;-QjLM@L)lh|uZG$ve!u#;AgQ+0xv+RK2NT0mriw0fV1$ zaG>hb2I^sntOoKC!%M!H5k>}P;fVO_%%3k9x1#8wU{8&$lsyUSdM;Z+1VQGHL`=qH z6%srgsERoybcChdU9L;{!|ZJ6cVaP?!)g5Wv*j*$B_bbLcSKO!_@~ak*lss&Yz3M{ zv*jwHl_ocJ>J9OA+SBbMob`pn1F`_tiIR_KPlUkS3Ju0IK1yXi*=rHpJZJsuYrRA6 zZ~V>c=Z{Cfdrsg_XSI0iiaiD=Oaf~o>>O%xd_(qNjpwcim-I47Iw%t%qgPd&tKi)G zmw4x-Qbdbt_79D#;PEx0eo$(Cv}XQ-rK#~hQ^DSAT5S>5qTf0`zLHQl8{CsFLrF2> zlcy&p!PGa;P}kgKbrF!vFFCkQ|!5@3SkKbhY6FGT7X znmO27>bZR)GwyF)tKbW7m|QM0YRxQ2(64CJOmM2~L?>V63|CYvq#(#CN5eW_sCXLD zNe@d}u?ipG$b8I!XAC7Vqbo)UJ4In#A8Y&cac46m&CL84Xm z!Z5k?S^E)*q2+-sCf-WOPd#uD|D7)!>j37Hfd{Gb`lwR$q4BDj*o>u1@((kC08lU#8jy ztHhZ|^yQQiYRZ zyfC0^ef>#k%|x*~xJ3D9$s08bF?Cx>gsawyglBwUg zs+$XN?e{feAE5sVmY>j+Y2jR#`wW%9VPlWS_ zcuDlj8O}s*a3W zI$_TG?|dAuRFsN>MqCQXwxyB@$2vSb#bJFe)drYGXri@f3%yl1Z9%-$8p+$OraFwX zP>=4euCB%#`%B+WV0xbP&zcI{EWF8PXXA^F@*9ZcpR6*_s~7>&uha)5rQmW@vwCB_ zu|^{U{J1l+KMe?13-VOsYcj$pit7`R2poK;HW$7{9cYpmiqU)?RbZNzSzyM3eew^L zTLRyQs=E~x&M9lL81nH3yK8c~^5P}3ai=Z@t7Zy-0V%DJBdA2_heLL9*FpAsbe;@6eoV6SViO$i_z(Tn9NBlAl#I z*&O1Uf0`-g0WOkK{&=6JB*ul`Wqe^oJ8~*lxP~OM^r%<=s@m^u_#GH@GKla%===2A znP3|R=&d_Q-cY_Zue_z!mS9#n^*JeElTa0H zeNe=urmn>{x*4c12r$iDt9&8@OKm(TQ?lyDt4W#F{u)*aGqkR~628pj0 zi|+Y&-{bx}HeM=lj6?vDj1rLcasJ<7%YLt?)N6J2{ zs}h%*iPWT*IlV+xIdb(J&NDG&Ac9#y(B|4Cjo41LuPzMP<(J-_zUL*3OME-JR~y9N zx2*KbSt%ZX%r7AcO9D}mx5tUKnqsk|9VAC6fG#Ms_FQ`V)(m2F^9+@nAI=*Of?m|A zOg#+-pRG1PGnn9OlSnLgpSpDdc}$^ig}w*2e`7@6Z*2pDtpo$C-dOE+t49fmM!!M3 zd~HAgGrybhfSk8|Bp^@=l8qxpnO>HXrx@v4G_~h`qk*BGEP!C`eJ$#3Repn|ofnAny9rs4eMQn5 zNUm4<-S^*%aU1B3SBW^@71NVy5SS@D?}Se%P@;-owCA+GmAVq_g;IPw>p$G6 zu;UXSAaNM$gJJ#nj>}7wi+Yb!!{CE=OYrgbmuscZsHG?IoR$wjrZV7+{ZINtw)Qrz z|A+a*KPMglRmrcvRVAxoK%;W?fU1OKHcCaqo|@W9Wp_htB+3F&)TM-xy^C#aCo4ngdZh%{Dt^5{A^}K|CysLpR5}ugqFx-IJzlVJ}+hY5jNb z9MjA{{>VUM?@N|#TG`@*(S5k~G9WJqh5H|g6eLBXt1eCn-*ENGf?w09=!xqfDWb~F z2k8S1J#*i3M)0cS;%vP^3Ru^I7<>NAD$0pJ0#AnZPx#LGQnb_Di5#mbG9-3q_ili9 z@G`t}3L$&iE7TKZ)|+^^aWm5~gR;9p=?YH z0h=}t4^F8$T88qKycIvEI)x^<7%eW-BPyEuw z&%pb0VMr6PD|S_@l5-cwuKh7MxoSh)`__XOH0IOH??4+R7FW#Pgc~$_9t7KE&V(6 z|Cw9?cTZ2x z1bg6_UCHDh>*%wSBLHs)OXlSUv-|wt6#=n$eUgCc2QBKMgqbXZg*!-8SrAN(s9v0B zOmX5Z2T=WRx&9&rOx~3zo$NTnApZ2))W!ptpTMW;{LTF2bKa)`P?l>pDaVIXF^W-r z&ie?ZzlHWszhPmlr+U;^g0I&L2n(*=sT`uv&*>v7JPtF!%TsmqR4h>o6FDMGhOMp= zeNNsXfB7x&Iq!47Hyiyq?=u%un>QHWU%u=EqFi@^aNgDd-~jpGIPkJ_e)!0oN!e|| zgw=n;M=!Jeo`%a+D?E;`9Al7E5AzOjAlSX#M0tv;M_y0mmL#*Am&rIquVsR5Vt7O((L+XB!40Top{-KF<2C_VW zKJ_ES(Md|R^1)QVsrrSVQD%;gr+lSs1(|Z@s_WLyY71Uf0ii9Nh2N3lbs%olyjYGgp3Y6coF8mDQ-{!!zLg%v?HIAq^Ki`V8L=_w zBKfo?loV8yZbTZc%n{DG{g69JG+S=T>36So)7rVAkW4< z1q6Yz3<{e4U@alVd77o6SQl*Z!k#PN#qo| zx@kWG%$C7JFH+F71>mZe1x!fFRfWzbQV#b#@Aq&G)LFtFd*IvStHb!DBnv!S61@{w zTd7EecAm2weENlM58W}{XqdVxZ27D!jV;>jjvB-(JVbyn-=zNj3LAVA75c(VE!LI* zQZ2%PL|w=l{pH*O*yN}#C=Zj*9UKo^cm;+~c$iI6YyR1{R}5)qt-6++y6HOv_1WiV zTd^D;P1Lju&T<;7pTv{6b2YJ|_$s(y(XQ7$A#A#Zjs5~70281uEHB)VmtNOV}UHifo3qD*k*&{K8@AIeI{O^~=h5w>y(jEf2gw0tq+^J5Q`TRWUJ`F9F8YhVWa2Dc2&CW=_4C3n2kY0N~Hn5xON( z@!e7JzM`+AK)we{BA8sVlcBMk!b3`3H)pkz`cHi5_0AzOy+j4tM$M%)RN_o$?p^)N zVH1h(Jc*fyn`Akj`V9VcCzs58(HAL_bb1X6>Mir;hBXY7fWgp5y5ib3p6IH9Ch@#J z*k1xbQ8%5HRj!P>0+nR6U933YXYIBo@cS*!5dNy+`b>q6%*abx03-+mkl;VjJ^Ygd z|2zo*MEFZ0lmSSDK>e+0Vdw^?Ale|pWO&rAMhf!l&0>83qo39+U~2`PWcdVygjvO~ z!;TEfZhMx@Z*iL4x3hc{Z42X>hAj)UI7|10`9b z>HG)BW+nRA0=-^76Cs$HFLMCR12sVNK(5nwN@M}hJj5w0NyHf@GC{b?o>BG5i$@jDE7e3G6t4qUq;_*jNGob4X0{sU*9hN*1;>` zpvxPOgQ+N#g@m>1f)jmO9XG*r^7H2b;Fh+fCQ8rUPq^vfM9e5`Z~^&Iv7CIXVNNe3t-04=wx9_QWc zdj-)Xdt1$tFq|LC+Zod!pz9E-^*m(c^3SV0qtCdfoC?iE!EQGD&?#lA^ zc1L%c+p`1|>7}&`ELuo#xx{0J`HAw-cACkOuyLiAdT~ZmWY|-ta{PLytoJJ4RIws* zX!Pd~UBB|wzpfFmL9KnM8@YzzZad$7XjzQNajOVMFu*CX^M1uT?F7BE(p zt(+%}fT~vjlPXB1wo}XKIhj+wn<%^24@5T}uCUFi{$o+&!{civc#Hwx(tp7qZ??K- zNneYOBQ6RZOGR@pZe}GF(u{$qV1}dy7ag}31Qn`J&{FS(NgENyv6RVawVM<;k@ zmZF7vmevPIyFG$AoReJfGD-$AU$(IY9&rff>R7=I5?o%Ko?1qc=|>4i0S=YNdLZhb zY~0*sanw)>d=gUFEyeZiJ(1#rew^Tf~zXH?HGH{giPv~$UONcbuwWhy;~(mbdqzDuDpeK$;C{5yLLxdOxWUTQL4m9P<3C*^5riV+;wmqjm>{qMb#|wf)Xly`zhZ3d-=S9a8 z8KXd&BYfgW!PJqke zT6|~$)}-LtKg2iH1KU=|T{U}6`YoF;KD$$yV?KYY&dr6(=g84Wm)47l>%vn2gWB2O zWP?D@qTM=$U1w|jvAO%hFSPlpRd~s-9l{D88 za#+jrj#KjB?0?t7=^^O6FYiy9vv^Ro0Lt@STaWYRfR~=kapPLlh2G#m&u(*God_R> zMb=FlzAVI_()1?Nbz4HU&zZEx*}dv!=+C&^lY4!4h~HCEZ7J(bdzm05OrDG9xBQOO z&T5ovgH%+hGE6OzajCNpBO+#LgV8#n6!aIbu)xHaTX}?R+&3a;;X0yVMMvw@ioXH; zN)5ufVE`pMiY;8PO(rED*w3;NN}6mBLH%fi(4uoItQ#^Mo2;DXB8t+W4b|7|dKEw$ ztMrTKCH}$Fc)09*SZd4hs!NT9^~@s5x=%Ou%D;(B(2EfC;1?%7@Wv7bx$Sb>6lUH=`;Byce$5OGz@wO@|5h~!*f+lovf8E3 zOd4fe1U@61sGCS3+?cG_T?J)SN=#VqRXj%a2`UZy!iyf53&Rl@3Gc>BpM|W4(A5`s z+10mul4@HrQkv|aQSOZDmWPF(o=<5l1pdwbUES+D*N#;x)65HZ0>{Ppceg(m{DtL^Fi zAcI$<)T7kLF#`eYnFC`=o#kwe2y`zN939^q?MzgP0kWBoe{Y(tul;b52GH`;w(5Vi z)8HS1tp85Sf1Y!ngHix$o_tdCv^NRSgBs4zkEl%pYzZxV?yx`=i|tEXORR*GIF}RX z$HON%!z?{Y7-nqO+ud#iwfxu$X6~F0O6ONkVN|+K^=dU{GbQFBAst$LJ;+B?6}k9| z7Gi9FAA(q?L4XW{{HT`K9LGp&j7L^noV4Feoy2Wi4nC8r{L(Pg+r3% z9t~-y5G-(rl8KhwBxVYCQ%qx;@Hf{g>7#I+Re+|&A<&=4oI9@BVzSGR+kO$B_tr!$ zY2=$KtOm+8^5~W)pC=tV_9bijxVs1peeLG5J+m+br@ba5@hC|+RDpU{>4oK%qO!C|JJ_T)?X7?hV_F=Ec}>2YlJ zS?6&k`HhQerTUC9;dy|wP9{PzXsqZNBgg^K>z}K+7cjlAPa%o@TvN1bpD2TPuilX#LLuMW)X zY_=8bXhXP{?uX<>8>^j{Z<4cSCMJr?@`4KJg$Um89E={P<5UKy2L5eIGhW->1<~&= zczkq~ML$=S0&y(Z%6bl(Vw+qw89q8>O~u@_T_L`=+= zqwE%qaF2Ld5=KCHO1Sm5VG{9h5A`tyocszHt`aM#TV%cax|KzF>iquEvN}%BK990a zSA?n)EZXL6!&ZAUz7wCl!k~M{^Oz^2px1_B_P&<&t0_(bQ}lN%l=e23+#?z<@<$r? zOs+Pi@-oN2i25m>P`nw5zy(}K2LbZY|5Z2RzXU!1ZfGAXXwk<67j*H2?oY7Nn|8zS zH34r>*J$dD{hO^N`IT)s5zpH7MNz-jAy%6*N9g3m*AZI4+83L9;c}OUWf*4;T4dT{ z!ew@=z{qvL9_>N_rv$Etej4>_F1(BYY?yAWm`PK6w->`N&%O{4HZjDFP(wqDS#}7F zKc!H+NL2Y*zs^D)LrJ6MP+*WJQxWH1#91_^?O+E&0M@=RmkyTwOrOO-5Y9&pPU#K- zL-~Fbrt$;<>SzvD5v-<#dSj@iS2mG^mB4XnX4C=G6MMMiK2c1`g)0(lS2Jnj@mg+t zOtiS$VJM_%&Jp-iQz8238rYJui^^XsDZvEGI`CA8N&pr*p%*4G7ww=uUrGHX$h^ zloT0Occa?X8TbVodiEz}odiQso{h)k@ZmH8)+w9TIt*XB6bn?yEsNgO3Is>lSk+s(1o(+VX&t8wS>_qa=uX*$to zT3B*qGnx@LbS8!J5?_!`#@q4^ldz7TvDi{r)gY)^YwC0e6Ct}~$wyqH`4pZd(29P4 zeodIM7+|YSX`sw#MiLYXZO;9$l&x~3fs!Gy?-OjN{kDxZxTQE?@U!m=<} z>r7j*O-HHLbw@`wExJaOSz)4^aJKgEg{OrtPu|P*Ko$LJRg16&X-3&MWWZLnhint9 zBmLi{3cpg|=KnC=-f9-xhOS=NouDTW*~8ZBB)c8C9~<1SmcQD2?$Gh_s*aM+b#2|7caM z+$DMK70q$97VQ($@n-i-j?Dv0h$o#Kh05E>9Ea@6UM$$`VSaSwi1z^ncBMCX|yBuIYo%J`+v z?}Q*MJqP=yay)aO^$Iq9EBg}hEq^|tPrIzH_^?lRe~e8S39U(R-dEPPsrD`xG2C2< zuJpZNs}kkM9hGOVx^DrgYSl``#)NB)taSQ&XWZGh8_^FkxMc;JB*9>EU+{)z1fOw% z7$Bsv0H*yFnOKdbAB)UMm@f`J(M>cgs(lsk3 zN8BrMT!Ap)^LM^?P6D`)``bIFIz1eI9iejF0QaIT8oS~dQzTHK-$!t<2ogXMdQ_`a z(dRrgFOBYT=PHPd6B)9ucIxB5&7Dfh*jm59KZ5U+&w0d;!muN%=elkLk(E&h|4dKrT3-Z%%jO=D?lYPttP*fbi>?Txf7>fV5$s~-muxfD^qh)9Uhg?-3x}EX=OrWF91cIDTZnDKCEogxypC`CBxbm^ ziw>rzTQtM@u|o&KlA`;}Zj{$D&Ct5%Tcalqs7r zH~xCp!4yc}19eJ(aySI6YwS2RpVY|(NWtOxYlls9Yt3u*C0Trx%uQu94Uywi--DKo8+u&5VTQ9f#lw( za#=qxJx6aq2&syKsHQTPv_Ots+87JM7CdET5GyJ%9(z~;v}X5;Qi+)|=H*ZIu4AjX zq(QvKTQpqcG{ZpnEMX_t#w57-{ zDJfwnI7>Nh74n>`5a*an{qUm|5ATPbb&ygkX&Y-d%buz)N8VCI8TD3X6APN66%tle zW$`UrMl*k)Pwx z6D%vE%&ti6s@VyptC&$_nn^>12={SjCcs4}60p)u6VVi52{Q!RWN9GgaekysdAsGFSJ|bcffG7t2G~TDq%vF{ zsJIr?;!t>U-A(AMdi^Jt=NPV-@LwxYAYPB7awL#6w7Y?5mb)B7N={iQHdq~> zX_Ks~qvuQFMEpu)D4-M?&PY-AK>GTZN7`n6G{jI4(%E5gjsS}jHT4C+%@%>RVKHq2 zJlBlazR7Xp`!G?Jahg-frqE3}kAo56CUs0bT4Wsm1RHMR-g!O`DCj{sZR}p!k5biF zUItNi`E9Tww~sT{%)eRXSLIKhSj{<_R~4LZvcxMljqWp-YjI~M`erjg9jQ&RMlIta zIs0qIv4{=ucD8`PTQYCQeN-(H<}lh>H_thw>S}l&(MP@RL5%WoT@b`0J&pYsYnAYf zm+8TC#L(?#a)h*w9QFy#;^m}v#sT(t!vYTR;&s5y@CQ}Bc=n8ly_FY$U|A(mSMe08%6k?A^m;YG_g=PozT9s|FF%Sg*YV|KuO{S6CCInHIw9RgNL zADlQ!9?D-Aw7#voVq;@22g44F*S^nOAuM{?O^p_Hv6L4sU(j}+%mh((fV4MpxD&d= zx~x$YHnegzwD_~2CTLD3mm;Nhe&T9vlmybo)OQ0Ml)<#t-*U`@0fJe0VPh zDNW@gTEa4+If4)s6`)a*Hc8#5Q(@7m%i55{9*8`b6X`||`Kob#^)QdUy3XOIuww^| zmrHqHgP_haoMnYZoaI(Y55$ML?cO0g1df2#K+-=-@Qx^yiZEyyy^uCu!S=L#t`>#K0L#(YZVY=_6WR- zdO!W@fIY@{ftWyM-aZ{>J~6Htt_pJLA9Jel{R~NZI^hN9sKJfppSm4od%a zSb($*6r7GB_>0|kHePR7)66-!Mx>Oip;0lvs{^pqqO#sevzvRVmUGg^xHBhOoB@`B z{UB0}(I+Bm_I4p%eCYq4XC5!qAH2b5E7pFHUz9jJ#q=i^gQg}fjr(i}Z2kc$Tt!g?J zwhE{g7#ItNTm36I@!%q?{WO*v{EBOjPJ6Zzd+R7YD(+Oi{&zBy$hu6ag7On|%jGC3 z(G;p-(4kuu0m)G3$CZH;4F}CUZ14_`=hjWJcA=l}W;og+7UZ-FW`T=SX^V39e!#AN zqj3RDi>JV>73AA!Zg!G9p)h^)PH3WTBlQ$ri1@aA@Tnq+3wBvm?zd+lX8^0fP*yS7h3oc!N#-c>;QMY} z$}Ne=>+0g`X7@%AN8@L)&$@4`-7ZJmbiiL~e7}saFf@W1CxEf*7fqO+7fHyU;ar8pPmu^Vfh z{-&~wfn^`W_aOr#{!<_EfWJ;*=Omru>vJjxpkfZcLm%oSg%eYLMmFLZlxn2$k_a(& z-s``HwnWH}7)8N{RND?5`L-tz;@JwZvn2DPSD5c57(I3?-4g~vZ}70hxsr;dp&_BR z@~VKw6p69|jrr#)+8h%5CRRU>D-Ise`vJeBcHgQAVb-Pw80yWodH1i*)T45#CadZO z@!e^B=PW75w}<)zwA04J&3Q}RT(UE$NN0cFQJ};_&bgzSux^uWl4*|hTl`&52N%44 zMJd=iO9iXn3*bK7?OW*WX=<~Nx+-9I)1_n$x)@XW;&zOIXmo3?I<{ajhn%t&g}BxzM@Vh1>f%$Tt7a6rp|MBW5o>YY%;5 zNqW}PUoSS3+pNefsXDujiFgc9N|DLLi(^ANY`I^~!+kx?Tv*L8MHUp~2gA+oAz%3z zXgh98M^&6gV08%d^gS4J?uX3URU`Vau67^RrV9rl0$p|N^f{!Xxio80F6`j#f!Bxr zC@n3!$$M-2EFTeC@>VT4uj_Sbp%U;}z1UrCMCxCp;D|6UqurZz-NiPzkhh7{=)_AX zQp}2Ak_McaW2@C8_g6IaFJP+Pjh+9xls8Ex*-HOravp3s>euv~UKby~Y9@gP9&a+j zn)ydIZhe*tqAMWSYKf2_Hp_o>+)(5EZ00Kp;@7nh~O!T-gt3TIjFQtGzic-A^%+w5TBa6TRU2H+Fy<{2PPU@76%)T6fu5Ox3Gf2UlR46V z`XDiih$;#zNXRKke3xagcW@j~8Tp)x0Eh`7?uZ4{r6gJlAlz;1a3cM3M=Jzm!bwwq zO2cTP@aSw1laERs7drcraHnpMX&4X3dN8%$Ky2-rgHftekKw^Qo)(#+ao5{6+7_43 z!MLBkNUImSI*-GGJ*QfLS_fArSFlt?pAl@*?4b{Xp)T#X*fNsnl`o$36m)_Y^=N>p z*T&XHC6g1QIED+ZDxk+2hmjkB6{KcPwxC$Dq%wi%Kspd-Z~X9#dcZQ!-Nh>@zxAif zBy}zA&U2JIzJIq5EP2%U2~?AMgf+W)CMwbom8UvnoDxkeiJ*RO?F__^YA7 z_b!{aIpc3C4626=-V)Ogu_|XW!Ee2$Iz67t9HMR5__Jlf4PH9O5n@Wa3r|k?;_pq^ z=nf`F?1pdO*Zh=hdgz0KFwK(Z3K7ZjX^+FZEoa4lseIcI_ZuuUNX52tI*)UjolUyR zPePl;abv{sk^!&EcZya)%J)x%_<7IqOanS$uy-7nsV{-n#vwcBHaXV{c{(}YKHOP8 zno7nrY^;gSrW^)rpd&$2B=0D(Hf21*x9)?*BaILTde6dVNjR8K21fypDU9Wf-2;CW z>pX}Mm$%!;ZF`-3!jIi87btJ&rEIpd&51s9ZHDdJf>>8W1BVI44T&TAds)V{6NT+3 zd+)NwQLUQqEX}+d!GWp3ImdAN)%L59(C8I3C6^hGuu9@g&G_H&=Dp+*a7 zRl-HC)*SunrveN*fM*<&EUM3muFLnm{h`_!S7G6M@;7hlZUyh;LWyFabQ+}NAYbg; zGi#{`^4a?aTh&y{v>>z}SKFtP=vv5q;1kZhFna%8){t){Cj@_GA}I7!BGS1Tbfs^U zq=+x#5aLJ|GQTlpBv0#=H038kTZn6Zemq;C^w%0{-?zW4fBhucsicVVE}-|@4!4HrA1G@__xNNJCv=dqpZZ(D<{1F*Jz{i5Q`krkCu>!%K^s$g9iC z#s*XyUI%2ww|X>;u?`RX9~a&Spvj4s+WZy*la!~BT>GKQvP<)mKiRK>@w-qe(3kJ)uf$A@*FYEQ7sv zpWK&9BWr0n5g%D1vDCwI*)k<$lWs&&>j?(q=8WC~OKlDJpF5|0Zp@L%ID$7f!^ z7j#snMT-3s!%>2~XDIEVU2r_1=9gT2(ik@9@({jyG2p4j>peOJxh{tee;@CzDtg-X zcFcVt1J#hV>sHc7QK@M1bZa9rEc%RKSOCeGcK{4*PkJb!doI8KW}4k-FqvL>B#>iD zoNp~vJ=K}I+n{pmuhPWo9G#vc!i~W%*+D>=TADgKT1H|w?u>RikVR19l99EO%a3vV4b@(3-!|Xx z;?()-X(ZLYq?o~49%=4T-_D@4@heDCP#V-vv_Jht`umBMZ-Z;l=m3nM0-pa7D~>j{ zI+jMxMwSeYu8vaWk`+{;-zO$VrDPZ+WJVgP_CbLD)fE5y@~2szDm}m#e?BCD=l?g_ z{}2}ym4=-Zml>aim!hYc7@Mq9V47py+_V2aE=4a%H^Nw}ATBvV#}LX0Nv$x&G{wq3 z#X7aS2lIQ9ar%yK0iKFpa(qO(R)LC|MrLmhMnbwtfvT8oVSIE_YF=inY zBUa3GVCHD;Md+o^Sv+bgJiSbk(L`HH4REM>Aq96Q#<(2TQnUBCns}c<8;~Uns|hb^ z9klgeQsYoq!=J`;^wyrV+oe#FD@&WT^O=xSRlbeWMRamS+Lj**>`$l0K>d(R4Cbpi z?SAnHpV81SD(x-a2PYn{sE|n`3#xYDh-6hJ?@{l4vq?xK=`F~VDE}r+V@-G5e@Lgc z!)5PW>6o=xGt)5h$9-&{tv4*3B`Cd5<*vz``mAO-br>q#Rc7$VY3{Cbp<`li^3C^y ztPft3A##pyV_+y_(Chjo$1nv!Qlk~DF@={fB(7qyTB!I^*F^tMYi9u!)%Lb=LRvzR zE+qvdRRk$TLOKkZkrX5yh7^U7GC&ZKL6Gill%X610g+Hr5Cug*x~2Kf+{3bB!P-d7X4mIdXzAmmC_9ZU%kEiE~=P&Aua zIN1K$LU%B~E_b-*Omh*_G|5Ja9G;|7&s6t>7_4rC><+zo&+w-%q@yJFha3U%OKw+a z#OESS-s>?oHH94u`_@9pvWDXs$=lgwd?o6nePeE39s>h}WL_%pXjsS0_{J0g{;-}^ z%6!T)Zbk*K%;tEPRX2}OSW*>(PU-w+tgg#l?tYShiU-`(#9sa#ngpoj2os%&BK@it zko}`~*}tT6wa}&& zQ{lG_RHqf1@`48#T)L7D>^oxGhIjXdPVj2boD|EyU9 z)#FgXR&7jTvZb^JNrSDdXj>Sm>mtd&oS+NPRCSD$lx4C-%0c&?#Aj4^7p1;rq%KM6 zaN_EeU-R(Cr(t)anroOBBa*u2tZociC!J+1e}Kq2pWi1!c8e`{-66b4!s=A>rL&FY z5S(Uv+0<|8vyV%;w_*-e?URLST5*%k+&40Y8dO+&q(6?2@nbLKOlqK3r^z#_5;+<| zP}VJ429dtVKBVT1>>aIAgq(tZWsXTTe^^pgslT#x_QMUL{G}VgZ)lr_)*hU)&d|3? ztW}&`Jg%BRq8rdlq2{S6Lbbg3WS_=Gkqdl|x1~Z~A|2vq$COWeEW2&y7NSmSWOy(l z>XB#?U37T#;G9%{i~saDLOP1rp&I$Gw-TCOW*)qjsk^0l$9%q5Kmymp`wYd6{K^25 z(d*{+jy@%U&FrZyA){UIrf^h^g}*2jEeo0A^^Vic>XGtW6MwTZdxWzFnxNyd$@lXE z-c(jM{3h`+y|;H~OL@FvQHoNrDmK1vhcv^Jko+5i%9pPz#UKXOe656K z1~ui_bHh+xc za~G^NV34NXS=y>HB5RiLWkZ~J*{o!>mn&-JGHJI6Y(D0y&H-**qB=^8@Rq=++Ty`i zLrrH*4z}|9b`l(2HE?Bq_gVjOh&5vgkMF!^<{*>sM2=SmZ4Dc4d#lPj6cXm!eykTF zCQNXl$M$_WBsrlv^<|Nm{biB+BaH(Mx_2#y42OdrOfPw)CxB zQqn@CK>Syl!~?Zb_yHr5))dAn9|<-J<|8<@&(c z_bJIzyh2@9WuSg%Hnsg%Ka{3&J8 z`L;>Q8}ZeuPhUfp1o^{-lRao%0!asl_!5|Kq2@Fux3zi?6YsCA{dkt9i-ovS<_%<3 zNEzQ#&#OVH%MaOqy<4MU%v7O|C=Ei?74s|shx)WZ!A8It2m--&gx_akolN%5VrIJ%?m~PI@j(7tz{T>Q zXAbF6wqF_4Lvr5XObz%QWN7h$92$t|9lVmx?nCh5rin_iq>_<=(b;GMz%W;{XH9J7s;xd5*S)fGy|DYuC^d^P43#W) zNT8sSmi7GXbHV*5YGZUy;qXyGj;d0`Rf+HcymJu z>7n9MZ$w`CJCaH3i%SW3H@M9-nJpX3PueT{trA@nBCqxwct2|3nxv+B&D?WB{A7*3 z05YwL+O4e2Ftqr*rA{WkURFLi-b=PJvFh6DdC3CDE+4^D6Kz7tsjHV7xgXyBPUsE2 zMl;tDg&$~3Z{{-N>Zd8c(W+#0uu znrL}9;ZrAOHRY-j0}p$|im=nPy^RR@T&^lYxHKSltO-`|%BO~;3?=B)sgtH1)TKT4>!$RNS~Xam zIXHPUqMKN5Nyb^~4xYfi=U*2J^hsP}QrkbTxFwHTQK9UX5E6*>k@Gn0(A~nk5;0V} zuj6|B2m3+#Wcu&|v61&rKO9gzcG))ZZ5vO`#(uA>Db%IBKAnE33()7|o{OO_hNw=Y zfU8}-nkcy@ojSMY1o`Td#5o$|QmB%9dXECe+Q)dhsi#!7`!2H;tw*En z^>hYa-OeJdybC-VHj>pxKIxwpRF)1N5^21a?kwV!ftQh<%tUTMgc zX7hC(vNlz_exDY$Tg>uCN0;{dS@4KQ^SsIyy~^GNPwS!-iMv4>JK<7&hN2I3(@@rQ z*|Duccrv=idrHSkXZ)b?**Vnlt6bvjckYiSJU5q)KhpHhO*nUIkt{i*=NiYRo87wN z&5?fKOInj_@jx$Jyy|tR9i@QA6$W@{;W}WW>&!kcVdpx|2luw(T=8A6;`Ptomn-b) zGj$=w6nVz}VUFyV`-dN=S}M%e=!H8Z@&uWQomll8S*4jH;;;-c(_CQe0ywhLa3Ydn|Cw#iRtDcpCbO{FspR(%Itl3YM2%=WNra66i0gQ5tGj z$Z@~QqvoD{M83|o@AU2@Y(4{4L=NBl-W;{MrG=#8~DRsU7Ob$OfVk&+O^$E~IB zX|^OK`?zJ6v;&@ybFg!z_AfC<(|^qtLJ1SOD&*-dik)01L^Wtyj8RYDTtlisSwGMU zaCP!ln`jS<(cp5j@z8yK&)LA=N8@>OQgDS3m7uvl``if8%4+}p^RJ;7Na!!P;J2zs z-73&mqD*=|rNFFeubeE>uEl88qBLwTzu}iKoiLqEo-O$@ge;984_b6lAWPHpcA{q- zrMf@C^AQ^|tEN~LZ8nzHYC1TgiLK5YI*c5Nv3pE7?k1*^NNFJKW)RhE{)nKdu}b#5 zfJ8SF-Wun0tM4EiWn7Do0GA6vw?&#`VAAQ?1IOQ;mtYeaRw1(s6I=_MOJfw_w^rw; zU%gWvr!gC*T%zQ3ylvt%Dz&_F{|#oVl&;VdM<>k`%nWD_R&X#Gx83p$>oA~?H8or& zE3WFI6}9`MnET1KqFFy|@H}!UWjxR^Jn6H&A^+vzM~G6&u!*(bkV&3vREDPp^16K_9rny>%wxx$b@$i3m9>(`;A1@A`?2&&ImuX2>PsN){5K z6pGfqpB=rmHd5A+(_>u@MJsi!8tkoXRfc-Y4A8EN^$&R&jWtGcymVi5KK3lE^AP3q zFD7azU`1Rxw>5?%v?UsJh_iwI!d&lZDb~-Ak~u>J*}w3aXslJi;(a?>BlP>d?2O;% zLkJWpo(rRnTwzDL2Q&k2Mb+|Z6Gsm}dmfgjf(w0AtEJ!zu9J77XYd#^7CE15CpKSw}C+* zz+*13mjA$g-9te7;a6ZoCHm%i`vA0ncd==i+t~oMY#~;r<}gPn+EMIhNd!_wXN5{` z@+lza2rO3|-qr(NOX0e}T|8Dvz{eD3>Hu>FsiA{4%V9+n0Ks|!!Lsa769F>$u&G%& zLhVgqASrai3NQ7}x&zB?UI%b+n0839080zlq^vFNoUjPNwB@sV03ih+!kukup~5cY zWC}I?tLg-}v!tBeP0s=UM685^!@Q$SgTR1eYm*Di#tvIY8A&;D!hnui0vdK?hmr{} zu-KGbP3>%eRYgZASPuPQmDoPqmmiQp|8Vb+JHUfg?r*}5mCB!kMQdgzOb-kIO-%dO ziR*)1)7;VC-qgVYTl-k9W`@lG>s4i~;EsFBi?w~`F3vDVd(dd2&#)rD!a8ptLTR97 zoI4_Y1=JkD(s3|LXV{Je+@IqFE28^v`zVD6s{ao~J5#js|GHYQn=1Fw0^^$qWcH)& zFt(3UxTeOhh0*FeCI*PJxut_C)COJ60vv;oB6mL*&?7g1X#o8YX!|IIztF~t+UfDS z%ansY3np78-C2N{fEIXUkKUfJeU!q5F6=@1$IJ%#S8W$i7-$%CuTteCK$rwV**O#$ zx_f}RT0))wcJ%zYf6&6QJWV}uK;HxbxBbVrLjYb&;h*&OApFmki~rG0?YV2@RRCZF zm`cy=0JIwJ9boF|0<{Ec-oR{NJFI}f;Uv0A6Ep&}d4MLrgEkH%OJlhRb`JMH;b5ix zvyB8yd_x7(`T)?*GyZLAxeYCa)0*v_h&da~?SKp15{l&<0GDyckkoAcfb?@wcW`jv zqSYAWTf6@cnmGLlcH8w1945HLD~5Lu`e(eq3%-JR;5wfe-XiRedAsx} zxXL4jY3ue!%)i{?z!8EgUSVj>w|1a0YZ6TZ zm&(D=ynO$Vw#ztzOQv9m!~Xx3_@jWz&z*?=Q~(#Qz(DHm{2pYNXu!1tFrcja{}r@t z!44WGbUa{hcMJyl;CC^*LqEQ10z z=fE%y=lm99msr5Y1sIN9{@yv@{nA(h0&m5}fbffdAA}_;^!x_iPKtqLKidQB$JDv& zy)F8>0q>#2K$y$^8{}VK-FNP&1fS&KOm7T$y7s?;F@b_c3|sOe26OK9FOp+GsgOSh zfGy(-qnzIS3*}u`Rj_3TVRSoywUHmaj4gR{N3IaKz2L+kjIK!AFLeJ(69Vgj^LQ|N t?|!AXoz(-D1V4AjNV;_XqKSV$h1XIg0B%9ihR@U$WwIq6!mIqDkP+L)M|Iy>k) zncLdX>gt-?m^2Gvb&hl?)Mr z6A%6VOj}bqErM+kbg!d6zrT<7(CNDd7isWYXa=uspnrYC0YII@jcRd%ONM>O>@R4;JUARJB)Vk*HNY+f4-%qw9Yp3W-CvA(~2opunQOV;QrrH_QnKXf>M_EaCR zKT*f6)x-X|%SrjYJ^O?oWQIHlM|NzS+=13t+tgf`cM4=K+6|GEoSM3u!b&ZQKlSK_ zcofTSEe$_bEGT!FxxnlxrNitP{i(E@m!QoozY$|!=28v+op>;BROjXidtSWQUsRQ^ z$z9J{osRngl>0AiFykQfgZsyZJ0Ji6ivNxchF0drHcq-G`i4%n4(|UUg?oP0D$nn3#*B(gSEcXf5NFyZ!^FLy-jqCM@1hemehWs(hQ}L z4}2XYm!y+rcYTcgj{VnnR}zS1ZVrYv{QC9lD=TX6CIkVD$gRL)wqp%Kh$5t2MJmSO z-nk}Bao(u(&J4Ni$gj@o5>4;-)u#CoPjJ(Ky!?R$u_iSw&1>8C=ww@<{@&}zWq98CS zj2q^nQ9|aBrGaLPVum@d&#H{ZgamoD9-e#I!KLHP=yg;U-zEi z&8S4H2y$_t>bWHwQn|d!amz6op)G`jVYs}v4;G4{~}-?F}0u8K3-V=-l{L!m{QSdL5rBIP$V8j1!y zv+{MHCRHEqSqtI<3;|Ngt`eJtksxRzEUK_PfKND?XiBlfNr4&1^g%6MK))V5Aa~6& zThKt6NN6*4_>`66>Q<9rLWYi!Nk4fWnhw5~mCc-(Q_?(ltN4+3P4u5~{+m1hJ#)0f z{yTr*ulT&2U`8Fw1T%CM0BGXcd&nnT+4Q}rq_1&Qu-`kpx*BK;fD4x8G-P#nxS5UF z?tQi@49Ut74yLJ7fz3l3_Z!vK)mNZx{cb`YVR7j&b=i85vutcAR@n16ar2_ABz*ym zQ4(WBzFdz-NOd?^RY7VqTx(|8+rOudQ1>Z*1m#^8CX*u5Ftyas1|xs=#b9#C)tm42 zm<#x;tMC;jF%<#(Lq9*CG+9_7y}!I~KLR_tmG+}i#Blc72mr&P7FbyeTPo1{^_fSy zy;D+zOcfJmd>aOjq#gLsGZ6u9CVsM)Q-x5}p&eDox}i8TdZJYWH8dHlhmtS@r0as& zbeI`&z0r7uRn(Xu)^sOELQ<~JIZ4X)CyFXQ- zUEmu0$GVY)>;2$tfM#AAARs~ts8*Q96O<5NS6#)t*J6yvXE-?2iA_(sSqBM@ zU*mfA89m@uH>|4EP;p1BfO0__H_o>X+n6^LXqz$yv?RhJvDI$cypPtAt$86wk`FPG zC=OA*`u88NwHdjBK~JwEeP8gEv<$0$LK)#yEaBQ)@GF_wVr?%eNIQHDPfUn{AMo&z zVtB-O23d1FsujzZ9hfGnbp|EmTQU?nsaCZJJnKc|<+5a3A3d&Y4BfiZepEGhj1{EP zVR@fCq?J!fLNq!~ayD0dxPZJ;wvcqyX2Ktr91|ovx-3lFC{~9GUoFNKiz90b$NAbs zDTGD3cS4|U7;+XBJP4U1ffDxu^;n$EF~}qQ&@~@Vu-~_eMgBK4;AYU2#fDtet-v<(m65IvNJas zM|*JZ=yU{wO|^qs%A_w z0{QV}7Tv@dWogWWN*9k)b0j)WX6J4BfPpY$zCIaG*4q(Y#3c#+(t~y9V$fKez{zMAph|r~2})Td7t16OqNSFr<(JOn z=qBZEK5e=>XJ?Q+!w)O-O;m(DX2`2#2J_*ld(1j%UBKFX|G}8UJjYASxgRlaY^$(* z>Gf5ZS;TzAkB$ZRUfO2~gbc00Ut!aWqA_K*eF)6jO&%{U-TM5go$Wn~H;q~!R;jCF zd6pX!JGpX{HYPvG);&E_k<6WmZ$=tm)eJY4U@YOGnLiP=7_17m2kj0*+1%=4T-Dno zOYC|bqV(24pe17U?ze^>I2iix$!pI*vvL5QVtP~#Wloc%WcSe&@uF9}qOpaM3o-W# zEINZezHcB170J^yY??uikK42D0x#B{^OgyVX)yU~oygiCQ`XlAOEdZJ&90BGPHi@R zz(y_}pP*r0=3T+Jp``+KgiRk|;JlJPG0Krne)7ND`_K&II=41ovir9H)f?;h*u?Er zxt=prr+*Bp+@OtAyci*@bv_EiEh1VL9e$$Xjow5TRzeG{(MZefe zY+0v#>`?d+j~C$N-Qv+z_v0iuaAxue3dK|Uo1daL0Zxuih002BzP}spE2%#ZPZ_{4 zl5Oe!O~S<_eYGaN2U^)$xx#w%%==&KO;$YnfaAaB`vwjGK>FV`Ul)BVb0htKr_2A; zoMB~s$t^zk?;KtFoM7T(#HQedKP_R%6n~K^d=Ri!y2p(-r)|=#WMt2MZ;9K9(QcC{ z#9kL~rZ!t`cVt*P;kys+T=v&cB^4g0`0)kV6cen>6-VtUs31$L!uQ22&G<;*Q^cUM zhPz&s#F#gAX6*)`k!V74ypZCX+ zce;JG${31~L=J#|$cAHHxHRv~Ue%mZEtXyf-Y-dwR`NN2>uIq-GxL?LH;-%ru>2|6 z@l+go@=b=P$2Y|yG)xwnW|239CzB#Kg$gmcj)yrof@X0}ioJJ-TsYXaZolsjUzq=Z zk?aS`>fI&Z;|Kd&g2+qCyC(-q@B8E)Vhj=&PEaQa+UxJKwfLkMjEqy^|DG0y-MkdY zs`eWT&q+^GL_uMJ-Fte|Qg zX8Hc(=`^%W(&XB@mAa8xOMS@i>rVCj6LOWn86i>#N?d}aH$Z@-h2{DR zlGc>&|Df$#m4X7UU9&&sKf3WS3*h4ggH?sjMM+yxZC zFO4Z?+!W|l0^nXEZJ$mW6C_(iHITfFW}MGYF+KT4c0$lF>~!^HUU2GY%)sBBGPrM_ zk@G2Vc}=ywm{kHHo}?RC4b}^67kNKCY*fYb#YOaaHI>y5d7XMPbmM1+RM|A#H1J*~ z_jmnJ;w|&nbeVsFpfpgWsnfTN^T&)FH?{gyl;vXSCkmCw3v{7YsRwe;#qZd*w=}Gn zFs|P#$i)$ZVbCj*(?nx-8DmSx`Hn(~{q0ylmVuRg-x8#|57oi%0y=k;&UdFggen8} zEsh?KZP#vcz{u{!QgG4_C8K^DT#|WxN`@&su05NNt#C)(7ra93hmH$`FU`&xnE+l? z{hTI8?`nrNmvpv>mT)%)KPs)s!DpAKYfQ_X)EL3q**lCSA654RYfapueh_Nr^nyms zfN@E2AK%wi$XNF*qYi7Ly%uMz>xa3GR5f{Nh&nD{pgQx}tbZstO$x7+zIE3#N0Z2U z{}(>g$sj{&zybiA@c{r3{5Pf3(Am++*7{%7oW|02++=ys?gfg+6Pp&3+K}Yrp1tos zWlNQ!!9ybJ4lNnX7Z)>-M&R;msy2DpwM7Hq_ahWuSFx!uH-yxpdV%@`y$ho1IW%<; zm{D&(UboOj;7yNjRUb&#oBT84KJKPvTm>TGs4Qx_wXihVOK+C5c|NVTlnvu@^c6Qwa39UR(9l=X`XxurjQCV;=LIvSVOCAPbYB=*M1C;6ezBJe8 z?UQ+%B@fNw2xi-bZ&gYOfDE%w^$shKCL+R>KUhuli6)<c30>c^#&O1mv6Q$Nf-zCBY z4Fbx2hzzO3Fmcngv0kF zPGt*8cD96Lj!fxq0ZKTOz%7HkKS?6%Gs-b&b=lkoz6Q?FyeOSH{8%s95vbIDW)*;2 z^UNsRgLoqat^ed-0Um1suTY9$2yzjGUT44StuxKt;tO&!tI01nxgq?wxTOSI-Uc9&jzFg*v=pb4e9!ltRewioKWj zCX4Bv06v%-f>86Y@TK?yc5dZO2!78##ax;;{9yJZp!I5I)>Lw=#7KF1GxU3YhDq=+ z%tMPjuD7F~A6J`;wY+`5ygrH|R9$?a6u)$lY0qN|El+^q3tqWW$%Fmt6Mgv5gQSy6 zO9T@6LKI8DYkd$f1FMy?K{qw&wPkmBnSb|m?wOoXhtWPhny?A+)ZTHtA14Y3ntj=$_n1Y}GUxRbM!4r3X|UV*NQs zp$^NV5Vx^2=mGLyJmb;Pe<@!;53&YEaS=Tt)K(@?Tf-rdr4vFblmB3<%xPIzTIeeR zJ1Cp`%NbyE`ZsvUxp^h7y5hNGtUx}Kc`*zzE!>8YFYhI27jo=1LQ_m=jgck5IPB5x ztX~bpp$M^q*A!=z94wQ#<#A~}N`_@S56A%Trpf6DV@I;9FgNGP#P!T9vJFz@_ii3F z5il!hq@ zKS&TRD)0@YrpKUTCEh--+(Ic}&Aj+L1Hx{Z#A8MDc^TGFBY*2OlZi3(`B*7XN#6Gg z^&CPJhjyKO=P5+FkXv}FyCO%BBCC6NSI`naYgL6mw>S-Noyvyl`8)EpRPNDs4F;0} z8Sx&mGqp8o4r?x*OQioQ%8TvO>F1Bm4s`Sx7EsAdIY-aw88=@U-Vn+U)n ztzunrFcu=p2(4nmQWh|a8joW4`WxwtLy{+733beDofIB!b2$K<)li7U*wVT5hy|e7 z^5c?okH3Hw%Y$9K>q8xb?QTq?B~xo38@tD=cHuSi2R)*xN5jsIraDP?lq0`py|x0^ z7?q{_6_E21cA}$QkS3zzSk?vN7lbr38<&Htec^penQ{?@MgXkcTDrBgo!HlqrC`3c zWTiAqg9#eP)eNuE@~z@a7BmV^L`I-QE{;!Vz`KmJeO}Wi*GbrzXK7G(8Z5y<&>jL7 zm|>R1l4zAmkd+Bx(2mX7N>E0Vx%&JO3=311P1NALpeMe=I=8>EP@Jf3F0{CZ-%23M zn*0WR=z763v{^#VBx%`sAlxq99p}yB;wn1R34q&@Pi-`hY*)>q^9?2MNlr9Rw<3?qL6J^Ea%F7Q?Ul$a&e(rozn9m>RK5->Y)X)Gm}hmFJ*?d1SQ zh7q+X@dbT@b(*BPOswu@llTu*_;0NX(b3$K^8%4ON&V}|&1+vZ z%gedl>F;Ih4(=^K`R-qC6SACQa&>=0DtZPn^Z;*-_CFvvg6fwm$J~%yYc^K_wrE{6 z5J_$h6o0h9s+Q2BBsQ`^@e%m}B9eo`IS5p@T~UCEXbgmX82J*1aKv2km!{d*&0xc8 zv02XF4L`oR2a>rjT261ZbO&ZfCmZ>+!3NoTl>9o@*OI#@A~qWdy-&-!bIu5F>TF5{ zyMwf{a(#6Ln#M#S-S4|e5^(<_w8Pc>0JKGcrp8U9RIc8Ro&%N!q`G?5)}%!0cBOl& z7Iep*AFlL+3UtrG620I|0;Y3_Y?LG+nzS1Nr|CH_>&F&*+g&5lz)+CjbWvS$_PyO7 zy&-Lp&D=C6j-8+;Z47dE*Rk+l%b<<`dbPQA%0bMn;v;KH$R6wnXCKn1tc0%q@m=-( zVF69x{Tsn=zqso39Uph4wbB^SjoT zA_zMm^J>3`LBUnjV-OA5n)WKuXL)v$Z8IZxJlslCPpu!SLa!aEPDMNuJfwcu?L0N1 zuANTC$3LpZW#vYB*(W4iG0-1K*i-_n2oJW3pNFI3A@s#2bL7G8B{mQ<7Mgv3MWI|u zVyM1iZW#1p7T2gb@r|*={)~T2PHX`~V8vg)+}&g8kh4RZicxe4>(QP`FimvAUR>%5ac03^LY_o!sgpO z)WgJ5ILmDG{Dea}1=sauc?f{)s4Y2(3Jd?ICc>hFk6L7-V&$qzH}WQ|G9mzF`f*}m zpnvQRY-bW3Nb#b%b5FmBD+AVj{cma!TY2Zu{B*e}?9XS!-MgMQ_wCZS#wHGf{-pOz$}Hu4mNP6Oh)TqJ9QAvX@aDo za@a_a%qLGBWFbuLs8a24MlUVJ%m)e_7joq2<<5ZKrEX?W>mtCK<3)bZ;SwQrP}yBw ze+?f;V`p=yLZ}bB@tJp$C&`20=fql|4aecf2MRYG3-KRa>pski%v~qjb;>f88A2Te zh~EfCswVFSvg5{)^=dD#nabf$na9#0HcYNq0_?%e?sQ&AAthOl|rd z2e1_fzV0w^%s6z4&bd<*86&e8pgX2Do&JZr^503T)vcu)T$_UN9z-9?LyPT`#cOAY zCyeRGABjVrpZfR>-g>37Gn^S>Y4up&X@zQ8tG8`kue`A%?%5akvT%ADxpYC1Xvx;N z4Hc(R`Q1$ra_IYNK=x?GMYE@9_|2oHQnp3K{qStoia**F6T%ke!|M(VLUo8NtO8Tx zNwTJ9E1A?XoXM*&bW2I~@DmDlTU+a`<>7V1aKz>1fHkz&@CwFUEd|H{YW%jvll_gu zZ1JOp_=9S?>s$RM@3@RDjnCfyWcCkWjoB8cl&%C0t0unjhp^B$BGy{`#kq`W_O&+_ z#xt02T~#VWb#zPcoYZGb|3xEL&L}FB#Lg8Up+tt!-jNcAUBs<(I$G7)wiU4)#-#Op znNG`=*)*1~OpySOD|RT(>@ps-@&;jZ+mf5z^P?lqJ~dx-iDd`SDd1*w7sjaH|K--WF{okK_n#o;{%2N@|2M+a$=K1!@qeBqsE(zF9iW32c9pp= zrlE`D#3v=@=m(WMP$+~KjfvcQQLEkqd49>wvHphrWHw#g|NC6%g$J|QCO9i!Jgzs> z9I+Es41(=2LdE=-c>%3>uhTR}36n&MBz{0dz_;Vat}plu@5*|Qfm8XIe?E^egnxE4Ttn~kb=Kr@~Jh#qnN8tegGXEJ?(*JM4{0EV) zrL%#tgN^aO_x~~gqU&gAY@_dBZu`$yxMsJEEo5ui70vjCzxFw^DX$C>UAU-XTDT_W z69`yDw+g(~Nro;F?Bn_)CSZ2$+bdIS@uA$vSh=l!EfKARVwLN7$IfH>>+bXj&cpk2 zcRJryF+1&(>Qb0`Um4#Rn^{rK)q z`l;Wy!JarSm%@r}XdWhIdV_!dhmB!9a>Qe$?ca&wqZF72W^>H(XQE?ecO!$@UFJ@~_#_;YgE(|F zKUrNsWm6S}5xB+F?vIeuU1}A(r^c->>*T z&!1DYgw4*#zqb#q*V^H)6m%$=wF2^}4rOb0-1o36g^=Vb4^ z+(HWVk-2K_VG1r;7K^z&VS>Jmk{y{XhSI5bwh+qBgm8@(H!sB?A~=q8^LvW|TtJn<`tU+6L@EXSKfWWJs=a zBGkc!szTX!-avVPaAvm&p0n|}9F=-smH5Iz|ENS@VzrMj#wjKV&^B_8G7wCfOmv;e z#4xnG!cP-eV3Cdb`{um#F*pWToRBAZq_e^2=H&CY>d+N-^#$qsZBc2z4_XA!^Lp}Z z=|ytPNxZi8IaV#DM;sR z+W;?evJ?#^Q^6#=C}r$Db0{h?q; z;i=C@Zbf`Q2|*|lmIP2Iz(%&4T-`=m4L(m@jyH$rw{AFPcZq{@5@9=7vqIFjIW4x! z8;NYT0c(=FWv!6IS&$|yw$;+w{p{FwEWAwXtDKIz%%_=1D?;0DPJ3_x_&oQg+72-- z>)q(HaBIpHXRBIK-Q0IXa}FgQv}h7K9RheYGVcM$40Vu|NDF5itTV~5V4sj#*H|Rw zUwm8vC(xWibz)b{TUpm!Vw4TE4Ws2U*nsM(L@}B3%#l}qKx?CTO&>>7QZm(LeI5$x zDRmf~_n2ssDQ*7_p(Xb(X1_<7W9yjn$9Nq&Sb$x?pwd5&KhMH9gU_veEZ}WV>xfxK zlcJ{|yP{W8+P=>hp-<`=0Ko=Eq-;*4G8N@n3odm=&c7KNx{^X!HpOhtUx=;;f{T$y zSvLP-i=VPydgNS^YKoOTcnF&0tRh0B5fBXLG=yP;-8%BWmMSa*GE>4kh5En6Fz!x zP)ru$_|Ui%gIvT|3>E{(h*~6S%X3X+$wg}8?DU{R(7w?LoWrl&6<(|>^l^2Tw`^ZX zV6M3+U8M8f{1x*xocdb)bZc4Lgzz%#T{cIL5)zS;MF=%8mMMcRseFR5q-~Tnz@QWc zu*oKg;*(Pn6KR%3E%1Ucl=uh>AR zs?)z+v`Y|>O7=~>FjyG5 z=M`BV4Sv(vfiKR({f64)1w;>Xm7Z8#lnW4sku5u!d;oniFdcV-Vd$-s#!jnG;Ot1{ z9dQ8OI5B%Cba8@<%3ZRPB!uZA$PCKm#<~N>fN9Z5v|5gKYJi)~i42x}0%L=xc~X~5 z&pk2asF3z8GP`O={z`NeXzDyrztG&IL@{bk>|L)Z)nH`KvFVO>7rd#sh+SkW(XKY$ znAf-Iid6mpUiO5fvgfCtF)EV#9wE+EsbjtEajYqGNLvJ#Vpws&t?LI`UlK&w$vEE0 zfKVx}b>tCL;-NO-K~zXBXK9`~U_5YxR77K_t3;52-H(XH)p$#kpus1{g~kYOUL*76 zhW{AzcG5}2|D-bl=?{h_?hCBFJ!dyhv9P-3DJgZ3XHm2r%}p>McKNbZ#IKg2uXW`_ z-aSUWjgqR?djgn*KB$aat-`Bh6h05&Q2D!hP^!!_tT^L5(~Wv$MdZ2j!-= z*ZkDZU-Zl(lt?qwc9;@T7XC^PJIk=bE)|U9e95h@kP4-^3+)o@m@b1%9*&A{c&hRY zpY1MzX<#79OZDA){}NWm7k~a2*%9^F1PXcc8EiAzUid!XtF2k-9O)cW!+?wSfrw@) z;=Pehfpmb<1GvC^61-2~_&V(!XaU+Y9u8Wek3^$S>0u*8m`B`!Cy{-QyJ>1lo^8Kp zv9@_*WQ9q1QbXv}B^%$detx5{a1BZJYDE0J;vR^`Ual1&^Kz|EvNUVirtf+P-twZG zyY|`R1jKA0@(B^o1g+C<9%PP0HnAX=4X~_zAaJbO`k>j+N&&oVWL(*Dk*vE{-fj?@ z*@+3MjRXcG0C4pHX=WGp(h)6Bm;yV2hHD9rzyFpsA}Wn^*KRUyCl3>zzS~Wl?2#+m zun@O1g8}dXy2byU2caB}x&j^=%a(k0^@wIt7?ZpLDCw?CUZXtoCFf)7F5;<8{%pKI zKcGn`@rRB`(r30v*ErJk(#*U90dae!?%Ig=daYrm%(f<<@DVaylZ>AyBrFm%pG+9X%CNKeKNQbNzGe1;=$YC90fJt7D}c@b?+ zbIjE5fPW@~Ejsaz$jEUY!U05}R{-7J7pNEQBSR>GBlRxp(g9QbS)85@ow5h7^fOT; z7(S9TaXHei91Ac$0_3U^AkTy+IqzRb!wqX=8T@CUeFBpF*y7zLV1pHgSz!O6?Lhz9 zG807;DHPGnn^p!~#H1MYoJ+oGXEJz3rXv5+=Q+pAxoz3oW1m>Q>}l4IDOWmJZldf_ zlH2X9T;cY&d~I#h*lZl`i6h4(1=P!BODT5V$)V=jc5!yN-I3e z^5J&|-fdUaXIE_8)w3r$n=CqC6guUl|HkuRu?*F;8&~G9K=P=fxc`|Tjaya_7w*ap zlZ$cR!xpIKbpTp)d%uAPYsN$qo00BZMufJi$uXQ>^UloOIB|xZfoC|4ea3Q{#kosP z#5HE%(WuTrZnHz(8+tgGU(w`X=#w}xF!W2R&t2aTxs2HyzCpK)K(%mN%OE^F9v)fv z1F2q`?gT0CE6Zqi2W;i8HsTw|xy7n(6hIoUqk2(;0^Z1jJw+uF1NQuthR^AjLgd}( zPFNgO>E8rgYhBb^g>)}7VtFGZwBqp>#t3$ESTbIIDVRYu@g5OaH`Z7yFu%(8+b!OO zO;tv1kQozNJa!^2a@Eq9ONgCqB+!vG(kXebBWihrf5++WYaJbAZ`x(wqAG1|iLTXN zW)oi87)QTS91I~*BTLLn-LmQppM|)NOij|d!)>+Bo%J5bbwJ)VHnoYQ*LKGNqi=$FgDhfHI|Y!6?KBFZSu^Pw#P*IVUC38g(Ok8xf|Ez>0tP5 zQ+inSY1G<#d}{DsY!(C~8oxp(xc@eXdgV16_-_mm)KLzPwbyEb$3 zMg%YSHu4)RTGvA%cmJ2+6|0TeQf)rw=c6<;bGxUry==1>ijpknv`X3*H&ct%-64g` zXZ`sD#a*ll{MF-ePp4Kb_kHuUJ|RJvuw5KU{;Ofv6tLH?EnIQMiFLHdoOYvd$D(!O zw(mm<)_Nhjh|1=e)OJ&-LKnP<&NoF-d7Hw@Pf_>TF(G&9?KQqK^P;U6`>SWmJ)5f(iv89>H|{Rz*HH5T z*Q2MF_xAlq@a^Y4!X`rS_mi%8q?%Txz6*W0i=wkAX?#o=Ul(g?ae5qW_SgH^t@@~a z&*8cBi~aXAR5<81<41e(S4>)$nDE~yS73wg@@H#ev~6;>Zu!^Z1y2XNZ#M9^CGDSI zE=+3g-|kmkJNojUPg>H&n#xVuTGGY}BZgHP;|}GU&DG#y!Vt+L+xYOqBa9<82*)#hzKgG$q{+-nv!AIBSHgy#k3YL8#eWN3@4@iS%c1R=>mK5j_k1`Bg<@Q{(5txA+;W^1PX_nq$>RNG4Z-P%w?64Lk3R(rxZzXD@QUt`6{Q4Ybgp; zqRQ+2t1auL=CI1CvL!-*RHbe$Ybgy&n;Ep*ZR_;KRnaLO(Pkvz_51GkX3TV!JE`+C zS5jF*_JbxMGWfW#`+6PT!>h%^r63lWb`Xkm^1Eo6@pR88 zYQ0tyqXcoSmMvWFsuGCD18YCj;HouItS7C|`d5oN04EovTUE5{;A_4kHn%n|KXvx* z)cJNe@^x2q(nBc5o_6TVcyWdH@QY!6RNOf!SG6`)($_iY2`TJ?^ovkv^n=J0WVS}T zyxZj%VPNV(uL0Ry%yok<%QtYX9#)!&p_Re9=E}b}=LU3|Bvo zbJP}flB!k1!3Uh5#ym=C%w5;l!tu+JS&F0ERNMxyEMjH8AtQ989VRjCCT@`t#c&d# zeZk7yEtb@3y3IZhDTC04{|vm@x@d^H&jq%MaAKW?DgO_kc74D&u7B~NJUrzdokk$( z)G@+P-JOxyK)5s9=%RI2WB2uBxo+LU@T7HCJ=W?TUD6wqPGH7~oe7#pv{J^5Q5%`N z@9AMvTu6U@%PX@pHKh@(YWl0enqmOUUG=0(Ce2);Vj=7KitvW9AY-^iZw{kH?36n9^d{OPoGf5R# z)#{?&);MBn0+lU;3Kwfz6<1PNhT|Iwpz4l(Ob7Qg_g2f-ZJ2%-s{OvQr1^!0b;!=jsGmg$+}tr)d<41@R$tcoQbY83qo4b+bE@8 znz!L^sDqbm2mYAxvu0;Ihel&}?FLiow>{=_uqte_G)dRBNC?bD^I}TOU`7Rk+QB2d zVNyTCyo24VHEr(_`G#?kG{;+*@yr@kz$1&7!PZjTxX4_i_!EAJ`Ovib4{@75%ZN`^ zNYQ1mFDRuaT3ATZMT#>=tfnAVBTFz&P+CiT&avH+mdR#P~bHj&e#;6-vyL#*2yR2<{zqx@CU2Do8S-Zp#xz zdP&aeyf;*PX!R$~{ZrFS+)3iRC-|>0)_gFRBa;g75Z*Bma)MO1*io?k8hgX_N6upr z-VVH+(Ai?gFbETHPXoe%3eo@fV)J<|nX%-Zj*^pCL%Ph6{fTHrqbBdsZh@Q$sODr~{~WV~1>m z&oypH;8>`_0VAh6z=ewuf}0ohm4!a-8uB}UK)#}WNUL4f)n>%W;nqe+A10J8Jz=FQ zXDIxhJ5z9FiAZ9EobMUq{jG*Dj64E@i}Rt~hO9{Sv4kH)4xz09V3iuij2!z!SU5}^ zVJ|Zwb4~ih2z}X2cW}-IQplMAUZ;A;BjcsUT#cbHV_n1&A3vkf6Wq9v8WYf|qa!(F zju=ZRPvXm8@+x(K8WS~w%e7WzO_|bqi?X3zxW6kc<3XN7cr#@N)%l{5OT|8Wu%)=N znd~-(^n5*V|KN!Ml%Pqb&CvY;-avGX1Ob z2ITF2=K{XqG9k#N034_<>Sw>ryy2ZeYYfQ-(I)lClpENGR=m0JM}M%0dxGm$6A@~I zx|hJ>!KpdHbGGfJm)@EH6g>&7{QO@Gyy@;2@$dQfjr+o;U4)=5Es!P=9_Bpq4#=|a zUl}x!0vrLlL6PVq=pE~-7!B11AlLM>YSe0)W1_^;u0O5(EqeI~4$8w|7Pg)lU^)cH zkei;x@yU2H5XuLJtY8~uQgI4o4P!CKITQ(#-{Tdl?ZJ?Jt71<#8SXOo|4wtLfe=a-iBpEh(H5#DO}q6_sGqrCuG8rU_7crq?W2EAk}P0Q)aL5mxP+ z>PSeBIOD_vg}ma?t#>umaIsri?ODXnn% zc@p=Dx9jPjkf0y$kZ<$j_a?Wp!^RXu5Sb|^(dtFJDh0@hI?=JbXXifRr>sQz(NVet zz%=#?{+#f%-?L4^+bN~p!($AJH^gwZ)hR^yTT<$wh~dN3@Aa>(yYp3TG6ij8uoQZ= zWsXn5H15;rAfbn~L7=Jc;x+>x+$!NYuIgYtR}lrnhygMxv1zfY(Rd9At&IUOE2-lO zaUE()-mAPtxrenQh^dhm|;nF&5n4{CH^f=Lm5ap14MOEE7^PWzp?b{*XH^ovaQ?U^6P0Jr| zpmnl9L3YBdPUSSAdY$1|n`gG*UIhBP3O1IA(0%FjtK3f{#BjPQ#p1MZAqskw%J zF%LvFaIb*qa!HElLYrQMPnFl_#46|`5%de(rl*e2v_e@${}iV0>Vy~VoQXL-UIGQp zX|TX_r9l1wnd_NCYmmnMI7!U}+GEK*nq#AnZ=m;8^FjvCU&9C5;US|vdXtRaCT1~zRZRH2+x>CE4IxjRaDIq7Zk|JH zP5)&9?<3gpYYO}TT`t=%exMt0x^+Ois|#@czMUb8&k6C%e_yjj#-5f3+8Vrb69C&G zm2ewwn*AwGC`x}Vvqp~Y;Ki1V;CH7XT3=QBtu-Xe(+!Chf;iDKMT|%q!V=?91TvHn z<*-IyGO~0(_QdDta!64JZ+XrYXp&RsXrq6n9SqZj9g{DFHXtj$x=;hl zwfE`9%QM~Wr$|xg2?v7skfnZ*y&4*%4eieS{IG;--y6mqHypGZL#lj&$@j=saN7K+ z>=bn!r6gMy^3BLAB9qb)gJ~Jwep^s=HCV+xBy;RhQgWyT+%j+Sl5s0kCD{!+9e-~t_r%lDqlUU{!=fD6r) z>k-cVqG*^}51AMA_z=+jjw^$75iQEYgUKn?uUFxz&(f>|DcX4)O|soSF^)RLTjhZ=H3=7*?J1X$K+{w zN+mM@2&= zya!!K`UzJL6-Heh_m27)WJR%T;5p$8UMGd-XdQHh0lz#DLK{bfgabpcZG>Bxn;?1v z=RtbN5gbQ318xi$)iP}@gd~h5BXbD8+*H)5=xV6r03tO$(PAztf~8-lw*>}x!gsnV z<2(s(7mcDcx0vWB2644)j{C;-UDTC^Rf;RE!f9mEC?n%Y*IpY(WksWjDauGT{|9H^ z6s1|WY?-!gRi$m)wq0r4wr$(C?X0wI+eYW>zqil(rJ;wdsF5S^CK#_~xZTI|8hz#vl z?tV(WH4QJs9HW*;^qH>L(j7TdMZVbpk&H}(7hbk(`e!tPH2yHRz~kNPYBy-vGp=mx zXPc?l_~W)6<2g@|w*~iyG{csv~jLNr%?K{(AOZ~gR2RyBeHtp16OzKm`(ru=-H?Vv*f%#hC zuURX{a(43-AN1Ht%bp;Ey!@x8zI7Kt^0yllAJ;$l+41nQF8J9rsE<7nEn%aebAm}E zLpei#gu7m1Ol}?6Aw`zE)rKZdW!6;>h>339IyG&(5nZS@7Cs<(aymGl?}qFbziM8J zGfo(2?sJxm5TUl^AmBAC(^<{>?_+dSe`}%lzb+C%cetj$DLi=DO>OBs^NnUa`(%gD z#WjnfKYVHUxi`@R|&oQ}0PJ7{6 z&7oLUzCC!;!9g3L^p~IG38%&w3$i}!&ak}}tEabCGvyDGGZ6f@{y8hQB z=)(e$t^Qm7_}lb}x5Bq4?UPq^bvi9Y_SO4rk@M-StFx7@OB*73*?(13*MWxZij+G> ztcENiq6Z;ydy&Z7T-TfSn1xf~@qlbWcXxHl@Aa3kt2@-I*ua^s3k*BRTng2y4$p=u z?R^1@_JZ_E2NJ$^kTzR9eBB=$-4WHPByXy2dl4JbCN1|b?#`V1sm3Fh;>8es5xDs) znQC;v^M;lV``RTp=Pq3BN6F%Q3v&E@;G`|Km#O=!gvl7IYO=p>4WDrfgAEOR&LKCN zR+ydaFsxO^qUM22S*F)3mUgZ9Ii_J!@0$)y3glc!A`|0+elgYG>** z6tEPdVCL3hGmAJTOt;`WzB&}z`)4?WC(V~-)^@bC zU5oOxB|vc>gA0Gv<=XMw6;~IuQ1NU8ipY0&0Y`J=Q3kL^4PF}?E#zEoNqf8ERnTUE z`#_ztZt(eBJ$?T*G5*v7dl}S%-eo`A+g5nKCUNR=VDNOR=O|zd|Avfr^`JVc*fZOD zj1>FY|BT`6-x7S*QGZY&%0!U%7?J-8L`}=@q`{|cK_Pta?)xh5SN&^xsMWGNC6|^x zc|~WuHYA@*M<>BS?HW!JGcD3sxvpIkbNenFR#0U_o&-G&;K?+>zS`eml(YYT0C#$DwV@FLHKz32a@nZ!}o?ZSnsTJhnJrM0}JvmM7mV>5? z;}gaab9Mw3b!{;)X9#WLRMDA>^{Uo8S(#o@2w zRcP@CFaLR^G=LE7P~wF}zl++tDI6jc}?S&DTWHw9F6 zf+ZXU$`f8QAb+{CP|j^u6DX1VZOa+R$_hVF=gYijx6i{a$1&Jw$fLLG8);X|JSgUb zKZMw6Xl1aW8IX{E&v_H#YfoTtAjx# z+trt~K`BV!1c{GY(!yT~yI*QGqvpzHgc*DzM(b^J+hT}iN~O9mHjPWKJ3#DWd&o*z z&{BT(1}EfIx$;YW3(oIaXQRgEt1BwMw6v(HmIW8}tN53qEPzUrz$J<3?K6`&8eq+; zB@6o#_Zy*etD6Om{c9oc7_k-c7#OZa@KnbjCK-eggnV*GpW8VQzx|m?eF_RQ$_UjjBqdNJrh5sPitFYG%s?o7@`HsK#Z598|^ z5-&{pKnp#VtzMs~KSD2)M!O4m_X=()m>eIU-c;+(*qX8CUW@k1#y7oK0hwc@t!-!@ zV=1Hl7nr(TU2QV&t2YjMZ8Yuv7{bImtMd}y`zC5*WZTz;$u@DlJ zxn^#UwGW^R1@EnH?l7muSWoAjx)wLxBIDZ*QeiS?jlF?3GX~-_1k(!IkunXCQ|Wg* zR5z_28vSajtlf2V4+!gLx>u~STqYXgWqyj7$r8fhWSt=)U4d5P6rbXp=&9K{*t^utp=8kZgR=N;}g6lPifdE=CFsjG%iGM;A$U*Muvx)N7A~yqfC{6OofVp40W+;Qh-Fz=B(Ef0qCoBSI5amb zoaz}My%2_9c3i)Ey71rwt2V_}n3<#`sE*M~eXSDIwyj+>s#Q@Jas^oQH8Gf*nQ7Z3 zR#(c!_f?wpVq?yj%GuNzAH1vBCW2X<7)D`TVC}x$&3`fk#DoqEdN&Xhwyc^yg0_KH zB?cAE1ulS4*5|rmt0frF)`+O(3B?NtMQHz~?;6uvQg;d%1{;XbD{WL{)m60*0$Vc& z?>yt;P}Sf(1N~Wemcyb@A5i5V(Ij9Bw;i0bIDnJE@SkOyY4E}RFf3DsuF8wmILepc zCv*EH7ay6NZ?n7qy0}3**gQaDF3-Hjd4@Bkt?{M~KOs?lpitQ!JJcuXl)kSeUZKnw zLk%=ICDR_0#>8c#Lx*gO!Ecxk3+Jwq{0BKq!)T)S3 zsErN4F`F=jY9+pG)5@04M+c9nn_z)>*)2N35^sRHc6v~49yxaLS>~68YL$_TAf1Sa zeDvye((o6T$1)K`B(HhYWDY6SANbe|3DqjfnDjmAln{jDcSy0q?=_RTmOxuZZGLic zZS=hDG*yHh0e6E&|FgCiuJh|ERcuCARypWpSY1(;37@~=nsr0;=@VTqcdgCs&xIK>I_Nhp)exG?ta379TqK!Yzk(8u1ghJ+DO3 zvY!251hB^%vCxwG>gT0*HImQmZ9VRvzPf|87Fq-AQ506{r2@viF)WkaaF#w|8Sx>C zuM>sLLB%g71o(R&+*D~kIma!h7v;T*WbF=g6o-QcM37cf?R(-bWl_p&VWQ%v9`>t! zt7>LDGQCg2U^Rv0pk+X$)GVdb+ft-42+M|lk2q!o{MCJOz^O3*HBRlsrpm6!=4SV{ zXKDXtZ}0BR&`cR}JUry&>OL3OdC^-kyh7<+5BE779n)MQdXMFl8KOM&HsXwO_HpC+ zDtHTi9KO{;{z2ORZ&df?X`6t{pAzNrr(F3@RQG@0S7#%8haV}xe|;Kb`K|lu5QLxE zhtOAhfuNlhVW9&l0+slnl%J!y#kD|XnVd}>-Z{d;-2pl?X7As(r}S4ibZy?%s&pH0 z&P%d>uRE}YR%C=0sqY>{+U`&kcR5mVa6CbEG!KD*LV(6|swZ7_a|-gr3SU!0{t;xu z<^5WMQq3Ph@FB{~NtJntkP4&|RiYYOm{KB|^UP3e@GLihWOkEKR*+-=sA#29S$T|u zhOz^LXB=f{UT0lfMzNg-j=Uo6(2t{UFBI9vg>GzlaXxh;&O1D?TU?lpuVvQ;t9SCBi?cj_to)8rHMXCp(Q^h z^aPtD8K#| z8jEzWNfO$p^XvaDwxbH+!Wtv(3I;vsyvvH02$`OFVUvhAssUd{>^#>Lj@mhORz9n4 zO3Sa7&u<+B&7H(a9gR<7tM2;lJGIUDJl&-M*C4@*FX%NjH0qS8;(K0pcDK7&NfM5p%9}kk9Nv8M&|#V}NYBphvc3;J~jk7`o7V zd=T$|p1__q;5G2=EdZ<_%?7#L5%zV1h9^f?l(%IQ`;*s2OHXx`PKyqdkwq$|o{`0) z8rya&%RKcjYDa9av{y6iPd!7-XI72+r$&Z^Y1LM27xQ*jU%4)s$AOEYM;7WKB=RUD z0_SYO&@Y%M1;C1|Mk6K$jrQcRwI==VnGUiL2%3Ua<%0bmsL* z>Y1?1q6`HvhJ(sy=`|0vM0CE~i(bu}5xgJAl_ua#n0 z7PIStUA-A3t9unRKXYbB<-0><4kH$t{O@e1AcXOeo|pS6hu+x-NJ6dR}fd9 zd`xooF?q$KLXkhxGefUUUR?aDfvvQA1$>Q4Ov;mA(hPp)!yp>q^B}iP1ym$2WtLmD5TjXKBN#TwPBAMi*dP2W zZ()s?`;DTl$)#-g<@)&Gv?*{I$)oKN6p>j!4$Pu{HnCR0tk_bOqJX!Y@<*U>_7vx#Z#kk@%Q%5zB}8yyLnze z^}ejksxhzu4LP|zT*C;^ZhG&auwsgy<30;U&!0JQNi$Zu)iHe7Sap4g1yGt>D1kf{ z_%_TvR+t7&lpR>|w4@<4g5dY%@ge z-pH*TtXa=s9ad1W?=C=t{z&^0C=Oo5^o%l7;9OPwSv5#L#VsmV6-BGfQ_}BqH*eM^ zE*tYDr5m1?FUGCd4swtu*dVE!EuD1HcwbdEV2bA}cg$r>qbV}Kpwd&IBaZDIin0-KBK5--15ziD225gRhJ~|tfUfze znTl&O_X0DSWK*6JV$}OrMAD%<46nz<5KXO`)-i`9YFL1QxXBrV-;la8I63>Kn7(=f z4ymuxmA`ilP;JZ5$E%Klg7AW1Yb5xGmhyhcF+g!7e29439*AKqNbLuXMN6rkIB3EFfVkSLlTg^Nq)W&v-& zb(2dMY9mLTelcNwrG;)V!QK)&r;c&~1VBeq!0$c=5|WHX5h)%fXrQ7R0xl&rY7tMQ zc9Fgkyt01gEdtw|REuHuYTtMO_iVttT;D`o#$3$_RCtC#FuTMlarL&iLwKmtDZq2% z69FGS^JRjp6~;e*=tu|r{t$TR#9}K<%*fuwJeIn#o;nrS#f$@!2ibBwL@nV%O{wxZ&iJ6k!Ve?I*(m8W2Kxi9a}3e0&=0d@z)s8vdEfJhJ-n z8T`==^pxz=s0uey;qQK#^cSo`85n#fL&8v19M(GT4<8*z!res-0bm zu;-&fMKaA1) ztDJH8(Lu74C)q)+DJaGaa1;4huxn{iiY$<3T~x5@@F2{yBXMlp-~&7hX~Uc@3hqNL zW+l0!HKREW8l+D(QjLU5?Mn*IAf7r7IM;(DD@8n~^@OUNYNgjxoTLhAPJ3#Zq;B&B z7O21&ftaJgCmFxH!EY?SAY7y1e0}16KoECNH>C>F$_sgXPH{a?gIB_N&UHu6nO{ul zUARN)U)1C*YlD@+Ry>|aiH=Xum)Jqg@sM@n&3}O{bp`vlz>)3b?1R1M@u^ZZ@TmD` z!RT-qL|v`6%ApW{pG(96I!Qb1srY>c(+RXA@cbxHI0KH4qZ=0snx4mO9xlh^z&OuG zZ(@6WwhhzatPqBcd`Zo3I5!i*`R3z?xO<;{0&94C;r2+3IYj*;zS26mv>XG`*vA&L z>)bO>iIDGOxKI|EhV45J-nkze{5~-x>J10fihyUbx@hkw(z&Qkm%xh_h^Lp#{}q16 za%rjH$?|)~A{WlPr2WmC>RG!T6Ug11(yRW>Ee!&HGw`aDm|lWR5kp=F)s<7w0{#TP>2Xmio~QHiP9JWp`Q9q5>HsMo+N<>!Y7Z-v%Eylj+i9@5#q{B0 zhiR~v%r_o`cUuU8HFhw9U2gBY3=prhS{oisNfGulOt!c}>rJ>cu5*&qH9fdC&-r4y z!H8N2QJ{`sO?*08#ZVb)e^%wZcrYDj%?6U*w)}Ke_YCleX8i_uOGcq!dK7e>SQoZy z)Dy%Oe1W&cBCq>Id6484Ruv-9UoL}ZBQ$Lab$|rq<|-g+m}ogw9fq%nwt2p=bwS;o zC!5h8f*^0u?Uq6t4xU?DJT^4*Ez%bXTJ$o0Hk>wRe}cWMHrvcG{I7BKTj4@3#uif- z@8{g}nDgE!&W$>*I*1d;!nM}@*M2z>WadJD#960DDc!91e50aXpaF0VWD;m8S!l6f zE6htd9p^^-+p>wATN(XQ8)AjwQ?Ewi$6KJP6B1e!P0t(9^5GTQ3@6AG+-6E@zgv(M z?QMI-3XIIy$HNnx{WA|8{fV;Dh+#J@2z84T*Jdl7}KviuS(b_W5Ps_x2Xp zC~=vN+BJvmYByi_eM&z5YHL6cmU25_Zv)i16f?_Z;g}}0{Jn-#6d=z{s)NPcG7iyn z3f$qPy!|L1X{=>s7Ht$u`b|AZ`uPkS5?xuwN8mL2>Jzo294ea^!-Sq0tjNny1BeTH zzIV1n+`@*Md+rO{qL-idVRL^YjdkN3GdxQ=nE7aLK-EdnH+a|3b-yX3G_M| zwN#VGuy2qfT~o6CDb}4Q_)v{JL{t-V1o?}h*-E#Ag`QDKx##>ovI@N^!(^#1XKVnF zm_=hOrO#+zy^hf(>~)i7e|cq55q}`g4Go*ZPn<`q4E?>g^(?lfM~&T;IQtu^x;is< z8IQ^Yz8QWXX}(-0`T+j!;r#vtBPevq6bamlYl{6&kbZ#=PUf-EO!rm@y0c13FSMfn zI3ar-Z$DAbI9N?zFUx1tNAJXG3Qpx*?RCXBtIv&!@KiPi3)CKE>qFNFklKm76=GsH z-3I>@pCIO^=9$M3r|I(Y;rULt*M`-_LWtv008 z9?Do3c6}9wf>-%*ygC2v7Dj2j-tKtw@dm4N_fupHy02yB>@(XMB)qEIR&Pt>BV7C1 zoa?GJ>QHC3I%nB-%O%lo@}Ne`C19b3i@}AV)TaON*cjkdjAlbT3xAn|Yti0&W4KF@ z69CP44nt9Ggodsvu?S;SjWU+hy<+J*}y%p|iZ!HaGNm^gx_p8e#^IEBN zZBA%bPk%V>iDcY0%|yj++V6o}-GyrLA@9=!Ca#{4L@#UDmG|I=dwnhIM!UFb9f9L# zd-w&ps%wwdIx)uKD~ZpuiI}jiz{29V=m_pXr{V?3FxS`aYP%=D1K^f!*dfI)Rrvl; zluCtq$M>2~c!CAQ2`mQ)1sK%gwlD7b=N{3V^T;nqACG6xweN4wHQIrh4oA|SH|Tut zO`jE0;N|bSg3SH!+Bz@Nf;y62bzy!Re>_LZW9W{v>JtE4W2VL5K>uuiNzC%9QQ-jqMq~j1 zIRD3kod0Tnb#2`k|J4HHSlDc^+;#knG5}0UZmQQkP=?AbyJtfLL6q^MG&QyADhA+0P}j zTZC#c+Pm2qWE>x)(?1h!i}y~8fBV*<^68#-|ny|hh2q0D9a2`VyAwwVRPwcCGZrd@rxh= zFt}z=p+wNv*AZ9$R${CwN0$b^+gSe#MF9fXr(~5-Cs=szStq(<R~o5n-RiA#`9rLQk^WPelaFrTX%-lWe*YTzk1+6nar5jDAoZaU$g_TqugvU zC-e!@!KGTl?z5Q}2&CNruA_>!3UQuEN#y6sZejgc5LP*l6%I zUbMGoroZLQiGO$xBz{0EAd3Ykt*wB5d#g{ItW|Jg4{=R;j%5mS3We0LBin2cvxZ?+~5)Q@#5hSX;K~ z4V?8_ckzD@@8oLtu0lO;hca3k)x(YrpIq(?lV+ZS%UB zN(Gjc$t%#Kh;}vPn>$Pl?JZQCr-=q9ERBRjldO35nWfcPh#OJ5Cu;M~0uVrmyWMh@ z=%pDLko&^!uWM8Gshl6HD{tK@TRdTE)T$;S;9wB%NbuA5pfrCL$pIWf%Z@}lFUhAPkH41+=^0U=53BG8$5WthGbPvClC{l*Ld3BvT z9gKSwC&6IPXPg!6JaV}r#zRw2QkFKF9Hhd8hVru>L(s7oen+U%(yc$>uBB>gPJN8hA=D5#pbV;83{AuxmY5LW;K zBx*-$Kf~-}eJ&KVCG-OTmrv@KSKRUyI9CjVJi(o8C$LY}&nmI3U1{&e$#xJ8ztIhz((U7>N_Q@9Q zFUXhyw`q&S`TJX1YXNkVX0*-Q7e`Zp&J^mMQQioLH274lg+Mf|p7?f0U^2HDhSob2 zMRI5%-WUm81QqHEs(mhG1;-H554#cQ4wNS&R(&#cD-1g6aQ8zmFkZOn%QbbqoT8Y+ z)A!9z=3P#d3F}7QG9jc%aszN|(9seG@p#6re4YDFLM6c-$0UR#h`v%r+7zsWp1Fj6 zB>jx^f-aIz_X;!j98MT12jn8&8pjLo%%*!@qvRQ`y1n>nZQ^%9RHmrG^N zTSb1lgibtXmEXD7tYA_j8IAWCPdsyaw$53LdU}rna+_OdT$%zLb-qn<+zHpKEOnfF zv-Oz@+l2dSa3|fAa-&D-9cgvp1ICwi6=fug{poL96bLYMSeW?;=Z6{f?wT~qNwET( zps@(Vy%60&e9w=%CY4Gfne4Z|p`iBnv56J$3_|ci)it_^7*dWS&j>DN$@HVLXJCV5 zm~LZ5_oTZe9sw}InGFiWSbv!*StKi5ltTo}`d!;~b4J+Um%0Jp)a=q`1Z>OG3$Mqi zf+KR*jSaMLJtOgToc3W9Tx(a0r)9a;h1car2y-dFNiw(bwt^&4&|O~W41p_?-`uC$ z)=)D%lxo)JbjsST0fP^rhKD~Flv`0+VjNE>W0V|mX`J|LK_4G$Xt3fk9|z8Q54)Za zf1IZPK)c(62x|Mr;ZCZ`!@8Xe{xY~%HYGNx;o$#B8mwzNv7TVaW=6+_q$!_R7EEUu zOK0J3qb*+E2A3l^cz!Q_{N0D?=}wzXpHBQPdk~pmePx{Nn}}uu9?0f5%?WA*c6oC9 z$xGFU*BdhDjO;^vsfK!+K?|%$+8EphZ-SZCgGhl)JQU(-wanMPdI_~13kN0>z$nzY z>jl#JScYAkWa}^=Be+1&cWbyzHqH=?63i}g9dmpJ%b?DMA;7>OrmAS?Yea6q-64p) zg(bdb>(Q8c3M{kjMBg}!3|YPWUo0Z-WbBx^a68+SC#p~{6aCR%YO$m2V5SywK4bVC zyL{t<>caq!P7FymqGF`j;K+Y;d>T1)vPUi%QPCB_FsloBCS8+YlQyW;`P*iy#CVFV zv(lC5rBLYn`yFhyefG*hL=CWSQ$zpITHiP4KNU~Gsm74!dSthLF3-BwTi1r%n*!4r zrWda(jx4O5*}^)ScQG#@Cog^mE7@(TW>wU`M*)lZF?bE;8UU<%Zeeu7`UlEZ`M6qQpm?CSCoHdqP{}F}gSQI+kvAxz3;k^0?8UYL-N~u$F_A(< zjA1_QX=%V^xs;Z<*lhawM#$ZcO%`!aD_f@Ha#?0Fj?&ZjsDMg+9D&>0D-%6jWw{m| z+~5`WgKD;Jo@Eu$u#Z=Df9SdY@)TNrCxz#vNo}Li)P0axR}{ruZT_Ni+=S$n8QUN% z>ds2hO$Ag+kU)&*^3jUBlbU~Z##SZ21W-yBcL*how>D>XXyJ8{;QV+!x^R;yh2njb zNAm{CXXYwpn}!luSS~>!rw3ap8{cZxsNAF<21Yd>hwW(M=shi2vSN#zzbP=JAN7*G zov+5_?0~z1Sx<{JHqDd#ed}^*&QT$qn=_t;A2S5?P*&P4InT_KP>2bWu*O`bMk|;& ze9Y=i$qAFkG7HU&)TCgB6%WTXbBr8*%*-z9AUS^^xn)g6foMl7$j8DPt}(Z>V?dfM zC6Md-_O#AkV}{dLA8&~-DBQe9($c=o#N;t>7Z-5`wx{?diZ&OUs2tVkh+F@DO?^XU zDh;|q7u40$R_Co(Q;GkflLE@KiykPu4EL2&gGeIEbIZ%?lWcw-0vWTNv znZC+n6a@2{w-ZmNoH_v0Is(p1kAY2(+jd=wIm#Y99!JLv zEP-%m9a1^QG){?V-bkkKTfUArj;$kOfTFfTa2oh#AHZ>;LenO(YF4n~DOWl4Vh!=J z40@w9%MN5b`Np)c6DZHF-=Mry{@HOD8g`f7%X#aF6txXagO>WRQn6_QLyA({q*a+Y zSv>wk#0~zLCU&@~L8=;2F^vPJAgopWV=4u5G);UNV(Ifq&baZX;#xeN#qD zf`eAL11gz*@lKx$y;GGJNPlUG+GJghK;7`+4JDyzu4UL{p9&wZ7xnWc#(bYxb;2;b zH?^fafYLSk>Z=efhs`E(vsltqrll1fJ8QYi29W%k^TI2eoSVuU^o(G>Ia8AKhRL}k z-M7R~cjVDq5l!{&(qL@cmRv30bjiON^E~-%{a%EI=TOCdI}_5 z^0*z7Y*{i;|D>QRaL3KfqcD!rNE^ke#j2&YsDCSf^oKh3+Y_4DM2Vo+1r8^P^@;{gzIl_;>V>e8d<^Po?Sb6&$T7w~ z!z7W)*QXJ~jGb>ZrIL93;B&a)sAi2eIqI2K$F-I#HuUx+-eW?tSsjb=ZNMU>%Fr6j z;@Teh)sJ{FXNFvU_QYIRm^LwbT_>p&ZVOqNVMKy#&AOeJcM;*9uqWwQQq+HqTjN^E zpsbW58RT&*Br@rbH+64X zOx%ny(ACu`q0wEre`8i8p88Fbr$+{}Via)fP-oBRI7bN8JFvUYgQ{Q4$DNbDqz&{9 zyr9%a&~v+d;N3atUa71ek-sKx`%GUn!hfrmH%l8ziM-e9W|q@~71aq2A5eLTei`Po zB@*hiG8Qp|O>t^H*;&iw3ty$&mc=j%L}52KPU=^Wh=9~i{OKTcyDU}--1PWb(P1I` z!8Sf(*rclcx!}2VhVL?sJ5^+?yFKZMIaoHF3#F^8-W5o`h6BBX$G-o~dgYGAHv9Ka zpq2eFzqtO}fo5ZC^k43||73o}(OV4AAq2U6hl69r^X<1u2JhsdU_ptuCu|ich zk+EO9Fp3$kaZY0;ZaX-xPBFxW$2eB>N;j@ETyBq!|6{H!i^h zAhV=WeOS2AL4a&bK&<>FQf~0s>-E@?;<%ZuAY6DNDA#!UGI}Y{r2efTwR@>UF2~b?3ofOk5@-Y%RPrF7>(j^jFpdyotLCOZS zaK|*HN;)!)W#o4{;!InNF8YUW5=0%5^uV1SwX3*9*iCt>F*8bKKR{)#QD3gY@&h7c z75g5F+AW(ku>?#@EI)!FXj1%#d;oP8%&UY!ml%-$v?a@V48*n0elO1VBsNh?C%L_X zoi%i^c=a7ufLMIX%+u8YRf4j*_7 z2K5R$0%RMXen1N70w;Fq!A)ko&)LFCG|{4Y@)e&L3^^g|XkA1F{Gb;>xCIzXdm3Ka z8W!A_yMx2x5$1WO6#Hm28tiXFXJ>oocCJ@_H+znV^)rnJD(q1=QRq+l5N2^j75b#& zyud%W>`X-9ng>PLu=RXT7|3t4>2~JKvjJY1SojA0`@No?iFG=dlZGj#dY~U!l&B z!v5!fW^s)`wNZDPlGtCW)cs2N{BY`#II~!Z0;Y(fhj8Z|lvtXq&zdQ{_UH{)=`I3W z(Q9^N#hIq#Bt|K4{r6{9*23=vjx%z7%>yHro!jB2BeA4nRk6eTPUrE2YxLYmxt{2T zX$ix8o$R+^2~{aW#BH(+hCtsEZ7#*6T&)m>AZG^NuXwI-*HENb8H{KFsXl-ofFVbE zn+86{`8S7lSLNTa-WU?TPf|qqw5%mic^!*z0&&+_B6`d|!>tK=ykI3=baE5LV|5C{ z(#FR=JqTM(ZNi^rF)>cIx;NhSfv>N;u3WC$`^*8=Y{YP<`=PRx!qHa(PRVP`9sgH!rq7q6CFPh(!ndYw4ZYF1EM^dp718a9g8L%8 z)}V6}e0sc9&zz%?%}+@dKB}WC@%`&&Ax!qoSRzP(X^0$P9J(=zeVP5pCD4N4hS7}~ z5$^5m6b)^yd$=P;g$|s(}w5=BvDgM}HKY@Sn zP)oKomP?kj8@5%2BIRw>|M{FYYgLOJz?fXP?uf|1A_w1d$IrdQsT)u?K#^Eu>Nk%4;q~yba{BB2s1b{JbJMrL(D5!$F`B8#H+i}erY{w_ zY7^s{cyV;$W1;q)rHz}Dy)C1@Z^HfV!WE8GQ+dHH{r3@_m5M}T$9|_^nL#`Nyp-A%WeFSqI-VuH0}SdB>kW2F$dj$ zr0{ynjUz5>dUgeo z#JMk;$DWJ;t&Hs07;&Z|7!~ky1B-v_QcKijelocG8oM|H)+1|d(A8@|Gl>_UfQn-r zI+E|OQ<6o1=DCGNH^7h+L}MJKYVR@ywoQxsJ47og9g!Q0RnoiPuDd<53DwY7`-DCN z#cB1SM1J`p`(YFTQIi8pr3C{)ymZYfiNd3Jkc&`e8t8#SXm6=e$xIcWw4yw~IOGB5 znDdSQb|F1y)76h=xrLS3Q_zDg!5k0M=H2=^^R~gJgkQ5msQt&&1U9`q*49Qc# zq0bcTn`*3lfnq=xb!9{Pq-f*v)H860gN<#)3@!iBicNvhr-XRVLc^GRyljD3O@apE z0$L($W8nhKIoh_+6?(>qT&}+sCngGHvJeDVkLsZt8zG+waT5Ts45<#mu0C1TfX0Uo z=%jYnP-l>83jjCFL1#C4zR1j%Bw*^J21FkCoTXEPqIX?V#8G{E4kC-4PG~RkBWx81 z7q}LwXba3@A}xL|PyDGgO{DryZGgX!YO0-{S@cvNK(wrn;1M8_Qo1NP^=Eo$6GQBG zW=@XEIm}`Df^%*K8|5tyE*FRUgRS$!{l&>HznWENa`qBoV`-8&kJK%aFydHPXg=h~ zDg)gdMC1yP#gF9_lpIx%fR4Q}#%UTK|F&zvqZEK?tt%fIAV9-dn{V<8z?4qYNTN>A zf%qmU%R>y$!z#+edwKQK#`aP4PAtq{-&xgP3V_VFp`yp{2vP)X26|O z5{-QfEjHcGLUu00+sD0ayW!oZk{okMru!)33~8@$Lb5`&K@gTC^W!pV986>vR31wZ z1C(ZiG7Zo}?Vx%f0Vpy{+t3Ukmx3Mt*Fr2nbExTY$q9QZx|-mbRq}K~7!7MHCu9eK zwqgt|Mh~kgUv74hBQ25IA<}0tdbX`LOCiF!<}lprU}*CU5}xhU}`n9JP|Die~WPjOjIO z;zj@?lV?=lnM=JqpxaTCvzfbxA68io1SY$%&QNgKfYM)Tq;d`#rJW!T4dM#folS-1 zDRlUwF@@tT^&Dv)64R7wW_HsDc^tIvw&h9QGn z-_eIo&EW5K&iCOxkT44#I1}#caSaTB5v)a8cJN!t{f^lc1Y-LSXHFr87 z{zbpPE;B((`^_B7|2Sr}FHAU4zcl z7?r|#sudqc79@}L2;HCTy)`wo5eQ-o+^-{ZD?F2E_x7W~!^Q2g8>;E2#EJ|}Sb}6O zEmLdE$~4V$cBj;h00m0ciss^?-b=9aNv6L#kTPMXNg5yDJ0D#OQo&=WYpaXnWKddF zMIWCX4XB$fqvte>jTSzHwasK}6lCT7*f9oc36YryzEy$g;ikgqBAOF}=Uwo7Zfi3$xB3-qoY}j- zu4ePXg7tk(I^^@`S+yoTB2)%e58wc|)#~xaD_-b+E4@Hg`AWtnZC6Ed>2wL zv3d2Z9ygG%+psTpyBBRPFWlxqO<|k-U__}1=my=+VcJe0fmMn!c!Qwgj>i^21XE!yDi)D6vcj=)lyddt9OU2)aaht)#e|8TNHp*m!L37g0++s6%sp+uI zZ*kSlp`s8P^d?Yl{{zw8Xj9|kyGB*yeJxpAQSZz9LEDy{W#k<>Q~;2-RAe7D0>KtO z4Z|WYE^8b$;Qg=8&I786ZR_Jy>74-5B{YFR0OC%h97w-LhXrA83dy_RQ$*h&%f6tjSlQVnv*_#M`BJ^BrpBIki z&XO<4ff#I8M6S;Oc?Y}qEQCRw`H4KZ*sqE*xe}YHr_}mz^spOO{GkziC_RXuiVGG| z)bvVKVs2tZwCbp2kUVSi*47j5^`?pKg}KZL87 z=mR3lS(*=rZKXx_IW2{zb4Nos7pG(vr&gt`q8=SO;X6xADA?IiQ39 z^+Qn)5@_hv$X7j*-%Q0{RHJBmAM*N(!#rrOedOU49=SCW&G)U(To_pr_r#tO%)$Eo zBzx5_wi!HEs+=^Hs&AYMF!6os1%sF4*-tFFcKUXJG##Y7&cR@WE?R7dN{5z|}9ZBb3CrX2a1;OZ-rL8jpWP8`zUPwt< zPZ6S~tFNY`E$HNoKpFfs(Gcw{r~Hs^A~9s^b{1z5Y>8ql1cmr6z9P@N*@M(Iq2A~c zJJ`%z98`Ns%Ro%Zl&^T>YLq8uD($?!wSkPO`_2xfK;wqx8L#pcmX1^6kOEoB zs_i^xpH~!q7a6Jxvv7g0Os;Zt+N6Vah}}ePbVP#_Z{T=MU?a^RMqB|(_SZMuAtd+D zvCB!OchNGTX)d7vX+V+Q&V?<&nS`%7RD3oP5)uyy4Q|BDHdIoR-F=OmOK{J5B|Y`z ztqpC;{B(v39_%f1kwO%C&O#&&66us4*cRPi+qVg1{(kEM6qc`W5O6hr!*y^Nu9Q?)XT7hoogpk%)#A$}`ChV&RwTfP#I-7Zs`#m5zlWJ< z+8Ze=ly##cE+ne9+^o?#k(< zxIS#O=KfJ;d*>8TySaQ zpA3B9FHCv^H~L(%CbM=Y+>B_UUWlhUUE>Q~B?k*RzwIIZfis>P0F~e;xb4Z2TGBL& zetNO~{l%+FkzI|-2SU?1$*L-b!JZ#zVs$(5iI9bzJve=isr5oS^m~Q(g2{Emss~L? zFKyG!>A-YN1h|HX-+61J=x4%>oB<>0x-7Iop>TwK!F^h^)_U}wAiHvxEv8@lbXM=$DhlmQtw5&?5JKN7 z{^vgZOF{LBSo7nA03k;Yrgf5(;uNSJsjEJMQ&X`N+^SDMzqW`Txh^>%NlXF0GP9gC zD9Q{NNAq^dO6}}&gB7S|fQf8w_o2`DDsZzpW#186jHj;TF+TfOL1fH`dN4x1#iGYp9TUztT+HLAv96G>O%CHGWUXT8$fXU$VpT9n;#@&$(Y* zywCsDj#31HE9C&DO#{+zx0&_tJ?o-==9Uz#W&?5LC*^#zsd&#+(vF#`UsfK0&e_TE%BhH zjUeo1mY58aO`M~+oK9^&?)Cnlrrr#zv++QAearh3&evu*B&Vr`53wR~b;Tz*}b1$;MT9ogNL%3`REexA&#^ zcpImf%9f~KiS(B5$kX|9c;?rh^1Veai4omH7|`qKdJ4kc0cL0AYGo&ga7Snqsu%Hw zbs%{ob=o^LK57bq)CF2Tbxh*?G z3sP@u(R>BrJr=th^u#o#mDN&W@yX~@hJh3di|0 zb&Wzg@(f&-#XZuehQP?*}p4_RNv- zH5-56!~Ql{nl%>c8B8`mq?D5tsaef9TC$*CaXm@ef8^`*2I_^Lcz#fs$YWLY_HWqy zsNOv0Pst8n6k;1B8pc(K*UumdKZKErGVEz)s0*_{{!Tkp-`sAzRuy7yputrH4BZe# z-pM2Z-p-&0Q{}JHjx~6oVtZ~=+}e>w(X;tfOEkNAIVZy%1VjO{qOUmOK+sD3mZ{6_4)PnPh%OA{lOlOG30!P~%SCpGeq*;Y@+}82(vY&c4>g>ny z&@;igVvLuy@KH~EbwbNG%DG-r^}a#UyRrD5uW8!S)xT+WPUvO67c!;7v6ZcA8rSyx zLzBB1^l2KkBvWzSbw=lBh?oijYm-VUt<&3Hyz>L1YcygCb=RL{p{4O6eGcPl@LuIzGA{bX%6hb*b> zAAiUL0$9Ye6jzg3cbs$Q$2FNNk77JLRF>zi4Xu|t*XfcO+#X0ERyWm(@o-}c^v1zUV+;?bWNtn>lvr^a zyPTqAMRC`x({SngyK`A&YiSp83(7@ZE;Wm^2pFa&CgmgOq^|EMxe|ZG6;8NJ>tB~v z0fmom>U0u0#km6H7i@xFs*|sd>qD?3Q@+1l<{M)*?tbWZefUD;xe!mlfo$sn&yB|r zF5#7Ct6WgRmGn9%*t=I6Eui=1BdaqGn|S%)mU6@j1+MADYdCLNEY9GjO#R6KX^E*^?{u1GjMrvdhkn3 z#!LPoWhh69dpjgk6He^>*sTKLugehX7jziD6F`r-TV)=lU>I2g14t&Ej zCg~2Jjo6`A(;pbf27N4s7(VoL6|pn#%PQ*vf(=7DzEMcms(j|WQh2jU*aFIKV|Iml zg>N^3S z9e0MB%nzD6DV2ftqCUIpVH7c*+8o_?EVwthYi9|%Lb}}LKi{b*_nCJ}TL-egEmb#M z65R;5Jft@_lpSW@``l9wJ#<;AFWRrnla5>5MukyqOhjfdYnHr&7L;>)eqnDd=9(-D z)b4}c0o+3A)G#$smZ1i4qx3wai5Ar=m>1>)VBY3u!PufxBHRI?M7p7F@JC?tG)2kv zEst=%himry(yH{`Go?B3(lsj%vZUB2tF8iu)j2#~IqO%G zO1MiYCtmheFsVrMQ|>KRT&gC=q1J6Bkzima%Wgmo(94E9Na(so8nulIFDZQ2LV-0FEk=@rqtW!55^2bSr( zCY#$%t_lP#G^yRjKT;J9!;e`pX%_wJSC{H;^2rMIl7#YeHh(z` z6xLFY7gm_ErlG_%g=^+#-o2TWRRi@SoJf=)=W%{^MsB$Hs3lnK!57<-w`Wx@FV-3{ zgV`!o!Z;ZW4MlaaXCR^Ao%c)Zw1Hi2d9+=Y`2Chg%(C`P!_E0Lb963<_f3HmxVb#l z**V|4H`Ze3&wh8;@48#-Gu}~rc!ykZN=)%yn%kDN*VRXUXDnvT9#rMud`jJRBYg61 z);NP{k)leG1ONc3&I;G9_7r#{O;C?}wA5Li-MXL9yPad7I%5t7j^qnnz}jwq&U8Td z+Cw?XE)hQkU-+Gg?NR~bR2Stm+rfs-0rR<_h~TuyP01ZZhqcY>QEe#67X0~>arEiy#^6SDupTSrHG{gHRe%Ff|8 zG!a3&K`{DvBGj1Hq1*Y-GzW7h^S|Q1F!weYUHixxZQTw!$0YYJ);XZ<{iAiilnVNp zxl;&%usW3aqsuj8{aAlsk^VgBz?VNU|K9$~4f4<6<37~N=F`xDJ~XNS)`yb*0c>Fp zhnwHEbpB0imT1!w8KYAN&0WI6I`_j&^gGhOfa=edTDUkP?BTz`{aktbxPJJL1?jKE z{%72Awd!92t1x%_XY6s7vmXo6pBQcQpW5?p?7x@y#-w9b*gl~ToR)qpb((tHn9`V~ zs!pVdL{GV6e@XwbHy(Ey%yhOVBI+uC7Wp+}91LcA*A@YT{pOfsCTTsv_o$v4kD0O+ zv!O8aQl5w?Yo1!1oft@KI4Jxn@g7P=EU`08otKQej!`50kl z2s=^P)BA5#{uR89xht6SuunvGZ~kv0|351mQwTEz{Y1#d>Aw}i2uR12!i-Bkk*Y=f zw^FC*e*cP6#%EcgFK=|uH6*AC23qZ2VT-~UDI zpPCpW@aX3j{@vr56I0T{PUA-5Y-w*tudi=u zXX&D^Pv_v#qAY7)#DLKANGkT2^~OXVnlqN)n4Y3sC}HIi9yU)zvit0t-bx$BO^ zN0n$+g2x5k|Ki1LzmpF7*VhOHT0+*V{=xK=5C!o_N#juF+H$vbG*u64hCmTYjsP4D zcXL;R@u0R?;JQ9gPTgYQ7U7}nx_!nVh=cZPCuo^m#(G8`1+SVB&&pWv8H1}#b!n~m zDR0w5L3>HyeN)p!NRlj?6cG0LiqJz=b}6~jiCS67oHsRQY|!F#J3inZx6+M=%a_|9 zv>BYVr7ujX^C4`oeF+!Sb!#Y)0HM+aF85Za^>vxsm4_ZP*E;+r2!MjBI>5Q2H`E?O*b0O6KJB98C0oL$w4qKUVeql`(8WjS}PzQSQz-9qp6*q}^T%^>wxJ>XVI{P5v^_Pj>P2i1AP~(fkh7P9x9l{`7Xn zDb=!;l@A?L)?iI>=C1Qmnxhk|Vd7|EXP=k;v*4`d(GcQq67IcMsi=LCTJd>|L$}n> zy!7Y6Y?u$@j`WMjo8JMX*@C-T9*yCnh;zj71s0Y+_N_@=kHYxYV(N^}-f&J-S8C!< zu1n6TfANEXAxpRJA3sX|@q_GtkZ!I}MSzi_JLdT|>T+9l z(rgukof{<(`8^aJfzt3hnnG(RE;Ur-5$TlUKoz9}sWQHI5YiP9((lb`VFUs(fE}SP z6CLwmgz)8uu3DRf%R`K;T_2&<3uec(M;Uw}EHQkGpaw(`sSF#8rMu+Pu&>HI}=0T2>3FKD={D{2dX=OQ%CP$ttZQjp_Xs!`nsYg7)|WTKJ}9bNu1^_&w(7%5Tr69(0i5`gbZJCyF>S?$0mx zI$&anR%&mvF3ZJjJ)CbEo-|2_rh(@+yvnX@FHz3w8PdZW1|ZtJ%j(-7;LYHNg@c;1 z5_(*^7=5nAnh`&&y}U{v5zbtx7wG?n-0E9OhV38ZUcdkVc>f#ZX7*0DhA#h6gm_u| z!T&&=@_|p|n4f}iYT0JlC4;pIXa}LHdnnY(Qj7EWe4B<~V9Or+wz%ng_3A2i=P)Lb zgxIa%Wzw?)VWJAhtjow*IkMJ4N++6>GuXuF5QxLTb%a}KiQ&73suc#+szw-OgJ5PK zCG7#_JZwz_4rnVcGxZdb0)Py;JZwO8_{nEoXtD0Md$?3=W|dE5+>Kp#F2Md{5di;k zn(w)i0zxB;vU>M@2E`N3ez7oUK^~Hv2Nre4`AFZydhk%j0*D{oXbL@5sBsu#vYFTL z<>LMYKj(y}x1H#Wz4=SduFysJ()A2Bzq`oEuRSUkZeueAHkQ=1VJf5kUL2)EOCM{S zcD)8J%zZR}v6nUpu)Hd1IjtjgPIsFEPF(83L|kGWV^!ew^V_WEkqxtp|KAb!5DSBq z{TK1Ce-X#|-y&{dYUA*qcqa&212H0m+|kJ$LwkZT}*qjVcvY|Sq3^duPl zImPIBWY~_*mR5D0wkD5rx}~zQt!$N)EZsTURPe7QVLhCO6u^Jpv6vz@;VP~R9gVRi zarhhKiZ`KHoDGXpNMW@y_rBM3NwQS-?9!3ROUFJnVf4ZJX8@x|k3NuQXN^T@Ust)! zm12YnPFA(Vmp{=yK4u1JU69RE@DE04x*H8W*)2-q+1?X6(xmdFOJFruzoc80;78V* zeEvef+|Z1uqh@l%T>yb(pKw933FYtfEpkbnul<*INDER*i z@f{4E3~inN0nwu_Yrn;T(DSJdvl(PlU4vim4=)xk+=ktz0X_m`D_FlQags{bLXuMR zdFd|UBN|c6)n)18G@ik3k7v#?ZN2_AY=4hcE924H$l<9GiTYQr;?ld<3m zTeG}h&P6)NuQId#(Q3B8UmZ=U(1c3*-B7lijyWA|$1(Yn1@1WVxxfXDe=iWPux?H| ze_H!Z>em7h(`kozDz)A+cP=^|7MuO9wxk2dqq?U`q&c3{QN zPMDU$H?YA;&#BDET^iO#LwSJw|a`W086$kI%VID<+5qx8gCdw#MkSzD+HG4ecd z-q`X<+eUI`1`iwP#IR0+Tnx+MmVT3LF>?%1OmY@*{O(0an*u6v)4AMutHZ@I8alam z+h@?4Qof?YIz?XrYc9jan653sC^~*J6-TbsJJlG(O3H%X!x4vww30+Y*EDavnLGYu z3KQSZ98_9MaF>Yd9lZPi+}b4FINp*jvuqL_D17r+k91`G}q0Cl4q6^h| z67z*ZH}M`*$4zA${=y*m6AmwEUHrr8)}d?gm~dvhA*S3AE$705ZS1Pmj$HPq;15Ca z$eL}kz8PJQ;1=_PA&{S_bJ|!Ts6GAd&6NH48bq)2yl#b)6E5=l3O-*4LfY(49sH(Y==Z?9F5q6Cl1A^6h}V3PL8hn6 zrT1SbwuhT9y`(~a4S#EkOYD;0hs+h$$z+9#<-e;gl!YXJ{*NlAUIig>^iNZ7zyJVn z{})aD=U4vu+kd${q9kkm_n)o(m&->6*fzp-&|VA$VM5AKmR^)26c6iFYN^8#a!r)q zx40fXSs3IjD6JVuEc*6lJ6-+{(WyH9C9Ymd-*f_G&h1Kx)or>4{G8H66xLMbEuoYX zzy;!+BdrIUuTq8g>w^|rBoN%eRqlDQH&C^R@_7#E0vVKJ3E#0y0GinOO&}lfLykYN z;4*f8t24-~cfNoi&vNl&#l+nH?f8(?6{@7P{KLHb3E}41OV$@-fU<8_qH*@dB$9tr z+SVq6VVftTuw%6K81Ew2Q-!3Sdi@P-H}>ZiW7xaxI1Sb}R>_s1Zwu_Uq^-GD;=-cz zjUgtV__*cNSzDYfHnm0_dL@wztQ&$#6ND~HCwMMu{VB7c7>opNgNK3aLhusE>*-e6 z_z>E5eCxqF;HOW_Mb-!FcFFBY#6fY0oWt1QQ5S%&(_$_79r%NsnlyAh%2dY}ZMFKd zyi@#we@mDPT}-gZ zYt+K$HU)<^4*tFmZTh-MY&b`wBX~?#A=k(wT*!AwM>|v8A2xjbN;AprbQjX0zts`V zBD+Ipl+vdeeYE*Dwf{;sQd@S5bVU`_f_#Dhx7ORuiD~iuqlM(Zhx~t|$N%&~wx%wI zCWbDCbXLyxc2y@z06-@d3YY7b z3lFBhc=CxziFt*Ud4Wl5wdnp2YaL-J^Ks=v~@l9-eK8Hma`BwAR}!ifCi(@1a>;G&I1uPO&HR1WZ7$l zmWN(iMxf@`i7?VyTY&fStq)5calRt%{K7yIQnHBu+doUZH1 zsxI#4l)aq%)%c8IhM^Z=MaPgbnX$c{v&;VwC9WZMPyj~cQ{p`g z5k(+jnFR$g5`hazE-;Wz2pb&D>2lm!u79n`U*HSi#_Y=`?vp`ByDclbS#s2IS^Qz7 z^ES`P9kFYRI@Bz95X*2b227tTwMNU0vaxjp_yOU8P9OdzO zO0I#(6PlO0+KVCQE+ASc9TgUOlN|X&@S8Wz_xGJ+lKrw5)l4)N5^StN{;Zl% zcAVjj#JA~Oo^49s#NG>52lee@=JntV?7uS=)S0~}7#aWogYp0J@2<`+_O|~qWmuN> z*d5PZzM$$rRFLtba%`e)U{3?C+0|Xv<^odOrqjqD9nBzAqGxqcEubf9ptKxWkuqb&ns zL<5P8h{j;5$@^7Ho`DP`L_pBy3r=4gR>K3Z)o(=(K3z<;M+(rs5YO!J5xWP0OLNsB!bcyxCrr+3bRuY2M zQtC594Dn1kU`~lK2gk;V#_QV)Adyg*k|{D~S@vRN%&^9IBb619I%7>%3olu}%7cFV zhxw%LusAt)ETNd)#T*&+WSFz0UH8mc$o;_shyH-);kD?RE{6(E#?^HyJfIw;jP$NVlxT8p-*|LRo;#c~WA&};1@v=>1 z{RmyiJc1;m`wc2Zg8+h6mrb#_RUDsol5GQg6Bq)CN}ZZ9U!*O5euMo+^ZkzS8q2Ya z(fI|J2Q^2@flrdj|q0VX|RIYF5>UBLM|ZaG{2|*#%2&I0f4HO z%o9!MSF{4v!|Cm;lH?UQySfU1yUrsf%nu=qT*?DueyG{BGduQJlxjqKOU=^D-7Vf{ zEVjxWPm9EbZuuZxp(D~hC5s?!wHsN*8wGwSz%JY*2kohMikqk=Z5r3jft&ai6zL9G zLkqisBa$C$jM z;2&;Qlc$8MBA^W?sq`=jO(6{%J@edtK}|R&bYk^`Fu{fLR~ba4{0h$cj(2>BRr21M zQYGGhJhYIWk9=~6LWuL{qzbP22_exV8vD4+j`}RWx5BQn7pMGq!~1Cw)p~JUI899C zDQ$FAyb9D^WI)*WLali^mnpHtO63EmUi`TlUKH1GXsyIkE4{J>f1ba*y<$n5t5vJI zy{5#7G}bA}zyC%%v7glQA{?WnCD^WO9Qfe%Z8FyNUgP(n&Ajl7 zWk6?|?k0uasE}=UPHUqu>QtK@9g<5=Q(F^&YGkaH3A4m!I66ma58YX?iUR{PJCuvU zh1v+NMu9uxlX#4fs0?Y4Z3Wv@X6A^%etW$sUWJ^B*D}&XK+;h-k%Tc`)eH?ZDq%f5onb9>&GD8)rBG>Fmv*a+?|19Gg|V`n zo#>tlN_}*LK5cTs`dKdy^EccC)Y<;(HsnKEhjrW6RZFzYZ3|^w;_Pvq9&VEM_7Rl( z2j@fev5f1+H$b)tq}+3e>yfHxl4Hm2_ye9P>wb>d?OSqXGg&n{6*p@3PA{P^j7ayg zwuu~n@|t>|_pif88kRERid+1lEA#<&Q7#Pw#Vb55dcRd%1erc|IKw^>Fg?cCd%@#wh48fr~4w zi3@E-l-~Q%@*P1}>;-D^bKsx_zynM?LaP9FkhGloZM~8v%Qr4$kR2B|1j{(-F_R54 z4Ry^0EvNNqs5}`7;{88nXh)pX>oPa2xnq{Z!CJml%#2Q$Tm@;3ab-XoO;e*T7VBnb z-gI!|hmV$%135lOgQz>8ra=b2#%IULV9oKU-&4hUOA_rjXi}wVQTEum2igOt;VM4z zz^I$3tRs3i29GG0Lagjfh{ipFU<;pjZnSF><(8QM940_)U>;>Hy0(* z?qi?|zf1)I1@U3~}%Q z;e3^imY!}U8TC@|dTu)={PHkecw9B;d96}=&girSzJ_ketd_mKDQgWmF(vH7Gu|AO znzL?9@S3za6@5SdfC})k(|b1|$|}6`{I_A@mZafA*|$`o+tgu5^VkOc+sfnCU))Qz z*Z02q<>|kQ-@D>#F|1-V(faNLK5aTSZ*Aw4oj#RN0g$tcoFzG~3Onb$|HnCkpPDOo@8Q$S zqm6s*f`>YLLC>n*%Os}Kpc$3*JJQIY3v!+JBrR`J^j4ppLwu@43>Egm7!+|ushtro{@0>Ivm&YPq z{iYdDXrgI zP+z8!#&wP+JMl;vs$XvH!P4@BN59DcxQO60RJ97fXD;fYu0DJ?X2GBa51Zk+zC&ma zyMw>)&b0L*ld>-q?wwo840T=0<9VVjqhx#S!R*jI@nE|rYxO(~>}hTa9{oagmDG5y zS20#6KDxNS>e$-OXUL{@e&4s*QBCC|9gQ~Wg*Id17x2IB`!Jwy4;Tml06H810Q>*a zX#bn3y4aaI{l6CUw373AUX)__Hg_ zkSmBj{IK80l|ZH5GUf*y8eGg8JcW&*2)1UaJVKE7XN&BXxS5+Wxhp_P_> z$647Omg+Qyst9|XO3#M5!Wsc~WkfJ0cA;L3dDCQrxl#$6CWE$(&Dtem5e_b|muoVC zsY`j)QFSlQ<9j>xZ_n(jbb)qvN{*{a5=6Ly0}ipx z&uaQpus^3Pmz$e+NSegSY*&~uua60&PEpgCRO4Wy9^xRyS3W9R4+ju$dz={nD=kQ_ z=O>XoX0iJkFGp2(yE8y=mP^!<2P64Hc3=ugk;~gFFtZN+mkxD0dLRQyU3d zfxb_k$+$KiSULlz{CIr2zfQn@hSU}7Lu5vA#w~@nvX(}RTknERE;}jp-f?i=l{%TI(t=8X=O)L*wSj^C?yp~04z8rlL z8ys~V3RcaN1IT`(fY5GdWQp?E1VHNo8j)lpXp&1IIsV^zlpRkl@h-jdgu3!(kIPOP zBqkDA2+feepmh3gvv8WSWQ4qIBw6GaZJD4`=FFFeyig2Pcx>{4BC6pIy(yPIKM+$; z1B*lmf9rI#{&gP{W5y%weP94;*;%Br8F|rlH`Qn79PewFvPfzm z3Q|`7J&dgtGA-L@ILCi^N6 zmwAF79syr66#DSBCI)`+xKh?$dZjSs4Q)nPjc1MXkVI|+`>8>2rLjHJ44;&eXjv56KLLLS`_ zM&!>$^F&1i1l5W{Mw#<(8J=i7Ui)1vGUeip^F@r3_>>*lv!)HAX2~b~i}aND!mDP; z;(f~Oq>d;hCYU26d$##_zBL|s0zX}`IA`{)0r;in!;i@3i1UVMW(?^8$aRgZuuG|Z zV35VbppY%8j?H9oat|19&_q|Gi6cc0TjZy`SucinkY73GS^ljgoTqU# zrK_GTay98-v#qs%wZ!pYk&IoDOdF(Y2%Pd{U=@T37DZQeGMdJjx9B8El14a+Bnm@U_}9MV z9iZe2jrj;ER>}0wp`r?FkPC1g<2LlMeIF=|iplxnh-8d~(XyIkg`LsaPL!*h#2}Xu z#yDT=5S=#mG&HUpz$6w7+OD+Dh3b7avv!mGzMU zQ$@JxY1gD;b4Ut_aSTpH&20pZ63SXGvO3Lk8;hMRkT%%zKPhkBkg;e)I(>Bq8T4Pl z01<-Gy|p~4W5Oqq6j(wz5;Q!#ytTXXy|Z+7rEj$*MNL?+HPnfvC2h=D@B}Ejq(7|* ziu-|N#`-pmt*NUg-Ftibn9iNFEmh@R&n4~N5u)L1V8nV`-WEW&%wF&`JqwiM;N9yc>y5cN>0^LaIf3BzwS+NE zV|Raqgn&BWgeRUh7{F;lA^%KrY_cSQ4Hc|E`_r_8b5Dny+)3Kch_y z$YIutXhb^((B7U3tXMlwf-5(Txd$;TJh-$G)`cEWhuLx5rvWI_!onpi!8DkvM?|eY>RRUxzPR z55)+LGaLhSMe@(UNctq9mnWnLF^J4z%B!1Cg-4@x@wSlm)}RBYEJYY&cub(3Y@P|e zD#2IrtWYwZK|z5Yh@1$388CFR<2KhSWAGdww^lB&(^i30%Bicvjf#IS%0uBIs6{4X zdSXNZ^QV*O;;A2%=Y|TRbzJ;Q#NEwaWqThINcXvMSs@Hv)La?4xIVeEw=<*A0|CEY zK)W6=w*1woUBF$Pj8Yw#Y*PRxS3+G5*TUDH;cUeb^}Nh5%HscsL|5g&JP({-Lj0A?o?eeQ8_;m|52BXxa{B zvJHu9vyyd}6$L|lGGd71vPa!RQunXt!-rn$8>TQEN=|QYnlr-J$9{|OPX+kotG=JN z&+qe`!N(%rGvf_}F^2@NcLiWA7Z9a|Nnbh&v;yO@lA~(>ccUECfn_(X7dSb07TrU`g2>qUF<gXLiH&(x zsuC4AD67bUq(nu^HVDe;<|x~VL3FsONZ74WZCUpJZlr4kTE;80~oJHoqr z;c;JvD*rkLQSo@XvUWX%X|x|D@%A^811M&p1KCi}45RhGDh75i%KY0xS)643jh+4b zy&CCZXelF}+qEuNd^Uj(&j7yb{@0gb9LtJ*s|rYLN`@M?>Bb$2+gP&Z8i!o4acVV& ze>9*7SB43S^+>lZ*6I2^47V9&n>bj?ndSRjxG9vldl8A1y1w4qj`XB1h}J7Mp3i@} z*8k0`Oyvt;MnqRX)dXtoq-`vsojJigc2g_?#l9^j4tS%Wk6{9SoAb`tD)MUTTeV}| zptwiNs{W>)|3Nq#DVi^?s$V4jEkQfywam~H7^*E^BK9LE_kDsVJ4jVEU)*f-4NJDwua`Kwtz;=r24GVF zw5HCT0{G!X_=Q0{jlLPjA(A3!8tvhDNH8!ybv-9Fpv}Dd@};P2i-?^E1tF4$At*V3 zs$Caww_g;&3D~49f@BBM5Pc}okpw($8-(4C)?pYBZ*un=1<$wl?texxwXqoq0@Q$` ztVRP!N9Dv}^ImaKZaa|FKm0C;CJiw_)#|s>EFXw`(S)0L@u7k(>UQ29*Ph@c*pVN> zl_-=-P-P;l>o@VDR@t0-J!_D!IZqIWt}k2r!es&$&~x=}VmEl8$V!&19t_a1*Ba4N z-0_ZQ>`_jsPZeV?o@x@ycTC|ZG1l=1Zg#Gcu+V70s|;k7Y;zeVmj1pcBYrTqQ9~mT zpR5NTHY)t;iY$s<@!_QW@4|#jEMhz%MoPM|bFci;*fw!FAgRmV@_Y@&h8;nNHhqS#}E7G#+V zN)ABHoQoGussFsq2HfGW8EwCyIRwSVC(EY{kKJWBV+!N8e$U!a*xphPY}a3 zm2C#)wU|z>eY$g&j8G$a7N_nwIe!CUzR;e>N7%>fP_5pAsG@Z>;9m=E*A;G?s+$He z6KzEW@kIYrxPFxhtSu%Kfs{J;SiZURu3s9-nh;|M>u3Ok3EvJa=y4xA?fEyfSr= z^7w41_veonX8tzL-kkaz;6Ph$&x@Z#|4TBo?jbsW7C3(%Oh1HFfL{$}FT8l`{?LZFdea z(Fw0?$_v~RMEeUP{#^qREZIQZ&nhhUJf6-EJ;pCF z&P?$2ch&blJ-mw`8zoC5xxBorhMt3!$e-pV>aV=FZ$AdBRBbI7Zr5gmc*52!4t8_e z5`&iSO1LGfMwB2DR^IWLd+4^@jP>Ubl8WBx(tgmn^Y<}}ODyxMa}LzwV18m}{(M2+ z+sN(x2Bap9UX7C`hGfA!z-%V(O&PI=)FLvn7RN`0)V$2@p20+?23E9r z)Q0+lmMGcV%+fCxr1BK#i8F~E>7)W&eNms3s1Q?yC~O*?E$F+axP1nmy3m`E?_kW& zUk$kf#>g|uJy}iU3Aw*U_LBGQUmJO31)Lxlqc&sl8SY%0R1)Ww4f@5v66Jbj^yIUj zOCuD?Z&agOZ_cFCO+0f$jW+546I4S=of>&G{ziFFR|ouq?^W+qmgk&#MAxg_g>97->6G+_3o%(n}}pZye_oWXi<;5g&zLYGOs(OcCC&o5>opgl{4 zS-IvOLXu;G-T6WW1=LzxUb#8RS^1%-p5YDSW|64ck{p*bwReoD6HF_Jl3V%^sz?L9 zcykVJ%PeVqAWC?h$`l65@Uy)5JV{?pMZHj+nO3Ps!BV}cC_BYNX7y0j%$#L6emX85&;^@`1UUe=y$3M-Z0rb|p#kdWJ9sVi> zwFV-{@Z-2OS5)w)ZZ!VyS_jSz7TE-?HF;^NRc0FY4W9@SmSw+Vpbk=ab2v4qL_8GoW; zu6A-T=I_l2SZa|vTx3l=R+`o?vn%Bhh?$6wdj_Ez#WcQ@r|;+<`(wT_IH*pFeMnmh zRh5Fjjd{nf(Qy&}{GUb0s(;47h-L4@uh~5&U0jqr@?uy& zIlLw#e=tAneD^4YMU3|~8RjB*t;gcsnH>-Wr~vMi*=S-~%31O$Xy^jUD}DTclmB5O zyZwuuYlPmefl}^Nw86|Q=Y6ZfX`R%=K!)2Z8CQw2 z;l2b*tXe#2HE9GduadjWDXJ()jKP!D(#U|DdxNrgo;Sx06yagC055gQpF5ptTDJZC zl}lv9BElvM^GIUWfR!VkH&g8ipgnu>%+!8j=Uz zp{99K1-0D#I<8A`Yt2cfvDKBtrqoqREkB=itYFPRFqMOw*y;u)8v~1 ze2v%oGei^^t7Fw{cibpb4XQiP?MV>M7+Il3!{C0uSb326-9;6%*agDX(q8spf_E7g z5bok;{h_owT*BMqtm6tI?b7T@_c$r(!@jw!*sTzOUt!pm^@dW4S5(QIQi$kh81V2( zE4DawSmo3&9?>7E^SOyhfM>KK-FGJoB)=7;qAII#Pg(%)gJeo+$C+X+zW*Xu=aRx@+8U%6P{8*Y$c!ZCW2#mukgkhpCO>(2M`eF}y|xUW(xm-Hz`Y8E zLnXfr9SH9seC(EcbW?4TbCD`Ww8JrI5!9Ub6;r~h&OH?S^n>X(DLN2t5k(=jw5WDd z3)~q^@w-EQtVO7T5spDcUu%>1aPX-kP}nXb7h72N&_36tV3j6(AdA==U8jxcIT|K!J^rGabl4G!|f(8!CD%4G3s!*ZEzl|<^y zWj^D_Khc=8F4x(tkd6<;<@1_zGv?kA+6DhbM_+4bdWl;x!z`>sV^9OtIGcKPt)h)o zT`jrav^pP%gTPfxJITV~rwob}hJ;0&;Gc)M`YPYU86rNs-%k%S*_@tvMNfkH#fE`W>g%i`i!Q zW+M!Gg54;agPkYWZc{a%Gs?EJ@)PV+{wFp8jt?EF2Xvu+Cd*S;$ViXUm~xj0v=2eE z$RV8>@;ELi=ewAotzm0$cEW3p7X->$s>QOf(4~#THPVg?i_u4}%bNoOMEBL(%rZ(7Qz&$m|U%IiDbHa*NzxYH@6U@IZ%8pIh zD~y4UaC^Xb7t|Ro3|X3J&XYs0Z7!1Hc`<<_2{Fxt36RJaMHMi7Wl5L>K3{_06E0Rw z75mjLFE>g4K|deCFE)-MPNY4#sJA?8$gCVzp5&@4u#sWYq2w9M7R9$$svUV~9xstU zV>m^o@iFQ{7#qs?rQ;=u-Lr zH8mHuw{tPH{I{i({C6qP+~R*u8qV;1+y7;2>_b2M?ceIoZFcW^0QYS75^MY88%sa8 z#szy-{7z^N(JWG@YE3GbY-11fd&@2yi9)H^rA2-{)e1r4#F1@38=tHn|9<=S`I3cx zL_)u6+SpwajxRgmft12IXHR88AJtu~nrIHlDW^>2&q0Z4e#{#MjPvD;)DYd2zN|Sd zrL@iD+7L zNsL6EtygBFXwG`aTz1^3*HA5#Zvq-vE+Ip$MoL|Z?R)4E`ps_IOXQ9ja}&s-pIGWX zQHh|JR=v#dWUSjrAeBTgxgX#gEUuQ?@5g*X(^Y1PgwLMzE47rFL*$Pwm|UmE64inA zQzS1Y@zKBbCUSSiR_0Fo5}r>Fl|E(0};N7mpK z*eRtH5;Nv*m>LGpQh~LH3Qk>lgm7;^jz>(!U}Yw^*c~f-G9##(TZYw`Piju+a^ecv zOm-hl!h@2?qTPZOxR-0nsDK$JfCaDSF|B1&7KfTnq~Me~V52#l%YLC7@WNzuWtxnB zMN;E2GIs3Ti3zcK zO4Adtp`LGJn$2cw#C3(@WV>_KYNgwct*kuZ&Y5(7NO6r>;F=QV+CXDDJ*b*^Z2D(T z3MY)YEIJTYjg*0zxU(ma0SKvI(?gIL+=;ajlu$8un`BC>lm3r^Y5@PE9e40Nln@10 zc;FeKyD^k~Vl%reehz@}K$``5QpD<%c0B66npH=EPeuy)LO_o=qEAnp%z6ZDlu^?o#scW;C0Ap)%Ms# z4s)KWaoQepD0I!HO4fHZZUG?l6X>Rr3EUu8u6${zv#AJNo}-NJnBX)v^H45#qjJ56!Klavlu9-n2vdF%0j9(fJ)##I%5^Thsf)J?39!ZNO5E9cK1^T zkP)$0^Q9K+-olx!{-S<%yJ(R!b4G_+oZUinY&5xSaMq-{>z9?V6$)MV5LNmX?6*&y z*M^LfGOe0}M%V&Tc2;7thDbiR=h-8xwM;bA;U<+ECL&lv&P-@2=KHtq+E=P(Hsda* zBYFqxy+`cfV56V<3Ex_3gwjjM3EuJgEffX)+JQErqs75;Dkss#^H}{(H;>$Cqw$AF z)-=TI!4qiZmgVbEP2hj5(DO1D$*_v54?~5`%ea!K%#77)g%H1hk!5wabXZIZCn%BE zSb!LoTU3Gepr^lq70V+x$6xiV+S#$DncvU=r$z9y`?&nD^|JMT9&QefRQPq+>?~zZ zNCwpxwc3YU8A!uL=y)`S2kZeLWqZufdLuKrCKMftP83uORd{E|F*e0(EOl{Rcgh5( zY>{gcv2B6Hdy)azZN2RQ`5*eq>Spzl+R9GteffO7r0QobPZ5j&ZgN2!d#JP+2Z=Hb zy|r=Vz`-Uo<@Ecm<_aK1GgvhdM0B-CCRKeLbiDQdgnfel^760e-Qx4i3BX`tga+8y zG*8Vnh#ghZ!uhpi6VyTekzwn z$baJzev>Y)%RZ>GAPuuolLVi1#t&Rzs@OBRi}v3HHlRFsJuEJGHxc!3hI!e{P}$tB z1;cxIkSpCHtftg!E;A0HSBa6cTqQES`cYBtW;RfRdkLyFQ`8Ulv&vWF6qna2SF1aE zDG2VjR-J@f#O6a3YNo0mbyD7FMsv^K%J1j~@}#vFj5I z)Ck8{iuWE7mgHO(O^;NF=E#e_3R~3}ErSF_RR5QoDoMmloV`3b(>e-JdrxmU*aSe8 zdw_;=Tnq#{SlR&OV{HCcf%&-#3w|$~EBek0?>CDVB9jzp!18fkx=!;I#tJj=S+&CI z_*IsKj=c??_EIu1uy#8*`WgUz0Wl_8dcTe0yMlDak%h$e5*UJ*te)gAy?iaClrE-{ zhmF*5HFBg$Q?Uvc+<-)#JKrYm_olvndC5~GNyfXny&o%qe+;@CPi~>m0JT1L-OtAK zIB$B4b&BF&%Mmu7mzf_%%WaW&4Yotey==3t-WrXnHt`S0eCFtm!4@vzP#(1rUN+dE5b1?z5`3v2}-*1L07+2GjZfeRFPFDy8+Z$t=)tjxI;byEcdJ8z2d zI?ocqz{!n{C>dnnvRuYsy4Jgl?FdJkF^7(|x6EB%_d|Vc)3QEbLH>!e0-w`By#yNs zPN^4iJee=G0{RMs>{@m|)6Aqz$QD=VsOT%K>?HO_d(r4$YCru_s85NCm-$UtTr*X( zI*Bo0LirWJnSG|!nNiKAp8JLEyfY#;xOc?YT*$dszH9z#%5e3AWzXBCfhD|TsaMHq zsot{NZV>*JH3C01#+wAcwl7aF#avS(^fpdAAe1n9Jp%fww{0TJFd=a{r4;L`+2kUB zbXtUlB8MKZtKOhX%zL<3ct?KVUwSFGyn1lw!;u0YRvrc0ySsj=K1@=26O1+nh>;|s zB$-SHFxeV5h6HOkDA;e%LgIcnugKO1o5+Tc*f~1@!()h$4a-ZZY%`5c(Keb+;`(w` zk%r-{CZ+VepfS}2+k9y6U3N${^W;KVJlz-wwsO=y>MhK7aujzPF47LiKM{S3%y!Nr zGtP2eP*~l{%NyS>J87K5#DZ}5+KZ*dob3n&l?%&dWtf!1J8Z$UV4SyOW(56-1Q297 z#!|=s4|DGnU0K(y|Hi4 zb+>vO^XapXXY~FXRJ!eOD6H)I5H3OOCsY>3FE^s72kB4Nf8vX;&lQt25FDrmbZ7XL zG=)+8LUH^QP17De{7S7kK(KVUK<@7sON3rsFnc1-_u0D!b#wtNZH%Shw0K4>kH<_r z{3A}2llFjZW8^!*Zqe$_DCY@Iv766H!sRiD5oiOGP;OF?xK%4ChY`-CR;zRQXuo#S zW3P;iS&m_C8c)*&dC4V?O{5q22oB*?<^3I9o8pYb)G>VW{3*0F7?zhz?}HjUPS{;l z^%`uOYt<24>Lqr8 zC9b+^1a~SZ6Dg_yto@SB{;-b4MMSTOSuXWTsk|Zq?z`PWw|1`oY`BHMfBgvn~(EdlSXzwB?GL8*q*c#b2(cnjOQ@3cq}2;{MITPY~r8Hk*f7}?%5*&^?TMnZDcX6>8!jBQpS zFP*l8xE=FbWB2*{#kvW{SIG;ScbI#}A_kbd)ROaHY4Y{sr9?iDV~V*1XVl|&kbY7} zgR8&JM$E(UEBd!{*>(>FE)y#y{sW$ zO5k71zJrbuA#(hVgL6=mLV`&PQG))1m98{Aix_XivhunMSxsi_ZjysNVE z4Ti(XPW3f`RI+Nybo@aqrk9shmCL!?{PBXB@>^ZzYtO$kct|{$k%8t_Tzi8w`BsG4 zn3l<}#?4xH1vbW9$xYc_X4}KA+eFW0YceS<;xMZrr{A7m_y%`;DQdA^Lt6 zw==hQqqba*Eb>b z@)lBmop>5jxFEFZBjh|;XxsreZ0o=Bjwbm0HOD}31Zxn4=6eTa7PaR}-eKZf!a2~Z zg#=%5a%K%okPTgp&-xQ^xB&HexL6+~1qMz$ds&D*W}Y_Us-oHW<@ECnPsQ@$+VCeEL(J3%)uW9*mfcaquu{!H}c!kZJYG<)QM$-C68>D^d{LAz^s)*L6Ut*z*T;J0poa3)N`j;v)+xt)XXd9TgUn8HF*59 z?Paot?NR(1Pb>q$m8)tA19qxi@Tcy9S9ym3HwG~5r+XP(o?Me}~HH4ZLj>_%*MM|CE%z1bI_g9iodfozX zP#m492AzAikOqAW!afKg6vL5OYlfKg{$S)`e!DaBnnyS)a<>+TwH*mjJ)6~(r8#u; zN-0#kEuLA!ck*mxI%#7T-VX11fzg;#2yeOlF}YUz?5^q6k6x$=e3~sD$q+C&BmCyG zO&a$MNHWD4`PmaDcW4+-m_I6sH!f|=LkkMJvjh!yPBvl5XWq>!2I|gXsh>>i=38!^syPdcsB4{)_Gl^efRk*gA<_%wE}0dY>?Gx0wp_U=tX; zO}V||E||eo#FTI|*zT(p5dn&m;MV$tJMy*;k%l?rzQr@*{_Yb*;&B+|tMS^KPX&D` z$zjADtmbr^NM}!+?MQ$(LXnWg!!WJSKU|w_h!FO$M^vuh&=>STxodV}uo)!;JoZ%E z+BN@fUEVxu##TGjT)*0clT>A)J4J`}_RKSCSR0z=X_Bx_^F6s*Kc3RRN4j6;DbRP2 z6HB4;hK;8LiWZYaaJxS&w*P{LO&NcG%J_HKP;;V>&Oauti$_wI_h^`m);xNx&5{YO{k=5o8hb^Nm|0Sds%I3GALAO);~WpJb6j?Y)$UTyZb zSNn`~)`c3O)*E6PgWMp-N}r=`)+`$m!BYxo4+L!H?X3~c(0v)tOF1W^iyTIX+&rdj zylqxoCz2II`{XRwq_c3%Jm<}_R+}0_O})TBR|;u2uxw-KghIa?grcT@F5)0u)rvE8 zT_1`Pr8V7vOD{>B0goxh9G=~QY>dCr% z1R8{D6!tnj#ytZJ5~5bL!sa;U6e%KPd%19x9I{dW7u_`+>&3CS6V(abOb)}K`v&ye ztyNuTSYe{_aA>+2dmhrZU0GYnoik>u-ckVLW*pL8TEGOS{nKm2b_X*XqX+Xx^6&0W zdve&c0K~Hv-XMyp4b~5sajIWEx>45if=Xpy`I5=8rnMF&Ms?}`IJM|IAo$gq%+`i% z4YbFJVb=&QlG6X>)bf2hwc`b458qDhDUt5G9$5V8f|>Gw<|*vAQ~UAh3I+F%Q`@)6 z2eZaqZ7-vR>)N%cIwuz~Fj-8IhHBZkvl{vK(`%vu1I%EON$H#U0%vR@?wd)mKzB~V z-NxI!u?qF*G3MU=wrcGkaAknLR+ar+y1eP=-7)R08uR5?RsIZnt+;u3Ru#DT(SwhA zG8Kr%sh3ifd=l(;M*z29I`r>?=xZ`DgJLk$l9Bj+I*{` zN$EeZT;D?!{D>!Hz)F7p2m|c~VIXh{2J4y%WNUNekszXwm)r6Y#_Uz|O_&OJu#rEn zZ|8i}9X@`Ux3vb+4NKT|W)jEe#DU!5J$7w_sDD*`=JAjcH$c#cZsuFE;1`*|j z@M)OD^7dan9cxtYK<>H3i34Lqr;a}0M12FB0E0V_GN0M@o3o84epfdWq5}&7KN)x0 zc`AFSS}w`A6KdK1b#DL|1e)}A^HUm@fGt(qeZ9j zn+{|6JaI>_0qg*(jRvH`##xsEBX(wa*-m=S2vmExvPtSB11@#?D9jzxM43&37e|Fo znLu?GZz)z3I$u7}N3Z=xHG8iN;KI$#@yY`#$PDN@*OPdxGqqK8rAMp)buwJI5jcqC zj^WB17jAPfl8ud&6?Kku0%Ya08CNKtxNa&~=&U2msX>YASSZ6SVWma(h#c=o!P{vb zOK;(nmpgt|`8{UevADx6>mM1G<)9fyON~wPgE9r5qlQ~5KI;4h)lP@I-&&%NVbn;6 zyTkZbvmTa3S1#~-;f20m0_Oky3-I5FeN{1n&>&2(qR)Zue;ILfSGdDz`ZQ0$3#T~Z z))D~`TU%}rynQCm1PuIz19oGYHC(u)eu?%4hWjlis}-nNl}=On>c*1rZMnO%M9&z@O-N44)d#Myr&NF_ z9v!*!q*1j4_V|>OZTkWL#%eylOZiyfLjbqlDmJ%w0}DEhWtke%-pJnf^+|bu)uIQ#8hEA6D-`V9-RoXs7 z0I~Z`{r3SVVVdfi-XDo%ts+abrnvG!UQwie#+@ibj7xe+9h$GMhE9;bbNK1nt(b1z zX)oQLl_fhpdn{@FZM19=B{ZOR2YqNUi3`k3F4fRwLIXtxH=Gl>AeIWHio6DsqtB2r z3KqZfP?@M1X@V;zM7<|>AnM*2G zK$TkTi*|-{*%Bo4P2hL0m53slr!VrNmuGi2aEx%M=`mdRf~*(nRgiuv*VF!_rWFdY z5_63xi~yyok77@gLC0W^+?hCJoune65o$2nRa)0?`RGp3X*D)RB;^?(yfNEhJn~>u zOAOH(cvkkkH7T`Isp2aD=DoH7dGI-_bL@JxV6ayY=7b3859Xi3LnhF;?R!;$Tp@Qp z17aetwRT}OlT29TD<4Bnl?@=>8e4}luCJ9?5lKVhxt^jk)lX@;zgj|psTv# zK-P~ASJMO=`z@-DTR`WUu&o`>fpe2eJ-N3o2yl_;H zrDC{ThO}13YT*m+SS!qOI`s5QZYs23cCd}A2TaA>Yr7;ud@cgun|ij&d@r9Z*8rmN z_eF_suZ){>2D}2`s_7tGaD-GVl&_&5?H##HG7$;Fhi zy`l~^r&3;di4w0RUTu}(L(7cwD-AR|5YBJ%tfW3{7R2(@E0?7~?ut4I7j`Y>;6+VpPm$utB<=(X+d$&34 zwI8=z%85HW)cpPp{L>dKmdN#;{@}i~NB2J@5V!BaM|&qz6MbhB>wis!v4Yn90^j_< z7c@}(dYH|8BRc1cHgiCxqK2>7Pk>us1Ag*HBmYbqt^jwvSz9-PSmt9R2NO0 zAa?N7*(IrYtuPP&fp~B0$!Ti00t{oEfGDnnn+v$OM~kr)^RGv#U~IflY9b52&Qgxe zX@gZ5+qnq~AN;66;f_wlYB7W=u0S>4LTe-Z{O6U@AR>rEslRN7UA%!sy-cbXrI4Ao zzylu9Ggsd4g+^9HG=R48g%1xKM%&ho-e|9-)C3gr41F#q>)Ej+7vdKV08m(&wL{+i zhTn_iH_$T@1pOv%i@5~BVcwanD5vBSVf54J^10;F?(sD~_-_w?UBBk%zkP?u$uT$Z zz89be@_%j!`L{**ChVA5n!7p~{uec@O69wp`X&IL(?Cr3AsaC9qDF?)>Jd7u5wEb} z3|iJu(?yxGAydIpwb;%1UB^b)jOp6UYv-(_5P2%VY7)ljYm>xHu=FEW?_SiD5 zj5k6mElvySklu))nN+TF@s%vax{O-@tGmJxje_Kft{GGPy|Px#ZPpMfktTKE4rXUZ z7^w4S-E-XM<5b`pY&79B*!BPISj##n;Yu)s)M@XvbV58zgG9YBs+4Nsj4Ap18m09t zvrYW`wO8FYm#D_BDWP2mCW=RZsKZ|mlUTm1FKdHFn9vo90Ij4&u=KkowVl=Q;4sAs zy^&z}X@A>df^9*ozA!d}$D}_%=I(IFPE*iQe)bA4;#;{wqPYbhaILpdWB=I|m0wy~ z)KtrchxS=aqAU-j)+BUEE`IwAkVFTrS+!x~eBym2a%=Up#&vor1RW!@B^!glvksl^ z7{sFdVfsTcxuehX97NFROs&2|AX^SJ+a-FT*x5o96~5m8)KKb3rM?-fQVwT!^lO5U z!-Yu#W>Cy}+v5}G4xKlXyOBe50$bVax`x~riz(RJfNiVSFUm;d@09880{*>{X9^bA z`^Qh(bvGRCSS#N}CsnhXUhJUEF^bkU^!Krp(ZCBV{jRPyxwq9DXM;BS_CQQgvYpj= zsjq!=jWNpYYZJybkz$e+iAYaz*I{89?`$~_?=LS0@$E?Dme^w{nv`S5nmbF)%9cn+ zO^oBrNRqz0B@2^%JYWwXaduxQ9}zYp!ZMG{?XmU&43W^i)y*B&)EK*&yiY*t~Q)TV0i&xOEe!#tQmCZ8o5I^fv zMnCX90o3p*Eld-A(x9D7)>}~#e{y*Z=|4-uZchS+Ms%t;bi0XS?)4GPA zEK$bl0W1nzb~X#J^#|;57Eaq*C$Gd^y3mAwO*d^8$u0XzqWlcsJJ|4^{EQbbkwZOMWZmcQV~CBJ_{aScO^_j)|-zq{ZLx8v*% zTeVLT3N{-!bZYMN#&jf!-EJiaZb2|tg=$*Xp15Rn0H2yszqht`a^K{kqfO^g2BS7p z#^*XUz%Jd>%2_v0q&ilMgG{zynRdUehk7=J!-6=QJ83)2@-fRY1~(Xf$;Z}(QgBq|#r9WhA?sL+3P zPpzm&8-i})W;l31xxCe;{^+>9&2X%6B)d7X2xoYeo<3~pxrq;$bQvk`U!m@%biWJ@ zjftKRKgY@Xc-tIeQ-3EsT($FA^}XeG6jeWhdPnHLR3Pp5b-q$9`*&W06E2Iy)we<~ zzYCQAX?OFlN_8`J`UeyLEyk)?L8}2qMA2uyA&M>1$Z!GnO%o&`r~q={5*G$(W9^~2 z)VR#0mKvM+Sx}J?U4gO2g)$9&IolOziDQF7wU{H0Y%Oc~s zxjOZgCOUFT0m|5ov2vH^O{}{BS}%J^M4bN9zqc)Ft;oEge^GYd2VMI0O^Aaz^Nl2n z-HMUpj@C2N50!bPOUIPU;{(Tc^@mLB`m1Af6vA0NQU#OiHoND#i~Te34P5wF;Ua&} zk+HsBY2Ewse~gkn4%H)dw|wj<7OorcjPqr4O|M3X;2{x!qx zGo3{dwCe3-m?=?6~fl50^tYV^c+aYdWh6k6UTlUTm*pVI6o%f zejiMGl?Hhji=sEkMt3P|wAAziQJj6qsE$yAF6N-ebxw-PQ>9Nj9gNRC7WltQ6sW+V} zn0uIj`aOtfr>wl+&Rho}C#<;FL`c;HE*j*6N-yl{jk{ixr%Mnf~t=4_3Zpx6Y9L8i17XciyHU!+!XLs=c{z{Agx%!2*iWh z;9Q&-NsRj(jO~0$=Md|*w!wH2AyaW_dHw|Vt?)@CPR=>9`PQxflG3NQPQiv2XwWm= zr((0&wmA#YYXjTpg*o|QFIOw&B#lkn5{qm+plAgUBK`L;;CSHCg%9Qlbb^utvZBNs zKI71bjnSo|I0(VgVPUR1j@P|sZ-9o_!yASOGbZcV0v)_l${SK#2%h4rwQHb4!n;{6 zKI@Uvm0N_O#p8F0cVi6xS*=_P?CSnc2e?&&i;j1KH7@Xr&XsP6K0=pmHvdu9EB1)ashba$plx`W8PZaG4#O%{0~k|*ljaYP9zNKR$>UyBf&qwB`1EP zJ^R_dnB5*HFpTbveS#Wcm^Rg{ek3Q%KXA4gS?aPKh7R1fQ=bPn)N91w^HAg~3R|ts zz6O{{pS(pBHCkARtq~Wn?rKX_)7wApleOh7yzg9d7=~CVFCOw+j7#b!XWEQoQy$i% zHTrLJbDoW11a|$7_tsJ{0EcK_*QU+x_LQ5}*6YrLOM&Z2hMT}{>sTQl;()m0ZQy3l+!D-%)V+?6cu(rYh~akuOz0*x6iS@J$$P9nP-Z-f zun}S%LQP~8;qJVF9eJh%>BXnV*N;9IQdh7opNa0mz*HPZJFWOCF3lcXCZh)`2*W%; z$NPtVuIAeu0MR_fF68o04YvccokVOvS79FwDl1vpV&J%KQ#)grjJmD@U@^%MB;gO{ zJnq;)g&M3m?`-7Eyqa0vObW-LSLxyRFY&5i#x3`mJB85z((0@a=;0G_<%M!?U<)J5_4{09xnxsn2jGAM z8}THNY6}l@6fZ6)#MF~q~W zT2HG{Lz({by=41+iKtY>24yY=V#NU!<%Grrk0>`dX%0@aMzim)m+#uF4+}-l=cBxR z!fUtUEIDBbcqZ>7l7n3Bzp!O&b;t;p^t-I{I`P|v#zBETJ?gc zk-emwI(ah6|Cj*80=#!@#0{ba@WWYn!&F9{L;-duf^a(NpM z(2?yuroYGB(#dseQ!aZUi2VIKGY*J;3e2K9AMPn-j=S$o%OW4?P=NwBkb-jFda@#7 za};X7{am3AK()bDPz8*H;RGTLnBMmEburnvc;w)+Q^Hyvz@S?cvK+iP>DbfRS3KcEYyU^MiaossC zOL^(I{zut958agmOj!luR^Ug8YbrOw`mn~zt1{Xju6f{uOZqK*WY7O-#ZuzbV=QpC>E= z`?c$ufHDBki;cJ(6V@2}D&bdb8e)O(u?hKs3+ZWypIK}9$p6YvJHd!;R8CJ{_3^E9 zZxm(yV!f3S7|d5Q{+?Mb(pymVa!W~ZH}3#@rZq?C(fvGv^|~B4ic_%xChR{aJ)Ck% z@g?HaI6=awMW>JF(Qj?Ufyu?qM)0S?n(v;S$JT!s29;46v_LE`XcZsHu{#)rFcuq# zv!eS+fMoo7Nw>SciA|#2;Y@K$;;)_YpfVXPl1dq#H{0;lpI+Vqwjy+c5qRG2)54xw z_;q4%`aXqL{JeentNC(9;{hv@&v@<&44reD7f6Df+6Qud3!-J-V^|T0kOOtYUT^DlIl4<`2Y{V#QiV zCad;YA=`VJXSuwVUiJD}w;XdX8^q5#2zSfiB%dUT=TDT^R%=1BMBh7y^yArCmgV5^gW|0x z>34f!rcSAJw-|0OuzF44fnj_N9xgK#vgvaYLPXG;%9^94W70!Jw>_)u7ZVTAn$RBd`>z~Pb`b2#2tQ01surwLzV(8JW2fkVj5 z?y@*6x{58|ccIAmjiDKEe(lB<78Fy7f6YbE52mGQfMSN?YxLem^hG2b9H8cNICQo>_X# z9~3iUVDtCpEll*i2b9-!+^LKZ12J9)R3LIs8_=^5&$JIav1ipZOKo%gIhMdyqpK_a z#RoSA2Bbk0aVHQ1Y8@QJOOp6aV9br4K6t6+#E8aFqKaAEgg+wlaCmlJQ;%Saw*Sp~ zwSHEJpUfH6be;J1)j+hQjbAb-!T;ugV@U>S>0S+3V5#t))xeXogT2OY6$XGI(c2~$ z&s~Pg>=C&KJCQmyj`S*QVhuw1khoaW_!Ag;q;`byvGdv*O=6zXZ?CSQBH;4Fg}Nho z$?fB8F6DpWx4tn7^bnZKVx4L|r?VBJz>1!*&@5mjRzqtWfh^U~A@l#O8@Iv408LQ0 zwOeI05HVAGkHWxUo)U#C^w9-4) z4P*XkSRd&s2;vBK9}Xv=8(SNsg-?eu7q~ef0~<}bGr}*U7>jCwADXWxD~eb{j(A}_ zLwE|L0uJdoJ6v!=tf(OdE$GAK+KZf?3P*ffuL+60H}#!+*v@b{{;magZf$f}^j2iu zeB5?G!yJBq`n~`X$<-}w*mXZ0m40rX)U1RSzX6t6Q@A(6eB@r>O5P*fAhoeJVCLv& zV6l5$vQs7!CR2mAG{o$cnC+ER|1eM+`9vHla~&;+KKOZao*SzDjb0|AVq#ZLcYP67 z6!?+u19ULy1xYA(#;kywUROMx&;{a5*gn+Zkfu$rmMU`?u&R{P?x%v$>Oh(SU&Ows zN|KZrv%%hvy)66ZNasmE&U|Uze6TIZbX%B%)@8f z304N*3-Zjr+)#Z*k6j)`5G2o9Mr$ovAJ5NON;E<4R}X4yWF>=TcLG_1sjqD^6M;bo zJMl`NTw&$Iq8X%83nEdKaac@yOd;VKSD28U`Hb|UHn6dPX1^v>m9>D4@*=% zcl#lGnob+|3Zb%$RMSP=)zYE&dENa4H)?4I*z>(-Tz8f~JpuAmmCxxt2bU}LP3b4Lo)uxu_$ zII!fa*~5m^)=e-QKd#sC+`fe1`vv~|T6P(6RJiBX3~2Upot0rIvX;NhxO#phlEmV~ zTv5ysTvDxke{s+3nrEzXTF!3U#Wzbth+Q?C&)qh8G-fr7-~zUp8OZ>6Mj#sf+dri3 z4rRpqNNn5PRBe_>W7SVYXZ}Oa&t>A`N#SA1MsuH+6ql{b_tg^JP4XGn>p=oL_x)@N5ML63MGz zn$JlBBP_n*SK#bHRx&fMeTs=0CJ@7bFQLhw25668@p3bo_=Y%ZPP#F(miiNXzd4xN zYs%F7E24Eam<=_|m7s}&IaHalsWirgre)|=gJ*w{(Wr9vIOx7cv-*qu&cMqmXL2FV z#y^M5v#II9AqY>Y5f*dD{j=tkW#z!DMl$w>WX;^*iR{h1pcA>*i+-2@H?E)(k&Lp8 zR@9#h9oaA5T*h|~nU=V{IhGaSPB4)RyIDql*l7SHV`}hg0Pwv+d=AFkmSX>sfwe&{>jyjSy z#t*qxp=c$ei;5TnzT_HHl%~~qV5s#>zng^u(|G&%mD+xLN=O*T-D}bnAuH=yo)6CT zwm~!Q-blW><;pN^B5nF03C(<{A#ZB3geOSRqGrDijvZMiFG-s0H5Q+3T*L0;&7Agi;^ zvj#)cXk6Xc-@$D{#wSi{dkUX%t8yP)C5)_S`f_kyHc#p829u(-W1tu==*OpDzLwboZ7Gw51h_SjW?Nod#-!Mfup0Ut&_r<-!Ou5#yrL;e$dd*JQKWy!OmGZehY znhSnBZ5!LIzkbxI=l&>3!|ao|9)(imP`er`PfWLt)*J-PaWekNRsXT^!RNFSZa)|{ zqx_B--`VpFk}zMsbSSHRQlFB6zBUWHZn1&ji_bZDNrLyfMtr#W3gZiCM^k72n9-z( z(|Isty%RisLgISpVLG=p{(O7R3an*bDytcmWU*Q2vI~JXqZ5Ai)111g?;6fjIDdtHjI83Ozm>T6?bky4*)5hVSMfq z{L0pfxlR(Ca=r?-aS@~T0<%%;8(Pb15__d}u;u=+g%<}MNnTWJu4N0jDAL3$#pT#& z1ZMOYKP5cqT<;wzaB_J>#=l|&-~wczQ4LVwNCsZhceyVOA0 zRF1IOJ<69c;I7ihw`C+|WjrxXZh%QELnW$Bi(Jm>fm7;w9dpZWfcVO+q=TIc3*$Av zhhI%SYJm*xsGgWn)uHlpHS~(+Y)6Z!_+4I=Gm}h*X$VNpv%VrzKKs<#@8F?hJ@R-L zI5zO@dK#=-%qexF1Hm`-I%dVl@#O>o@SvFpm5%te7tLE+@wT}CfMjSKzHGRuVNhg7WRYlUw- zp=$jjb6q#+>xY8E-V#4mq5TuW3~6;3VOgCdI4f!{fTw39c*x8%OJ~=}1ygTU7Y(5q zm>3>E=|Lf7izZ!-54xTLkn1#I7_PFfv z+mAFqAY0>t(&nys(IYuefT}uwg=j<@Plk$|_QzJc4_%h$(H2@~Cq5J%U}>gd)?;bgy?8yFMrT;1JH8VB z87qSdU0go#wO3~1swwrPu;fp*tN;YOt-X0Z#val6yFpyffe@UlecPKfyW4w=-mTte z1g8wRXW8F0YC+d7elL#QCgVag{Q~vr+b+C#&9;xHP+X#=Vt&%=y}9C?knSbHM~$M& zM}f;NYdin>;+f`mr;wuEZ0ld-1f_!}N&i_qJUxh>%CO3+5QoC}Npy%72tYq-N?eRV zTh4!V)&=GNPrJ}9Eu}*SEsI))L7f8j)BAQ$RJ);3l;UiJE3O{>nR{$`z0m0RqJa8y zVUM;&l|G*Mu!T9Uqc~`Fkp-@onI0vMU3#-m9~tx57v4$IYI>Y_yP>?&tqqNVS>IBF zm!cmjMpP4Y^bL*yH9r)?0*w|J>f;&Svw&OUS4knnizf3DTx_5Eg`DIfQi+tNWsxpV z_(+zbdr0VJqAZEO!c*dbKYkL$wyD2`TY-1>)aqok+TO@|y~MhGl&PDlfV}54OYmQK zOyC|smO$}_I**VQi8X|g%8yTqm-XtSiOYR8dcW1p`}Uo9_QV~!h+Ivjxf^bQYVY!R zu2p8l9G&yf^Fk1b?5Y(SphTmI4jY5(1hFPV2#tHwB8%v~aaj7Ec{=;_1EgV>DnG`e zNy@=&e3C3q+}@NQSFY1J9^FRvHv}|_$}JaY1xPXVz^GGx_eP)$dWDiJcy18dp&EGqG<5x$v=JY%zgJNwmJxAM-`6`;u*F_#$8;hkJXqN9ko zd}@8M=EW!>kJKBrVj95zY;OT}Pd`6>X2uE)9`Z}mq#~AecP#4GX8rwVyUwME zTJ{Q7(wyyW+$tox7!#)(!x>4XRVqPub7BdXPME@v$+Yet)KTGtT7R9UIm+eGHyVQw0-zbHa*Sm$hz@&u6 zD=i;3%<$TuS#W~m$rQLQk->Cn2u(utP<8oT^&E_*saesaUDiqR>79rAHs}u2img@W z4nanLaYhj!=rW{yOQeG{wsQJK`;-O+KI{>qed#e{$J zlGq87Q4ykrq}ejMZYnGP&Ox>@ZWCVQ9kG%@P&wE~E^4HS=xeHMly!>qC)bjLem>kR zFb^z(lhNEgSFb-*8YXClZ^UWMFtb*3~uTy%sgVfgRHAs^*{0ZV*DR)QlT*< zvl%F_hVK=Fk3e~n;H~sm4Wni}_mRk#& zmpHawqqL*t?>6zT%J4VN-c*h^Q7nm5LWO4SLd0nny!EFUHWv=Vx}4>n#Lsi+w{(s7 zz6P>2$-d4KySa*Lx8o_ak;(8O`Bv!M|3x*ALX6OH^1|CqS}tDx6yH;!3-m3EPRx z-(mfv(27fSh3Bo}f)6oRCuT$-K(*fYf zA(QNmg3M8HYgW528fTg8Ac3z8VNVt*YTfB(^XzGrQ<5!vALToOE~tPYQ!x^ds}8H? z8AIT~s~eg?klfUWnecfEe{83i%3=6$%42s!G$DawN4|CrFvw=$Skr|13&^q_71!>E z6g?y|5TvxGz)hRL8^Ze`zw=ghnznGxr|55tJX zW!#Qh*sEQoV~5WYjfA(oqC{45)%zuMxG4xCnbE}JOY42g23@W=g&*IUC+r{+Dn~-6 zm}7TKkSt-2$wLlN!O<#tMZzutU#D*)c%O{F(7vk_NMWz$;vTVj$5~7>2h6a*27D4$ znxRHR%bW=t-tI0UjFRSv%p5nKqgoC3`MmrypU5nkvEtSy(I*#J1Fj)UvW1vViRbpD zmOM&=B%QGmGwuTv@Ta*1Z;}aVL-h}uWX2R;iRBt+)Tc70SAH=nUfYZ@*Dw6;*);pD z*4=Vv#QDY1re&1?h7^8+_~u3q*K5DWe3+)=;v=AdJV^W>o+Jjtl1^^WyLcV#A4t!q z`uXll5#MeiCsY0}M`yh3?OJUQw*e-M&e#i7iyD0hoM^!rz=`7ef&ecEwL-;=aE2&* zNUO#d5_FRed@+JZ)KpXvauiV5%MX>IQKBqGBNZ>VsF7ov;dO4Q<@|1e1xD*KPT3|) zjbdDXjC@QOSjrnOjumDjP3LpiN%D*>eYdyq56Fh!Lu+P`^T?ZfZ*)~+Xs~rrOgq)p za#p)#^O!y~?_c~A799sf;>k9vH7)OKKC@opZHD8WM~bFosTQ#E>=#7Xfj?5%r6FC| z`x8E6J0P9q4^Ex~^0-ce!Mb@ptQq_Xh&@u}|{-}Tt$`$PDBJhFu zSR3-b69lx&gZ}MsTuRKgv#GGujW;NT?70!j61+;UEsE)DUK74`#;lkO{V+1QfjE+b z<^GM|vML(xzYJlA{AaddSn=#OiU?N6ey|k@Xr>b0j+`Ljl|+(A8GQ^ZHNEbz9r&Ey zTQ;O86(BkeGhEdB!hg^YawV~<{pHBZnR6+$@ zE8*HeMl8rdd; zl~Z=;i|cf-`I&t$pyUnEaxB==I{cC@hbu>c-a$v3;E*-6j>{$iq#Poct$?y0A7Z@P zFZruq(!BUHFMqDD?L|FR8zE=4aaEqz`{p^vgG-O@r}1TMFz(d6neCGjo(-5Le}McH z*E$2KBR1zs`mcYyN5@Nlmmu~xX0PTZN6$Z?&P_y54h4)(zEVN(Wa?8xR1K`N&fd^7 z$9$w6I%iKbPyH3XeWOv#Uuug)FSuR_)I3!0Qo4L#aVwz3CjPcYzaz$(+{alPNu2zC zrcccPzi!UaZj<_Xo){XHWB!y@E=clrXhYd*8;7LVE<+#LyoF9ts`pz2Tn;we1|qH3 zMiRKjL{i#3Y^5a3_x*gFrP1dVFF8d73PuM*Dr{>ivbT;akMq_i-%`QgsWSJSy07B9 z)?Q+_%ZI_U(JtsGvKbs7*IOW`cLilyXh*5Q%xJO&K!8g(7h3H1O379^8T)H?G$7|% z->h7T^*7SP#t+!cmqcSysfmCj&4RplcU-#OGC|Dkrt2z&8E2JmI~Ju@9`W&(UVply zszlypB5rWf`xcZOt!2qwivV{(*US&dC~6_HFSg5)vh?}2MgG!qf6OBkZ+{&&ftas` zI$8MrVsZNB@-+7cmVeWq&$ApC7eMUzW76z3jQc1k1$IKEG@#7+t*UM?C~Dx@)Qim2 zV$SzOSUqYyw=zM+yu{)7M6im`5mE<;LAmJ%=qE@PE7=ll)xy*=1O}It&#Z7?5ME6! zPK!ilt)fUepZ(0itS=%-z^Ds;hurdrT{`j={D_?vptZ#@E;NJuli7Oqi-Wfi;_qG+VSyM8Zts1 zBraEj+e_ow77Ccq{^x|f>nyB&8%E`)>#Bd3*3#cgomByD@$T(fI@~+NOUz#>HxV)6 zq~TAk!NC-6%3@?@Q+x(*4VT**3lAL~?Y!X&pRg=QVz)D!xs(FdpvSu=`#KRN!N;Gm zzCFMdhjKRYHWfOni1bC=%k39PB;ZYKP!y?yvMkyL_A5l*mjMXQt&}#Nv0IQ;W7)0c z?RBi;l&ZfQL0v%qvZ{gxW;3SAOJ~L|&^w5WSs9Z|Vy-T%BFDTHO9splU{F)GE!gWA zH1E^N@X00>zHejIY8Vb;z+XwXK`n{5!-cDrn6+^}lz>bLf^1kL7Hj({8pq*#{fW=D zB2i_HKaM?FK?<&bxXm+Ba+ycB_A)U^GmYq<2MUGCN}wqpVYHbKA%Yg)X#~%>n#Bwl z;98_qiAlgP789Sbt=U|WbhQJaoH8{c59P(P<`m+rJX1=j#WIu^#N~GcR=D5Us9T-L zGtV$Am*51$vg#O4D<-Cj)MV*kW)hhQtZe+|gLb?JS@b^sI7Rn8G9dl+i>r{}z=QkJ z5-g8;d$`fA{5}fBBeobzO-{8{E=F&FoHS37Ioy)XgK|<(x*5 zNl4hP`ceb^Eo7PIN@k&<>SjYCt<;xv61F>Jn^(7M^n67MY#|wR61_c6*kX z7Wnbw;}%D0)5c=R&!9tZ`c?kAj4ark`oCd4Lr;&dno||^NcENfS7mP*7I%_<4dW2p z9fG^NCb+x1y9N&)Jh($}cZc8(3GVLh?oN0+|9xk(!;{^a>Ferl;KMn0$*-uYTh8sF zc3Q=pZ0%xRj>gRh@I(N+HNLi2Vy&%rVMm#D-$eWD4)PY8nuDqf(1-r=SOkOSMIxV< zC)<~sbaUJUzgZk}SG38?PyTL<~5w^zxsv-sbJ-)c4iR+Ua{rvX*8GS2Q z&+e}{?v`cQBl0CIat))E4CF@mHz%K3m^j?Mi*Fs>bX`1^oaoV;o};Vk2ipc+-kMaE zr*Yyr#DCv8?eUJNDarQk~2nTl08W*0o>2uHT zDjcuX$l+<<^_^m!a)cZ2hR)}H8unUy6suDNW44v@C@>*ieuoeqK1@7m-rNEoVQi*U z#r>YwKTuJjM*T%0?lkl|-^$3()?8qTjQ`CKu!s|cm!>svn+cO4Py_V7a6vK zv5fLr_lyzWWmd&6+QbS3x4}7g-8D|R3nr>yHcargsP)fR1{`YEo9^-HCsfM-(PpFV zc9P@7$@*O4lmKEjkLV2?`3IW~>LL4-Se8@g0A3}BW>Cy@!m#Vds)Ag@DSY!WcKqTs z5yK;&6Q4freBe2+yy z;qYwkFJ@EC)|i=m7thGlTu>@TdxGMmg7^@D;i$YvuU7oZmVSu^nhw@k6p#ye|xm3 zrKClbc8npnRt~moQms2T`MGb(R*cFGJEg>Es~J+s(g&eb(zi8d)RQ>$AZpcfi%EUz zZEptKkv!iL&`D7?l)*x9;sw$7ulgA?0-J4AA(@AV*~CX26=z=+a2TC*;=@g~ykXwV z(m&n$UzHC$ctwuFA4(+*!$a#d!^Sjg7u=*CMab@Q#^@n!5f+GF*7fW_8G8E@9+mJq zPwsH-JoFh_v?Sk4;vA#g>fw6|1yuMU4IrC;MqW!bsxIrJcDUIg=6>EkxiD@4{l@p= zD7OXtrTcEBt!yLR<9uFVf6tla3V9ezyzqVUmWz~eJC_VTuMzAx7Y$D2&{tJ4ZGRyp z6rBkd3zjCYJZN?_o@m1;!d>`)3?Z4m!d==n(DHd^il!@Bzrg@ZobDUL!RAl(U+)8O zpSfk^Biy~w2Hxc}@Wgm=3dx7VQBh?<<*%Q^2_5Fh=ckyEXSCZ@hsho(P5CjbCHBy# z-(I1heFN*O8-00|Z3Km4;79<74qgIe8*%=l=-?0frhqK4e@8+NE6H0f^1*uDRv`8Z z#>70h`a2?_qbIm(6Z)@oNdw9+6YggIaT8o9JBIbEr&&+O;Nb`P$(DLVn1e7E&{GD>;`8EBGS+BNLk!GNV z!;dCk1Y_lYtHyhx)PK#;o5@4R{c0+J{sluG0a(2LSh+RppY(kl-+i0=p6O9^cWLqqP_lU8isB=u~nZ@@IGILgp-EPT}K?!nx({;}O+LI6)cxY7sOscU( z)01db0PAF;qH?sm5zP^WI; zDGEZdnMMb;%)#hEfx(-wdI#gr^Gj!d$AASezkUFgHjckFzidAk|0{p;&xsGwjFy1J zkpP#M5I7|FAkHCWTg+hRzM#3i7Kgxl(iL8cDCqgb;G?+*v z=!9s)px$2^$2^EIVr>%&`F6ir;t?5istGh_k$)M{!Pc`w;w>$sSw?q3{4O3MZg2!` zU|4=)4Zjg4`Quexw=8r%wgOtAvEM*cq*VDTjAq^DkzY1M`}@wB3rV6Q$agsBN084< zou=o9Hh|a5=s2PNm{b<=*gE7f5%fqGfIfYj2a#zcn0Vjjw0?d< z&07d}BWGI-2KV$_Ro{x4kTAbD_wkTK(ftaY4$)-3RO#RFIYWrDgGrF2nCwOb5O&(u zfkR1Q#LpLB4I^8OOYbu2(AKN+#f2|0U{I07v-_BkIw+Zx_<%FmMGo|2 zOE8$K4H!X{`NlQ||@D+%Z3!4+i(q$d^So#Y@cQ%FSY?zFGqz<4ZlM`D5@!eVVoWMgGDizJgfLowq z$4#lnCl=3GPrAMU+=m9$nU*Ort`{y_^bNrml-qCMG!hKbx9mX| z;s$hD`+-E~0&VOtBS{@kJmEV{cO?^KAV>J!s?<axx`BSRz zW8TtxQxF$@8JW)0hzMPz$4`Y|txVmZ&Yja5kK5j|vXPfgZVhCucw4C=SShjVHGZa$ zHGbZs@NF4+zG)85j8_-WY$`120`M@2ok4_}$g8`Is%`HRXf$NXl=Eji6iw$R2P`@= zSYTQ{f36S5hQ^l|Qv{W;-PRPt;;3Qb{ zpq`%HWwP%G38A=>A~?lYo1iNMHx*8N5%JBb!XqN@H4?$Z1?dGHkXq~HltTr{|7baS zh1uOTept^5%1L;ZnJO1TF~85*-rMVI-FNslwFsY6CU-0JbCLrYW3-TZpF~cqd^1x{ z5x0f}{`Amxa@L?kc}gvI=^R$8c8!9(p^#VzqjuGpo4*w!CWk64f2oKnQ*&BvUm=+j zixX@EY030EWl+a2#q;Lxt<+0S8m8~zKs017Q=d$>#~P&ERIKdw4kk2`mc`CeabdzB zLb}~LK1oSXl{2_($rI2CC+^T8{Gc<&C4UL}k@jZCS_Nl2UIljP+dPb{#6pk2OF-^Pn7My#VrkVN`85euchDWIf)fRFl?CqsqDd?a=K z93WN{m7?3_+d!9vZ?|hiH)sE&tuRgOJ3Q$v7;+p?(uJtv@^Gxutm=oT0fWPW+Yym3 zq(l7)aOYw+)4pm|1~zg;fSOkgDVLA)jHr*YWh~cqmJU4>33un{Tx?8t`>iQYA&GDOnTvT)smw#Dgyl{4N+dDF%nLyHT59VAO zl}N0)vIRbbu7UmchDovpLO2A?fn*VWHth6VYmk9&tfeXo?H`5_W`8 zx8w2!wcFtF;_xHAs}a82)6UX12jlI2XjiPDMTk7g#&hFst6eqUW!}{tW{#c9 zkWf|%JI=+vq$IYQNfRCxGF5{x3g4g?&-dw4TIaPSi?lt16Norj2f5;l_JwtYZ^u6Z zwAw@)rYL}&X}D(%cSbH6!`lq=mHkYmO=v&Ph%{?kMEk3L2lDFJDwn#|Pz4X_m0n&j zqjsnZ7W^z&&9PK$aJ2g{F2ig*;`lr!U4P73w)fsnZILOf2j?17vr*BJK!hFddAsBK zQ)&U^pmNd`tD4Ceq5aL#+M2f0sS__Bm*U;WlG6-y1>E^~iDS9ud6`ytgg1ps(}g{z zl6MXIvN&i=wW{&1Ue)^nrn zG);_Redr3(_su#B#LCkK8trP04*|YmyMz4`?A+Y>eWy>*$JR}RR!l3^InunlD`a6v?Up#u(LjO4^z10Fw=n5CiaJQ`-(Rb;%7y9y|!My1V2?2YHZ{cNRKw>6IUVvh&bsf|=t^N(3S)+d+!3Tq7K z#Ww69%c2W_5F;_&+p|z)m*dFQPtIW6^Y!@|ohK4}^BU?^M~|~@-p7x#IJXs^IE^*o zJihQcN$=l6AYFi#TwUUMk9J+f=0UjJJ3TRSEzWCmv^b!;V=q&gq$)AYsV2`AaFWFU>n0qLD=kLX+#FYix^H`WzLpF5|K=`3i=<;=a7`oQPcac~SRhU|n*Na{{K>`iUu39rsGn}MwCK^!gNQG$Wcg>Uz%zJs?!VNOsCc^CgRA0z{ zER<#{2dzk#r(VRF2amb}S-EcUwaCjGb30RtDZ(rWU1p04sXcL`g^FSUd4-}0yJ zAt1RNzp0P3XNIl&`qS#bkFCt}k#_gSJrwAKpJK_EZS>>kWk(q_kVR-~wL!iBe`SCz zm1bUcXsyA0x_)@5?q_D=oVV{t-)8M$@OHX6uyVTTJ~-Mgj%nEa_&ze3iW?P=daWfd z=>E$(M2vr;7P)vP!>T`i{8%@}%>+E;JYs0+n@h}L3cKX3&ekv)O=;x4(lCEFc(Kw` z8;Uu<$gK$D_s}E8h6XkC+Bcl4TxP~Nt`hAk8mRs7SklZ+Kbk2R!TL`|y-gakXEEp( zBE(arS5@$@5R5P|kycP6kFiGQxq5X{=KWR=SO<_dB-e)CX3^m4*4^=Y}I7`LW)P#vn@i0UltGzmJ8ew0b9~XQRVqZeR z;INQ2N3Asj9myMZ9!i+d5PZ6jwPm@@xL*oW+(MFZP>T~?RY;S~g2eT4bxAl)Fwyr| zrhGY%FW@C?`BQe)hi%68E4g~RtD`-^0PUpp_cwV7m}rXvq8W<{@LdsF&BCi+z546E zEb|2AE$U>3Q7g5I8FJ@sHoGW5&oAMg;wyX|YxQcn-Go?Kx^7%;OM%D<%yl!|a7B;1 z%S34!d$*W=z#8tl*TtGBP0h^1IvSkfSxtuh!|7VzUT1I#9`nF;azWlF*;uM31w4($ z#xxT9>$lvgyyVaFXBSb9AX{6j6|3=0>SMVY_u{n;)0QMiMb0HL7dn1~Q_*@y*Xx9<4sSiY4;sQQDI} zDV%S9qMaP0T%TuoB=&l%5}?639j~f=KBO!(*kPp|eZOm5sTI+UIXrdR9C{E!5!5MX zXHcJkU(-OsXLpLp`ZxMM-1wo7L>pRo)^T%;;&NJOPo19;)RP_(dW4`o$ zy|){Wzb{y^XKS4DEILBAw{cy>Px@*W&B2D<^3m1?Rwc+p{dwdVD=Y+0roNw|J4C|I zc%X_n!ESYMb$11!GaZf&8Kt~c(m*Yh%`%D0+B;Zeb#7m#dD-aP>E`{PSLwtJ1k4RU zNt{txARzUBd}{w+cXY20^0=0^iyRlt-r&(*m90_nU)9#o+nV^I77uA3peL4sgyjlD zgcg?uvLkY1OhS)r+t&q=#d(kF`frSZt&QzCm~lr!nHAn<`sb7A(n?gNJ~O#}GI4PR zu13*VVyM=DVG+;Y0~g2KcBEY6q^1Z3&vN}7Q3Fd!5P`Y#MSGpazj0LD*C9etX@}B8 ztd!C1e9`rqL#TqW-23w_NVHZbYS<4S6d%ky5L!x5siZ&De{Xww;^sqF}XRUIXGX}33QOqb33s5eSqOU#2}@H z*4$yMXvjsy!bmd%=_q%Mj_Ra!p$vgs#iSoF;=KD&W7Lq0+GB;{3KcP`qcnNd!cZE> zMi3tsDUw4H$|+i5-jD1d;LvFX@j}yIJVn*5i#E3;y_dIiyzk+^#>K%gXO5nIZOx&; z>|H>*VX0w4IZ!l3swP1Pbp#_3yfk$L;T-WH_an@hF{NBrC2nLm*l;cws2?wF27Z0=&Id28RawsWgBTM|IFiE7`pwiD*NcD@Io_WMbCs2f} zx8M#ivQn}rCGB(a=US$ym(+|5l|$I=cqwSB5@S3>7Dvu~NURcsBOuHAV$vM$NbziW4tE$!XJmDT6UrWa zMXz9O4{K~I(n)}|AYed|?|n+{cE6@%vD=$V9}n?j59-0##=@%>-+1&}sgr2q7w>(4 zo0^5smGTThw{k&ql^JcdT!B9>CdMk$yxEq%`5W3)F{|#+J{?zt$*Xj}JiP0a5Q}s% zt;6Yzt#__0I(@qb>mQ$q_rmM0^PXNkzl&Q)3#xP-VnYEt^v(blbd#M`4Jp(qR~BD> zNM#!$fm$&ZL52kX@*;*jj6%dqve)5#EEMqJR!7Kb7B4Z;KK~~OkxtES zfqPa?nULIh2FW?eS&MXKY~nU%ajG#v@0p|zr}p;?CynAnzcF1+cdy0IOHaXySvDNw zwPFfF@GxVY-ANB?6JxS=V+O_3s-o-j7GtdR7Y9>ZfBCUIXl8k5;E^h(oBai>JT#0% zVlT-1gI;U8SVBaR3M&xtX`erBJ1j;cD(FH zurc}IzW2=v)Asw>Vz=)&HBtE0nIPUr+Z1(T$*IU@3cE%w?P2dTDim z#D1ayqD`|lqi_SLtxIZ5a^-P`-q{;q7v1l3s*E?vVW%x2j4YNBGShE#5!JZ*upRJg zaMb(8=yLQ+dvUyBLvNkCRue66wv%l$wKmCd9~Xw(oNFqU9p^^doF|Ky9i`$d2w)g? z*TS0%UQkF6zu3`SxwAb=jIqnVY0BM~<|Xi^D4DYM&Oqbj!FtCHk4Aq|h^`#hJev(- zDz00{gqA5Pir}4kF(vcu?T^0NsukGdAey-8c&52C*s+qtFML|7CxblPB>Qefk5e8Q z$)}2!@Fn+NikF@;OZDj$1mr*F!j#<4ZFBjlCdV>PY2ltzJqCqlWd~}EHuUP&Ek`hh z5y7fjOgIY`|-?jS#|7}^Lr=`tm@*}*4!|ilci~!9PhGKk*ij?oE#r<7} zr54K!MwNWtRj+ z6Tj8&*F70dE^@9j>&mhfy((S@yZt8hu*XU8_<`aWtX*^Ns-mE@n7juK>KKu?RZOFu z6GR%&>T6{+eC+W@67;pX@7{l(qN;37O=P5+rf36({=w8eGiz$-;>6lQfCFoZ=dNjv zryfYoWm@q7s#LzT*5ZcP>0>BuOj&Ce5}W*TQX>?AZnex`s$~wj^MErS%v+B##d8Le zQ#+bE7nIq-w3;a^3liBkg$t2dynvuCQwB>z{Dj{g^t7Z3o&oBDcwN)!0($=gtopsr zkt_js2H%ZszO^T_w8^o+i!8<(;i^7)(CRi`hr28Fu~PBs_q5E1hZsAoFz7)2K|AG@ z^sPHyf2Wvs#ps;0!~SYxxXF=+2W+cp<7;9g%p>a>-yw})oHJiH!IdS z{|7mm+maJk++>L>bE%iE3(RSQr#e{|HJbKlDO68<XfxR24{2R0HZwIsrDu}o+ahGvb|UKDly zgFA%x9UgW7{Bd8TcID*knM+BqR*}T>bHPI62;I)508C0f?+a%DhiJSj_bwsIWlCoZ znnrx}MId)I+si!;cYDjO^=zhgYA*q0dVJOy;+?!+A__w!CwMeV8)K$y0us}4ctm1|cM0=?1m{I!vVxAn~_Y%J6sh))NAI+H_a%8gnbXCM(qD(S62)}GlI4^lBcqv(?gwlerAz8-si=rcGPl&oc* z#{e;q;DoN@A^Q0gKJfyy6tTC6SpHu2IcrFmpV4!a?Ehgj+{zj=7A5 z1@?wj9NxJ zGLm&T(1r0Ua(dDIFgD7SUg1Q?3;CchouCb9Z(IW-wn9n?O`kOWPQORg3rr!JUO~qy zAO+gM5Z5$a9!18Iw~j)4CMgz~dDvosD?El~;@*Z4Y4qWrj59jll=P4E*ST4kd?u6J z^nCzQ=1<5kB}*Y+^u>wKn0HP9v01E*1Uq1ZS#*X?% z`i}Z^77n&H;R=H`0FCb_G~WVP2V)#(6f=bkGA7`~pzy~xi5`LBKJ;yASKDrC4iQifGliWrDjqtZ22c7iJbJ@NHU=`09E zG5_AH7@Q$Ps>5Vw&U!bce|xAvlMIO81?PKl*%pDVd=gi>6I>_3;eqsulV&ewh$}C9 zjDg3G?>P~OK*j}jj5}!L+*|N+R_TrEB1Y%pK))RTMmf;|w!+L*D9J4${Okv58 zp$=_+>KMrn-Nn@}zT+lbjUC^x9_*$%8{-AVKhxWjxAHy(vN*R<(HaVw$8xU-+WXjU z-;E|Jj}>6iT(Habk(b_Nlf+9qzug`-_b4?a$XoFMRzU^Km04W_!2m@d?c1zfa|0d% zwt0-Wg0=2{)KULA&U3Sflz?<$pr7x*9%o0}54u*y&Hy14$B&MZr4nTn!J~B)5s(u_ zuHTdHUA10;GsnG$*8%|ld=mrS|NB3Ps+h2_6wIiY^zb;GBrVm*&}fYU!xZzHz3i|g ztprU!eYJv^L_ZB(Fg;|E{20R+Gus&R*cSA_DE;^~%?um`t;BG@RJ8&HC6)9xw768g z0!1Oq%A9w(%jm*di?|8(Zq5=V{st=Qq-eqOrimCXJvGaWL~{fWPEx2 z&P-@{{TmgnIIOc>H|e8xCE7BK5jr86F0u1%qaGUxn_UT2tR(gKB17OY zF|rL^3e#v3Fp7g^%u&W?_{ewhzO%$>VoX&XAR^_66b@H$aPI?7Gt3Jt4Xb?R<=;?- zkp@k{FNUkY3{yAhc7P|sh^_;|C@k$Y@c9l_W#IE+(!hP8IAe+Pr$g+i#yygiS4Ygm)VAb0uHnIc)?k6tP1k(KE#og~H>0PKB| zIR2?BCx@6rF;WkW<03S|iYR>BSe!`wCSM`-T>rxDParuF;6yHRjhb2+zflDF*}5K~jW$ofY>%}T?_ z3=sZ;vm?)0H6r#ea@#O(hRxC8Y5S>e^v!-$XbH<7*fiEq*|AQm`Mgoay6#Nq)LrgL z3C~%)7lYN1{CtTBE1uMI*}HQWpEy!e_bFTJIq)V*D2X)d?!EM6-FXH@OAv6`XWSPY z1UfU3Pqw)3JV31Ev)Ds5<*$W#sJgXsLt%y<4kOTeg|+%5 zaFVYok){jI`|DTkdv&H3OR;N@4)VyXwo=t(yF$1;Pc5$vL8RK zMDQh>e_?OSMjl0WG>di-L*X*)N9{!4Nnc|K96I?iF7hL;k%+*~NW=HmjjN0nv^<2a z#~AG@ryYD}Uql$9gXmo#iWyB2Yh2X-&brH#SZWp2uum46Mc$9 z-Kwx1OK5s;J}+S!C4O__OLvirgOBXC-?@zuq?dGV6*HltSH`%j?Q%=DARdxSIM>osj)faf9Ye zuCvAZm0*jw#(J8b}|8BrXRCmp%u0FiHM$jZ+X7lvNOF zO_Z$3mO>7^MPYmaYiiU*ui+CGI-vlufdbo-Aq0o|@es+(`&?Tf3MjBqQ$?iUnK4v4 z1W+N3mhzOdXHc8T_2D#YgWzA;@F4y9(0S8F}bP# zUZzQQLP?{CS$2J|m=-BDx61nmu?H!xvg^cECu^A7*s$z_OqFhP@JAZ`Ck|^9WrIFv z95q#!x93c*jqJ@S@kKQw5!zE=RDn}C_>TaTq;Z6fB> zmJo7?v`C8JIP1e@IN}ufjnvKHQ*xIJteVrz`iR);wy;Bj68ok>45Xoy@Cu2gZ|fe? zHEJi2t7}dY`*8H!0;(vQ;K%Qfxt0|2K7Pwn(2qgimbtQ^nI!P7p}7{hS*_#R@8&q_ zrUwTbcHv7D7W5~(zP5_;8@d5Vt7}>qshauDlLnUOeQcKmSJMXfC)FJk%`ERG^OEVE zc3C3y8EVvT${{c~3`Z7hM?1d2wua1R?)p4;ID*POrQmS-6u}4jXsS-AaL&WWs*L|} zyI9{cIu>NU(g@|OaCnkiT-_;JlOozrZYqUD6!eJyIhRYx&)@dW%w6d#^9WTH({_o$ zYG`GhwvxEgB*xJ2eN%HwKdgsM#p}#Ml$JC$I)q~V_#`6|EQDF z`-9oXF##B-)UUv^=SY?-spUypH=o**CXFFB*(vLKvaLh(8+ zt0&YLACWM-Cj$pb~9DX+)RAhT5ikr7}0XeZH`xslm zH5i>^T<}?b;Xvw;b@BM7nL!vTRewdP59XjccwO##!(|Y~(V@Y&wD(-Qy~e@rGze3e z<9iD}x#1uOyu`-9$R&>tdnfXKGnrc_OMB7}6AJ>FV)9Be*?CaJ?L5B0Xakv%WjobL zR09wnzp?LcYQ|;-CQGLyo1XpjbhU^!%$r2z@HMK7#;UD)Hq9mw`Lw)0;b`dN<3mJk z_!dbZ#SrM^B)A>v7Qb%_O-vx;W~NqdS1Dxf*+0Plwi1{E$ooZbPSpw#lq8pYzh=9z zp5lh)Rr>O_ueW#i6cm$GdTx6ycrfzKVqQU-Q9}*CWdS#sNpW|xnb-;=ox}GEV?i=$ z&T}N+f|V^Btr5gAQahl{3uE|e?BN2TZWcd|y_FwIW6koLy&EE-HT?&~C*`{+0qUyh zf@&wjPWLFroS!OOxg6JJXOY`ZRo$C7RwGW8}XOs-Q!vyGX+3XT!tBCJa`eNWT?f zxhLE2>fVm$gLtVj`d^s2>ru)vX=Bm&VRCKa&Z#0zYTqkA<}Ax|!Qu+@iN&}vr?ljI zYG&x67m7GG%L4>uTlAG`z7|-_OWAZ;+wkgRE@u0JZ@bRfE7|j$Yl2@Up?_t*7izHz ze@-HMYd^s8c!>s7lHk;1MC{5iB_=a{J5x&7Zgf-Y>~Tp7z}owI^os8E4FI5unY zvZCg4>+$5cB@M1JdX$#-78P5i3Cy|7p1H3@Y7*b+dv$@@@HKluSJ%3WxKpqy2q)t6 z*gg}^$DV|BcW#*zDG~z{LM7a9e%4iZ4sYRc{Zvz3W@VUW9N0<`KrLjxi$aZL&EPXH zR-d123ZGTEdYEgv_pSq-#kZcnD>vQp={ORJnt6T-e>?qBqkZG%A;pKcI7hMfHhs15O`m0|NG!AgEG`j@3%)-s5Xf1dA$a zXpl~FS3LIB6S7-QBoupPnqJ{`E6$e>Q2%6zbp9w*KaY16Km%a^R5pv=C{(`1!k?XfL@bvr^&*7ZHS_h8CN;+rI4{ zO8V%?f;~WtIWPz+=+E;N6wqEuib854qTwdsWGw=SEP4z0>mRRNpPxVdPSoW;ln7sg zF)*ZPR{+5B0AN24F@L;reST(2{TA$BvM;(O`i73S_O5^c_1Bmd&k|B>08Dql(I5X0 zK)`pd4+`M8^jl05TYGDL$KPPNiUh$)1F)U|Sh#<}3IJIATP!nUs}H|HQZv$ujRv5E z0=6=Lwh9)o!TBxH2Yq|}|4XiU-9pt8D6uVoRVNTYKzM($Y94Uc`8zB?XZ=f_<297c zsEEcp0K`v09`Zjy-NF7BC^x_*s_vg|OkRTqn@jyT0obSW|4b2gz+v@w_8Hn*TkG2x z{mdkK4JPI^Pu>ZztP=qE=f>s(y7Kp6HURC&-#~#ou($dHgbpzoUqfXh{ud}G2S;1$ z-#~o>_G*OyOeYNZf7L1bqw8{g^a1nacUA#L)6vG*{?`?>13kZ+lf5xOxfr1HW^Df( z689f^K$8H~gbIy+1@QeMX(9M$B+^onP6o#IHpT$?#@`SfeHd~4DY|R{m_E#ZumHYu zefC)XHj$vdg9Bg;?e%{{prm%eEPxDn&Xr!bqhF{`41-SJpoz`d>r&Kic~{Z~ZSbW=sFd^YY4f|DRp?J73^0=&8!Tg8r}j+}}B$ zegU^s{}u3`Tv4wre(iYr1&memSHS=0hI$S7+FA4qu#(aG_`wKI<;jfJR b*Hx{YBsky%^Yh?A4x|a#NYixu{O$h(4U{Xp literal 0 HcmV?d00001 diff --git a/testing/owners.txt b/testing/owners.txt new file mode 100644 index 00000000000..c1bbe9a9e5c --- /dev/null +++ b/testing/owners.txt @@ -0,0 +1,2 @@ +joinnis +nanthi \ No newline at end of file diff --git a/testing/pipeline/k8s-custom-pipelines.yml b/testing/pipeline/k8s-custom-pipelines.yml new file mode 100644 index 00000000000..712d6f67762 --- /dev/null +++ b/testing/pipeline/k8s-custom-pipelines.yml @@ -0,0 +1,374 @@ +resources: +- repo: self + +trigger: + batch: true + branches: + include: + - 'main' + +pr: + branches: + include: + - '*' + +stages: +- stage: BuildTestPublishExtension + displayName: "Build, Test, and Publish Extension" + variables: + TEST_PATH: $(Agent.BuildDirectory)/s/testing + CLI_REPO_PATH: $(Agent.BuildDirectory)/s + EXTENSION_NAME: "connectedk8s" + EXTENSION_FILE_NAME: "connectedk8s" + SUBSCRIPTION_ID: "15c06b1b-01d6-407b-bb21-740b8617dea3" + RESOURCE_GROUP: "K8sPartnerExtensionTest" + BASE_CLUSTER_NAME: "connectedk8s-cluster" + jobs: + - template: ./templates/run-test.yml + parameters: + jobName: BasicOnboardingTest + path: ./test/configurations/BasicOnboarding.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: AutoUpdateTest + path: ./test/configurations/AutoUpdate.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: ProxyTest + path: ./test/configurations/Proxy.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: GatewayTest + path: ./test/configurations/Gateway.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: WorkloadIdentityTest + path: ./test/configurations/WorkloadIdentity.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: TroubleshootTest + path: ./test/configurations/Troubleshoot.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: Connectedk8sProxyTest + path: ./test/configurations/ConnectProxy.Tests.ps1 + - job: BuildPublishExtension + pool: + vmImage: 'ubuntu-20.04' + displayName: "Build and Publish the Extension Artifact" + variables: + CLI_REPO_PATH: $(Agent.BuildDirectory)/s + EXTENSION_NAME: "connectedk8s" + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.6' + inputs: + versionSpec: 3.6 + - bash: | + set -ev + echo "Building extension ${EXTENSION_NAME}..." + + # prepare and activate virtualenv + pip install virtualenv + python3 -m venv env/ + source env/bin/activate + + # clone azure-cli + pip install --upgrade pip + pip install azdev + + ls $(CLI_REPO_PATH) + + azdev --version + azdev setup -r $(CLI_REPO_PATH) -e $(EXTENSION_NAME) + azdev extension build $(EXTENSION_NAME) + workingDirectory: $(CLI_REPO_PATH) + displayName: "Setup and Build Extension with azdev" + - task: PublishBuildArtifacts@1 + inputs: + pathToPublish: $(CLI_REPO_PATH)/dist + +- stage: AzureCLIOfficial + displayName: "Azure Official CLI Code Checks" + dependsOn: [] + jobs: + - job: CheckLicenseHeader + displayName: "Check License" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.10' + inputs: + versionSpec: 3.10 + - bash: | + set -ev + + # prepare and activate virtualenv + python -m venv env/ + + chmod +x ./env/bin/activate + source ./env/bin/activate + + # clone azure-cli + git clone -q --single-branch -b dev https://github.com/Azure/azure-cli.git ../azure-cli + + pip install --upgrade pip + pip install -q azdev + + azdev setup -c ../azure-cli -r ./ + + azdev --version + az --version + + azdev verify license + + - job: IndexVerify + displayName: "Verify Extensions Index" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.10' + inputs: + versionSpec: 3.10 + - bash: | + #!/usr/bin/env bash + set -ev + pip install wheel==0.30.0 requests packaging + export CI="ADO" + python ./scripts/ci/test_index.py -v + displayName: "Verify Extensions Index" + + - job: UnitTests + displayName: "Unit Tests" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.12' + inputs: + versionSpec: '3.12' + - bash: pip install wheel==0.30.0 + displayName: 'Install wheel==0.30.0' + - bash: | + set -ev + + # prepare and activate virtualenv + pip install virtualenv + python -m virtualenv venv/ + source ./venv/bin/activate + + # clone azure-cli + git clone --single-branch -b dev https://github.com/Azure/azure-cli.git ../azure-cli + + pip install --upgrade pip + pip install azdev + + azdev --version + + azdev setup -c ../azure-cli -r ./ -e connectedk8s + current_dir=$(pwd) + echo "Current directory: $current_dir" + pip install pytest + cd /home/vsts/work/1/s/src/connectedk8s/azext_connectedk8s/tests/unittests + pytest --junitxml=test-results.xml + + displayName: 'Run UnitTests test' + - task: PublishTestResults@2 + inputs: + testResultsFormat: 'JUnit' + testResultsFiles: '**/test-results.xml' + failTaskOnFailedTests: true + - job: SourceTests + displayName: "Integration Tests, Build Tests" + pool: + vmImage: 'ubuntu-latest' + strategy: + matrix: + Python39: + python.version: '3.9' + Python310: + python.version: '3.10' + Python311: + python.version: '3.11' + Python312: + python.version: '3.12' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python $(python.version)' + inputs: + versionSpec: '$(python.version)' + - bash: pip install wheel==0.30.0 + displayName: 'Install wheel==0.30.0' + - bash: | + set -ev + + # prepare and activate virtualenv + pip install virtualenv + python -m virtualenv venv/ + source ./venv/bin/activate + + # clone azure-cli + git clone --single-branch -b dev https://github.com/Azure/azure-cli.git ../azure-cli + + pip install --upgrade pip + pip install azdev + + azdev --version + + azdev setup -c ../azure-cli -r ./ -e connectedk8s + azdev test connectedk8s + displayName: 'Run integration test and build test' + + - job: AzdevLinterModifiedExtensions + displayName: "azdev linter on Modified Extensions" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.12' + inputs: + versionSpec: 3.12 + - bash: | + set -ev + + # prepare and activate virtualenv + pip install virtualenv + python -m virtualenv venv/ + source ./venv/bin/activate + + # clone azure-cli + git clone --single-branch -b dev https://github.com/Azure/azure-cli.git ../azure-cli + + pip install --upgrade pip + pip install azdev + + azdev --version + + azdev setup -c ../azure-cli -r ./ -e connectedk8s + # Installing setuptools with a version higher than 70.0.0 will not generate metadata.json + pip install setuptools==70.0.0 + pip list -v + + # overwrite the default AZURE_EXTENSION_DIR set by ADO + AZURE_EXTENSION_DIR=~/.azure/cliextensions az --version + + AZURE_EXTENSION_DIR=~/.azure/cliextensions azdev linter --include-whl-extensions connectedk8s + displayName: "CLI Linter on Modified Extension" + env: + ADO_PULL_REQUEST_LATEST_COMMIT: $(System.PullRequest.SourceCommitId) + ADO_PULL_REQUEST_TARGET_BRANCH: $(System.PullRequest.TargetBranch) + + - job: AzdevStyleModifiedExtensions + displayName: "azdev style on Modified Extensions" + continueOnError: true + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.12' + inputs: + versionSpec: 3.12 + - bash: | + set -ev + + # prepare and activate virtualenv + python -m venv env + chmod +x env/bin/activate + source ./env/bin/activate + + # clone azure-cli + git clone -q --single-branch -b dev https://github.com/Azure/azure-cli.git ../azure-cli + + pip install --upgrade pip + pip install azdev + + azdev --version + + azdev setup -c ../azure-cli -r ./ -e connectedk8s + # Installing setuptools with a version higher than 70.0.0 will not generate metadata.json + pip install setuptools==70.0.0 + pip list -v + az --version + + # overwrite the default AZURE_EXTENSION_DIR set by ADO + AZURE_EXTENSION_DIR=~/.azure/cliextensions az --version + + AZURE_EXTENSION_DIR=~/.azure/cliextensions azdev style connectedk8s + displayName: "azdev style on Modified Extensions" + env: + ADO_PULL_REQUEST_LATEST_COMMIT: $(System.PullRequest.SourceCommitId) + ADO_PULL_REQUEST_TARGET_BRANCH: $(System.PullRequest.TargetBranch) + + - job: RuffCheck + displayName: "Lint connectedk8s with ruff check" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.12' + inputs: + versionSpec: 3.12 + - bash: | + set -ev + + # prepare and activate virtualenv + cd src/connectedk8s + python -m venv env + source ./env/bin/activate + + pip install --upgrade pip + pip install azure-cli --editable .[linting] + + ruff check + + displayName: "ruff check" + + - job: RuffFormat + displayName: "Check connected8ks formatting with ruff" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.12' + inputs: + versionSpec: 3.12 + - bash: | + set -ev + + # prepare and activate virtualenv + cd src/connectedk8s + python -m venv env + source ./env/bin/activate + + pip install --upgrade pip + pip install azure-cli --editable .[linting] + + ruff format --check + + displayName: "ruff format check" + + - job: TypeChecking + displayName: "Typecheck connected8ks with mypy" + pool: + vmImage: 'ubuntu-latest' + steps: + - task: UsePythonVersion@0 + displayName: 'Use Python 3.12' + inputs: + versionSpec: 3.12 + - bash: | + set -ev + + # prepare and activate virtualenv + cd src/connectedk8s + python -m venv env + source ./env/bin/activate + + pip install --upgrade pip + pip install azure-cli --editable .[linting] + + mypy + + displayName: "mypy" diff --git a/testing/pipeline/templates/run-test.yml b/testing/pipeline/templates/run-test.yml new file mode 100644 index 00000000000..f1d42ae9714 --- /dev/null +++ b/testing/pipeline/templates/run-test.yml @@ -0,0 +1,112 @@ +parameters: + jobName: '' + path: '' + +jobs: +- job: ${{ parameters.jobName}} + pool: + vmImage: 'ubuntu-20.04' + steps: + - bash: | + echo "Installing helm3" + curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 + chmod 700 get_helm.sh + ./get_helm.sh --version v3.6.3 + echo "Installing kubectl" + curl -LO "https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl" + chmod +x ./kubectl + sudo mv ./kubectl /usr/local/bin/kubectl + kubectl version --client + displayName: "Setup the VM with helm3 and kubectl" + + - task: UsePythonVersion@0 + displayName: 'Use Python 3.6' + inputs: + versionSpec: 3.6 + + - bash: | + set -ev + echo "Building extension ${EXTENSION_NAME}..." + # prepare and activate virtualenv + pip install virtualenv + python3 -m venv env/ + source env/bin/activate + # clone azure-cli + git clone -q --single-branch -b dev https://github.com/Azure/azure-cli.git ../azure-cli + pip install --upgrade pip + pip install -q azdev + ls $(CLI_REPO_PATH) + azdev --version + azdev setup -c ../azure-cli -r $(CLI_REPO_PATH) -e $(EXTENSION_NAME) + azdev extension build $(EXTENSION_NAME) + workingDirectory: $(CLI_REPO_PATH) + displayName: "Setup and Build Extension with azdev" + + - bash: | + K8S_CONFIG_VERSION=$(ls ${EXTENSION_FILE_NAME}* | cut -d "-" -f2) + echo "##vso[task.setvariable variable=K8S_CONFIG_VERSION]$K8S_CONFIG_VERSION" + cp * $(TEST_PATH)/bin + workingDirectory: $(CLI_REPO_PATH)/dist + displayName: "Copy the Built .whl to Extension Test Path" + + - bash: | + RAND_STR=$RANDOM + AKS_CLUSTER_NAME="${BASE_CLUSTER_NAME}-${RAND_STR}-aks" + ARC_CLUSTER_NAME="${BASE_CLUSTER_NAME}-${RAND_STR}-arc" + + JSON_STRING=$(jq -n \ + --arg SUB_ID "$SUBSCRIPTION_ID" \ + --arg RG "$RESOURCE_GROUP" \ + --arg AKS_CLUSTER_NAME "$AKS_CLUSTER_NAME" \ + --arg ARC_CLUSTER_NAME "$ARC_CLUSTER_NAME" \ + --arg K8S_CONFIG_VERSION "$K8S_CONFIG_VERSION" \ + '{subscriptionId: $SUB_ID, resourceGroup: $RG, aksClusterName: $AKS_CLUSTER_NAME, arcClusterName: $ARC_CLUSTER_NAME, extensionVersion: {"connectedk8s": $K8S_CONFIG_VERSION}}') + echo $JSON_STRING > settings.json + cat settings.json + workingDirectory: $(TEST_PATH) + displayName: "Generate a settings.json file" + + - bash : | + echo "Downloading the kind script" + curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.24.0/kind-linux-amd64 + chmod +x ./kind + ./kind create cluster + displayName: "Create and Start the Kind cluster" + + - bash: | + curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash + displayName: "Upgrade az to latest version" + + - bash: | + curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 + chmod 700 get_helm.sh + ./get_helm.sh --version v3.6.3 + displayName: "Install Helm" + + - task: AzureCLI@2 + displayName: Bootstrap + inputs: + azureSubscription: AzureResourceConnection + scriptType: pscore + scriptLocation: inlineScript + inlineScript: | + .\Bootstrap.ps1 -CI + workingDirectory: $(TEST_PATH) + + - task: AzureCLI@2 + displayName: Run the Test Suite for ${{ parameters.path }} + inputs: + azureSubscription: AzureResourceConnection + scriptType: pscore + scriptLocation: inlineScript + inlineScript: | + .\Test.ps1 -CI -Path ${{ parameters.path }} -Type connectedk8s + workingDirectory: $(TEST_PATH) + continueOnError: true + + - task: PublishTestResults@2 + inputs: + testResultsFormat: 'JUnit' + testResultsFiles: '**/testing/results/*.xml' + failTaskOnFailedTests: true + condition: succeededOrFailed() diff --git a/testing/settings.template.json b/testing/settings.template.json new file mode 100644 index 00000000000..657126c20aa --- /dev/null +++ b/testing/settings.template.json @@ -0,0 +1,12 @@ +{ + "subscriptionId": "", + "resourceGroup": "", + "aksClusterName": "", + "arcClusterName": "", + + "extensionVersion": { + "k8s-extension": "0.3.0", + "k8s-extension-private": "0.1.0", + "connectedk8s": "1.0.0" + } +} \ No newline at end of file diff --git a/testing/test/configurations/AutoUpdate.Tests.ps1 b/testing/test/configurations/AutoUpdate.Tests.ps1 new file mode 100644 index 00000000000..d55029ceeb8 --- /dev/null +++ b/testing/test/configurations/AutoUpdate.Tests.ps1 @@ -0,0 +1,62 @@ +Describe 'Auto Upgrade Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Check if basic onboarding works with auto-upgrade disabled' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --disable-auto-upgrade --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $autoUpdate = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentAutoUpgrade").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Auto Update: $autoUpdate" + if ($provisioningState -eq $SUCCEEDED -and $autoUpdate -eq "Disabled") { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Enable auto-upgrade using update cmd' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --auto-upgrade true + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $autoUpdate = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentAutoUpgrade").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Auto Update: $autoUpdate" + if ($provisioningState -eq $SUCCEEDED -and $autoUpdate -eq "Enabled") { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/configurations/BasicOnboarding.Tests.ps1 b/testing/test/configurations/BasicOnboarding.Tests.ps1 new file mode 100644 index 00000000000..541327682c0 --- /dev/null +++ b/testing/test/configurations/BasicOnboarding.Tests.ps1 @@ -0,0 +1,62 @@ +Describe 'Basic Onboarding Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Check if basic onboarding works correctly' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $autoUpdate = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentAutoUpgrade").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Auto Update: $autoUpdate" + if ($provisioningState -eq $SUCCEEDED -and $autoUpdate -eq "Enabled") { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Disable auto-upgrade' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --auto-upgrade false + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $autoUpdate = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentAutoUpgrade").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Auto Update: $autoUpdate" + if ($provisioningState -eq $SUCCEEDED -and $autoUpdate -eq "Disabled") { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/configurations/ConnectProxy.Tests.ps1 b/testing/test/configurations/ConnectProxy.Tests.ps1 new file mode 100644 index 00000000000..4de00bbeba0 --- /dev/null +++ b/testing/test/configurations/ConnectProxy.Tests.ps1 @@ -0,0 +1,98 @@ +Describe 'Connectedk8s Proxy Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Check if basic onboarding works correctly' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $provisioningState = ($output | ConvertFrom-Json).provisioningState + Write-Host "Provisioning State: $provisioningState" + if ($provisioningState -eq $SUCCEEDED) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Connectedk8s proxy test with non-empty kubeconfig' { + # Start the proxy command as a background job + $proxyJob = Start-Job -ScriptBlock { + param($ClusterName, $ResourceGroup) + + # Capture output and errors + try { + $output = az connectedk8s proxy -n $ClusterName -g $ResourceGroup 2>&1 + return @{ Success = $LASTEXITCODE -eq 0; Output = $output } + } catch { + return @{ Success = $false; Output = $_.Exception.Message } + } + } -ArgumentList $ENVCONFIG.arcClusterName, $ENVCONFIG.resourceGroup + + # Wait for a certain amount of time (e.g., 30 seconds) + Start-Sleep -Seconds 60 + + # Display the output + Write-Host "Proxy Job State: $($proxyJob.State)" + + # Check if the job ran successfully + $proxyJob.State | Should -Be 'Running' + + # Check if the kubeconfig file has been updated to use the proxy + $kubeconfigPath = "~/.kube/config" + $kubeconfig = Get-Content $kubeconfigPath -Raw | ConvertFrom-Yaml + # Extract the current context + $currentContext = $kubeconfig.'current-context' + + # Validate that the current context is for the arc machine + $currentContext | Should -Be $ENVCONFIG.arcClusterName + + # Find the cluster associated with the current context + $context = $kubeconfig.contexts | Where-Object { $_.name -eq $currentContext } + $clusterName = $context.context.cluster + + # Retrieve the server URL for the cluster + $cluster = $kubeconfig.clusters | Where-Object { $_.name -eq $clusterName } + $server = $cluster.cluster.server + + # Validate the server URL + $server | Should -Match "^https://127.0.0.1:47011/proxies/" + + # Check if the proxy command ran successfully + $kubectlJob = Start-Job -ScriptBlock { + try { + $output = kubectl get pods -n azure-arc 2>&1 + return @{ Success = $LASTEXITCODE -eq 0; Output = $output } + } catch { + return @{ Success = $false; Output = $_.Exception.Message } + } + } + + $kubectlJob | Wait-Job + $kubectlResult = Receive-Job -Job $kubectlJob + + # Assert that the result is 0 + $kubectlResult.Success | Should -BeTrue + + Stop-Job -Job $proxyJob + Remove-Job -Job $proxyJob + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/configurations/Gateway.Tests.ps1 b/testing/test/configurations/Gateway.Tests.ps1 new file mode 100644 index 00000000000..37dab0eccc9 --- /dev/null +++ b/testing/test/configurations/Gateway.Tests.ps1 @@ -0,0 +1,116 @@ +Describe 'Onboarding with Gateway Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + + $gatewayResourceId = "/subscriptions/15c06b1b-01d6-407b-bb21-740b8617dea3/resourceGroups/connectedk8sCLITestResources/providers/Microsoft.HybridCompute/gateways/gateway-test-cli" + } + + It 'Check if onboarding works with gateway enabled' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --gateway-resource-id $gatewayResourceId --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $gatewayStatus = $jsonOutput.RootElement.GetProperty("gateway").GetProperty("enabled").GetBoolean() + $gatewayId = $jsonOutput.RootElement.GetProperty("gateway").GetProperty("resourceId").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Gateway Status: $gatewayStatus" + Write-Host "Gateway Id: $gatewayId" + if ($provisioningState -eq $SUCCEEDED -and $gatewayStatus -eq $true -and $gatewayId -eq $gatewayResourceId) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Disable the gateway' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --disable-gateway + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $gatewayStatus = $jsonOutput.RootElement.GetProperty("gateway").GetProperty("enabled").GetBoolean() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Gateway Status: $gatewayStatus" + if ($provisioningState -eq $SUCCEEDED -and $gatewayStatus -eq $false) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Update the cluster to use gateway again using update cmd' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --gateway-resource-id $gatewayResourceId + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $gatewayStatus = $jsonOutput.RootElement.GetProperty("gateway").GetProperty("enabled").GetBoolean() + $gatewayId = $jsonOutput.RootElement.GetProperty("gateway").GetProperty("resourceId").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Gateway Status: $gatewayStatus" + Write-Host "Gateway Id: $gatewayId" + if ($provisioningState -eq $SUCCEEDED -and $gatewayStatus -eq $true -and $gatewayId -eq $gatewayResourceId) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Disable the gateway' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --disable-gateway + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $gatewayStatus = $jsonOutput.RootElement.GetProperty("gateway").GetProperty("enabled").GetBoolean() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Gateway Status: $gatewayStatus" + if ($provisioningState -eq $SUCCEEDED -and $gatewayStatus -eq $false) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/configurations/Proxy.Tests.ps1 b/testing/test/configurations/Proxy.Tests.ps1 new file mode 100644 index 00000000000..bda7b06e4bc --- /dev/null +++ b/testing/test/configurations/Proxy.Tests.ps1 @@ -0,0 +1,65 @@ +Describe 'Proxy Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Check if basic onboarding works correctly with proxy enabled' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --proxy-skip-range logcollector --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $provisioningState = ($output | ConvertFrom-Json).provisioningState + Write-Host "Provisioning State: $provisioningState" + if ($provisioningState -eq $SUCCEEDED) { + $isProxyEnabled = helm get values -n azure-arc-release azure-arc -o yaml | grep isProxyEnabled + Write-Host "$isProxyEnabled" + if ($isProxyEnabled -match "isProxyEnabled: true") { + break + } + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Disable proxy' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --disable-proxy + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $provisioningState = ($output | ConvertFrom-Json).provisioningState + Write-Host "Provisioning State: $provisioningState" + if ($provisioningState -eq $SUCCEEDED) { + $isProxyEnabled = helm get values -n azure-arc-release azure-arc -o yaml | grep isProxyEnabled + Write-Host "$isProxyEnabled" + if ($isProxyEnabled -match "isProxyEnabled: false") { + break + } + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/configurations/Troubleshoot.Tests.ps1 b/testing/test/configurations/Troubleshoot.Tests.ps1 new file mode 100644 index 00000000000..c9cb4e26010 --- /dev/null +++ b/testing/test/configurations/Troubleshoot.Tests.ps1 @@ -0,0 +1,40 @@ +Describe 'Troubleshoot Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Verify cluster onboarding process' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $provisioningState = ($output | ConvertFrom-Json).provisioningState + Write-Host "Provisioning State: $provisioningState" + if ($provisioningState -eq $SUCCEEDED) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Verify troubleshoot command functionality' { + az connectedk8s troubleshoot -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeTrue + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/configurations/WorkloadIdentity.Tests.ps1 b/testing/test/configurations/WorkloadIdentity.Tests.ps1 new file mode 100644 index 00000000000..c728b6a5236 --- /dev/null +++ b/testing/test/configurations/WorkloadIdentity.Tests.ps1 @@ -0,0 +1,239 @@ +Describe 'Onboarding with Workload Identity Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Check if onboarding works with oidc and workload identity enabled' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --enable-oidc-issuer --enable-workload-identity --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $securityProfile = $jsonOutput.RootElement.GetProperty("securityProfile").GetProperty("workloadIdentity").GetProperty("enabled").GetBoolean() + $oidcIssuerProfile = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("enabled").GetBoolean() + $issuerUrl = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("issuerUrl").GetString() + $selfHostedIssuerUrl = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("selfHostedIssuerUrl").GetString() + $agentState = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentState").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Security Profile Status: $securityProfile" + Write-Host "OIDC Issuer Profile Status: $oidcIssuerProfile" + Write-Host "Issuer Url: $issuerUrl" + Write-Host "Self Hosted Issuer Url: $selfHostedIssuerUrl" + Write-Host "Agent State: $agentState" + if ( + $provisioningState -eq $SUCCEEDED -and + $securityProfile -eq $true -and + $oidcIssuerProfile -eq $true -and + ![string]::IsNullOrEmpty($issuerUrl) -and + $issuerUrl -like "*unitedkingdom*" -and + [string]::IsNullOrEmpty($selfHostedIssuerUrl) -and + $agentState -eq $SUCCEEDED + ) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Disable workload identity' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --disable-workload-identity + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $securityProfile = $jsonOutput.RootElement.GetProperty("securityProfile").GetProperty("workloadIdentity").GetProperty("enabled").GetBoolean() + $agentState = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentState").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Security Profile Status: $securityProfile" + Write-Host "Agent State: $agentState" + if ($provisioningState -eq $SUCCEEDED -and $securityProfile -eq $false -and $agentState -eq $SUCCEEDED) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Update the cluster to use workload identity again using update cmd' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --enable-workload-identity + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $securityProfile = $jsonOutput.RootElement.GetProperty("securityProfile").GetProperty("workloadIdentity").GetProperty("enabled").GetBoolean() + $agentState = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentState").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Security Profile Status: $securityProfile" + Write-Host "Agent State: $agentState" + if ( + $provisioningState -eq $SUCCEEDED -and + $securityProfile -eq $true -and + $agentState -eq $SUCCEEDED + ) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + Start-Sleep -Seconds 10 + } +} + +Describe 'Updating with Workload Identity Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Onboard a cluster to arc' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $provisioningState = ($output | ConvertFrom-Json).provisioningState + Write-Host "Provisioning State: $provisioningState" + if ($provisioningState -eq $SUCCEEDED) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It 'Update the cluster with oidc and workload identity enabled' { + az connectedk8s update -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --enable-oidc-issuer --enable-workload-identity + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $securityProfile = $jsonOutput.RootElement.GetProperty("securityProfile").GetProperty("workloadIdentity").GetProperty("enabled").GetBoolean() + $oidcIssuerProfile = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("enabled").GetBoolean() + $issuerUrl = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("issuerUrl").GetString() + $selfHostedIssuerUrl = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("selfHostedIssuerUrl").GetString() + $agentState = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentState").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Security Profile Status: $securityProfile" + Write-Host "OIDC Issuer Profile Status: $oidcIssuerProfile" + Write-Host "Issuer Url: $issuerUrl" + Write-Host "Self Hosted Issuer Url: $selfHostedIssuerUrl" + Write-Host "Agent State: $agentState" + if ( + $provisioningState -eq $SUCCEEDED -and + $securityProfile -eq $true -and + $oidcIssuerProfile -eq $true -and + ![string]::IsNullOrEmpty($issuerUrl) -and + $issuerUrl -like "*unitedkingdom*" -and + [string]::IsNullOrEmpty($selfHostedIssuerUrl) -and + $agentState -eq $SUCCEEDED + ) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + Start-Sleep -Seconds 10 + } +} + +Describe 'Creating with Workload Identity Scenario and Self Hosted Issuer' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + + $SelfHostedIssuer = "https://eastus.oic.prod-aks.azure.com/fc50e82b-3761-4218-8691-d98bcgb146da/e6c4bf03-84d9-480c-a269-37a41c28c5cb/" + } + + It 'Check if onboarding works with oidc enabled and self-hosted issuer url passed in' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --enable-oidc-issuer --self-hosted-issuer $SelfHostedIssuer --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $oidcIssuerProfile = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("enabled").GetBoolean() + $issuerUrl = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("issuerUrl").GetString() + $selfHostedIssuerUrl = $jsonOutput.RootElement.GetProperty("oidcIssuerProfile").GetProperty("selfHostedIssuerUrl").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "OIDC Issuer Profile Status: $oidcIssuerProfile" + Write-Host "Issuer Url: $issuerUrl" + Write-Host "Self Hosted Issuer Url: $selfHostedIssuerUrl" + if ( + $provisioningState -eq $SUCCEEDED -and + $oidcIssuerProfile -eq $true -and + [string]::IsNullOrEmpty($issuerUrl) -and + ![string]::IsNullOrEmpty($selfHostedIssuerUrl) -and + $selfHostedIssuerUrl -eq $SelfHostedIssuer + ) { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file diff --git a/testing/test/helper/Constants.ps1 b/testing/test/helper/Constants.ps1 new file mode 100644 index 00000000000..43006f78a69 --- /dev/null +++ b/testing/test/helper/Constants.ps1 @@ -0,0 +1,5 @@ +$ENVCONFIG = Get-Content -Path $PSScriptRoot/../../settings.json | ConvertFrom-Json + +$MAX_RETRY_ATTEMPTS = 30 +$ARC_LOCATION = "uksouth" +$SUCCEEDED = "Succeeded" \ No newline at end of file From cbd9a156fa3314e0f6f1df2deec6d031175263ea Mon Sep 17 00:00:00 2001 From: Atchut Kumar Barli Date: Tue, 25 Mar 2025 10:24:35 -0700 Subject: [PATCH 02/12] Pass the force delete param to the API call (#4) * forcedelete * format * add code owner * mypy --- .github/CODEOWNERS | 2 +- src/connectedk8s/azext_connectedk8s/custom.py | 35 ++++++++++++----- testing/pipeline/k8s-custom-pipelines.yml | 4 ++ .../configurations/BasicOnboarding.Tests.ps1 | 2 +- .../configurations/ForcedDelete.Tests.ps1 | 38 +++++++++++++++++++ 5 files changed, 70 insertions(+), 11 deletions(-) create mode 100644 testing/test/configurations/ForcedDelete.Tests.ps1 diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 45030b887fe..203c7dffbed 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -88,7 +88,7 @@ /src/ip-group/ @necusjz @kairu-ms @jsntcy -/src/connectedk8s/ @bavneetsingh16 @deeksha345 @anagg929 +/src/connectedk8s/ @bavneetsingh16 @deeksha345 @anagg929 @atchutbarli /src/storagesync/ @jsntcy diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index 8f481f1111b..a510376251e 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -1802,7 +1802,9 @@ def delete_connectedk8s( print(f"Step: {utils.get_utctimestring()}: Performing Force Delete") kubectl_client_location = install_kubectl_client() - delete_cc_resource(client, resource_group_name, cluster_name, no_wait).result() + delete_cc_resource( + client, resource_group_name, cluster_name, no_wait, force=force_delete + ).result() # Explicit CRD Deletion crd_cleanup_force_delete(kubectl_client_location, kube_config, kube_context) @@ -1820,7 +1822,9 @@ def delete_connectedk8s( return if not release_namespace: - delete_cc_resource(client, resource_group_name, cluster_name, no_wait).result() + delete_cc_resource( + client, resource_group_name, cluster_name, no_wait, force=force_delete + ).result() return # Loading config map @@ -1871,7 +1875,9 @@ def delete_connectedk8s( recommendation=reco_str, ) - delete_cc_resource(client, resource_group_name, cluster_name, no_wait).result() + delete_cc_resource( + client, resource_group_name, cluster_name, no_wait, force=force_delete + ).result() else: telemetry.set_exception( exception="Unable to delete connected cluster", @@ -1952,15 +1958,26 @@ def delete_cc_resource( resource_group_name: str, cluster_name: str, no_wait: bool, + force: bool = False, ) -> LROPoller[None]: print(f"Step: {utils.get_utctimestring()}: Deleting ARM resource") try: - poller: LROPoller[None] = sdk_no_wait( - no_wait, - client.begin_delete, - resource_group_name=resource_group_name, - cluster_name=cluster_name, - ) + poller: LROPoller[None] + if force: + poller = sdk_no_wait( + no_wait, + client.begin_delete, + resource_group_name=resource_group_name, + cluster_name=cluster_name, + params={"force": True}, + ) + else: + poller = sdk_no_wait( + no_wait, + client.begin_delete, + resource_group_name=resource_group_name, + cluster_name=cluster_name, + ) return poller except Exception as e: utils.arm_exception_handler( diff --git a/testing/pipeline/k8s-custom-pipelines.yml b/testing/pipeline/k8s-custom-pipelines.yml index 712d6f67762..a93ebb4826a 100644 --- a/testing/pipeline/k8s-custom-pipelines.yml +++ b/testing/pipeline/k8s-custom-pipelines.yml @@ -52,6 +52,10 @@ stages: parameters: jobName: Connectedk8sProxyTest path: ./test/configurations/ConnectProxy.Tests.ps1 + - template: ./templates/run-test.yml + parameters: + jobName: ForcedDeleteTest + path: ./test/configurations/ForcedDelete.Tests.ps1 - job: BuildPublishExtension pool: vmImage: 'ubuntu-20.04' diff --git a/testing/test/configurations/BasicOnboarding.Tests.ps1 b/testing/test/configurations/BasicOnboarding.Tests.ps1 index 541327682c0..6605d54c383 100644 --- a/testing/test/configurations/BasicOnboarding.Tests.ps1 +++ b/testing/test/configurations/BasicOnboarding.Tests.ps1 @@ -52,7 +52,7 @@ Describe 'Basic Onboarding Scenario' { } It "Delete the connected instance" { - az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -y $? | Should -BeTrue # Configuration should be removed from the resource model diff --git a/testing/test/configurations/ForcedDelete.Tests.ps1 b/testing/test/configurations/ForcedDelete.Tests.ps1 new file mode 100644 index 00000000000..ca38873dd54 --- /dev/null +++ b/testing/test/configurations/ForcedDelete.Tests.ps1 @@ -0,0 +1,38 @@ +Describe 'Basic Onboarding with Force delete Scenario' { + BeforeAll { + . $PSScriptRoot/../helper/Constants.ps1 + } + + It 'Check if onboarding works correctly' { + az connectedk8s connect -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup -l $ARC_LOCATION --no-wait + $? | Should -BeTrue + Start-Sleep -Seconds 10 + + # Loop and retry until the configuration installs + $n = 0 + do + { + $output = az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $jsonOutput = [System.Text.Json.JsonDocument]::Parse($output) + $provisioningState = ($output | ConvertFrom-Json).provisioningState + $autoUpdate = $jsonOutput.RootElement.GetProperty("arcAgentProfile").GetProperty("agentAutoUpgrade").GetString() + Write-Host "Provisioning State: $provisioningState" + Write-Host "Auto Update: $autoUpdate" + if ($provisioningState -eq $SUCCEEDED -and $autoUpdate -eq "Enabled") { + break + } + Start-Sleep -Seconds 10 + $n += 1 + } while ($n -le $MAX_RETRY_ATTEMPTS) + $n | Should -BeLessOrEqual $MAX_RETRY_ATTEMPTS + } + + It "Force delete the connected instance" { + az connectedk8s delete -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup --force -y + $? | Should -BeTrue + + # Configuration should be removed from the resource model + az connectedk8s show -n $ENVCONFIG.arcClusterName -g $ENVCONFIG.resourceGroup + $? | Should -BeFalse + } +} \ No newline at end of file From a9f5413d5738ab815f6dfe4047e756c78bcadc34 Mon Sep 17 00:00:00 2001 From: mcnealm13 <57726243+mcnealm13@users.noreply.github.com> Date: Thu, 10 Apr 2025 10:16:47 -0700 Subject: [PATCH 03/12] Parameterize for airgapped clouds (#5) * Add parameterization for the airgapped clouds * Fix azdev style * MCR path function * azdev, ruff, and mypy --------- Co-authored-by: Matthew McNeal (from Dev Box) --- .../azext_connectedk8s/_constants.py | 20 +-- .../azext_connectedk8s/_precheckutils.py | 8 +- src/connectedk8s/azext_connectedk8s/_utils.py | 22 ++++ .../clientproxyhelper/_binaryutils.py | 20 ++- .../clientproxyhelper/_proxylogic.py | 4 +- src/connectedk8s/azext_connectedk8s/custom.py | 117 ++++++++++++------ .../latest/test_connectedk8s_scenario.py | 3 +- 7 files changed, 140 insertions(+), 54 deletions(-) diff --git a/src/connectedk8s/azext_connectedk8s/_constants.py b/src/connectedk8s/azext_connectedk8s/_constants.py index 4f173c668a2..1f23246a68a 100644 --- a/src/connectedk8s/azext_connectedk8s/_constants.py +++ b/src/connectedk8s/azext_connectedk8s/_constants.py @@ -63,13 +63,13 @@ AHB_Enum_Values = ["True", "False", "NotApplicable"] Feature_Values = ["cluster-connect", "azure-rbac", "custom-locations"] CRD_FOR_FORCE_DELETE = [ - "arccertificates.clusterconfig.azure.com", - "azureclusteridentityrequests.clusterconfig.azure.com", - "azureextensionidentities.clusterconfig.azure.com", - "connectedclusters.arc.azure.com", - "customlocationsettings.clusterconfig.azure.com", - "extensionconfigs.clusterconfig.azure.com", - "gitconfigs.clusterconfig.azure.com", + "arccertificates.clusterconfig.azure", + "azureclusteridentityrequests.clusterconfig.azure", + "azureextensionidentities.clusterconfig.azure", + "connectedclusters.arc.azure", + "customlocationsettings.clusterconfig.azure", + "extensionconfigs.clusterconfig.azure", + "gitconfigs.clusterconfig.azure", ] Helm_Install_Release_Userfault_Messages = [ "forbidden", @@ -418,7 +418,7 @@ # Connect Precheck Diagnoser constants Cluster_Diagnostic_Checks_Job_Registry_Path = ( - "mcr.microsoft.com/azurearck8s/helmchart/stable/clusterdiagnosticchecks:0.2.2" + "azurearck8s/helmchart/stable/clusterdiagnosticchecks:0.2.2" ) Cluster_Diagnostic_Checks_Helm_Install_Failed_Fault_Type = ( "Error while installing cluster diagnostic checks helm release" @@ -481,8 +481,8 @@ DEFAULT_MAX_ONBOARDING_TIMEOUT_HELMVALUE_SECONDS = "1200" # URL constants -CLIENT_PROXY_MCR_TARGET = "mcr.microsoft.com/azureconnectivity/proxy" -HELM_MCR_URL = "mcr.microsoft.com/azurearck8s/helm" +CLIENT_PROXY_MCR_TARGET = "azureconnectivity/proxy" +HELM_MCR_URL = "azurearck8s/helm" HELM_VERSION = "v3.12.2" Download_And_Install_Kubectl_Fault_Type = "Failed to download and install kubectl" Azure_Access_Token_Variable = "AZURE_ACCESS_TOKEN" diff --git a/src/connectedk8s/azext_connectedk8s/_precheckutils.py b/src/connectedk8s/azext_connectedk8s/_precheckutils.py index 257fde55463..b10c9a22241 100644 --- a/src/connectedk8s/azext_connectedk8s/_precheckutils.py +++ b/src/connectedk8s/azext_connectedk8s/_precheckutils.py @@ -20,6 +20,7 @@ import azext_connectedk8s._utils as azext_utils if TYPE_CHECKING: + from knack.commands import CLICommand from kubernetes.client import BatchV1Api, CoreV1Api logger = get_logger(__name__) @@ -30,6 +31,7 @@ def fetch_diagnostic_checks_results( + cmd: CLICommand, corev1_api_instance: CoreV1Api, batchv1_api_instance: BatchV1Api, helm_client_location: str, @@ -52,6 +54,7 @@ def fetch_diagnostic_checks_results( # Executing the cluster_diagnostic_checks job and fetching the logs obtained cluster_diagnostic_checks_container_log = ( executing_cluster_diagnostic_checks_job( + cmd, corev1_api_instance, batchv1_api_instance, helm_client_location, @@ -135,6 +138,7 @@ def fetch_diagnostic_checks_results( def executing_cluster_diagnostic_checks_job( + cmd: CLICommand, corev1_api_instance: CoreV1Api, batchv1_api_instance: BatchV1Api, helm_client_location: str, @@ -208,8 +212,10 @@ def executing_cluster_diagnostic_checks_job( ) return None + mcr_url = azext_utils.get_mcr_path(cmd) + chart_path = azext_utils.get_chart_path( - consts.Cluster_Diagnostic_Checks_Job_Registry_Path, + f"{mcr_url}/{consts.Cluster_Diagnostic_Checks_Job_Registry_Path}", kube_config, kube_context, helm_client_location, diff --git a/src/connectedk8s/azext_connectedk8s/_utils.py b/src/connectedk8s/azext_connectedk8s/_utils.py index 55396ebcb11..4c6c03cf831 100644 --- a/src/connectedk8s/azext_connectedk8s/_utils.py +++ b/src/connectedk8s/azext_connectedk8s/_utils.py @@ -58,6 +58,28 @@ # pylint: disable=bare-except +def get_mcr_path(cmd: CLICommand) -> str: + active_directory_array = cmd.cli_ctx.cloud.endpoints.active_directory.split(".") + + # default for public, mc, ff clouds + mcr_postfix = active_directory_array[2] + # special cases for USSec, exclude part of suffix + if len(active_directory_array) == 4 and active_directory_array[2] == "microsoft": + mcr_postfix = active_directory_array[3] + # special case for USNat + elif len(active_directory_array) == 5: + mcr_postfix = ( + active_directory_array[2] + + "." + + active_directory_array[3] + + "." + + active_directory_array[4] + ) + + mcr_url = f"mcr.microsoft.{mcr_postfix}" + return mcr_url + + def validate_connect_rp_location(cmd: CLICommand, location: str) -> None: subscription_id = ( os.getenv("AZURE_SUBSCRIPTION_ID") diff --git a/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py b/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py index 56f7b218b7e..2164d9d5cea 100644 --- a/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py +++ b/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py @@ -13,16 +13,18 @@ from azure.cli.core import azclierror, telemetry from azure.cli.core.style import Style, print_styled_text from knack import log +from knack.commands import CLICommand import azext_connectedk8s._constants as consts import azext_connectedk8s._fileutils as file_utils +import azext_connectedk8s._utils as utils logger = log.get_logger(__name__) # Downloads client side proxy to connect to Arc Connectivity Platform def install_client_side_proxy( - arc_proxy_folder: Optional[str], debug: bool = False + cmd: CLICommand, arc_proxy_folder: Optional[str], debug: bool = False ) -> str: client_operating_system = _get_client_operating_system() client_architecture = _get_client_architeture() @@ -48,7 +50,11 @@ def install_client_side_proxy( ) _download_proxy_from_MCR( - install_dir, proxy_name, client_operating_system, client_architecture + cmd, + install_dir, + proxy_name, + client_operating_system, + client_architecture, ) _check_proxy_installation(install_dir, proxy_name, debug) @@ -64,9 +70,15 @@ def install_client_side_proxy( def _download_proxy_from_MCR( - dest_dir: str, proxy_name: str, operating_system: str, architecture: str + cmd: CLICommand, + dest_dir: str, + proxy_name: str, + operating_system: str, + architecture: str, ) -> None: - mar_target = f"{consts.CLIENT_PROXY_MCR_TARGET}/{operating_system.lower()}/{architecture}/arc-proxy" + mcr_url = utils.get_mcr_path(cmd) + + mar_target = f"{mcr_url}/{consts.CLIENT_PROXY_MCR_TARGET}/{operating_system.lower()}/{architecture}/arc-proxy" logger.debug( "Downloading Arc Connectivity Proxy from %s in Microsoft Artifact Regristy.", mar_target, diff --git a/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_proxylogic.py b/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_proxylogic.py index 71345064af6..f72074d1b6e 100644 --- a/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_proxylogic.py +++ b/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_proxylogic.py @@ -18,7 +18,7 @@ if TYPE_CHECKING: from subprocess import Popen - from knack.commands import CLICommmand + from knack.commands import CLICommand from requests.models import Response from azext_connectedk8s.vendored_sdks.preview_2024_07_01.models import ( @@ -30,7 +30,7 @@ def handle_post_at_to_csp( - cmd: CLICommmand, + cmd: CLICommand, api_server_port: int, tenant_id: str, clientproxy_process: Popen[bytes], diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index a510376251e..b807bd4db10 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -81,7 +81,7 @@ from azure.cli.core.commands import AzCliCommand from azure.core.polling import LROPoller from Crypto.PublicKey.RSA import RsaKey - from knack.commands import CLICommmand + from knack.commands import CLICommand from kubernetes.client import V1NodeList from kubernetes.config.kube_config import ConfigNode from requests.models import Response @@ -99,7 +99,7 @@ def create_connectedk8s( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -301,7 +301,7 @@ def create_connectedk8s( # Install kubectl and helm try: kubectl_client_location = install_kubectl_client() - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) except Exception as e: raise CLIInternalError( f"An exception has occured while trying to perform kubectl or helm install: {e}" @@ -344,6 +344,7 @@ def create_connectedk8s( # Performing cluster-diagnostic-checks diagnostic_checks, storage_space_available = ( precheckutils.fetch_diagnostic_checks_results( + cmd, api_instance, batchv1_api_instance, helm_client_location, @@ -742,7 +743,9 @@ def create_connectedk8s( "Cleaning up the stale arc agents present on the cluster before starting new onboarding." ) # Explicit CRD Deletion - crd_cleanup_force_delete(kubectl_client_location, kube_config, kube_context) + crd_cleanup_force_delete( + cmd, kubectl_client_location, kube_config, kube_context + ) # Cleaning up the cluster utils.delete_arc_agents( release_namespace, @@ -773,7 +776,9 @@ def create_connectedk8s( raise ArgumentUsageError(err_msg, recommendation=reco_msg) # cleanup of stuck CRD if release namespace is not present/deleted - crd_cleanup_force_delete(kubectl_client_location, kube_config, kube_context) + crd_cleanup_force_delete( + cmd, kubectl_client_location, kube_config, kube_context + ) print( f"Step: {utils.get_utctimestring()}: Check if ResourceGroup exists. Try to create if it doesn't" @@ -1043,7 +1048,7 @@ def validate_existing_provisioned_cluster_for_reput( raise InvalidArgumentValueError(err_msg) -def send_cloud_telemetry(cmd: CLICommmand) -> str: +def send_cloud_telemetry(cmd: CLICommand) -> str: telemetry.add_extension_event( "connectedk8s", {"Context.Default.AzureCLI.AzureCloud": cmd.cli_ctx.cloud.name} ) @@ -1153,7 +1158,7 @@ def check_kube_connection() -> str: assert False -def install_helm_client() -> str: +def install_helm_client(cmd: CLICommand) -> str: print( f"Step: {utils.get_utctimestring()}: Install Helm client if it does not exist" ) @@ -1219,13 +1224,16 @@ def install_helm_client() -> str: logger.warning( "Downloading helm client for first time. This can take few minutes..." ) + + mcr_url = utils.get_mcr_path(cmd) + client = oras.client.OrasClient() retry_count = 3 retry_delay = 5 for i in range(retry_count): try: client.pull( - target=f"{consts.HELM_MCR_URL}:{artifactTag}", + target=f"{mcr_url}/{consts.HELM_MCR_URL}:{artifactTag}", outdir=download_location, ) break @@ -1289,8 +1297,22 @@ def connected_cluster_exists( return True -def get_default_config_dp_endpoint(cmd: CLICommmand, location: str) -> str: - cloud_based_domain = cmd.cli_ctx.cloud.endpoints.active_directory.split(".")[2] +def get_default_config_dp_endpoint(cmd: CLICommand, location: str) -> str: + active_directory_array = cmd.cli_ctx.cloud.endpoints.active_directory.split(".") + # default for public, mc, ff clouds + cloud_based_domain = active_directory_array[2] + # special cases for USSec/USNat clouds + if len(active_directory_array) == 4: + cloud_based_domain = active_directory_array[2] + "." + active_directory_array[3] + elif len(active_directory_array) == 5: + cloud_based_domain = ( + active_directory_array[2] + + "." + + active_directory_array[3] + + "." + + active_directory_array[4] + ) + config_dp_endpoint = ( f"https://{location}.dp.kubernetesconfiguration.azure.{cloud_based_domain}" ) @@ -1298,7 +1320,7 @@ def get_default_config_dp_endpoint(cmd: CLICommmand, location: str) -> str: def get_config_dp_endpoint( - cmd: CLICommmand, + cmd: CLICommand, location: str, values_file: str | None, arm_metadata: dict[str, Any] | None = None, @@ -1733,7 +1755,7 @@ def list_connectedk8s( def delete_connectedk8s( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -1785,7 +1807,7 @@ def delete_connectedk8s( check_kube_connection() # Install helm client - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) # Check Release Existance release_namespace = utils.get_release_namespace( @@ -1807,7 +1829,9 @@ def delete_connectedk8s( ).result() # Explicit CRD Deletion - crd_cleanup_force_delete(kubectl_client_location, kube_config, kube_context) + crd_cleanup_force_delete( + cmd, kubectl_client_location, kube_config, kube_context + ) if release_namespace: utils.delete_arc_agents( @@ -2012,7 +2036,7 @@ def update_connected_cluster_internal( def update_connected_cluster( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -2175,7 +2199,7 @@ def update_connected_cluster( kubernetes_version = check_kube_connection() # Install helm client - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) release_namespace = validate_release_namespace( client, @@ -2368,7 +2392,7 @@ def update_connected_cluster( def upgrade_agents( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -2413,7 +2437,7 @@ def upgrade_agents( api_instance = kube_client.CoreV1Api() # Install helm client - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) # Check Release Existence release_namespace = utils.get_release_namespace( @@ -2814,7 +2838,7 @@ def get_all_helm_values( def enable_features( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -2909,7 +2933,7 @@ def enable_features( kubernetes_version = check_kube_connection() # Install helm client - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) release_namespace = validate_release_namespace( client, @@ -3047,7 +3071,7 @@ def enable_features( def disable_features( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -3102,7 +3126,7 @@ def disable_features( kubernetes_version = check_kube_connection() # Install helm client - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) release_namespace = validate_release_namespace( client, @@ -3186,7 +3210,7 @@ def disable_features( def get_chart_and_disable_features( - cmd: CLICommmand, + cmd: CLICommand, connected_cluster: ConnectedCluster, kube_config: str | None, kube_context: str | None, @@ -3277,7 +3301,7 @@ def get_chart_and_disable_features( def disable_cluster_connect( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -3484,7 +3508,7 @@ def handle_merge( def client_side_proxy_wrapper( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -3552,7 +3576,7 @@ def client_side_proxy_wrapper( if "--debug" in cmd.cli_ctx.data["safe_params"]: debug_mode = True - install_location = proxybinaryutils.install_client_side_proxy(None, debug_mode) + install_location = proxybinaryutils.install_client_side_proxy(cmd, None, debug_mode) args.append(install_location) install_dir = os.path.dirname(install_location) @@ -3655,7 +3679,7 @@ def client_side_proxy_wrapper( def client_side_proxy_main( - cmd: CLICommmand, + cmd: CLICommand, tenant_id: str, client: ConnectedClusterOperations, resource_group_name: str, @@ -3726,7 +3750,7 @@ def client_side_proxy_main( def client_side_proxy( - cmd: CLICommmand, + cmd: CLICommand, tenant_id: str, client: ConnectedClusterOperations, resource_group_name: str, @@ -3859,7 +3883,7 @@ def client_side_proxy( def check_cl_registration_and_get_oid( - cmd: CLICommmand, cl_oid: str | None, subscription_id: str | None + cmd: CLICommand, cl_oid: str | None, subscription_id: str | None ) -> tuple[bool, str]: print( f"Step: {utils.get_utctimestring()}: Checking Custom Location(Microsoft.ExtendedLocation) RP Registration state for this Subscription, and attempt to get the Custom Location Object ID (OID),if registered" @@ -3898,7 +3922,7 @@ def check_cl_registration_and_get_oid( return enable_custom_locations, custom_locations_oid -def get_custom_locations_oid(cmd: CLICommmand, cl_oid: str | None) -> str: +def get_custom_locations_oid(cmd: CLICommand, cl_oid: str | None) -> str: try: graph_client = graph_client_factory(cmd.cli_ctx) app_id = "bc313c14-388c-4e7d-a58e-70017303ee3b" @@ -3959,7 +3983,7 @@ def get_custom_locations_oid(cmd: CLICommmand, cl_oid: str | None) -> str: def troubleshoot( - cmd: CLICommmand, + cmd: CLICommand, client: ConnectedClusterOperations, resource_group_name: str, cluster_name: str, @@ -4002,7 +4026,7 @@ def troubleshoot( load_kube_config(kube_config, kube_context, skip_ssl_verification) # Install helm client - helm_client_location = install_helm_client() + helm_client_location = install_helm_client(cmd) # Install kubectl client kubectl_client_location = install_kubectl_client() @@ -4409,16 +4433,36 @@ def install_kubectl_client() -> str: def crd_cleanup_force_delete( - kubectl_client_location: str, kube_config: str | None, kube_context: str | None + cmd: CLICommand, + kubectl_client_location: str, + kube_config: str | None, + kube_context: str | None, ) -> None: print(f"Step: {utils.get_utctimestring()}: Deleting Arc CRDs") + + active_directory_array = cmd.cli_ctx.cloud.endpoints.active_directory.split(".") + # default for public, mc, ff clouds + cloud_based_domain = active_directory_array[2] + # special cases for USSec/USNat clouds + if len(active_directory_array) == 4: + cloud_based_domain = active_directory_array[2] + "." + active_directory_array[3] + elif len(active_directory_array) == 5: + cloud_based_domain = ( + active_directory_array[2] + + "." + + active_directory_array[3] + + "." + + active_directory_array[4] + ) + timeout_for_crd_deletion = "20s" for crds in consts.CRD_FOR_FORCE_DELETE: + full_crds = f"{crds}.{cloud_based_domain}" cmd_helm_delete = [ kubectl_client_location, "delete", "crds", - crds, + full_crds, "--ignore-not-found", "--wait", "--timeout", @@ -4441,7 +4485,8 @@ def crd_cleanup_force_delete( # Patch if CRD is in Terminating state for crds in consts.CRD_FOR_FORCE_DELETE: - cmd = [kubectl_client_location, "get", "crd", crds, "-ojson"] + full_crds = f"{crds}.{cloud_based_domain}" + cmd = [kubectl_client_location, "get", "crd", full_crds, "-ojson"] if kube_config: cmd.extend(["--kubeconfig", kube_config]) if kube_context: @@ -4458,7 +4503,7 @@ def crd_cleanup_force_delete( kubectl_client_location, "patch", "crd", - crds, + full_crds, "--type=merge", "--patch-file", yaml_file_path, diff --git a/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py b/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py index 9d899e786da..0ebb4526ab7 100644 --- a/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py +++ b/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py @@ -113,7 +113,8 @@ def install_helm_client(): client = oras.client.OrasClient() try: client.pull( - target=f"{consts.HELM_MCR_URL}:{artifactTag}", outdir=download_location + target=f"mcr.microsoft.com/{consts.HELM_MCR_URL}:{artifactTag}", + outdir=download_location, ) except Exception as e: logger.warning("Failed to download helm client." + str(e)) From 5d5d0532c04c0500e7700fa76bcb008a7eb25597 Mon Sep 17 00:00:00 2001 From: mcnealm13 <57726243+mcnealm13@users.noreply.github.com> Date: Thu, 24 Apr 2025 17:16:32 -0400 Subject: [PATCH 04/12] Oras client fix to work with different MCRs (#6) Co-authored-by: mmcneal --- .../azext_connectedk8s/clientproxyhelper/_binaryutils.py | 2 +- src/connectedk8s/azext_connectedk8s/custom.py | 2 +- .../tests/latest/test_connectedk8s_scenario.py | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py b/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py index 2164d9d5cea..c655b4269de 100644 --- a/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py +++ b/src/connectedk8s/azext_connectedk8s/clientproxyhelper/_binaryutils.py @@ -84,7 +84,7 @@ def _download_proxy_from_MCR( mar_target, ) - client = oras.client.OrasClient() + client = oras.client.OrasClient(hostname=mcr_url) t0 = time.time() try: diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index b807bd4db10..0f300aad993 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -1227,7 +1227,7 @@ def install_helm_client(cmd: CLICommand) -> str: mcr_url = utils.get_mcr_path(cmd) - client = oras.client.OrasClient() + client = oras.client.OrasClient(hostname=mcr_url) retry_count = 3 retry_delay = 5 for i in range(retry_count): diff --git a/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py b/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py index 0ebb4526ab7..32b95b2f06c 100644 --- a/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py +++ b/src/connectedk8s/azext_connectedk8s/tests/latest/test_connectedk8s_scenario.py @@ -110,7 +110,7 @@ def install_helm_client(): logger.warning( "Downloading helm client for first time. This can take few minutes..." ) - client = oras.client.OrasClient() + client = oras.client.OrasClient(hostname="mcr.microsoft.com") try: client.pull( target=f"mcr.microsoft.com/{consts.HELM_MCR_URL}:{artifactTag}", From 109b85f2d7e0c57db077eaf5482a70ea4a721cdf Mon Sep 17 00:00:00 2001 From: Bavneet Singh <33008256+bavneetsingh16@users.noreply.github.com> Date: Fri, 23 May 2025 13:10:52 -0700 Subject: [PATCH 05/12] fix CI testcases for nodepool image issues (#8) --- testing/pipeline/k8s-custom-pipelines.yml | 6 +++--- testing/pipeline/templates/run-test.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/testing/pipeline/k8s-custom-pipelines.yml b/testing/pipeline/k8s-custom-pipelines.yml index a93ebb4826a..90dec9b01fa 100644 --- a/testing/pipeline/k8s-custom-pipelines.yml +++ b/testing/pipeline/k8s-custom-pipelines.yml @@ -58,16 +58,16 @@ stages: path: ./test/configurations/ForcedDelete.Tests.ps1 - job: BuildPublishExtension pool: - vmImage: 'ubuntu-20.04' + vmImage: 'ubuntu-latest' displayName: "Build and Publish the Extension Artifact" variables: CLI_REPO_PATH: $(Agent.BuildDirectory)/s EXTENSION_NAME: "connectedk8s" steps: - task: UsePythonVersion@0 - displayName: 'Use Python 3.6' + displayName: 'Use Python 3.10' inputs: - versionSpec: 3.6 + versionSpec: 3.10 - bash: | set -ev echo "Building extension ${EXTENSION_NAME}..." diff --git a/testing/pipeline/templates/run-test.yml b/testing/pipeline/templates/run-test.yml index f1d42ae9714..a15d47f4384 100644 --- a/testing/pipeline/templates/run-test.yml +++ b/testing/pipeline/templates/run-test.yml @@ -5,7 +5,7 @@ parameters: jobs: - job: ${{ parameters.jobName}} pool: - vmImage: 'ubuntu-20.04' + vmImage: 'ubuntu-latest' steps: - bash: | echo "Installing helm3" @@ -20,9 +20,9 @@ jobs: displayName: "Setup the VM with helm3 and kubectl" - task: UsePythonVersion@0 - displayName: 'Use Python 3.6' + displayName: 'Use Python 3.10' inputs: - versionSpec: 3.6 + versionSpec: 3.10 - bash: | set -ev From f357607a78a0a76cf3e7956fc97938041f3f24af Mon Sep 17 00:00:00 2001 From: Atchut Kumar Barli Date: Thu, 17 Jul 2025 12:43:30 -0700 Subject: [PATCH 06/12] update errors for the config and connectivity issues (#11) * update errors * format * style --- src/connectedk8s/azext_connectedk8s/_constants.py | 8 ++++++++ src/connectedk8s/azext_connectedk8s/_utils.py | 1 + src/connectedk8s/azext_connectedk8s/custom.py | 4 +++- 3 files changed, 12 insertions(+), 1 deletion(-) diff --git a/src/connectedk8s/azext_connectedk8s/_constants.py b/src/connectedk8s/azext_connectedk8s/_constants.py index 1f23246a68a..61442db76b8 100644 --- a/src/connectedk8s/azext_connectedk8s/_constants.py +++ b/src/connectedk8s/azext_connectedk8s/_constants.py @@ -460,6 +460,14 @@ Custom_Location_Enable_Failed_warning = """Important! Custom Location feature wasn't enabled due to insufficient privileges on the Service Principal Name. If the custom location feature is not enabled, you will encounter an error when creating the custom location. Refer to: https://aka.ms/enable-cl-spn""" +KubeApi_Connectivity_Failed_Warning = """Unable to verify connectivity to the Kubernetes cluster. +Please check https://learn.microsoft.com/en-us/azure/azure-arc/kubernetes/diagnose-connection-issues""" + +Kubeconfig_Load_Failed_Warning = """Unable to load the kubeconfig file. +Please check https://learn.microsoft.com/en-us/azure/azure-arc/kubernetes/diagnose-connection-issues#is-kubeconfig-pointing-to-the-right-cluster""" + +Cluster_Already_Onboarded_Error = """The kubernetes cluster is already onboarded. +Please check if the Kubeconfig is pointing to the correct cluster using command: kubectl config current-context.""" # Diagnostic Results Name Outbound_Connectivity_Check_Result_String = "Outbound Network Connectivity" diff --git a/src/connectedk8s/azext_connectedk8s/_utils.py b/src/connectedk8s/azext_connectedk8s/_utils.py index 4c6c03cf831..3b495ca9392 100644 --- a/src/connectedk8s/azext_connectedk8s/_utils.py +++ b/src/connectedk8s/azext_connectedk8s/_utils.py @@ -1354,6 +1354,7 @@ def helm_install_release( "Please check if the azure-arc namespace was deployed and run 'kubectl get pods -n azure-arc' " "to check if all the pods are in running state. A possible cause for pods stuck in pending " "state could be insufficient resources on the kubernetes cluster to onboard to arc." + "Also pod logs can be checked using kubectl logs -n azure-arc.\n" ) logger.warning(warn_msg) raise CLIInternalError( diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index 0f300aad993..cf6a843cffb 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -621,6 +621,7 @@ def create_connectedk8s( "The kubernetes cluster you are trying to onboard is already onboarded to " f"the resource group '{configmap_rg_name}' with resource name '{configmap_cluster_name}'." ) + logger.warning(consts.Cluster_Already_Onboarded_Error) raise ArgumentUsageError(err_msg) # Re-put connected cluster @@ -1148,7 +1149,7 @@ def check_kube_connection() -> str: git_version: str = api_response.git_version return git_version except Exception as e: # pylint: disable=broad-except - logger.warning("Unable to verify connectivity to the Kubernetes cluster.") + logger.warning(consts.KubeApi_Connectivity_Failed_Warning) utils.kubernetes_exception_handler( e, consts.Kubernetes_Connectivity_FaultType, @@ -1370,6 +1371,7 @@ def load_kube_config( fault_type=consts.Load_Kubeconfig_Fault_Type, summary="Problem loading the kubeconfig file", ) + logger.warning(consts.Kubeconfig_Load_Failed_Warning) raise FileOperationError("Problem loading the kubeconfig file. " + str(e)) From 1133dad5d6550fb77312bc627d464e7a94252d26 Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Tue, 29 Jul 2025 17:17:59 -0700 Subject: [PATCH 07/12] update sdk package - 2025-08-01-preview --- .../azext_connectedk8s/_client_factory.py | 20 +- src/connectedk8s/azext_connectedk8s/custom.py | 4 +- .../preview_2024_07_01/_vendor.py | 16 - .../aio/operations/_operations.py | 134 - .../preview_2024_07_01/models/__init__.py | 89 - .../preview_2024_07_01/models/_models_py3.py | 1213 ----- .../operations/_operations.py | 156 - .../preview_2024_07_01/operations/_patch.py | 20 - .../__init__.py | 58 +- .../_client.py} | 244 +- .../_configuration.py | 139 +- .../aio => preview_2025_08_01}/_patch.py | 41 +- .../preview_2025_08_01/_utils/__init__.py | 6 + .../preview_2025_08_01/_utils/model_base.py | 1232 +++++ .../_utils/serialization.py} | 4030 +++++++++-------- .../_version.py | 18 +- .../aio/__init__.py | 52 +- .../aio/_client.py} | 252 +- .../aio/_configuration.py | 139 +- .../aio}/_patch.py | 41 +- .../aio}/operations/__init__.py | 48 +- .../aio/operations/_operations.py} | 2021 +++++---- .../aio/operations}/_patch.py | 41 +- .../preview_2025_08_01/models/__init__.py | 102 + .../models/_enums.py} | 211 +- .../preview_2025_08_01/models/_models.py | 1190 +++++ .../models}/_patch.py | 41 +- .../operations/__init__.py | 48 +- .../operations/_operations.py} | 2440 +++++----- .../preview_2025_08_01/operations/_patch.py | 21 + .../py.typed | 0 31 files changed, 7808 insertions(+), 6259 deletions(-) delete mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_vendor.py delete mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_operations.py delete mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/__init__.py delete mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_models_py3.py delete mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_operations.py delete mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_patch.py rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01}/__init__.py (67%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/_connected_kubernetes_client.py => preview_2025_08_01/_client.py} (65%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01}/_configuration.py (73%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/aio => preview_2025_08_01}/_patch.py (61%) create mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/__init__.py create mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/model_base.py rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/_serialization.py => preview_2025_08_01/_utils/serialization.py} (83%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01}/_version.py (82%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01}/aio/__init__.py (65%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/aio/_connected_kubernetes_client.py => preview_2025_08_01/aio/_client.py} (67%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01}/aio/_configuration.py (73%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/aio/operations => preview_2025_08_01/aio}/_patch.py (61%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01/aio}/operations/__init__.py (56%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/aio/operations/_connected_cluster_operations.py => preview_2025_08_01/aio/operations/_operations.py} (56%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/models => preview_2025_08_01/aio/operations}/_patch.py (61%) create mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/__init__.py rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/models/_connected_kubernetes_client_enums.py => preview_2025_08_01/models/_enums.py} (70%) create mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_models.py rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01/models}/_patch.py (61%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/aio => preview_2025_08_01}/operations/__init__.py (56%) rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01/operations/_connected_cluster_operations.py => preview_2025_08_01/operations/_operations.py} (58%) create mode 100644 src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_patch.py rename src/connectedk8s/azext_connectedk8s/vendored_sdks/{preview_2024_07_01 => preview_2025_08_01}/py.typed (100%) diff --git a/src/connectedk8s/azext_connectedk8s/_client_factory.py b/src/connectedk8s/azext_connectedk8s/_client_factory.py index 600bcf3c1f8..8869878f91e 100644 --- a/src/connectedk8s/azext_connectedk8s/_client_factory.py +++ b/src/connectedk8s/azext_connectedk8s/_client_factory.py @@ -27,11 +27,11 @@ from azext_connectedk8s.vendored_sdks import ConnectedKubernetesClient from azext_connectedk8s.vendored_sdks.operations import ConnectedClusterOperations - from azext_connectedk8s.vendored_sdks.preview_2024_07_01 import ( - ConnectedKubernetesClient as ConnectedKubernetesClient20240701, + from azext_connectedk8s.vendored_sdks.preview_2025_08_01 import ( + ConnectedKubernetesClient as ConnectedKubernetesClient20250801, ) - from azext_connectedk8s.vendored_sdks.preview_2024_07_01.operations import ( - ConnectedClusterOperations as ConnectedClusterOperations20240701, + from azext_connectedk8s.vendored_sdks.preview_2025_08_01.operations import ( + ConnectedClusterOperations as ConnectedClusterOperations20250801, ) AccessToken = namedtuple("AccessToken", ["token", "expires_on"]) @@ -61,10 +61,10 @@ def cf_connected_cluster(cli_ctx: AzCli, _: Any) -> ConnectedClusterOperations: return cf_connectedk8s(cli_ctx).connected_cluster -def cf_connectedk8s_prev_2024_07_01( +def cf_connectedk8s_prev_2025_08_01( cli_ctx: AzCli, *_: Any -) -> ConnectedKubernetesClient20240701: - from azext_connectedk8s.vendored_sdks.preview_2024_07_01 import ( +) -> ConnectedKubernetesClient20250801: + from azext_connectedk8s.vendored_sdks.preview_2025_08_01 import ( ConnectedKubernetesClient, ) @@ -85,10 +85,10 @@ def cf_connectedk8s_prev_2024_07_01( return client -def cf_connected_cluster_prev_2024_07_01( +def cf_connected_cluster_prev_2025_08_01( cli_ctx: AzCli, _: Any -) -> ConnectedClusterOperations20240701: - return cf_connectedk8s_prev_2024_07_01(cli_ctx).connected_cluster +) -> ConnectedClusterOperations20250801: + return cf_connectedk8s_prev_2025_08_01(cli_ctx).connected_cluster def cf_connectedmachine( diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index cf6a843cffb..8fd8410f416 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -65,7 +65,7 @@ ) from azext_connectedk8s.clientproxyhelper._enums import ProxyStatus -from .vendored_sdks.preview_2024_07_01.models import ( +from .vendored_sdks.preview_2025_08_01.models import ( ArcAgentProfile, ArcAgentryConfigurations, ConnectedCluster, @@ -86,7 +86,7 @@ from kubernetes.config.kube_config import ConfigNode from requests.models import Response - from azext_connectedk8s.vendored_sdks.preview_2024_07_01.operations import ( + from azext_connectedk8s.vendored_sdks.preview_2025_08_01.operations import ( ConnectedClusterOperations, ) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_vendor.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_vendor.py deleted file mode 100644 index 4a1ce423c01..00000000000 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_vendor.py +++ /dev/null @@ -1,16 +0,0 @@ -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from azure.core.pipeline.transport import HttpRequest - - -def _convert_request(request, files=None): - data = request.content if not files else None - request = HttpRequest(method=request.method, url=request.url, headers=request.headers, data=data) - if files: - request.set_formdata_body(files) - return request diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_operations.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_operations.py deleted file mode 100644 index 084a440132b..00000000000 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_operations.py +++ /dev/null @@ -1,134 +0,0 @@ -# pylint: disable=too-many-lines,too-many-statements -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- -import sys -from typing import Any, AsyncIterable, Callable, Dict, Optional, Type, TypeVar -import urllib.parse - -from azure.core.async_paging import AsyncItemPaged, AsyncList -from azure.core.exceptions import ( - ClientAuthenticationError, - HttpResponseError, - ResourceExistsError, - ResourceNotFoundError, - ResourceNotModifiedError, - map_error, -) -from azure.core.pipeline import PipelineResponse -from azure.core.pipeline.transport import AsyncHttpResponse -from azure.core.rest import HttpRequest -from azure.core.tracing.decorator import distributed_trace -from azure.core.utils import case_insensitive_dict -from azure.mgmt.core.exceptions import ARMErrorFormat - -from ... import models as _models -from ..._vendor import _convert_request -from ...operations._operations import build_get_request - -if sys.version_info >= (3, 9): - from collections.abc import MutableMapping -else: - from typing import MutableMapping # type: ignore # pylint: disable=ungrouped-imports -T = TypeVar("T") -ClsType = Optional[Callable[[PipelineResponse[HttpRequest, AsyncHttpResponse], T, Dict[str, Any]], Any]] - - -class Operations: - """ - .. warning:: - **DO NOT** instantiate this class directly. - - Instead, you should access the following operations through - :class:`~azure.mgmt.hybridkubernetes.aio.ConnectedKubernetesClient`'s - :attr:`operations` attribute. - """ - - models = _models - - def __init__(self, *args, **kwargs) -> None: - input_args = list(args) - self._client = input_args.pop(0) if input_args else kwargs.pop("client") - self._config = input_args.pop(0) if input_args else kwargs.pop("config") - self._serialize = input_args.pop(0) if input_args else kwargs.pop("serializer") - self._deserialize = input_args.pop(0) if input_args else kwargs.pop("deserializer") - - @distributed_trace - def get(self, **kwargs: Any) -> AsyncIterable["_models.Operation"]: - """Lists all of the available API operations for Connected Cluster resource. - - :return: An iterator like instance of either Operation or the result of cls(response) - :rtype: ~azure.core.async_paging.AsyncItemPaged[~azure.mgmt.hybridkubernetes.models.Operation] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.OperationList] = kwargs.pop("cls", None) - - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - def prepare_request(next_link=None): - if not next_link: - - _request = build_get_request( - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - else: - # make call to next link with the client's api-version - _parsed_next_link = urllib.parse.urlparse(next_link) - _next_request_params = case_insensitive_dict( - { - key: [urllib.parse.quote(v) for v in value] - for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() - } - ) - _next_request_params["api-version"] = self._config.api_version - _request = HttpRequest( - "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - _request.method = "GET" - return _request - - async def extract_data(pipeline_response): - deserialized = self._deserialize("OperationList", pipeline_response) - list_of_elem = deserialized.value - if cls: - list_of_elem = cls(list_of_elem) # type: ignore - return deserialized.next_link or None, AsyncList(list_of_elem) - - async def get_next(next_link=None): - _request = prepare_request(next_link) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - return pipeline_response - - return AsyncItemPaged(get_next, extract_data) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/__init__.py deleted file mode 100644 index 46d6cd51fe9..00000000000 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/__init__.py +++ /dev/null @@ -1,89 +0,0 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from ._models_py3 import AadProfile -from ._models_py3 import AgentError -from ._models_py3 import ArcAgentProfile -from ._models_py3 import ArcAgentryConfigurations -from ._models_py3 import ConnectedCluster -from ._models_py3 import ConnectedClusterIdentity -from ._models_py3 import ConnectedClusterList -from ._models_py3 import ConnectedClusterPatch -from ._models_py3 import CredentialResult -from ._models_py3 import CredentialResults -from ._models_py3 import ErrorAdditionalInfo -from ._models_py3 import ErrorDetail -from ._models_py3 import ErrorResponse -from ._models_py3 import Gateway -from ._models_py3 import HybridConnectionConfig -from ._models_py3 import ListClusterUserCredentialProperties -from ._models_py3 import OidcIssuerProfile -from ._models_py3 import Operation -from ._models_py3 import OperationDisplay -from ._models_py3 import OperationList -from ._models_py3 import Resource -from ._models_py3 import SecurityProfile -from ._models_py3 import SecurityProfileWorkloadIdentity -from ._models_py3 import SystemComponent -from ._models_py3 import SystemData -from ._models_py3 import TrackedResource - -from ._connected_kubernetes_client_enums import AuthenticationMethod -from ._connected_kubernetes_client_enums import AutoUpgradeOptions -from ._connected_kubernetes_client_enums import AzureHybridBenefit -from ._connected_kubernetes_client_enums import ConnectedClusterKind -from ._connected_kubernetes_client_enums import ConnectivityStatus -from ._connected_kubernetes_client_enums import CreatedByType -from ._connected_kubernetes_client_enums import LastModifiedByType -from ._connected_kubernetes_client_enums import PrivateLinkState -from ._connected_kubernetes_client_enums import ProvisioningState -from ._connected_kubernetes_client_enums import ResourceIdentityType -from ._patch import __all__ as _patch_all -from ._patch import * # pylint: disable=unused-wildcard-import -from ._patch import patch_sdk as _patch_sdk - -__all__ = [ - "AadProfile", - "AgentError", - "ArcAgentProfile", - "ArcAgentryConfigurations", - "ConnectedCluster", - "ConnectedClusterIdentity", - "ConnectedClusterList", - "ConnectedClusterPatch", - "CredentialResult", - "CredentialResults", - "ErrorAdditionalInfo", - "ErrorDetail", - "ErrorResponse", - "Gateway", - "HybridConnectionConfig", - "ListClusterUserCredentialProperties", - "OidcIssuerProfile", - "Operation", - "OperationDisplay", - "OperationList", - "Resource", - "SecurityProfile", - "SecurityProfileWorkloadIdentity", - "SystemComponent", - "SystemData", - "TrackedResource", - "AuthenticationMethod", - "AutoUpgradeOptions", - "AzureHybridBenefit", - "ConnectedClusterKind", - "ConnectivityStatus", - "CreatedByType", - "LastModifiedByType", - "PrivateLinkState", - "ProvisioningState", - "ResourceIdentityType", -] -__all__.extend([p for p in _patch_all if p not in __all__]) -_patch_sdk() diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_models_py3.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_models_py3.py deleted file mode 100644 index 10a401da7c9..00000000000 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_models_py3.py +++ /dev/null @@ -1,1213 +0,0 @@ -# coding=utf-8 -# pylint: disable=too-many-lines -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -import datetime -from typing import Any, Dict, List, Optional, TYPE_CHECKING, Union - -from .. import _serialization - -if TYPE_CHECKING: - # pylint: disable=unused-import,ungrouped-imports - from .. import models as _models - - -class AadProfile(_serialization.Model): - """AAD Profile specifies attributes for Azure Active Directory integration. - - :ivar enable_azure_rbac: Whether to enable Azure RBAC for Kubernetes authorization. - :vartype enable_azure_rbac: bool - :ivar admin_group_object_i_ds: The list of AAD group object IDs that will have admin role of - the cluster. - :vartype admin_group_object_i_ds: list[str] - :ivar tenant_id: The AAD tenant ID to use for authentication. If not specified, will use the - tenant of the deployment subscription. - :vartype tenant_id: str - """ - - _attribute_map = { - "enable_azure_rbac": {"key": "enableAzureRBAC", "type": "bool"}, - "admin_group_object_i_ds": {"key": "adminGroupObjectIDs", "type": "[str]"}, - "tenant_id": {"key": "tenantID", "type": "str"}, - } - - def __init__( - self, - *, - enable_azure_rbac: Optional[bool] = None, - admin_group_object_i_ds: Optional[List[str]] = None, - tenant_id: Optional[str] = None, - **kwargs: Any - ) -> None: - """ - :keyword enable_azure_rbac: Whether to enable Azure RBAC for Kubernetes authorization. - :paramtype enable_azure_rbac: bool - :keyword admin_group_object_i_ds: The list of AAD group object IDs that will have admin role of - the cluster. - :paramtype admin_group_object_i_ds: list[str] - :keyword tenant_id: The AAD tenant ID to use for authentication. If not specified, will use the - tenant of the deployment subscription. - :paramtype tenant_id: str - """ - super().__init__(**kwargs) - self.enable_azure_rbac = enable_azure_rbac - self.admin_group_object_i_ds = admin_group_object_i_ds - self.tenant_id = tenant_id - - -class AgentError(_serialization.Model): - """Agent Errors if any during agent or system component upgrade. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar message: Agent error message. - :vartype message: str - :ivar severity: Severity of the error message. - :vartype severity: str - :ivar component: Agent component where error message occured. - :vartype component: str - :ivar time: The timestamp of error occured (UTC). - :vartype time: ~datetime.datetime - """ - - _validation = { - "message": {"readonly": True}, - "severity": {"readonly": True}, - "component": {"readonly": True}, - "time": {"readonly": True}, - } - - _attribute_map = { - "message": {"key": "message", "type": "str"}, - "severity": {"key": "severity", "type": "str"}, - "component": {"key": "component", "type": "str"}, - "time": {"key": "time", "type": "iso-8601"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.message = None - self.severity = None - self.component = None - self.time = None - - -class ArcAgentProfile(_serialization.Model): - """Defines the Arc Agent properties for the clusters. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar desired_agent_version: Version of the Arc agents to be installed on the cluster resource. - :vartype desired_agent_version: str - :ivar agent_auto_upgrade: Indicates whether the Arc agents on the be upgraded automatically to - the latest version. Defaults to Enabled. Known values are: "Enabled" and "Disabled". - :vartype agent_auto_upgrade: str or ~azure.mgmt.hybridkubernetes.models.AutoUpgradeOptions - :ivar system_components: List of system extensions that are installed on the cluster resource. - :vartype system_components: list[~azure.mgmt.hybridkubernetes.models.SystemComponent] - :ivar agent_errors: List of arc agentry and system components errors on the cluster resource. - :vartype agent_errors: list[~azure.mgmt.hybridkubernetes.models.AgentError] - :ivar agent_state: Represents the current state of the Arc agentry and its dependent - components. - :vartype agent_state: str - """ - - _validation = { - "agent_state": {"readonly": True}, - } - - _attribute_map = { - "desired_agent_version": {"key": "desiredAgentVersion", "type": "str"}, - "agent_auto_upgrade": {"key": "agentAutoUpgrade", "type": "str"}, - "system_components": {"key": "systemComponents", "type": "[SystemComponent]"}, - "agent_errors": {"key": "agentErrors", "type": "[AgentError]"}, - "agent_state": {"key": "agentState", "type": "str"}, - } - - def __init__( - self, - *, - desired_agent_version: Optional[str] = None, - agent_auto_upgrade: Union[str, "_models.AutoUpgradeOptions"] = "Enabled", - system_components: Optional[List["_models.SystemComponent"]] = None, - agent_errors: Optional[List["_models.AgentError"]] = None, - **kwargs: Any - ) -> None: - """ - :keyword desired_agent_version: Version of the Arc agents to be installed on the cluster - resource. - :paramtype desired_agent_version: str - :keyword agent_auto_upgrade: Indicates whether the Arc agents on the be upgraded automatically - to the latest version. Defaults to Enabled. Known values are: "Enabled" and "Disabled". - :paramtype agent_auto_upgrade: str or ~azure.mgmt.hybridkubernetes.models.AutoUpgradeOptions - :keyword system_components: List of system extensions that are installed on the cluster - resource. - :paramtype system_components: list[~azure.mgmt.hybridkubernetes.models.SystemComponent] - :keyword agent_errors: List of arc agentry and system components errors on the cluster - resource. - :paramtype agent_errors: list[~azure.mgmt.hybridkubernetes.models.AgentError] - """ - super().__init__(**kwargs) - self.desired_agent_version = desired_agent_version - self.agent_auto_upgrade = agent_auto_upgrade - self.system_components = system_components - self.agent_errors = agent_errors - self.agent_state = None - - -class ArcAgentryConfigurations(_serialization.Model): - """ArcAgentryConfigurations. - - :ivar feature: Specifies the name of the feature for the configuration setting. - :vartype feature: str - :ivar settings: The configuration settings for the feature that do not contain any sensitive or - secret information. - :vartype settings: dict[str, str] - :ivar protected_settings: The configuration settings for the feature that contain any sensitive - or secret information. - :vartype protected_settings: dict[str, str] - """ - - _attribute_map = { - "feature": {"key": "feature", "type": "str"}, - "settings": {"key": "settings", "type": "{str}"}, - "protected_settings": {"key": "protectedSettings", "type": "{str}"}, - } - - def __init__( - self, - *, - feature: Optional[str] = None, - settings: Optional[Dict[str, str]] = None, - protected_settings: Optional[Dict[str, str]] = None, - **kwargs: Any - ) -> None: - """ - :keyword feature: Specifies the name of the feature for the configuration setting. - :paramtype feature: str - :keyword settings: The configuration settings for the feature that do not contain any sensitive - or secret information. - :paramtype settings: dict[str, str] - :keyword protected_settings: The configuration settings for the feature that contain any - sensitive or secret information. - :paramtype protected_settings: dict[str, str] - """ - super().__init__(**kwargs) - self.feature = feature - self.settings = settings - self.protected_settings = protected_settings - - -class Resource(_serialization.Model): - """Common fields that are returned in the response for all Azure Resource Manager resources. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar id: Fully qualified resource ID for the resource. Ex - - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. # pylint: disable=line-too-long - :vartype id: str - :ivar name: The name of the resource. - :vartype name: str - :ivar type: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or - "Microsoft.Storage/storageAccounts". - :vartype type: str - """ - - _validation = { - "id": {"readonly": True}, - "name": {"readonly": True}, - "type": {"readonly": True}, - } - - _attribute_map = { - "id": {"key": "id", "type": "str"}, - "name": {"key": "name", "type": "str"}, - "type": {"key": "type", "type": "str"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.id = None - self.name = None - self.type = None - - -class TrackedResource(Resource): - """The resource model definition for an Azure Resource Manager tracked top level resource which - has 'tags' and a 'location'. - - Variables are only populated by the server, and will be ignored when sending a request. - - All required parameters must be populated in order to send to server. - - :ivar id: Fully qualified resource ID for the resource. Ex - - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. # pylint: disable=line-too-long - :vartype id: str - :ivar name: The name of the resource. - :vartype name: str - :ivar type: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or - "Microsoft.Storage/storageAccounts". - :vartype type: str - :ivar tags: Resource tags. - :vartype tags: dict[str, str] - :ivar location: The geo-location where the resource lives. Required. - :vartype location: str - """ - - _validation = { - "id": {"readonly": True}, - "name": {"readonly": True}, - "type": {"readonly": True}, - "location": {"required": True}, - } - - _attribute_map = { - "id": {"key": "id", "type": "str"}, - "name": {"key": "name", "type": "str"}, - "type": {"key": "type", "type": "str"}, - "tags": {"key": "tags", "type": "{str}"}, - "location": {"key": "location", "type": "str"}, - } - - def __init__(self, *, location: str, tags: Optional[Dict[str, str]] = None, **kwargs: Any) -> None: - """ - :keyword tags: Resource tags. - :paramtype tags: dict[str, str] - :keyword location: The geo-location where the resource lives. Required. - :paramtype location: str - """ - super().__init__(**kwargs) - self.tags = tags - self.location = location - - -class ConnectedCluster(TrackedResource): # pylint: disable=too-many-instance-attributes - """Represents a connected cluster. - - Variables are only populated by the server, and will be ignored when sending a request. - - All required parameters must be populated in order to send to server. - - :ivar id: Fully qualified resource ID for the resource. Ex - - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. # pylint: disable=line-too-long - :vartype id: str - :ivar name: The name of the resource. - :vartype name: str - :ivar type: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or - "Microsoft.Storage/storageAccounts". - :vartype type: str - :ivar tags: Resource tags. - :vartype tags: dict[str, str] - :ivar location: The geo-location where the resource lives. Required. - :vartype location: str - :ivar identity: The identity of the connected cluster. Required. - :vartype identity: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterIdentity - :ivar kind: The kind of connected cluster. "ProvisionedCluster" - :vartype kind: str or ~azure.mgmt.hybridkubernetes.models.ConnectedClusterKind - :ivar system_data: Metadata pertaining to creation and last modification of the resource. - :vartype system_data: ~azure.mgmt.hybridkubernetes.models.SystemData - :ivar agent_public_key_certificate: Base64 encoded public certificate used by the agent to do - the initial handshake to the backend services in Azure. Required. - :vartype agent_public_key_certificate: str - :ivar kubernetes_version: The Kubernetes version of the connected cluster resource. - :vartype kubernetes_version: str - :ivar total_node_count: Number of nodes present in the connected cluster resource. - :vartype total_node_count: int - :ivar total_core_count: Number of CPU cores present in the connected cluster resource. - :vartype total_core_count: int - :ivar agent_version: Version of the agent running on the connected cluster resource. - :vartype agent_version: str - :ivar provisioning_state: Provisioning state of the connected cluster resource. Known values - are: "Succeeded", "Failed", "Canceled", "Provisioning", "Updating", "Deleting", and "Accepted". - :vartype provisioning_state: str or ~azure.mgmt.hybridkubernetes.models.ProvisioningState - :ivar distribution: The Kubernetes distribution running on this connected cluster. - :vartype distribution: str - :ivar distribution_version: The Kubernetes distribution version on this connected cluster. - :vartype distribution_version: str - :ivar infrastructure: The infrastructure on which the Kubernetes cluster represented by this - connected cluster is running on. - :vartype infrastructure: str - :ivar offering: Connected cluster offering. - :vartype offering: str - :ivar managed_identity_certificate_expiration_time: Expiration time of the managed identity - certificate. - :vartype managed_identity_certificate_expiration_time: ~datetime.datetime - :ivar last_connectivity_time: Time representing the last instance when heart beat was received - from the cluster. - :vartype last_connectivity_time: ~datetime.datetime - :ivar connectivity_status: Represents the connectivity status of the connected cluster. Known - values are: "Connecting", "Connected", "Offline", and "Expired". - :vartype connectivity_status: str or ~azure.mgmt.hybridkubernetes.models.ConnectivityStatus - :ivar private_link_state: Property which describes the state of private link on a connected - cluster resource. Known values are: "Enabled" and "Disabled". - :vartype private_link_state: str or ~azure.mgmt.hybridkubernetes.models.PrivateLinkState - :ivar private_link_scope_resource_id: This is populated only if privateLinkState is enabled. - The resource id of the private link scope this connected cluster is assigned to, if any. - :vartype private_link_scope_resource_id: str - :ivar azure_hybrid_benefit: Indicates whether Azure Hybrid Benefit is opted in. Known values - are: "True", "False", and "NotApplicable". - :vartype azure_hybrid_benefit: str or ~azure.mgmt.hybridkubernetes.models.AzureHybridBenefit - :ivar aad_profile: AAD profile for the connected cluster. - :vartype aad_profile: ~azure.mgmt.hybridkubernetes.models.AadProfile - :ivar arc_agent_profile: Arc agentry configuration for the provisioned cluster. - :vartype arc_agent_profile: ~azure.mgmt.hybridkubernetes.models.ArcAgentProfile - :ivar security_profile: Security profile for the connected cluster. - :vartype security_profile: ~azure.mgmt.hybridkubernetes.models.SecurityProfile - :ivar oidc_issuer_profile: Open ID Connect (OIDC) Issuer Profile for the connected cluster. - :vartype oidc_issuer_profile: ~azure.mgmt.hybridkubernetes.models.OidcIssuerProfile - :ivar gateway: Details of the gateway used by the Arc router for connectivity. - :vartype gateway: ~azure.mgmt.hybridkubernetes.models.Gateway - :ivar arc_agentry_configurations: Configuration settings for customizing the behavior of the - connected cluster. - :vartype arc_agentry_configurations: - list[~azure.mgmt.hybridkubernetes.models.ArcAgentryConfigurations] - :ivar miscellaneous_properties: More properties related to the Connected Cluster. - :vartype miscellaneous_properties: dict[str, str] - """ - - _validation = { - "id": {"readonly": True}, - "name": {"readonly": True}, - "type": {"readonly": True}, - "location": {"required": True}, - "identity": {"required": True}, - "system_data": {"readonly": True}, - "agent_public_key_certificate": {"required": True}, - "kubernetes_version": {"readonly": True}, - "total_node_count": {"readonly": True}, - "total_core_count": {"readonly": True}, - "agent_version": {"readonly": True}, - "offering": {"readonly": True}, - "managed_identity_certificate_expiration_time": {"readonly": True}, - "last_connectivity_time": {"readonly": True}, - "connectivity_status": {"readonly": True}, - "miscellaneous_properties": {"readonly": True}, - } - - _attribute_map = { - "id": {"key": "id", "type": "str"}, - "name": {"key": "name", "type": "str"}, - "type": {"key": "type", "type": "str"}, - "tags": {"key": "tags", "type": "{str}"}, - "location": {"key": "location", "type": "str"}, - "identity": {"key": "identity", "type": "ConnectedClusterIdentity"}, - "kind": {"key": "kind", "type": "str"}, - "system_data": {"key": "systemData", "type": "SystemData"}, - "agent_public_key_certificate": {"key": "properties.agentPublicKeyCertificate", "type": "str"}, - "kubernetes_version": {"key": "properties.kubernetesVersion", "type": "str"}, - "total_node_count": {"key": "properties.totalNodeCount", "type": "int"}, - "total_core_count": {"key": "properties.totalCoreCount", "type": "int"}, - "agent_version": {"key": "properties.agentVersion", "type": "str"}, - "provisioning_state": {"key": "properties.provisioningState", "type": "str"}, - "distribution": {"key": "properties.distribution", "type": "str"}, - "distribution_version": {"key": "properties.distributionVersion", "type": "str"}, - "infrastructure": {"key": "properties.infrastructure", "type": "str"}, - "offering": {"key": "properties.offering", "type": "str"}, - "managed_identity_certificate_expiration_time": { - "key": "properties.managedIdentityCertificateExpirationTime", - "type": "iso-8601", - }, - "last_connectivity_time": {"key": "properties.lastConnectivityTime", "type": "iso-8601"}, - "connectivity_status": {"key": "properties.connectivityStatus", "type": "str"}, - "private_link_state": {"key": "properties.privateLinkState", "type": "str"}, - "private_link_scope_resource_id": {"key": "properties.privateLinkScopeResourceId", "type": "str"}, - "azure_hybrid_benefit": {"key": "properties.azureHybridBenefit", "type": "str"}, - "aad_profile": {"key": "properties.aadProfile", "type": "AadProfile"}, - "arc_agent_profile": {"key": "properties.arcAgentProfile", "type": "ArcAgentProfile"}, - "security_profile": {"key": "properties.securityProfile", "type": "SecurityProfile"}, - "oidc_issuer_profile": {"key": "properties.oidcIssuerProfile", "type": "OidcIssuerProfile"}, - "gateway": {"key": "properties.gateway", "type": "Gateway"}, - "arc_agentry_configurations": { - "key": "properties.arcAgentryConfigurations", - "type": "[ArcAgentryConfigurations]", - }, - "miscellaneous_properties": {"key": "properties.miscellaneousProperties", "type": "{str}"}, - } - - def __init__( # pylint: disable=too-many-locals - self, - *, - location: str, - identity: "_models.ConnectedClusterIdentity", - agent_public_key_certificate: str, - tags: Optional[Dict[str, str]] = None, - kind: Optional[Union[str, "_models.ConnectedClusterKind"]] = None, - provisioning_state: Optional[Union[str, "_models.ProvisioningState"]] = None, - distribution: Optional[str] = None, - distribution_version: Optional[str] = None, - infrastructure: Optional[str] = None, - private_link_state: Union[str, "_models.PrivateLinkState"] = "Disabled", - private_link_scope_resource_id: Optional[str] = None, - azure_hybrid_benefit: Optional[Union[str, "_models.AzureHybridBenefit"]] = None, - aad_profile: Optional["_models.AadProfile"] = None, - arc_agent_profile: Optional["_models.ArcAgentProfile"] = None, - security_profile: Optional["_models.SecurityProfile"] = None, - oidc_issuer_profile: Optional["_models.OidcIssuerProfile"] = None, - gateway: Optional["_models.Gateway"] = None, - arc_agentry_configurations: Optional[List["_models.ArcAgentryConfigurations"]] = None, - **kwargs: Any - ) -> None: - """ - :keyword tags: Resource tags. - :paramtype tags: dict[str, str] - :keyword location: The geo-location where the resource lives. Required. - :paramtype location: str - :keyword identity: The identity of the connected cluster. Required. - :paramtype identity: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterIdentity - :keyword kind: The kind of connected cluster. "ProvisionedCluster" - :paramtype kind: str or ~azure.mgmt.hybridkubernetes.models.ConnectedClusterKind - :keyword agent_public_key_certificate: Base64 encoded public certificate used by the agent to - do the initial handshake to the backend services in Azure. Required. - :paramtype agent_public_key_certificate: str - :keyword provisioning_state: Provisioning state of the connected cluster resource. Known values - are: "Succeeded", "Failed", "Canceled", "Provisioning", "Updating", "Deleting", and "Accepted". - :paramtype provisioning_state: str or ~azure.mgmt.hybridkubernetes.models.ProvisioningState - :keyword distribution: The Kubernetes distribution running on this connected cluster. - :paramtype distribution: str - :keyword distribution_version: The Kubernetes distribution version on this connected cluster. - :paramtype distribution_version: str - :keyword infrastructure: The infrastructure on which the Kubernetes cluster represented by this - connected cluster is running on. - :paramtype infrastructure: str - :keyword private_link_state: Property which describes the state of private link on a connected - cluster resource. Known values are: "Enabled" and "Disabled". - :paramtype private_link_state: str or ~azure.mgmt.hybridkubernetes.models.PrivateLinkState - :keyword private_link_scope_resource_id: This is populated only if privateLinkState is enabled. - The resource id of the private link scope this connected cluster is assigned to, if any. - :paramtype private_link_scope_resource_id: str - :keyword azure_hybrid_benefit: Indicates whether Azure Hybrid Benefit is opted in. Known values - are: "True", "False", and "NotApplicable". - :paramtype azure_hybrid_benefit: str or ~azure.mgmt.hybridkubernetes.models.AzureHybridBenefit - :keyword aad_profile: AAD profile for the connected cluster. - :paramtype aad_profile: ~azure.mgmt.hybridkubernetes.models.AadProfile - :keyword arc_agent_profile: Arc agentry configuration for the provisioned cluster. - :paramtype arc_agent_profile: ~azure.mgmt.hybridkubernetes.models.ArcAgentProfile - :keyword security_profile: Security profile for the connected cluster. - :paramtype security_profile: ~azure.mgmt.hybridkubernetes.models.SecurityProfile - :keyword oidc_issuer_profile: Open ID Connect (OIDC) Issuer Profile for the connected cluster. - :paramtype oidc_issuer_profile: ~azure.mgmt.hybridkubernetes.models.OidcIssuerProfile - :keyword gateway: Details of the gateway used by the Arc router for connectivity. - :paramtype gateway: ~azure.mgmt.hybridkubernetes.models.Gateway - :keyword arc_agentry_configurations: Configuration settings for customizing the behavior of the - connected cluster. - :paramtype arc_agentry_configurations: - list[~azure.mgmt.hybridkubernetes.models.ArcAgentryConfigurations] - """ - super().__init__(tags=tags, location=location, **kwargs) - self.identity = identity - self.kind = kind - self.system_data = None - self.agent_public_key_certificate = agent_public_key_certificate - self.kubernetes_version = None - self.total_node_count = None - self.total_core_count = None - self.agent_version = None - self.provisioning_state = provisioning_state - self.distribution = distribution - self.distribution_version = distribution_version - self.infrastructure = infrastructure - self.offering = None - self.managed_identity_certificate_expiration_time = None - self.last_connectivity_time = None - self.connectivity_status = None - self.private_link_state = private_link_state - self.private_link_scope_resource_id = private_link_scope_resource_id - self.azure_hybrid_benefit = azure_hybrid_benefit - self.aad_profile = aad_profile - self.arc_agent_profile = arc_agent_profile - self.security_profile = security_profile - self.oidc_issuer_profile = oidc_issuer_profile - self.gateway = gateway - self.arc_agentry_configurations = arc_agentry_configurations - self.miscellaneous_properties = None - - -class ConnectedClusterIdentity(_serialization.Model): - """Identity for the connected cluster. - - Variables are only populated by the server, and will be ignored when sending a request. - - All required parameters must be populated in order to send to server. - - :ivar principal_id: The principal id of connected cluster identity. This property will only be - provided for a system assigned identity. - :vartype principal_id: str - :ivar tenant_id: The tenant id associated with the connected cluster. This property will only - be provided for a system assigned identity. - :vartype tenant_id: str - :ivar type: The type of identity used for the connected cluster. The type 'SystemAssigned, - includes a system created identity. The type 'None' means no identity is assigned to the - connected cluster. Known values are: "None" and "SystemAssigned". - :vartype type: str or ~azure.mgmt.hybridkubernetes.models.ResourceIdentityType - """ - - _validation = { - "principal_id": {"readonly": True}, - "tenant_id": {"readonly": True}, - "type": {"required": True}, - } - - _attribute_map = { - "principal_id": {"key": "principalId", "type": "str"}, - "tenant_id": {"key": "tenantId", "type": "str"}, - "type": {"key": "type", "type": "str"}, - } - - def __init__(self, *, type: Union[str, "_models.ResourceIdentityType"] = "SystemAssigned", **kwargs: Any) -> None: - """ - :keyword type: The type of identity used for the connected cluster. The type 'SystemAssigned, - includes a system created identity. The type 'None' means no identity is assigned to the - connected cluster. Known values are: "None" and "SystemAssigned". - :paramtype type: str or ~azure.mgmt.hybridkubernetes.models.ResourceIdentityType - """ - super().__init__(**kwargs) - self.principal_id = None - self.tenant_id = None - self.type = type - - -class ConnectedClusterList(_serialization.Model): - """The paginated list of connected Clusters. - - :ivar value: The list of connected clusters. - :vartype value: list[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :ivar next_link: The link to fetch the next page of connected clusters. - :vartype next_link: str - """ - - _attribute_map = { - "value": {"key": "value", "type": "[ConnectedCluster]"}, - "next_link": {"key": "nextLink", "type": "str"}, - } - - def __init__( - self, - *, - value: Optional[List["_models.ConnectedCluster"]] = None, - next_link: Optional[str] = None, - **kwargs: Any - ) -> None: - """ - :keyword value: The list of connected clusters. - :paramtype value: list[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :keyword next_link: The link to fetch the next page of connected clusters. - :paramtype next_link: str - """ - super().__init__(**kwargs) - self.value = value - self.next_link = next_link - - -class ConnectedClusterPatch(_serialization.Model): - """Object containing updates for patch operations. - - :ivar tags: Resource tags. - :vartype tags: dict[str, str] - :ivar distribution: Represents the distribution of the connected cluster. - :vartype distribution: str - :ivar distribution_version: Represents the Kubernetes distribution version on this connected - cluster. - :vartype distribution_version: str - :ivar azure_hybrid_benefit: Indicates whether Azure Hybrid Benefit is opted in. Known values - are: "True", "False", and "NotApplicable". - :vartype azure_hybrid_benefit: str or ~azure.mgmt.hybridkubernetes.models.AzureHybridBenefit - """ - - _attribute_map = { - "tags": {"key": "tags", "type": "{str}"}, - "distribution": {"key": "properties.distribution", "type": "str"}, - "distribution_version": {"key": "properties.distributionVersion", "type": "str"}, - "azure_hybrid_benefit": {"key": "properties.azureHybridBenefit", "type": "str"}, - } - - def __init__( - self, - *, - tags: Optional[Dict[str, str]] = None, - distribution: Optional[str] = None, - distribution_version: Optional[str] = None, - azure_hybrid_benefit: Optional[Union[str, "_models.AzureHybridBenefit"]] = None, - **kwargs: Any - ) -> None: - """ - :keyword tags: Resource tags. - :paramtype tags: dict[str, str] - :keyword distribution: Represents the distribution of the connected cluster. - :paramtype distribution: str - :keyword distribution_version: Represents the Kubernetes distribution version on this connected - cluster. - :paramtype distribution_version: str - :keyword azure_hybrid_benefit: Indicates whether Azure Hybrid Benefit is opted in. Known values - are: "True", "False", and "NotApplicable". - :paramtype azure_hybrid_benefit: str or ~azure.mgmt.hybridkubernetes.models.AzureHybridBenefit - """ - super().__init__(**kwargs) - self.tags = tags - self.distribution = distribution - self.distribution_version = distribution_version - self.azure_hybrid_benefit = azure_hybrid_benefit - - -class CredentialResult(_serialization.Model): - """The credential result response. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar name: The name of the credential. - :vartype name: str - :ivar value: Base64-encoded Kubernetes configuration file. - :vartype value: bytes - """ - - _validation = { - "name": {"readonly": True}, - "value": {"readonly": True}, - } - - _attribute_map = { - "name": {"key": "name", "type": "str"}, - "value": {"key": "value", "type": "bytearray"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.name = None - self.value = None - - -class CredentialResults(_serialization.Model): - """The list of credential result response. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar hybrid_connection_config: Contains the REP (rendezvous endpoint) and “Sender” access - token. - :vartype hybrid_connection_config: ~azure.mgmt.hybridkubernetes.models.HybridConnectionConfig - :ivar kubeconfigs: Base64-encoded Kubernetes configuration file. - :vartype kubeconfigs: list[~azure.mgmt.hybridkubernetes.models.CredentialResult] - """ - - _validation = { - "hybrid_connection_config": {"readonly": True}, - "kubeconfigs": {"readonly": True}, - } - - _attribute_map = { - "hybrid_connection_config": {"key": "hybridConnectionConfig", "type": "HybridConnectionConfig"}, - "kubeconfigs": {"key": "kubeconfigs", "type": "[CredentialResult]"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.hybrid_connection_config = None - self.kubeconfigs = None - - -class ErrorAdditionalInfo(_serialization.Model): - """The resource management error additional info. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar type: The additional info type. - :vartype type: str - :ivar info: The additional info. - :vartype info: JSON - """ - - _validation = { - "type": {"readonly": True}, - "info": {"readonly": True}, - } - - _attribute_map = { - "type": {"key": "type", "type": "str"}, - "info": {"key": "info", "type": "object"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.type = None - self.info = None - - -class ErrorDetail(_serialization.Model): - """The error detail. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar code: The error code. - :vartype code: str - :ivar message: The error message. - :vartype message: str - :ivar target: The error target. - :vartype target: str - :ivar details: The error details. - :vartype details: list[~azure.mgmt.hybridkubernetes.models.ErrorDetail] - :ivar additional_info: The error additional info. - :vartype additional_info: list[~azure.mgmt.hybridkubernetes.models.ErrorAdditionalInfo] - """ - - _validation = { - "code": {"readonly": True}, - "message": {"readonly": True}, - "target": {"readonly": True}, - "details": {"readonly": True}, - "additional_info": {"readonly": True}, - } - - _attribute_map = { - "code": {"key": "code", "type": "str"}, - "message": {"key": "message", "type": "str"}, - "target": {"key": "target", "type": "str"}, - "details": {"key": "details", "type": "[ErrorDetail]"}, - "additional_info": {"key": "additionalInfo", "type": "[ErrorAdditionalInfo]"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.code = None - self.message = None - self.target = None - self.details = None - self.additional_info = None - - -class ErrorResponse(_serialization.Model): - """Common error response for all Azure Resource Manager APIs to return error details for failed - operations. (This also follows the OData error response format.). - - :ivar error: The error object. - :vartype error: ~azure.mgmt.hybridkubernetes.models.ErrorDetail - """ - - _attribute_map = { - "error": {"key": "error", "type": "ErrorDetail"}, - } - - def __init__(self, *, error: Optional["_models.ErrorDetail"] = None, **kwargs: Any) -> None: - """ - :keyword error: The error object. - :paramtype error: ~azure.mgmt.hybridkubernetes.models.ErrorDetail - """ - super().__init__(**kwargs) - self.error = error - - -class Gateway(_serialization.Model): - """Gateway. - - :ivar enabled: Indicates whether the gateway for arc router connectivity is enabled. - :vartype enabled: bool - :ivar resource_id: The resource ID of the gateway used for the Arc router feature. - :vartype resource_id: str - """ - - _attribute_map = { - "enabled": {"key": "enabled", "type": "bool"}, - "resource_id": {"key": "resourceId", "type": "str"}, - } - - def __init__(self, *, enabled: Optional[bool] = None, resource_id: Optional[str] = None, **kwargs: Any) -> None: - """ - :keyword enabled: Indicates whether the gateway for arc router connectivity is enabled. - :paramtype enabled: bool - :keyword resource_id: The resource ID of the gateway used for the Arc router feature. - :paramtype resource_id: str - """ - super().__init__(**kwargs) - self.enabled = enabled - self.resource_id = resource_id - - -class HybridConnectionConfig(_serialization.Model): - """Contains the REP (rendezvous endpoint) and “Sender” access token. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar expiration_time: Timestamp when this token will be expired. - :vartype expiration_time: int - :ivar hybrid_connection_name: Name of the connection. - :vartype hybrid_connection_name: str - :ivar relay: Name of the relay. - :vartype relay: str - :ivar token: Sender access token. - :vartype token: str - """ - - _validation = { - "expiration_time": {"readonly": True}, - "hybrid_connection_name": {"readonly": True}, - "relay": {"readonly": True}, - "token": {"readonly": True}, - } - - _attribute_map = { - "expiration_time": {"key": "expirationTime", "type": "int"}, - "hybrid_connection_name": {"key": "hybridConnectionName", "type": "str"}, - "relay": {"key": "relay", "type": "str"}, - "token": {"key": "token", "type": "str"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.expiration_time = None - self.hybrid_connection_name = None - self.relay = None - self.token = None - - -class ListClusterUserCredentialProperties(_serialization.Model): - """ListClusterUserCredentialProperties. - - All required parameters must be populated in order to send to server. - - :ivar authentication_method: The mode of client authentication. Required. Known values are: - "Token" and "AAD". - :vartype authentication_method: str or ~azure.mgmt.hybridkubernetes.models.AuthenticationMethod - :ivar client_proxy: Boolean value to indicate whether the request is for client side proxy or - not. Required. - :vartype client_proxy: bool - """ - - _validation = { - "authentication_method": {"required": True}, - "client_proxy": {"required": True}, - } - - _attribute_map = { - "authentication_method": {"key": "authenticationMethod", "type": "str"}, - "client_proxy": {"key": "clientProxy", "type": "bool"}, - } - - def __init__( - self, *, authentication_method: Union[str, "_models.AuthenticationMethod"], client_proxy: bool, **kwargs: Any - ) -> None: - """ - :keyword authentication_method: The mode of client authentication. Required. Known values are: - "Token" and "AAD". - :paramtype authentication_method: str or - ~azure.mgmt.hybridkubernetes.models.AuthenticationMethod - :keyword client_proxy: Boolean value to indicate whether the request is for client side proxy - or not. Required. - :paramtype client_proxy: bool - """ - super().__init__(**kwargs) - self.authentication_method = authentication_method - self.client_proxy = client_proxy - - -class OidcIssuerProfile(_serialization.Model): - """OIDC Issuer Profile specifies attributes for workload identity integration. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar enabled: Whether to enable oidc issuer for workload identity integration. - :vartype enabled: bool - :ivar issuer_url: The issuer url for hybrid clusters connected to Arc used for the workload - identity feature. - :vartype issuer_url: str - :ivar self_hosted_issuer_url: The issuer url for public cloud clusters - AKS, EKS, GKE - used - for the workload identity feature. - :vartype self_hosted_issuer_url: str - """ - - _validation = { - "issuer_url": {"readonly": True}, - } - - _attribute_map = { - "enabled": {"key": "enabled", "type": "bool"}, - "issuer_url": {"key": "issuerUrl", "type": "str"}, - "self_hosted_issuer_url": {"key": "selfHostedIssuerUrl", "type": "str"}, - } - - def __init__( - self, *, enabled: Optional[bool] = None, self_hosted_issuer_url: Optional[str] = None, **kwargs: Any - ) -> None: - """ - :keyword enabled: Whether to enable oidc issuer for workload identity integration. - :paramtype enabled: bool - :keyword self_hosted_issuer_url: The issuer url for public cloud clusters - AKS, EKS, GKE - - used for the workload identity feature. - :paramtype self_hosted_issuer_url: str - """ - super().__init__(**kwargs) - self.enabled = enabled - self.issuer_url = None - self.self_hosted_issuer_url = self_hosted_issuer_url - - -class Operation(_serialization.Model): - """The Connected cluster API operation. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar name: Operation name: {Microsoft.Kubernetes}/{resource}/{operation}. - :vartype name: str - :ivar display: The object that represents the operation. - :vartype display: ~azure.mgmt.hybridkubernetes.models.OperationDisplay - """ - - _validation = { - "name": {"readonly": True}, - "display": {"readonly": True}, - } - - _attribute_map = { - "name": {"key": "name", "type": "str"}, - "display": {"key": "display", "type": "OperationDisplay"}, - } - - def __init__(self, **kwargs: Any) -> None: - """ """ - super().__init__(**kwargs) - self.name = None - self.display = None - - -class OperationDisplay(_serialization.Model): - """The object that represents the operation. - - :ivar provider: Service provider: Microsoft.Kubernetes. - :vartype provider: str - :ivar resource: Connected Cluster Resource on which the operation is performed. - :vartype resource: str - :ivar operation: Operation type: Read, write, delete, etc. - :vartype operation: str - :ivar description: Description of the operation. - :vartype description: str - """ - - _attribute_map = { - "provider": {"key": "provider", "type": "str"}, - "resource": {"key": "resource", "type": "str"}, - "operation": {"key": "operation", "type": "str"}, - "description": {"key": "description", "type": "str"}, - } - - def __init__( - self, - *, - provider: Optional[str] = None, - resource: Optional[str] = None, - operation: Optional[str] = None, - description: Optional[str] = None, - **kwargs: Any - ) -> None: - """ - :keyword provider: Service provider: Microsoft.Kubernetes. - :paramtype provider: str - :keyword resource: Connected Cluster Resource on which the operation is performed. - :paramtype resource: str - :keyword operation: Operation type: Read, write, delete, etc. - :paramtype operation: str - :keyword description: Description of the operation. - :paramtype description: str - """ - super().__init__(**kwargs) - self.provider = provider - self.resource = resource - self.operation = operation - self.description = description - - -class OperationList(_serialization.Model): - """The paginated list of connected cluster API operations. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar value: The list of connected cluster API operations. - :vartype value: list[~azure.mgmt.hybridkubernetes.models.Operation] - :ivar next_link: The link to fetch the next page of connected cluster API operations. - :vartype next_link: str - """ - - _validation = { - "value": {"readonly": True}, - } - - _attribute_map = { - "value": {"key": "value", "type": "[Operation]"}, - "next_link": {"key": "nextLink", "type": "str"}, - } - - def __init__(self, *, next_link: Optional[str] = None, **kwargs: Any) -> None: - """ - :keyword next_link: The link to fetch the next page of connected cluster API operations. - :paramtype next_link: str - """ - super().__init__(**kwargs) - self.value = None - self.next_link = next_link - - -class SecurityProfile(_serialization.Model): - """Security Profile specifies attributes for cluster security features. - - :ivar workload_identity: The workload identity feature webhook. - :vartype workload_identity: ~azure.mgmt.hybridkubernetes.models.SecurityProfileWorkloadIdentity - """ - - _attribute_map = { - "workload_identity": {"key": "workloadIdentity", "type": "SecurityProfileWorkloadIdentity"}, - } - - def __init__( - self, *, workload_identity: Optional["_models.SecurityProfileWorkloadIdentity"] = None, **kwargs: Any - ) -> None: - """ - :keyword workload_identity: The workload identity feature webhook. - :paramtype workload_identity: - ~azure.mgmt.hybridkubernetes.models.SecurityProfileWorkloadIdentity - """ - super().__init__(**kwargs) - self.workload_identity = workload_identity - - -class SecurityProfileWorkloadIdentity(_serialization.Model): - """The workload identity feature webhook. - - :ivar enabled: Whether to enable or disable the workload identity Webhook. - :vartype enabled: bool - """ - - _attribute_map = { - "enabled": {"key": "enabled", "type": "bool"}, - } - - def __init__(self, *, enabled: Optional[bool] = None, **kwargs: Any) -> None: - """ - :keyword enabled: Whether to enable or disable the workload identity Webhook. - :paramtype enabled: bool - """ - super().__init__(**kwargs) - self.enabled = enabled - - -class SystemComponent(_serialization.Model): - """System extensions and its current versions installed on the cluster resource. - - Variables are only populated by the server, and will be ignored when sending a request. - - :ivar type: Type of the system extension. - :vartype type: str - :ivar user_specified_version: Version of the system extension to be installed on the cluster - resource. - :vartype user_specified_version: str - :ivar major_version: Major Version of the system extension that is currently installed on the - cluster resource. - :vartype major_version: int - :ivar current_version: Version of the system extension that is currently installed on the - cluster resource. - :vartype current_version: str - """ - - _validation = { - "current_version": {"readonly": True}, - } - - _attribute_map = { - "type": {"key": "type", "type": "str"}, - "user_specified_version": {"key": "userSpecifiedVersion", "type": "str"}, - "major_version": {"key": "majorVersion", "type": "int"}, - "current_version": {"key": "currentVersion", "type": "str"}, - } - - def __init__( - self, - *, - type: Optional[str] = None, - user_specified_version: Optional[str] = None, - major_version: Optional[int] = None, - **kwargs: Any - ) -> None: - """ - :keyword type: Type of the system extension. - :paramtype type: str - :keyword user_specified_version: Version of the system extension to be installed on the cluster - resource. - :paramtype user_specified_version: str - :keyword major_version: Major Version of the system extension that is currently installed on - the cluster resource. - :paramtype major_version: int - """ - super().__init__(**kwargs) - self.type = type - self.user_specified_version = user_specified_version - self.major_version = major_version - self.current_version = None - - -class SystemData(_serialization.Model): - """Metadata pertaining to creation and last modification of the resource. - - :ivar created_by: The identity that created the resource. - :vartype created_by: str - :ivar created_by_type: The type of identity that created the resource. Known values are: - "User", "Application", "ManagedIdentity", and "Key". - :vartype created_by_type: str or ~azure.mgmt.hybridkubernetes.models.CreatedByType - :ivar created_at: The timestamp of resource creation (UTC). - :vartype created_at: ~datetime.datetime - :ivar last_modified_by: The identity that last modified the resource. - :vartype last_modified_by: str - :ivar last_modified_by_type: The type of identity that last modified the resource. Known values - are: "User", "Application", "ManagedIdentity", and "Key". - :vartype last_modified_by_type: str or ~azure.mgmt.hybridkubernetes.models.LastModifiedByType - :ivar last_modified_at: The timestamp of resource modification (UTC). - :vartype last_modified_at: ~datetime.datetime - """ - - _attribute_map = { - "created_by": {"key": "createdBy", "type": "str"}, - "created_by_type": {"key": "createdByType", "type": "str"}, - "created_at": {"key": "createdAt", "type": "iso-8601"}, - "last_modified_by": {"key": "lastModifiedBy", "type": "str"}, - "last_modified_by_type": {"key": "lastModifiedByType", "type": "str"}, - "last_modified_at": {"key": "lastModifiedAt", "type": "iso-8601"}, - } - - def __init__( - self, - *, - created_by: Optional[str] = None, - created_by_type: Optional[Union[str, "_models.CreatedByType"]] = None, - created_at: Optional[datetime.datetime] = None, - last_modified_by: Optional[str] = None, - last_modified_by_type: Optional[Union[str, "_models.LastModifiedByType"]] = None, - last_modified_at: Optional[datetime.datetime] = None, - **kwargs: Any - ) -> None: - """ - :keyword created_by: The identity that created the resource. - :paramtype created_by: str - :keyword created_by_type: The type of identity that created the resource. Known values are: - "User", "Application", "ManagedIdentity", and "Key". - :paramtype created_by_type: str or ~azure.mgmt.hybridkubernetes.models.CreatedByType - :keyword created_at: The timestamp of resource creation (UTC). - :paramtype created_at: ~datetime.datetime - :keyword last_modified_by: The identity that last modified the resource. - :paramtype last_modified_by: str - :keyword last_modified_by_type: The type of identity that last modified the resource. Known - values are: "User", "Application", "ManagedIdentity", and "Key". - :paramtype last_modified_by_type: str or ~azure.mgmt.hybridkubernetes.models.LastModifiedByType - :keyword last_modified_at: The timestamp of resource modification (UTC). - :paramtype last_modified_at: ~datetime.datetime - """ - super().__init__(**kwargs) - self.created_by = created_by - self.created_by_type = created_by_type - self.created_at = created_at - self.last_modified_by = last_modified_by - self.last_modified_by_type = last_modified_by_type - self.last_modified_at = last_modified_at diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_operations.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_operations.py deleted file mode 100644 index 4736b045826..00000000000 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_operations.py +++ /dev/null @@ -1,156 +0,0 @@ -# pylint: disable=too-many-lines,too-many-statements -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- -import sys -from typing import Any, Callable, Dict, Iterable, Optional, Type, TypeVar -import urllib.parse - -from azure.core.exceptions import ( - ClientAuthenticationError, - HttpResponseError, - ResourceExistsError, - ResourceNotFoundError, - ResourceNotModifiedError, - map_error, -) -from azure.core.paging import ItemPaged -from azure.core.pipeline import PipelineResponse -from azure.core.pipeline.transport import HttpResponse -from azure.core.rest import HttpRequest -from azure.core.tracing.decorator import distributed_trace -from azure.core.utils import case_insensitive_dict -from azure.mgmt.core.exceptions import ARMErrorFormat - -from .. import models as _models -from .._serialization import Serializer -from .._vendor import _convert_request - -if sys.version_info >= (3, 9): - from collections.abc import MutableMapping -else: - from typing import MutableMapping # type: ignore # pylint: disable=ungrouped-imports -T = TypeVar("T") -ClsType = Optional[Callable[[PipelineResponse[HttpRequest, HttpResponse], T, Dict[str, Any]], Any]] - -_SERIALIZER = Serializer() -_SERIALIZER.client_side_validation = False - - -def build_get_request(**kwargs: Any) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop("template_url", "/providers/Microsoft.Kubernetes/operations") - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) - - -class Operations: - """ - .. warning:: - **DO NOT** instantiate this class directly. - - Instead, you should access the following operations through - :class:`~azure.mgmt.hybridkubernetes.ConnectedKubernetesClient`'s - :attr:`operations` attribute. - """ - - models = _models - - def __init__(self, *args, **kwargs): - input_args = list(args) - self._client = input_args.pop(0) if input_args else kwargs.pop("client") - self._config = input_args.pop(0) if input_args else kwargs.pop("config") - self._serialize = input_args.pop(0) if input_args else kwargs.pop("serializer") - self._deserialize = input_args.pop(0) if input_args else kwargs.pop("deserializer") - - @distributed_trace - def get(self, **kwargs: Any) -> Iterable["_models.Operation"]: - """Lists all of the available API operations for Connected Cluster resource. - - :return: An iterator like instance of either Operation or the result of cls(response) - :rtype: ~azure.core.paging.ItemPaged[~azure.mgmt.hybridkubernetes.models.Operation] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.OperationList] = kwargs.pop("cls", None) - - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - def prepare_request(next_link=None): - if not next_link: - - _request = build_get_request( - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - else: - # make call to next link with the client's api-version - _parsed_next_link = urllib.parse.urlparse(next_link) - _next_request_params = case_insensitive_dict( - { - key: [urllib.parse.quote(v) for v in value] - for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() - } - ) - _next_request_params["api-version"] = self._config.api_version - _request = HttpRequest( - "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - _request.method = "GET" - return _request - - def extract_data(pipeline_response): - deserialized = self._deserialize("OperationList", pipeline_response) - list_of_elem = deserialized.value - if cls: - list_of_elem = cls(list_of_elem) # type: ignore - return deserialized.next_link or None, iter(list_of_elem) - - def get_next(next_link=None): - _request = prepare_request(next_link) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - return pipeline_response - - return ItemPaged(get_next, extract_data) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_patch.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_patch.py deleted file mode 100644 index 1bb0db275de..00000000000 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_patch.py +++ /dev/null @@ -1,20 +0,0 @@ -# ------------------------------------ -# Copyright (c) Microsoft Corporation. -# Licensed under the MIT License. -# ------------------------------------ -"""Customize generated code here. - -Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize -""" -from typing import List - -__all__: List[str] = [] # Add all objects you want publicly available to users at this package level - - -def patch_sdk(): - """Do not remove from this file. - - `patch_sdk` is a last resort escape hatch that allows you to do customizations - you can't accomplish using the techniques described in - https://aka.ms/azsdk/python/dpcodegen/python/customize - """ diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/__init__.py similarity index 67% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/__init__.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/__init__.py index b3b95907243..b5aaa58017a 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/__init__.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/__init__.py @@ -1,26 +1,32 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from ._connected_kubernetes_client import ConnectedKubernetesClient -from ._version import VERSION - -__version__ = VERSION - -try: - from ._patch import __all__ as _patch_all - from ._patch import * # pylint: disable=unused-wildcard-import -except ImportError: - _patch_all = [] -from ._patch import patch_sdk as _patch_sdk - -__all__ = [ - "ConnectedKubernetesClient", -] -__all__.extend([p for p in _patch_all if p not in __all__]) - -_patch_sdk() +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=wrong-import-position + +from typing import TYPE_CHECKING + +if TYPE_CHECKING: + from ._patch import * # pylint: disable=unused-wildcard-import + +from ._client import KubernetesClient # type: ignore +from ._version import VERSION + +__version__ = VERSION + +try: + from ._patch import __all__ as _patch_all + from ._patch import * +except ImportError: + _patch_all = [] +from ._patch import patch_sdk as _patch_sdk + +__all__ = [ + "KubernetesClient", +] +__all__.extend([p for p in _patch_all if p not in __all__]) # pyright: ignore + +_patch_sdk() diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_connected_kubernetes_client.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_client.py similarity index 65% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_connected_kubernetes_client.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_client.py index 5b67e70ca47..54fbe410fbb 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_connected_kubernetes_client.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_client.py @@ -1,116 +1,128 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from copy import deepcopy -from typing import Any, TYPE_CHECKING - -from azure.core.pipeline import policies -from azure.core.rest import HttpRequest, HttpResponse -from azure.mgmt.core import ARMPipelineClient -from azure.mgmt.core.policies import ARMAutoResourceProviderRegistrationPolicy - -from . import models as _models -from ._configuration import ConnectedKubernetesClientConfiguration -from ._serialization import Deserializer, Serializer -from .operations import ConnectedClusterOperations, Operations - -if TYPE_CHECKING: - # pylint: disable=unused-import,ungrouped-imports - from azure.core.credentials import TokenCredential - - -class ConnectedKubernetesClient: # pylint: disable=client-accepts-api-version-keyword - """Azure Connected Cluster Resource Provider API for onboarding a Kubernetes Cluster to Azure Arc. - - :ivar connected_cluster: ConnectedClusterOperations operations - :vartype connected_cluster: azure.mgmt.hybridkubernetes.operations.ConnectedClusterOperations - :ivar operations: Operations operations - :vartype operations: azure.mgmt.hybridkubernetes.operations.Operations - :param credential: Credential needed for the client to connect to Azure. Required. - :type credential: ~azure.core.credentials.TokenCredential - :param subscription_id: The ID of the target subscription. Required. - :type subscription_id: str - :param base_url: Service URL. Default value is "https://management.azure.com". - :type base_url: str - :keyword api_version: Api Version. Default value is "2024-07-01-preview". Note that overriding - this default value may result in unsupported behavior. - :paramtype api_version: str - :keyword int polling_interval: Default waiting time between two polls for LRO operations if no - Retry-After header is present. - """ - - def __init__( - self, - credential: "TokenCredential", - subscription_id: str, - base_url: str = "https://management.azure.com", - **kwargs: Any - ) -> None: - self._config = ConnectedKubernetesClientConfiguration( - credential=credential, subscription_id=subscription_id, **kwargs - ) - _policies = kwargs.pop("policies", None) - if _policies is None: - _policies = [ - policies.RequestIdPolicy(**kwargs), - self._config.headers_policy, - self._config.user_agent_policy, - self._config.proxy_policy, - policies.ContentDecodePolicy(**kwargs), - ARMAutoResourceProviderRegistrationPolicy(), - self._config.redirect_policy, - self._config.retry_policy, - self._config.authentication_policy, - self._config.custom_hook_policy, - self._config.logging_policy, - policies.DistributedTracingPolicy(**kwargs), - policies.SensitiveHeaderCleanupPolicy(**kwargs) if self._config.redirect_policy else None, - self._config.http_logging_policy, - ] - self._client: ARMPipelineClient = ARMPipelineClient(base_url=base_url, policies=_policies, **kwargs) - - client_models = {k: v for k, v in _models.__dict__.items() if isinstance(v, type)} - self._serialize = Serializer(client_models) - self._deserialize = Deserializer(client_models) - self._serialize.client_side_validation = False - self.connected_cluster = ConnectedClusterOperations( - self._client, self._config, self._serialize, self._deserialize - ) - self.operations = Operations(self._client, self._config, self._serialize, self._deserialize) - - def _send_request(self, request: HttpRequest, *, stream: bool = False, **kwargs: Any) -> HttpResponse: - """Runs the network request through the client's chained policies. - - >>> from azure.core.rest import HttpRequest - >>> request = HttpRequest("GET", "https://www.example.org/") - - >>> response = client._send_request(request) - - - For more information on this code flow, see https://aka.ms/azsdk/dpcodegen/python/send_request - - :param request: The network request you want to make. Required. - :type request: ~azure.core.rest.HttpRequest - :keyword bool stream: Whether the response payload will be streamed. Defaults to False. - :return: The response of your network call. Does not do error handling on your response. - :rtype: ~azure.core.rest.HttpResponse - """ - - request_copy = deepcopy(request) - request_copy.url = self._client.format_url(request_copy.url) - return self._client.send_request(request_copy, stream=stream, **kwargs) # type: ignore - - def close(self) -> None: - self._client.close() - - def __enter__(self) -> "ConnectedKubernetesClient": - self._client.__enter__() - return self - - def __exit__(self, *exc_details: Any) -> None: - self._client.__exit__(*exc_details) +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +from copy import deepcopy +from typing import Any, Optional, TYPE_CHECKING, cast +from typing_extensions import Self + +from azure.core.pipeline import policies +from azure.core.rest import HttpRequest, HttpResponse +from azure.core.settings import settings +from azure.mgmt.core import ARMPipelineClient +from azure.mgmt.core.policies import ARMAutoResourceProviderRegistrationPolicy +from azure.mgmt.core.tools import get_arm_endpoints + +from ._configuration import KubernetesClientConfiguration +from ._utils.serialization import Deserializer, Serializer +from .operations import ConnectedClusterOperations, Operations + +if TYPE_CHECKING: + from azure.core.credentials import TokenCredential + + +class KubernetesClient: + """Azure Connected Cluster Resource Provider API for onboarding a Kubernetes Cluster to Azure Arc. + + :ivar operations: Operations operations + :vartype operations: azure.mgmt.hybridkubernetes.operations.Operations + :ivar connected_cluster: ConnectedClusterOperations operations + :vartype connected_cluster: azure.mgmt.hybridkubernetes.operations.ConnectedClusterOperations + :param credential: Credential used to authenticate requests to the service. Required. + :type credential: ~azure.core.credentials.TokenCredential + :param subscription_id: The ID of the target subscription. The value must be an UUID. Required. + :type subscription_id: str + :param base_url: Service host. Default value is None. + :type base_url: str + :keyword api_version: The API version to use for this operation. Default value is + "2025-08-01-preview". Note that overriding this default value may result in unsupported + behavior. + :paramtype api_version: str + :keyword int polling_interval: Default waiting time between two polls for LRO operations if no + Retry-After header is present. + """ + + def __init__( + self, credential: "TokenCredential", subscription_id: str, base_url: Optional[str] = None, **kwargs: Any + ) -> None: + _endpoint = "{endpoint}" + _cloud = kwargs.pop("cloud_setting", None) or settings.current.azure_cloud # type: ignore + _endpoints = get_arm_endpoints(_cloud) + if not base_url: + base_url = _endpoints["resource_manager"] + credential_scopes = kwargs.pop("credential_scopes", _endpoints["credential_scopes"]) + self._config = KubernetesClientConfiguration( + credential=credential, + subscription_id=subscription_id, + base_url=cast(str, base_url), + credential_scopes=credential_scopes, + **kwargs + ) + + _policies = kwargs.pop("policies", None) + if _policies is None: + _policies = [ + policies.RequestIdPolicy(**kwargs), + self._config.headers_policy, + self._config.user_agent_policy, + self._config.proxy_policy, + policies.ContentDecodePolicy(**kwargs), + ARMAutoResourceProviderRegistrationPolicy(), + self._config.redirect_policy, + self._config.retry_policy, + self._config.authentication_policy, + self._config.custom_hook_policy, + self._config.logging_policy, + policies.DistributedTracingPolicy(**kwargs), + policies.SensitiveHeaderCleanupPolicy(**kwargs) if self._config.redirect_policy else None, + self._config.http_logging_policy, + ] + self._client: ARMPipelineClient = ARMPipelineClient(base_url=cast(str, _endpoint), policies=_policies, **kwargs) + + self._serialize = Serializer() + self._deserialize = Deserializer() + self._serialize.client_side_validation = False + self.operations = Operations(self._client, self._config, self._serialize, self._deserialize) + self.connected_cluster = ConnectedClusterOperations( + self._client, self._config, self._serialize, self._deserialize + ) + + def send_request(self, request: HttpRequest, *, stream: bool = False, **kwargs: Any) -> HttpResponse: + """Runs the network request through the client's chained policies. + + >>> from azure.core.rest import HttpRequest + >>> request = HttpRequest("GET", "https://www.example.org/") + + >>> response = client.send_request(request) + + + For more information on this code flow, see https://aka.ms/azsdk/dpcodegen/python/send_request + + :param request: The network request you want to make. Required. + :type request: ~azure.core.rest.HttpRequest + :keyword bool stream: Whether the response payload will be streamed. Defaults to False. + :return: The response of your network call. Does not do error handling on your response. + :rtype: ~azure.core.rest.HttpResponse + """ + + request_copy = deepcopy(request) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + + request_copy.url = self._client.format_url(request_copy.url, **path_format_arguments) + return self._client.send_request(request_copy, stream=stream, **kwargs) # type: ignore + + def close(self) -> None: + self._client.close() + + def __enter__(self) -> Self: + self._client.__enter__() + return self + + def __exit__(self, *exc_details: Any) -> None: + self._client.__exit__(*exc_details) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_configuration.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_configuration.py similarity index 73% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_configuration.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_configuration.py index 2e2baf21415..cb17829767d 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_configuration.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_configuration.py @@ -1,65 +1,74 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from typing import Any, TYPE_CHECKING - -from azure.core.pipeline import policies -from azure.mgmt.core.policies import ARMChallengeAuthenticationPolicy, ARMHttpLoggingPolicy - -from ._version import VERSION - -if TYPE_CHECKING: - # pylint: disable=unused-import,ungrouped-imports - from azure.core.credentials import TokenCredential - - -class ConnectedKubernetesClientConfiguration: # pylint: disable=too-many-instance-attributes,name-too-long - """Configuration for ConnectedKubernetesClient. - - Note that all parameters used to create this instance are saved as instance - attributes. - - :param credential: Credential needed for the client to connect to Azure. Required. - :type credential: ~azure.core.credentials.TokenCredential - :param subscription_id: The ID of the target subscription. Required. - :type subscription_id: str - :keyword api_version: Api Version. Default value is "2024-07-01-preview". Note that overriding - this default value may result in unsupported behavior. - :paramtype api_version: str - """ - - def __init__(self, credential: "TokenCredential", subscription_id: str, **kwargs: Any) -> None: - api_version: str = kwargs.pop("api_version", "2024-07-01-preview") - - if credential is None: - raise ValueError("Parameter 'credential' must not be None.") - if subscription_id is None: - raise ValueError("Parameter 'subscription_id' must not be None.") - - self.credential = credential - self.subscription_id = subscription_id - self.api_version = api_version - self.credential_scopes = kwargs.pop("credential_scopes", ["https://management.azure.com/.default"]) - kwargs.setdefault("sdk_moniker", "mgmt-hybridkubernetes/{}".format(VERSION)) - self.polling_interval = kwargs.get("polling_interval", 30) - self._configure(**kwargs) - - def _configure(self, **kwargs: Any) -> None: - self.user_agent_policy = kwargs.get("user_agent_policy") or policies.UserAgentPolicy(**kwargs) - self.headers_policy = kwargs.get("headers_policy") or policies.HeadersPolicy(**kwargs) - self.proxy_policy = kwargs.get("proxy_policy") or policies.ProxyPolicy(**kwargs) - self.logging_policy = kwargs.get("logging_policy") or policies.NetworkTraceLoggingPolicy(**kwargs) - self.http_logging_policy = kwargs.get("http_logging_policy") or ARMHttpLoggingPolicy(**kwargs) - self.custom_hook_policy = kwargs.get("custom_hook_policy") or policies.CustomHookPolicy(**kwargs) - self.redirect_policy = kwargs.get("redirect_policy") or policies.RedirectPolicy(**kwargs) - self.retry_policy = kwargs.get("retry_policy") or policies.RetryPolicy(**kwargs) - self.authentication_policy = kwargs.get("authentication_policy") - if self.credential and not self.authentication_policy: - self.authentication_policy = ARMChallengeAuthenticationPolicy( - self.credential, *self.credential_scopes, **kwargs - ) +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +from typing import Any, TYPE_CHECKING + +from azure.core.pipeline import policies +from azure.mgmt.core.policies import ARMChallengeAuthenticationPolicy, ARMHttpLoggingPolicy + +from ._version import VERSION + +if TYPE_CHECKING: + from azure.core.credentials import TokenCredential + + +class KubernetesClientConfiguration: # pylint: disable=too-many-instance-attributes + """Configuration for KubernetesClient. + + Note that all parameters used to create this instance are saved as instance + attributes. + + :param credential: Credential used to authenticate requests to the service. Required. + :type credential: ~azure.core.credentials.TokenCredential + :param subscription_id: The ID of the target subscription. The value must be an UUID. Required. + :type subscription_id: str + :param base_url: Service host. Default value is "https://management.azure.com". + :type base_url: str + :keyword api_version: The API version to use for this operation. Default value is + "2025-08-01-preview". Note that overriding this default value may result in unsupported + behavior. + :paramtype api_version: str + """ + + def __init__( + self, + credential: "TokenCredential", + subscription_id: str, + base_url: str = "https://management.azure.com", + **kwargs: Any + ) -> None: + api_version: str = kwargs.pop("api_version", "2025-08-01-preview") + + if credential is None: + raise ValueError("Parameter 'credential' must not be None.") + if subscription_id is None: + raise ValueError("Parameter 'subscription_id' must not be None.") + + self.credential = credential + self.subscription_id = subscription_id + self.base_url = base_url + self.api_version = api_version + self.credential_scopes = kwargs.pop("credential_scopes", ["https://management.azure.com/.default"]) + kwargs.setdefault("sdk_moniker", "mgmt-hybridkubernetes/{}".format(VERSION)) + self.polling_interval = kwargs.get("polling_interval", 30) + self._configure(**kwargs) + + def _configure(self, **kwargs: Any) -> None: + self.user_agent_policy = kwargs.get("user_agent_policy") or policies.UserAgentPolicy(**kwargs) + self.headers_policy = kwargs.get("headers_policy") or policies.HeadersPolicy(**kwargs) + self.proxy_policy = kwargs.get("proxy_policy") or policies.ProxyPolicy(**kwargs) + self.logging_policy = kwargs.get("logging_policy") or policies.NetworkTraceLoggingPolicy(**kwargs) + self.http_logging_policy = kwargs.get("http_logging_policy") or ARMHttpLoggingPolicy(**kwargs) + self.custom_hook_policy = kwargs.get("custom_hook_policy") or policies.CustomHookPolicy(**kwargs) + self.redirect_policy = kwargs.get("redirect_policy") or policies.RedirectPolicy(**kwargs) + self.retry_policy = kwargs.get("retry_policy") or policies.RetryPolicy(**kwargs) + self.authentication_policy = kwargs.get("authentication_policy") + if self.credential and not self.authentication_policy: + self.authentication_policy = ARMChallengeAuthenticationPolicy( + self.credential, *self.credential_scopes, **kwargs + ) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_patch.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_patch.py similarity index 61% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_patch.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_patch.py index 1bb0db275de..8bcb627aa47 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_patch.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_patch.py @@ -1,20 +1,21 @@ -# ------------------------------------ -# Copyright (c) Microsoft Corporation. -# Licensed under the MIT License. -# ------------------------------------ -"""Customize generated code here. - -Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize -""" -from typing import List - -__all__: List[str] = [] # Add all objects you want publicly available to users at this package level - - -def patch_sdk(): - """Do not remove from this file. - - `patch_sdk` is a last resort escape hatch that allows you to do customizations - you can't accomplish using the techniques described in - https://aka.ms/azsdk/python/dpcodegen/python/customize - """ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# -------------------------------------------------------------------------- +"""Customize generated code here. + +Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize +""" +from typing import List + +__all__: List[str] = [] # Add all objects you want publicly available to users at this package level + + +def patch_sdk(): + """Do not remove from this file. + + `patch_sdk` is a last resort escape hatch that allows you to do customizations + you can't accomplish using the techniques described in + https://aka.ms/azsdk/python/dpcodegen/python/customize + """ diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/__init__.py new file mode 100644 index 00000000000..8026245c2ab --- /dev/null +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/__init__.py @@ -0,0 +1,6 @@ +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/model_base.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/model_base.py new file mode 100644 index 00000000000..49d5c725938 --- /dev/null +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/model_base.py @@ -0,0 +1,1232 @@ +# pylint: disable=too-many-lines +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=protected-access, broad-except + +import copy +import calendar +import decimal +import functools +import sys +import logging +import base64 +import re +import typing +import enum +import email.utils +from datetime import datetime, date, time, timedelta, timezone +from json import JSONEncoder +import xml.etree.ElementTree as ET +from collections.abc import MutableMapping +from typing_extensions import Self +import isodate +from azure.core.exceptions import DeserializationError +from azure.core import CaseInsensitiveEnumMeta +from azure.core.pipeline import PipelineResponse +from azure.core.serialization import _Null + +_LOGGER = logging.getLogger(__name__) + +__all__ = ["SdkJSONEncoder", "Model", "rest_field", "rest_discriminator"] + +TZ_UTC = timezone.utc +_T = typing.TypeVar("_T") + + +def _timedelta_as_isostr(td: timedelta) -> str: + """Converts a datetime.timedelta object into an ISO 8601 formatted string, e.g. 'P4DT12H30M05S' + + Function adapted from the Tin Can Python project: https://github.com/RusticiSoftware/TinCanPython + + :param timedelta td: The timedelta to convert + :rtype: str + :return: ISO8601 version of this timedelta + """ + + # Split seconds to larger units + seconds = td.total_seconds() + minutes, seconds = divmod(seconds, 60) + hours, minutes = divmod(minutes, 60) + days, hours = divmod(hours, 24) + + days, hours, minutes = list(map(int, (days, hours, minutes))) + seconds = round(seconds, 6) + + # Build date + date_str = "" + if days: + date_str = "%sD" % days + + if hours or minutes or seconds: + # Build time + time_str = "T" + + # Hours + bigger_exists = date_str or hours + if bigger_exists: + time_str += "{:02}H".format(hours) + + # Minutes + bigger_exists = bigger_exists or minutes + if bigger_exists: + time_str += "{:02}M".format(minutes) + + # Seconds + try: + if seconds.is_integer(): + seconds_string = "{:02}".format(int(seconds)) + else: + # 9 chars long w/ leading 0, 6 digits after decimal + seconds_string = "%09.6f" % seconds + # Remove trailing zeros + seconds_string = seconds_string.rstrip("0") + except AttributeError: # int.is_integer() raises + seconds_string = "{:02}".format(seconds) + + time_str += "{}S".format(seconds_string) + else: + time_str = "" + + return "P" + date_str + time_str + + +def _serialize_bytes(o, format: typing.Optional[str] = None) -> str: + encoded = base64.b64encode(o).decode() + if format == "base64url": + return encoded.strip("=").replace("+", "-").replace("/", "_") + return encoded + + +def _serialize_datetime(o, format: typing.Optional[str] = None): + if hasattr(o, "year") and hasattr(o, "hour"): + if format == "rfc7231": + return email.utils.format_datetime(o, usegmt=True) + if format == "unix-timestamp": + return int(calendar.timegm(o.utctimetuple())) + + # astimezone() fails for naive times in Python 2.7, so make make sure o is aware (tzinfo is set) + if not o.tzinfo: + iso_formatted = o.replace(tzinfo=TZ_UTC).isoformat() + else: + iso_formatted = o.astimezone(TZ_UTC).isoformat() + # Replace the trailing "+00:00" UTC offset with "Z" (RFC 3339: https://www.ietf.org/rfc/rfc3339.txt) + return iso_formatted.replace("+00:00", "Z") + # Next try datetime.date or datetime.time + return o.isoformat() + + +def _is_readonly(p): + try: + return p._visibility == ["read"] + except AttributeError: + return False + + +class SdkJSONEncoder(JSONEncoder): + """A JSON encoder that's capable of serializing datetime objects and bytes.""" + + def __init__(self, *args, exclude_readonly: bool = False, format: typing.Optional[str] = None, **kwargs): + super().__init__(*args, **kwargs) + self.exclude_readonly = exclude_readonly + self.format = format + + def default(self, o): # pylint: disable=too-many-return-statements + if _is_model(o): + if self.exclude_readonly: + readonly_props = [p._rest_name for p in o._attr_to_rest_field.values() if _is_readonly(p)] + return {k: v for k, v in o.items() if k not in readonly_props} + return dict(o.items()) + try: + return super(SdkJSONEncoder, self).default(o) + except TypeError: + if isinstance(o, _Null): + return None + if isinstance(o, decimal.Decimal): + return float(o) + if isinstance(o, (bytes, bytearray)): + return _serialize_bytes(o, self.format) + try: + # First try datetime.datetime + return _serialize_datetime(o, self.format) + except AttributeError: + pass + # Last, try datetime.timedelta + try: + return _timedelta_as_isostr(o) + except AttributeError: + # This will be raised when it hits value.total_seconds in the method above + pass + return super(SdkJSONEncoder, self).default(o) + + +_VALID_DATE = re.compile(r"\d{4}[-]\d{2}[-]\d{2}T\d{2}:\d{2}:\d{2}" + r"\.?\d*Z?[-+]?[\d{2}]?:?[\d{2}]?") +_VALID_RFC7231 = re.compile( + r"(Mon|Tue|Wed|Thu|Fri|Sat|Sun),\s\d{2}\s" + r"(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\s\d{4}\s\d{2}:\d{2}:\d{2}\sGMT" +) + + +def _deserialize_datetime(attr: typing.Union[str, datetime]) -> datetime: + """Deserialize ISO-8601 formatted string into Datetime object. + + :param str attr: response string to be deserialized. + :rtype: ~datetime.datetime + :returns: The datetime object from that input + """ + if isinstance(attr, datetime): + # i'm already deserialized + return attr + attr = attr.upper() + match = _VALID_DATE.match(attr) + if not match: + raise ValueError("Invalid datetime string: " + attr) + + check_decimal = attr.split(".") + if len(check_decimal) > 1: + decimal_str = "" + for digit in check_decimal[1]: + if digit.isdigit(): + decimal_str += digit + else: + break + if len(decimal_str) > 6: + attr = attr.replace(decimal_str, decimal_str[0:6]) + + date_obj = isodate.parse_datetime(attr) + test_utc = date_obj.utctimetuple() + if test_utc.tm_year > 9999 or test_utc.tm_year < 1: + raise OverflowError("Hit max or min date") + return date_obj + + +def _deserialize_datetime_rfc7231(attr: typing.Union[str, datetime]) -> datetime: + """Deserialize RFC7231 formatted string into Datetime object. + + :param str attr: response string to be deserialized. + :rtype: ~datetime.datetime + :returns: The datetime object from that input + """ + if isinstance(attr, datetime): + # i'm already deserialized + return attr + match = _VALID_RFC7231.match(attr) + if not match: + raise ValueError("Invalid datetime string: " + attr) + + return email.utils.parsedate_to_datetime(attr) + + +def _deserialize_datetime_unix_timestamp(attr: typing.Union[float, datetime]) -> datetime: + """Deserialize unix timestamp into Datetime object. + + :param str attr: response string to be deserialized. + :rtype: ~datetime.datetime + :returns: The datetime object from that input + """ + if isinstance(attr, datetime): + # i'm already deserialized + return attr + return datetime.fromtimestamp(attr, TZ_UTC) + + +def _deserialize_date(attr: typing.Union[str, date]) -> date: + """Deserialize ISO-8601 formatted string into Date object. + :param str attr: response string to be deserialized. + :rtype: date + :returns: The date object from that input + """ + # This must NOT use defaultmonth/defaultday. Using None ensure this raises an exception. + if isinstance(attr, date): + return attr + return isodate.parse_date(attr, defaultmonth=None, defaultday=None) # type: ignore + + +def _deserialize_time(attr: typing.Union[str, time]) -> time: + """Deserialize ISO-8601 formatted string into time object. + + :param str attr: response string to be deserialized. + :rtype: datetime.time + :returns: The time object from that input + """ + if isinstance(attr, time): + return attr + return isodate.parse_time(attr) + + +def _deserialize_bytes(attr): + if isinstance(attr, (bytes, bytearray)): + return attr + return bytes(base64.b64decode(attr)) + + +def _deserialize_bytes_base64(attr): + if isinstance(attr, (bytes, bytearray)): + return attr + padding = "=" * (3 - (len(attr) + 3) % 4) # type: ignore + attr = attr + padding # type: ignore + encoded = attr.replace("-", "+").replace("_", "/") + return bytes(base64.b64decode(encoded)) + + +def _deserialize_duration(attr): + if isinstance(attr, timedelta): + return attr + return isodate.parse_duration(attr) + + +def _deserialize_decimal(attr): + if isinstance(attr, decimal.Decimal): + return attr + return decimal.Decimal(str(attr)) + + +def _deserialize_int_as_str(attr): + if isinstance(attr, int): + return attr + return int(attr) + + +_DESERIALIZE_MAPPING = { + datetime: _deserialize_datetime, + date: _deserialize_date, + time: _deserialize_time, + bytes: _deserialize_bytes, + bytearray: _deserialize_bytes, + timedelta: _deserialize_duration, + typing.Any: lambda x: x, + decimal.Decimal: _deserialize_decimal, +} + +_DESERIALIZE_MAPPING_WITHFORMAT = { + "rfc3339": _deserialize_datetime, + "rfc7231": _deserialize_datetime_rfc7231, + "unix-timestamp": _deserialize_datetime_unix_timestamp, + "base64": _deserialize_bytes, + "base64url": _deserialize_bytes_base64, +} + + +def get_deserializer(annotation: typing.Any, rf: typing.Optional["_RestField"] = None): + if annotation is int and rf and rf._format == "str": + return _deserialize_int_as_str + if rf and rf._format: + return _DESERIALIZE_MAPPING_WITHFORMAT.get(rf._format) + return _DESERIALIZE_MAPPING.get(annotation) # pyright: ignore + + +def _get_type_alias_type(module_name: str, alias_name: str): + types = { + k: v + for k, v in sys.modules[module_name].__dict__.items() + if isinstance(v, typing._GenericAlias) # type: ignore + } + if alias_name not in types: + return alias_name + return types[alias_name] + + +def _get_model(module_name: str, model_name: str): + models = {k: v for k, v in sys.modules[module_name].__dict__.items() if isinstance(v, type)} + module_end = module_name.rsplit(".", 1)[0] + models.update({k: v for k, v in sys.modules[module_end].__dict__.items() if isinstance(v, type)}) + if isinstance(model_name, str): + model_name = model_name.split(".")[-1] + if model_name not in models: + return model_name + return models[model_name] + + +_UNSET = object() + + +class _MyMutableMapping(MutableMapping[str, typing.Any]): + def __init__(self, data: typing.Dict[str, typing.Any]) -> None: + self._data = data + + def __contains__(self, key: typing.Any) -> bool: + return key in self._data + + def __getitem__(self, key: str) -> typing.Any: + return self._data.__getitem__(key) + + def __setitem__(self, key: str, value: typing.Any) -> None: + self._data.__setitem__(key, value) + + def __delitem__(self, key: str) -> None: + self._data.__delitem__(key) + + def __iter__(self) -> typing.Iterator[typing.Any]: + return self._data.__iter__() + + def __len__(self) -> int: + return self._data.__len__() + + def __ne__(self, other: typing.Any) -> bool: + return not self.__eq__(other) + + def keys(self) -> typing.KeysView[str]: + """ + :returns: a set-like object providing a view on D's keys + :rtype: ~typing.KeysView + """ + return self._data.keys() + + def values(self) -> typing.ValuesView[typing.Any]: + """ + :returns: an object providing a view on D's values + :rtype: ~typing.ValuesView + """ + return self._data.values() + + def items(self) -> typing.ItemsView[str, typing.Any]: + """ + :returns: set-like object providing a view on D's items + :rtype: ~typing.ItemsView + """ + return self._data.items() + + def get(self, key: str, default: typing.Any = None) -> typing.Any: + """ + Get the value for key if key is in the dictionary, else default. + :param str key: The key to look up. + :param any default: The value to return if key is not in the dictionary. Defaults to None + :returns: D[k] if k in D, else d. + :rtype: any + """ + try: + return self[key] + except KeyError: + return default + + @typing.overload + def pop(self, key: str) -> typing.Any: ... # pylint: disable=arguments-differ + + @typing.overload + def pop(self, key: str, default: _T) -> _T: ... # pylint: disable=signature-differs + + @typing.overload + def pop(self, key: str, default: typing.Any) -> typing.Any: ... # pylint: disable=signature-differs + + def pop(self, key: str, default: typing.Any = _UNSET) -> typing.Any: + """ + Removes specified key and return the corresponding value. + :param str key: The key to pop. + :param any default: The value to return if key is not in the dictionary + :returns: The value corresponding to the key. + :rtype: any + :raises KeyError: If key is not found and default is not given. + """ + if default is _UNSET: + return self._data.pop(key) + return self._data.pop(key, default) + + def popitem(self) -> typing.Tuple[str, typing.Any]: + """ + Removes and returns some (key, value) pair + :returns: The (key, value) pair. + :rtype: tuple + :raises KeyError: if D is empty. + """ + return self._data.popitem() + + def clear(self) -> None: + """ + Remove all items from D. + """ + self._data.clear() + + def update(self, *args: typing.Any, **kwargs: typing.Any) -> None: # pylint: disable=arguments-differ + """ + Updates D from mapping/iterable E and F. + :param any args: Either a mapping object or an iterable of key-value pairs. + """ + self._data.update(*args, **kwargs) + + @typing.overload + def setdefault(self, key: str, default: None = None) -> None: ... + + @typing.overload + def setdefault(self, key: str, default: typing.Any) -> typing.Any: ... # pylint: disable=signature-differs + + def setdefault(self, key: str, default: typing.Any = _UNSET) -> typing.Any: + """ + Same as calling D.get(k, d), and setting D[k]=d if k not found + :param str key: The key to look up. + :param any default: The value to set if key is not in the dictionary + :returns: D[k] if k in D, else d. + :rtype: any + """ + if default is _UNSET: + return self._data.setdefault(key) + return self._data.setdefault(key, default) + + def __eq__(self, other: typing.Any) -> bool: + try: + other_model = self.__class__(other) + except Exception: + return False + return self._data == other_model._data + + def __repr__(self) -> str: + return str(self._data) + + +def _is_model(obj: typing.Any) -> bool: + return getattr(obj, "_is_model", False) + + +def _serialize(o, format: typing.Optional[str] = None): # pylint: disable=too-many-return-statements + if isinstance(o, list): + return [_serialize(x, format) for x in o] + if isinstance(o, dict): + return {k: _serialize(v, format) for k, v in o.items()} + if isinstance(o, set): + return {_serialize(x, format) for x in o} + if isinstance(o, tuple): + return tuple(_serialize(x, format) for x in o) + if isinstance(o, (bytes, bytearray)): + return _serialize_bytes(o, format) + if isinstance(o, decimal.Decimal): + return float(o) + if isinstance(o, enum.Enum): + return o.value + if isinstance(o, int): + if format == "str": + return str(o) + return o + try: + # First try datetime.datetime + return _serialize_datetime(o, format) + except AttributeError: + pass + # Last, try datetime.timedelta + try: + return _timedelta_as_isostr(o) + except AttributeError: + # This will be raised when it hits value.total_seconds in the method above + pass + return o + + +def _get_rest_field( + attr_to_rest_field: typing.Dict[str, "_RestField"], rest_name: str +) -> typing.Optional["_RestField"]: + try: + return next(rf for rf in attr_to_rest_field.values() if rf._rest_name == rest_name) + except StopIteration: + return None + + +def _create_value(rf: typing.Optional["_RestField"], value: typing.Any) -> typing.Any: + if not rf: + return _serialize(value, None) + if rf._is_multipart_file_input: + return value + if rf._is_model: + return _deserialize(rf._type, value) + if isinstance(value, ET.Element): + value = _deserialize(rf._type, value) + return _serialize(value, rf._format) + + +class Model(_MyMutableMapping): + _is_model = True + # label whether current class's _attr_to_rest_field has been calculated + # could not see _attr_to_rest_field directly because subclass inherits it from parent class + _calculated: typing.Set[str] = set() + + def __init__(self, *args: typing.Any, **kwargs: typing.Any) -> None: + class_name = self.__class__.__name__ + if len(args) > 1: + raise TypeError(f"{class_name}.__init__() takes 2 positional arguments but {len(args) + 1} were given") + dict_to_pass = { + rest_field._rest_name: rest_field._default + for rest_field in self._attr_to_rest_field.values() + if rest_field._default is not _UNSET + } + if args: # pylint: disable=too-many-nested-blocks + if isinstance(args[0], ET.Element): + existed_attr_keys = [] + model_meta = getattr(self, "_xml", {}) + + for rf in self._attr_to_rest_field.values(): + prop_meta = getattr(rf, "_xml", {}) + xml_name = prop_meta.get("name", rf._rest_name) + xml_ns = prop_meta.get("ns", model_meta.get("ns", None)) + if xml_ns: + xml_name = "{" + xml_ns + "}" + xml_name + + # attribute + if prop_meta.get("attribute", False) and args[0].get(xml_name) is not None: + existed_attr_keys.append(xml_name) + dict_to_pass[rf._rest_name] = _deserialize(rf._type, args[0].get(xml_name)) + continue + + # unwrapped element is array + if prop_meta.get("unwrapped", False): + # unwrapped array could either use prop items meta/prop meta + if prop_meta.get("itemsName"): + xml_name = prop_meta.get("itemsName") + xml_ns = prop_meta.get("itemNs") + if xml_ns: + xml_name = "{" + xml_ns + "}" + xml_name + items = args[0].findall(xml_name) # pyright: ignore + if len(items) > 0: + existed_attr_keys.append(xml_name) + dict_to_pass[rf._rest_name] = _deserialize(rf._type, items) + continue + + # text element is primitive type + if prop_meta.get("text", False): + if args[0].text is not None: + dict_to_pass[rf._rest_name] = _deserialize(rf._type, args[0].text) + continue + + # wrapped element could be normal property or array, it should only have one element + item = args[0].find(xml_name) + if item is not None: + existed_attr_keys.append(xml_name) + dict_to_pass[rf._rest_name] = _deserialize(rf._type, item) + + # rest thing is additional properties + for e in args[0]: + if e.tag not in existed_attr_keys: + dict_to_pass[e.tag] = _convert_element(e) + else: + dict_to_pass.update( + {k: _create_value(_get_rest_field(self._attr_to_rest_field, k), v) for k, v in args[0].items()} + ) + else: + non_attr_kwargs = [k for k in kwargs if k not in self._attr_to_rest_field] + if non_attr_kwargs: + # actual type errors only throw the first wrong keyword arg they see, so following that. + raise TypeError(f"{class_name}.__init__() got an unexpected keyword argument '{non_attr_kwargs[0]}'") + dict_to_pass.update( + { + self._attr_to_rest_field[k]._rest_name: _create_value(self._attr_to_rest_field[k], v) + for k, v in kwargs.items() + if v is not None + } + ) + super().__init__(dict_to_pass) + + def copy(self) -> "Model": + return Model(self.__dict__) + + def __new__(cls, *args: typing.Any, **kwargs: typing.Any) -> Self: + if f"{cls.__module__}.{cls.__qualname__}" not in cls._calculated: + # we know the last nine classes in mro are going to be 'Model', '_MyMutableMapping', 'MutableMapping', + # 'Mapping', 'Collection', 'Sized', 'Iterable', 'Container' and 'object' + mros = cls.__mro__[:-9][::-1] # ignore parents, and reverse the mro order + attr_to_rest_field: typing.Dict[str, _RestField] = { # map attribute name to rest_field property + k: v for mro_class in mros for k, v in mro_class.__dict__.items() if k[0] != "_" and hasattr(v, "_type") + } + annotations = { + k: v + for mro_class in mros + if hasattr(mro_class, "__annotations__") + for k, v in mro_class.__annotations__.items() + } + for attr, rf in attr_to_rest_field.items(): + rf._module = cls.__module__ + if not rf._type: + rf._type = rf._get_deserialize_callable_from_annotation(annotations.get(attr, None)) + if not rf._rest_name_input: + rf._rest_name_input = attr + cls._attr_to_rest_field: typing.Dict[str, _RestField] = dict(attr_to_rest_field.items()) + cls._calculated.add(f"{cls.__module__}.{cls.__qualname__}") + + return super().__new__(cls) + + def __init_subclass__(cls, discriminator: typing.Optional[str] = None) -> None: + for base in cls.__bases__: + if hasattr(base, "__mapping__"): + base.__mapping__[discriminator or cls.__name__] = cls # type: ignore + + @classmethod + def _get_discriminator(cls, exist_discriminators) -> typing.Optional["_RestField"]: + for v in cls.__dict__.values(): + if isinstance(v, _RestField) and v._is_discriminator and v._rest_name not in exist_discriminators: + return v + return None + + @classmethod + def _deserialize(cls, data, exist_discriminators): + if not hasattr(cls, "__mapping__"): + return cls(data) + discriminator = cls._get_discriminator(exist_discriminators) + if discriminator is None: + return cls(data) + exist_discriminators.append(discriminator._rest_name) + if isinstance(data, ET.Element): + model_meta = getattr(cls, "_xml", {}) + prop_meta = getattr(discriminator, "_xml", {}) + xml_name = prop_meta.get("name", discriminator._rest_name) + xml_ns = prop_meta.get("ns", model_meta.get("ns", None)) + if xml_ns: + xml_name = "{" + xml_ns + "}" + xml_name + + if data.get(xml_name) is not None: + discriminator_value = data.get(xml_name) + else: + discriminator_value = data.find(xml_name).text # pyright: ignore + else: + discriminator_value = data.get(discriminator._rest_name) + mapped_cls = cls.__mapping__.get(discriminator_value, cls) # pyright: ignore # pylint: disable=no-member + return mapped_cls._deserialize(data, exist_discriminators) + + def as_dict(self, *, exclude_readonly: bool = False) -> typing.Dict[str, typing.Any]: + """Return a dict that can be turned into json using json.dump. + + :keyword bool exclude_readonly: Whether to remove the readonly properties. + :returns: A dict JSON compatible object + :rtype: dict + """ + + result = {} + readonly_props = [] + if exclude_readonly: + readonly_props = [p._rest_name for p in self._attr_to_rest_field.values() if _is_readonly(p)] + for k, v in self.items(): + if exclude_readonly and k in readonly_props: # pyright: ignore + continue + is_multipart_file_input = False + try: + is_multipart_file_input = next( + rf for rf in self._attr_to_rest_field.values() if rf._rest_name == k + )._is_multipart_file_input + except StopIteration: + pass + result[k] = v if is_multipart_file_input else Model._as_dict_value(v, exclude_readonly=exclude_readonly) + return result + + @staticmethod + def _as_dict_value(v: typing.Any, exclude_readonly: bool = False) -> typing.Any: + if v is None or isinstance(v, _Null): + return None + if isinstance(v, (list, tuple, set)): + return type(v)(Model._as_dict_value(x, exclude_readonly=exclude_readonly) for x in v) + if isinstance(v, dict): + return {dk: Model._as_dict_value(dv, exclude_readonly=exclude_readonly) for dk, dv in v.items()} + return v.as_dict(exclude_readonly=exclude_readonly) if hasattr(v, "as_dict") else v + + +def _deserialize_model(model_deserializer: typing.Optional[typing.Callable], obj): + if _is_model(obj): + return obj + return _deserialize(model_deserializer, obj) + + +def _deserialize_with_optional(if_obj_deserializer: typing.Optional[typing.Callable], obj): + if obj is None: + return obj + return _deserialize_with_callable(if_obj_deserializer, obj) + + +def _deserialize_with_union(deserializers, obj): + for deserializer in deserializers: + try: + return _deserialize(deserializer, obj) + except DeserializationError: + pass + raise DeserializationError() + + +def _deserialize_dict( + value_deserializer: typing.Optional[typing.Callable], + module: typing.Optional[str], + obj: typing.Dict[typing.Any, typing.Any], +): + if obj is None: + return obj + if isinstance(obj, ET.Element): + obj = {child.tag: child for child in obj} + return {k: _deserialize(value_deserializer, v, module) for k, v in obj.items()} + + +def _deserialize_multiple_sequence( + entry_deserializers: typing.List[typing.Optional[typing.Callable]], + module: typing.Optional[str], + obj, +): + if obj is None: + return obj + return type(obj)(_deserialize(deserializer, entry, module) for entry, deserializer in zip(obj, entry_deserializers)) + + +def _deserialize_sequence( + deserializer: typing.Optional[typing.Callable], + module: typing.Optional[str], + obj, +): + if obj is None: + return obj + if isinstance(obj, ET.Element): + obj = list(obj) + return type(obj)(_deserialize(deserializer, entry, module) for entry in obj) + + +def _sorted_annotations(types: typing.List[typing.Any]) -> typing.List[typing.Any]: + return sorted( + types, + key=lambda x: hasattr(x, "__name__") and x.__name__.lower() in ("str", "float", "int", "bool"), + ) + + +def _get_deserialize_callable_from_annotation( # pylint: disable=too-many-return-statements, too-many-branches + annotation: typing.Any, + module: typing.Optional[str], + rf: typing.Optional["_RestField"] = None, +) -> typing.Optional[typing.Callable[[typing.Any], typing.Any]]: + if not annotation: + return None + + # is it a type alias? + if isinstance(annotation, str): + if module is not None: + annotation = _get_type_alias_type(module, annotation) + + # is it a forward ref / in quotes? + if isinstance(annotation, (str, typing.ForwardRef)): + try: + model_name = annotation.__forward_arg__ # type: ignore + except AttributeError: + model_name = annotation + if module is not None: + annotation = _get_model(module, model_name) # type: ignore + + try: + if module and _is_model(annotation): + if rf: + rf._is_model = True + + return functools.partial(_deserialize_model, annotation) # pyright: ignore + except Exception: + pass + + # is it a literal? + try: + if annotation.__origin__ is typing.Literal: # pyright: ignore + return None + except AttributeError: + pass + + # is it optional? + try: + if any(a for a in annotation.__args__ if a == type(None)): # pyright: ignore + if len(annotation.__args__) <= 2: # pyright: ignore + if_obj_deserializer = _get_deserialize_callable_from_annotation( + next(a for a in annotation.__args__ if a != type(None)), module, rf # pyright: ignore + ) + + return functools.partial(_deserialize_with_optional, if_obj_deserializer) + # the type is Optional[Union[...]], we need to remove the None type from the Union + annotation_copy = copy.copy(annotation) + annotation_copy.__args__ = [a for a in annotation_copy.__args__ if a != type(None)] # pyright: ignore + return _get_deserialize_callable_from_annotation(annotation_copy, module, rf) + except AttributeError: + pass + + # is it union? + if getattr(annotation, "__origin__", None) is typing.Union: + # initial ordering is we make `string` the last deserialization option, because it is often them most generic + deserializers = [ + _get_deserialize_callable_from_annotation(arg, module, rf) + for arg in _sorted_annotations(annotation.__args__) # pyright: ignore + ] + + return functools.partial(_deserialize_with_union, deserializers) + + try: + if annotation._name == "Dict": # pyright: ignore + value_deserializer = _get_deserialize_callable_from_annotation( + annotation.__args__[1], module, rf # pyright: ignore + ) + + return functools.partial( + _deserialize_dict, + value_deserializer, + module, + ) + except (AttributeError, IndexError): + pass + try: + if annotation._name in ["List", "Set", "Tuple", "Sequence"]: # pyright: ignore + if len(annotation.__args__) > 1: # pyright: ignore + entry_deserializers = [ + _get_deserialize_callable_from_annotation(dt, module, rf) + for dt in annotation.__args__ # pyright: ignore + ] + return functools.partial(_deserialize_multiple_sequence, entry_deserializers, module) + deserializer = _get_deserialize_callable_from_annotation( + annotation.__args__[0], module, rf # pyright: ignore + ) + + return functools.partial(_deserialize_sequence, deserializer, module) + except (TypeError, IndexError, AttributeError, SyntaxError): + pass + + def _deserialize_default( + deserializer, + obj, + ): + if obj is None: + return obj + try: + return _deserialize_with_callable(deserializer, obj) + except Exception: + pass + return obj + + if get_deserializer(annotation, rf): + return functools.partial(_deserialize_default, get_deserializer(annotation, rf)) + + return functools.partial(_deserialize_default, annotation) + + +def _deserialize_with_callable( + deserializer: typing.Optional[typing.Callable[[typing.Any], typing.Any]], + value: typing.Any, +): # pylint: disable=too-many-return-statements + try: + if value is None or isinstance(value, _Null): + return None + if isinstance(value, ET.Element): + if deserializer is str: + return value.text or "" + if deserializer is int: + return int(value.text) if value.text else None + if deserializer is float: + return float(value.text) if value.text else None + if deserializer is bool: + return value.text == "true" if value.text else None + if deserializer is None: + return value + if deserializer in [int, float, bool]: + return deserializer(value) + if isinstance(deserializer, CaseInsensitiveEnumMeta): + try: + return deserializer(value) + except ValueError: + # for unknown value, return raw value + return value + if isinstance(deserializer, type) and issubclass(deserializer, Model): + return deserializer._deserialize(value, []) + return typing.cast(typing.Callable[[typing.Any], typing.Any], deserializer)(value) + except Exception as e: + raise DeserializationError() from e + + +def _deserialize( + deserializer: typing.Any, + value: typing.Any, + module: typing.Optional[str] = None, + rf: typing.Optional["_RestField"] = None, + format: typing.Optional[str] = None, +) -> typing.Any: + if isinstance(value, PipelineResponse): + value = value.http_response.json() + if rf is None and format: + rf = _RestField(format=format) + if not isinstance(deserializer, functools.partial): + deserializer = _get_deserialize_callable_from_annotation(deserializer, module, rf) + return _deserialize_with_callable(deserializer, value) + + +def _failsafe_deserialize( + deserializer: typing.Any, + value: typing.Any, + module: typing.Optional[str] = None, + rf: typing.Optional["_RestField"] = None, + format: typing.Optional[str] = None, +) -> typing.Any: + try: + return _deserialize(deserializer, value, module, rf, format) + except DeserializationError: + _LOGGER.warning( + "Ran into a deserialization error. Ignoring since this is failsafe deserialization", exc_info=True + ) + return None + + +def _failsafe_deserialize_xml( + deserializer: typing.Any, + value: typing.Any, +) -> typing.Any: + try: + return _deserialize_xml(deserializer, value) + except DeserializationError: + _LOGGER.warning( + "Ran into a deserialization error. Ignoring since this is failsafe deserialization", exc_info=True + ) + return None + + +class _RestField: + def __init__( + self, + *, + name: typing.Optional[str] = None, + type: typing.Optional[typing.Callable] = None, # pylint: disable=redefined-builtin + is_discriminator: bool = False, + visibility: typing.Optional[typing.List[str]] = None, + default: typing.Any = _UNSET, + format: typing.Optional[str] = None, + is_multipart_file_input: bool = False, + xml: typing.Optional[typing.Dict[str, typing.Any]] = None, + ): + self._type = type + self._rest_name_input = name + self._module: typing.Optional[str] = None + self._is_discriminator = is_discriminator + self._visibility = visibility + self._is_model = False + self._default = default + self._format = format + self._is_multipart_file_input = is_multipart_file_input + self._xml = xml if xml is not None else {} + + @property + def _class_type(self) -> typing.Any: + return getattr(self._type, "args", [None])[0] + + @property + def _rest_name(self) -> str: + if self._rest_name_input is None: + raise ValueError("Rest name was never set") + return self._rest_name_input + + def __get__(self, obj: Model, type=None): # pylint: disable=redefined-builtin + # by this point, type and rest_name will have a value bc we default + # them in __new__ of the Model class + item = obj.get(self._rest_name) + if item is None: + return item + if self._is_model: + return item + return _deserialize(self._type, _serialize(item, self._format), rf=self) + + def __set__(self, obj: Model, value) -> None: + if value is None: + # we want to wipe out entries if users set attr to None + try: + obj.__delitem__(self._rest_name) + except KeyError: + pass + return + if self._is_model: + if not _is_model(value): + value = _deserialize(self._type, value) + obj.__setitem__(self._rest_name, value) + return + obj.__setitem__(self._rest_name, _serialize(value, self._format)) + + def _get_deserialize_callable_from_annotation( + self, annotation: typing.Any + ) -> typing.Optional[typing.Callable[[typing.Any], typing.Any]]: + return _get_deserialize_callable_from_annotation(annotation, self._module, self) + + +def rest_field( + *, + name: typing.Optional[str] = None, + type: typing.Optional[typing.Callable] = None, # pylint: disable=redefined-builtin + visibility: typing.Optional[typing.List[str]] = None, + default: typing.Any = _UNSET, + format: typing.Optional[str] = None, + is_multipart_file_input: bool = False, + xml: typing.Optional[typing.Dict[str, typing.Any]] = None, +) -> typing.Any: + return _RestField( + name=name, + type=type, + visibility=visibility, + default=default, + format=format, + is_multipart_file_input=is_multipart_file_input, + xml=xml, + ) + + +def rest_discriminator( + *, + name: typing.Optional[str] = None, + type: typing.Optional[typing.Callable] = None, # pylint: disable=redefined-builtin + visibility: typing.Optional[typing.List[str]] = None, + xml: typing.Optional[typing.Dict[str, typing.Any]] = None, +) -> typing.Any: + return _RestField(name=name, type=type, is_discriminator=True, visibility=visibility, xml=xml) + + +def serialize_xml(model: Model, exclude_readonly: bool = False) -> str: + """Serialize a model to XML. + + :param Model model: The model to serialize. + :param bool exclude_readonly: Whether to exclude readonly properties. + :returns: The XML representation of the model. + :rtype: str + """ + return ET.tostring(_get_element(model, exclude_readonly), encoding="unicode") # type: ignore + + +def _get_element( + o: typing.Any, + exclude_readonly: bool = False, + parent_meta: typing.Optional[typing.Dict[str, typing.Any]] = None, + wrapped_element: typing.Optional[ET.Element] = None, +) -> typing.Union[ET.Element, typing.List[ET.Element]]: + if _is_model(o): + model_meta = getattr(o, "_xml", {}) + + # if prop is a model, then use the prop element directly, else generate a wrapper of model + if wrapped_element is None: + wrapped_element = _create_xml_element( + model_meta.get("name", o.__class__.__name__), + model_meta.get("prefix"), + model_meta.get("ns"), + ) + + readonly_props = [] + if exclude_readonly: + readonly_props = [p._rest_name for p in o._attr_to_rest_field.values() if _is_readonly(p)] + + for k, v in o.items(): + # do not serialize readonly properties + if exclude_readonly and k in readonly_props: + continue + + prop_rest_field = _get_rest_field(o._attr_to_rest_field, k) + if prop_rest_field: + prop_meta = getattr(prop_rest_field, "_xml").copy() + # use the wire name as xml name if no specific name is set + if prop_meta.get("name") is None: + prop_meta["name"] = k + else: + # additional properties will not have rest field, use the wire name as xml name + prop_meta = {"name": k} + + # if no ns for prop, use model's + if prop_meta.get("ns") is None and model_meta.get("ns"): + prop_meta["ns"] = model_meta.get("ns") + prop_meta["prefix"] = model_meta.get("prefix") + + if prop_meta.get("unwrapped", False): + # unwrapped could only set on array + wrapped_element.extend(_get_element(v, exclude_readonly, prop_meta)) + elif prop_meta.get("text", False): + # text could only set on primitive type + wrapped_element.text = _get_primitive_type_value(v) + elif prop_meta.get("attribute", False): + xml_name = prop_meta.get("name", k) + if prop_meta.get("ns"): + ET.register_namespace(prop_meta.get("prefix"), prop_meta.get("ns")) # pyright: ignore + xml_name = "{" + prop_meta.get("ns") + "}" + xml_name # pyright: ignore + # attribute should be primitive type + wrapped_element.set(xml_name, _get_primitive_type_value(v)) + else: + # other wrapped prop element + wrapped_element.append(_get_wrapped_element(v, exclude_readonly, prop_meta)) + return wrapped_element + if isinstance(o, list): + return [_get_element(x, exclude_readonly, parent_meta) for x in o] # type: ignore + if isinstance(o, dict): + result = [] + for k, v in o.items(): + result.append( + _get_wrapped_element( + v, + exclude_readonly, + { + "name": k, + "ns": parent_meta.get("ns") if parent_meta else None, + "prefix": parent_meta.get("prefix") if parent_meta else None, + }, + ) + ) + return result + + # primitive case need to create element based on parent_meta + if parent_meta: + return _get_wrapped_element( + o, + exclude_readonly, + { + "name": parent_meta.get("itemsName", parent_meta.get("name")), + "prefix": parent_meta.get("itemsPrefix", parent_meta.get("prefix")), + "ns": parent_meta.get("itemsNs", parent_meta.get("ns")), + }, + ) + + raise ValueError("Could not serialize value into xml: " + o) + + +def _get_wrapped_element( + v: typing.Any, + exclude_readonly: bool, + meta: typing.Optional[typing.Dict[str, typing.Any]], +) -> ET.Element: + wrapped_element = _create_xml_element( + meta.get("name") if meta else None, meta.get("prefix") if meta else None, meta.get("ns") if meta else None + ) + if isinstance(v, (dict, list)): + wrapped_element.extend(_get_element(v, exclude_readonly, meta)) + elif _is_model(v): + _get_element(v, exclude_readonly, meta, wrapped_element) + else: + wrapped_element.text = _get_primitive_type_value(v) + return wrapped_element + + +def _get_primitive_type_value(v) -> str: + if v is True: + return "true" + if v is False: + return "false" + if isinstance(v, _Null): + return "" + return str(v) + + +def _create_xml_element(tag, prefix=None, ns=None): + if prefix and ns: + ET.register_namespace(prefix, ns) + if ns: + return ET.Element("{" + ns + "}" + tag) + return ET.Element(tag) + + +def _deserialize_xml( + deserializer: typing.Any, + value: str, +) -> typing.Any: + element = ET.fromstring(value) # nosec + return _deserialize(deserializer, element) + + +def _convert_element(e: ET.Element): + # dict case + if len(e.attrib) > 0 or len({child.tag for child in e}) > 1: + dict_result: typing.Dict[str, typing.Any] = {} + for child in e: + if dict_result.get(child.tag) is not None: + if isinstance(dict_result[child.tag], list): + dict_result[child.tag].append(_convert_element(child)) + else: + dict_result[child.tag] = [dict_result[child.tag], _convert_element(child)] + else: + dict_result[child.tag] = _convert_element(child) + dict_result.update(e.attrib) + return dict_result + # array case + if len(e) > 0: + array_result: typing.List[typing.Any] = [] + for child in e: + array_result.append(_convert_element(child)) + return array_result + # primitive case + return e.text diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_serialization.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/serialization.py similarity index 83% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_serialization.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/serialization.py index 72d06237121..eb86ea23c96 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_serialization.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_utils/serialization.py @@ -1,1998 +1,2032 @@ -# -------------------------------------------------------------------------- -# -# Copyright (c) Microsoft Corporation. All rights reserved. -# -# The MIT License (MIT) -# -# Permission is hereby granted, free of charge, to any person obtaining a copy -# of this software and associated documentation files (the ""Software""), to -# deal in the Software without restriction, including without limitation the -# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or -# sell copies of the Software, and to permit persons to whom the Software is -# furnished to do so, subject to the following conditions: -# -# The above copyright notice and this permission notice shall be included in -# all copies or substantial portions of the Software. -# -# THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING -# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS -# IN THE SOFTWARE. -# -# -------------------------------------------------------------------------- - -# pylint: skip-file -# pyright: reportUnnecessaryTypeIgnoreComment=false - -from base64 import b64decode, b64encode -import calendar -import datetime -import decimal -import email -from enum import Enum -import json -import logging -import re -import sys -import codecs -from typing import ( - Dict, - Any, - cast, - Optional, - Union, - AnyStr, - IO, - Mapping, - Callable, - TypeVar, - MutableMapping, - Type, - List, - Mapping, -) - -try: - from urllib import quote # type: ignore -except ImportError: - from urllib.parse import quote -import xml.etree.ElementTree as ET - -import isodate # type: ignore - -from azure.core.exceptions import DeserializationError, SerializationError -from azure.core.serialization import NULL as CoreNull - -_BOM = codecs.BOM_UTF8.decode(encoding="utf-8") - -ModelType = TypeVar("ModelType", bound="Model") -JSON = MutableMapping[str, Any] - - -class RawDeserializer: - - # Accept "text" because we're open minded people... - JSON_REGEXP = re.compile(r"^(application|text)/([a-z+.]+\+)?json$") - - # Name used in context - CONTEXT_NAME = "deserialized_data" - - @classmethod - def deserialize_from_text(cls, data: Optional[Union[AnyStr, IO]], content_type: Optional[str] = None) -> Any: - """Decode data according to content-type. - - Accept a stream of data as well, but will be load at once in memory for now. - - If no content-type, will return the string version (not bytes, not stream) - - :param data: Input, could be bytes or stream (will be decoded with UTF8) or text - :type data: str or bytes or IO - :param str content_type: The content type. - """ - if hasattr(data, "read"): - # Assume a stream - data = cast(IO, data).read() - - if isinstance(data, bytes): - data_as_str = data.decode(encoding="utf-8-sig") - else: - # Explain to mypy the correct type. - data_as_str = cast(str, data) - - # Remove Byte Order Mark if present in string - data_as_str = data_as_str.lstrip(_BOM) - - if content_type is None: - return data - - if cls.JSON_REGEXP.match(content_type): - try: - return json.loads(data_as_str) - except ValueError as err: - raise DeserializationError("JSON is invalid: {}".format(err), err) - elif "xml" in (content_type or []): - try: - - try: - if isinstance(data, unicode): # type: ignore - # If I'm Python 2.7 and unicode XML will scream if I try a "fromstring" on unicode string - data_as_str = data_as_str.encode(encoding="utf-8") # type: ignore - except NameError: - pass - - return ET.fromstring(data_as_str) # nosec - except ET.ParseError as err: - # It might be because the server has an issue, and returned JSON with - # content-type XML.... - # So let's try a JSON load, and if it's still broken - # let's flow the initial exception - def _json_attemp(data): - try: - return True, json.loads(data) - except ValueError: - return False, None # Don't care about this one - - success, json_result = _json_attemp(data) - if success: - return json_result - # If i'm here, it's not JSON, it's not XML, let's scream - # and raise the last context in this block (the XML exception) - # The function hack is because Py2.7 messes up with exception - # context otherwise. - _LOGGER.critical("Wasn't XML not JSON, failing") - raise DeserializationError("XML is invalid") from err - raise DeserializationError("Cannot deserialize content-type: {}".format(content_type)) - - @classmethod - def deserialize_from_http_generics(cls, body_bytes: Optional[Union[AnyStr, IO]], headers: Mapping) -> Any: - """Deserialize from HTTP response. - - Use bytes and headers to NOT use any requests/aiohttp or whatever - specific implementation. - Headers will tested for "content-type" - """ - # Try to use content-type from headers if available - content_type = None - if "content-type" in headers: - content_type = headers["content-type"].split(";")[0].strip().lower() - # Ouch, this server did not declare what it sent... - # Let's guess it's JSON... - # Also, since Autorest was considering that an empty body was a valid JSON, - # need that test as well.... - else: - content_type = "application/json" - - if body_bytes: - return cls.deserialize_from_text(body_bytes, content_type) - return None - - -_LOGGER = logging.getLogger(__name__) - -try: - _long_type = long # type: ignore -except NameError: - _long_type = int - - -class UTC(datetime.tzinfo): - """Time Zone info for handling UTC""" - - def utcoffset(self, dt): - """UTF offset for UTC is 0.""" - return datetime.timedelta(0) - - def tzname(self, dt): - """Timestamp representation.""" - return "Z" - - def dst(self, dt): - """No daylight saving for UTC.""" - return datetime.timedelta(hours=1) - - -try: - from datetime import timezone as _FixedOffset # type: ignore -except ImportError: # Python 2.7 - - class _FixedOffset(datetime.tzinfo): # type: ignore - """Fixed offset in minutes east from UTC. - Copy/pasted from Python doc - :param datetime.timedelta offset: offset in timedelta format - """ - - def __init__(self, offset): - self.__offset = offset - - def utcoffset(self, dt): - return self.__offset - - def tzname(self, dt): - return str(self.__offset.total_seconds() / 3600) - - def __repr__(self): - return "".format(self.tzname(None)) - - def dst(self, dt): - return datetime.timedelta(0) - - def __getinitargs__(self): - return (self.__offset,) - - -try: - from datetime import timezone - - TZ_UTC = timezone.utc -except ImportError: - TZ_UTC = UTC() # type: ignore - -_FLATTEN = re.compile(r"(? None: - self.additional_properties: Optional[Dict[str, Any]] = {} - for k in kwargs: - if k not in self._attribute_map: - _LOGGER.warning("%s is not a known attribute of class %s and will be ignored", k, self.__class__) - elif k in self._validation and self._validation[k].get("readonly", False): - _LOGGER.warning("Readonly attribute %s will be ignored in class %s", k, self.__class__) - else: - setattr(self, k, kwargs[k]) - - def __eq__(self, other: Any) -> bool: - """Compare objects by comparing all attributes.""" - if isinstance(other, self.__class__): - return self.__dict__ == other.__dict__ - return False - - def __ne__(self, other: Any) -> bool: - """Compare objects by comparing all attributes.""" - return not self.__eq__(other) - - def __str__(self) -> str: - return str(self.__dict__) - - @classmethod - def enable_additional_properties_sending(cls) -> None: - cls._attribute_map["additional_properties"] = {"key": "", "type": "{object}"} - - @classmethod - def is_xml_model(cls) -> bool: - try: - cls._xml_map # type: ignore - except AttributeError: - return False - return True - - @classmethod - def _create_xml_node(cls): - """Create XML node.""" - try: - xml_map = cls._xml_map # type: ignore - except AttributeError: - xml_map = {} - - return _create_xml_node(xml_map.get("name", cls.__name__), xml_map.get("prefix", None), xml_map.get("ns", None)) - - def serialize(self, keep_readonly: bool = False, **kwargs: Any) -> JSON: - """Return the JSON that would be sent to server from this model. - - This is an alias to `as_dict(full_restapi_key_transformer, keep_readonly=False)`. - - If you want XML serialization, you can pass the kwargs is_xml=True. - - :param bool keep_readonly: If you want to serialize the readonly attributes - :returns: A dict JSON compatible object - :rtype: dict - """ - serializer = Serializer(self._infer_class_models()) - return serializer._serialize(self, keep_readonly=keep_readonly, **kwargs) # type: ignore - - def as_dict( - self, - keep_readonly: bool = True, - key_transformer: Callable[[str, Dict[str, Any], Any], Any] = attribute_transformer, - **kwargs: Any - ) -> JSON: - """Return a dict that can be serialized using json.dump. - - Advanced usage might optionally use a callback as parameter: - - .. code::python - - def my_key_transformer(key, attr_desc, value): - return key - - Key is the attribute name used in Python. Attr_desc - is a dict of metadata. Currently contains 'type' with the - msrest type and 'key' with the RestAPI encoded key. - Value is the current value in this object. - - The string returned will be used to serialize the key. - If the return type is a list, this is considered hierarchical - result dict. - - See the three examples in this file: - - - attribute_transformer - - full_restapi_key_transformer - - last_restapi_key_transformer - - If you want XML serialization, you can pass the kwargs is_xml=True. - - :param function key_transformer: A key transformer function. - :returns: A dict JSON compatible object - :rtype: dict - """ - serializer = Serializer(self._infer_class_models()) - return serializer._serialize(self, key_transformer=key_transformer, keep_readonly=keep_readonly, **kwargs) # type: ignore - - @classmethod - def _infer_class_models(cls): - try: - str_models = cls.__module__.rsplit(".", 1)[0] - models = sys.modules[str_models] - client_models = {k: v for k, v in models.__dict__.items() if isinstance(v, type)} - if cls.__name__ not in client_models: - raise ValueError("Not Autorest generated code") - except Exception: - # Assume it's not Autorest generated (tests?). Add ourselves as dependencies. - client_models = {cls.__name__: cls} - return client_models - - @classmethod - def deserialize(cls: Type[ModelType], data: Any, content_type: Optional[str] = None) -> ModelType: - """Parse a str using the RestAPI syntax and return a model. - - :param str data: A str using RestAPI structure. JSON by default. - :param str content_type: JSON by default, set application/xml if XML. - :returns: An instance of this model - :raises: DeserializationError if something went wrong - """ - deserializer = Deserializer(cls._infer_class_models()) - return deserializer(cls.__name__, data, content_type=content_type) # type: ignore - - @classmethod - def from_dict( - cls: Type[ModelType], - data: Any, - key_extractors: Optional[Callable[[str, Dict[str, Any], Any], Any]] = None, - content_type: Optional[str] = None, - ) -> ModelType: - """Parse a dict using given key extractor return a model. - - By default consider key - extractors (rest_key_case_insensitive_extractor, attribute_key_case_insensitive_extractor - and last_rest_key_case_insensitive_extractor) - - :param dict data: A dict using RestAPI structure - :param str content_type: JSON by default, set application/xml if XML. - :returns: An instance of this model - :raises: DeserializationError if something went wrong - """ - deserializer = Deserializer(cls._infer_class_models()) - deserializer.key_extractors = ( # type: ignore - [ # type: ignore - attribute_key_case_insensitive_extractor, - rest_key_case_insensitive_extractor, - last_rest_key_case_insensitive_extractor, - ] - if key_extractors is None - else key_extractors - ) - return deserializer(cls.__name__, data, content_type=content_type) # type: ignore - - @classmethod - def _flatten_subtype(cls, key, objects): - if "_subtype_map" not in cls.__dict__: - return {} - result = dict(cls._subtype_map[key]) - for valuetype in cls._subtype_map[key].values(): - result.update(objects[valuetype]._flatten_subtype(key, objects)) - return result - - @classmethod - def _classify(cls, response, objects): - """Check the class _subtype_map for any child classes. - We want to ignore any inherited _subtype_maps. - Remove the polymorphic key from the initial data. - """ - for subtype_key in cls.__dict__.get("_subtype_map", {}).keys(): - subtype_value = None - - if not isinstance(response, ET.Element): - rest_api_response_key = cls._get_rest_key_parts(subtype_key)[-1] - subtype_value = response.pop(rest_api_response_key, None) or response.pop(subtype_key, None) - else: - subtype_value = xml_key_extractor(subtype_key, cls._attribute_map[subtype_key], response) - if subtype_value: - # Try to match base class. Can be class name only - # (bug to fix in Autorest to support x-ms-discriminator-name) - if cls.__name__ == subtype_value: - return cls - flatten_mapping_type = cls._flatten_subtype(subtype_key, objects) - try: - return objects[flatten_mapping_type[subtype_value]] # type: ignore - except KeyError: - _LOGGER.warning( - "Subtype value %s has no mapping, use base class %s.", - subtype_value, - cls.__name__, - ) - break - else: - _LOGGER.warning("Discriminator %s is absent or null, use base class %s.", subtype_key, cls.__name__) - break - return cls - - @classmethod - def _get_rest_key_parts(cls, attr_key): - """Get the RestAPI key of this attr, split it and decode part - :param str attr_key: Attribute key must be in attribute_map. - :returns: A list of RestAPI part - :rtype: list - """ - rest_split_key = _FLATTEN.split(cls._attribute_map[attr_key]["key"]) - return [_decode_attribute_map_key(key_part) for key_part in rest_split_key] - - -def _decode_attribute_map_key(key): - """This decode a key in an _attribute_map to the actual key we want to look at - inside the received data. - - :param str key: A key string from the generated code - """ - return key.replace("\\.", ".") - - -class Serializer(object): - """Request object model serializer.""" - - basic_types = {str: "str", int: "int", bool: "bool", float: "float"} - - _xml_basic_types_serializers = {"bool": lambda x: str(x).lower()} - days = {0: "Mon", 1: "Tue", 2: "Wed", 3: "Thu", 4: "Fri", 5: "Sat", 6: "Sun"} - months = { - 1: "Jan", - 2: "Feb", - 3: "Mar", - 4: "Apr", - 5: "May", - 6: "Jun", - 7: "Jul", - 8: "Aug", - 9: "Sep", - 10: "Oct", - 11: "Nov", - 12: "Dec", - } - validation = { - "min_length": lambda x, y: len(x) < y, - "max_length": lambda x, y: len(x) > y, - "minimum": lambda x, y: x < y, - "maximum": lambda x, y: x > y, - "minimum_ex": lambda x, y: x <= y, - "maximum_ex": lambda x, y: x >= y, - "min_items": lambda x, y: len(x) < y, - "max_items": lambda x, y: len(x) > y, - "pattern": lambda x, y: not re.match(y, x, re.UNICODE), - "unique": lambda x, y: len(x) != len(set(x)), - "multiple": lambda x, y: x % y != 0, - } - - def __init__(self, classes: Optional[Mapping[str, type]] = None): - self.serialize_type = { - "iso-8601": Serializer.serialize_iso, - "rfc-1123": Serializer.serialize_rfc, - "unix-time": Serializer.serialize_unix, - "duration": Serializer.serialize_duration, - "date": Serializer.serialize_date, - "time": Serializer.serialize_time, - "decimal": Serializer.serialize_decimal, - "long": Serializer.serialize_long, - "bytearray": Serializer.serialize_bytearray, - "base64": Serializer.serialize_base64, - "object": self.serialize_object, - "[]": self.serialize_iter, - "{}": self.serialize_dict, - } - self.dependencies: Dict[str, type] = dict(classes) if classes else {} - self.key_transformer = full_restapi_key_transformer - self.client_side_validation = True - - def _serialize(self, target_obj, data_type=None, **kwargs): - """Serialize data into a string according to type. - - :param target_obj: The data to be serialized. - :param str data_type: The type to be serialized from. - :rtype: str, dict - :raises: SerializationError if serialization fails. - """ - key_transformer = kwargs.get("key_transformer", self.key_transformer) - keep_readonly = kwargs.get("keep_readonly", False) - if target_obj is None: - return None - - attr_name = None - class_name = target_obj.__class__.__name__ - - if data_type: - return self.serialize_data(target_obj, data_type, **kwargs) - - if not hasattr(target_obj, "_attribute_map"): - data_type = type(target_obj).__name__ - if data_type in self.basic_types.values(): - return self.serialize_data(target_obj, data_type, **kwargs) - - # Force "is_xml" kwargs if we detect a XML model - try: - is_xml_model_serialization = kwargs["is_xml"] - except KeyError: - is_xml_model_serialization = kwargs.setdefault("is_xml", target_obj.is_xml_model()) - - serialized = {} - if is_xml_model_serialization: - serialized = target_obj._create_xml_node() - try: - attributes = target_obj._attribute_map - for attr, attr_desc in attributes.items(): - attr_name = attr - if not keep_readonly and target_obj._validation.get(attr_name, {}).get("readonly", False): - continue - - if attr_name == "additional_properties" and attr_desc["key"] == "": - if target_obj.additional_properties is not None: - serialized.update(target_obj.additional_properties) - continue - try: - - orig_attr = getattr(target_obj, attr) - if is_xml_model_serialization: - pass # Don't provide "transformer" for XML for now. Keep "orig_attr" - else: # JSON - keys, orig_attr = key_transformer(attr, attr_desc.copy(), orig_attr) - keys = keys if isinstance(keys, list) else [keys] - - kwargs["serialization_ctxt"] = attr_desc - new_attr = self.serialize_data(orig_attr, attr_desc["type"], **kwargs) - - if is_xml_model_serialization: - xml_desc = attr_desc.get("xml", {}) - xml_name = xml_desc.get("name", attr_desc["key"]) - xml_prefix = xml_desc.get("prefix", None) - xml_ns = xml_desc.get("ns", None) - if xml_desc.get("attr", False): - if xml_ns: - ET.register_namespace(xml_prefix, xml_ns) - xml_name = "{{{}}}{}".format(xml_ns, xml_name) - serialized.set(xml_name, new_attr) # type: ignore - continue - if xml_desc.get("text", False): - serialized.text = new_attr # type: ignore - continue - if isinstance(new_attr, list): - serialized.extend(new_attr) # type: ignore - elif isinstance(new_attr, ET.Element): - # If the down XML has no XML/Name, we MUST replace the tag with the local tag. But keeping the namespaces. - if "name" not in getattr(orig_attr, "_xml_map", {}): - splitted_tag = new_attr.tag.split("}") - if len(splitted_tag) == 2: # Namespace - new_attr.tag = "}".join([splitted_tag[0], xml_name]) - else: - new_attr.tag = xml_name - serialized.append(new_attr) # type: ignore - else: # That's a basic type - # Integrate namespace if necessary - local_node = _create_xml_node(xml_name, xml_prefix, xml_ns) - local_node.text = str(new_attr) - serialized.append(local_node) # type: ignore - else: # JSON - for k in reversed(keys): # type: ignore - new_attr = {k: new_attr} - - _new_attr = new_attr - _serialized = serialized - for k in keys: # type: ignore - if k not in _serialized: - _serialized.update(_new_attr) # type: ignore - _new_attr = _new_attr[k] # type: ignore - _serialized = _serialized[k] - except ValueError as err: - if isinstance(err, SerializationError): - raise - - except (AttributeError, KeyError, TypeError) as err: - msg = "Attribute {} in object {} cannot be serialized.\n{}".format(attr_name, class_name, str(target_obj)) - raise SerializationError(msg) from err - else: - return serialized - - def body(self, data, data_type, **kwargs): - """Serialize data intended for a request body. - - :param data: The data to be serialized. - :param str data_type: The type to be serialized from. - :rtype: dict - :raises: SerializationError if serialization fails. - :raises: ValueError if data is None - """ - - # Just in case this is a dict - internal_data_type_str = data_type.strip("[]{}") - internal_data_type = self.dependencies.get(internal_data_type_str, None) - try: - is_xml_model_serialization = kwargs["is_xml"] - except KeyError: - if internal_data_type and issubclass(internal_data_type, Model): - is_xml_model_serialization = kwargs.setdefault("is_xml", internal_data_type.is_xml_model()) - else: - is_xml_model_serialization = False - if internal_data_type and not isinstance(internal_data_type, Enum): - try: - deserializer = Deserializer(self.dependencies) - # Since it's on serialization, it's almost sure that format is not JSON REST - # We're not able to deal with additional properties for now. - deserializer.additional_properties_detection = False - if is_xml_model_serialization: - deserializer.key_extractors = [ # type: ignore - attribute_key_case_insensitive_extractor, - ] - else: - deserializer.key_extractors = [ - rest_key_case_insensitive_extractor, - attribute_key_case_insensitive_extractor, - last_rest_key_case_insensitive_extractor, - ] - data = deserializer._deserialize(data_type, data) - except DeserializationError as err: - raise SerializationError("Unable to build a model: " + str(err)) from err - - return self._serialize(data, data_type, **kwargs) - - def url(self, name, data, data_type, **kwargs): - """Serialize data intended for a URL path. - - :param data: The data to be serialized. - :param str data_type: The type to be serialized from. - :rtype: str - :raises: TypeError if serialization fails. - :raises: ValueError if data is None - """ - try: - output = self.serialize_data(data, data_type, **kwargs) - if data_type == "bool": - output = json.dumps(output) - - if kwargs.get("skip_quote") is True: - output = str(output) - output = output.replace("{", quote("{")).replace("}", quote("}")) - else: - output = quote(str(output), safe="") - except SerializationError: - raise TypeError("{} must be type {}.".format(name, data_type)) - else: - return output - - def query(self, name, data, data_type, **kwargs): - """Serialize data intended for a URL query. - - :param data: The data to be serialized. - :param str data_type: The type to be serialized from. - :keyword bool skip_quote: Whether to skip quote the serialized result. - Defaults to False. - :rtype: str, list - :raises: TypeError if serialization fails. - :raises: ValueError if data is None - """ - try: - # Treat the list aside, since we don't want to encode the div separator - if data_type.startswith("["): - internal_data_type = data_type[1:-1] - do_quote = not kwargs.get("skip_quote", False) - return self.serialize_iter(data, internal_data_type, do_quote=do_quote, **kwargs) - - # Not a list, regular serialization - output = self.serialize_data(data, data_type, **kwargs) - if data_type == "bool": - output = json.dumps(output) - if kwargs.get("skip_quote") is True: - output = str(output) - else: - output = quote(str(output), safe="") - except SerializationError: - raise TypeError("{} must be type {}.".format(name, data_type)) - else: - return str(output) - - def header(self, name, data, data_type, **kwargs): - """Serialize data intended for a request header. - - :param data: The data to be serialized. - :param str data_type: The type to be serialized from. - :rtype: str - :raises: TypeError if serialization fails. - :raises: ValueError if data is None - """ - try: - if data_type in ["[str]"]: - data = ["" if d is None else d for d in data] - - output = self.serialize_data(data, data_type, **kwargs) - if data_type == "bool": - output = json.dumps(output) - except SerializationError: - raise TypeError("{} must be type {}.".format(name, data_type)) - else: - return str(output) - - def serialize_data(self, data, data_type, **kwargs): - """Serialize generic data according to supplied data type. - - :param data: The data to be serialized. - :param str data_type: The type to be serialized from. - :param bool required: Whether it's essential that the data not be - empty or None - :raises: AttributeError if required data is None. - :raises: ValueError if data is None - :raises: SerializationError if serialization fails. - """ - if data is None: - raise ValueError("No value for given attribute") - - try: - if data is CoreNull: - return None - if data_type in self.basic_types.values(): - return self.serialize_basic(data, data_type, **kwargs) - - elif data_type in self.serialize_type: - return self.serialize_type[data_type](data, **kwargs) - - # If dependencies is empty, try with current data class - # It has to be a subclass of Enum anyway - enum_type = self.dependencies.get(data_type, data.__class__) - if issubclass(enum_type, Enum): - return Serializer.serialize_enum(data, enum_obj=enum_type) - - iter_type = data_type[0] + data_type[-1] - if iter_type in self.serialize_type: - return self.serialize_type[iter_type](data, data_type[1:-1], **kwargs) - - except (ValueError, TypeError) as err: - msg = "Unable to serialize value: {!r} as type: {!r}." - raise SerializationError(msg.format(data, data_type)) from err - else: - return self._serialize(data, **kwargs) - - @classmethod - def _get_custom_serializers(cls, data_type, **kwargs): - custom_serializer = kwargs.get("basic_types_serializers", {}).get(data_type) - if custom_serializer: - return custom_serializer - if kwargs.get("is_xml", False): - return cls._xml_basic_types_serializers.get(data_type) - - @classmethod - def serialize_basic(cls, data, data_type, **kwargs): - """Serialize basic builting data type. - Serializes objects to str, int, float or bool. - - Possible kwargs: - - basic_types_serializers dict[str, callable] : If set, use the callable as serializer - - is_xml bool : If set, use xml_basic_types_serializers - - :param data: Object to be serialized. - :param str data_type: Type of object in the iterable. - """ - custom_serializer = cls._get_custom_serializers(data_type, **kwargs) - if custom_serializer: - return custom_serializer(data) - if data_type == "str": - return cls.serialize_unicode(data) - return eval(data_type)(data) # nosec - - @classmethod - def serialize_unicode(cls, data): - """Special handling for serializing unicode strings in Py2. - Encode to UTF-8 if unicode, otherwise handle as a str. - - :param data: Object to be serialized. - :rtype: str - """ - try: # If I received an enum, return its value - return data.value - except AttributeError: - pass - - try: - if isinstance(data, unicode): # type: ignore - # Don't change it, JSON and XML ElementTree are totally able - # to serialize correctly u'' strings - return data - except NameError: - return str(data) - else: - return str(data) - - def serialize_iter(self, data, iter_type, div=None, **kwargs): - """Serialize iterable. - - Supported kwargs: - - serialization_ctxt dict : The current entry of _attribute_map, or same format. - serialization_ctxt['type'] should be same as data_type. - - is_xml bool : If set, serialize as XML - - :param list attr: Object to be serialized. - :param str iter_type: Type of object in the iterable. - :param bool required: Whether the objects in the iterable must - not be None or empty. - :param str div: If set, this str will be used to combine the elements - in the iterable into a combined string. Default is 'None'. - :keyword bool do_quote: Whether to quote the serialized result of each iterable element. - Defaults to False. - :rtype: list, str - """ - if isinstance(data, str): - raise SerializationError("Refuse str type as a valid iter type.") - - serialization_ctxt = kwargs.get("serialization_ctxt", {}) - is_xml = kwargs.get("is_xml", False) - - serialized = [] - for d in data: - try: - serialized.append(self.serialize_data(d, iter_type, **kwargs)) - except ValueError as err: - if isinstance(err, SerializationError): - raise - serialized.append(None) - - if kwargs.get("do_quote", False): - serialized = ["" if s is None else quote(str(s), safe="") for s in serialized] - - if div: - serialized = ["" if s is None else str(s) for s in serialized] - serialized = div.join(serialized) - - if "xml" in serialization_ctxt or is_xml: - # XML serialization is more complicated - xml_desc = serialization_ctxt.get("xml", {}) - xml_name = xml_desc.get("name") - if not xml_name: - xml_name = serialization_ctxt["key"] - - # Create a wrap node if necessary (use the fact that Element and list have "append") - is_wrapped = xml_desc.get("wrapped", False) - node_name = xml_desc.get("itemsName", xml_name) - if is_wrapped: - final_result = _create_xml_node(xml_name, xml_desc.get("prefix", None), xml_desc.get("ns", None)) - else: - final_result = [] - # All list elements to "local_node" - for el in serialized: - if isinstance(el, ET.Element): - el_node = el - else: - el_node = _create_xml_node(node_name, xml_desc.get("prefix", None), xml_desc.get("ns", None)) - if el is not None: # Otherwise it writes "None" :-p - el_node.text = str(el) - final_result.append(el_node) - return final_result - return serialized - - def serialize_dict(self, attr, dict_type, **kwargs): - """Serialize a dictionary of objects. - - :param dict attr: Object to be serialized. - :param str dict_type: Type of object in the dictionary. - :param bool required: Whether the objects in the dictionary must - not be None or empty. - :rtype: dict - """ - serialization_ctxt = kwargs.get("serialization_ctxt", {}) - serialized = {} - for key, value in attr.items(): - try: - serialized[self.serialize_unicode(key)] = self.serialize_data(value, dict_type, **kwargs) - except ValueError as err: - if isinstance(err, SerializationError): - raise - serialized[self.serialize_unicode(key)] = None - - if "xml" in serialization_ctxt: - # XML serialization is more complicated - xml_desc = serialization_ctxt["xml"] - xml_name = xml_desc["name"] - - final_result = _create_xml_node(xml_name, xml_desc.get("prefix", None), xml_desc.get("ns", None)) - for key, value in serialized.items(): - ET.SubElement(final_result, key).text = value - return final_result - - return serialized - - def serialize_object(self, attr, **kwargs): - """Serialize a generic object. - This will be handled as a dictionary. If object passed in is not - a basic type (str, int, float, dict, list) it will simply be - cast to str. - - :param dict attr: Object to be serialized. - :rtype: dict or str - """ - if attr is None: - return None - if isinstance(attr, ET.Element): - return attr - obj_type = type(attr) - if obj_type in self.basic_types: - return self.serialize_basic(attr, self.basic_types[obj_type], **kwargs) - if obj_type is _long_type: - return self.serialize_long(attr) - if obj_type is str: - return self.serialize_unicode(attr) - if obj_type is datetime.datetime: - return self.serialize_iso(attr) - if obj_type is datetime.date: - return self.serialize_date(attr) - if obj_type is datetime.time: - return self.serialize_time(attr) - if obj_type is datetime.timedelta: - return self.serialize_duration(attr) - if obj_type is decimal.Decimal: - return self.serialize_decimal(attr) - - # If it's a model or I know this dependency, serialize as a Model - elif obj_type in self.dependencies.values() or isinstance(attr, Model): - return self._serialize(attr) - - if obj_type == dict: - serialized = {} - for key, value in attr.items(): - try: - serialized[self.serialize_unicode(key)] = self.serialize_object(value, **kwargs) - except ValueError: - serialized[self.serialize_unicode(key)] = None - return serialized - - if obj_type == list: - serialized = [] - for obj in attr: - try: - serialized.append(self.serialize_object(obj, **kwargs)) - except ValueError: - pass - return serialized - return str(attr) - - @staticmethod - def serialize_enum(attr, enum_obj=None): - try: - result = attr.value - except AttributeError: - result = attr - try: - enum_obj(result) # type: ignore - return result - except ValueError: - for enum_value in enum_obj: # type: ignore - if enum_value.value.lower() == str(attr).lower(): - return enum_value.value - error = "{!r} is not valid value for enum {!r}" - raise SerializationError(error.format(attr, enum_obj)) - - @staticmethod - def serialize_bytearray(attr, **kwargs): - """Serialize bytearray into base-64 string. - - :param attr: Object to be serialized. - :rtype: str - """ - return b64encode(attr).decode() - - @staticmethod - def serialize_base64(attr, **kwargs): - """Serialize str into base-64 string. - - :param attr: Object to be serialized. - :rtype: str - """ - encoded = b64encode(attr).decode("ascii") - return encoded.strip("=").replace("+", "-").replace("/", "_") - - @staticmethod - def serialize_decimal(attr, **kwargs): - """Serialize Decimal object to float. - - :param attr: Object to be serialized. - :rtype: float - """ - return float(attr) - - @staticmethod - def serialize_long(attr, **kwargs): - """Serialize long (Py2) or int (Py3). - - :param attr: Object to be serialized. - :rtype: int/long - """ - return _long_type(attr) - - @staticmethod - def serialize_date(attr, **kwargs): - """Serialize Date object into ISO-8601 formatted string. - - :param Date attr: Object to be serialized. - :rtype: str - """ - if isinstance(attr, str): - attr = isodate.parse_date(attr) - t = "{:04}-{:02}-{:02}".format(attr.year, attr.month, attr.day) - return t - - @staticmethod - def serialize_time(attr, **kwargs): - """Serialize Time object into ISO-8601 formatted string. - - :param datetime.time attr: Object to be serialized. - :rtype: str - """ - if isinstance(attr, str): - attr = isodate.parse_time(attr) - t = "{:02}:{:02}:{:02}".format(attr.hour, attr.minute, attr.second) - if attr.microsecond: - t += ".{:02}".format(attr.microsecond) - return t - - @staticmethod - def serialize_duration(attr, **kwargs): - """Serialize TimeDelta object into ISO-8601 formatted string. - - :param TimeDelta attr: Object to be serialized. - :rtype: str - """ - if isinstance(attr, str): - attr = isodate.parse_duration(attr) - return isodate.duration_isoformat(attr) - - @staticmethod - def serialize_rfc(attr, **kwargs): - """Serialize Datetime object into RFC-1123 formatted string. - - :param Datetime attr: Object to be serialized. - :rtype: str - :raises: TypeError if format invalid. - """ - try: - if not attr.tzinfo: - _LOGGER.warning("Datetime with no tzinfo will be considered UTC.") - utc = attr.utctimetuple() - except AttributeError: - raise TypeError("RFC1123 object must be valid Datetime object.") - - return "{}, {:02} {} {:04} {:02}:{:02}:{:02} GMT".format( - Serializer.days[utc.tm_wday], - utc.tm_mday, - Serializer.months[utc.tm_mon], - utc.tm_year, - utc.tm_hour, - utc.tm_min, - utc.tm_sec, - ) - - @staticmethod - def serialize_iso(attr, **kwargs): - """Serialize Datetime object into ISO-8601 formatted string. - - :param Datetime attr: Object to be serialized. - :rtype: str - :raises: SerializationError if format invalid. - """ - if isinstance(attr, str): - attr = isodate.parse_datetime(attr) - try: - if not attr.tzinfo: - _LOGGER.warning("Datetime with no tzinfo will be considered UTC.") - utc = attr.utctimetuple() - if utc.tm_year > 9999 or utc.tm_year < 1: - raise OverflowError("Hit max or min date") - - microseconds = str(attr.microsecond).rjust(6, "0").rstrip("0").ljust(3, "0") - if microseconds: - microseconds = "." + microseconds - date = "{:04}-{:02}-{:02}T{:02}:{:02}:{:02}".format( - utc.tm_year, utc.tm_mon, utc.tm_mday, utc.tm_hour, utc.tm_min, utc.tm_sec - ) - return date + microseconds + "Z" - except (ValueError, OverflowError) as err: - msg = "Unable to serialize datetime object." - raise SerializationError(msg) from err - except AttributeError as err: - msg = "ISO-8601 object must be valid Datetime object." - raise TypeError(msg) from err - - @staticmethod - def serialize_unix(attr, **kwargs): - """Serialize Datetime object into IntTime format. - This is represented as seconds. - - :param Datetime attr: Object to be serialized. - :rtype: int - :raises: SerializationError if format invalid - """ - if isinstance(attr, int): - return attr - try: - if not attr.tzinfo: - _LOGGER.warning("Datetime with no tzinfo will be considered UTC.") - return int(calendar.timegm(attr.utctimetuple())) - except AttributeError: - raise TypeError("Unix time object must be valid Datetime object.") - - -def rest_key_extractor(attr, attr_desc, data): - key = attr_desc["key"] - working_data = data - - while "." in key: - # Need the cast, as for some reasons "split" is typed as list[str | Any] - dict_keys = cast(List[str], _FLATTEN.split(key)) - if len(dict_keys) == 1: - key = _decode_attribute_map_key(dict_keys[0]) - break - working_key = _decode_attribute_map_key(dict_keys[0]) - working_data = working_data.get(working_key, data) - if working_data is None: - # If at any point while following flatten JSON path see None, it means - # that all properties under are None as well - return None - key = ".".join(dict_keys[1:]) - - return working_data.get(key) - - -def rest_key_case_insensitive_extractor(attr, attr_desc, data): - key = attr_desc["key"] - working_data = data - - while "." in key: - dict_keys = _FLATTEN.split(key) - if len(dict_keys) == 1: - key = _decode_attribute_map_key(dict_keys[0]) - break - working_key = _decode_attribute_map_key(dict_keys[0]) - working_data = attribute_key_case_insensitive_extractor(working_key, None, working_data) - if working_data is None: - # If at any point while following flatten JSON path see None, it means - # that all properties under are None as well - return None - key = ".".join(dict_keys[1:]) - - if working_data: - return attribute_key_case_insensitive_extractor(key, None, working_data) - - -def last_rest_key_extractor(attr, attr_desc, data): - """Extract the attribute in "data" based on the last part of the JSON path key.""" - key = attr_desc["key"] - dict_keys = _FLATTEN.split(key) - return attribute_key_extractor(dict_keys[-1], None, data) - - -def last_rest_key_case_insensitive_extractor(attr, attr_desc, data): - """Extract the attribute in "data" based on the last part of the JSON path key. - - This is the case insensitive version of "last_rest_key_extractor" - """ - key = attr_desc["key"] - dict_keys = _FLATTEN.split(key) - return attribute_key_case_insensitive_extractor(dict_keys[-1], None, data) - - -def attribute_key_extractor(attr, _, data): - return data.get(attr) - - -def attribute_key_case_insensitive_extractor(attr, _, data): - found_key = None - lower_attr = attr.lower() - for key in data: - if lower_attr == key.lower(): - found_key = key - break - - return data.get(found_key) - - -def _extract_name_from_internal_type(internal_type): - """Given an internal type XML description, extract correct XML name with namespace. - - :param dict internal_type: An model type - :rtype: tuple - :returns: A tuple XML name + namespace dict - """ - internal_type_xml_map = getattr(internal_type, "_xml_map", {}) - xml_name = internal_type_xml_map.get("name", internal_type.__name__) - xml_ns = internal_type_xml_map.get("ns", None) - if xml_ns: - xml_name = "{{{}}}{}".format(xml_ns, xml_name) - return xml_name - - -def xml_key_extractor(attr, attr_desc, data): - if isinstance(data, dict): - return None - - # Test if this model is XML ready first - if not isinstance(data, ET.Element): - return None - - xml_desc = attr_desc.get("xml", {}) - xml_name = xml_desc.get("name", attr_desc["key"]) - - # Look for a children - is_iter_type = attr_desc["type"].startswith("[") - is_wrapped = xml_desc.get("wrapped", False) - internal_type = attr_desc.get("internalType", None) - internal_type_xml_map = getattr(internal_type, "_xml_map", {}) - - # Integrate namespace if necessary - xml_ns = xml_desc.get("ns", internal_type_xml_map.get("ns", None)) - if xml_ns: - xml_name = "{{{}}}{}".format(xml_ns, xml_name) - - # If it's an attribute, that's simple - if xml_desc.get("attr", False): - return data.get(xml_name) - - # If it's x-ms-text, that's simple too - if xml_desc.get("text", False): - return data.text - - # Scenario where I take the local name: - # - Wrapped node - # - Internal type is an enum (considered basic types) - # - Internal type has no XML/Name node - if is_wrapped or (internal_type and (issubclass(internal_type, Enum) or "name" not in internal_type_xml_map)): - children = data.findall(xml_name) - # If internal type has a local name and it's not a list, I use that name - elif not is_iter_type and internal_type and "name" in internal_type_xml_map: - xml_name = _extract_name_from_internal_type(internal_type) - children = data.findall(xml_name) - # That's an array - else: - if internal_type: # Complex type, ignore itemsName and use the complex type name - items_name = _extract_name_from_internal_type(internal_type) - else: - items_name = xml_desc.get("itemsName", xml_name) - children = data.findall(items_name) - - if len(children) == 0: - if is_iter_type: - if is_wrapped: - return None # is_wrapped no node, we want None - else: - return [] # not wrapped, assume empty list - return None # Assume it's not there, maybe an optional node. - - # If is_iter_type and not wrapped, return all found children - if is_iter_type: - if not is_wrapped: - return children - else: # Iter and wrapped, should have found one node only (the wrap one) - if len(children) != 1: - raise DeserializationError( - "Tried to deserialize an array not wrapped, and found several nodes '{}'. Maybe you should declare this array as wrapped?".format( - xml_name - ) - ) - return list(children[0]) # Might be empty list and that's ok. - - # Here it's not a itertype, we should have found one element only or empty - if len(children) > 1: - raise DeserializationError("Find several XML '{}' where it was not expected".format(xml_name)) - return children[0] - - -class Deserializer(object): - """Response object model deserializer. - - :param dict classes: Class type dictionary for deserializing complex types. - :ivar list key_extractors: Ordered list of extractors to be used by this deserializer. - """ - - basic_types = {str: "str", int: "int", bool: "bool", float: "float"} - - valid_date = re.compile(r"\d{4}[-]\d{2}[-]\d{2}T\d{2}:\d{2}:\d{2}" r"\.?\d*Z?[-+]?[\d{2}]?:?[\d{2}]?") - - def __init__(self, classes: Optional[Mapping[str, type]] = None): - self.deserialize_type = { - "iso-8601": Deserializer.deserialize_iso, - "rfc-1123": Deserializer.deserialize_rfc, - "unix-time": Deserializer.deserialize_unix, - "duration": Deserializer.deserialize_duration, - "date": Deserializer.deserialize_date, - "time": Deserializer.deserialize_time, - "decimal": Deserializer.deserialize_decimal, - "long": Deserializer.deserialize_long, - "bytearray": Deserializer.deserialize_bytearray, - "base64": Deserializer.deserialize_base64, - "object": self.deserialize_object, - "[]": self.deserialize_iter, - "{}": self.deserialize_dict, - } - self.deserialize_expected_types = { - "duration": (isodate.Duration, datetime.timedelta), - "iso-8601": (datetime.datetime), - } - self.dependencies: Dict[str, type] = dict(classes) if classes else {} - self.key_extractors = [rest_key_extractor, xml_key_extractor] - # Additional properties only works if the "rest_key_extractor" is used to - # extract the keys. Making it to work whatever the key extractor is too much - # complicated, with no real scenario for now. - # So adding a flag to disable additional properties detection. This flag should be - # used if your expect the deserialization to NOT come from a JSON REST syntax. - # Otherwise, result are unexpected - self.additional_properties_detection = True - - def __call__(self, target_obj, response_data, content_type=None): - """Call the deserializer to process a REST response. - - :param str target_obj: Target data type to deserialize to. - :param requests.Response response_data: REST response object. - :param str content_type: Swagger "produces" if available. - :raises: DeserializationError if deserialization fails. - :return: Deserialized object. - """ - data = self._unpack_content(response_data, content_type) - return self._deserialize(target_obj, data) - - def _deserialize(self, target_obj, data): - """Call the deserializer on a model. - - Data needs to be already deserialized as JSON or XML ElementTree - - :param str target_obj: Target data type to deserialize to. - :param object data: Object to deserialize. - :raises: DeserializationError if deserialization fails. - :return: Deserialized object. - """ - # This is already a model, go recursive just in case - if hasattr(data, "_attribute_map"): - constants = [name for name, config in getattr(data, "_validation", {}).items() if config.get("constant")] - try: - for attr, mapconfig in data._attribute_map.items(): - if attr in constants: - continue - value = getattr(data, attr) - if value is None: - continue - local_type = mapconfig["type"] - internal_data_type = local_type.strip("[]{}") - if internal_data_type not in self.dependencies or isinstance(internal_data_type, Enum): - continue - setattr(data, attr, self._deserialize(local_type, value)) - return data - except AttributeError: - return - - response, class_name = self._classify_target(target_obj, data) - - if isinstance(response, str): - return self.deserialize_data(data, response) - elif isinstance(response, type) and issubclass(response, Enum): - return self.deserialize_enum(data, response) - - if data is None or data is CoreNull: - return data - try: - attributes = response._attribute_map # type: ignore - d_attrs = {} - for attr, attr_desc in attributes.items(): - # Check empty string. If it's not empty, someone has a real "additionalProperties"... - if attr == "additional_properties" and attr_desc["key"] == "": - continue - raw_value = None - # Enhance attr_desc with some dynamic data - attr_desc = attr_desc.copy() # Do a copy, do not change the real one - internal_data_type = attr_desc["type"].strip("[]{}") - if internal_data_type in self.dependencies: - attr_desc["internalType"] = self.dependencies[internal_data_type] - - for key_extractor in self.key_extractors: - found_value = key_extractor(attr, attr_desc, data) - if found_value is not None: - if raw_value is not None and raw_value != found_value: - msg = ( - "Ignoring extracted value '%s' from %s for key '%s'" - " (duplicate extraction, follow extractors order)" - ) - _LOGGER.warning(msg, found_value, key_extractor, attr) - continue - raw_value = found_value - - value = self.deserialize_data(raw_value, attr_desc["type"]) - d_attrs[attr] = value - except (AttributeError, TypeError, KeyError) as err: - msg = "Unable to deserialize to object: " + class_name # type: ignore - raise DeserializationError(msg) from err - else: - additional_properties = self._build_additional_properties(attributes, data) - return self._instantiate_model(response, d_attrs, additional_properties) - - def _build_additional_properties(self, attribute_map, data): - if not self.additional_properties_detection: - return None - if "additional_properties" in attribute_map and attribute_map.get("additional_properties", {}).get("key") != "": - # Check empty string. If it's not empty, someone has a real "additionalProperties" - return None - if isinstance(data, ET.Element): - data = {el.tag: el.text for el in data} - - known_keys = { - _decode_attribute_map_key(_FLATTEN.split(desc["key"])[0]) - for desc in attribute_map.values() - if desc["key"] != "" - } - present_keys = set(data.keys()) - missing_keys = present_keys - known_keys - return {key: data[key] for key in missing_keys} - - def _classify_target(self, target, data): - """Check to see whether the deserialization target object can - be classified into a subclass. - Once classification has been determined, initialize object. - - :param str target: The target object type to deserialize to. - :param str/dict data: The response data to deserialize. - """ - if target is None: - return None, None - - if isinstance(target, str): - try: - target = self.dependencies[target] - except KeyError: - return target, target - - try: - target = target._classify(data, self.dependencies) # type: ignore - except AttributeError: - pass # Target is not a Model, no classify - return target, target.__class__.__name__ # type: ignore - - def failsafe_deserialize(self, target_obj, data, content_type=None): - """Ignores any errors encountered in deserialization, - and falls back to not deserializing the object. Recommended - for use in error deserialization, as we want to return the - HttpResponseError to users, and not have them deal with - a deserialization error. - - :param str target_obj: The target object type to deserialize to. - :param str/dict data: The response data to deserialize. - :param str content_type: Swagger "produces" if available. - """ - try: - return self(target_obj, data, content_type=content_type) - except: - _LOGGER.debug( - "Ran into a deserialization error. Ignoring since this is failsafe deserialization", exc_info=True - ) - return None - - @staticmethod - def _unpack_content(raw_data, content_type=None): - """Extract the correct structure for deserialization. - - If raw_data is a PipelineResponse, try to extract the result of RawDeserializer. - if we can't, raise. Your Pipeline should have a RawDeserializer. - - If not a pipeline response and raw_data is bytes or string, use content-type - to decode it. If no content-type, try JSON. - - If raw_data is something else, bypass all logic and return it directly. - - :param raw_data: Data to be processed. - :param content_type: How to parse if raw_data is a string/bytes. - :raises JSONDecodeError: If JSON is requested and parsing is impossible. - :raises UnicodeDecodeError: If bytes is not UTF8 - """ - # Assume this is enough to detect a Pipeline Response without importing it - context = getattr(raw_data, "context", {}) - if context: - if RawDeserializer.CONTEXT_NAME in context: - return context[RawDeserializer.CONTEXT_NAME] - raise ValueError("This pipeline didn't have the RawDeserializer policy; can't deserialize") - - # Assume this is enough to recognize universal_http.ClientResponse without importing it - if hasattr(raw_data, "body"): - return RawDeserializer.deserialize_from_http_generics(raw_data.text(), raw_data.headers) - - # Assume this enough to recognize requests.Response without importing it. - if hasattr(raw_data, "_content_consumed"): - return RawDeserializer.deserialize_from_http_generics(raw_data.text, raw_data.headers) - - if isinstance(raw_data, (str, bytes)) or hasattr(raw_data, "read"): - return RawDeserializer.deserialize_from_text(raw_data, content_type) # type: ignore - return raw_data - - def _instantiate_model(self, response, attrs, additional_properties=None): - """Instantiate a response model passing in deserialized args. - - :param response: The response model class. - :param d_attrs: The deserialized response attributes. - """ - if callable(response): - subtype = getattr(response, "_subtype_map", {}) - try: - readonly = [k for k, v in response._validation.items() if v.get("readonly")] - const = [k for k, v in response._validation.items() if v.get("constant")] - kwargs = {k: v for k, v in attrs.items() if k not in subtype and k not in readonly + const} - response_obj = response(**kwargs) - for attr in readonly: - setattr(response_obj, attr, attrs.get(attr)) - if additional_properties: - response_obj.additional_properties = additional_properties - return response_obj - except TypeError as err: - msg = "Unable to deserialize {} into model {}. ".format(kwargs, response) # type: ignore - raise DeserializationError(msg + str(err)) - else: - try: - for attr, value in attrs.items(): - setattr(response, attr, value) - return response - except Exception as exp: - msg = "Unable to populate response model. " - msg += "Type: {}, Error: {}".format(type(response), exp) - raise DeserializationError(msg) - - def deserialize_data(self, data, data_type): - """Process data for deserialization according to data type. - - :param str data: The response string to be deserialized. - :param str data_type: The type to deserialize to. - :raises: DeserializationError if deserialization fails. - :return: Deserialized object. - """ - if data is None: - return data - - try: - if not data_type: - return data - if data_type in self.basic_types.values(): - return self.deserialize_basic(data, data_type) - if data_type in self.deserialize_type: - if isinstance(data, self.deserialize_expected_types.get(data_type, tuple())): - return data - - is_a_text_parsing_type = lambda x: x not in ["object", "[]", r"{}"] - if isinstance(data, ET.Element) and is_a_text_parsing_type(data_type) and not data.text: - return None - data_val = self.deserialize_type[data_type](data) - return data_val - - iter_type = data_type[0] + data_type[-1] - if iter_type in self.deserialize_type: - return self.deserialize_type[iter_type](data, data_type[1:-1]) - - obj_type = self.dependencies[data_type] - if issubclass(obj_type, Enum): - if isinstance(data, ET.Element): - data = data.text - return self.deserialize_enum(data, obj_type) - - except (ValueError, TypeError, AttributeError) as err: - msg = "Unable to deserialize response data." - msg += " Data: {}, {}".format(data, data_type) - raise DeserializationError(msg) from err - else: - return self._deserialize(obj_type, data) - - def deserialize_iter(self, attr, iter_type): - """Deserialize an iterable. - - :param list attr: Iterable to be deserialized. - :param str iter_type: The type of object in the iterable. - :rtype: list - """ - if attr is None: - return None - if isinstance(attr, ET.Element): # If I receive an element here, get the children - attr = list(attr) - if not isinstance(attr, (list, set)): - raise DeserializationError("Cannot deserialize as [{}] an object of type {}".format(iter_type, type(attr))) - return [self.deserialize_data(a, iter_type) for a in attr] - - def deserialize_dict(self, attr, dict_type): - """Deserialize a dictionary. - - :param dict/list attr: Dictionary to be deserialized. Also accepts - a list of key, value pairs. - :param str dict_type: The object type of the items in the dictionary. - :rtype: dict - """ - if isinstance(attr, list): - return {x["key"]: self.deserialize_data(x["value"], dict_type) for x in attr} - - if isinstance(attr, ET.Element): - # Transform value into {"Key": "value"} - attr = {el.tag: el.text for el in attr} - return {k: self.deserialize_data(v, dict_type) for k, v in attr.items()} - - def deserialize_object(self, attr, **kwargs): - """Deserialize a generic object. - This will be handled as a dictionary. - - :param dict attr: Dictionary to be deserialized. - :rtype: dict - :raises: TypeError if non-builtin datatype encountered. - """ - if attr is None: - return None - if isinstance(attr, ET.Element): - # Do no recurse on XML, just return the tree as-is - return attr - if isinstance(attr, str): - return self.deserialize_basic(attr, "str") - obj_type = type(attr) - if obj_type in self.basic_types: - return self.deserialize_basic(attr, self.basic_types[obj_type]) - if obj_type is _long_type: - return self.deserialize_long(attr) - - if obj_type == dict: - deserialized = {} - for key, value in attr.items(): - try: - deserialized[key] = self.deserialize_object(value, **kwargs) - except ValueError: - deserialized[key] = None - return deserialized - - if obj_type == list: - deserialized = [] - for obj in attr: - try: - deserialized.append(self.deserialize_object(obj, **kwargs)) - except ValueError: - pass - return deserialized - - else: - error = "Cannot deserialize generic object with type: " - raise TypeError(error + str(obj_type)) - - def deserialize_basic(self, attr, data_type): - """Deserialize basic builtin data type from string. - Will attempt to convert to str, int, float and bool. - This function will also accept '1', '0', 'true' and 'false' as - valid bool values. - - :param str attr: response string to be deserialized. - :param str data_type: deserialization data type. - :rtype: str, int, float or bool - :raises: TypeError if string format is not valid. - """ - # If we're here, data is supposed to be a basic type. - # If it's still an XML node, take the text - if isinstance(attr, ET.Element): - attr = attr.text - if not attr: - if data_type == "str": - # None or '', node is empty string. - return "" - else: - # None or '', node with a strong type is None. - # Don't try to model "empty bool" or "empty int" - return None - - if data_type == "bool": - if attr in [True, False, 1, 0]: - return bool(attr) - elif isinstance(attr, str): - if attr.lower() in ["true", "1"]: - return True - elif attr.lower() in ["false", "0"]: - return False - raise TypeError("Invalid boolean value: {}".format(attr)) - - if data_type == "str": - return self.deserialize_unicode(attr) - return eval(data_type)(attr) # nosec - - @staticmethod - def deserialize_unicode(data): - """Preserve unicode objects in Python 2, otherwise return data - as a string. - - :param str data: response string to be deserialized. - :rtype: str or unicode - """ - # We might be here because we have an enum modeled as string, - # and we try to deserialize a partial dict with enum inside - if isinstance(data, Enum): - return data - - # Consider this is real string - try: - if isinstance(data, unicode): # type: ignore - return data - except NameError: - return str(data) - else: - return str(data) - - @staticmethod - def deserialize_enum(data, enum_obj): - """Deserialize string into enum object. - - If the string is not a valid enum value it will be returned as-is - and a warning will be logged. - - :param str data: Response string to be deserialized. If this value is - None or invalid it will be returned as-is. - :param Enum enum_obj: Enum object to deserialize to. - :rtype: Enum - """ - if isinstance(data, enum_obj) or data is None: - return data - if isinstance(data, Enum): - data = data.value - if isinstance(data, int): - # Workaround. We might consider remove it in the future. - try: - return list(enum_obj.__members__.values())[data] - except IndexError: - error = "{!r} is not a valid index for enum {!r}" - raise DeserializationError(error.format(data, enum_obj)) - try: - return enum_obj(str(data)) - except ValueError: - for enum_value in enum_obj: - if enum_value.value.lower() == str(data).lower(): - return enum_value - # We don't fail anymore for unknown value, we deserialize as a string - _LOGGER.warning("Deserializer is not able to find %s as valid enum in %s", data, enum_obj) - return Deserializer.deserialize_unicode(data) - - @staticmethod - def deserialize_bytearray(attr): - """Deserialize string into bytearray. - - :param str attr: response string to be deserialized. - :rtype: bytearray - :raises: TypeError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - return bytearray(b64decode(attr)) # type: ignore - - @staticmethod - def deserialize_base64(attr): - """Deserialize base64 encoded string into string. - - :param str attr: response string to be deserialized. - :rtype: bytearray - :raises: TypeError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - padding = "=" * (3 - (len(attr) + 3) % 4) # type: ignore - attr = attr + padding # type: ignore - encoded = attr.replace("-", "+").replace("_", "/") - return b64decode(encoded) - - @staticmethod - def deserialize_decimal(attr): - """Deserialize string into Decimal object. - - :param str attr: response string to be deserialized. - :rtype: Decimal - :raises: DeserializationError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - try: - return decimal.Decimal(str(attr)) # type: ignore - except decimal.DecimalException as err: - msg = "Invalid decimal {}".format(attr) - raise DeserializationError(msg) from err - - @staticmethod - def deserialize_long(attr): - """Deserialize string into long (Py2) or int (Py3). - - :param str attr: response string to be deserialized. - :rtype: long or int - :raises: ValueError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - return _long_type(attr) # type: ignore - - @staticmethod - def deserialize_duration(attr): - """Deserialize ISO-8601 formatted string into TimeDelta object. - - :param str attr: response string to be deserialized. - :rtype: TimeDelta - :raises: DeserializationError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - try: - duration = isodate.parse_duration(attr) - except (ValueError, OverflowError, AttributeError) as err: - msg = "Cannot deserialize duration object." - raise DeserializationError(msg) from err - else: - return duration - - @staticmethod - def deserialize_date(attr): - """Deserialize ISO-8601 formatted string into Date object. - - :param str attr: response string to be deserialized. - :rtype: Date - :raises: DeserializationError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - if re.search(r"[^\W\d_]", attr, re.I + re.U): # type: ignore - raise DeserializationError("Date must have only digits and -. Received: %s" % attr) - # This must NOT use defaultmonth/defaultday. Using None ensure this raises an exception. - return isodate.parse_date(attr, defaultmonth=0, defaultday=0) - - @staticmethod - def deserialize_time(attr): - """Deserialize ISO-8601 formatted string into time object. - - :param str attr: response string to be deserialized. - :rtype: datetime.time - :raises: DeserializationError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - if re.search(r"[^\W\d_]", attr, re.I + re.U): # type: ignore - raise DeserializationError("Date must have only digits and -. Received: %s" % attr) - return isodate.parse_time(attr) - - @staticmethod - def deserialize_rfc(attr): - """Deserialize RFC-1123 formatted string into Datetime object. - - :param str attr: response string to be deserialized. - :rtype: Datetime - :raises: DeserializationError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - try: - parsed_date = email.utils.parsedate_tz(attr) # type: ignore - date_obj = datetime.datetime( - *parsed_date[:6], tzinfo=_FixedOffset(datetime.timedelta(minutes=(parsed_date[9] or 0) / 60)) - ) - if not date_obj.tzinfo: - date_obj = date_obj.astimezone(tz=TZ_UTC) - except ValueError as err: - msg = "Cannot deserialize to rfc datetime object." - raise DeserializationError(msg) from err - else: - return date_obj - - @staticmethod - def deserialize_iso(attr): - """Deserialize ISO-8601 formatted string into Datetime object. - - :param str attr: response string to be deserialized. - :rtype: Datetime - :raises: DeserializationError if string format invalid. - """ - if isinstance(attr, ET.Element): - attr = attr.text - try: - attr = attr.upper() # type: ignore - match = Deserializer.valid_date.match(attr) - if not match: - raise ValueError("Invalid datetime string: " + attr) - - check_decimal = attr.split(".") - if len(check_decimal) > 1: - decimal_str = "" - for digit in check_decimal[1]: - if digit.isdigit(): - decimal_str += digit - else: - break - if len(decimal_str) > 6: - attr = attr.replace(decimal_str, decimal_str[0:6]) - - date_obj = isodate.parse_datetime(attr) - test_utc = date_obj.utctimetuple() - if test_utc.tm_year > 9999 or test_utc.tm_year < 1: - raise OverflowError("Hit max or min date") - except (ValueError, OverflowError, AttributeError) as err: - msg = "Cannot deserialize datetime object." - raise DeserializationError(msg) from err - else: - return date_obj - - @staticmethod - def deserialize_unix(attr): - """Serialize Datetime object into IntTime format. - This is represented as seconds. - - :param int attr: Object to be serialized. - :rtype: Datetime - :raises: DeserializationError if format invalid - """ - if isinstance(attr, ET.Element): - attr = int(attr.text) # type: ignore - try: - attr = int(attr) - date_obj = datetime.datetime.fromtimestamp(attr, TZ_UTC) - except ValueError as err: - msg = "Cannot deserialize to unix datetime object." - raise DeserializationError(msg) from err - else: - return date_obj +# pylint: disable=line-too-long,useless-suppression,too-many-lines +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +# pyright: reportUnnecessaryTypeIgnoreComment=false + +from base64 import b64decode, b64encode +import calendar +import datetime +import decimal +import email +from enum import Enum +import json +import logging +import re +import sys +import codecs +from typing import ( + Dict, + Any, + cast, + Optional, + Union, + AnyStr, + IO, + Mapping, + Callable, + MutableMapping, + List, +) + +try: + from urllib import quote # type: ignore +except ImportError: + from urllib.parse import quote +import xml.etree.ElementTree as ET + +import isodate # type: ignore +from typing_extensions import Self + +from azure.core.exceptions import DeserializationError, SerializationError +from azure.core.serialization import NULL as CoreNull + +_BOM = codecs.BOM_UTF8.decode(encoding="utf-8") + +JSON = MutableMapping[str, Any] + + +class RawDeserializer: + + # Accept "text" because we're open minded people... + JSON_REGEXP = re.compile(r"^(application|text)/([a-z+.]+\+)?json$") + + # Name used in context + CONTEXT_NAME = "deserialized_data" + + @classmethod + def deserialize_from_text(cls, data: Optional[Union[AnyStr, IO]], content_type: Optional[str] = None) -> Any: + """Decode data according to content-type. + + Accept a stream of data as well, but will be load at once in memory for now. + + If no content-type, will return the string version (not bytes, not stream) + + :param data: Input, could be bytes or stream (will be decoded with UTF8) or text + :type data: str or bytes or IO + :param str content_type: The content type. + :return: The deserialized data. + :rtype: object + """ + if hasattr(data, "read"): + # Assume a stream + data = cast(IO, data).read() + + if isinstance(data, bytes): + data_as_str = data.decode(encoding="utf-8-sig") + else: + # Explain to mypy the correct type. + data_as_str = cast(str, data) + + # Remove Byte Order Mark if present in string + data_as_str = data_as_str.lstrip(_BOM) + + if content_type is None: + return data + + if cls.JSON_REGEXP.match(content_type): + try: + return json.loads(data_as_str) + except ValueError as err: + raise DeserializationError("JSON is invalid: {}".format(err), err) from err + elif "xml" in (content_type or []): + try: + + try: + if isinstance(data, unicode): # type: ignore + # If I'm Python 2.7 and unicode XML will scream if I try a "fromstring" on unicode string + data_as_str = data_as_str.encode(encoding="utf-8") # type: ignore + except NameError: + pass + + return ET.fromstring(data_as_str) # nosec + except ET.ParseError as err: + # It might be because the server has an issue, and returned JSON with + # content-type XML.... + # So let's try a JSON load, and if it's still broken + # let's flow the initial exception + def _json_attemp(data): + try: + return True, json.loads(data) + except ValueError: + return False, None # Don't care about this one + + success, json_result = _json_attemp(data) + if success: + return json_result + # If i'm here, it's not JSON, it's not XML, let's scream + # and raise the last context in this block (the XML exception) + # The function hack is because Py2.7 messes up with exception + # context otherwise. + _LOGGER.critical("Wasn't XML not JSON, failing") + raise DeserializationError("XML is invalid") from err + elif content_type.startswith("text/"): + return data_as_str + raise DeserializationError("Cannot deserialize content-type: {}".format(content_type)) + + @classmethod + def deserialize_from_http_generics(cls, body_bytes: Optional[Union[AnyStr, IO]], headers: Mapping) -> Any: + """Deserialize from HTTP response. + + Use bytes and headers to NOT use any requests/aiohttp or whatever + specific implementation. + Headers will tested for "content-type" + + :param bytes body_bytes: The body of the response. + :param dict headers: The headers of the response. + :returns: The deserialized data. + :rtype: object + """ + # Try to use content-type from headers if available + content_type = None + if "content-type" in headers: + content_type = headers["content-type"].split(";")[0].strip().lower() + # Ouch, this server did not declare what it sent... + # Let's guess it's JSON... + # Also, since Autorest was considering that an empty body was a valid JSON, + # need that test as well.... + else: + content_type = "application/json" + + if body_bytes: + return cls.deserialize_from_text(body_bytes, content_type) + return None + + +_LOGGER = logging.getLogger(__name__) + +try: + _long_type = long # type: ignore +except NameError: + _long_type = int + +TZ_UTC = datetime.timezone.utc + +_FLATTEN = re.compile(r"(? None: + self.additional_properties: Optional[Dict[str, Any]] = {} + for k in kwargs: # pylint: disable=consider-using-dict-items + if k not in self._attribute_map: + _LOGGER.warning("%s is not a known attribute of class %s and will be ignored", k, self.__class__) + elif k in self._validation and self._validation[k].get("readonly", False): + _LOGGER.warning("Readonly attribute %s will be ignored in class %s", k, self.__class__) + else: + setattr(self, k, kwargs[k]) + + def __eq__(self, other: Any) -> bool: + """Compare objects by comparing all attributes. + + :param object other: The object to compare + :returns: True if objects are equal + :rtype: bool + """ + if isinstance(other, self.__class__): + return self.__dict__ == other.__dict__ + return False + + def __ne__(self, other: Any) -> bool: + """Compare objects by comparing all attributes. + + :param object other: The object to compare + :returns: True if objects are not equal + :rtype: bool + """ + return not self.__eq__(other) + + def __str__(self) -> str: + return str(self.__dict__) + + @classmethod + def enable_additional_properties_sending(cls) -> None: + cls._attribute_map["additional_properties"] = {"key": "", "type": "{object}"} + + @classmethod + def is_xml_model(cls) -> bool: + try: + cls._xml_map # type: ignore + except AttributeError: + return False + return True + + @classmethod + def _create_xml_node(cls): + """Create XML node. + + :returns: The XML node + :rtype: xml.etree.ElementTree.Element + """ + try: + xml_map = cls._xml_map # type: ignore + except AttributeError: + xml_map = {} + + return _create_xml_node(xml_map.get("name", cls.__name__), xml_map.get("prefix", None), xml_map.get("ns", None)) + + def serialize(self, keep_readonly: bool = False, **kwargs: Any) -> JSON: + """Return the JSON that would be sent to server from this model. + + This is an alias to `as_dict(full_restapi_key_transformer, keep_readonly=False)`. + + If you want XML serialization, you can pass the kwargs is_xml=True. + + :param bool keep_readonly: If you want to serialize the readonly attributes + :returns: A dict JSON compatible object + :rtype: dict + """ + serializer = Serializer(self._infer_class_models()) + return serializer._serialize( # type: ignore # pylint: disable=protected-access + self, keep_readonly=keep_readonly, **kwargs + ) + + def as_dict( + self, + keep_readonly: bool = True, + key_transformer: Callable[[str, Dict[str, Any], Any], Any] = attribute_transformer, + **kwargs: Any + ) -> JSON: + """Return a dict that can be serialized using json.dump. + + Advanced usage might optionally use a callback as parameter: + + .. code::python + + def my_key_transformer(key, attr_desc, value): + return key + + Key is the attribute name used in Python. Attr_desc + is a dict of metadata. Currently contains 'type' with the + msrest type and 'key' with the RestAPI encoded key. + Value is the current value in this object. + + The string returned will be used to serialize the key. + If the return type is a list, this is considered hierarchical + result dict. + + See the three examples in this file: + + - attribute_transformer + - full_restapi_key_transformer + - last_restapi_key_transformer + + If you want XML serialization, you can pass the kwargs is_xml=True. + + :param bool keep_readonly: If you want to serialize the readonly attributes + :param function key_transformer: A key transformer function. + :returns: A dict JSON compatible object + :rtype: dict + """ + serializer = Serializer(self._infer_class_models()) + return serializer._serialize( # type: ignore # pylint: disable=protected-access + self, key_transformer=key_transformer, keep_readonly=keep_readonly, **kwargs + ) + + @classmethod + def _infer_class_models(cls): + try: + str_models = cls.__module__.rsplit(".", 1)[0] + models = sys.modules[str_models] + client_models = {k: v for k, v in models.__dict__.items() if isinstance(v, type)} + if cls.__name__ not in client_models: + raise ValueError("Not Autorest generated code") + except Exception: # pylint: disable=broad-exception-caught + # Assume it's not Autorest generated (tests?). Add ourselves as dependencies. + client_models = {cls.__name__: cls} + return client_models + + @classmethod + def deserialize(cls, data: Any, content_type: Optional[str] = None) -> Self: + """Parse a str using the RestAPI syntax and return a model. + + :param str data: A str using RestAPI structure. JSON by default. + :param str content_type: JSON by default, set application/xml if XML. + :returns: An instance of this model + :raises DeserializationError: if something went wrong + :rtype: Self + """ + deserializer = Deserializer(cls._infer_class_models()) + return deserializer(cls.__name__, data, content_type=content_type) # type: ignore + + @classmethod + def from_dict( + cls, + data: Any, + key_extractors: Optional[Callable[[str, Dict[str, Any], Any], Any]] = None, + content_type: Optional[str] = None, + ) -> Self: + """Parse a dict using given key extractor return a model. + + By default consider key + extractors (rest_key_case_insensitive_extractor, attribute_key_case_insensitive_extractor + and last_rest_key_case_insensitive_extractor) + + :param dict data: A dict using RestAPI structure + :param function key_extractors: A key extractor function. + :param str content_type: JSON by default, set application/xml if XML. + :returns: An instance of this model + :raises DeserializationError: if something went wrong + :rtype: Self + """ + deserializer = Deserializer(cls._infer_class_models()) + deserializer.key_extractors = ( # type: ignore + [ # type: ignore + attribute_key_case_insensitive_extractor, + rest_key_case_insensitive_extractor, + last_rest_key_case_insensitive_extractor, + ] + if key_extractors is None + else key_extractors + ) + return deserializer(cls.__name__, data, content_type=content_type) # type: ignore + + @classmethod + def _flatten_subtype(cls, key, objects): + if "_subtype_map" not in cls.__dict__: + return {} + result = dict(cls._subtype_map[key]) + for valuetype in cls._subtype_map[key].values(): + result.update(objects[valuetype]._flatten_subtype(key, objects)) # pylint: disable=protected-access + return result + + @classmethod + def _classify(cls, response, objects): + """Check the class _subtype_map for any child classes. + We want to ignore any inherited _subtype_maps. + + :param dict response: The initial data + :param dict objects: The class objects + :returns: The class to be used + :rtype: class + """ + for subtype_key in cls.__dict__.get("_subtype_map", {}).keys(): + subtype_value = None + + if not isinstance(response, ET.Element): + rest_api_response_key = cls._get_rest_key_parts(subtype_key)[-1] + subtype_value = response.get(rest_api_response_key, None) or response.get(subtype_key, None) + else: + subtype_value = xml_key_extractor(subtype_key, cls._attribute_map[subtype_key], response) + if subtype_value: + # Try to match base class. Can be class name only + # (bug to fix in Autorest to support x-ms-discriminator-name) + if cls.__name__ == subtype_value: + return cls + flatten_mapping_type = cls._flatten_subtype(subtype_key, objects) + try: + return objects[flatten_mapping_type[subtype_value]] # type: ignore + except KeyError: + _LOGGER.warning( + "Subtype value %s has no mapping, use base class %s.", + subtype_value, + cls.__name__, + ) + break + else: + _LOGGER.warning("Discriminator %s is absent or null, use base class %s.", subtype_key, cls.__name__) + break + return cls + + @classmethod + def _get_rest_key_parts(cls, attr_key): + """Get the RestAPI key of this attr, split it and decode part + :param str attr_key: Attribute key must be in attribute_map. + :returns: A list of RestAPI part + :rtype: list + """ + rest_split_key = _FLATTEN.split(cls._attribute_map[attr_key]["key"]) + return [_decode_attribute_map_key(key_part) for key_part in rest_split_key] + + +def _decode_attribute_map_key(key): + """This decode a key in an _attribute_map to the actual key we want to look at + inside the received data. + + :param str key: A key string from the generated code + :returns: The decoded key + :rtype: str + """ + return key.replace("\\.", ".") + + +class Serializer: # pylint: disable=too-many-public-methods + """Request object model serializer.""" + + basic_types = {str: "str", int: "int", bool: "bool", float: "float"} + + _xml_basic_types_serializers = {"bool": lambda x: str(x).lower()} + days = {0: "Mon", 1: "Tue", 2: "Wed", 3: "Thu", 4: "Fri", 5: "Sat", 6: "Sun"} + months = { + 1: "Jan", + 2: "Feb", + 3: "Mar", + 4: "Apr", + 5: "May", + 6: "Jun", + 7: "Jul", + 8: "Aug", + 9: "Sep", + 10: "Oct", + 11: "Nov", + 12: "Dec", + } + validation = { + "min_length": lambda x, y: len(x) < y, + "max_length": lambda x, y: len(x) > y, + "minimum": lambda x, y: x < y, + "maximum": lambda x, y: x > y, + "minimum_ex": lambda x, y: x <= y, + "maximum_ex": lambda x, y: x >= y, + "min_items": lambda x, y: len(x) < y, + "max_items": lambda x, y: len(x) > y, + "pattern": lambda x, y: not re.match(y, x, re.UNICODE), + "unique": lambda x, y: len(x) != len(set(x)), + "multiple": lambda x, y: x % y != 0, + } + + def __init__(self, classes: Optional[Mapping[str, type]] = None) -> None: + self.serialize_type = { + "iso-8601": Serializer.serialize_iso, + "rfc-1123": Serializer.serialize_rfc, + "unix-time": Serializer.serialize_unix, + "duration": Serializer.serialize_duration, + "date": Serializer.serialize_date, + "time": Serializer.serialize_time, + "decimal": Serializer.serialize_decimal, + "long": Serializer.serialize_long, + "bytearray": Serializer.serialize_bytearray, + "base64": Serializer.serialize_base64, + "object": self.serialize_object, + "[]": self.serialize_iter, + "{}": self.serialize_dict, + } + self.dependencies: Dict[str, type] = dict(classes) if classes else {} + self.key_transformer = full_restapi_key_transformer + self.client_side_validation = True + + def _serialize( # pylint: disable=too-many-nested-blocks, too-many-branches, too-many-statements, too-many-locals + self, target_obj, data_type=None, **kwargs + ): + """Serialize data into a string according to type. + + :param object target_obj: The data to be serialized. + :param str data_type: The type to be serialized from. + :rtype: str, dict + :raises SerializationError: if serialization fails. + :returns: The serialized data. + """ + key_transformer = kwargs.get("key_transformer", self.key_transformer) + keep_readonly = kwargs.get("keep_readonly", False) + if target_obj is None: + return None + + attr_name = None + class_name = target_obj.__class__.__name__ + + if data_type: + return self.serialize_data(target_obj, data_type, **kwargs) + + if not hasattr(target_obj, "_attribute_map"): + data_type = type(target_obj).__name__ + if data_type in self.basic_types.values(): + return self.serialize_data(target_obj, data_type, **kwargs) + + # Force "is_xml" kwargs if we detect a XML model + try: + is_xml_model_serialization = kwargs["is_xml"] + except KeyError: + is_xml_model_serialization = kwargs.setdefault("is_xml", target_obj.is_xml_model()) + + serialized = {} + if is_xml_model_serialization: + serialized = target_obj._create_xml_node() # pylint: disable=protected-access + try: + attributes = target_obj._attribute_map # pylint: disable=protected-access + for attr, attr_desc in attributes.items(): + attr_name = attr + if not keep_readonly and target_obj._validation.get( # pylint: disable=protected-access + attr_name, {} + ).get("readonly", False): + continue + + if attr_name == "additional_properties" and attr_desc["key"] == "": + if target_obj.additional_properties is not None: + serialized.update(target_obj.additional_properties) + continue + try: + + orig_attr = getattr(target_obj, attr) + if is_xml_model_serialization: + pass # Don't provide "transformer" for XML for now. Keep "orig_attr" + else: # JSON + keys, orig_attr = key_transformer(attr, attr_desc.copy(), orig_attr) + keys = keys if isinstance(keys, list) else [keys] + + kwargs["serialization_ctxt"] = attr_desc + new_attr = self.serialize_data(orig_attr, attr_desc["type"], **kwargs) + + if is_xml_model_serialization: + xml_desc = attr_desc.get("xml", {}) + xml_name = xml_desc.get("name", attr_desc["key"]) + xml_prefix = xml_desc.get("prefix", None) + xml_ns = xml_desc.get("ns", None) + if xml_desc.get("attr", False): + if xml_ns: + ET.register_namespace(xml_prefix, xml_ns) + xml_name = "{{{}}}{}".format(xml_ns, xml_name) + serialized.set(xml_name, new_attr) # type: ignore + continue + if xml_desc.get("text", False): + serialized.text = new_attr # type: ignore + continue + if isinstance(new_attr, list): + serialized.extend(new_attr) # type: ignore + elif isinstance(new_attr, ET.Element): + # If the down XML has no XML/Name, + # we MUST replace the tag with the local tag. But keeping the namespaces. + if "name" not in getattr(orig_attr, "_xml_map", {}): + splitted_tag = new_attr.tag.split("}") + if len(splitted_tag) == 2: # Namespace + new_attr.tag = "}".join([splitted_tag[0], xml_name]) + else: + new_attr.tag = xml_name + serialized.append(new_attr) # type: ignore + else: # That's a basic type + # Integrate namespace if necessary + local_node = _create_xml_node(xml_name, xml_prefix, xml_ns) + local_node.text = str(new_attr) + serialized.append(local_node) # type: ignore + else: # JSON + for k in reversed(keys): # type: ignore + new_attr = {k: new_attr} + + _new_attr = new_attr + _serialized = serialized + for k in keys: # type: ignore + if k not in _serialized: + _serialized.update(_new_attr) # type: ignore + _new_attr = _new_attr[k] # type: ignore + _serialized = _serialized[k] + except ValueError as err: + if isinstance(err, SerializationError): + raise + + except (AttributeError, KeyError, TypeError) as err: + msg = "Attribute {} in object {} cannot be serialized.\n{}".format(attr_name, class_name, str(target_obj)) + raise SerializationError(msg) from err + return serialized + + def body(self, data, data_type, **kwargs): + """Serialize data intended for a request body. + + :param object data: The data to be serialized. + :param str data_type: The type to be serialized from. + :rtype: dict + :raises SerializationError: if serialization fails. + :raises ValueError: if data is None + :returns: The serialized request body + """ + + # Just in case this is a dict + internal_data_type_str = data_type.strip("[]{}") + internal_data_type = self.dependencies.get(internal_data_type_str, None) + try: + is_xml_model_serialization = kwargs["is_xml"] + except KeyError: + if internal_data_type and issubclass(internal_data_type, Model): + is_xml_model_serialization = kwargs.setdefault("is_xml", internal_data_type.is_xml_model()) + else: + is_xml_model_serialization = False + if internal_data_type and not isinstance(internal_data_type, Enum): + try: + deserializer = Deserializer(self.dependencies) + # Since it's on serialization, it's almost sure that format is not JSON REST + # We're not able to deal with additional properties for now. + deserializer.additional_properties_detection = False + if is_xml_model_serialization: + deserializer.key_extractors = [ # type: ignore + attribute_key_case_insensitive_extractor, + ] + else: + deserializer.key_extractors = [ + rest_key_case_insensitive_extractor, + attribute_key_case_insensitive_extractor, + last_rest_key_case_insensitive_extractor, + ] + data = deserializer._deserialize(data_type, data) # pylint: disable=protected-access + except DeserializationError as err: + raise SerializationError("Unable to build a model: " + str(err)) from err + + return self._serialize(data, data_type, **kwargs) + + def url(self, name, data, data_type, **kwargs): + """Serialize data intended for a URL path. + + :param str name: The name of the URL path parameter. + :param object data: The data to be serialized. + :param str data_type: The type to be serialized from. + :rtype: str + :returns: The serialized URL path + :raises TypeError: if serialization fails. + :raises ValueError: if data is None + """ + try: + output = self.serialize_data(data, data_type, **kwargs) + if data_type == "bool": + output = json.dumps(output) + + if kwargs.get("skip_quote") is True: + output = str(output) + output = output.replace("{", quote("{")).replace("}", quote("}")) + else: + output = quote(str(output), safe="") + except SerializationError as exc: + raise TypeError("{} must be type {}.".format(name, data_type)) from exc + return output + + def query(self, name, data, data_type, **kwargs): + """Serialize data intended for a URL query. + + :param str name: The name of the query parameter. + :param object data: The data to be serialized. + :param str data_type: The type to be serialized from. + :rtype: str, list + :raises TypeError: if serialization fails. + :raises ValueError: if data is None + :returns: The serialized query parameter + """ + try: + # Treat the list aside, since we don't want to encode the div separator + if data_type.startswith("["): + internal_data_type = data_type[1:-1] + do_quote = not kwargs.get("skip_quote", False) + return self.serialize_iter(data, internal_data_type, do_quote=do_quote, **kwargs) + + # Not a list, regular serialization + output = self.serialize_data(data, data_type, **kwargs) + if data_type == "bool": + output = json.dumps(output) + if kwargs.get("skip_quote") is True: + output = str(output) + else: + output = quote(str(output), safe="") + except SerializationError as exc: + raise TypeError("{} must be type {}.".format(name, data_type)) from exc + return str(output) + + def header(self, name, data, data_type, **kwargs): + """Serialize data intended for a request header. + + :param str name: The name of the header. + :param object data: The data to be serialized. + :param str data_type: The type to be serialized from. + :rtype: str + :raises TypeError: if serialization fails. + :raises ValueError: if data is None + :returns: The serialized header + """ + try: + if data_type in ["[str]"]: + data = ["" if d is None else d for d in data] + + output = self.serialize_data(data, data_type, **kwargs) + if data_type == "bool": + output = json.dumps(output) + except SerializationError as exc: + raise TypeError("{} must be type {}.".format(name, data_type)) from exc + return str(output) + + def serialize_data(self, data, data_type, **kwargs): + """Serialize generic data according to supplied data type. + + :param object data: The data to be serialized. + :param str data_type: The type to be serialized from. + :raises AttributeError: if required data is None. + :raises ValueError: if data is None + :raises SerializationError: if serialization fails. + :returns: The serialized data. + :rtype: str, int, float, bool, dict, list + """ + if data is None: + raise ValueError("No value for given attribute") + + try: + if data is CoreNull: + return None + if data_type in self.basic_types.values(): + return self.serialize_basic(data, data_type, **kwargs) + + if data_type in self.serialize_type: + return self.serialize_type[data_type](data, **kwargs) + + # If dependencies is empty, try with current data class + # It has to be a subclass of Enum anyway + enum_type = self.dependencies.get(data_type, data.__class__) + if issubclass(enum_type, Enum): + return Serializer.serialize_enum(data, enum_obj=enum_type) + + iter_type = data_type[0] + data_type[-1] + if iter_type in self.serialize_type: + return self.serialize_type[iter_type](data, data_type[1:-1], **kwargs) + + except (ValueError, TypeError) as err: + msg = "Unable to serialize value: {!r} as type: {!r}." + raise SerializationError(msg.format(data, data_type)) from err + return self._serialize(data, **kwargs) + + @classmethod + def _get_custom_serializers(cls, data_type, **kwargs): # pylint: disable=inconsistent-return-statements + custom_serializer = kwargs.get("basic_types_serializers", {}).get(data_type) + if custom_serializer: + return custom_serializer + if kwargs.get("is_xml", False): + return cls._xml_basic_types_serializers.get(data_type) + + @classmethod + def serialize_basic(cls, data, data_type, **kwargs): + """Serialize basic builting data type. + Serializes objects to str, int, float or bool. + + Possible kwargs: + - basic_types_serializers dict[str, callable] : If set, use the callable as serializer + - is_xml bool : If set, use xml_basic_types_serializers + + :param obj data: Object to be serialized. + :param str data_type: Type of object in the iterable. + :rtype: str, int, float, bool + :return: serialized object + """ + custom_serializer = cls._get_custom_serializers(data_type, **kwargs) + if custom_serializer: + return custom_serializer(data) + if data_type == "str": + return cls.serialize_unicode(data) + return eval(data_type)(data) # nosec # pylint: disable=eval-used + + @classmethod + def serialize_unicode(cls, data): + """Special handling for serializing unicode strings in Py2. + Encode to UTF-8 if unicode, otherwise handle as a str. + + :param str data: Object to be serialized. + :rtype: str + :return: serialized object + """ + try: # If I received an enum, return its value + return data.value + except AttributeError: + pass + + try: + if isinstance(data, unicode): # type: ignore + # Don't change it, JSON and XML ElementTree are totally able + # to serialize correctly u'' strings + return data + except NameError: + return str(data) + return str(data) + + def serialize_iter(self, data, iter_type, div=None, **kwargs): + """Serialize iterable. + + Supported kwargs: + - serialization_ctxt dict : The current entry of _attribute_map, or same format. + serialization_ctxt['type'] should be same as data_type. + - is_xml bool : If set, serialize as XML + + :param list data: Object to be serialized. + :param str iter_type: Type of object in the iterable. + :param str div: If set, this str will be used to combine the elements + in the iterable into a combined string. Default is 'None'. + Defaults to False. + :rtype: list, str + :return: serialized iterable + """ + if isinstance(data, str): + raise SerializationError("Refuse str type as a valid iter type.") + + serialization_ctxt = kwargs.get("serialization_ctxt", {}) + is_xml = kwargs.get("is_xml", False) + + serialized = [] + for d in data: + try: + serialized.append(self.serialize_data(d, iter_type, **kwargs)) + except ValueError as err: + if isinstance(err, SerializationError): + raise + serialized.append(None) + + if kwargs.get("do_quote", False): + serialized = ["" if s is None else quote(str(s), safe="") for s in serialized] + + if div: + serialized = ["" if s is None else str(s) for s in serialized] + serialized = div.join(serialized) + + if "xml" in serialization_ctxt or is_xml: + # XML serialization is more complicated + xml_desc = serialization_ctxt.get("xml", {}) + xml_name = xml_desc.get("name") + if not xml_name: + xml_name = serialization_ctxt["key"] + + # Create a wrap node if necessary (use the fact that Element and list have "append") + is_wrapped = xml_desc.get("wrapped", False) + node_name = xml_desc.get("itemsName", xml_name) + if is_wrapped: + final_result = _create_xml_node(xml_name, xml_desc.get("prefix", None), xml_desc.get("ns", None)) + else: + final_result = [] + # All list elements to "local_node" + for el in serialized: + if isinstance(el, ET.Element): + el_node = el + else: + el_node = _create_xml_node(node_name, xml_desc.get("prefix", None), xml_desc.get("ns", None)) + if el is not None: # Otherwise it writes "None" :-p + el_node.text = str(el) + final_result.append(el_node) + return final_result + return serialized + + def serialize_dict(self, attr, dict_type, **kwargs): + """Serialize a dictionary of objects. + + :param dict attr: Object to be serialized. + :param str dict_type: Type of object in the dictionary. + :rtype: dict + :return: serialized dictionary + """ + serialization_ctxt = kwargs.get("serialization_ctxt", {}) + serialized = {} + for key, value in attr.items(): + try: + serialized[self.serialize_unicode(key)] = self.serialize_data(value, dict_type, **kwargs) + except ValueError as err: + if isinstance(err, SerializationError): + raise + serialized[self.serialize_unicode(key)] = None + + if "xml" in serialization_ctxt: + # XML serialization is more complicated + xml_desc = serialization_ctxt["xml"] + xml_name = xml_desc["name"] + + final_result = _create_xml_node(xml_name, xml_desc.get("prefix", None), xml_desc.get("ns", None)) + for key, value in serialized.items(): + ET.SubElement(final_result, key).text = value + return final_result + + return serialized + + def serialize_object(self, attr, **kwargs): # pylint: disable=too-many-return-statements + """Serialize a generic object. + This will be handled as a dictionary. If object passed in is not + a basic type (str, int, float, dict, list) it will simply be + cast to str. + + :param dict attr: Object to be serialized. + :rtype: dict or str + :return: serialized object + """ + if attr is None: + return None + if isinstance(attr, ET.Element): + return attr + obj_type = type(attr) + if obj_type in self.basic_types: + return self.serialize_basic(attr, self.basic_types[obj_type], **kwargs) + if obj_type is _long_type: + return self.serialize_long(attr) + if obj_type is str: + return self.serialize_unicode(attr) + if obj_type is datetime.datetime: + return self.serialize_iso(attr) + if obj_type is datetime.date: + return self.serialize_date(attr) + if obj_type is datetime.time: + return self.serialize_time(attr) + if obj_type is datetime.timedelta: + return self.serialize_duration(attr) + if obj_type is decimal.Decimal: + return self.serialize_decimal(attr) + + # If it's a model or I know this dependency, serialize as a Model + if obj_type in self.dependencies.values() or isinstance(attr, Model): + return self._serialize(attr) + + if obj_type == dict: + serialized = {} + for key, value in attr.items(): + try: + serialized[self.serialize_unicode(key)] = self.serialize_object(value, **kwargs) + except ValueError: + serialized[self.serialize_unicode(key)] = None + return serialized + + if obj_type == list: + serialized = [] + for obj in attr: + try: + serialized.append(self.serialize_object(obj, **kwargs)) + except ValueError: + pass + return serialized + return str(attr) + + @staticmethod + def serialize_enum(attr, enum_obj=None): + try: + result = attr.value + except AttributeError: + result = attr + try: + enum_obj(result) # type: ignore + return result + except ValueError as exc: + for enum_value in enum_obj: # type: ignore + if enum_value.value.lower() == str(attr).lower(): + return enum_value.value + error = "{!r} is not valid value for enum {!r}" + raise SerializationError(error.format(attr, enum_obj)) from exc + + @staticmethod + def serialize_bytearray(attr, **kwargs): # pylint: disable=unused-argument + """Serialize bytearray into base-64 string. + + :param str attr: Object to be serialized. + :rtype: str + :return: serialized base64 + """ + return b64encode(attr).decode() + + @staticmethod + def serialize_base64(attr, **kwargs): # pylint: disable=unused-argument + """Serialize str into base-64 string. + + :param str attr: Object to be serialized. + :rtype: str + :return: serialized base64 + """ + encoded = b64encode(attr).decode("ascii") + return encoded.strip("=").replace("+", "-").replace("/", "_") + + @staticmethod + def serialize_decimal(attr, **kwargs): # pylint: disable=unused-argument + """Serialize Decimal object to float. + + :param decimal attr: Object to be serialized. + :rtype: float + :return: serialized decimal + """ + return float(attr) + + @staticmethod + def serialize_long(attr, **kwargs): # pylint: disable=unused-argument + """Serialize long (Py2) or int (Py3). + + :param int attr: Object to be serialized. + :rtype: int/long + :return: serialized long + """ + return _long_type(attr) + + @staticmethod + def serialize_date(attr, **kwargs): # pylint: disable=unused-argument + """Serialize Date object into ISO-8601 formatted string. + + :param Date attr: Object to be serialized. + :rtype: str + :return: serialized date + """ + if isinstance(attr, str): + attr = isodate.parse_date(attr) + t = "{:04}-{:02}-{:02}".format(attr.year, attr.month, attr.day) + return t + + @staticmethod + def serialize_time(attr, **kwargs): # pylint: disable=unused-argument + """Serialize Time object into ISO-8601 formatted string. + + :param datetime.time attr: Object to be serialized. + :rtype: str + :return: serialized time + """ + if isinstance(attr, str): + attr = isodate.parse_time(attr) + t = "{:02}:{:02}:{:02}".format(attr.hour, attr.minute, attr.second) + if attr.microsecond: + t += ".{:02}".format(attr.microsecond) + return t + + @staticmethod + def serialize_duration(attr, **kwargs): # pylint: disable=unused-argument + """Serialize TimeDelta object into ISO-8601 formatted string. + + :param TimeDelta attr: Object to be serialized. + :rtype: str + :return: serialized duration + """ + if isinstance(attr, str): + attr = isodate.parse_duration(attr) + return isodate.duration_isoformat(attr) + + @staticmethod + def serialize_rfc(attr, **kwargs): # pylint: disable=unused-argument + """Serialize Datetime object into RFC-1123 formatted string. + + :param Datetime attr: Object to be serialized. + :rtype: str + :raises TypeError: if format invalid. + :return: serialized rfc + """ + try: + if not attr.tzinfo: + _LOGGER.warning("Datetime with no tzinfo will be considered UTC.") + utc = attr.utctimetuple() + except AttributeError as exc: + raise TypeError("RFC1123 object must be valid Datetime object.") from exc + + return "{}, {:02} {} {:04} {:02}:{:02}:{:02} GMT".format( + Serializer.days[utc.tm_wday], + utc.tm_mday, + Serializer.months[utc.tm_mon], + utc.tm_year, + utc.tm_hour, + utc.tm_min, + utc.tm_sec, + ) + + @staticmethod + def serialize_iso(attr, **kwargs): # pylint: disable=unused-argument + """Serialize Datetime object into ISO-8601 formatted string. + + :param Datetime attr: Object to be serialized. + :rtype: str + :raises SerializationError: if format invalid. + :return: serialized iso + """ + if isinstance(attr, str): + attr = isodate.parse_datetime(attr) + try: + if not attr.tzinfo: + _LOGGER.warning("Datetime with no tzinfo will be considered UTC.") + utc = attr.utctimetuple() + if utc.tm_year > 9999 or utc.tm_year < 1: + raise OverflowError("Hit max or min date") + + microseconds = str(attr.microsecond).rjust(6, "0").rstrip("0").ljust(3, "0") + if microseconds: + microseconds = "." + microseconds + date = "{:04}-{:02}-{:02}T{:02}:{:02}:{:02}".format( + utc.tm_year, utc.tm_mon, utc.tm_mday, utc.tm_hour, utc.tm_min, utc.tm_sec + ) + return date + microseconds + "Z" + except (ValueError, OverflowError) as err: + msg = "Unable to serialize datetime object." + raise SerializationError(msg) from err + except AttributeError as err: + msg = "ISO-8601 object must be valid Datetime object." + raise TypeError(msg) from err + + @staticmethod + def serialize_unix(attr, **kwargs): # pylint: disable=unused-argument + """Serialize Datetime object into IntTime format. + This is represented as seconds. + + :param Datetime attr: Object to be serialized. + :rtype: int + :raises SerializationError: if format invalid + :return: serialied unix + """ + if isinstance(attr, int): + return attr + try: + if not attr.tzinfo: + _LOGGER.warning("Datetime with no tzinfo will be considered UTC.") + return int(calendar.timegm(attr.utctimetuple())) + except AttributeError as exc: + raise TypeError("Unix time object must be valid Datetime object.") from exc + + +def rest_key_extractor(attr, attr_desc, data): # pylint: disable=unused-argument + key = attr_desc["key"] + working_data = data + + while "." in key: + # Need the cast, as for some reasons "split" is typed as list[str | Any] + dict_keys = cast(List[str], _FLATTEN.split(key)) + if len(dict_keys) == 1: + key = _decode_attribute_map_key(dict_keys[0]) + break + working_key = _decode_attribute_map_key(dict_keys[0]) + working_data = working_data.get(working_key, data) + if working_data is None: + # If at any point while following flatten JSON path see None, it means + # that all properties under are None as well + return None + key = ".".join(dict_keys[1:]) + + return working_data.get(key) + + +def rest_key_case_insensitive_extractor( # pylint: disable=unused-argument, inconsistent-return-statements + attr, attr_desc, data +): + key = attr_desc["key"] + working_data = data + + while "." in key: + dict_keys = _FLATTEN.split(key) + if len(dict_keys) == 1: + key = _decode_attribute_map_key(dict_keys[0]) + break + working_key = _decode_attribute_map_key(dict_keys[0]) + working_data = attribute_key_case_insensitive_extractor(working_key, None, working_data) + if working_data is None: + # If at any point while following flatten JSON path see None, it means + # that all properties under are None as well + return None + key = ".".join(dict_keys[1:]) + + if working_data: + return attribute_key_case_insensitive_extractor(key, None, working_data) + + +def last_rest_key_extractor(attr, attr_desc, data): # pylint: disable=unused-argument + """Extract the attribute in "data" based on the last part of the JSON path key. + + :param str attr: The attribute to extract + :param dict attr_desc: The attribute description + :param dict data: The data to extract from + :rtype: object + :returns: The extracted attribute + """ + key = attr_desc["key"] + dict_keys = _FLATTEN.split(key) + return attribute_key_extractor(dict_keys[-1], None, data) + + +def last_rest_key_case_insensitive_extractor(attr, attr_desc, data): # pylint: disable=unused-argument + """Extract the attribute in "data" based on the last part of the JSON path key. + + This is the case insensitive version of "last_rest_key_extractor" + :param str attr: The attribute to extract + :param dict attr_desc: The attribute description + :param dict data: The data to extract from + :rtype: object + :returns: The extracted attribute + """ + key = attr_desc["key"] + dict_keys = _FLATTEN.split(key) + return attribute_key_case_insensitive_extractor(dict_keys[-1], None, data) + + +def attribute_key_extractor(attr, _, data): + return data.get(attr) + + +def attribute_key_case_insensitive_extractor(attr, _, data): + found_key = None + lower_attr = attr.lower() + for key in data: + if lower_attr == key.lower(): + found_key = key + break + + return data.get(found_key) + + +def _extract_name_from_internal_type(internal_type): + """Given an internal type XML description, extract correct XML name with namespace. + + :param dict internal_type: An model type + :rtype: tuple + :returns: A tuple XML name + namespace dict + """ + internal_type_xml_map = getattr(internal_type, "_xml_map", {}) + xml_name = internal_type_xml_map.get("name", internal_type.__name__) + xml_ns = internal_type_xml_map.get("ns", None) + if xml_ns: + xml_name = "{{{}}}{}".format(xml_ns, xml_name) + return xml_name + + +def xml_key_extractor(attr, attr_desc, data): # pylint: disable=unused-argument,too-many-return-statements + if isinstance(data, dict): + return None + + # Test if this model is XML ready first + if not isinstance(data, ET.Element): + return None + + xml_desc = attr_desc.get("xml", {}) + xml_name = xml_desc.get("name", attr_desc["key"]) + + # Look for a children + is_iter_type = attr_desc["type"].startswith("[") + is_wrapped = xml_desc.get("wrapped", False) + internal_type = attr_desc.get("internalType", None) + internal_type_xml_map = getattr(internal_type, "_xml_map", {}) + + # Integrate namespace if necessary + xml_ns = xml_desc.get("ns", internal_type_xml_map.get("ns", None)) + if xml_ns: + xml_name = "{{{}}}{}".format(xml_ns, xml_name) + + # If it's an attribute, that's simple + if xml_desc.get("attr", False): + return data.get(xml_name) + + # If it's x-ms-text, that's simple too + if xml_desc.get("text", False): + return data.text + + # Scenario where I take the local name: + # - Wrapped node + # - Internal type is an enum (considered basic types) + # - Internal type has no XML/Name node + if is_wrapped or (internal_type and (issubclass(internal_type, Enum) or "name" not in internal_type_xml_map)): + children = data.findall(xml_name) + # If internal type has a local name and it's not a list, I use that name + elif not is_iter_type and internal_type and "name" in internal_type_xml_map: + xml_name = _extract_name_from_internal_type(internal_type) + children = data.findall(xml_name) + # That's an array + else: + if internal_type: # Complex type, ignore itemsName and use the complex type name + items_name = _extract_name_from_internal_type(internal_type) + else: + items_name = xml_desc.get("itemsName", xml_name) + children = data.findall(items_name) + + if len(children) == 0: + if is_iter_type: + if is_wrapped: + return None # is_wrapped no node, we want None + return [] # not wrapped, assume empty list + return None # Assume it's not there, maybe an optional node. + + # If is_iter_type and not wrapped, return all found children + if is_iter_type: + if not is_wrapped: + return children + # Iter and wrapped, should have found one node only (the wrap one) + if len(children) != 1: + raise DeserializationError( + "Tried to deserialize an array not wrapped, and found several nodes '{}'. Maybe you should declare this array as wrapped?".format( + xml_name + ) + ) + return list(children[0]) # Might be empty list and that's ok. + + # Here it's not a itertype, we should have found one element only or empty + if len(children) > 1: + raise DeserializationError("Find several XML '{}' where it was not expected".format(xml_name)) + return children[0] + + +class Deserializer: + """Response object model deserializer. + + :param dict classes: Class type dictionary for deserializing complex types. + :ivar list key_extractors: Ordered list of extractors to be used by this deserializer. + """ + + basic_types = {str: "str", int: "int", bool: "bool", float: "float"} + + valid_date = re.compile(r"\d{4}[-]\d{2}[-]\d{2}T\d{2}:\d{2}:\d{2}\.?\d*Z?[-+]?[\d{2}]?:?[\d{2}]?") + + def __init__(self, classes: Optional[Mapping[str, type]] = None) -> None: + self.deserialize_type = { + "iso-8601": Deserializer.deserialize_iso, + "rfc-1123": Deserializer.deserialize_rfc, + "unix-time": Deserializer.deserialize_unix, + "duration": Deserializer.deserialize_duration, + "date": Deserializer.deserialize_date, + "time": Deserializer.deserialize_time, + "decimal": Deserializer.deserialize_decimal, + "long": Deserializer.deserialize_long, + "bytearray": Deserializer.deserialize_bytearray, + "base64": Deserializer.deserialize_base64, + "object": self.deserialize_object, + "[]": self.deserialize_iter, + "{}": self.deserialize_dict, + } + self.deserialize_expected_types = { + "duration": (isodate.Duration, datetime.timedelta), + "iso-8601": (datetime.datetime), + } + self.dependencies: Dict[str, type] = dict(classes) if classes else {} + self.key_extractors = [rest_key_extractor, xml_key_extractor] + # Additional properties only works if the "rest_key_extractor" is used to + # extract the keys. Making it to work whatever the key extractor is too much + # complicated, with no real scenario for now. + # So adding a flag to disable additional properties detection. This flag should be + # used if your expect the deserialization to NOT come from a JSON REST syntax. + # Otherwise, result are unexpected + self.additional_properties_detection = True + + def __call__(self, target_obj, response_data, content_type=None): + """Call the deserializer to process a REST response. + + :param str target_obj: Target data type to deserialize to. + :param requests.Response response_data: REST response object. + :param str content_type: Swagger "produces" if available. + :raises DeserializationError: if deserialization fails. + :return: Deserialized object. + :rtype: object + """ + data = self._unpack_content(response_data, content_type) + return self._deserialize(target_obj, data) + + def _deserialize(self, target_obj, data): # pylint: disable=inconsistent-return-statements + """Call the deserializer on a model. + + Data needs to be already deserialized as JSON or XML ElementTree + + :param str target_obj: Target data type to deserialize to. + :param object data: Object to deserialize. + :raises DeserializationError: if deserialization fails. + :return: Deserialized object. + :rtype: object + """ + # This is already a model, go recursive just in case + if hasattr(data, "_attribute_map"): + constants = [name for name, config in getattr(data, "_validation", {}).items() if config.get("constant")] + try: + for attr, mapconfig in data._attribute_map.items(): # pylint: disable=protected-access + if attr in constants: + continue + value = getattr(data, attr) + if value is None: + continue + local_type = mapconfig["type"] + internal_data_type = local_type.strip("[]{}") + if internal_data_type not in self.dependencies or isinstance(internal_data_type, Enum): + continue + setattr(data, attr, self._deserialize(local_type, value)) + return data + except AttributeError: + return + + response, class_name = self._classify_target(target_obj, data) + + if isinstance(response, str): + return self.deserialize_data(data, response) + if isinstance(response, type) and issubclass(response, Enum): + return self.deserialize_enum(data, response) + + if data is None or data is CoreNull: + return data + try: + attributes = response._attribute_map # type: ignore # pylint: disable=protected-access + d_attrs = {} + for attr, attr_desc in attributes.items(): + # Check empty string. If it's not empty, someone has a real "additionalProperties"... + if attr == "additional_properties" and attr_desc["key"] == "": + continue + raw_value = None + # Enhance attr_desc with some dynamic data + attr_desc = attr_desc.copy() # Do a copy, do not change the real one + internal_data_type = attr_desc["type"].strip("[]{}") + if internal_data_type in self.dependencies: + attr_desc["internalType"] = self.dependencies[internal_data_type] + + for key_extractor in self.key_extractors: + found_value = key_extractor(attr, attr_desc, data) + if found_value is not None: + if raw_value is not None and raw_value != found_value: + msg = ( + "Ignoring extracted value '%s' from %s for key '%s'" + " (duplicate extraction, follow extractors order)" + ) + _LOGGER.warning(msg, found_value, key_extractor, attr) + continue + raw_value = found_value + + value = self.deserialize_data(raw_value, attr_desc["type"]) + d_attrs[attr] = value + except (AttributeError, TypeError, KeyError) as err: + msg = "Unable to deserialize to object: " + class_name # type: ignore + raise DeserializationError(msg) from err + additional_properties = self._build_additional_properties(attributes, data) + return self._instantiate_model(response, d_attrs, additional_properties) + + def _build_additional_properties(self, attribute_map, data): + if not self.additional_properties_detection: + return None + if "additional_properties" in attribute_map and attribute_map.get("additional_properties", {}).get("key") != "": + # Check empty string. If it's not empty, someone has a real "additionalProperties" + return None + if isinstance(data, ET.Element): + data = {el.tag: el.text for el in data} + + known_keys = { + _decode_attribute_map_key(_FLATTEN.split(desc["key"])[0]) + for desc in attribute_map.values() + if desc["key"] != "" + } + present_keys = set(data.keys()) + missing_keys = present_keys - known_keys + return {key: data[key] for key in missing_keys} + + def _classify_target(self, target, data): + """Check to see whether the deserialization target object can + be classified into a subclass. + Once classification has been determined, initialize object. + + :param str target: The target object type to deserialize to. + :param str/dict data: The response data to deserialize. + :return: The classified target object and its class name. + :rtype: tuple + """ + if target is None: + return None, None + + if isinstance(target, str): + try: + target = self.dependencies[target] + except KeyError: + return target, target + + try: + target = target._classify(data, self.dependencies) # type: ignore # pylint: disable=protected-access + except AttributeError: + pass # Target is not a Model, no classify + return target, target.__class__.__name__ # type: ignore + + def failsafe_deserialize(self, target_obj, data, content_type=None): + """Ignores any errors encountered in deserialization, + and falls back to not deserializing the object. Recommended + for use in error deserialization, as we want to return the + HttpResponseError to users, and not have them deal with + a deserialization error. + + :param str target_obj: The target object type to deserialize to. + :param str/dict data: The response data to deserialize. + :param str content_type: Swagger "produces" if available. + :return: Deserialized object. + :rtype: object + """ + try: + return self(target_obj, data, content_type=content_type) + except: # pylint: disable=bare-except + _LOGGER.debug( + "Ran into a deserialization error. Ignoring since this is failsafe deserialization", exc_info=True + ) + return None + + @staticmethod + def _unpack_content(raw_data, content_type=None): + """Extract the correct structure for deserialization. + + If raw_data is a PipelineResponse, try to extract the result of RawDeserializer. + if we can't, raise. Your Pipeline should have a RawDeserializer. + + If not a pipeline response and raw_data is bytes or string, use content-type + to decode it. If no content-type, try JSON. + + If raw_data is something else, bypass all logic and return it directly. + + :param obj raw_data: Data to be processed. + :param str content_type: How to parse if raw_data is a string/bytes. + :raises JSONDecodeError: If JSON is requested and parsing is impossible. + :raises UnicodeDecodeError: If bytes is not UTF8 + :rtype: object + :return: Unpacked content. + """ + # Assume this is enough to detect a Pipeline Response without importing it + context = getattr(raw_data, "context", {}) + if context: + if RawDeserializer.CONTEXT_NAME in context: + return context[RawDeserializer.CONTEXT_NAME] + raise ValueError("This pipeline didn't have the RawDeserializer policy; can't deserialize") + + # Assume this is enough to recognize universal_http.ClientResponse without importing it + if hasattr(raw_data, "body"): + return RawDeserializer.deserialize_from_http_generics(raw_data.text(), raw_data.headers) + + # Assume this enough to recognize requests.Response without importing it. + if hasattr(raw_data, "_content_consumed"): + return RawDeserializer.deserialize_from_http_generics(raw_data.text, raw_data.headers) + + if isinstance(raw_data, (str, bytes)) or hasattr(raw_data, "read"): + return RawDeserializer.deserialize_from_text(raw_data, content_type) # type: ignore + return raw_data + + def _instantiate_model(self, response, attrs, additional_properties=None): + """Instantiate a response model passing in deserialized args. + + :param Response response: The response model class. + :param dict attrs: The deserialized response attributes. + :param dict additional_properties: Additional properties to be set. + :rtype: Response + :return: The instantiated response model. + """ + if callable(response): + subtype = getattr(response, "_subtype_map", {}) + try: + readonly = [ + k + for k, v in response._validation.items() # pylint: disable=protected-access # type: ignore + if v.get("readonly") + ] + const = [ + k + for k, v in response._validation.items() # pylint: disable=protected-access # type: ignore + if v.get("constant") + ] + kwargs = {k: v for k, v in attrs.items() if k not in subtype and k not in readonly + const} + response_obj = response(**kwargs) + for attr in readonly: + setattr(response_obj, attr, attrs.get(attr)) + if additional_properties: + response_obj.additional_properties = additional_properties # type: ignore + return response_obj + except TypeError as err: + msg = "Unable to deserialize {} into model {}. ".format(kwargs, response) # type: ignore + raise DeserializationError(msg + str(err)) from err + else: + try: + for attr, value in attrs.items(): + setattr(response, attr, value) + return response + except Exception as exp: + msg = "Unable to populate response model. " + msg += "Type: {}, Error: {}".format(type(response), exp) + raise DeserializationError(msg) from exp + + def deserialize_data(self, data, data_type): # pylint: disable=too-many-return-statements + """Process data for deserialization according to data type. + + :param str data: The response string to be deserialized. + :param str data_type: The type to deserialize to. + :raises DeserializationError: if deserialization fails. + :return: Deserialized object. + :rtype: object + """ + if data is None: + return data + + try: + if not data_type: + return data + if data_type in self.basic_types.values(): + return self.deserialize_basic(data, data_type) + if data_type in self.deserialize_type: + if isinstance(data, self.deserialize_expected_types.get(data_type, tuple())): + return data + + is_a_text_parsing_type = lambda x: x not in [ # pylint: disable=unnecessary-lambda-assignment + "object", + "[]", + r"{}", + ] + if isinstance(data, ET.Element) and is_a_text_parsing_type(data_type) and not data.text: + return None + data_val = self.deserialize_type[data_type](data) + return data_val + + iter_type = data_type[0] + data_type[-1] + if iter_type in self.deserialize_type: + return self.deserialize_type[iter_type](data, data_type[1:-1]) + + obj_type = self.dependencies[data_type] + if issubclass(obj_type, Enum): + if isinstance(data, ET.Element): + data = data.text + return self.deserialize_enum(data, obj_type) + + except (ValueError, TypeError, AttributeError) as err: + msg = "Unable to deserialize response data." + msg += " Data: {}, {}".format(data, data_type) + raise DeserializationError(msg) from err + return self._deserialize(obj_type, data) + + def deserialize_iter(self, attr, iter_type): + """Deserialize an iterable. + + :param list attr: Iterable to be deserialized. + :param str iter_type: The type of object in the iterable. + :return: Deserialized iterable. + :rtype: list + """ + if attr is None: + return None + if isinstance(attr, ET.Element): # If I receive an element here, get the children + attr = list(attr) + if not isinstance(attr, (list, set)): + raise DeserializationError("Cannot deserialize as [{}] an object of type {}".format(iter_type, type(attr))) + return [self.deserialize_data(a, iter_type) for a in attr] + + def deserialize_dict(self, attr, dict_type): + """Deserialize a dictionary. + + :param dict/list attr: Dictionary to be deserialized. Also accepts + a list of key, value pairs. + :param str dict_type: The object type of the items in the dictionary. + :return: Deserialized dictionary. + :rtype: dict + """ + if isinstance(attr, list): + return {x["key"]: self.deserialize_data(x["value"], dict_type) for x in attr} + + if isinstance(attr, ET.Element): + # Transform value into {"Key": "value"} + attr = {el.tag: el.text for el in attr} + return {k: self.deserialize_data(v, dict_type) for k, v in attr.items()} + + def deserialize_object(self, attr, **kwargs): # pylint: disable=too-many-return-statements + """Deserialize a generic object. + This will be handled as a dictionary. + + :param dict attr: Dictionary to be deserialized. + :return: Deserialized object. + :rtype: dict + :raises TypeError: if non-builtin datatype encountered. + """ + if attr is None: + return None + if isinstance(attr, ET.Element): + # Do no recurse on XML, just return the tree as-is + return attr + if isinstance(attr, str): + return self.deserialize_basic(attr, "str") + obj_type = type(attr) + if obj_type in self.basic_types: + return self.deserialize_basic(attr, self.basic_types[obj_type]) + if obj_type is _long_type: + return self.deserialize_long(attr) + + if obj_type == dict: + deserialized = {} + for key, value in attr.items(): + try: + deserialized[key] = self.deserialize_object(value, **kwargs) + except ValueError: + deserialized[key] = None + return deserialized + + if obj_type == list: + deserialized = [] + for obj in attr: + try: + deserialized.append(self.deserialize_object(obj, **kwargs)) + except ValueError: + pass + return deserialized + + error = "Cannot deserialize generic object with type: " + raise TypeError(error + str(obj_type)) + + def deserialize_basic(self, attr, data_type): # pylint: disable=too-many-return-statements + """Deserialize basic builtin data type from string. + Will attempt to convert to str, int, float and bool. + This function will also accept '1', '0', 'true' and 'false' as + valid bool values. + + :param str attr: response string to be deserialized. + :param str data_type: deserialization data type. + :return: Deserialized basic type. + :rtype: str, int, float or bool + :raises TypeError: if string format is not valid. + """ + # If we're here, data is supposed to be a basic type. + # If it's still an XML node, take the text + if isinstance(attr, ET.Element): + attr = attr.text + if not attr: + if data_type == "str": + # None or '', node is empty string. + return "" + # None or '', node with a strong type is None. + # Don't try to model "empty bool" or "empty int" + return None + + if data_type == "bool": + if attr in [True, False, 1, 0]: + return bool(attr) + if isinstance(attr, str): + if attr.lower() in ["true", "1"]: + return True + if attr.lower() in ["false", "0"]: + return False + raise TypeError("Invalid boolean value: {}".format(attr)) + + if data_type == "str": + return self.deserialize_unicode(attr) + return eval(data_type)(attr) # nosec # pylint: disable=eval-used + + @staticmethod + def deserialize_unicode(data): + """Preserve unicode objects in Python 2, otherwise return data + as a string. + + :param str data: response string to be deserialized. + :return: Deserialized string. + :rtype: str or unicode + """ + # We might be here because we have an enum modeled as string, + # and we try to deserialize a partial dict with enum inside + if isinstance(data, Enum): + return data + + # Consider this is real string + try: + if isinstance(data, unicode): # type: ignore + return data + except NameError: + return str(data) + return str(data) + + @staticmethod + def deserialize_enum(data, enum_obj): + """Deserialize string into enum object. + + If the string is not a valid enum value it will be returned as-is + and a warning will be logged. + + :param str data: Response string to be deserialized. If this value is + None or invalid it will be returned as-is. + :param Enum enum_obj: Enum object to deserialize to. + :return: Deserialized enum object. + :rtype: Enum + """ + if isinstance(data, enum_obj) or data is None: + return data + if isinstance(data, Enum): + data = data.value + if isinstance(data, int): + # Workaround. We might consider remove it in the future. + try: + return list(enum_obj.__members__.values())[data] + except IndexError as exc: + error = "{!r} is not a valid index for enum {!r}" + raise DeserializationError(error.format(data, enum_obj)) from exc + try: + return enum_obj(str(data)) + except ValueError: + for enum_value in enum_obj: + if enum_value.value.lower() == str(data).lower(): + return enum_value + # We don't fail anymore for unknown value, we deserialize as a string + _LOGGER.warning("Deserializer is not able to find %s as valid enum in %s", data, enum_obj) + return Deserializer.deserialize_unicode(data) + + @staticmethod + def deserialize_bytearray(attr): + """Deserialize string into bytearray. + + :param str attr: response string to be deserialized. + :return: Deserialized bytearray + :rtype: bytearray + :raises TypeError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + return bytearray(b64decode(attr)) # type: ignore + + @staticmethod + def deserialize_base64(attr): + """Deserialize base64 encoded string into string. + + :param str attr: response string to be deserialized. + :return: Deserialized base64 string + :rtype: bytearray + :raises TypeError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + padding = "=" * (3 - (len(attr) + 3) % 4) # type: ignore + attr = attr + padding # type: ignore + encoded = attr.replace("-", "+").replace("_", "/") + return b64decode(encoded) + + @staticmethod + def deserialize_decimal(attr): + """Deserialize string into Decimal object. + + :param str attr: response string to be deserialized. + :return: Deserialized decimal + :raises DeserializationError: if string format invalid. + :rtype: decimal + """ + if isinstance(attr, ET.Element): + attr = attr.text + try: + return decimal.Decimal(str(attr)) # type: ignore + except decimal.DecimalException as err: + msg = "Invalid decimal {}".format(attr) + raise DeserializationError(msg) from err + + @staticmethod + def deserialize_long(attr): + """Deserialize string into long (Py2) or int (Py3). + + :param str attr: response string to be deserialized. + :return: Deserialized int + :rtype: long or int + :raises ValueError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + return _long_type(attr) # type: ignore + + @staticmethod + def deserialize_duration(attr): + """Deserialize ISO-8601 formatted string into TimeDelta object. + + :param str attr: response string to be deserialized. + :return: Deserialized duration + :rtype: TimeDelta + :raises DeserializationError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + try: + duration = isodate.parse_duration(attr) + except (ValueError, OverflowError, AttributeError) as err: + msg = "Cannot deserialize duration object." + raise DeserializationError(msg) from err + return duration + + @staticmethod + def deserialize_date(attr): + """Deserialize ISO-8601 formatted string into Date object. + + :param str attr: response string to be deserialized. + :return: Deserialized date + :rtype: Date + :raises DeserializationError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + if re.search(r"[^\W\d_]", attr, re.I + re.U): # type: ignore + raise DeserializationError("Date must have only digits and -. Received: %s" % attr) + # This must NOT use defaultmonth/defaultday. Using None ensure this raises an exception. + return isodate.parse_date(attr, defaultmonth=0, defaultday=0) + + @staticmethod + def deserialize_time(attr): + """Deserialize ISO-8601 formatted string into time object. + + :param str attr: response string to be deserialized. + :return: Deserialized time + :rtype: datetime.time + :raises DeserializationError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + if re.search(r"[^\W\d_]", attr, re.I + re.U): # type: ignore + raise DeserializationError("Date must have only digits and -. Received: %s" % attr) + return isodate.parse_time(attr) + + @staticmethod + def deserialize_rfc(attr): + """Deserialize RFC-1123 formatted string into Datetime object. + + :param str attr: response string to be deserialized. + :return: Deserialized RFC datetime + :rtype: Datetime + :raises DeserializationError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + try: + parsed_date = email.utils.parsedate_tz(attr) # type: ignore + date_obj = datetime.datetime( + *parsed_date[:6], tzinfo=datetime.timezone(datetime.timedelta(minutes=(parsed_date[9] or 0) / 60)) + ) + if not date_obj.tzinfo: + date_obj = date_obj.astimezone(tz=TZ_UTC) + except ValueError as err: + msg = "Cannot deserialize to rfc datetime object." + raise DeserializationError(msg) from err + return date_obj + + @staticmethod + def deserialize_iso(attr): + """Deserialize ISO-8601 formatted string into Datetime object. + + :param str attr: response string to be deserialized. + :return: Deserialized ISO datetime + :rtype: Datetime + :raises DeserializationError: if string format invalid. + """ + if isinstance(attr, ET.Element): + attr = attr.text + try: + attr = attr.upper() # type: ignore + match = Deserializer.valid_date.match(attr) + if not match: + raise ValueError("Invalid datetime string: " + attr) + + check_decimal = attr.split(".") + if len(check_decimal) > 1: + decimal_str = "" + for digit in check_decimal[1]: + if digit.isdigit(): + decimal_str += digit + else: + break + if len(decimal_str) > 6: + attr = attr.replace(decimal_str, decimal_str[0:6]) + + date_obj = isodate.parse_datetime(attr) + test_utc = date_obj.utctimetuple() + if test_utc.tm_year > 9999 or test_utc.tm_year < 1: + raise OverflowError("Hit max or min date") + except (ValueError, OverflowError, AttributeError) as err: + msg = "Cannot deserialize datetime object." + raise DeserializationError(msg) from err + return date_obj + + @staticmethod + def deserialize_unix(attr): + """Serialize Datetime object into IntTime format. + This is represented as seconds. + + :param int attr: Object to be serialized. + :return: Deserialized datetime + :rtype: Datetime + :raises DeserializationError: if format invalid + """ + if isinstance(attr, ET.Element): + attr = int(attr.text) # type: ignore + try: + attr = int(attr) + date_obj = datetime.datetime.fromtimestamp(attr, TZ_UTC) + except ValueError as err: + msg = "Cannot deserialize to unix datetime object." + raise DeserializationError(msg) from err + return date_obj diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_version.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_version.py similarity index 82% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_version.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_version.py index 4b334be1d06..c04584b58b2 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_version.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/_version.py @@ -1,9 +1,9 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -VERSION = "1.0.0b1" +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +VERSION = "1.2.0b3" diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/__init__.py similarity index 65% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/__init__.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/__init__.py index 28de9dae0b4..89eff463684 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/__init__.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/__init__.py @@ -1,23 +1,29 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from ._connected_kubernetes_client import ConnectedKubernetesClient - -try: - from ._patch import __all__ as _patch_all - from ._patch import * # pylint: disable=unused-wildcard-import -except ImportError: - _patch_all = [] -from ._patch import patch_sdk as _patch_sdk - -__all__ = [ - "ConnectedKubernetesClient", -] -__all__.extend([p for p in _patch_all if p not in __all__]) - -_patch_sdk() +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=wrong-import-position + +from typing import TYPE_CHECKING + +if TYPE_CHECKING: + from ._patch import * # pylint: disable=unused-wildcard-import + +from ._client import KubernetesClient # type: ignore + +try: + from ._patch import __all__ as _patch_all + from ._patch import * +except ImportError: + _patch_all = [] +from ._patch import patch_sdk as _patch_sdk + +__all__ = [ + "KubernetesClient", +] +__all__.extend([p for p in _patch_all if p not in __all__]) # pyright: ignore + +_patch_sdk() diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_connected_kubernetes_client.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_client.py similarity index 67% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_connected_kubernetes_client.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_client.py index ea43c80539f..64bfb1663c8 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_connected_kubernetes_client.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_client.py @@ -1,119 +1,133 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from copy import deepcopy -from typing import Any, Awaitable, TYPE_CHECKING - -from azure.core.pipeline import policies -from azure.core.rest import AsyncHttpResponse, HttpRequest -from azure.mgmt.core import AsyncARMPipelineClient -from azure.mgmt.core.policies import AsyncARMAutoResourceProviderRegistrationPolicy - -from .. import models as _models -from .._serialization import Deserializer, Serializer -from ._configuration import ConnectedKubernetesClientConfiguration -from .operations import ConnectedClusterOperations, Operations - -if TYPE_CHECKING: - # pylint: disable=unused-import,ungrouped-imports - from azure.core.credentials_async import AsyncTokenCredential - - -class ConnectedKubernetesClient: # pylint: disable=client-accepts-api-version-keyword - """Azure Connected Cluster Resource Provider API for onboarding a Kubernetes Cluster to Azure Arc. - - :ivar connected_cluster: ConnectedClusterOperations operations - :vartype connected_cluster: - azure.mgmt.hybridkubernetes.aio.operations.ConnectedClusterOperations - :ivar operations: Operations operations - :vartype operations: azure.mgmt.hybridkubernetes.aio.operations.Operations - :param credential: Credential needed for the client to connect to Azure. Required. - :type credential: ~azure.core.credentials_async.AsyncTokenCredential - :param subscription_id: The ID of the target subscription. Required. - :type subscription_id: str - :param base_url: Service URL. Default value is "https://management.azure.com". - :type base_url: str - :keyword api_version: Api Version. Default value is "2024-07-01-preview". Note that overriding - this default value may result in unsupported behavior. - :paramtype api_version: str - :keyword int polling_interval: Default waiting time between two polls for LRO operations if no - Retry-After header is present. - """ - - def __init__( - self, - credential: "AsyncTokenCredential", - subscription_id: str, - base_url: str = "https://management.azure.com", - **kwargs: Any - ) -> None: - self._config = ConnectedKubernetesClientConfiguration( - credential=credential, subscription_id=subscription_id, **kwargs - ) - _policies = kwargs.pop("policies", None) - if _policies is None: - _policies = [ - policies.RequestIdPolicy(**kwargs), - self._config.headers_policy, - self._config.user_agent_policy, - self._config.proxy_policy, - policies.ContentDecodePolicy(**kwargs), - AsyncARMAutoResourceProviderRegistrationPolicy(), - self._config.redirect_policy, - self._config.retry_policy, - self._config.authentication_policy, - self._config.custom_hook_policy, - self._config.logging_policy, - policies.DistributedTracingPolicy(**kwargs), - policies.SensitiveHeaderCleanupPolicy(**kwargs) if self._config.redirect_policy else None, - self._config.http_logging_policy, - ] - self._client: AsyncARMPipelineClient = AsyncARMPipelineClient(base_url=base_url, policies=_policies, **kwargs) - - client_models = {k: v for k, v in _models.__dict__.items() if isinstance(v, type)} - self._serialize = Serializer(client_models) - self._deserialize = Deserializer(client_models) - self._serialize.client_side_validation = False - self.connected_cluster = ConnectedClusterOperations( - self._client, self._config, self._serialize, self._deserialize - ) - self.operations = Operations(self._client, self._config, self._serialize, self._deserialize) - - def _send_request( - self, request: HttpRequest, *, stream: bool = False, **kwargs: Any - ) -> Awaitable[AsyncHttpResponse]: - """Runs the network request through the client's chained policies. - - >>> from azure.core.rest import HttpRequest - >>> request = HttpRequest("GET", "https://www.example.org/") - - >>> response = await client._send_request(request) - - - For more information on this code flow, see https://aka.ms/azsdk/dpcodegen/python/send_request - - :param request: The network request you want to make. Required. - :type request: ~azure.core.rest.HttpRequest - :keyword bool stream: Whether the response payload will be streamed. Defaults to False. - :return: The response of your network call. Does not do error handling on your response. - :rtype: ~azure.core.rest.AsyncHttpResponse - """ - - request_copy = deepcopy(request) - request_copy.url = self._client.format_url(request_copy.url) - return self._client.send_request(request_copy, stream=stream, **kwargs) # type: ignore - - async def close(self) -> None: - await self._client.close() - - async def __aenter__(self) -> "ConnectedKubernetesClient": - await self._client.__aenter__() - return self - - async def __aexit__(self, *exc_details: Any) -> None: - await self._client.__aexit__(*exc_details) +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +from copy import deepcopy +from typing import Any, Awaitable, Optional, TYPE_CHECKING, cast +from typing_extensions import Self + +from azure.core.pipeline import policies +from azure.core.rest import AsyncHttpResponse, HttpRequest +from azure.core.settings import settings +from azure.mgmt.core import AsyncARMPipelineClient +from azure.mgmt.core.policies import AsyncARMAutoResourceProviderRegistrationPolicy +from azure.mgmt.core.tools import get_arm_endpoints + +from .._utils.serialization import Deserializer, Serializer +from ._configuration import KubernetesClientConfiguration +from .operations import ConnectedClusterOperations, Operations + +if TYPE_CHECKING: + from azure.core.credentials_async import AsyncTokenCredential + + +class KubernetesClient: + """Azure Connected Cluster Resource Provider API for onboarding a Kubernetes Cluster to Azure Arc. + + :ivar operations: Operations operations + :vartype operations: azure.mgmt.hybridkubernetes.aio.operations.Operations + :ivar connected_cluster: ConnectedClusterOperations operations + :vartype connected_cluster: + azure.mgmt.hybridkubernetes.aio.operations.ConnectedClusterOperations + :param credential: Credential used to authenticate requests to the service. Required. + :type credential: ~azure.core.credentials_async.AsyncTokenCredential + :param subscription_id: The ID of the target subscription. The value must be an UUID. Required. + :type subscription_id: str + :param base_url: Service host. Default value is None. + :type base_url: str + :keyword api_version: The API version to use for this operation. Default value is + "2025-08-01-preview". Note that overriding this default value may result in unsupported + behavior. + :paramtype api_version: str + :keyword int polling_interval: Default waiting time between two polls for LRO operations if no + Retry-After header is present. + """ + + def __init__( + self, credential: "AsyncTokenCredential", subscription_id: str, base_url: Optional[str] = None, **kwargs: Any + ) -> None: + _endpoint = "{endpoint}" + _cloud = kwargs.pop("cloud_setting", None) or settings.current.azure_cloud # type: ignore + _endpoints = get_arm_endpoints(_cloud) + if not base_url: + base_url = _endpoints["resource_manager"] + credential_scopes = kwargs.pop("credential_scopes", _endpoints["credential_scopes"]) + self._config = KubernetesClientConfiguration( + credential=credential, + subscription_id=subscription_id, + base_url=cast(str, base_url), + credential_scopes=credential_scopes, + **kwargs + ) + + _policies = kwargs.pop("policies", None) + if _policies is None: + _policies = [ + policies.RequestIdPolicy(**kwargs), + self._config.headers_policy, + self._config.user_agent_policy, + self._config.proxy_policy, + policies.ContentDecodePolicy(**kwargs), + AsyncARMAutoResourceProviderRegistrationPolicy(), + self._config.redirect_policy, + self._config.retry_policy, + self._config.authentication_policy, + self._config.custom_hook_policy, + self._config.logging_policy, + policies.DistributedTracingPolicy(**kwargs), + policies.SensitiveHeaderCleanupPolicy(**kwargs) if self._config.redirect_policy else None, + self._config.http_logging_policy, + ] + self._client: AsyncARMPipelineClient = AsyncARMPipelineClient( + base_url=cast(str, _endpoint), policies=_policies, **kwargs + ) + + self._serialize = Serializer() + self._deserialize = Deserializer() + self._serialize.client_side_validation = False + self.operations = Operations(self._client, self._config, self._serialize, self._deserialize) + self.connected_cluster = ConnectedClusterOperations( + self._client, self._config, self._serialize, self._deserialize + ) + + def send_request( + self, request: HttpRequest, *, stream: bool = False, **kwargs: Any + ) -> Awaitable[AsyncHttpResponse]: + """Runs the network request through the client's chained policies. + + >>> from azure.core.rest import HttpRequest + >>> request = HttpRequest("GET", "https://www.example.org/") + + >>> response = await client.send_request(request) + + + For more information on this code flow, see https://aka.ms/azsdk/dpcodegen/python/send_request + + :param request: The network request you want to make. Required. + :type request: ~azure.core.rest.HttpRequest + :keyword bool stream: Whether the response payload will be streamed. Defaults to False. + :return: The response of your network call. Does not do error handling on your response. + :rtype: ~azure.core.rest.AsyncHttpResponse + """ + + request_copy = deepcopy(request) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + + request_copy.url = self._client.format_url(request_copy.url, **path_format_arguments) + return self._client.send_request(request_copy, stream=stream, **kwargs) # type: ignore + + async def close(self) -> None: + await self._client.close() + + async def __aenter__(self) -> Self: + await self._client.__aenter__() + return self + + async def __aexit__(self, *exc_details: Any) -> None: + await self._client.__aexit__(*exc_details) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_configuration.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_configuration.py similarity index 73% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_configuration.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_configuration.py index ab36e71dd74..94fd4094a8c 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/_configuration.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_configuration.py @@ -1,65 +1,74 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from typing import Any, TYPE_CHECKING - -from azure.core.pipeline import policies -from azure.mgmt.core.policies import ARMHttpLoggingPolicy, AsyncARMChallengeAuthenticationPolicy - -from .._version import VERSION - -if TYPE_CHECKING: - # pylint: disable=unused-import,ungrouped-imports - from azure.core.credentials_async import AsyncTokenCredential - - -class ConnectedKubernetesClientConfiguration: # pylint: disable=too-many-instance-attributes,name-too-long - """Configuration for ConnectedKubernetesClient. - - Note that all parameters used to create this instance are saved as instance - attributes. - - :param credential: Credential needed for the client to connect to Azure. Required. - :type credential: ~azure.core.credentials_async.AsyncTokenCredential - :param subscription_id: The ID of the target subscription. Required. - :type subscription_id: str - :keyword api_version: Api Version. Default value is "2024-07-01-preview". Note that overriding - this default value may result in unsupported behavior. - :paramtype api_version: str - """ - - def __init__(self, credential: "AsyncTokenCredential", subscription_id: str, **kwargs: Any) -> None: - api_version: str = kwargs.pop("api_version", "2024-07-01-preview") - - if credential is None: - raise ValueError("Parameter 'credential' must not be None.") - if subscription_id is None: - raise ValueError("Parameter 'subscription_id' must not be None.") - - self.credential = credential - self.subscription_id = subscription_id - self.api_version = api_version - self.credential_scopes = kwargs.pop("credential_scopes", ["https://management.azure.com/.default"]) - kwargs.setdefault("sdk_moniker", "mgmt-hybridkubernetes/{}".format(VERSION)) - self.polling_interval = kwargs.get("polling_interval", 30) - self._configure(**kwargs) - - def _configure(self, **kwargs: Any) -> None: - self.user_agent_policy = kwargs.get("user_agent_policy") or policies.UserAgentPolicy(**kwargs) - self.headers_policy = kwargs.get("headers_policy") or policies.HeadersPolicy(**kwargs) - self.proxy_policy = kwargs.get("proxy_policy") or policies.ProxyPolicy(**kwargs) - self.logging_policy = kwargs.get("logging_policy") or policies.NetworkTraceLoggingPolicy(**kwargs) - self.http_logging_policy = kwargs.get("http_logging_policy") or ARMHttpLoggingPolicy(**kwargs) - self.custom_hook_policy = kwargs.get("custom_hook_policy") or policies.CustomHookPolicy(**kwargs) - self.redirect_policy = kwargs.get("redirect_policy") or policies.AsyncRedirectPolicy(**kwargs) - self.retry_policy = kwargs.get("retry_policy") or policies.AsyncRetryPolicy(**kwargs) - self.authentication_policy = kwargs.get("authentication_policy") - if self.credential and not self.authentication_policy: - self.authentication_policy = AsyncARMChallengeAuthenticationPolicy( - self.credential, *self.credential_scopes, **kwargs - ) +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +from typing import Any, TYPE_CHECKING + +from azure.core.pipeline import policies +from azure.mgmt.core.policies import ARMHttpLoggingPolicy, AsyncARMChallengeAuthenticationPolicy + +from .._version import VERSION + +if TYPE_CHECKING: + from azure.core.credentials_async import AsyncTokenCredential + + +class KubernetesClientConfiguration: # pylint: disable=too-many-instance-attributes + """Configuration for KubernetesClient. + + Note that all parameters used to create this instance are saved as instance + attributes. + + :param credential: Credential used to authenticate requests to the service. Required. + :type credential: ~azure.core.credentials_async.AsyncTokenCredential + :param subscription_id: The ID of the target subscription. The value must be an UUID. Required. + :type subscription_id: str + :param base_url: Service host. Default value is "https://management.azure.com". + :type base_url: str + :keyword api_version: The API version to use for this operation. Default value is + "2025-08-01-preview". Note that overriding this default value may result in unsupported + behavior. + :paramtype api_version: str + """ + + def __init__( + self, + credential: "AsyncTokenCredential", + subscription_id: str, + base_url: str = "https://management.azure.com", + **kwargs: Any + ) -> None: + api_version: str = kwargs.pop("api_version", "2025-08-01-preview") + + if credential is None: + raise ValueError("Parameter 'credential' must not be None.") + if subscription_id is None: + raise ValueError("Parameter 'subscription_id' must not be None.") + + self.credential = credential + self.subscription_id = subscription_id + self.base_url = base_url + self.api_version = api_version + self.credential_scopes = kwargs.pop("credential_scopes", ["https://management.azure.com/.default"]) + kwargs.setdefault("sdk_moniker", "mgmt-hybridkubernetes/{}".format(VERSION)) + self.polling_interval = kwargs.get("polling_interval", 30) + self._configure(**kwargs) + + def _configure(self, **kwargs: Any) -> None: + self.user_agent_policy = kwargs.get("user_agent_policy") or policies.UserAgentPolicy(**kwargs) + self.headers_policy = kwargs.get("headers_policy") or policies.HeadersPolicy(**kwargs) + self.proxy_policy = kwargs.get("proxy_policy") or policies.ProxyPolicy(**kwargs) + self.logging_policy = kwargs.get("logging_policy") or policies.NetworkTraceLoggingPolicy(**kwargs) + self.http_logging_policy = kwargs.get("http_logging_policy") or ARMHttpLoggingPolicy(**kwargs) + self.custom_hook_policy = kwargs.get("custom_hook_policy") or policies.CustomHookPolicy(**kwargs) + self.redirect_policy = kwargs.get("redirect_policy") or policies.AsyncRedirectPolicy(**kwargs) + self.retry_policy = kwargs.get("retry_policy") or policies.AsyncRetryPolicy(**kwargs) + self.authentication_policy = kwargs.get("authentication_policy") + if self.credential and not self.authentication_policy: + self.authentication_policy = AsyncARMChallengeAuthenticationPolicy( + self.credential, *self.credential_scopes, **kwargs + ) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_patch.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_patch.py similarity index 61% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_patch.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_patch.py index 1bb0db275de..8bcb627aa47 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_patch.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/_patch.py @@ -1,20 +1,21 @@ -# ------------------------------------ -# Copyright (c) Microsoft Corporation. -# Licensed under the MIT License. -# ------------------------------------ -"""Customize generated code here. - -Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize -""" -from typing import List - -__all__: List[str] = [] # Add all objects you want publicly available to users at this package level - - -def patch_sdk(): - """Do not remove from this file. - - `patch_sdk` is a last resort escape hatch that allows you to do customizations - you can't accomplish using the techniques described in - https://aka.ms/azsdk/python/dpcodegen/python/customize - """ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# -------------------------------------------------------------------------- +"""Customize generated code here. + +Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize +""" +from typing import List + +__all__: List[str] = [] # Add all objects you want publicly available to users at this package level + + +def patch_sdk(): + """Do not remove from this file. + + `patch_sdk` is a last resort escape hatch that allows you to do customizations + you can't accomplish using the techniques described in + https://aka.ms/azsdk/python/dpcodegen/python/customize + """ diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/__init__.py similarity index 56% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/__init__.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/__init__.py index 1ad2f7aa3b6..8395d53508f 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/__init__.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/__init__.py @@ -1,21 +1,27 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from ._connected_cluster_operations import ConnectedClusterOperations -from ._operations import Operations - -from ._patch import __all__ as _patch_all -from ._patch import * # pylint: disable=unused-wildcard-import -from ._patch import patch_sdk as _patch_sdk - -__all__ = [ - "ConnectedClusterOperations", - "Operations", -] -__all__.extend([p for p in _patch_all if p not in __all__]) -_patch_sdk() +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=wrong-import-position + +from typing import TYPE_CHECKING + +if TYPE_CHECKING: + from ._patch import * # pylint: disable=unused-wildcard-import + +from ._operations import Operations # type: ignore +from ._operations import ConnectedClusterOperations # type: ignore + +from ._patch import __all__ as _patch_all +from ._patch import * +from ._patch import patch_sdk as _patch_sdk + +__all__ = [ + "Operations", + "ConnectedClusterOperations", +] +__all__.extend([p for p in _patch_all if p not in __all__]) # pyright: ignore +_patch_sdk() diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_connected_cluster_operations.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/_operations.py similarity index 56% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_connected_cluster_operations.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/_operations.py index d4e369c79e7..61683c18b91 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/_connected_cluster_operations.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/_operations.py @@ -1,883 +1,1138 @@ -# pylint: disable=too-many-lines,too-many-statements -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- -from io import IOBase -import sys -from typing import Any, AsyncIterable, Callable, Dict, IO, Optional, Type, TypeVar, Union, cast, overload -import urllib.parse - -from azure.core.async_paging import AsyncItemPaged, AsyncList -from azure.core.exceptions import ( - ClientAuthenticationError, - HttpResponseError, - ResourceExistsError, - ResourceNotFoundError, - ResourceNotModifiedError, - map_error, -) -from azure.core.pipeline import PipelineResponse -from azure.core.pipeline.transport import AsyncHttpResponse -from azure.core.polling import AsyncLROPoller, AsyncNoPolling, AsyncPollingMethod -from azure.core.rest import HttpRequest -from azure.core.tracing.decorator import distributed_trace -from azure.core.tracing.decorator_async import distributed_trace_async -from azure.core.utils import case_insensitive_dict -from azure.mgmt.core.exceptions import ARMErrorFormat -from azure.mgmt.core.polling.async_arm_polling import AsyncARMPolling - -from ... import models as _models -from ..._vendor import _convert_request -from ...operations._connected_cluster_operations import ( - build_create_request, - build_delete_request, - build_get_request, - build_list_by_resource_group_request, - build_list_by_subscription_request, - build_list_cluster_user_credential_request, - build_update_request, -) - -if sys.version_info >= (3, 9): - from collections.abc import MutableMapping -else: - from typing import MutableMapping # type: ignore # pylint: disable=ungrouped-imports -T = TypeVar("T") -ClsType = Optional[Callable[[PipelineResponse[HttpRequest, AsyncHttpResponse], T, Dict[str, Any]], Any]] - - -class ConnectedClusterOperations: - """ - .. warning:: - **DO NOT** instantiate this class directly. - - Instead, you should access the following operations through - :class:`~azure.mgmt.hybridkubernetes.aio.ConnectedKubernetesClient`'s - :attr:`connected_cluster` attribute. - """ - - models = _models - - def __init__(self, *args, **kwargs) -> None: - input_args = list(args) - self._client = input_args.pop(0) if input_args else kwargs.pop("client") - self._config = input_args.pop(0) if input_args else kwargs.pop("config") - self._serialize = input_args.pop(0) if input_args else kwargs.pop("serializer") - self._deserialize = input_args.pop(0) if input_args else kwargs.pop("deserializer") - - async def _create_initial( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: Union[_models.ConnectedCluster, IO[bytes]], - **kwargs: Any - ) -> _models.ConnectedCluster: - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - - content_type = content_type or "application/json" - _json = None - _content = None - if isinstance(connected_cluster, (IOBase, bytes)): - _content = connected_cluster - else: - _json = self._serialize.body(connected_cluster, "ConnectedCluster") - - _request = build_create_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - content_type=content_type, - json=_json, - content=_content, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200, 201]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - if response.status_code == 200: - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if response.status_code == 201: - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - @overload - async def begin_create( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: _models.ConnectedCluster, - *, - content_type: str = "application/json", - **kwargs: Any - ) -> AsyncLROPoller[_models.ConnectedCluster]: - """Register a new Kubernetes cluster with Azure Resource Manager. - - API to register a new Kubernetes cluster and create a tracked resource in Azure Resource - Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. - :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. - Default value is "application/json". - :paramtype content_type: str - :return: An instance of AsyncLROPoller that returns either ConnectedCluster or the result of - cls(response) - :rtype: - ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @overload - async def begin_create( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: IO[bytes], - *, - content_type: str = "application/json", - **kwargs: Any - ) -> AsyncLROPoller[_models.ConnectedCluster]: - """Register a new Kubernetes cluster with Azure Resource Manager. - - API to register a new Kubernetes cluster and create a tracked resource in Azure Resource - Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. - :type connected_cluster: IO[bytes] - :keyword content_type: Body Parameter content-type. Content type parameter for binary body. - Default value is "application/json". - :paramtype content_type: str - :return: An instance of AsyncLROPoller that returns either ConnectedCluster or the result of - cls(response) - :rtype: - ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @distributed_trace_async - async def begin_create( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: Union[_models.ConnectedCluster, IO[bytes]], - **kwargs: Any - ) -> AsyncLROPoller[_models.ConnectedCluster]: - """Register a new Kubernetes cluster with Azure Resource Manager. - - API to register a new Kubernetes cluster and create a tracked resource in Azure Resource - Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster: Parameters supplied to Create a Connected Cluster. Is either a - ConnectedCluster type or a IO[bytes] type. Required. - :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster or IO[bytes] - :return: An instance of AsyncLROPoller that returns either ConnectedCluster or the result of - cls(response) - :rtype: - ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - polling: Union[bool, AsyncPollingMethod] = kwargs.pop("polling", True) - lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) - cont_token: Optional[str] = kwargs.pop("continuation_token", None) - if cont_token is None: - raw_result = await self._create_initial( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - connected_cluster=connected_cluster, - api_version=api_version, - content_type=content_type, - cls=lambda x, y, z: x, - headers=_headers, - params=_params, - **kwargs - ) - kwargs.pop("error_map", None) - - def get_long_running_output(pipeline_response): - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - return deserialized - - if polling is True: - polling_method: AsyncPollingMethod = cast( - AsyncPollingMethod, - AsyncARMPolling(lro_delay, lro_options={"final-state-via": "azure-async-operation"}, **kwargs), - ) - elif polling is False: - polling_method = cast(AsyncPollingMethod, AsyncNoPolling()) - else: - polling_method = polling - if cont_token: - return AsyncLROPoller[_models.ConnectedCluster].from_continuation_token( - polling_method=polling_method, - continuation_token=cont_token, - client=self._client, - deserialization_callback=get_long_running_output, - ) - return AsyncLROPoller[_models.ConnectedCluster]( - self._client, raw_result, get_long_running_output, polling_method # type: ignore - ) - - @overload - async def update( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster_patch: _models.ConnectedClusterPatch, - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.ConnectedCluster: - """Updates a connected cluster. - - API to update certain properties of the connected cluster resource. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. - :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch - :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. - Default value is "application/json". - :paramtype content_type: str - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @overload - async def update( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster_patch: IO[bytes], - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.ConnectedCluster: - """Updates a connected cluster. - - API to update certain properties of the connected cluster resource. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. - :type connected_cluster_patch: IO[bytes] - :keyword content_type: Body Parameter content-type. Content type parameter for binary body. - Default value is "application/json". - :paramtype content_type: str - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @distributed_trace_async - async def update( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster_patch: Union[_models.ConnectedClusterPatch, IO[bytes]], - **kwargs: Any - ) -> _models.ConnectedCluster: - """Updates a connected cluster. - - API to update certain properties of the connected cluster resource. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Is either a - ConnectedClusterPatch type or a IO[bytes] type. Required. - :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch or - IO[bytes] - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - - content_type = content_type or "application/json" - _json = None - _content = None - if isinstance(connected_cluster_patch, (IOBase, bytes)): - _content = connected_cluster_patch - else: - _json = self._serialize.body(connected_cluster_patch, "ConnectedClusterPatch") - - _request = build_update_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - content_type=content_type, - json=_json, - content=_content, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - @distributed_trace_async - async def get(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> _models.ConnectedCluster: - """Get the properties of the specified connected cluster. - - Returns the properties of the specified connected cluster, including name, identity, - properties, and additional cluster details. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - - _request = build_get_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - async def _delete_initial( # pylint: disable=inconsistent-return-statements - self, resource_group_name: str, cluster_name: str, **kwargs: Any - ) -> None: - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[None] = kwargs.pop("cls", None) - - _request = build_delete_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200, 202, 204]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - if cls: - return cls(pipeline_response, None, {}) # type: ignore - - @distributed_trace_async - async def begin_delete(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> AsyncLROPoller[None]: - """Delete a connected cluster. - - Delete a connected cluster, removing the tracked resource in Azure Resource Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :return: An instance of AsyncLROPoller that returns either None or the result of cls(response) - :rtype: ~azure.core.polling.AsyncLROPoller[None] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[None] = kwargs.pop("cls", None) - polling: Union[bool, AsyncPollingMethod] = kwargs.pop("polling", True) - lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) - cont_token: Optional[str] = kwargs.pop("continuation_token", None) - if cont_token is None: - raw_result = await self._delete_initial( # type: ignore - resource_group_name=resource_group_name, - cluster_name=cluster_name, - api_version=api_version, - cls=lambda x, y, z: x, - headers=_headers, - params=_params, - **kwargs - ) - kwargs.pop("error_map", None) - - def get_long_running_output(pipeline_response): # pylint: disable=inconsistent-return-statements - if cls: - return cls(pipeline_response, None, {}) # type: ignore - - if polling is True: - polling_method: AsyncPollingMethod = cast( - AsyncPollingMethod, AsyncARMPolling(lro_delay, lro_options={"final-state-via": "location"}, **kwargs) - ) - elif polling is False: - polling_method = cast(AsyncPollingMethod, AsyncNoPolling()) - else: - polling_method = polling - if cont_token: - return AsyncLROPoller[None].from_continuation_token( - polling_method=polling_method, - continuation_token=cont_token, - client=self._client, - deserialization_callback=get_long_running_output, - ) - return AsyncLROPoller[None](self._client, raw_result, get_long_running_output, polling_method) # type: ignore - - @overload - async def list_cluster_user_credential( - self, - resource_group_name: str, - cluster_name: str, - properties: _models.ListClusterUserCredentialProperties, - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.CredentialResults: - """Gets cluster user credentials of a connected cluster. - - Gets cluster user credentials of the connected cluster with a specified resource group and - name. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param properties: ListClusterUserCredential properties. Required. - :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties - :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. - Default value is "application/json". - :paramtype content_type: str - :return: CredentialResults or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @overload - async def list_cluster_user_credential( - self, - resource_group_name: str, - cluster_name: str, - properties: IO[bytes], - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.CredentialResults: - """Gets cluster user credentials of a connected cluster. - - Gets cluster user credentials of the connected cluster with a specified resource group and - name. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param properties: ListClusterUserCredential properties. Required. - :type properties: IO[bytes] - :keyword content_type: Body Parameter content-type. Content type parameter for binary body. - Default value is "application/json". - :paramtype content_type: str - :return: CredentialResults or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @distributed_trace_async - async def list_cluster_user_credential( - self, - resource_group_name: str, - cluster_name: str, - properties: Union[_models.ListClusterUserCredentialProperties, IO[bytes]], - **kwargs: Any - ) -> _models.CredentialResults: - """Gets cluster user credentials of a connected cluster. - - Gets cluster user credentials of the connected cluster with a specified resource group and - name. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param properties: ListClusterUserCredential properties. Is either a - ListClusterUserCredentialProperties type or a IO[bytes] type. Required. - :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties or - IO[bytes] - :return: CredentialResults or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults - :raises ~azure.core.exceptions.HttpResponseError: - """ - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.CredentialResults] = kwargs.pop("cls", None) - - content_type = content_type or "application/json" - _json = None - _content = None - if isinstance(properties, (IOBase, bytes)): - _content = properties - else: - _json = self._serialize.body(properties, "ListClusterUserCredentialProperties") - - _request = build_list_cluster_user_credential_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - content_type=content_type, - json=_json, - content=_content, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - deserialized = self._deserialize("CredentialResults", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - @distributed_trace - def list_by_resource_group( - self, resource_group_name: str, **kwargs: Any - ) -> AsyncIterable["_models.ConnectedCluster"]: - """Lists all connected clusters in the given ResourceGroup. - - API to enumerate registered connected K8s clusters under a Resource Group. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :return: An iterator like instance of either ConnectedCluster or the result of cls(response) - :rtype: - ~azure.core.async_paging.AsyncItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.ConnectedClusterList] = kwargs.pop("cls", None) - - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - def prepare_request(next_link=None): - if not next_link: - - _request = build_list_by_resource_group_request( - resource_group_name=resource_group_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - else: - # make call to next link with the client's api-version - _parsed_next_link = urllib.parse.urlparse(next_link) - _next_request_params = case_insensitive_dict( - { - key: [urllib.parse.quote(v) for v in value] - for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() - } - ) - _next_request_params["api-version"] = self._config.api_version - _request = HttpRequest( - "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - _request.method = "GET" - return _request - - async def extract_data(pipeline_response): - deserialized = self._deserialize("ConnectedClusterList", pipeline_response) - list_of_elem = deserialized.value - if cls: - list_of_elem = cls(list_of_elem) # type: ignore - return deserialized.next_link or None, AsyncList(list_of_elem) - - async def get_next(next_link=None): - _request = prepare_request(next_link) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - return pipeline_response - - return AsyncItemPaged(get_next, extract_data) - - @distributed_trace - def list_by_subscription(self, **kwargs: Any) -> AsyncIterable["_models.ConnectedCluster"]: - """Lists all connected clusters in the given Subscription. - - API to enumerate registered connected K8s clusters under a Subscription. - - :return: An iterator like instance of either ConnectedCluster or the result of cls(response) - :rtype: - ~azure.core.async_paging.AsyncItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.ConnectedClusterList] = kwargs.pop("cls", None) - - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - def prepare_request(next_link=None): - if not next_link: - - _request = build_list_by_subscription_request( - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - else: - # make call to next link with the client's api-version - _parsed_next_link = urllib.parse.urlparse(next_link) - _next_request_params = case_insensitive_dict( - { - key: [urllib.parse.quote(v) for v in value] - for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() - } - ) - _next_request_params["api-version"] = self._config.api_version - _request = HttpRequest( - "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - _request.method = "GET" - return _request - - async def extract_data(pipeline_response): - deserialized = self._deserialize("ConnectedClusterList", pipeline_response) - list_of_elem = deserialized.value - if cls: - list_of_elem = cls(list_of_elem) # type: ignore - return deserialized.next_link or None, AsyncList(list_of_elem) - - async def get_next(next_link=None): - _request = prepare_request(next_link) - - _stream = False - pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - return pipeline_response - - return AsyncItemPaged(get_next, extract_data) +# pylint: disable=too-many-lines +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +from collections.abc import MutableMapping +from io import IOBase +import json +from typing import Any, AsyncIterator, Callable, Dict, IO, List, Optional, TypeVar, Union, cast, overload +import urllib.parse + +from azure.core import AsyncPipelineClient +from azure.core.async_paging import AsyncItemPaged, AsyncList +from azure.core.exceptions import ( + ClientAuthenticationError, + HttpResponseError, + ResourceExistsError, + ResourceNotFoundError, + ResourceNotModifiedError, + StreamClosedError, + StreamConsumedError, + map_error, +) +from azure.core.pipeline import PipelineResponse +from azure.core.polling import AsyncLROPoller, AsyncNoPolling, AsyncPollingMethod +from azure.core.rest import AsyncHttpResponse, HttpRequest +from azure.core.tracing.decorator import distributed_trace +from azure.core.tracing.decorator_async import distributed_trace_async +from azure.core.utils import case_insensitive_dict +from azure.mgmt.core.exceptions import ARMErrorFormat +from azure.mgmt.core.polling.async_arm_polling import AsyncARMPolling + +from ... import models as _models +from ..._utils.model_base import SdkJSONEncoder, _deserialize, _failsafe_deserialize +from ..._utils.serialization import Deserializer, Serializer +from ...operations._operations import ( + build_connected_cluster_create_or_replace_request, + build_connected_cluster_delete_request, + build_connected_cluster_get_request, + build_connected_cluster_list_by_resource_group_request, + build_connected_cluster_list_by_subscription_request, + build_connected_cluster_list_cluster_user_credential_request, + build_connected_cluster_update_request, + build_operations_get_request, +) +from .._configuration import KubernetesClientConfiguration + +T = TypeVar("T") +ClsType = Optional[Callable[[PipelineResponse[HttpRequest, AsyncHttpResponse], T, Dict[str, Any]], Any]] +JSON = MutableMapping[str, Any] + + +class Operations: + """ + .. warning:: + **DO NOT** instantiate this class directly. + + Instead, you should access the following operations through + :class:`~azure.mgmt.hybridkubernetes.aio.KubernetesClient`'s + :attr:`operations` attribute. + """ + + def __init__(self, *args, **kwargs) -> None: + input_args = list(args) + self._client: AsyncPipelineClient = input_args.pop(0) if input_args else kwargs.pop("client") + self._config: KubernetesClientConfiguration = input_args.pop(0) if input_args else kwargs.pop("config") + self._serialize: Serializer = input_args.pop(0) if input_args else kwargs.pop("serializer") + self._deserialize: Deserializer = input_args.pop(0) if input_args else kwargs.pop("deserializer") + + @distributed_trace + def get(self, **kwargs: Any) -> AsyncItemPaged["_models.Operation"]: + """List the operations for the provider. + + :return: An iterator like instance of Operation + :rtype: ~azure.core.async_paging.AsyncItemPaged[~azure.mgmt.hybridkubernetes.models.Operation] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[List[_models.Operation]] = kwargs.pop("cls", None) + + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + def prepare_request(next_link=None): + if not next_link: + + _request = build_operations_get_request( + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + else: + # make call to next link with the client's api-version + _parsed_next_link = urllib.parse.urlparse(next_link) + _next_request_params = case_insensitive_dict( + { + key: [urllib.parse.quote(v) for v in value] + for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() + } + ) + _next_request_params["api-version"] = self._config.api_version + _request = HttpRequest( + "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + return _request + + async def extract_data(pipeline_response): + deserialized = pipeline_response.http_response.json() + list_of_elem = _deserialize(List[_models.Operation], deserialized.get("value", [])) + if cls: + list_of_elem = cls(list_of_elem) # type: ignore + return deserialized.get("nextLink") or None, AsyncList(list_of_elem) + + async def get_next(next_link=None): + _request = prepare_request(next_link) + + _stream = False + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + response = pipeline_response.http_response + + if response.status_code not in [200]: + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + return pipeline_response + + return AsyncItemPaged(get_next, extract_data) + + +class ConnectedClusterOperations: + """ + .. warning:: + **DO NOT** instantiate this class directly. + + Instead, you should access the following operations through + :class:`~azure.mgmt.hybridkubernetes.aio.KubernetesClient`'s + :attr:`connected_cluster` attribute. + """ + + def __init__(self, *args, **kwargs) -> None: + input_args = list(args) + self._client: AsyncPipelineClient = input_args.pop(0) if input_args else kwargs.pop("client") + self._config: KubernetesClientConfiguration = input_args.pop(0) if input_args else kwargs.pop("config") + self._serialize: Serializer = input_args.pop(0) if input_args else kwargs.pop("serializer") + self._deserialize: Deserializer = input_args.pop(0) if input_args else kwargs.pop("deserializer") + + @distributed_trace_async + async def get(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> _models.ConnectedCluster: + """Get the properties of the specified connected cluster. + + Returns the properties of the specified connected cluster, including name, identity, + properties, and additional cluster details. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) + + _request = build_connected_cluster_get_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = kwargs.pop("stream", False) + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200]: + if _stream: + try: + await response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + if _stream: + deserialized = response.iter_bytes() + else: + deserialized = _deserialize(_models.ConnectedCluster, response.json()) + + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + + return deserialized # type: ignore + + async def _create_or_replace_initial( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: Union[_models.ConnectedCluster, JSON, IO[bytes]], + **kwargs: Any + ) -> AsyncIterator[bytes]: + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[AsyncIterator[bytes]] = kwargs.pop("cls", None) + + content_type = content_type or "application/json" + _content = None + if isinstance(connected_cluster, (IOBase, bytes)): + _content = connected_cluster + else: + _content = json.dumps(connected_cluster, cls=SdkJSONEncoder, exclude_readonly=True) # type: ignore + + _request = build_connected_cluster_create_or_replace_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + content_type=content_type, + api_version=self._config.api_version, + content=_content, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = True + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200, 201]: + try: + await response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + response_headers = {} + if response.status_code == 201: + response_headers["Azure-AsyncOperation"] = self._deserialize( + "str", response.headers.get("Azure-AsyncOperation") + ) + response_headers["Retry-After"] = self._deserialize("int", response.headers.get("Retry-After")) + + deserialized = response.iter_bytes() + + if cls: + return cls(pipeline_response, deserialized, response_headers) # type: ignore + + return deserialized # type: ignore + + @overload + async def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: _models.ConnectedCluster, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> AsyncLROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. + :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: An instance of AsyncLROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: + ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + async def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: JSON, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> AsyncLROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. + :type connected_cluster: JSON + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: An instance of AsyncLROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: + ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + async def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: IO[bytes], + *, + content_type: str = "application/json", + **kwargs: Any + ) -> AsyncLROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. + :type connected_cluster: IO[bytes] + :keyword content_type: Body Parameter content-type. Content type parameter for binary body. + Default value is "application/json". + :paramtype content_type: str + :return: An instance of AsyncLROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: + ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @distributed_trace_async + async def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: Union[_models.ConnectedCluster, JSON, IO[bytes]], + **kwargs: Any + ) -> AsyncLROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Is one of the + following types: ConnectedCluster, JSON, IO[bytes] Required. + :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster or JSON or + IO[bytes] + :return: An instance of AsyncLROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: + ~azure.core.polling.AsyncLROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) + polling: Union[bool, AsyncPollingMethod] = kwargs.pop("polling", True) + lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) + cont_token: Optional[str] = kwargs.pop("continuation_token", None) + if cont_token is None: + raw_result = await self._create_or_replace_initial( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + connected_cluster=connected_cluster, + content_type=content_type, + cls=lambda x, y, z: x, + headers=_headers, + params=_params, + **kwargs + ) + await raw_result.http_response.read() # type: ignore + kwargs.pop("error_map", None) + + def get_long_running_output(pipeline_response): + response = pipeline_response.http_response + deserialized = _deserialize(_models.ConnectedCluster, response.json()) + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + return deserialized + + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + + if polling is True: + polling_method: AsyncPollingMethod = cast( + AsyncPollingMethod, AsyncARMPolling(lro_delay, path_format_arguments=path_format_arguments, **kwargs) + ) + elif polling is False: + polling_method = cast(AsyncPollingMethod, AsyncNoPolling()) + else: + polling_method = polling + if cont_token: + return AsyncLROPoller[_models.ConnectedCluster].from_continuation_token( + polling_method=polling_method, + continuation_token=cont_token, + client=self._client, + deserialization_callback=get_long_running_output, + ) + return AsyncLROPoller[_models.ConnectedCluster]( + self._client, raw_result, get_long_running_output, polling_method # type: ignore + ) + + @overload + async def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: _models.ConnectedClusterPatch, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. + :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + async def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: JSON, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. + :type connected_cluster_patch: JSON + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + async def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: IO[bytes], + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. + :type connected_cluster_patch: IO[bytes] + :keyword content_type: Body Parameter content-type. Content type parameter for binary body. + Default value is "application/json". + :paramtype content_type: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @distributed_trace_async + async def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: Union[_models.ConnectedClusterPatch, JSON, IO[bytes]], + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Is one of the + following types: ConnectedClusterPatch, JSON, IO[bytes] Required. + :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch or + JSON or IO[bytes] + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) + + content_type = content_type or "application/json" + _content = None + if isinstance(connected_cluster_patch, (IOBase, bytes)): + _content = connected_cluster_patch + else: + _content = json.dumps(connected_cluster_patch, cls=SdkJSONEncoder, exclude_readonly=True) # type: ignore + + _request = build_connected_cluster_update_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + content_type=content_type, + api_version=self._config.api_version, + content=_content, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = kwargs.pop("stream", False) + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200]: + if _stream: + try: + await response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + if _stream: + deserialized = response.iter_bytes() + else: + deserialized = _deserialize(_models.ConnectedCluster, response.json()) + + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + + return deserialized # type: ignore + + async def _delete_initial(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> AsyncIterator[bytes]: + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[AsyncIterator[bytes]] = kwargs.pop("cls", None) + + _request = build_connected_cluster_delete_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = True + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200, 202, 204]: + try: + await response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + response_headers = {} + if response.status_code == 202: + response_headers["Location"] = self._deserialize("str", response.headers.get("Location")) + response_headers["Retry-After"] = self._deserialize("int", response.headers.get("Retry-After")) + + deserialized = response.iter_bytes() + + if cls: + return cls(pipeline_response, deserialized, response_headers) # type: ignore + + return deserialized # type: ignore + + @distributed_trace_async + async def begin_delete(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> AsyncLROPoller[None]: + """Delete a connected cluster. + + Delete a connected cluster, removing the tracked resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :return: An instance of AsyncLROPoller that returns None + :rtype: ~azure.core.polling.AsyncLROPoller[None] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[None] = kwargs.pop("cls", None) + polling: Union[bool, AsyncPollingMethod] = kwargs.pop("polling", True) + lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) + cont_token: Optional[str] = kwargs.pop("continuation_token", None) + if cont_token is None: + raw_result = await self._delete_initial( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + cls=lambda x, y, z: x, + headers=_headers, + params=_params, + **kwargs + ) + await raw_result.http_response.read() # type: ignore + kwargs.pop("error_map", None) + + def get_long_running_output(pipeline_response): # pylint: disable=inconsistent-return-statements + if cls: + return cls(pipeline_response, None, {}) # type: ignore + + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + + if polling is True: + polling_method: AsyncPollingMethod = cast( + AsyncPollingMethod, AsyncARMPolling(lro_delay, path_format_arguments=path_format_arguments, **kwargs) + ) + elif polling is False: + polling_method = cast(AsyncPollingMethod, AsyncNoPolling()) + else: + polling_method = polling + if cont_token: + return AsyncLROPoller[None].from_continuation_token( + polling_method=polling_method, + continuation_token=cont_token, + client=self._client, + deserialization_callback=get_long_running_output, + ) + return AsyncLROPoller[None](self._client, raw_result, get_long_running_output, polling_method) # type: ignore + + @distributed_trace + def list_by_resource_group( + self, resource_group_name: str, **kwargs: Any + ) -> AsyncItemPaged["_models.ConnectedCluster"]: + """Lists all connected clusters in the given Resource Group. + + API to enumerate registered connected K8s clusters under a Resource Group. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :return: An iterator like instance of ConnectedCluster + :rtype: + ~azure.core.async_paging.AsyncItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[List[_models.ConnectedCluster]] = kwargs.pop("cls", None) + + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + def prepare_request(next_link=None): + if not next_link: + + _request = build_connected_cluster_list_by_resource_group_request( + resource_group_name=resource_group_name, + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + else: + # make call to next link with the client's api-version + _parsed_next_link = urllib.parse.urlparse(next_link) + _next_request_params = case_insensitive_dict( + { + key: [urllib.parse.quote(v) for v in value] + for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() + } + ) + _next_request_params["api-version"] = self._config.api_version + _request = HttpRequest( + "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + return _request + + async def extract_data(pipeline_response): + deserialized = pipeline_response.http_response.json() + list_of_elem = _deserialize(List[_models.ConnectedCluster], deserialized.get("value", [])) + if cls: + list_of_elem = cls(list_of_elem) # type: ignore + return deserialized.get("nextLink") or None, AsyncList(list_of_elem) + + async def get_next(next_link=None): + _request = prepare_request(next_link) + + _stream = False + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + response = pipeline_response.http_response + + if response.status_code not in [200]: + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + return pipeline_response + + return AsyncItemPaged(get_next, extract_data) + + @distributed_trace + def list_by_subscription(self, **kwargs: Any) -> AsyncItemPaged["_models.ConnectedCluster"]: + """Lists all connected clusters in the given Subscription. + + API to enumerate registered connected K8s clusters under a Subscription. + + :return: An iterator like instance of ConnectedCluster + :rtype: + ~azure.core.async_paging.AsyncItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[List[_models.ConnectedCluster]] = kwargs.pop("cls", None) + + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + def prepare_request(next_link=None): + if not next_link: + + _request = build_connected_cluster_list_by_subscription_request( + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + else: + # make call to next link with the client's api-version + _parsed_next_link = urllib.parse.urlparse(next_link) + _next_request_params = case_insensitive_dict( + { + key: [urllib.parse.quote(v) for v in value] + for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() + } + ) + _next_request_params["api-version"] = self._config.api_version + _request = HttpRequest( + "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + return _request + + async def extract_data(pipeline_response): + deserialized = pipeline_response.http_response.json() + list_of_elem = _deserialize(List[_models.ConnectedCluster], deserialized.get("value", [])) + if cls: + list_of_elem = cls(list_of_elem) # type: ignore + return deserialized.get("nextLink") or None, AsyncList(list_of_elem) + + async def get_next(next_link=None): + _request = prepare_request(next_link) + + _stream = False + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + response = pipeline_response.http_response + + if response.status_code not in [200]: + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + return pipeline_response + + return AsyncItemPaged(get_next, extract_data) + + @overload + async def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: _models.ListClusterUserCredentialProperties, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Required. + :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + async def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: JSON, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Required. + :type properties: JSON + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + async def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: IO[bytes], + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Required. + :type properties: IO[bytes] + :keyword content_type: Body Parameter content-type. Content type parameter for binary body. + Default value is "application/json". + :paramtype content_type: str + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @distributed_trace_async + async def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: Union[_models.ListClusterUserCredentialProperties, JSON, IO[bytes]], + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Is one of the following types: + ListClusterUserCredentialProperties, JSON, IO[bytes] Required. + :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties or + JSON or IO[bytes] + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[_models.CredentialResults] = kwargs.pop("cls", None) + + content_type = content_type or "application/json" + _content = None + if isinstance(properties, (IOBase, bytes)): + _content = properties + else: + _content = json.dumps(properties, cls=SdkJSONEncoder, exclude_readonly=True) # type: ignore + + _request = build_connected_cluster_list_cluster_user_credential_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + content_type=content_type, + api_version=self._config.api_version, + content=_content, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = kwargs.pop("stream", False) + pipeline_response: PipelineResponse = await self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200]: + if _stream: + try: + await response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + if _stream: + deserialized = response.iter_bytes() + else: + deserialized = _deserialize(_models.CredentialResults, response.json()) + + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + + return deserialized # type: ignore diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_patch.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/_patch.py similarity index 61% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_patch.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/_patch.py index 1bb0db275de..8bcb627aa47 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_patch.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/aio/operations/_patch.py @@ -1,20 +1,21 @@ -# ------------------------------------ -# Copyright (c) Microsoft Corporation. -# Licensed under the MIT License. -# ------------------------------------ -"""Customize generated code here. - -Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize -""" -from typing import List - -__all__: List[str] = [] # Add all objects you want publicly available to users at this package level - - -def patch_sdk(): - """Do not remove from this file. - - `patch_sdk` is a last resort escape hatch that allows you to do customizations - you can't accomplish using the techniques described in - https://aka.ms/azsdk/python/dpcodegen/python/customize - """ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# -------------------------------------------------------------------------- +"""Customize generated code here. + +Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize +""" +from typing import List + +__all__: List[str] = [] # Add all objects you want publicly available to users at this package level + + +def patch_sdk(): + """Do not remove from this file. + + `patch_sdk` is a last resort escape hatch that allows you to do customizations + you can't accomplish using the techniques described in + https://aka.ms/azsdk/python/dpcodegen/python/customize + """ diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/__init__.py new file mode 100644 index 00000000000..e956542ae7b --- /dev/null +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/__init__.py @@ -0,0 +1,102 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=wrong-import-position + +from typing import TYPE_CHECKING + +if TYPE_CHECKING: + from ._patch import * # pylint: disable=unused-wildcard-import + + +from ._models import ( # type: ignore + AadProfile, + AgentError, + ArcAgentProfile, + ArcAgentryConfigurations, + ConnectedCluster, + ConnectedClusterIdentity, + ConnectedClusterPatch, + ConnectedClusterPatchProperties, + ConnectedClusterProperties, + CredentialResult, + CredentialResults, + ErrorAdditionalInfo, + ErrorDetail, + ErrorResponse, + Gateway, + HybridConnectionConfig, + ListClusterUserCredentialProperties, + OidcIssuerProfile, + Operation, + OperationDisplay, + Resource, + SecurityProfile, + SecurityProfileWorkloadIdentity, + SystemComponent, + SystemData, + TrackedResource, +) + +from ._enums import ( # type: ignore + ActionType, + AuthenticationMethod, + AutoUpgradeOptions, + AzureHybridBenefit, + ConnectedClusterKind, + ConnectivityStatus, + CreatedByType, + Origin, + PrivateLinkState, + ProvisioningState, + ResourceIdentityType, +) +from ._patch import __all__ as _patch_all +from ._patch import * +from ._patch import patch_sdk as _patch_sdk + +__all__ = [ + "AadProfile", + "AgentError", + "ArcAgentProfile", + "ArcAgentryConfigurations", + "ConnectedCluster", + "ConnectedClusterIdentity", + "ConnectedClusterPatch", + "ConnectedClusterPatchProperties", + "ConnectedClusterProperties", + "CredentialResult", + "CredentialResults", + "ErrorAdditionalInfo", + "ErrorDetail", + "ErrorResponse", + "Gateway", + "HybridConnectionConfig", + "ListClusterUserCredentialProperties", + "OidcIssuerProfile", + "Operation", + "OperationDisplay", + "Resource", + "SecurityProfile", + "SecurityProfileWorkloadIdentity", + "SystemComponent", + "SystemData", + "TrackedResource", + "ActionType", + "AuthenticationMethod", + "AutoUpgradeOptions", + "AzureHybridBenefit", + "ConnectedClusterKind", + "ConnectivityStatus", + "CreatedByType", + "Origin", + "PrivateLinkState", + "ProvisioningState", + "ResourceIdentityType", +] +__all__.extend([p for p in _patch_all if p not in __all__]) # pyright: ignore +_patch_sdk() diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_connected_kubernetes_client_enums.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_enums.py similarity index 70% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_connected_kubernetes_client_enums.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_enums.py index 88e03c5bdf1..2bd55cf6c03 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/models/_connected_kubernetes_client_enums.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_enums.py @@ -1,96 +1,115 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from enum import Enum -from azure.core import CaseInsensitiveEnumMeta - - -class AuthenticationMethod(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """The mode of client authentication.""" - - TOKEN = "Token" - AAD = "AAD" - - -class AutoUpgradeOptions(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """Indicates whether the Arc agents on the be upgraded automatically to the latest version. - Defaults to Enabled. - """ - - ENABLED = "Enabled" - DISABLED = "Disabled" - - -class AzureHybridBenefit(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """Indicates whether Azure Hybrid Benefit is opted in.""" - - TRUE = "True" - FALSE = "False" - NOT_APPLICABLE = "NotApplicable" - - -class ConnectedClusterKind(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """Indicates the kind of Arc connected cluster based on host infrastructure.""" - - PROVISIONED_CLUSTER = "ProvisionedCluster" - - -class ConnectivityStatus(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """Represents the connectivity status of the connected cluster.""" - - CONNECTING = "Connecting" - CONNECTED = "Connected" - OFFLINE = "Offline" - EXPIRED = "Expired" - - -class CreatedByType(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """The type of identity that created the resource.""" - - USER = "User" - APPLICATION = "Application" - MANAGED_IDENTITY = "ManagedIdentity" - KEY = "Key" - - -class LastModifiedByType(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """The type of identity that last modified the resource.""" - - USER = "User" - APPLICATION = "Application" - MANAGED_IDENTITY = "ManagedIdentity" - KEY = "Key" - - -class PrivateLinkState(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """Property which describes the state of private link on a connected cluster resource.""" - - ENABLED = "Enabled" - DISABLED = "Disabled" - - -class ProvisioningState(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """The current deployment state of connectedClusters.""" - - SUCCEEDED = "Succeeded" - FAILED = "Failed" - CANCELED = "Canceled" - PROVISIONING = "Provisioning" - UPDATING = "Updating" - DELETING = "Deleting" - ACCEPTED = "Accepted" - - -class ResourceIdentityType(str, Enum, metaclass=CaseInsensitiveEnumMeta): - """The type of identity used for the connected cluster. The type 'SystemAssigned, includes a - system created identity. The type 'None' means no identity is assigned to the connected - cluster. - """ - - NONE = "None" - SYSTEM_ASSIGNED = "SystemAssigned" +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- + +from enum import Enum +from azure.core import CaseInsensitiveEnumMeta + + +class ActionType(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """Extensible enum. Indicates the action type. "Internal" refers to actions that are for internal + only APIs. + """ + + INTERNAL = "Internal" + """Actions are for internal-only APIs.""" + + +class AuthenticationMethod(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """The mode of client authentication.""" + + TOKEN = "Token" + AAD = "AAD" + + +class AutoUpgradeOptions(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """Indicates whether the Arc agents on the be upgraded automatically to the latest version. + Defaults to Enabled. + """ + + ENABLED = "Enabled" + DISABLED = "Disabled" + + +class AzureHybridBenefit(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """Indicates whether Azure Hybrid Benefit is opted in.""" + + TRUE = "True" + FALSE = "False" + NOT_APPLICABLE = "NotApplicable" + + +class ConnectedClusterKind(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """Indicates the kind of Arc connected cluster based on host infrastructure.""" + + PROVISIONED_CLUSTER = "ProvisionedCluster" + AWS = "AWS" + + +class ConnectivityStatus(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """Represents the connectivity status of the connected cluster.""" + + CONNECTING = "Connecting" + CONNECTED = "Connected" + OFFLINE = "Offline" + EXPIRED = "Expired" + AGENT_NOT_INSTALLED = "AgentNotInstalled" + + +class CreatedByType(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """The kind of entity that created the resource.""" + + USER = "User" + """The entity was created by a user.""" + APPLICATION = "Application" + """The entity was created by an application.""" + MANAGED_IDENTITY = "ManagedIdentity" + """The entity was created by a managed identity.""" + KEY = "Key" + """The entity was created by a key.""" + + +class Origin(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """The intended executor of the operation; as in Resource Based Access Control (RBAC) and audit + logs UX. Default value is "user,system". + """ + + USER = "user" + """Indicates the operation is initiated by a user.""" + SYSTEM = "system" + """Indicates the operation is initiated by a system.""" + USER_SYSTEM = "user,system" + """Indicates the operation is initiated by a user or system.""" + + +class PrivateLinkState(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """Property which describes the state of private link on a connected cluster resource.""" + + ENABLED = "Enabled" + DISABLED = "Disabled" + + +class ProvisioningState(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """The current deployment state of connectedClusters.""" + + SUCCEEDED = "Succeeded" + FAILED = "Failed" + CANCELED = "Canceled" + PROVISIONING = "Provisioning" + UPDATING = "Updating" + DELETING = "Deleting" + ACCEPTED = "Accepted" + + +class ResourceIdentityType(str, Enum, metaclass=CaseInsensitiveEnumMeta): + """The type of identity used for the connected cluster. The type 'SystemAssigned, includes a + system created identity. The type 'None' means no identity is assigned to the connected + cluster. + """ + + NONE = "None" + SYSTEM_ASSIGNED = "SystemAssigned" diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_models.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_models.py new file mode 100644 index 00000000000..4fd2623c2de --- /dev/null +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_models.py @@ -0,0 +1,1190 @@ +# pylint: disable=line-too-long,useless-suppression,too-many-lines +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=useless-super-delegation + +import datetime +from typing import Any, Dict, List, Mapping, Optional, TYPE_CHECKING, Union, overload + +from .._utils.model_base import Model as _Model, rest_field + +if TYPE_CHECKING: + from .. import models as _models + + +class AadProfile(_Model): + """AAD Profile specifies attributes for Azure Active Directory integration. + + :ivar enable_azure_rbac: Whether to enable Azure RBAC for Kubernetes authorization. + :vartype enable_azure_rbac: bool + :ivar admin_group_object_i_ds: The list of AAD group object IDs that will have admin role of + the cluster. + :vartype admin_group_object_i_ds: list[str] + :ivar tenant_id: The AAD tenant ID to use for authentication. If not specified, will use the + tenant of the deployment subscription. + :vartype tenant_id: str + """ + + enable_azure_rbac: Optional[bool] = rest_field( + name="enableAzureRBAC", visibility=["read", "create", "update", "delete", "query"] + ) + """Whether to enable Azure RBAC for Kubernetes authorization.""" + admin_group_object_i_ds: Optional[List[str]] = rest_field( + name="adminGroupObjectIDs", visibility=["read", "create", "update", "delete", "query"] + ) + """The list of AAD group object IDs that will have admin role of the cluster.""" + tenant_id: Optional[str] = rest_field(name="tenantID", visibility=["read", "create", "update", "delete", "query"]) + """The AAD tenant ID to use for authentication. If not specified, will use the tenant of the + deployment subscription.""" + + @overload + def __init__( + self, + *, + enable_azure_rbac: Optional[bool] = None, + admin_group_object_i_ds: Optional[List[str]] = None, + tenant_id: Optional[str] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class AgentError(_Model): + """Agent Errors if any during agent or system component upgrade. + + :ivar message: Agent error message. + :vartype message: str + :ivar severity: Severity of the error message. + :vartype severity: str + :ivar component: Agent component where error message occured. + :vartype component: str + :ivar time: The timestamp of error occured (UTC). + :vartype time: ~datetime.datetime + """ + + message: Optional[str] = rest_field(visibility=["read"]) + """Agent error message.""" + severity: Optional[str] = rest_field(visibility=["read"]) + """Severity of the error message.""" + component: Optional[str] = rest_field(visibility=["read"]) + """Agent component where error message occured.""" + time: Optional[datetime.datetime] = rest_field(visibility=["read"], format="rfc3339") + """The timestamp of error occured (UTC).""" + + +class ArcAgentProfile(_Model): + """Defines the Arc Agent properties for the clusters. + + :ivar desired_agent_version: Version of the Arc agents to be installed on the cluster resource. + :vartype desired_agent_version: str + :ivar agent_auto_upgrade: Indicates whether the Arc agents on the be upgraded automatically to + the latest version. Defaults to Enabled. Known values are: "Enabled" and "Disabled". + :vartype agent_auto_upgrade: str or ~azure.mgmt.hybridkubernetes.models.AutoUpgradeOptions + :ivar system_components: List of system extensions that are installed on the cluster resource. + :vartype system_components: list[~azure.mgmt.hybridkubernetes.models.SystemComponent] + :ivar agent_errors: List of arc agentry and system components errors on the cluster resource. + :vartype agent_errors: list[~azure.mgmt.hybridkubernetes.models.AgentError] + :ivar agent_state: Represents the current state of the Arc agentry and its dependent + components. + :vartype agent_state: str + """ + + desired_agent_version: Optional[str] = rest_field( + name="desiredAgentVersion", visibility=["read", "create", "update", "delete", "query"] + ) + """Version of the Arc agents to be installed on the cluster resource.""" + agent_auto_upgrade: Optional[Union[str, "_models.AutoUpgradeOptions"]] = rest_field( + name="agentAutoUpgrade", visibility=["read", "create", "update", "delete", "query"] + ) + """Indicates whether the Arc agents on the be upgraded automatically to the latest version. + Defaults to Enabled. Known values are: \"Enabled\" and \"Disabled\".""" + system_components: Optional[List["_models.SystemComponent"]] = rest_field( + name="systemComponents", visibility=["read", "create", "update", "delete", "query"] + ) + """List of system extensions that are installed on the cluster resource.""" + agent_errors: Optional[List["_models.AgentError"]] = rest_field( + name="agentErrors", visibility=["read", "create", "update", "delete", "query"] + ) + """List of arc agentry and system components errors on the cluster resource.""" + agent_state: Optional[str] = rest_field(name="agentState", visibility=["read"]) + """Represents the current state of the Arc agentry and its dependent components.""" + + @overload + def __init__( + self, + *, + desired_agent_version: Optional[str] = None, + agent_auto_upgrade: Optional[Union[str, "_models.AutoUpgradeOptions"]] = None, + system_components: Optional[List["_models.SystemComponent"]] = None, + agent_errors: Optional[List["_models.AgentError"]] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class ArcAgentryConfigurations(_Model): + """ArcAgentryConfigurations. + + :ivar feature: Specifies the name of the feature for the configuration setting. + :vartype feature: str + :ivar settings: The configuration settings for the feature that do not contain any sensitive or + secret information. + :vartype settings: dict[str, str] + :ivar protected_settings: The configuration settings for the feature that contain any sensitive + or secret information. + :vartype protected_settings: dict[str, str] + """ + + feature: Optional[str] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Specifies the name of the feature for the configuration setting.""" + settings: Optional[Dict[str, str]] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """The configuration settings for the feature that do not contain any sensitive or secret + information.""" + protected_settings: Optional[Dict[str, str]] = rest_field( + name="protectedSettings", visibility=["read", "create", "update", "delete", "query"] + ) + """The configuration settings for the feature that contain any sensitive or secret information.""" + + @overload + def __init__( + self, + *, + feature: Optional[str] = None, + settings: Optional[Dict[str, str]] = None, + protected_settings: Optional[Dict[str, str]] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class Resource(_Model): + """Resource. + + :ivar id: Fully qualified resource ID for the resource. Ex - + /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. + :vartype id: str + :ivar name: The name of the resource. + :vartype name: str + :ivar type: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or + "Microsoft.Storage/storageAccounts". + :vartype type: str + :ivar system_data: Azure Resource Manager metadata containing createdBy and modifiedBy + information. + :vartype system_data: ~azure.mgmt.hybridkubernetes.models.SystemData + """ + + id: Optional[str] = rest_field(visibility=["read"]) + """Fully qualified resource ID for the resource. Ex - + /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.""" + name: Optional[str] = rest_field(visibility=["read"]) + """The name of the resource.""" + type: Optional[str] = rest_field(visibility=["read"]) + """The type of the resource. E.g. \"Microsoft.Compute/virtualMachines\" or + \"Microsoft.Storage/storageAccounts\".""" + system_data: Optional["_models.SystemData"] = rest_field(name="systemData", visibility=["read"]) + """Azure Resource Manager metadata containing createdBy and modifiedBy information.""" + + +class TrackedResource(Resource): + """Tracked Resource. + + :ivar id: Fully qualified resource ID for the resource. Ex - + /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. + :vartype id: str + :ivar name: The name of the resource. + :vartype name: str + :ivar type: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or + "Microsoft.Storage/storageAccounts". + :vartype type: str + :ivar system_data: Azure Resource Manager metadata containing createdBy and modifiedBy + information. + :vartype system_data: ~azure.mgmt.hybridkubernetes.models.SystemData + :ivar tags: Resource tags. + :vartype tags: dict[str, str] + :ivar location: The geo-location where the resource lives. Required. + :vartype location: str + """ + + tags: Optional[Dict[str, str]] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Resource tags.""" + location: str = rest_field(visibility=["read", "create"]) + """The geo-location where the resource lives. Required.""" + + @overload + def __init__( + self, + *, + location: str, + tags: Optional[Dict[str, str]] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class ConnectedCluster(TrackedResource): + """Represents a connected cluster. + + :ivar id: Fully qualified resource ID for the resource. Ex - + /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. + :vartype id: str + :ivar name: The name of the resource. + :vartype name: str + :ivar type: The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or + "Microsoft.Storage/storageAccounts". + :vartype type: str + :ivar system_data: Azure Resource Manager metadata containing createdBy and modifiedBy + information. + :vartype system_data: ~azure.mgmt.hybridkubernetes.models.SystemData + :ivar tags: Resource tags. + :vartype tags: dict[str, str] + :ivar location: The geo-location where the resource lives. Required. + :vartype location: str + :ivar identity: The identity of the connected cluster. Required. + :vartype identity: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterIdentity + :ivar kind: The kind of connected cluster. Known values are: "ProvisionedCluster" and "AWS". + :vartype kind: str or ~azure.mgmt.hybridkubernetes.models.ConnectedClusterKind + :ivar properties: Describes the connected cluster resource properties. Required. + :vartype properties: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterProperties + """ + + identity: "_models.ConnectedClusterIdentity" = rest_field( + visibility=["read", "create", "update", "delete", "query"] + ) + """The identity of the connected cluster. Required.""" + kind: Optional[Union[str, "_models.ConnectedClusterKind"]] = rest_field( + visibility=["read", "create", "update", "delete", "query"] + ) + """The kind of connected cluster. Known values are: \"ProvisionedCluster\" and \"AWS\".""" + properties: "_models.ConnectedClusterProperties" = rest_field( + visibility=["read", "create", "update", "delete", "query"] + ) + """Describes the connected cluster resource properties. Required.""" + + __flattened_items = [ + "agent_public_key_certificate", + "kubernetes_version", + "total_node_count", + "total_core_count", + "agent_version", + "provisioning_state", + "distribution", + "distribution_version", + "infrastructure", + "offering", + "managed_identity_certificate_expiration_time", + "last_connectivity_time", + "connectivity_status", + "private_link_state", + "private_link_scope_resource_id", + "azure_hybrid_benefit", + "aad_profile", + "arc_agent_profile", + "security_profile", + "oidc_issuer_profile", + "gateway", + "arc_agentry_configurations", + "miscellaneous_properties", + ] + + @overload + def __init__( + self, + *, + location: str, + identity: "_models.ConnectedClusterIdentity", + properties: "_models.ConnectedClusterProperties", + tags: Optional[Dict[str, str]] = None, + kind: Optional[Union[str, "_models.ConnectedClusterKind"]] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + _flattened_input = {k: kwargs.pop(k) for k in kwargs.keys() & self.__flattened_items} + super().__init__(*args, **kwargs) + for k, v in _flattened_input.items(): + setattr(self, k, v) + + def __getattr__(self, name: str) -> Any: + if name in self.__flattened_items: + if self.properties is None: + return None + return getattr(self.properties, name) + raise AttributeError(f"'{self.__class__.__name__}' object has no attribute '{name}'") + + def __setattr__(self, key: str, value: Any) -> None: + if key in self.__flattened_items: + if self.properties is None: + self.properties = self._attr_to_rest_field["properties"]._class_type() + setattr(self.properties, key, value) + else: + super().__setattr__(key, value) + + +class ConnectedClusterIdentity(_Model): + """Identity for the connected cluster. + + :ivar principal_id: The principal id of connected cluster identity. This property will only be + provided for a system assigned identity. + :vartype principal_id: str + :ivar tenant_id: The tenant id associated with the connected cluster. This property will only + be provided for a system assigned identity. + :vartype tenant_id: str + :ivar type: The type of identity used for the connected cluster. The type 'SystemAssigned, + includes a system created identity. The type 'None' means no identity is assigned to the + connected cluster. Required. Known values are: "None" and "SystemAssigned". + :vartype type: str or ~azure.mgmt.hybridkubernetes.models.ResourceIdentityType + """ + + principal_id: Optional[str] = rest_field(name="principalId", visibility=["read"]) + """The principal id of connected cluster identity. This property will only be provided for a + system assigned identity.""" + tenant_id: Optional[str] = rest_field(name="tenantId", visibility=["read"]) + """The tenant id associated with the connected cluster. This property will only be provided for a + system assigned identity.""" + type: Union[str, "_models.ResourceIdentityType"] = rest_field( + visibility=["read", "create", "update", "delete", "query"] + ) + """The type of identity used for the connected cluster. The type 'SystemAssigned, includes a + system created identity. The type 'None' means no identity is assigned to the connected + cluster. Required. Known values are: \"None\" and \"SystemAssigned\".""" + + @overload + def __init__( + self, + *, + type: Union[str, "_models.ResourceIdentityType"], + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class ConnectedClusterPatch(_Model): + """Object containing updates for patch operations. + + :ivar tags: Resource tags. + :vartype tags: dict[str, str] + :ivar properties: Describes the connected cluster resource properties that can be updated + during PATCH operation. + :vartype properties: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatchProperties + """ + + tags: Optional[Dict[str, str]] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Resource tags.""" + properties: Optional["_models.ConnectedClusterPatchProperties"] = rest_field( + visibility=["read", "create", "update", "delete", "query"] + ) + """Describes the connected cluster resource properties that can be updated during PATCH operation.""" + + __flattened_items = ["distribution", "distribution_version", "azure_hybrid_benefit"] + + @overload + def __init__( + self, + *, + tags: Optional[Dict[str, str]] = None, + properties: Optional["_models.ConnectedClusterPatchProperties"] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + _flattened_input = {k: kwargs.pop(k) for k in kwargs.keys() & self.__flattened_items} + super().__init__(*args, **kwargs) + for k, v in _flattened_input.items(): + setattr(self, k, v) + + def __getattr__(self, name: str) -> Any: + if name in self.__flattened_items: + if self.properties is None: + return None + return getattr(self.properties, name) + raise AttributeError(f"'{self.__class__.__name__}' object has no attribute '{name}'") + + def __setattr__(self, key: str, value: Any) -> None: + if key in self.__flattened_items: + if self.properties is None: + self.properties = self._attr_to_rest_field["properties"]._class_type() + setattr(self.properties, key, value) + else: + super().__setattr__(key, value) + + +class ConnectedClusterPatchProperties(_Model): + """Properties which can be patched on the connected cluster resource. + + :ivar distribution: Represents the distribution of the connected cluster. + :vartype distribution: str + :ivar distribution_version: Represents the Kubernetes distribution version on this connected + cluster. + :vartype distribution_version: str + :ivar azure_hybrid_benefit: Indicates whether Azure Hybrid Benefit is opted in. Known values + are: "True", "False", and "NotApplicable". + :vartype azure_hybrid_benefit: str or ~azure.mgmt.hybridkubernetes.models.AzureHybridBenefit + """ + + distribution: Optional[str] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Represents the distribution of the connected cluster.""" + distribution_version: Optional[str] = rest_field( + name="distributionVersion", visibility=["read", "create", "update", "delete", "query"] + ) + """Represents the Kubernetes distribution version on this connected cluster.""" + azure_hybrid_benefit: Optional[Union[str, "_models.AzureHybridBenefit"]] = rest_field( + name="azureHybridBenefit", visibility=["read", "create", "update", "delete", "query"] + ) + """Indicates whether Azure Hybrid Benefit is opted in. Known values are: \"True\", \"False\", and + \"NotApplicable\".""" + + @overload + def __init__( + self, + *, + distribution: Optional[str] = None, + distribution_version: Optional[str] = None, + azure_hybrid_benefit: Optional[Union[str, "_models.AzureHybridBenefit"]] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class ConnectedClusterProperties(_Model): + """Properties of the connected cluster. + + :ivar agent_public_key_certificate: Base64 encoded public certificate used by the agent to do + the initial handshake to the backend services in Azure. Required. + :vartype agent_public_key_certificate: str + :ivar kubernetes_version: The Kubernetes version of the connected cluster resource. + :vartype kubernetes_version: str + :ivar total_node_count: Number of nodes present in the connected cluster resource. + :vartype total_node_count: int + :ivar total_core_count: Number of CPU cores present in the connected cluster resource. + :vartype total_core_count: int + :ivar agent_version: Version of the agent running on the connected cluster resource. + :vartype agent_version: str + :ivar provisioning_state: Provisioning state of the connected cluster resource. Known values + are: "Succeeded", "Failed", "Canceled", "Provisioning", "Updating", "Deleting", and "Accepted". + :vartype provisioning_state: str or ~azure.mgmt.hybridkubernetes.models.ProvisioningState + :ivar distribution: The Kubernetes distribution running on this connected cluster. + :vartype distribution: str + :ivar distribution_version: The Kubernetes distribution version on this connected cluster. + :vartype distribution_version: str + :ivar infrastructure: The infrastructure on which the Kubernetes cluster represented by this + connected cluster is running on. + :vartype infrastructure: str + :ivar offering: Connected cluster offering. + :vartype offering: str + :ivar managed_identity_certificate_expiration_time: Expiration time of the managed identity + certificate. + :vartype managed_identity_certificate_expiration_time: ~datetime.datetime + :ivar last_connectivity_time: Time representing the last instance when heart beat was received + from the cluster. + :vartype last_connectivity_time: ~datetime.datetime + :ivar connectivity_status: Represents the connectivity status of the connected cluster. Known + values are: "Connecting", "Connected", "Offline", "Expired", and "AgentNotInstalled". + :vartype connectivity_status: str or ~azure.mgmt.hybridkubernetes.models.ConnectivityStatus + :ivar private_link_state: Property which describes the state of private link on a connected + cluster resource. Known values are: "Enabled" and "Disabled". + :vartype private_link_state: str or ~azure.mgmt.hybridkubernetes.models.PrivateLinkState + :ivar private_link_scope_resource_id: This is populated only if privateLinkState is enabled. + The resource id of the private link scope this connected cluster is assigned to, if any. + :vartype private_link_scope_resource_id: str + :ivar azure_hybrid_benefit: Indicates whether Azure Hybrid Benefit is opted in. Known values + are: "True", "False", and "NotApplicable". + :vartype azure_hybrid_benefit: str or ~azure.mgmt.hybridkubernetes.models.AzureHybridBenefit + :ivar aad_profile: AAD profile for the connected cluster. + :vartype aad_profile: ~azure.mgmt.hybridkubernetes.models.AadProfile + :ivar arc_agent_profile: Arc agentry configuration for the provisioned cluster. + :vartype arc_agent_profile: ~azure.mgmt.hybridkubernetes.models.ArcAgentProfile + :ivar security_profile: Security profile for the connected cluster. + :vartype security_profile: ~azure.mgmt.hybridkubernetes.models.SecurityProfile + :ivar oidc_issuer_profile: Open ID Connect (OIDC) Issuer Profile for the connected cluster. + :vartype oidc_issuer_profile: ~azure.mgmt.hybridkubernetes.models.OidcIssuerProfile + :ivar gateway: Details of the gateway used by the Arc router for connectivity. + :vartype gateway: ~azure.mgmt.hybridkubernetes.models.Gateway + :ivar arc_agentry_configurations: Configuration settings for customizing the behavior of the + connected cluster. + :vartype arc_agentry_configurations: + list[~azure.mgmt.hybridkubernetes.models.ArcAgentryConfigurations] + :ivar miscellaneous_properties: More properties related to the Connected Cluster. + :vartype miscellaneous_properties: dict[str, str] + """ + + agent_public_key_certificate: str = rest_field( + name="agentPublicKeyCertificate", visibility=["read", "create", "update", "delete", "query"] + ) + """Base64 encoded public certificate used by the agent to do the initial handshake to the backend + services in Azure. Required.""" + kubernetes_version: Optional[str] = rest_field(name="kubernetesVersion", visibility=["read"]) + """The Kubernetes version of the connected cluster resource.""" + total_node_count: Optional[int] = rest_field(name="totalNodeCount", visibility=["read"]) + """Number of nodes present in the connected cluster resource.""" + total_core_count: Optional[int] = rest_field(name="totalCoreCount", visibility=["read"]) + """Number of CPU cores present in the connected cluster resource.""" + agent_version: Optional[str] = rest_field(name="agentVersion", visibility=["read"]) + """Version of the agent running on the connected cluster resource.""" + provisioning_state: Optional[Union[str, "_models.ProvisioningState"]] = rest_field( + name="provisioningState", visibility=["read", "create", "update", "delete", "query"] + ) + """Provisioning state of the connected cluster resource. Known values are: \"Succeeded\", + \"Failed\", \"Canceled\", \"Provisioning\", \"Updating\", \"Deleting\", and \"Accepted\".""" + distribution: Optional[str] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """The Kubernetes distribution running on this connected cluster.""" + distribution_version: Optional[str] = rest_field( + name="distributionVersion", visibility=["read", "create", "update", "delete", "query"] + ) + """The Kubernetes distribution version on this connected cluster.""" + infrastructure: Optional[str] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """The infrastructure on which the Kubernetes cluster represented by this connected cluster is + running on.""" + offering: Optional[str] = rest_field(visibility=["read"]) + """Connected cluster offering.""" + managed_identity_certificate_expiration_time: Optional[datetime.datetime] = rest_field( + name="managedIdentityCertificateExpirationTime", visibility=["read"], format="rfc3339" + ) + """Expiration time of the managed identity certificate.""" + last_connectivity_time: Optional[datetime.datetime] = rest_field( + name="lastConnectivityTime", visibility=["read"], format="rfc3339" + ) + """Time representing the last instance when heart beat was received from the cluster.""" + connectivity_status: Optional[Union[str, "_models.ConnectivityStatus"]] = rest_field( + name="connectivityStatus", visibility=["read"] + ) + """Represents the connectivity status of the connected cluster. Known values are: \"Connecting\", + \"Connected\", \"Offline\", \"Expired\", and \"AgentNotInstalled\".""" + private_link_state: Optional[Union[str, "_models.PrivateLinkState"]] = rest_field( + name="privateLinkState", visibility=["read", "create", "update", "delete", "query"] + ) + """Property which describes the state of private link on a connected cluster resource. Known + values are: \"Enabled\" and \"Disabled\".""" + private_link_scope_resource_id: Optional[str] = rest_field( + name="privateLinkScopeResourceId", visibility=["read", "create", "update", "delete", "query"] + ) + """This is populated only if privateLinkState is enabled. The resource id of the private link + scope this connected cluster is assigned to, if any.""" + azure_hybrid_benefit: Optional[Union[str, "_models.AzureHybridBenefit"]] = rest_field( + name="azureHybridBenefit", visibility=["read", "create", "update", "delete", "query"] + ) + """Indicates whether Azure Hybrid Benefit is opted in. Known values are: \"True\", \"False\", and + \"NotApplicable\".""" + aad_profile: Optional["_models.AadProfile"] = rest_field( + name="aadProfile", visibility=["read", "create", "update", "delete", "query"] + ) + """AAD profile for the connected cluster.""" + arc_agent_profile: Optional["_models.ArcAgentProfile"] = rest_field( + name="arcAgentProfile", visibility=["read", "create", "update", "delete", "query"] + ) + """Arc agentry configuration for the provisioned cluster.""" + security_profile: Optional["_models.SecurityProfile"] = rest_field( + name="securityProfile", visibility=["read", "create", "update", "delete", "query"] + ) + """Security profile for the connected cluster.""" + oidc_issuer_profile: Optional["_models.OidcIssuerProfile"] = rest_field( + name="oidcIssuerProfile", visibility=["read", "create", "update", "delete", "query"] + ) + """Open ID Connect (OIDC) Issuer Profile for the connected cluster.""" + gateway: Optional["_models.Gateway"] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Details of the gateway used by the Arc router for connectivity.""" + arc_agentry_configurations: Optional[List["_models.ArcAgentryConfigurations"]] = rest_field( + name="arcAgentryConfigurations", visibility=["read", "create", "update", "delete", "query"] + ) + """Configuration settings for customizing the behavior of the connected cluster.""" + miscellaneous_properties: Optional[Dict[str, str]] = rest_field(name="miscellaneousProperties", visibility=["read"]) + """More properties related to the Connected Cluster.""" + + @overload + def __init__( + self, + *, + agent_public_key_certificate: str, + provisioning_state: Optional[Union[str, "_models.ProvisioningState"]] = None, + distribution: Optional[str] = None, + distribution_version: Optional[str] = None, + infrastructure: Optional[str] = None, + private_link_state: Optional[Union[str, "_models.PrivateLinkState"]] = None, + private_link_scope_resource_id: Optional[str] = None, + azure_hybrid_benefit: Optional[Union[str, "_models.AzureHybridBenefit"]] = None, + aad_profile: Optional["_models.AadProfile"] = None, + arc_agent_profile: Optional["_models.ArcAgentProfile"] = None, + security_profile: Optional["_models.SecurityProfile"] = None, + oidc_issuer_profile: Optional["_models.OidcIssuerProfile"] = None, + gateway: Optional["_models.Gateway"] = None, + arc_agentry_configurations: Optional[List["_models.ArcAgentryConfigurations"]] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class CredentialResult(_Model): + """The credential result response. + + :ivar name: The name of the credential. + :vartype name: str + :ivar value: Base64-encoded Kubernetes configuration file. + :vartype value: bytes + """ + + name: Optional[str] = rest_field(visibility=["read"]) + """The name of the credential.""" + value: Optional[bytes] = rest_field(visibility=["read"], format="base64") + """Base64-encoded Kubernetes configuration file.""" + + +class CredentialResults(_Model): + """The list of credential result response. + + :ivar hybrid_connection_config: Contains the REP (rendezvous endpoint) and “Sender” access + token. + :vartype hybrid_connection_config: ~azure.mgmt.hybridkubernetes.models.HybridConnectionConfig + :ivar kubeconfigs: Base64-encoded Kubernetes configuration file. + :vartype kubeconfigs: list[~azure.mgmt.hybridkubernetes.models.CredentialResult] + """ + + hybrid_connection_config: Optional["_models.HybridConnectionConfig"] = rest_field( + name="hybridConnectionConfig", visibility=["read"] + ) + """Contains the REP (rendezvous endpoint) and “Sender” access token.""" + kubeconfigs: Optional[List["_models.CredentialResult"]] = rest_field(visibility=["read"]) + """Base64-encoded Kubernetes configuration file.""" + + +class ErrorAdditionalInfo(_Model): + """The resource management error additional info. + + :ivar type: The additional info type. + :vartype type: str + :ivar info: The additional info. + :vartype info: any + """ + + type: Optional[str] = rest_field(visibility=["read"]) + """The additional info type.""" + info: Optional[Any] = rest_field(visibility=["read"]) + """The additional info.""" + + +class ErrorDetail(_Model): + """The error detail. + + :ivar code: The error code. + :vartype code: str + :ivar message: The error message. + :vartype message: str + :ivar target: The error target. + :vartype target: str + :ivar details: The error details. + :vartype details: list[~azure.mgmt.hybridkubernetes.models.ErrorDetail] + :ivar additional_info: The error additional info. + :vartype additional_info: list[~azure.mgmt.hybridkubernetes.models.ErrorAdditionalInfo] + """ + + code: Optional[str] = rest_field(visibility=["read"]) + """The error code.""" + message: Optional[str] = rest_field(visibility=["read"]) + """The error message.""" + target: Optional[str] = rest_field(visibility=["read"]) + """The error target.""" + details: Optional[List["_models.ErrorDetail"]] = rest_field(visibility=["read"]) + """The error details.""" + additional_info: Optional[List["_models.ErrorAdditionalInfo"]] = rest_field( + name="additionalInfo", visibility=["read"] + ) + """The error additional info.""" + + +class ErrorResponse(_Model): + """Error response. + + :ivar error: The error object. + :vartype error: ~azure.mgmt.hybridkubernetes.models.ErrorDetail + """ + + error: Optional["_models.ErrorDetail"] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """The error object.""" + + @overload + def __init__( + self, + *, + error: Optional["_models.ErrorDetail"] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class Gateway(_Model): + """Gateway. + + :ivar enabled: Indicates whether the gateway for arc router connectivity is enabled. + :vartype enabled: bool + """ + + enabled: Optional[bool] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Indicates whether the gateway for arc router connectivity is enabled.""" + + @overload + def __init__( + self, + *, + enabled: Optional[bool] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class HybridConnectionConfig(_Model): + """Contains the REP (rendezvous endpoint) and “Sender” access token. + + :ivar expiration_time: Timestamp when this token will be expired. + :vartype expiration_time: int + :ivar hybrid_connection_name: Name of the connection. + :vartype hybrid_connection_name: str + :ivar relay: Name of the relay. + :vartype relay: str + :ivar token: Sender access token. + :vartype token: str + :ivar relay_tid: TenantID of the relay. + :vartype relay_tid: str + :ivar relay_type: Type of relay. + :vartype relay_type: str + """ + + expiration_time: Optional[int] = rest_field(name="expirationTime", visibility=["read"]) + """Timestamp when this token will be expired.""" + hybrid_connection_name: Optional[str] = rest_field(name="hybridConnectionName", visibility=["read"]) + """Name of the connection.""" + relay: Optional[str] = rest_field(visibility=["read"]) + """Name of the relay.""" + token: Optional[str] = rest_field(visibility=["read"]) + """Sender access token.""" + relay_tid: Optional[str] = rest_field(name="relayTid", visibility=["read"]) + """TenantID of the relay.""" + relay_type: Optional[str] = rest_field(name="relayType", visibility=["read"]) + """Type of relay.""" + + +class ListClusterUserCredentialProperties(_Model): + """ListClusterUserCredentialProperties. + + :ivar authentication_method: The mode of client authentication. Required. Known values are: + "Token" and "AAD". + :vartype authentication_method: str or ~azure.mgmt.hybridkubernetes.models.AuthenticationMethod + :ivar client_proxy: Boolean value to indicate whether the request is for client side proxy or + not. Required. + :vartype client_proxy: bool + """ + + authentication_method: Union[str, "_models.AuthenticationMethod"] = rest_field( + name="authenticationMethod", visibility=["read", "create", "update", "delete", "query"] + ) + """The mode of client authentication. Required. Known values are: \"Token\" and \"AAD\".""" + client_proxy: bool = rest_field(name="clientProxy", visibility=["read", "create", "update", "delete", "query"]) + """Boolean value to indicate whether the request is for client side proxy or not. Required.""" + + @overload + def __init__( + self, + *, + authentication_method: Union[str, "_models.AuthenticationMethod"], + client_proxy: bool, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class OidcIssuerProfile(_Model): + """OIDC Issuer Profile specifies attributes for workload identity integration. + + :ivar enabled: Whether to enable oidc issuer for workload identity integration. + :vartype enabled: bool + :ivar issuer_url: The issuer url for hybrid clusters connected to Arc used for the workload + identity feature. + :vartype issuer_url: str + :ivar self_hosted_issuer_url: The issuer url for public cloud clusters - AKS, EKS, GKE - used + for the workload identity feature. + :vartype self_hosted_issuer_url: str + """ + + enabled: Optional[bool] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Whether to enable oidc issuer for workload identity integration.""" + issuer_url: Optional[str] = rest_field(name="issuerUrl", visibility=["read"]) + """The issuer url for hybrid clusters connected to Arc used for the workload identity feature.""" + self_hosted_issuer_url: Optional[str] = rest_field( + name="selfHostedIssuerUrl", visibility=["read", "create", "update", "delete", "query"] + ) + """The issuer url for public cloud clusters - AKS, EKS, GKE - used for the workload identity + feature.""" + + @overload + def __init__( + self, + *, + enabled: Optional[bool] = None, + self_hosted_issuer_url: Optional[str] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class Operation(_Model): + """REST API Operation. + + :ivar name: The name of the operation, as per Resource-Based Access Control (RBAC). Examples: + "Microsoft.Compute/virtualMachines/write", "Microsoft.Compute/virtualMachines/capture/action". + :vartype name: str + :ivar is_data_action: Whether the operation applies to data-plane. This is "true" for + data-plane operations and "false" for Azure Resource Manager/control-plane operations. + :vartype is_data_action: bool + :ivar display: Localized display information for this particular operation. + :vartype display: ~azure.mgmt.hybridkubernetes.models.OperationDisplay + :ivar origin: The intended executor of the operation; as in Resource Based Access Control + (RBAC) and audit logs UX. Default value is "user,system". Known values are: "user", "system", + and "user,system". + :vartype origin: str or ~azure.mgmt.hybridkubernetes.models.Origin + :ivar action_type: Extensible enum. Indicates the action type. "Internal" refers to actions + that are for internal only APIs. "Internal" + :vartype action_type: str or ~azure.mgmt.hybridkubernetes.models.ActionType + """ + + name: Optional[str] = rest_field(visibility=["read"]) + """The name of the operation, as per Resource-Based Access Control (RBAC). Examples: + \"Microsoft.Compute/virtualMachines/write\", + \"Microsoft.Compute/virtualMachines/capture/action\".""" + is_data_action: Optional[bool] = rest_field(name="isDataAction", visibility=["read"]) + """Whether the operation applies to data-plane. This is \"true\" for data-plane operations and + \"false\" for Azure Resource Manager/control-plane operations.""" + display: Optional["_models.OperationDisplay"] = rest_field( + visibility=["read", "create", "update", "delete", "query"] + ) + """Localized display information for this particular operation.""" + origin: Optional[Union[str, "_models.Origin"]] = rest_field(visibility=["read"]) + """The intended executor of the operation; as in Resource Based Access Control (RBAC) and audit + logs UX. Default value is \"user,system\". Known values are: \"user\", \"system\", and + \"user,system\".""" + action_type: Optional[Union[str, "_models.ActionType"]] = rest_field(name="actionType", visibility=["read"]) + """Extensible enum. Indicates the action type. \"Internal\" refers to actions that are for + internal only APIs. \"Internal\"""" + + @overload + def __init__( + self, + *, + display: Optional["_models.OperationDisplay"] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class OperationDisplay(_Model): + """Localized display information for and operation. + + :ivar provider: The localized friendly form of the resource provider name, e.g. "Microsoft + Monitoring Insights" or "Microsoft Compute". + :vartype provider: str + :ivar resource: The localized friendly name of the resource type related to this operation. + E.g. "Virtual Machines" or "Job Schedule Collections". + :vartype resource: str + :ivar operation: The concise, localized friendly name for the operation; suitable for + dropdowns. E.g. "Create or Update Virtual Machine", "Restart Virtual Machine". + :vartype operation: str + :ivar description: The short, localized friendly description of the operation; suitable for + tool tips and detailed views. + :vartype description: str + """ + + provider: Optional[str] = rest_field(visibility=["read"]) + """The localized friendly form of the resource provider name, e.g. \"Microsoft Monitoring + Insights\" or \"Microsoft Compute\".""" + resource: Optional[str] = rest_field(visibility=["read"]) + """The localized friendly name of the resource type related to this operation. E.g. \"Virtual + Machines\" or \"Job Schedule Collections\".""" + operation: Optional[str] = rest_field(visibility=["read"]) + """The concise, localized friendly name for the operation; suitable for dropdowns. E.g. \"Create + or Update Virtual Machine\", \"Restart Virtual Machine\".""" + description: Optional[str] = rest_field(visibility=["read"]) + """The short, localized friendly description of the operation; suitable for tool tips and detailed + views.""" + + +class SecurityProfile(_Model): + """Security Profile specifies attributes for cluster security features. + + :ivar workload_identity: The workload identity feature webhook. + :vartype workload_identity: ~azure.mgmt.hybridkubernetes.models.SecurityProfileWorkloadIdentity + """ + + workload_identity: Optional["_models.SecurityProfileWorkloadIdentity"] = rest_field( + name="workloadIdentity", visibility=["read", "create", "update", "delete", "query"] + ) + """The workload identity feature webhook.""" + + @overload + def __init__( + self, + *, + workload_identity: Optional["_models.SecurityProfileWorkloadIdentity"] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class SecurityProfileWorkloadIdentity(_Model): + """The workload identity feature webhook. + + :ivar enabled: Whether to enable or disable the workload identity Webhook. + :vartype enabled: bool + """ + + enabled: Optional[bool] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Whether to enable or disable the workload identity Webhook.""" + + @overload + def __init__( + self, + *, + enabled: Optional[bool] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class SystemComponent(_Model): + """System extensions and its current versions installed on the cluster resource. + + :ivar type: Type of the system extension. + :vartype type: str + :ivar user_specified_version: Version of the system extension to be installed on the cluster + resource. + :vartype user_specified_version: str + :ivar major_version: Major Version of the system extension that is currently installed on the + cluster resource. + :vartype major_version: int + :ivar current_version: Version of the system extension that is currently installed on the + cluster resource. + :vartype current_version: str + """ + + type: Optional[str] = rest_field(visibility=["read", "create", "update", "delete", "query"]) + """Type of the system extension.""" + user_specified_version: Optional[str] = rest_field( + name="userSpecifiedVersion", visibility=["read", "create", "update", "delete", "query"] + ) + """Version of the system extension to be installed on the cluster resource.""" + major_version: Optional[int] = rest_field( + name="majorVersion", visibility=["read", "create", "update", "delete", "query"] + ) + """Major Version of the system extension that is currently installed on the cluster resource.""" + current_version: Optional[str] = rest_field(name="currentVersion", visibility=["read"]) + """Version of the system extension that is currently installed on the cluster resource.""" + + @overload + def __init__( + self, + *, + type: Optional[str] = None, + user_specified_version: Optional[str] = None, + major_version: Optional[int] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) + + +class SystemData(_Model): + """Metadata pertaining to creation and last modification of the resource. + + :ivar created_by: The identity that created the resource. + :vartype created_by: str + :ivar created_by_type: The type of identity that created the resource. Known values are: + "User", "Application", "ManagedIdentity", and "Key". + :vartype created_by_type: str or ~azure.mgmt.hybridkubernetes.models.CreatedByType + :ivar created_at: The timestamp of resource creation (UTC). + :vartype created_at: ~datetime.datetime + :ivar last_modified_by: The identity that last modified the resource. + :vartype last_modified_by: str + :ivar last_modified_by_type: The type of identity that last modified the resource. Known values + are: "User", "Application", "ManagedIdentity", and "Key". + :vartype last_modified_by_type: str or ~azure.mgmt.hybridkubernetes.models.CreatedByType + :ivar last_modified_at: The timestamp of resource last modification (UTC). + :vartype last_modified_at: ~datetime.datetime + """ + + created_by: Optional[str] = rest_field(name="createdBy", visibility=["read", "create", "update", "delete", "query"]) + """The identity that created the resource.""" + created_by_type: Optional[Union[str, "_models.CreatedByType"]] = rest_field( + name="createdByType", visibility=["read", "create", "update", "delete", "query"] + ) + """The type of identity that created the resource. Known values are: \"User\", \"Application\", + \"ManagedIdentity\", and \"Key\".""" + created_at: Optional[datetime.datetime] = rest_field( + name="createdAt", visibility=["read", "create", "update", "delete", "query"], format="rfc3339" + ) + """The timestamp of resource creation (UTC).""" + last_modified_by: Optional[str] = rest_field( + name="lastModifiedBy", visibility=["read", "create", "update", "delete", "query"] + ) + """The identity that last modified the resource.""" + last_modified_by_type: Optional[Union[str, "_models.CreatedByType"]] = rest_field( + name="lastModifiedByType", visibility=["read", "create", "update", "delete", "query"] + ) + """The type of identity that last modified the resource. Known values are: \"User\", + \"Application\", \"ManagedIdentity\", and \"Key\".""" + last_modified_at: Optional[datetime.datetime] = rest_field( + name="lastModifiedAt", visibility=["read", "create", "update", "delete", "query"], format="rfc3339" + ) + """The timestamp of resource last modification (UTC).""" + + @overload + def __init__( + self, + *, + created_by: Optional[str] = None, + created_by_type: Optional[Union[str, "_models.CreatedByType"]] = None, + created_at: Optional[datetime.datetime] = None, + last_modified_by: Optional[str] = None, + last_modified_by_type: Optional[Union[str, "_models.CreatedByType"]] = None, + last_modified_at: Optional[datetime.datetime] = None, + ) -> None: ... + + @overload + def __init__(self, mapping: Mapping[str, Any]) -> None: + """ + :param mapping: raw JSON to initialize the model. + :type mapping: Mapping[str, Any] + """ + + def __init__(self, *args: Any, **kwargs: Any) -> None: + super().__init__(*args, **kwargs) diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_patch.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_patch.py similarity index 61% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_patch.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_patch.py index 1bb0db275de..8bcb627aa47 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/_patch.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/models/_patch.py @@ -1,20 +1,21 @@ -# ------------------------------------ -# Copyright (c) Microsoft Corporation. -# Licensed under the MIT License. -# ------------------------------------ -"""Customize generated code here. - -Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize -""" -from typing import List - -__all__: List[str] = [] # Add all objects you want publicly available to users at this package level - - -def patch_sdk(): - """Do not remove from this file. - - `patch_sdk` is a last resort escape hatch that allows you to do customizations - you can't accomplish using the techniques described in - https://aka.ms/azsdk/python/dpcodegen/python/customize - """ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# -------------------------------------------------------------------------- +"""Customize generated code here. + +Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize +""" +from typing import List + +__all__: List[str] = [] # Add all objects you want publicly available to users at this package level + + +def patch_sdk(): + """Do not remove from this file. + + `patch_sdk` is a last resort escape hatch that allows you to do customizations + you can't accomplish using the techniques described in + https://aka.ms/azsdk/python/dpcodegen/python/customize + """ diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/__init__.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/__init__.py similarity index 56% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/__init__.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/__init__.py index 1ad2f7aa3b6..8395d53508f 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/aio/operations/__init__.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/__init__.py @@ -1,21 +1,27 @@ -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- - -from ._connected_cluster_operations import ConnectedClusterOperations -from ._operations import Operations - -from ._patch import __all__ as _patch_all -from ._patch import * # pylint: disable=unused-wildcard-import -from ._patch import patch_sdk as _patch_sdk - -__all__ = [ - "ConnectedClusterOperations", - "Operations", -] -__all__.extend([p for p in _patch_all if p not in __all__]) -_patch_sdk() +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +# pylint: disable=wrong-import-position + +from typing import TYPE_CHECKING + +if TYPE_CHECKING: + from ._patch import * # pylint: disable=unused-wildcard-import + +from ._operations import Operations # type: ignore +from ._operations import ConnectedClusterOperations # type: ignore + +from ._patch import __all__ as _patch_all +from ._patch import * +from ._patch import patch_sdk as _patch_sdk + +__all__ = [ + "Operations", + "ConnectedClusterOperations", +] +__all__.extend([p for p in _patch_all if p not in __all__]) # pyright: ignore +_patch_sdk() diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_connected_cluster_operations.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_operations.py similarity index 58% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_connected_cluster_operations.py rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_operations.py index 840fd04cef3..1df1a2c2668 100644 --- a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/operations/_connected_cluster_operations.py +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_operations.py @@ -1,1097 +1,1343 @@ -# pylint: disable=too-many-lines,too-many-statements -# coding=utf-8 -# -------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# Code generated by Microsoft (R) AutoRest Code Generator. -# Changes may cause incorrect behavior and will be lost if the code is regenerated. -# -------------------------------------------------------------------------- -from io import IOBase -import sys -from typing import Any, Callable, Dict, IO, Iterable, Optional, Type, TypeVar, Union, cast, overload -import urllib.parse - -from azure.core.exceptions import ( - ClientAuthenticationError, - HttpResponseError, - ResourceExistsError, - ResourceNotFoundError, - ResourceNotModifiedError, - map_error, -) -from azure.core.paging import ItemPaged -from azure.core.pipeline import PipelineResponse -from azure.core.pipeline.transport import HttpResponse -from azure.core.polling import LROPoller, NoPolling, PollingMethod -from azure.core.rest import HttpRequest -from azure.core.tracing.decorator import distributed_trace -from azure.core.utils import case_insensitive_dict -from azure.mgmt.core.exceptions import ARMErrorFormat -from azure.mgmt.core.polling.arm_polling import ARMPolling - -from .. import models as _models -from .._serialization import Serializer -from .._vendor import _convert_request - -if sys.version_info >= (3, 9): - from collections.abc import MutableMapping -else: - from typing import MutableMapping # type: ignore # pylint: disable=ungrouped-imports -T = TypeVar("T") -ClsType = Optional[Callable[[PipelineResponse[HttpRequest, HttpResponse], T, Dict[str, Any]], Any]] - -_SERIALIZER = Serializer() -_SERIALIZER.client_side_validation = False - - -def build_create_request( - resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any -) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", - "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}", - ) # pylint: disable=line-too-long - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - "resourceGroupName": _SERIALIZER.url( - "resource_group_name", resource_group_name, "str", max_length=90, min_length=1 - ), - "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - if content_type is not None: - _headers["Content-Type"] = _SERIALIZER.header("content_type", content_type, "str") - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="PUT", url=_url, params=_params, headers=_headers, **kwargs) - - -def build_update_request( - resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any -) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", - "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}", - ) # pylint: disable=line-too-long - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - "resourceGroupName": _SERIALIZER.url( - "resource_group_name", resource_group_name, "str", max_length=90, min_length=1 - ), - "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - if content_type is not None: - _headers["Content-Type"] = _SERIALIZER.header("content_type", content_type, "str") - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="PATCH", url=_url, params=_params, headers=_headers, **kwargs) - - -def build_get_request(resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", - "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}", - ) # pylint: disable=line-too-long - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - "resourceGroupName": _SERIALIZER.url( - "resource_group_name", resource_group_name, "str", max_length=90, min_length=1 - ), - "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) - - -def build_delete_request( - resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any -) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", - "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}", - ) # pylint: disable=line-too-long - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - "resourceGroupName": _SERIALIZER.url( - "resource_group_name", resource_group_name, "str", max_length=90, min_length=1 - ), - "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="DELETE", url=_url, params=_params, headers=_headers, **kwargs) - - -def build_list_cluster_user_credential_request( # pylint: disable=name-too-long - resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any -) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", - "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}/listClusterUserCredential", - ) # pylint: disable=line-too-long - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - "resourceGroupName": _SERIALIZER.url( - "resource_group_name", resource_group_name, "str", max_length=90, min_length=1 - ), - "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - if content_type is not None: - _headers["Content-Type"] = _SERIALIZER.header("content_type", content_type, "str") - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="POST", url=_url, params=_params, headers=_headers, **kwargs) - - -def build_list_by_resource_group_request(resource_group_name: str, subscription_id: str, **kwargs: Any) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", - "/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters", - ) # pylint: disable=line-too-long - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - "resourceGroupName": _SERIALIZER.url( - "resource_group_name", resource_group_name, "str", max_length=90, min_length=1 - ), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) - - -def build_list_by_subscription_request(subscription_id: str, **kwargs: Any) -> HttpRequest: - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2024-07-01-preview")) - accept = _headers.pop("Accept", "application/json") - - # Construct URL - _url = kwargs.pop( - "template_url", "/subscriptions/{subscriptionId}/providers/Microsoft.Kubernetes/connectedClusters" - ) - path_format_arguments = { - "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str", min_length=1), - } - - _url: str = _url.format(**path_format_arguments) # type: ignore - - # Construct parameters - _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") - - # Construct headers - _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") - - return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) - - -class ConnectedClusterOperations: - """ - .. warning:: - **DO NOT** instantiate this class directly. - - Instead, you should access the following operations through - :class:`~azure.mgmt.hybridkubernetes.ConnectedKubernetesClient`'s - :attr:`connected_cluster` attribute. - """ - - models = _models - - def __init__(self, *args, **kwargs): - input_args = list(args) - self._client = input_args.pop(0) if input_args else kwargs.pop("client") - self._config = input_args.pop(0) if input_args else kwargs.pop("config") - self._serialize = input_args.pop(0) if input_args else kwargs.pop("serializer") - self._deserialize = input_args.pop(0) if input_args else kwargs.pop("deserializer") - - def _create_initial( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: Union[_models.ConnectedCluster, IO[bytes]], - **kwargs: Any - ) -> _models.ConnectedCluster: - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - - content_type = content_type or "application/json" - _json = None - _content = None - if isinstance(connected_cluster, (IOBase, bytes)): - _content = connected_cluster - else: - _json = self._serialize.body(connected_cluster, "ConnectedCluster") - - _request = build_create_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - content_type=content_type, - json=_json, - content=_content, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200, 201]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - if response.status_code == 200: - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if response.status_code == 201: - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - @overload - def begin_create( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: _models.ConnectedCluster, - *, - content_type: str = "application/json", - **kwargs: Any - ) -> LROPoller[_models.ConnectedCluster]: - """Register a new Kubernetes cluster with Azure Resource Manager. - - API to register a new Kubernetes cluster and create a tracked resource in Azure Resource - Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. - :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. - Default value is "application/json". - :paramtype content_type: str - :return: An instance of LROPoller that returns either ConnectedCluster or the result of - cls(response) - :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @overload - def begin_create( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: IO[bytes], - *, - content_type: str = "application/json", - **kwargs: Any - ) -> LROPoller[_models.ConnectedCluster]: - """Register a new Kubernetes cluster with Azure Resource Manager. - - API to register a new Kubernetes cluster and create a tracked resource in Azure Resource - Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. - :type connected_cluster: IO[bytes] - :keyword content_type: Body Parameter content-type. Content type parameter for binary body. - Default value is "application/json". - :paramtype content_type: str - :return: An instance of LROPoller that returns either ConnectedCluster or the result of - cls(response) - :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @distributed_trace - def begin_create( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster: Union[_models.ConnectedCluster, IO[bytes]], - **kwargs: Any - ) -> LROPoller[_models.ConnectedCluster]: - """Register a new Kubernetes cluster with Azure Resource Manager. - - API to register a new Kubernetes cluster and create a tracked resource in Azure Resource - Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster: Parameters supplied to Create a Connected Cluster. Is either a - ConnectedCluster type or a IO[bytes] type. Required. - :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster or IO[bytes] - :return: An instance of LROPoller that returns either ConnectedCluster or the result of - cls(response) - :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - polling: Union[bool, PollingMethod] = kwargs.pop("polling", True) - lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) - cont_token: Optional[str] = kwargs.pop("continuation_token", None) - if cont_token is None: - raw_result = self._create_initial( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - connected_cluster=connected_cluster, - api_version=api_version, - content_type=content_type, - cls=lambda x, y, z: x, - headers=_headers, - params=_params, - **kwargs - ) - kwargs.pop("error_map", None) - - def get_long_running_output(pipeline_response): - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - return deserialized - - if polling is True: - polling_method: PollingMethod = cast( - PollingMethod, ARMPolling(lro_delay, lro_options={"final-state-via": "azure-async-operation"}, **kwargs) - ) - elif polling is False: - polling_method = cast(PollingMethod, NoPolling()) - else: - polling_method = polling - if cont_token: - return LROPoller[_models.ConnectedCluster].from_continuation_token( - polling_method=polling_method, - continuation_token=cont_token, - client=self._client, - deserialization_callback=get_long_running_output, - ) - return LROPoller[_models.ConnectedCluster]( - self._client, raw_result, get_long_running_output, polling_method # type: ignore - ) - - @overload - def update( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster_patch: _models.ConnectedClusterPatch, - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.ConnectedCluster: - """Updates a connected cluster. - - API to update certain properties of the connected cluster resource. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. - :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch - :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. - Default value is "application/json". - :paramtype content_type: str - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @overload - def update( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster_patch: IO[bytes], - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.ConnectedCluster: - """Updates a connected cluster. - - API to update certain properties of the connected cluster resource. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. - :type connected_cluster_patch: IO[bytes] - :keyword content_type: Body Parameter content-type. Content type parameter for binary body. - Default value is "application/json". - :paramtype content_type: str - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @distributed_trace - def update( - self, - resource_group_name: str, - cluster_name: str, - connected_cluster_patch: Union[_models.ConnectedClusterPatch, IO[bytes]], - **kwargs: Any - ) -> _models.ConnectedCluster: - """Updates a connected cluster. - - API to update certain properties of the connected cluster resource. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Is either a - ConnectedClusterPatch type or a IO[bytes] type. Required. - :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch or - IO[bytes] - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - - content_type = content_type or "application/json" - _json = None - _content = None - if isinstance(connected_cluster_patch, (IOBase, bytes)): - _content = connected_cluster_patch - else: - _json = self._serialize.body(connected_cluster_patch, "ConnectedClusterPatch") - - _request = build_update_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - content_type=content_type, - json=_json, - content=_content, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - @distributed_trace - def get(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> _models.ConnectedCluster: - """Get the properties of the specified connected cluster. - - Returns the properties of the specified connected cluster, including name, identity, - properties, and additional cluster details. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :return: ConnectedCluster or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster - :raises ~azure.core.exceptions.HttpResponseError: - """ - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) - - _request = build_get_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - deserialized = self._deserialize("ConnectedCluster", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - def _delete_initial( # pylint: disable=inconsistent-return-statements - self, resource_group_name: str, cluster_name: str, **kwargs: Any - ) -> None: - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[None] = kwargs.pop("cls", None) - - _request = build_delete_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200, 202, 204]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - if cls: - return cls(pipeline_response, None, {}) # type: ignore - - @distributed_trace - def begin_delete(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> LROPoller[None]: - """Delete a connected cluster. - - Delete a connected cluster, removing the tracked resource in Azure Resource Manager (ARM). - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :return: An instance of LROPoller that returns either None or the result of cls(response) - :rtype: ~azure.core.polling.LROPoller[None] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[None] = kwargs.pop("cls", None) - polling: Union[bool, PollingMethod] = kwargs.pop("polling", True) - lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) - cont_token: Optional[str] = kwargs.pop("continuation_token", None) - if cont_token is None: - raw_result = self._delete_initial( # type: ignore - resource_group_name=resource_group_name, - cluster_name=cluster_name, - api_version=api_version, - cls=lambda x, y, z: x, - headers=_headers, - params=_params, - **kwargs - ) - kwargs.pop("error_map", None) - - def get_long_running_output(pipeline_response): # pylint: disable=inconsistent-return-statements - if cls: - return cls(pipeline_response, None, {}) # type: ignore - - if polling is True: - polling_method: PollingMethod = cast( - PollingMethod, ARMPolling(lro_delay, lro_options={"final-state-via": "location"}, **kwargs) - ) - elif polling is False: - polling_method = cast(PollingMethod, NoPolling()) - else: - polling_method = polling - if cont_token: - return LROPoller[None].from_continuation_token( - polling_method=polling_method, - continuation_token=cont_token, - client=self._client, - deserialization_callback=get_long_running_output, - ) - return LROPoller[None](self._client, raw_result, get_long_running_output, polling_method) # type: ignore - - @overload - def list_cluster_user_credential( - self, - resource_group_name: str, - cluster_name: str, - properties: _models.ListClusterUserCredentialProperties, - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.CredentialResults: - """Gets cluster user credentials of a connected cluster. - - Gets cluster user credentials of the connected cluster with a specified resource group and - name. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param properties: ListClusterUserCredential properties. Required. - :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties - :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. - Default value is "application/json". - :paramtype content_type: str - :return: CredentialResults or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @overload - def list_cluster_user_credential( - self, - resource_group_name: str, - cluster_name: str, - properties: IO[bytes], - *, - content_type: str = "application/json", - **kwargs: Any - ) -> _models.CredentialResults: - """Gets cluster user credentials of a connected cluster. - - Gets cluster user credentials of the connected cluster with a specified resource group and - name. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param properties: ListClusterUserCredential properties. Required. - :type properties: IO[bytes] - :keyword content_type: Body Parameter content-type. Content type parameter for binary body. - Default value is "application/json". - :paramtype content_type: str - :return: CredentialResults or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults - :raises ~azure.core.exceptions.HttpResponseError: - """ - - @distributed_trace - def list_cluster_user_credential( - self, - resource_group_name: str, - cluster_name: str, - properties: Union[_models.ListClusterUserCredentialProperties, IO[bytes]], - **kwargs: Any - ) -> _models.CredentialResults: - """Gets cluster user credentials of a connected cluster. - - Gets cluster user credentials of the connected cluster with a specified resource group and - name. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. - :type cluster_name: str - :param properties: ListClusterUserCredential properties. Is either a - ListClusterUserCredentialProperties type or a IO[bytes] type. Required. - :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties or - IO[bytes] - :return: CredentialResults or the result of cls(response) - :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults - :raises ~azure.core.exceptions.HttpResponseError: - """ - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) - cls: ClsType[_models.CredentialResults] = kwargs.pop("cls", None) - - content_type = content_type or "application/json" - _json = None - _content = None - if isinstance(properties, (IOBase, bytes)): - _content = properties - else: - _json = self._serialize.body(properties, "ListClusterUserCredentialProperties") - - _request = build_list_cluster_user_credential_request( - resource_group_name=resource_group_name, - cluster_name=cluster_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - content_type=content_type, - json=_json, - content=_content, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - deserialized = self._deserialize("CredentialResults", pipeline_response) - - if cls: - return cls(pipeline_response, deserialized, {}) # type: ignore - - return deserialized # type: ignore - - @distributed_trace - def list_by_resource_group(self, resource_group_name: str, **kwargs: Any) -> Iterable["_models.ConnectedCluster"]: - """Lists all connected clusters in the given ResourceGroup. - - API to enumerate registered connected K8s clusters under a Resource Group. - - :param resource_group_name: The name of the resource group. The name is case insensitive. - Required. - :type resource_group_name: str - :return: An iterator like instance of either ConnectedCluster or the result of cls(response) - :rtype: ~azure.core.paging.ItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.ConnectedClusterList] = kwargs.pop("cls", None) - - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - def prepare_request(next_link=None): - if not next_link: - - _request = build_list_by_resource_group_request( - resource_group_name=resource_group_name, - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - else: - # make call to next link with the client's api-version - _parsed_next_link = urllib.parse.urlparse(next_link) - _next_request_params = case_insensitive_dict( - { - key: [urllib.parse.quote(v) for v in value] - for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() - } - ) - _next_request_params["api-version"] = self._config.api_version - _request = HttpRequest( - "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - _request.method = "GET" - return _request - - def extract_data(pipeline_response): - deserialized = self._deserialize("ConnectedClusterList", pipeline_response) - list_of_elem = deserialized.value - if cls: - list_of_elem = cls(list_of_elem) # type: ignore - return deserialized.next_link or None, iter(list_of_elem) - - def get_next(next_link=None): - _request = prepare_request(next_link) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - return pipeline_response - - return ItemPaged(get_next, extract_data) - - @distributed_trace - def list_by_subscription(self, **kwargs: Any) -> Iterable["_models.ConnectedCluster"]: - """Lists all connected clusters in the given Subscription. - - API to enumerate registered connected K8s clusters under a Subscription. - - :return: An iterator like instance of either ConnectedCluster or the result of cls(response) - :rtype: ~azure.core.paging.ItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] - :raises ~azure.core.exceptions.HttpResponseError: - """ - _headers = kwargs.pop("headers", {}) or {} - _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) - - api_version: str = kwargs.pop("api_version", _params.pop("api-version", self._config.api_version)) - cls: ClsType[_models.ConnectedClusterList] = kwargs.pop("cls", None) - - error_map: MutableMapping[int, Type[HttpResponseError]] = { - 401: ClientAuthenticationError, - 404: ResourceNotFoundError, - 409: ResourceExistsError, - 304: ResourceNotModifiedError, - } - error_map.update(kwargs.pop("error_map", {}) or {}) - - def prepare_request(next_link=None): - if not next_link: - - _request = build_list_by_subscription_request( - subscription_id=self._config.subscription_id, - api_version=api_version, - headers=_headers, - params=_params, - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - - else: - # make call to next link with the client's api-version - _parsed_next_link = urllib.parse.urlparse(next_link) - _next_request_params = case_insensitive_dict( - { - key: [urllib.parse.quote(v) for v in value] - for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() - } - ) - _next_request_params["api-version"] = self._config.api_version - _request = HttpRequest( - "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params - ) - _request = _convert_request(_request) - _request.url = self._client.format_url(_request.url) - _request.method = "GET" - return _request - - def extract_data(pipeline_response): - deserialized = self._deserialize("ConnectedClusterList", pipeline_response) - list_of_elem = deserialized.value - if cls: - list_of_elem = cls(list_of_elem) # type: ignore - return deserialized.next_link or None, iter(list_of_elem) - - def get_next(next_link=None): - _request = prepare_request(next_link) - - _stream = False - pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access - _request, stream=_stream, **kwargs - ) - response = pipeline_response.http_response - - if response.status_code not in [200]: - map_error(status_code=response.status_code, response=response, error_map=error_map) - error = self._deserialize.failsafe_deserialize(_models.ErrorResponse, pipeline_response) - raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) - - return pipeline_response - - return ItemPaged(get_next, extract_data) +# pylint: disable=line-too-long,useless-suppression,too-many-lines +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# Code generated by Microsoft (R) Python Code Generator. +# Changes may cause incorrect behavior and will be lost if the code is regenerated. +# -------------------------------------------------------------------------- +from collections.abc import MutableMapping +from io import IOBase +import json +from typing import Any, Callable, Dict, IO, Iterator, List, Optional, TypeVar, Union, cast, overload +import urllib.parse + +from azure.core import PipelineClient +from azure.core.exceptions import ( + ClientAuthenticationError, + HttpResponseError, + ResourceExistsError, + ResourceNotFoundError, + ResourceNotModifiedError, + StreamClosedError, + StreamConsumedError, + map_error, +) +from azure.core.paging import ItemPaged +from azure.core.pipeline import PipelineResponse +from azure.core.polling import LROPoller, NoPolling, PollingMethod +from azure.core.rest import HttpRequest, HttpResponse +from azure.core.tracing.decorator import distributed_trace +from azure.core.utils import case_insensitive_dict +from azure.mgmt.core.exceptions import ARMErrorFormat +from azure.mgmt.core.polling.arm_polling import ARMPolling + +from .. import models as _models +from .._configuration import KubernetesClientConfiguration +from .._utils.model_base import SdkJSONEncoder, _deserialize, _failsafe_deserialize +from .._utils.serialization import Deserializer, Serializer + +T = TypeVar("T") +ClsType = Optional[Callable[[PipelineResponse[HttpRequest, HttpResponse], T, Dict[str, Any]], Any]] +JSON = MutableMapping[str, Any] + +_SERIALIZER = Serializer() +_SERIALIZER.client_side_validation = False + + +def build_operations_get_request(**kwargs: Any) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/providers/Microsoft.Kubernetes/operations" + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_get_request( + resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + "resourceGroupName": _SERIALIZER.url("resource_group_name", resource_group_name, "str"), + "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_create_or_replace_request( # pylint: disable=name-too-long + resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + "resourceGroupName": _SERIALIZER.url("resource_group_name", resource_group_name, "str"), + "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + if content_type is not None: + _headers["Content-Type"] = _SERIALIZER.header("content_type", content_type, "str") + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="PUT", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_update_request( + resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + "resourceGroupName": _SERIALIZER.url("resource_group_name", resource_group_name, "str"), + "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + if content_type is not None: + _headers["Content-Type"] = _SERIALIZER.header("content_type", content_type, "str") + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="PATCH", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_delete_request( + resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + "resourceGroupName": _SERIALIZER.url("resource_group_name", resource_group_name, "str"), + "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="DELETE", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_list_by_resource_group_request( # pylint: disable=name-too-long + resource_group_name: str, subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + "resourceGroupName": _SERIALIZER.url("resource_group_name", resource_group_name, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_list_by_subscription_request( # pylint: disable=name-too-long + subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/providers/Microsoft.Kubernetes/connectedClusters" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="GET", url=_url, params=_params, headers=_headers, **kwargs) + + +def build_connected_cluster_list_cluster_user_credential_request( # pylint: disable=name-too-long + resource_group_name: str, cluster_name: str, subscription_id: str, **kwargs: Any +) -> HttpRequest: + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = case_insensitive_dict(kwargs.pop("params", {}) or {}) + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + api_version: str = kwargs.pop("api_version", _params.pop("api-version", "2025-08-01-preview")) + accept = _headers.pop("Accept", "application/json") + + # Construct URL + _url = "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Kubernetes/connectedClusters/{clusterName}/listClusterUserCredential" + path_format_arguments = { + "subscriptionId": _SERIALIZER.url("subscription_id", subscription_id, "str"), + "resourceGroupName": _SERIALIZER.url("resource_group_name", resource_group_name, "str"), + "clusterName": _SERIALIZER.url("cluster_name", cluster_name, "str"), + } + + _url: str = _url.format(**path_format_arguments) # type: ignore + + # Construct parameters + _params["api-version"] = _SERIALIZER.query("api_version", api_version, "str") + + # Construct headers + if content_type is not None: + _headers["Content-Type"] = _SERIALIZER.header("content_type", content_type, "str") + _headers["Accept"] = _SERIALIZER.header("accept", accept, "str") + + return HttpRequest(method="POST", url=_url, params=_params, headers=_headers, **kwargs) + + +class Operations: + """ + .. warning:: + **DO NOT** instantiate this class directly. + + Instead, you should access the following operations through + :class:`~azure.mgmt.hybridkubernetes.KubernetesClient`'s + :attr:`operations` attribute. + """ + + def __init__(self, *args, **kwargs) -> None: + input_args = list(args) + self._client: PipelineClient = input_args.pop(0) if input_args else kwargs.pop("client") + self._config: KubernetesClientConfiguration = input_args.pop(0) if input_args else kwargs.pop("config") + self._serialize: Serializer = input_args.pop(0) if input_args else kwargs.pop("serializer") + self._deserialize: Deserializer = input_args.pop(0) if input_args else kwargs.pop("deserializer") + + @distributed_trace + def get(self, **kwargs: Any) -> ItemPaged["_models.Operation"]: + """List the operations for the provider. + + :return: An iterator like instance of Operation + :rtype: ~azure.core.paging.ItemPaged[~azure.mgmt.hybridkubernetes.models.Operation] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[List[_models.Operation]] = kwargs.pop("cls", None) + + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + def prepare_request(next_link=None): + if not next_link: + + _request = build_operations_get_request( + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + else: + # make call to next link with the client's api-version + _parsed_next_link = urllib.parse.urlparse(next_link) + _next_request_params = case_insensitive_dict( + { + key: [urllib.parse.quote(v) for v in value] + for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() + } + ) + _next_request_params["api-version"] = self._config.api_version + _request = HttpRequest( + "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + return _request + + def extract_data(pipeline_response): + deserialized = pipeline_response.http_response.json() + list_of_elem = _deserialize(List[_models.Operation], deserialized.get("value", [])) + if cls: + list_of_elem = cls(list_of_elem) # type: ignore + return deserialized.get("nextLink") or None, iter(list_of_elem) + + def get_next(next_link=None): + _request = prepare_request(next_link) + + _stream = False + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + response = pipeline_response.http_response + + if response.status_code not in [200]: + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + return pipeline_response + + return ItemPaged(get_next, extract_data) + + +class ConnectedClusterOperations: + """ + .. warning:: + **DO NOT** instantiate this class directly. + + Instead, you should access the following operations through + :class:`~azure.mgmt.hybridkubernetes.KubernetesClient`'s + :attr:`connected_cluster` attribute. + """ + + def __init__(self, *args, **kwargs) -> None: + input_args = list(args) + self._client: PipelineClient = input_args.pop(0) if input_args else kwargs.pop("client") + self._config: KubernetesClientConfiguration = input_args.pop(0) if input_args else kwargs.pop("config") + self._serialize: Serializer = input_args.pop(0) if input_args else kwargs.pop("serializer") + self._deserialize: Deserializer = input_args.pop(0) if input_args else kwargs.pop("deserializer") + + @distributed_trace + def get(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> _models.ConnectedCluster: + """Get the properties of the specified connected cluster. + + Returns the properties of the specified connected cluster, including name, identity, + properties, and additional cluster details. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) + + _request = build_connected_cluster_get_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = kwargs.pop("stream", False) + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200]: + if _stream: + try: + response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + if _stream: + deserialized = response.iter_bytes() + else: + deserialized = _deserialize(_models.ConnectedCluster, response.json()) + + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + + return deserialized # type: ignore + + def _create_or_replace_initial( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: Union[_models.ConnectedCluster, JSON, IO[bytes]], + **kwargs: Any + ) -> Iterator[bytes]: + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[Iterator[bytes]] = kwargs.pop("cls", None) + + content_type = content_type or "application/json" + _content = None + if isinstance(connected_cluster, (IOBase, bytes)): + _content = connected_cluster + else: + _content = json.dumps(connected_cluster, cls=SdkJSONEncoder, exclude_readonly=True) # type: ignore + + _request = build_connected_cluster_create_or_replace_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + content_type=content_type, + api_version=self._config.api_version, + content=_content, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = True + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200, 201]: + try: + response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + response_headers = {} + if response.status_code == 201: + response_headers["Azure-AsyncOperation"] = self._deserialize( + "str", response.headers.get("Azure-AsyncOperation") + ) + response_headers["Retry-After"] = self._deserialize("int", response.headers.get("Retry-After")) + + deserialized = response.iter_bytes() + + if cls: + return cls(pipeline_response, deserialized, response_headers) # type: ignore + + return deserialized # type: ignore + + @overload + def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: _models.ConnectedCluster, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> LROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. + :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: An instance of LROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: JSON, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> LROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. + :type connected_cluster: JSON + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: An instance of LROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: IO[bytes], + *, + content_type: str = "application/json", + **kwargs: Any + ) -> LROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Required. + :type connected_cluster: IO[bytes] + :keyword content_type: Body Parameter content-type. Content type parameter for binary body. + Default value is "application/json". + :paramtype content_type: str + :return: An instance of LROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @distributed_trace + def begin_create_or_replace( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster: Union[_models.ConnectedCluster, JSON, IO[bytes]], + **kwargs: Any + ) -> LROPoller[_models.ConnectedCluster]: + """Register a new Kubernetes cluster with Azure Resource Manager. + + API to register a new Kubernetes cluster and create or replace a connected cluster tracked + resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster: Parameters supplied to Create a Connected Cluster. Is one of the + following types: ConnectedCluster, JSON, IO[bytes] Required. + :type connected_cluster: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster or JSON or + IO[bytes] + :return: An instance of LROPoller that returns ConnectedCluster. The ConnectedCluster is + compatible with MutableMapping + :rtype: ~azure.core.polling.LROPoller[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) + polling: Union[bool, PollingMethod] = kwargs.pop("polling", True) + lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) + cont_token: Optional[str] = kwargs.pop("continuation_token", None) + if cont_token is None: + raw_result = self._create_or_replace_initial( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + connected_cluster=connected_cluster, + content_type=content_type, + cls=lambda x, y, z: x, + headers=_headers, + params=_params, + **kwargs + ) + raw_result.http_response.read() # type: ignore + kwargs.pop("error_map", None) + + def get_long_running_output(pipeline_response): + response = pipeline_response.http_response + deserialized = _deserialize(_models.ConnectedCluster, response.json()) + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + return deserialized + + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + + if polling is True: + polling_method: PollingMethod = cast( + PollingMethod, ARMPolling(lro_delay, path_format_arguments=path_format_arguments, **kwargs) + ) + elif polling is False: + polling_method = cast(PollingMethod, NoPolling()) + else: + polling_method = polling + if cont_token: + return LROPoller[_models.ConnectedCluster].from_continuation_token( + polling_method=polling_method, + continuation_token=cont_token, + client=self._client, + deserialization_callback=get_long_running_output, + ) + return LROPoller[_models.ConnectedCluster]( + self._client, raw_result, get_long_running_output, polling_method # type: ignore + ) + + @overload + def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: _models.ConnectedClusterPatch, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. + :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: JSON, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. + :type connected_cluster_patch: JSON + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: IO[bytes], + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Required. + :type connected_cluster_patch: IO[bytes] + :keyword content_type: Body Parameter content-type. Content type parameter for binary body. + Default value is "application/json". + :paramtype content_type: str + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @distributed_trace + def update( + self, + resource_group_name: str, + cluster_name: str, + connected_cluster_patch: Union[_models.ConnectedClusterPatch, JSON, IO[bytes]], + **kwargs: Any + ) -> _models.ConnectedCluster: + """Updates a connected cluster. + + API to update certain properties of the connected cluster resource. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param connected_cluster_patch: Parameters supplied to update Connected Cluster. Is one of the + following types: ConnectedClusterPatch, JSON, IO[bytes] Required. + :type connected_cluster_patch: ~azure.mgmt.hybridkubernetes.models.ConnectedClusterPatch or + JSON or IO[bytes] + :return: ConnectedCluster. The ConnectedCluster is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.ConnectedCluster + :raises ~azure.core.exceptions.HttpResponseError: + """ + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[_models.ConnectedCluster] = kwargs.pop("cls", None) + + content_type = content_type or "application/json" + _content = None + if isinstance(connected_cluster_patch, (IOBase, bytes)): + _content = connected_cluster_patch + else: + _content = json.dumps(connected_cluster_patch, cls=SdkJSONEncoder, exclude_readonly=True) # type: ignore + + _request = build_connected_cluster_update_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + content_type=content_type, + api_version=self._config.api_version, + content=_content, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = kwargs.pop("stream", False) + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200]: + if _stream: + try: + response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + if _stream: + deserialized = response.iter_bytes() + else: + deserialized = _deserialize(_models.ConnectedCluster, response.json()) + + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + + return deserialized # type: ignore + + def _delete_initial(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> Iterator[bytes]: + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[Iterator[bytes]] = kwargs.pop("cls", None) + + _request = build_connected_cluster_delete_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = True + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200, 202, 204]: + try: + response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + response_headers = {} + if response.status_code == 202: + response_headers["Location"] = self._deserialize("str", response.headers.get("Location")) + response_headers["Retry-After"] = self._deserialize("int", response.headers.get("Retry-After")) + + deserialized = response.iter_bytes() + + if cls: + return cls(pipeline_response, deserialized, response_headers) # type: ignore + + return deserialized # type: ignore + + @distributed_trace + def begin_delete(self, resource_group_name: str, cluster_name: str, **kwargs: Any) -> LROPoller[None]: + """Delete a connected cluster. + + Delete a connected cluster, removing the tracked resource in Azure Resource Manager (ARM). + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :return: An instance of LROPoller that returns None + :rtype: ~azure.core.polling.LROPoller[None] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[None] = kwargs.pop("cls", None) + polling: Union[bool, PollingMethod] = kwargs.pop("polling", True) + lro_delay = kwargs.pop("polling_interval", self._config.polling_interval) + cont_token: Optional[str] = kwargs.pop("continuation_token", None) + if cont_token is None: + raw_result = self._delete_initial( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + cls=lambda x, y, z: x, + headers=_headers, + params=_params, + **kwargs + ) + raw_result.http_response.read() # type: ignore + kwargs.pop("error_map", None) + + def get_long_running_output(pipeline_response): # pylint: disable=inconsistent-return-statements + if cls: + return cls(pipeline_response, None, {}) # type: ignore + + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + + if polling is True: + polling_method: PollingMethod = cast( + PollingMethod, ARMPolling(lro_delay, path_format_arguments=path_format_arguments, **kwargs) + ) + elif polling is False: + polling_method = cast(PollingMethod, NoPolling()) + else: + polling_method = polling + if cont_token: + return LROPoller[None].from_continuation_token( + polling_method=polling_method, + continuation_token=cont_token, + client=self._client, + deserialization_callback=get_long_running_output, + ) + return LROPoller[None](self._client, raw_result, get_long_running_output, polling_method) # type: ignore + + @distributed_trace + def list_by_resource_group(self, resource_group_name: str, **kwargs: Any) -> ItemPaged["_models.ConnectedCluster"]: + """Lists all connected clusters in the given Resource Group. + + API to enumerate registered connected K8s clusters under a Resource Group. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :return: An iterator like instance of ConnectedCluster + :rtype: ~azure.core.paging.ItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[List[_models.ConnectedCluster]] = kwargs.pop("cls", None) + + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + def prepare_request(next_link=None): + if not next_link: + + _request = build_connected_cluster_list_by_resource_group_request( + resource_group_name=resource_group_name, + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + else: + # make call to next link with the client's api-version + _parsed_next_link = urllib.parse.urlparse(next_link) + _next_request_params = case_insensitive_dict( + { + key: [urllib.parse.quote(v) for v in value] + for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() + } + ) + _next_request_params["api-version"] = self._config.api_version + _request = HttpRequest( + "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + return _request + + def extract_data(pipeline_response): + deserialized = pipeline_response.http_response.json() + list_of_elem = _deserialize(List[_models.ConnectedCluster], deserialized.get("value", [])) + if cls: + list_of_elem = cls(list_of_elem) # type: ignore + return deserialized.get("nextLink") or None, iter(list_of_elem) + + def get_next(next_link=None): + _request = prepare_request(next_link) + + _stream = False + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + response = pipeline_response.http_response + + if response.status_code not in [200]: + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + return pipeline_response + + return ItemPaged(get_next, extract_data) + + @distributed_trace + def list_by_subscription(self, **kwargs: Any) -> ItemPaged["_models.ConnectedCluster"]: + """Lists all connected clusters in the given Subscription. + + API to enumerate registered connected K8s clusters under a Subscription. + + :return: An iterator like instance of ConnectedCluster + :rtype: ~azure.core.paging.ItemPaged[~azure.mgmt.hybridkubernetes.models.ConnectedCluster] + :raises ~azure.core.exceptions.HttpResponseError: + """ + _headers = kwargs.pop("headers", {}) or {} + _params = kwargs.pop("params", {}) or {} + + cls: ClsType[List[_models.ConnectedCluster]] = kwargs.pop("cls", None) + + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + def prepare_request(next_link=None): + if not next_link: + + _request = build_connected_cluster_list_by_subscription_request( + subscription_id=self._config.subscription_id, + api_version=self._config.api_version, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + else: + # make call to next link with the client's api-version + _parsed_next_link = urllib.parse.urlparse(next_link) + _next_request_params = case_insensitive_dict( + { + key: [urllib.parse.quote(v) for v in value] + for key, value in urllib.parse.parse_qs(_parsed_next_link.query).items() + } + ) + _next_request_params["api-version"] = self._config.api_version + _request = HttpRequest( + "GET", urllib.parse.urljoin(next_link, _parsed_next_link.path), params=_next_request_params + ) + path_format_arguments = { + "endpoint": self._serialize.url( + "self._config.base_url", self._config.base_url, "str", skip_quote=True + ), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + return _request + + def extract_data(pipeline_response): + deserialized = pipeline_response.http_response.json() + list_of_elem = _deserialize(List[_models.ConnectedCluster], deserialized.get("value", [])) + if cls: + list_of_elem = cls(list_of_elem) # type: ignore + return deserialized.get("nextLink") or None, iter(list_of_elem) + + def get_next(next_link=None): + _request = prepare_request(next_link) + + _stream = False + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + response = pipeline_response.http_response + + if response.status_code not in [200]: + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + return pipeline_response + + return ItemPaged(get_next, extract_data) + + @overload + def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: _models.ListClusterUserCredentialProperties, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Required. + :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: JSON, + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Required. + :type properties: JSON + :keyword content_type: Body Parameter content-type. Content type parameter for JSON body. + Default value is "application/json". + :paramtype content_type: str + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @overload + def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: IO[bytes], + *, + content_type: str = "application/json", + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Required. + :type properties: IO[bytes] + :keyword content_type: Body Parameter content-type. Content type parameter for binary body. + Default value is "application/json". + :paramtype content_type: str + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + + @distributed_trace + def list_cluster_user_credential( + self, + resource_group_name: str, + cluster_name: str, + properties: Union[_models.ListClusterUserCredentialProperties, JSON, IO[bytes]], + **kwargs: Any + ) -> _models.CredentialResults: + """Gets cluster user credentials of a connected cluster. + + Gets cluster user credentials of the connected cluster with a specified resource group and + name. + + :param resource_group_name: The name of the resource group. The name is case insensitive. + Required. + :type resource_group_name: str + :param cluster_name: The name of the Kubernetes cluster on which get is called. Required. + :type cluster_name: str + :param properties: ListClusterUserCredential properties. Is one of the following types: + ListClusterUserCredentialProperties, JSON, IO[bytes] Required. + :type properties: ~azure.mgmt.hybridkubernetes.models.ListClusterUserCredentialProperties or + JSON or IO[bytes] + :return: CredentialResults. The CredentialResults is compatible with MutableMapping + :rtype: ~azure.mgmt.hybridkubernetes.models.CredentialResults + :raises ~azure.core.exceptions.HttpResponseError: + """ + error_map: MutableMapping = { + 401: ClientAuthenticationError, + 404: ResourceNotFoundError, + 409: ResourceExistsError, + 304: ResourceNotModifiedError, + } + error_map.update(kwargs.pop("error_map", {}) or {}) + + _headers = case_insensitive_dict(kwargs.pop("headers", {}) or {}) + _params = kwargs.pop("params", {}) or {} + + content_type: Optional[str] = kwargs.pop("content_type", _headers.pop("Content-Type", None)) + cls: ClsType[_models.CredentialResults] = kwargs.pop("cls", None) + + content_type = content_type or "application/json" + _content = None + if isinstance(properties, (IOBase, bytes)): + _content = properties + else: + _content = json.dumps(properties, cls=SdkJSONEncoder, exclude_readonly=True) # type: ignore + + _request = build_connected_cluster_list_cluster_user_credential_request( + resource_group_name=resource_group_name, + cluster_name=cluster_name, + subscription_id=self._config.subscription_id, + content_type=content_type, + api_version=self._config.api_version, + content=_content, + headers=_headers, + params=_params, + ) + path_format_arguments = { + "endpoint": self._serialize.url("self._config.base_url", self._config.base_url, "str", skip_quote=True), + } + _request.url = self._client.format_url(_request.url, **path_format_arguments) + + _stream = kwargs.pop("stream", False) + pipeline_response: PipelineResponse = self._client._pipeline.run( # pylint: disable=protected-access + _request, stream=_stream, **kwargs + ) + + response = pipeline_response.http_response + + if response.status_code not in [200]: + if _stream: + try: + response.read() # Load the body in memory and close the socket + except (StreamConsumedError, StreamClosedError): + pass + map_error(status_code=response.status_code, response=response, error_map=error_map) + error = _failsafe_deserialize(_models.ErrorResponse, response.json()) + raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat) + + if _stream: + deserialized = response.iter_bytes() + else: + deserialized = _deserialize(_models.CredentialResults, response.json()) + + if cls: + return cls(pipeline_response, deserialized, {}) # type: ignore + + return deserialized # type: ignore diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_patch.py b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_patch.py new file mode 100644 index 00000000000..8bcb627aa47 --- /dev/null +++ b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/operations/_patch.py @@ -0,0 +1,21 @@ +# coding=utf-8 +# -------------------------------------------------------------------------- +# Copyright (c) Microsoft Corporation. All rights reserved. +# Licensed under the MIT License. See License.txt in the project root for license information. +# -------------------------------------------------------------------------- +"""Customize generated code here. + +Follow our quickstart for examples: https://aka.ms/azsdk/python/dpcodegen/python/customize +""" +from typing import List + +__all__: List[str] = [] # Add all objects you want publicly available to users at this package level + + +def patch_sdk(): + """Do not remove from this file. + + `patch_sdk` is a last resort escape hatch that allows you to do customizations + you can't accomplish using the techniques described in + https://aka.ms/azsdk/python/dpcodegen/python/customize + """ diff --git a/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/py.typed b/src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/py.typed similarity index 100% rename from src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2024_07_01/py.typed rename to src/connectedk8s/azext_connectedk8s/vendored_sdks/preview_2025_08_01/py.typed From a0f5ed968b00265bca629388c7dfc3cf290b4f2b Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Wed, 30 Jul 2025 15:03:36 -0700 Subject: [PATCH 08/12] add gateway associate api call --- .../azext_connectedk8s/_constants.py | 4 ++ src/connectedk8s/azext_connectedk8s/_utils.py | 38 +++++++++++++++++++ 2 files changed, 42 insertions(+) diff --git a/src/connectedk8s/azext_connectedk8s/_constants.py b/src/connectedk8s/azext_connectedk8s/_constants.py index 61442db76b8..a418ec527bc 100644 --- a/src/connectedk8s/azext_connectedk8s/_constants.py +++ b/src/connectedk8s/azext_connectedk8s/_constants.py @@ -525,3 +525,7 @@ # "Application code shouldn't block the creation of resources for a resource provider that is in the registering state." # See https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-providers-and-types#register-resource-provider allowed_rp_registration_states = ["Registering", "Registered"] + +GATEWAY_ASSOCIATE_URL = ( + "https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Kubernetes/connectedClusters/{cluster_name}/providers/Microsoft.HybridCompute/settings/Default?api-version={api_version}" +) diff --git a/src/connectedk8s/azext_connectedk8s/_utils.py b/src/connectedk8s/azext_connectedk8s/_utils.py index 3b495ca9392..e64c92cc2a4 100644 --- a/src/connectedk8s/azext_connectedk8s/_utils.py +++ b/src/connectedk8s/azext_connectedk8s/_utils.py @@ -902,6 +902,44 @@ def health_check_dp(cmd: CLICommand, config_dp_endpoint: str) -> bool: ) raise CLIInternalError("Error while performing DP health check") +def associate_gateway(cmd: CLICommand, subscription_id: str, resource_group: str, cluster_name: str, gateway_resource_id: str) -> bool: + api_version = "2024-07-31-preview" + url = consts.GATEWAY_ASSOCIATE_URL.format( + subscription_id=subscription_id, + resource_group=resource_group, + cluster_name=cluster_name, + api_version=api_version + ) + headers = [ + "Content-Type=application/json", + "Accept=application/json" + ] + if os.getenv("AZURE_ACCESS_TOKEN"): + headers.append(f"Authorization=Bearer {os.getenv('AZURE_ACCESS_TOKEN')}") + body = { + "properties": { + "gatewayProperties": { + "gatewayResourceId": gateway_resource_id + } + } + } + response = send_request_with_retries( + cmd.cli_ctx, + method="put", + url=url, + headers=headers, + fault_type=consts.Gateway_Associate_Fault_Type, + summary="Error while associating gateway", + request_body=json.dumps(body) + ) + if response.status_code == 200: + return True + telemetry.set_exception( + exception="Error while associating gateway", + fault_type=consts.Gateway_Associate_Fault_Type, + summary="Error while associating gateway", + ) + raise CLIInternalError(f"Error while associating gateway") def send_request_with_retries( cli_ctx: AzCli, From b675e7d638b4a47f203d52b5b3419ec40a723ddf Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Wed, 6 Aug 2025 09:18:24 -0700 Subject: [PATCH 09/12] fix integration issues for new sdk --- .../azext_connectedk8s/_client_factory.py | 10 +-- .../azext_connectedk8s/_constants.py | 3 +- src/connectedk8s/azext_connectedk8s/_utils.py | 50 ++++++++++---- .../azext_connectedk8s/commands.py | 8 +-- src/connectedk8s/azext_connectedk8s/custom.py | 65 ++++++++++++++++++- 5 files changed, 112 insertions(+), 24 deletions(-) diff --git a/src/connectedk8s/azext_connectedk8s/_client_factory.py b/src/connectedk8s/azext_connectedk8s/_client_factory.py index 8869878f91e..ba206006ecb 100644 --- a/src/connectedk8s/azext_connectedk8s/_client_factory.py +++ b/src/connectedk8s/azext_connectedk8s/_client_factory.py @@ -28,7 +28,7 @@ from azext_connectedk8s.vendored_sdks import ConnectedKubernetesClient from azext_connectedk8s.vendored_sdks.operations import ConnectedClusterOperations from azext_connectedk8s.vendored_sdks.preview_2025_08_01 import ( - ConnectedKubernetesClient as ConnectedKubernetesClient20250801, + KubernetesClient as ConnectedKubernetesClient20250801, ) from azext_connectedk8s.vendored_sdks.preview_2025_08_01.operations import ( ConnectedClusterOperations as ConnectedClusterOperations20250801, @@ -65,23 +65,23 @@ def cf_connectedk8s_prev_2025_08_01( cli_ctx: AzCli, *_: Any ) -> ConnectedKubernetesClient20250801: from azext_connectedk8s.vendored_sdks.preview_2025_08_01 import ( - ConnectedKubernetesClient, + KubernetesClient, ) - client: ConnectedKubernetesClient + client: KubernetesClient access_token = os.getenv(consts.Azure_Access_Token_Variable) if access_token is not None: validate_custom_token() credential = AccessTokenCredential(access_token=access_token) client = get_mgmt_service_client( cli_ctx, - ConnectedKubernetesClient, + KubernetesClient, subscription_id=os.getenv("AZURE_SUBSCRIPTION_ID"), credential=credential, ) return client - client = get_mgmt_service_client(cli_ctx, ConnectedKubernetesClient) + client = get_mgmt_service_client(cli_ctx, KubernetesClient) return client diff --git a/src/connectedk8s/azext_connectedk8s/_constants.py b/src/connectedk8s/azext_connectedk8s/_constants.py index a418ec527bc..e240f09e11d 100644 --- a/src/connectedk8s/azext_connectedk8s/_constants.py +++ b/src/connectedk8s/azext_connectedk8s/_constants.py @@ -526,6 +526,7 @@ # See https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-providers-and-types#register-resource-provider allowed_rp_registration_states = ["Registering", "Registered"] +GATEWAY_LINK_FAULT_TYPE = "gateway-link-error" GATEWAY_ASSOCIATE_URL = ( - "https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Kubernetes/connectedClusters/{cluster_name}/providers/Microsoft.HybridCompute/settings/Default?api-version={api_version}" + "https://{location}.management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Kubernetes/connectedClusters/{cluster_name}/providers/Microsoft.HybridCompute/settings/Default?api-version={api_version}" ) diff --git a/src/connectedk8s/azext_connectedk8s/_utils.py b/src/connectedk8s/azext_connectedk8s/_utils.py index e64c92cc2a4..c321259edef 100644 --- a/src/connectedk8s/azext_connectedk8s/_utils.py +++ b/src/connectedk8s/azext_connectedk8s/_utils.py @@ -902,44 +902,72 @@ def health_check_dp(cmd: CLICommand, config_dp_endpoint: str) -> bool: ) raise CLIInternalError("Error while performing DP health check") -def associate_gateway(cmd: CLICommand, subscription_id: str, resource_group: str, cluster_name: str, gateway_resource_id: str) -> bool: + +def update_gateway_cluster_link( + cmd: CLICommand, + location: str, + subscription_id: str, + resource_group: str, + cluster_name: str, + gateway_resource_id: str = None +) -> bool: + """ + Associates or disassociates a gateway with a cluster. + + If `gateway_resource_id` is provided, performs association. + If `gateway_resource_id` is None, performs disassociation. + """ api_version = "2024-07-31-preview" + is_association = gateway_resource_id is not None + resource = cmd.cli_ctx.cloud.endpoints.active_directory_resource_id url = consts.GATEWAY_ASSOCIATE_URL.format( + location=location, subscription_id=subscription_id, resource_group=resource_group, cluster_name=cluster_name, api_version=api_version ) + headers = [ "Content-Type=application/json", "Accept=application/json" ] - if os.getenv("AZURE_ACCESS_TOKEN"): - headers.append(f"Authorization=Bearer {os.getenv('AZURE_ACCESS_TOKEN')}") + + token = os.getenv("AZURE_ACCESS_TOKEN") + if token: + headers.append(f"Authorization=Bearer {token}") + + operation_type = "association" if is_association else "disassociation" body = { "properties": { "gatewayProperties": { - "gatewayResourceId": gateway_resource_id + "gatewayResourceId": gateway_resource_id # None in case of disassociation } } } + print("sending raw request to associate/disassociate gateway with cluster", url, resource) response = send_request_with_retries( cmd.cli_ctx, method="put", url=url, headers=headers, - fault_type=consts.Gateway_Associate_Fault_Type, - summary="Error while associating gateway", - request_body=json.dumps(body) + fault_type=consts.GATEWAY_LINK_FAULT_TYPE, + summary=f"Error during gateway {operation_type}", + request_body=json.dumps(body), + resource=resource ) + if response.status_code == 200: + logger.info(f"Gateway {operation_type} succeeded for cluster '{cluster_name}' in resource group '{resource_group}'.") return True + telemetry.set_exception( - exception="Error while associating gateway", - fault_type=consts.Gateway_Associate_Fault_Type, - summary="Error while associating gateway", + exception=f"Gateway {operation_type} failed", + fault_type=consts.GATEWAY_LINK_FAULT_TYPE, + summary=f"Gateway {operation_type} failed" ) - raise CLIInternalError(f"Error while associating gateway") + raise CLIInternalError(f"Gateway {operation_type} failed for cluster '{cluster_name}'.") + def send_request_with_retries( cli_ctx: AzCli, diff --git a/src/connectedk8s/azext_connectedk8s/commands.py b/src/connectedk8s/azext_connectedk8s/commands.py index a5ed6c4db92..909fdcc195e 100644 --- a/src/connectedk8s/azext_connectedk8s/commands.py +++ b/src/connectedk8s/azext_connectedk8s/commands.py @@ -11,8 +11,8 @@ from azure.cli.core.commands import CliCommandType from azext_connectedk8s._client_factory import ( - cf_connected_cluster_prev_2024_07_01, - cf_connectedk8s_prev_2024_07_01, + cf_connected_cluster_prev_2025_08_01, + cf_connectedk8s_prev_2025_08_01, ) from ._format import connectedk8s_list_table_format, connectedk8s_show_table_format @@ -27,12 +27,12 @@ def load_command_table(self: Connectedk8sCommandsLoader, _: list[str] | None) -> "azext_connectedk8s.vendored_sdks.preview_2024_07_01.operations#" "ConnectedClusterOperations.{}" ), - client_factory=cf_connectedk8s_prev_2024_07_01, + client_factory=cf_connectedk8s_prev_2025_08_01, ) with self.command_group( "connectedk8s", connectedk8s_sdk, - client_factory=cf_connected_cluster_prev_2024_07_01, + client_factory=cf_connected_cluster_prev_2025_08_01, ) as g: g.custom_command("connect", "create_connectedk8s", supports_no_wait=True) g.custom_command("update", "update_connected_cluster") diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index 8fd8410f416..be1648dd488 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -241,7 +241,7 @@ def create_connectedk8s( gateway = None if gateway_resource_id != "": - gateway = Gateway(enabled=True, resource_id=gateway_resource_id) + gateway = Gateway(enabled=True) arc_agent_profile = None if disable_auto_upgrade: @@ -674,6 +674,24 @@ def create_connectedk8s( # Perform helm upgrade if gateway if gateway is not None: + # If gateway is enabled, then associate the gateway with the connected cluster + print( + f"Step: {utils.get_utctimestring()}: Associating Gateway with the Connected Cluster" + ) + try: + utils.update_gateway_cluster_link( + cmd, + location, + subscription_id, + resource_group_name, + cluster_name, + gateway_resource_id, + ) + except Exception as e: + logger.warning( + "Error occurred while associating gateway with connected cluster: %s\n", + e, + ) # Update arc agent configuration to include protected parameters in dp call arc_agentry_configurations = generate_arc_agent_configuration( configuration_settings, @@ -881,6 +899,23 @@ def create_connectedk8s( cmd, cl_oid, subscription_id ) + # If gateway is enabled, then associate the gateway with the connected cluster + if gateway is not None: + print( + f"Step: {utils.get_utctimestring()}: Associating Gateway with the Connected Cluster" + ) + try: + utils.update_gateway_cluster_link( + cmd, + location, + subscription_id, + resource_group_name, + cluster_name, + gateway_resource_id, + ) + except Exception as e: + logger.warning("Error occurred while associating gateway with connected cluster: %s\n", e) + # Update arc agent configuration to include protected parameters in dp call arc_agentry_configurations = generate_arc_agent_configuration( configuration_settings, redacted_protected_values, is_dp_call=True @@ -1941,7 +1976,7 @@ def create_cc_resource( try: poller: LROPoller[ConnectedCluster] = sdk_no_wait( no_wait, - client.begin_create, + client.begin_create_or_replace, resource_group_name=resource_group_name, cluster_name=cluster_name, connected_cluster=cc, @@ -2214,6 +2249,8 @@ def update_connected_cluster( # Fetch Connected Cluster for agent version connected_cluster = client.get(resource_group_name, cluster_name) + subscription_id = connected_cluster.id.split("/")[2] + location = connected_cluster.location kubernetes_properties = { "Context.Default.AzureCLI.KubernetesVersion": kubernetes_version @@ -2243,9 +2280,31 @@ def update_connected_cluster( # If gateway is enabled gateway = None if gateway_resource_id != "": - gateway = Gateway(enabled=True, resource_id=gateway_resource_id) + gateway = Gateway(enabled=True) + print( + f"Step: {utils.get_utctimestring()}: Associating gateway with Connected Cluster" + ) + utils.update_gateway_cluster_link( + cmd, + location, + subscription_id, + resource_group_name, + cluster_name, + gateway_resource_id, + ) if disable_gateway: gateway = Gateway(enabled=False) + print( + f"Step: {utils.get_utctimestring()}: Disassociating gateway from Connected Cluster" + ) + utils.update_gateway_cluster_link( + cmd, + location, + subscription_id, + resource_group_name, + cluster_name, + None, + ) # Set arc agent profile when auto-upgrade is set arc_agent_profile = None From 99f098b2a6a77855f546ffe3e36267bbbce06eb7 Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Mon, 11 Aug 2025 12:47:51 -0700 Subject: [PATCH 10/12] add headers to identify requests coming from cli --- .../azext_connectedk8s/_client_factory.py | 15 ++- .../azext_connectedk8s/_constants.py | 1 + src/connectedk8s/azext_connectedk8s/_utils.py | 4 +- src/connectedk8s/azext_connectedk8s/custom.py | 98 +++++++++++++++---- 4 files changed, 94 insertions(+), 24 deletions(-) diff --git a/src/connectedk8s/azext_connectedk8s/_client_factory.py b/src/connectedk8s/azext_connectedk8s/_client_factory.py index ba206006ecb..12fb4cce882 100644 --- a/src/connectedk8s/azext_connectedk8s/_client_factory.py +++ b/src/connectedk8s/azext_connectedk8s/_client_factory.py @@ -67,6 +67,12 @@ def cf_connectedk8s_prev_2025_08_01( from azext_connectedk8s.vendored_sdks.preview_2025_08_01 import ( KubernetesClient, ) + from azure.core.pipeline.policies import HeadersPolicy + + # Create custom headers policy for PUT requests + headers_policy = HeadersPolicy({ + "x-ms-k8srp-cli-client": "true" + }) client: KubernetesClient access_token = os.getenv(consts.Azure_Access_Token_Variable) @@ -78,10 +84,17 @@ def cf_connectedk8s_prev_2025_08_01( KubernetesClient, subscription_id=os.getenv("AZURE_SUBSCRIPTION_ID"), credential=credential, + base_url="https://centraluseuap.management.azure.com", + per_call_policies=[headers_policy], ) return client - client = get_mgmt_service_client(cli_ctx, KubernetesClient) + client = get_mgmt_service_client( + cli_ctx, + KubernetesClient, + base_url="https://centraluseuap.management.azure.com", + per_call_policies=[headers_policy], + ) return client diff --git a/src/connectedk8s/azext_connectedk8s/_constants.py b/src/connectedk8s/azext_connectedk8s/_constants.py index e240f09e11d..5ef0629c5e3 100644 --- a/src/connectedk8s/azext_connectedk8s/_constants.py +++ b/src/connectedk8s/azext_connectedk8s/_constants.py @@ -527,6 +527,7 @@ allowed_rp_registration_states = ["Registering", "Registered"] GATEWAY_LINK_FAULT_TYPE = "gateway-link-error" +Gateway_Cluster_Resource_Update_Failed_Fault_Type = "Gateway-Cluster-Resource-Update-Failed" GATEWAY_ASSOCIATE_URL = ( "https://{location}.management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Kubernetes/connectedClusters/{cluster_name}/providers/Microsoft.HybridCompute/settings/Default?api-version={api_version}" ) diff --git a/src/connectedk8s/azext_connectedk8s/_utils.py b/src/connectedk8s/azext_connectedk8s/_utils.py index c321259edef..4d8c56d1caf 100644 --- a/src/connectedk8s/azext_connectedk8s/_utils.py +++ b/src/connectedk8s/azext_connectedk8s/_utils.py @@ -48,7 +48,7 @@ from kubernetes.client import CoreV1Api, V1NodeList from requests import Response - from azext_connectedk8s.vendored_sdks.preview_2024_07_01.models import ( + from azext_connectedk8s.vendored_sdks.preview_2025_08_01.models import ( ConnectedCluster, ) @@ -823,7 +823,7 @@ def get_helm_values( chart_location_url = f"{config_dp_endpoint}/{chart_location_url_segment}" dp_request_identity = connected_cluster.identity identity = connected_cluster.id - request_dict = connected_cluster.serialize() + request_dict = connected_cluster.as_dict() request_dict["identity"]["tenantId"] = dp_request_identity.tenant_id request_dict["identity"]["principalId"] = dp_request_identity.principal_id request_dict["id"] = identity diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index be1648dd488..6fd3bca5f61 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -4,6 +4,7 @@ # -------------------------------------------------------------------------------------------- from __future__ import annotations +import cmd import contextlib import errno import hashlib @@ -878,7 +879,7 @@ def create_connectedk8s( azure_hybrid_benefit, oidc_profile, security_profile, - gateway, + None, arc_agentry_configurations, arc_agent_profile, ) @@ -890,21 +891,20 @@ def create_connectedk8s( ) dp_request_payload = put_cc_poller.result() put_cc_response: ConnectedCluster = LongRunningOperation(cmd.cli_ctx)(put_cc_poller) - print( - f"Step: {utils.get_utctimestring()}: Azure resource provisioning has finished." - ) # Checking if custom locations rp is registered and fetching oid if it is registered enable_custom_locations, custom_locations_oid = check_cl_registration_and_get_oid( cmd, cl_oid, subscription_id ) - # If gateway is enabled, then associate the gateway with the connected cluster + # Associate gateway with connected cluster if enabled if gateway is not None: print( f"Step: {utils.get_utctimestring()}: Associating Gateway with the Connected Cluster" ) + try: + # Create the gateway-cluster association utils.update_gateway_cluster_link( cmd, location, @@ -913,8 +913,64 @@ def create_connectedk8s( cluster_name, gateway_resource_id, ) + logger.info("Gateway-cluster link updated successfully") + + except Exception as e: + error_msg = f"Failed to create gateway-cluster association: {str(e)}" + logger.error(error_msg) + telemetry.set_exception( + exception=e, + fault_type=consts.GATEWAY_LINK_FAULT_TYPE, + summary="Failed to associate gateway with connected cluster" + ) + raise ValidationError( + "Failed to associate gateway with connected cluster. " + "Please ensure that the gateway resource is valid and accessible, then try again." + ) from e + + try: + # Retrieve current connected cluster configuration + print( + f"Step: {utils.get_utctimestring()}: Updating Connected Cluster resource with Gateway configuration" + ) + connected_cluster = client.get(resource_group_name, cluster_name) + + # Generate updated payload with gateway configuration + cc = generate_reput_request_payload( + connected_cluster, + oidc_profile, + security_profile, + gateway, + arc_agentry_configurations, + arc_agent_profile, + ) + + # Update the connected cluster resource + reput_cc_poller = create_cc_resource( + client, resource_group_name, cluster_name, cc, False + ) + dp_request_payload = reput_cc_poller.result() + put_cc_response = LongRunningOperation(cmd.cli_ctx)(reput_cc_poller) + + logger.info("Connected cluster resource updated successfully with gateway configuration") + except Exception as e: - logger.warning("Error occurred while associating gateway with connected cluster: %s\n", e) + error_msg = f"Failed to update connected cluster resource with gateway configuration: {str(e)}" + logger.error(error_msg) + telemetry.set_exception( + exception=e, + fault_type=consts.Gateway_Cluster_Resource_Update_Failed_Fault_Type, + summary="Failed to update connected cluster resource with gateway configuration" + ) + raise CLIInternalError( + "Failed to update the connected cluster resource with gateway configuration. " + "The gateway association may have been created, but the cluster resource update failed. " + "Please check the resource status and try again." + ) from e + + print( + f"Step: {utils.get_utctimestring()}: Azure resource provisioning has finished." + ) # Update arc agent configuration to include protected parameters in dp call arc_agentry_configurations = generate_arc_agent_configuration( @@ -2348,7 +2404,7 @@ def update_connected_cluster( client, resource_group_name, cluster_name, cc, False ) dp_request_payload = reput_cc_poller.result() - _ = LongRunningOperation(cmd.cli_ctx)(reput_cc_poller) + reput_connected_cluster = LongRunningOperation(cmd.cli_ctx)(reput_cc_poller) # Before proceeding, we prefer to see agent state settle - updating the helm chart # while things are happening risks race conditions. Eg @@ -2356,16 +2412,16 @@ def update_connected_cluster( # # If we don't see a terminal state, we'll go ahead and update the helm chart anyway, # and throw an error later. - print( - f"Step: {utils.get_utctimestring()}: Wait for Agent State to reach terminal state, with timeout of {consts.Agent_State_Timeout}" - ) - terminal_agent_state, connected_cluster = poll_for_agent_state( - client, resource_group_name, cluster_name - ) - maybe_has = "has" if terminal_agent_state else "has not" - print( - f"Step: {utils.get_utctimestring()}: Agent state {maybe_has} reached terminal state." - ) + # print( + # f"Step: {utils.get_utctimestring()}: Wait for Agent State to reach terminal state, with timeout of {consts.Agent_State_Timeout}" + # ) + # terminal_agent_state, connected_cluster = poll_for_agent_state( + # client, resource_group_name, cluster_name + # ) + # maybe_has = "has" if terminal_agent_state else "has not" + # print( + # f"Step: {utils.get_utctimestring()}: Agent state {maybe_has} reached terminal state." + # ) # Adding helm repo if os.getenv("HELMREPONAME") and os.getenv("HELMREPOURL"): @@ -2444,10 +2500,10 @@ def update_connected_cluster( ) # If we didn't see a terminal agent state, now's the time to throw an error. - if not terminal_agent_state: - raise CLIInternalError( - "Timed out waiting for Agent State to reach terminal state." - ) + # if not terminal_agent_state: + # raise CLIInternalError( + # "Timed out waiting for Agent State to reach terminal state." + # ) return connected_cluster From d5d432026f270424eb696b70ce0ccf774e6b2f01 Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Tue, 19 Aug 2025 13:22:39 -0700 Subject: [PATCH 11/12] add custom flags for bugbash testing --- .../azext_connectedk8s/_client_factory.py | 4 +- src/connectedk8s/azext_connectedk8s/custom.py | 45 ++++++++++-------- src/connectedk8s/setup.py | 2 +- .../connectedk8s-1.10.8-py2.py3-none-any.whl | Bin 0 -> 201851 bytes 4 files changed, 30 insertions(+), 21 deletions(-) create mode 100644 whlfile/connectedk8s-1.10.8-py2.py3-none-any.whl diff --git a/src/connectedk8s/azext_connectedk8s/_client_factory.py b/src/connectedk8s/azext_connectedk8s/_client_factory.py index 12fb4cce882..ccb7fb5620a 100644 --- a/src/connectedk8s/azext_connectedk8s/_client_factory.py +++ b/src/connectedk8s/azext_connectedk8s/_client_factory.py @@ -69,9 +69,11 @@ def cf_connectedk8s_prev_2025_08_01( ) from azure.core.pipeline.policies import HeadersPolicy + portal_request = os.getenv("PORTAL_REQUEST", "false") + # Create custom headers policy for PUT requests headers_policy = HeadersPolicy({ - "x-ms-k8srp-cli-client": "true" + "x-ms-azurearc-cli": "false" if portal_request == "true" else "true" }) client: KubernetesClient diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index 6fd3bca5f61..8f58c1fc418 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -2340,14 +2340,17 @@ def update_connected_cluster( print( f"Step: {utils.get_utctimestring()}: Associating gateway with Connected Cluster" ) - utils.update_gateway_cluster_link( - cmd, - location, - subscription_id, - resource_group_name, - cluster_name, - gateway_resource_id, - ) + + gw_associate_test = os.getenv("TEST_GW", "false") + if gw_associate_test.lower() == "false": + utils.update_gateway_cluster_link( + cmd, + location, + subscription_id, + resource_group_name, + cluster_name, + gateway_resource_id, + ) if disable_gateway: gateway = Gateway(enabled=False) print( @@ -2404,7 +2407,7 @@ def update_connected_cluster( client, resource_group_name, cluster_name, cc, False ) dp_request_payload = reput_cc_poller.result() - reput_connected_cluster = LongRunningOperation(cmd.cli_ctx)(reput_cc_poller) + _ = LongRunningOperation(cmd.cli_ctx)(reput_cc_poller) # Before proceeding, we prefer to see agent state settle - updating the helm chart # while things are happening risks race conditions. Eg @@ -2412,16 +2415,20 @@ def update_connected_cluster( # # If we don't see a terminal state, we'll go ahead and update the helm chart anyway, # and throw an error later. - # print( - # f"Step: {utils.get_utctimestring()}: Wait for Agent State to reach terminal state, with timeout of {consts.Agent_State_Timeout}" - # ) - # terminal_agent_state, connected_cluster = poll_for_agent_state( - # client, resource_group_name, cluster_name - # ) - # maybe_has = "has" if terminal_agent_state else "has not" - # print( - # f"Step: {utils.get_utctimestring()}: Agent state {maybe_has} reached terminal state." - # ) + print( + f"Step: {utils.get_utctimestring()}: Wait for Agent State to reach terminal state, with timeout of {consts.Agent_State_Timeout}" + ) + terminal_agent_state, connected_cluster = poll_for_agent_state( + client, resource_group_name, cluster_name + ) + maybe_has = "has" if terminal_agent_state else "has not" + print( + f"Step: {utils.get_utctimestring()}: Agent state {maybe_has} reached terminal state." + ) + + portal_request = os.getenv("PORTAL_REQUEST", "false") + if portal_request.lower() == "true": + return connected_cluster # Adding helm repo if os.getenv("HELMREPONAME") and os.getenv("HELMREPOURL"): diff --git a/src/connectedk8s/setup.py b/src/connectedk8s/setup.py index 7625c142670..4f9959412ad 100644 --- a/src/connectedk8s/setup.py +++ b/src/connectedk8s/setup.py @@ -13,7 +13,7 @@ # TODO: Confirm this is the right version number you want and it matches your # HISTORY.rst entry. -VERSION = "1.10.7" +VERSION = "1.10.8" # The full list of classifiers is available at # https://pypi.python.org/pypi?%3Aaction=list_classifiers diff --git a/whlfile/connectedk8s-1.10.8-py2.py3-none-any.whl b/whlfile/connectedk8s-1.10.8-py2.py3-none-any.whl new file mode 100644 index 0000000000000000000000000000000000000000..385e63a7173088b4aa2695700ffff43a200cb7ae GIT binary patch literal 201851 zcmZ^qQ;;aYwq)CO_i5XwZQHhO+qP}nwr$(CZDY>;n0fIc=Kj`a#frVNGPC3)fk99J z001BW*3(-xyry!$InwItn%kH=>FUzh zxi>3K+HBGxbYb1`Qe8!Y5_6ydDfP((u#{z^NYe!CBfto+Tahc^pA(92`razgUh03M zYE#WOayBv&pW1!<&pI)L3ZdDGT)n`dQu#IOiD+iCYq18iEJ0Qas7XMQj0NncWbSgo zdf!XX)lkXq=PB6qU9(r+=42cr;IiBDZdC&3OGxQI(avC_SK}CM_*K!p@%kM9DZl-# zA2by?&oSoEPtb^L#{+#%rVS|sLG0Vo93(>E3bL^NgnOzeBreK0rw21=RAT(Y?5ziDJtUh|pL@hProzsTid(q^-doCwJWF zVvbf@33TRkUWMdT3ynSmd^~`7jiqsOcB8U)CpcV(Bv3AW&-HDr^s(2~ZR%+b7LSxL9fHpVcZ zP-}NvUf18WuQ22U8;@!4OxIFEb!xoiD_A_BlhVb48_PfqIRwq$D@s}+F5*5)%dmd& z2#(?4LTh<*OGI6o>$(+|q<`3lahJonI@0gf+1ZU-9(*`?0T)+^^?A+VKJ5uYpdir+ zr?;Z0SZ@<=v@|`{Y>s%;BSZ;pY7r|C z{UwuG{p~3vANOcZEYSwHfXH&mR&P zY>Nsa&ValrkVnW15+e}*lWcj>X>yNsB41M$YjC3&{uEJ=c<9b@Re(|a9@(=Jb{|BV zZ~%W{P8>XEMnDWj1v@pUX%>w6qr3VRj6yKrhIpx_5QPZcZx9V}DnQ0jHW)Y<=%iHU z;aBXu^}awmxt z+aZ!XsY|Vwb|MA~8yElW`flOO1iKD1nZ94!nuhqXe~)}+=?`LadUmBJ>3W9QN67tT zI{4xR6PdXQx#DNVOAdle3Ib)#XnCtk^$cE8r_YA(2gVy96&UPGF|jzz2*-1<98Dg^@ny^~nyZloqGs#f5bYaIe3TXl z6D(_=Y&fJML<{JXiXF#Vh^@6fY8~PMk$~jpxeX*&9YT`4={((IsOBwu;qGiHG8d;WJ(g_j?8#`U?fw0% zOzVK2<&)i~THarD(!W+c*zU0WJNnipx}DN>#~)7m7deQ*m{0*o6Z$wq-u=l$&65bRbAHysBkC8l&- zOhQ=Izouaz?L3$$mTMhdII?4R_Rf!1AIGh1=&bmGgtNU&1Bt4OY1k zV=_%o9|zhesU*VfB$%i!m*3l(H`{rjmgNmF<985;hB1sd(C5l7c!Xk7=%?iK#B!-y zWw$BHzGIDBM;dHl^-o;+QHJYbLS`f`#b9xHLuf=Kf&R!CBDL%L{F_q>5ZO@h07zHy z_;twEC}O;+5>*Fw)3W1R(FVqJgq^dl>h zmvHclNj@n5t|wau2jG}tUM(xz51k4zRNcY8MbWd|3STSh%9(28R;bUy2LojAzqQ)UBiZi}osocaAU!Y?R*s1ms$)#Y60BD!-R$6gz_Dv77Gpjq+@H)shbc@e zXNU~hXJKTC0cEW4G&J)@JWtHIpOb}|8$?U=;3YwXa~Mp3(xmGmmkmWRM%#&;W< zOC&IhrzqJC$94QcpzJ|?$12_U8G~{YI$~fq7&t7Pq;yl<+zbqO20k1#1NOuPsF+Ox z?A4#z$G*nvFJPOJRfNPXY5k=tO21>WPXb!#pk27+ddxmn#|w@c%&E43ke@46Wb6Qs zbRG?Jn(mcpjqDNJ<-L6E6#o39>ENghFp1BR-GH1=clCyU+pwLEQ?6pEKsO?)JfNU; zwV?k4LhY5@vsSvX19X-hn>#lu8)L~!;hcpw*PwX*bdi6vGSqG!`mjTvPEOn@jx_%c z;B~DuU3)%3-P7!}l)M$FZR_i4@iHLMbAlJF1-dR)%blU5Z@fD(8ajjG1$MqqgfLXJ zN4m}@+6h`18l8Y=l1VpqmQP78ev|~tR?o28G4j$fe1a;GFj>vg35^6U$Lhy8_#~yL zT3qT6shf!mm@|y_wl+#8g)#G%YLv`hx*>xZB4pE3uRn~FMkidkyF+nrN9sCHzl}&! zCckKru49>e(Nn>mCep5d)hQ#s*bDeSYm+S;OmjL|%^e*J0D#350095Ltxa1SM<;z7 zC&zyqbC}yac2gu}7x;*GX+q5nChcOd70@tGtfAW3Rg$RuFkPLB4Mkmnu|$j}*2Xp9 z>(yISx!&!}j59sEUrOVs^Fn#K^P>JijLrAJ*XL_L9-Z{u8`Z`J>K^Skybb1?YCO>y zaJG?Yyo*rkpa)$j9zRdZh#_^o8s;O+3-N88>iMuoP0ZW}MHd=z z1SHX9oOXd$D1|s!jVwJ39c*W?mYPxc!}n(IzBg9L125SAUIj$|rkd~_&PTjd42ewQ z05%|MplfVEIb5Orux+b@*Hiwl(T{m`EXVhZ@FLONXkUZ`5o@QAG|p|u6SgR zndxeqR!rNzc*T*jc1Z1PQe}92W8_6OH8sFSV~}j5Oa0u9sH}NSG;;SFppx8(m3<}5 z#?{mG^sU!|8Gb*1Unk)BB!Gu4f~?Qo=;yb5YGfUa*oIxFRsz2YKm~yE>bcEEcdsiW zR@j1WA@5?lYtUnz(> z`nv|zG-?L8BN^M$6MQ6U3kt}iK!cvYB(9L8l0Dyvt`kMZwi%`o3B=1Ar z$M2^G#mv53E>97X6# zLv((;&<#e}_A*gsM{ArD7}x;I%J!vAOI4D<)@EuaF!9_ zFN%;>B?%#%gfF-d;+em^A7I`FYHfOx+?wnTl?f1ZmhM){E20g;Fo({am){J>6A9)O zH%4Z+p-!cL58&}Uh?7tv0auF4R~!OP%)3*o*9_Qht%3T0PXMMm=f^Yl#X)Y1p(gp3 z;DyC${xA;_&KKybGdtRNnM*@DxIg^lVWd}!hL^C(Le7=*!8g15T>8#4kg|gjEm&eP=aOCOE zC2Q@V!RAr#*4r5b-2g&6Sk_l_UXGkOXIfL@bPFthl`caKJQK+i$5WG-`i!@|%V!=LFwt7%J^-XxM5t$ASLP;_c>>E&-N#8z9QC zd`ulUil~ul+#^kH%L6e@-ueP-Y$KQhWZ2hY2}&6CXPRb+xrd3Zk-S!|ze&JnQ$V_K zD~Mu7rGJThYPrOffWu*zEY8l7%NhY1D-Yh_cc<^m zK!=Tq5z`V*MdZC*lGYlZeqcqCUk&;+kZP(einh`)qrdpVTd-Yh;LZHHM04uBxiD~q zBb;Ciq~yC_$!mbosAh35b1W&ybSz4b)(bk_?+zwCSC1tv=>^0Yh%yZuki_cp^oS`0}kbAsGo4l0#5eqERZfP4c= zsDynoV=a{GZ)W9E+}fUGj;^O643JaFybH}@(d3@d-PV18#h2Qu9Je=A`&(l;q6@>0kgpkf7h`p9DKoujCt3jD@KmQbhg&(9wTeP zLWy5X%BeYW0ng2Lx+)WQdIn9<*iAMHK*mj-QlzolVRH(G{^#3(xTIxr8M8ZxhM{x8 z)QXehdVRZlb^6ZO0A$s|5e)~a!n!QQieBg0oL9?0?hQZ_e`gErMpRB(_4D`DQVr*n z{Ci(N7*UMyI3Vo_=No=$+!`B8{#Vr7wX6N%wnTjbdisM7B0Ev7KH}CZX3(yueh}a@ z=e=807ePtzU5q?^&2yNh?v$89d~!XMW`vmE35Z&d7F&H;gD%7bD780FPT#9OmDiBW z3J^4sT1=k*3+TNUv;i+zY9A3bIjc}S$r~?r{rmhsFXalR-o&Cj%h}R_pmYM^sJ0Th zMpJ<(%(x|x{nmSjIyJkPEY`V5brHLQrhyg>j-Zt!tHh1LgtFPG69&#q2{7m?3@d{5 zSMy@=-zgCk_8$$t5p8ULa*PItBF3pFBDyiF^UE}Ts7P%=_R7m}B&ORje5>GQUtKnv_{OibW=jIQ)*M~b0Wu>4mitmQJ zBbRLc8YoChuuUvSb1^5VWRb=i(Kz(ayPqFAUbt&N^*sAAmg4x+Lq#T_Kc*%OshdYC zE+m=F{&~eq#1Bdz`y4^nH7bi;QQ9@Lb7wDefUB8*sIB{c3+0EXyi@ed#GkpNB;erL zK|zS!1la~CvcMYry#0d1Ik0e9=`$voK}K1%%GffLN7S_L+4@SlMO`nzUMUi4T`YGe z4p19kTF$dPcx5jWt4!S7!hA#Q#0bKH3I+turZA{27E?CPJhC0x!zO8ZkF@MamB#GI zdu`|HsF*oOny!_W=P`VfM{dx16##6Fv@*Ls>{XU1mXUn|G1loXm!_EY&zfaIAWDX~ zbLI?R2Fp}Sp3_n|uT%Atj*z6G*jmvI7Ej;^$=4VlNQ(R~RE_0J7%fj(2RC>EUk_#q z@d2Kq-d62(O5VE8eL1J0;rvy^B;GN;l6M0|cV4I&3_AL_`RnC!SpnHGG8didM*)-m zT5g*tqr-V?1lJM$f49pVBNDkBVEO=4{CJ!BmPnV)-&2#f?R9+6AY3e!5R$b;+zS=Q~o2wCn&tAflnb~A}rz-P`+BWpMWt+o|$1( zMHMHIi7iE&ZU$Krsdv@hzc5^-$$-kwgzl zq6l0_ov#Se%NhsHjl_sk(#n*z<*|e25^QdqDiB2SM#j_%g?rfwFr{~8Xf295AU5oE z$|lOypfXPrUt_Q-hZ{azV=y;dom5y;WY!qX_1#|%E57Zx+u1)nkH$GwAOeoNqB`

Gq55GeGJng$z#9bizim74rbu<`bY-zJmjP?3D&ISNP?*4Jy_6TD?lg z!7+U1wqm9$aXfKI>B4Z-$sAA2*=*l922x~&EA$1NU1=eJXPi4E5PuZSv-X0k8BZdz z(RJGRK)Tr$+#z1?RdpBEJEpg|I8^{n+Ul^wU%YEBjvBm^0u1>M4_BZNq&v@l&mZ)0 zrbMt+vHPWk@!?HIQB#bH89z{Sy@SOIYVBc9ZC{f%7;!aQnnL@a-bU!rkHBFBAV1&W z%er~y*@Kmt(UURYLcI7Y-ON;+q=t#Yy-~0|Rf<6n5kQs4#0|RLyU`64RZrKtuusH^ zeWAufkG8YWqZMt;uav;t42lu@rRrbjRhVtrI`l;|(J+j>VHzoktZ8+n#k6QXa&@4Q z&*ZkUF&wBv9m~9}YuQ>l%MdFf7q=fe?Nvd z*oS$VPx~VkO`lJW%ZYR+SSueH+f!zBvYwK)w2Mgl>y4DUv~c(ZTe7iTsz>to-b}`& z(gZIwE`*UFA!LppN$$Ww(VQE^YISyqv52noRdx2mDd*cHS+Sr*Gmjl_XxtKSa<@BQSk+RJ%3ARdrHhPzzxX$R zgH9`>bn~0o* zVswO@`RgB94sZed!8{XKIJ3B?-dHt9&%^4LnlunLt!eh@v(5DvnrA${5|b@%r&y>p zcHjPbJ(o9x5Cf}|?wJYa)Fh8z`NN@N0cc-aExDwBiph7aS4~O5{=pNG_p@{&HmzJy zNs%NG9v3Nn_e8sdx5U>*<%sdQpfl+~!Uq6l&Z*7-an);j@O0)Nj7aEKWX8C>3-S#Z zD3t1K7bj9~I32I_=cvVx{em7d=X5-Jg1q=XclcH^x;w}}4w+SbyHxNN69c83)OK)B!;$5 z@*{UU4TxMGFl*%FKlgVV^EZVRV0hSv@lXJ?Vi_w zc6tfmYyt}x`nQudfYXc@e)uw~3rT_eGc%QF#k)BX${R#<>(kyOe958X{@~M(Vc78| zpS-qMxGGyP19m_**C1Iv4B0+Zq?eFX0OC72ycc#`?07a$wQ2-672O4t>R9jB#aGqx z%ta~m7*^Jn;DFj~yI(p0c5ZS~AXOlJiYpr|PY}E+FPnW=wU@k6u&h8` zIn|&q_wwDt|Xi%sL9 zgu9H+(f0BN5os~DSPkq^gl_{QU*C_Z$v|0M(hM{Yym)1h%8n>6O#2aF?kRMGt^CTH zo*;(zREM;cRz_P4ErHX%8i!ZE@GRkFhCOu$(VY=DLLa^UZE;W3C8H(DS{L=~}lsYy2l*^j&RR=xyePv8v zo266Bx^6%K{59r#HmS>0WwWmU>*iD&b*uk5E&=5%4q;8;=ov-UGQ`|b+rd(rD6cEE zqS9Jr4$TC!WXx1Ce_P%rE0GtJ?OQ}zX7ojZ(ysX}7DPzP zbO=)w{8y%t56a2Q>Y5V{rdW8cMW7tqwr~}%WKgt|*H=C>rbJ_* zt;Qnj*d|e%Q+rzm+_Z|xrOa#{~ zmq$0d$K&}V_>lubW#%!}G^bHR{5&hCc6Y3C`D6LwU2@owt*y=O^zhh=VI)?3W`0-h$3t&hu|9yssy@&14a5OAn*QL(v839I6! z2F@^A^w9`3D{UJxd0Tmk7TnjhRFzj6{Bi#1A~2=@o2{qq%iYeN8_XECRJ9Pa{PXKc zsrusbU6?wtIoTC*{lS6mmrh6FIJ8E!8Feu{2kMBwPwYyYvwj(WC1{uDGS{Ba(uM?m z$bVe@Ie(!BSH_ziP#B8Bei^I1l(wpBo9eBxC+;@8<6<5MCiHL^DCN5J{?GD*Qk?#B z0Z;ISMC*mN^O@==ShU5tz6@;H$zTMxI_-3Rg%LtS84AT!-c2Ymlm@Wg+x}h;RzneCX;wsmJI5hOmCyjrycS+|C(|$)7e#*k$uAQCQ zL2!H9#}-MX$^l;SV98CB%q53cQ?gsJ!l)Pp=tcw9?MU{rke>69$BH_Tu~`;M)bi*SJ22Z#V3*Hc2A#KFR7Z(XDFeZlz_8M<cFYQd;eX zt7PA9`cFC`0yv4__nove!dc<~uYuu0d6>zEnC?dj2OKt!v(gT-w$y~{{+vJb=Y`ZR z1ZVDYk5Eyhii(;!sFu)eIp^}@x2Jdp zlOA@U_-Am2C4MPW0jGhmU(~qJzvEhBeZK;cS4AIanpsUYAk+H1pfZ3lguX>2b{cZL zKL9qI?Sain#WmIBs(+DflXF#p`#6s(Z^Q0h-tc_i0P;^x`+2t_$Ct@ciSmzmP0-b! zpOm5G(N$9^&pR`|DROtKg}q@xPe2)f6XYIe}$C)ma3VU zTNyh$nOprQRcls~j@_U`=q9?y6R{It8a{;zm#DlZRK93Y=;Rh9O$R|6jTteKEc@8y zoB=1UtK6Ra0GN84Ud=Q;sdF1;%%0kxQDH7OxFnD;bd&q5Zt6JeQ$ZzOTZL#>$;^Zg z9t3v|$%q)xTY(Zi2=hWJ2-GX=_V%#W3Hl|(h4Hh;pAM!N{~cWp-moHQ1L+jG@7XfZ zVm9{MGbl?|afHFGh8C4&1^LiMhElFV*gOQ=4B&1AkEGrK7>gmbwUemoBJmY5ax6 zaC{_kXd$R#0?k#V_KsTUa3U7OA<%BW-zJF+m&i~zuund)zyk|B6V?K<#j4x&$Ooxo z#5PZj-59{lgjqPV{$>-*y4u>lWtscWD^{NDc$;TRsS-52Jb8(?&4qOSY)De7eORYO zh5)kdB;iYgDhll_z5i#+GYlCfmS3$pXqRhuoB_zUPDjFwNqUi{6dj;BsZ>A&de_!@ z55D#CW6)j_%ez&>r;_j##&rZiYl2E)tpLBJ+GCqqP%dKyZ9 z|2J?C=B24;fB*nY|A52!FEOr(t%J3`(|=k|iqer=bTHlUQ@#j{sgPGw?I0y}O-(2r zPjfpdByBMb_bc^LS58Vi>-m~;JS#hp>LD{ z_CzC$-1#wmLWr0Kbr?iG?9T5CNx#m+tWr2i%8R2p^%Z?i1#AHhF$ZG=RA|T&iOmCS z>u`0nR0;JywoX}m_ID%PxL>U{Y$3eP=v@)l^eeLGrrjAFwp0O7q1MUx0G4-w%rq%- znRz{$Tc=^v49KOMDUq01;SMru2H%I$Wdf43%2H<(Xs$%mSJlLbA)r>f63>ENse^*; zT7Ff_7SH-Z0UX6Z)}IK);{y~=+NExOS>#dFC?Y!*fH~0+>ei4Wl&YNKDUA#g={Q@e zXjdj-f8bSxp}8K%E+N=Ub>w=qRVlPSiM^$JX&3K4|2J)bvjTng^OXMVi2x?O~<9J*Na zx@-^H58UtC#Q&*np0T#GOhHzU9BD`#fU6s{9iQZs8fJa*6KkpGBnT95A++uty>8AL zzovN|ba~jt#y}j89*O);B8x_?#29TLV2t#6x@mwGll!V2G8U>DaZE$0qVr@U)dNN1 z=u4QN(yyh`9+VXuj5~DgG31&EIB3QUE+P) z2BFcJF=2Ll@$ZdRJNgKph@iQj)j`KeTGwmPH}(Lr@(C8Fuu13jpJXWwj5Va$7q$U& zg;P}>jsRKfxD;MESRe-xlUsn?mu8roC=6&g6A8WG$+5!;6sbH$N6qfN?qZ%!vCZ=X zh8ee%6l1pp{MzA*$WAb-h^cl5<_XZz{Y8GHZ>KzHOeB7aXLm)(h~edsExKi)q@AV* zt`+x^M$zQo0#XyEa$0>FCcp>i94z?DKeaN1A_2*~tE{6YQ(3Nq5uI43iaK@>Yn3dh zryVSM;h#126=)X;Mb<-`94K08DumGNzqr2-wI!T!5IDzPA>F!4ha2 zU~q+pT6ZfJY|I$G)c~|c`_QicS4dhUO&p>M^7slMh5rLGgI&0r>Eha$ZYXrxov?v9 z!~ec9e0}0>rH&F;4L&~ntZ zlw>)co5%f!!_}|!&exrlQHXPj-CB80plWSdL^TL*kNF6`E8x}XB3sw#JVwCi>E>* zkrS+ec6-Fk>1^p0$F~)m{UZBOf=Qq5Dh}dwy!S$BW)0Rc^HLL`zCsOaDr_btMJ~al zWuDycAVp`Wf-V42-OWT~G@B5R+~ow|=*vQ$O`|J|B)f=J+`=zzDF*l^Y34}KJQe=-e!suQima*Mt8Eqc&F;x?N^ndC%|CkJ$jv| z>UQ(x6tE4qJgkyP=+W(N-%Cd%3>7!QY?g_5>ZYRZJ2ulMFb^&t_Z7$BA4^F#fh=w( z*b!Mea4LH#G2aDF^I9GRdmWWGOr)dtK*`EJmyr3q82d$mSl&IW$HvhaIM!SCqio`R zmK#ga^zwU!h6VKr0+xYt1nOP5GBB49i(2d0xAO-ov%99KT>ksjUAH@5Os=m6Dm~x; z^$s~TUg~xZG&x$TFfYs{4~B>&n`(!0& zf&s^S-v7O)@DU#H17H9ECe;7Cl(Exy(6|1NaK6UYw%ufV=;r$c-sf2w5uUju@PoJ8 zZi3CQi6q?~)RBjX64KlnD~KsN=z#y+bPXvo@?KBLGHSivfVU=|feB?C-1nOE5$O{B z;_`loniA?r@j^6bfDt*ufiIFXsM+t93NFfsG?FT@mx75SO!!NBtHvgBB#B!mR3B#~ zK1Mu`NOVh6^SEm0Fsyc;*K09=44f!&&k4;GFJQ)imN0}0HnMMSPA2>j+x_N*^C*-X zA4lnd+z81i7Q!RIxbTOuX z?mUqw9Ap2z8S3c!a^m&!a*(u>x zl5VlvW*=5L;{KSrfNG}Ot6kD^Enn*C_e5y2yWO&ux1 z+%KT!C)X2^i2h=GIyNBKgs|ibC_Hd3WitJ_>ED<#jw7HS_4((PeWeG^FT9r_YOb&( z@###xh+#)wB&eW^lS;v=psr}p;C%#@K4hbXNOO(Iq2j0mbCp?_76WrX08#F{MCsIJCQKxbXVH5XhA9 zqw~M2Wz8sm^y4vrnx4SvN z4Cu*bE9WOMsAh$6@lQqj@6qdd@UOt%&Po{>!x7eGIyil@<{c+`tM8g}(4y?;9$`yi zQ5wZM!5D0bcgSo?m(XTvouELOG88FMc$Sr`dT9_zSmuLI6eBC){hL=I`SJdVh_O$p;^H%2e`F8q)Sp$C1n zjr)ao2GyE>)uDg5C)}G#X=7w6Ua~mL6@gxA5n=o=fxp|24khEz7XV>VjAdh<8ywgk z;LrkenfIz|@ksPa;8(ytmuH$%V)*`9P@E~)Yt)@E(Ei7%kehmdt-u~hOz+hr@)&jQ zBY>=C)^6Ae)SsWaO2S5@Ii|(8)B z+_i;VWK7bYkEagb4kbN`x6cMMb-4PsvppFBwd%&qz>^A^SdtLd>!I#>Hc(LpphT`C zFtcM>0zH7@2xZ;+6W8l%KkLL0IFuNh#oT518CDL7nrU1uDI~568Dcgd$pmjWx{oBt z>pyAwfd|LroCiUdE)_GS1Ni-fNU8WY1hV+{pu<5HMsRjcm34+(jfP?r0>=l0F~tpR zVA$~}?gGp2G2@=9RSiC?XGo4JAhCYGf0D0I}t0=0;^*;SCEcoKwE3V}gRxS>le+ZTsb1~Yhj63i%ghc7iMFRHCp%37m^ zz8-4UI3SFtHvIC)h-xBY$GQ(8Pu4mPbnU(e&r2jmJl%41U@k14Rv~w7_%TX+k(wGB z@$@u$p^PeMWA@W2%X~R9msP3jW>#R}_Zg4K@^)#U9ryGNYXgU$E{rAHdvCZ|h5Roc zQ&Yon7a$lgpjqjcf%7D(G!Mmlbx zXLL?AC7<~l(*{`De%+}4O)wgubZI(Bk4-u{3aJF1}&c|j-Eb7J%@)MT6U zHk5+492(XJ6>|9OkXBJ!4bMX(F@KK{loMj9Ky5`Ma9h`BqQKUi=*|00|q|-PV+e3tgO>K_fL0>-qP^jK{G5T@?+&2UY@UcaJ1w& zwD|6G4Us7L>I8M8I>wWHA64)HFJ2GDE%wTExT!c^ zP4=N$Nc44y&zb0BJr1-E9yM_X&hN(V$llatZ5H!%pI)N8qpE*BQiG`y)uVTNtl?ec zRnxg;F*(hQgY&s$9{bdGa9aAE;fzTMwo%3Q~O?Ek{Re<`NV1TZZH)6OdJUMR%9{;CVW-;TDpc>0vFz}1eJQO>oVw-wO65C6O2jI>k*61zeHc1w@9L<% zxu1obJ^-!Mb;Ud(%Jp5U)e^kfsno>{?UC#%4!3703^3{F~Xr+~fAiw^PC=XrgqSkURLZ(or& zJ{`j{TeA)^zGz$+C-7I65{U?jhx>c6fOEJ}@-1WaoEaC}X9MqOn6*u_Q`!p!3B06v zV6ES`ZebaA*9L{)z+Ydnij1e_Bu`#aJpRSpuQ^2NN)C1XyCt_%)vm>Y@#c@ut|IVl zgffaZnRwR8JU^I&I>#7!)TWF-8G`no&@9l3P?C`FIQ-^+8M?|aA?@F0k8yl=uSLVl z)(V4^c9qxe$^Q4_B_j#dXb1@aKuQAufcU?dY<3RDhGxcwmjBoMzvi;E-C|4l&zG7z zBkU5a!xa+GJ_Efx@UdrN)}8F>w~-!As)mrhl(iOv<~4-BoZRbQuayUa1;h%~E!leT zZ2ENekw(h(YE&zc90ZZIZ(UyY0xDjuwGWw^;wI-=UnH`WG;bmUpBAH(6plJ0N7C{L z%i?hnkSg1aR3rVpM}H|nC&jc)st6xa;(N1n*H`J=jjG-Wc*PS^D`smB@YE^9huev< zbm9eG{axOgm&Fi&RW?JMH5@6-cuK^c;S2eM?mSQ#S{b_8)^z{oBDuM?xjJ$t`lalvZ~NHmozD#MQnZ z%flv3YVQ=b(kj*imMGn5I!Qst<{?w@fzR0Ek}mjXhG!f^LsCs9W&0c7;ERNqnqR35 z{~{FqI<`y6+qv+gT+XT^i(`?|@g(lyIweJ2kVML(Shrm}a~ywD?XUIiZ(sY@>?LdG z7fNt;IWJ=U38*?pR62>ccq=}UW75QS&zPjUNQ2g#bAO7n`XH{_+(pR_P=F#KyDk96 zr*OZb2E^%bM}e`&;Lua5dj`PClMHcP@TCA05yd$Rr=yyy#SW0@jV_r}Dp|Y6Y*Kc! z6+`yQ*Z@CmXnn^fHDybrSpWb4OWYWZeT&j>{zK8S=|ITB=vjz!7TxmOS z-KG=eF^&KCr}?eHV5`Af$I+ncg>XWHM2GD%OYr+0hoi3TL%?-emo%=!TkcdVj9bfg zyLJ#rvF9LCec@lpGwx|FAPCLZTYhz(Y`wF`K2AfB z?w{es&4eJ%z8XtFD2sAbtZK0eJ z7g~4BZ0cik*efd8**>t#=d4!V(;BK=Thd4!8oio?x@(ym`J{b0-@f1SLye&zE#iDwgb8l(W=((1zO$5Fz0NzRv?Sol8fyblB`@Fr~@VWP1zO6 zCCmb?-O>`^0eB2^93l>`04_lQ-INvleraj;!(fGAPXiwj`0x8L7FM*phI9LIob3wo zp-BbT;Z=}4{{R>fKRQ8;^+diadNXGD0$ z7~z>~m^WS=9ta2M3GnbZJ|4%*3HLFggiz1Wf9FS!z=BLi^*xwl}^o6^C03xgFxmXU{Bm;yR$3Nbf$8_$TeXEZU# zeb1_h8pTU^={i-hYp}I{HbJCVFqwo1Zr(5Z`)@<>@R9o+TbgBASzX&(9+AAYOf)M6 z|KQ*&7~F#@>g|?R`(>m8R6Xu6pU>#wOv8!jv@>=6<9Q@g2UCu79REM4@_#O<(oVx{ za#&3j^+UVftofo{^MzjX1@wxn&anX(J3cOkCl zzJm+Js0MR~+_C+d(<&n>reD=N=@0mIBW*@WlUDEPz@H$0;%l;}+rlARO)oAu%@Sw6 zv!Lj7q9SUM5H0%z{v!j0Wep*-Br5U%Oxt1hsFY{|8Ii$GuwRR&YsUy0O1=}@=$RoW zFkPgqq*cz51hgI$fqiW4U|KOdv%X~{c5wEv z#42MwX(b@ASyYP1A8B-D2oI+WRLN2&mf#1-fci1&Pb8;0)D%EIMw`m4)MXBvmd)n< zi5pXwg^z8`ceBE&o093Q?Fa$-l8U&_iVmx@ikB_0F96SZXJ@8<<^9lI)Kvq<$d@i^d5e{>J07#?o`%NR^ zlpQ!=kBYW)Cf3>8fpALWW;6~3C`B#k-iX@>5kN&? z`o=4Hpj8R75^(MDiB_Om%X)_!29(!*&THXOkxE-wExu7Ey`uY8X?Y;1$ja|z-$QYq z@01Y>EWpW^?4biPCKnoXYN;u(kia6W1qytmMi_PS-3X?j{XiBa8QKYIB5;O+7p0C@ z#6@qw0t?^>2+TD1%6%MHYpTKtghcQ;#y$JZ9H?gTtvekC-t*G>-r1;)5e47|_-MQ} zowjJZY||>KtHNXRVhdXSGdM8k?vV7BR#G*2MzxK-71~6f4X!W$_W2+uVSd2P8_+D( zKDhvBU;5JxC*MXAZxd30hO`TChJI}XH~AR{u5fN5d8c+!@*b?FqsLka@eF=PLGAkd zY5*nq~_+>$_ub<;{Zd~=R)D#1tR7{8i znT%?BtFm4uypy2?f8$v251qFs0$tS1 zv5*iM7Eu7AhZuyJ(QQw{ zGl`*o`Nvo8;-B?}URg64Th~5YCTgT(+}CYnqQ~T()zUkcy54oWxUM0N>;?@&T4@Lw z;kxsOh_A8qF}jYyWS|+9G}bYugF&W{**z4;tE%ptpgl5143jQ}$fH`s#_9`J6}S&t zRAWGXT#|ne7zHEtd`AqTQI$-zMdS0z?1Os)JhG7CqUso zsIT&JWSNAkfxxvGS+oXmj5eT>q?H*vVwNk-WJjXPI54TBOgU6q?F>fvFx0kMctiaU zC2 z;8&=-3yW8K#&yKYi6pzB1)n^%5CQ@<-Is5Dc+j>c3Sz+@kgmLwwDn5a5iUJCqVKs( zF74cW%(q_r^O8FE?#6KJDf;hHRjq(M*5E&!sW3D+w-Ri+n_R(rkH(I6T!?(Fk_uGd ziJXGXytYw#ot~g*K-X0+_n?=GJl&(|*1R$zuN~%!V(`v~Xm+_;&2eC^iwbU4lo3#+ zHO8+1O+nK;{P#DLF8HsSgU$E%a@_Vjq}WzNPY7An#N*bi-7PTz<%j7I6DaS5^m+?C zN|er5OwLa9MhC(>)0O>+n&JZ$jv^3sidSzoby4h3$-0)n5yb!tEGB<7YC@Hjw>9Nx zsT$4E2}nL}9sH83ZBgL=JB8cayKqtee9T((+40UTln?vHtHw9RiT6&XqQD~utNlFZ z%D^>*t}~AdI7ks)RdC8xLeo}puwM`p0sUY0tNqXhKvN81BL^%+aW2``mmTQOyRIrs zDdHKgJSkP=Y{NGc;H!u-o=>{=M|FZ3=9yML&7ozw4l&}HYzhG^rCsmM>+Ru*Wk;ep zT}gpN%xqaf$l)1t4Nls?6eUVO;Q?$X$MoE64O+A8$Pt=lnqyS9EvAqd^D!Qe_0e}M z+L;U`3aj0F5`{oUY}Se);9a%rf&RMft))P`&N2Gg~6=X~ zqb8*V*r0eaviNafjBhVw<8I9_{3f|XfB9gV5}(n6QitarOX(2%og0clo*$59-(mjb z8s*_KgzJ^v=Lms*USWPNLH-)4_-9J7A1Am^5L$n6c!%4M64-&TJ}oHHxOE3YZX0Yf zo}Ibn^cA8cHZndbNb+?^KRRkMboR9>GOn&afB1}16I%gIkgRPjh?VNp~O)-N9(<$`X_I)g(N2 zMYC>6{bFH29bahgEkyxwIO^etvdimM@^(C^` z0FD5o#BYVtxBTpgVhanrNms_5Wtfgc0l2{N%g+w50g|WUa8P(KG<)(<@Jnu>TQD8i z&fcC3eSz!lqEJ9q0Au;Ng{RRphz?vC@nCv}J0k(86E2OcRE-f?ER3EZ`a4=Gx~jH= z`SuZ<80u497>&z9N(uu>!$Blv;lNNCiMqB#F~2+(DCa~Ghe{CY>HX*hUx zHdh~d;Jj#jmmS>e37x*-dkOkF#L|PfU&`CbeMGQA>paU?88wyms#+eol;I6Bf*iFK za3-*;YckpqqghP6LX;?5dDbz?j=mOZJ|yP09%F*5DpPwZOuil3rVQ;mhK)lvk<+^n zYX1zFRJ~a}8Y@~_2(VX`+W8`vzC)UuOYG{~2?qb@RmKCi7|EufV8Y~h2g%-NJZsL# z+gy-MU8cI&N8q(GWj-QI=6pm%TfKSv$t8Pu@><_s_{rYEC+4enR-*cM(axKIHfe5d zwee1sz*iqRd0+z~IvZqKRQ!Zs33hiz&F2Da;;lQRy9D5ZO$?$3!;Rf*#sKd(AKK7$ zswO!I)Hlp`oDTbu!OkZHXqKt!P_8psHX+nYVgeTn4664&pD-ssdT&;>VR%1_oN&C; zLB-wsim2gP^EDb&S%WXwjU;vY2uyt60E08he*>#wE$#{wy;sJcW3&|dPs>nDCCVx@v9C`nfR!@FNEpAc9H zq~fNg-;PSTJtoxYizPl^I_=mLT2Dlulq&mXA+l%tmdeQK|II#*(l-Dme*(n>{b350 zje|)%<})YS)PDKme*sWS0|XQR000O8*_pRm!JRq?_c8zg!OQ^wC;$KeVR~hFbYEj{ zZf<2`bY)~~ICC#wbaHQXVr*q|Xm4+Hb#!TLb1ras?R{}`+c=W%|5G*JflsM@k!x&S zGPm{KRO-A{IVai6o1IK9p53V}Z;C~Wkj)82>XDQk&%XWcue$+|00@wvM9Fp{*4?Zl zfeS)pZq2=SRU$$-KzRd{M#g#VRkND#^21@G?yU zDpUpqD_L>F;u(JYmt@YelEuL~i&+s=*DUzy?Jx4@S#Zu+{g3K%6(kvzSrz$jY+eOL zo>##lFM^bpf%ovQC2th#-)-j?MZOHeaIvn|1q;IX*C8=nzTwg-}=d3JcgYVzIe|;Rh&sQuH zWvaVXl3mI7zx@6E>+tNqUZ4H=_T8TqlJ26VtTg%^x-grk$!wk%Onz9glr33R+=)`3 zvS|KkmgaTMSF8%*pI5AqCDxa$$XLZ{;-F5JRma%>MRIiV?AX*lQI z3UN-0ZZDFQt)l8WyiMRge5|77>O}yRiSCybD4i=7maAya!ssSSQtaT1;4;rsQKo4D z$1TJj;%rr`!6G3SS^7Enf5E#vW5!#Y(8lYd;N(w1wO*wRdw5LEeiU-E0=cTDi^+M# zfaZU;L~eTYuNT2tv_f?fi0+?Y_X8Nha&p9Lf$8|7k%A||+lB0OK%EZiPNS~Of;>y_ zs096+&vY2*dBARP#G0y-g_CQWMPp@D?E@ALvkOGu4QCqMsQSk^42lyWNbi;~@ z^ihSSQOgBfPwVyaue5;=Wh)>lj$u0vCMvHcAN5M1SL$HuFMC>@!T7@boL)>$PN*2w zF*#Oi{CMPSkHll+21Nx*YxqyIxhKJ2iQ}aGk-O|Oo3ATA){=Sn|1`O> z0+Pa}N1ctsxY?^H7|h3P4r(~~AE&`H%YfF)iwRUd19>r&S1xJUivf;_OE;H^f>HzQxga1Jf5)mN!)T7bxwhu3W>Y6?dnT z*GN!sdkvojajs5eZH8H@IcopJmz~*dRAi{z>`hymd}?d+=`8q_1-A^87#LRp*KT<* zw<*hsqbXFPXhDMR3&o;TCG(JeUgRmr=qz|G2j@lbhtk$j8o^D*&B7sbWt>H;70&*h zvdYDs)_OC5RgOBp8;w(Z4hkD^_Nt-i?3&F#2|+)0Enm{&l8;5tgq$o~XDn|e(JkG3 z)~s!fT19T7i9>3)V9Wf5Yh%#fMHIkdUjmKOU-DqFF5vefh}q@(ib_j~kOPW49q7Qa zJT_Z~g_haJKZw`M)zjG#v>B0ITXMsL#d;k`Vrc2CoduFXvvQRt)pYWYY;xpR-)xny zrYFz0D*Yt*i4|9p&BR>jQ65NBT`kKk3+S%dE2Me$8%&((GFnZ^I&)ER)N21dn4LJV zQ5+KuKmJf^T-VEMoI{HhnF{7T{KY9~i@3wKJ(fZb4QkrGb1}m@0$R6Qlz_Q(``zS- zwp7YH%d(~o%WaXs5(-S4+WC6~vt0;9Q&Z2heIJ#j$FzMCyaBy;4f7*K36RDv{Py#C zvzl^oUq*L9KA*2)QmqRqFWe+baBq$E@lW7mu26vys(}l3z~lnnWO?xY4<9F}1+mxc z$l#EJXc*`>uwP<&VSfuju?{S%vAyuW%foX)$vIK-Qc}{r?$>MnyIgD=QnsjIvjE!Y zCYdvH?K1?7BNDS>Srv>;owA$2fEO&JWuQDI#wZoRzSi7Y2&18kLz9=8GV0ebd^F&o zyZO=xT&97~l}(RSr=$sBL@f)}gf>U+^={J1kKGOM8`=~*>^q+U=2EWnsNM{8*>y%2 z{jHTTMhJhijM8G_X_EYt{R^~Ft3y(w!0Jm11%^Dk+d_%dEt+biN04{KqAuKS}?b_b5$g*hCAz(8g{t(x|lP6Jgrs73m5R%hrDf# zjFDh91l1!VJLLk%Ow+B^rMiaZD>v&xWSWOf*JsbwT&$HN*qZQfqXN_$w7Tv2Yd*z_bYR?WB z(=Xhq+xgXjmM7Xj}_$AR&HQ(jOaMO}BA;xG%4L^iX^ zBqjp4lZmlZ2$+(@eA?AACW^LOZuUs!vRtt~R>oS!Ya6oo_614$y4 zWU;g4Jg&b+o|t`DvH7g2-a)xBq0j0H?Nds2mda?evi{XE8F^!8jc!00qM0Vu1LNAk zWDMz)D2_RaQKhm>p6n)7AF1f(XV=U?QEX^tEbUMY_+a7FMuLx}tN-W#rX0YOhXSV1HmPxLRHwTQPvIL5a+7Xw{d+#&tL-B)kGwp$96LvDo+|r* zt9wC1I>w~ozZDQs2jz=IJo;E;A|G9%x`&gzfugygSnd$A@DfGqah{JD?gf@0=V}$4 z_!>OnZMX(8;wy27S6tuQdeY?#Z_(L6j?I&G!b!BgI?1d*HwL-&qZ2+~tuL{c=8K`8 z`aAW?e@Gtqa&U282tks5_`M$XcAxrojncE;+E$l;efxtAz3eR&?b_Gg(&V-t_kV_} zUQ<SMzek>-9>tnC^ z#>-=(O9Bwc7*tlhwsLeY%J}f#LaO1E`+%f*6qi${uIu&Y_GoYj05kv%e{E^6tus^5 z{7SbkCUn{``FP|~lMO&*5U)T&^&2P9`I2LZ2)-hhk}OVcl6W1ZRyNhWN34}k0K`}= zWOu+%HBk!kBnI)|VSYfK9xU=C1YX(h+MuUK&(tvYgGHjGZWRWj$5?2Pt&cwGXBmL3Re{G3guVs0ONA4&=2fw98fl9%Il89 zdZU!GUs8sHQ*}74KkS(v;GU^Dj8J#B-A3hJgpy601TtBPoCh3%JZ0P?4kkL$JpIKKk0=qemF*;kFD9!5?26fb_tFKeiCn zLomp0A*4fG$RRF7f9@wP#CJn*h!Hu&h#X=>MvoC8D8`P)*W32J$C3CDHFJhY_{X4p z`LQMsjFVqsJc^a~Uv6wl+u}cjsp!ukOr?GfnAs!3%sj(Xy4RY=fu|j!S42koVMFsY2+29@55JoIq5p315rpUTuE1Ydz>e2A9fEh9tTK0kLqz=E zc79)0Xpg_Dc{pJ{b1Ke#N69z*0R;4@{~hF9L46ml@6;LTPeC3OO+X553(9H@h0zl} zffwbcWW}ck94|l?hGxm#1K>OLuirBvcqJi&i6-Y#!m2*I+dQGuI2K z9vvKvYv%B}Y+BNr63Vr5c_Esw8@BC34MN1uL2>RzqEJXtdU3yiuVrk28Ld-yx$)yI zL-g#v(>hN@8v(Lf?!9|X`u-fhKT><+<@h4U@DlzPj8^hO!3(yrZ`kk#+jJ%5-RPNe zxTCzXZmIfWz%~d0BVLbu3k^P=7Z=#KOSQPc654dm5qn};!MDDqX3)^;#G_d)mv$Z- z(;6i)9x#CmFbQyz?1;pm!D(bd?4aCb@fmi-jrzc*Hh2-dr}&yv*SU66xZ}!`-ga6R zl=?V=26}E;Iqi=K!pEX@EgP@iHk*h5{sX9X5Kr{!>uB3wA9s)>$Qmx1_|&JvY`Fqc z0yf4VmkYd~j3S#v`#68Zz4lPHyT-P7isN3_2ks4U%*uI@T(U6BGrlS`w+rq}^dcNqITs@yU`rYxBgNc^yulk^Xo2x4cS3`Siu{ED|&>yI*q80FmOQdER7-oU| z0>lXvx4St<0I$|*EqF~#x(?Ra?lW@D+}=4u>k%0NTXhp3sZdNRX50z_PSe!yAqgM9 zaqdwhYGqEt%(D*NZtQw$ErcQltq5l$CD09QtxG0XdrpUAt+zc&h+19=&WL8Lj+(B= zK2k#0MPwJwc)fmgc4)=ANn`i#$!ZXwhW5haBqF zP5u=e198y7q6*LQH8)Z=qROTHc-?cXdpLQW=A`-f%tAjEjL(CS$DvGf3-4g|50>=r z6j>itilEBj((~1bwx?KcEz;YF^Dt2!M~sJx@P^_$rs!@hw!0A7A>!IoEw{9L4cr0t z@=o@h^4VC%C1lW z>E(`aRpcvHq<5{Yp+yt#1l@fI_ls|X=5CMVZjT!JBZeeL%_dew2C=Jhz(|^K7|Y;> z6?egPa&-;Tgu{Sip0cv64|1dsCTUXL4d~rqd~y_Qa&#R#T(1t(r5ozcVLH>Y)OA>5 z+v0b7#O``%koN+WXjArD6!D~|LV$HzlEzDyv*;ee4?2dX9)_xMm6`oZamO+|YzaQH zM=DT=Y%MoHe8%P#i$lQ$j8qUm37q|y^E0fmXjuitDu^%y_-oT>15sN?{>DbCMA=%$ zOH$?JX?7a~B7ni!1Sd4{2>5WoLGSxa>z)Hf?uj00MqS?u|H9Kik|(s@7fKQd1g01^ zQRy$68t_A%{dBz1-2-SBC;SVsj9;v?0$~A^Atk?}xWyx+CYs9IEzV#!pH$PyOg&QK zWVc9j$c(iL%+a-6MTGz}YmaedAdsn1m7slQ0-Er}6h+R~jf-a=kAnZekcO#^PJDe7 zw6R@h`R7pGN#JY^U;ioiUQru^_iewjV3Ds$Bw%5?%h$9eA~6Ygf&*Q8sF*;^Fjqic zfH<`GOH}v!l;KIxO;Tc}(QEh$?D0>iJ3nRlt!0{t3WHUiCiA=C=^x6cShdA`k<%d; zSMP>@<5h&`yo&HWRT2KRNJq0(#$r|A=8KJsp1iVr`rQyV**>2<_1y_~Z+i!apnqX@ zm}!BT%gUa^JathRYKqPKOflKJ2V#sF%-(6fZGAOXjiIK)HRd)XeDgA@=GU!K|B1hj z9Oa2+qRTQ**CL8e{n*nY)GE7X>9Q}ucTW!Rf|15-yeOh=mS37`%6SB#;qbPlY~M!^V|H#o=PTa& z#VaB0li-|@8&~k^-8mWlKd-AxvSGxIsFV@LifYcvkgLRJID$xu_x(yMg3} zt`F+?;t8l$T9d^x@k$#2EemclHvED!kvZ44aF};nG1-QqYoY!YkllBIs9Zy4HASQ=LW;zdZac1?mFZyL70fWuZnLZ%~EWmw(!3yM|Jj%-l<{9Xie>O$NjR zZD6?Q*CzB-jM|)}&Q%Vtz%zZ;9A%~BpX0UMezpTQyXu>*^40X@x%q{hmqOkr6H~I+ zz;UBKbSrzVm*b}+!XJ`6c96Tq#H&+~G{4(!3BXa{zth=TSEuYAghJ6twG^JII)&@J z4>ZEzdBykZnQYK`IiVjL@L_2~0%*w18q~+-yHi&4C%U#0G{Fd{@9cEd zg`Eoufh#bRLp;DKXS`;yo`t|Q%fhQsU^~6=_D%6W9W~8@?rnd^BG$zSOJCi*v9{q# zjMp)9E>50*bX^58$jN7zk4+Cl@d=0gf*LiNeZpD2GhvhhLZ2Je6naf;c1LOqF?zF@11C_F)?8hq(T9T2lVinV{b|N&ag7A?_mYBqh=c zwgdqUnz2AIro~KkE4(HDY*pdI7oSa7XsdA`8wZNwIJZnZCOk}FL$>X13lQT2mfsH? zR!@7hK7{U7M`avr%*F<;X7&V;b&ZF{|2-jO9vRQNw{(vQIQzmtu;v$`Ibc*|cHt&| z>7*XD6L>$7D$H_Q9kM65iPANreT0JHdfixOy{WEe^K4#AH{s1|KQ)n9>aQm!*2}KC z_Sln?T&qI8fli!^I&YlY;HEkE4Remldajr2yjG6J4hK<;pVu{W^~Gy6O8iT_tZ4Av za^k)tqZ)ak9Q}+~te{P^;9WG>u8?aO>-@@nUmW*EKef|jURtGDOB0at%Os9jMt+67 zBKW@vYA7-w0}-B410pbVae}hmd|?fK{d`yJDzc03)TmMZnE~XNA$=Ay0;EwEz?ZBq`rx>DRpQ?CG=A|^C;O=t+9v?aSeow5w^N%hl%rSg z!Y28pg^?P`3k+D$;tMaruaGsS+`T2Bb_`)XTvi`YbqqaxK-GT=bGC^xYt8IA7{@tS z8epRI&g(NOdj>_vo7GL7Bh6`r$gUZ!_xpb5b3^hYoy|=LMw`njPagD4RtdeYdCZq5 zk2y>Q$DF`*g`>>ghCJug)w+70)3&DdsWsC&)%tsnAPKBov$NI zRcVF4Vlre`pi~mnKx~@Z)I zhCI8TFY#tBL<6yX#BW^w40uZhmYcv|Cky=Vq!&2RDjx|yan{+5py=OS{QF1fD{5zb zAZzx%j+082V}7sIWrQbJLjDEZ)Fck#-)8JKq%VM%fg?f@k7>bq3 zW1ioDs6tpJTQ6CG_>kn8xyoX`lqkEZ(@x|mJEs3$CR~llFbr~mDy~ZPN=ekUk|Cl4 zC&oB8?VK|hgz5z2x3N>u1lkYex~AQEQc}6n%x=|N|I3uyA9!%uF3qz>UD5a<33W5b zOIjIfs25MDgdM}Rw4eafT&${@-Yz05c6m8H4W0+ifx_3{TO1?m;k%f~)D&pWHApVb z$d<6^^^iY?yV-y5Znj*pIW}3bQ_} z)_WW*tnr(5c+V$xcbP{;9K1z`nqs}OVs)moqP9ZL8lwUqzG@JR7%I!iRCSHhmII|n zpMEICB8P!h^vCSwDmkOSrkbvOS)t5S{Juh1L(pQ&6*o6U^;TN9%Q+Y`MUu-Lab*>y zOex)hExB9?fLkub+5#=md2KoC1?lk#B_?mJwxdxS9MAb8oD-Pk@U=elCPq~5bzy-K?m zA(-Sz+-!|x;};*>%a@YwOLH}loVI29YAP0`LgByG_HaW50c)X%^{)>rYWnRCgAQdV z_Eltgz>L7=$saV(n7;9m7(QK2DE|jGVm^=pK2}(v_L@)}+MrSo-#mQ$A%y!HFimk_ZMIqD zm~e&^*3~$sn2Q-*-?flNe3YAtrO{8i%CNEUX=fA^&ZSrZ3-L2DdZvv9aU59pk-TBu z5^8Wtvd6`!DF|Q>oM~aA16?xM=th5J3UAFiFY(M+vG$FIoh z#Z9xgCDAlwNtUnjisKQcukFS*D?X0t{A(mUTj(Zti%T8f55wL&$pY!}79-(TN`064fz503v&fQ z)UHc2)IC(wnIOw?_kqZv%fF&6gh5-A>X?@qV9d8CpgT1*ia6}H%>7t@s#~6f)~wdC zV`vJibNrmdoLlasYhiwrIE1lzWFmx=G-)j>$I8(E&(_I`bR`vOCbYe?nZ(2tLK%~6 z97li%czLUK`R~iL60R{E689_#cCYNXCoeKaw+zcg{ue}%gJp7cU16+ngzD6uBu?ib zPOSPTfeP_%77=d1rsrp8M>R$Z%Ogx!vR*09BTDMpxC8k^`XaC6lp09&BMu%J{V8S5S zkW>=;rlhaV{-{(mPNi4CrQRs&trq-^;>$-7A{!UDV2vY0w)zdh+E$3HU2qE4P$6;% zVuxUDAw-sAXnfEJa%sBz&_W;*z^BVprZz8~oVwIid$gHU;g*|68eP-Ga5PolqMk+= zS+c+@mB?8C?{yBQ!WT4yn*p$=yl4hx+X1lE?--P=2cTE_YrAM;;s2$@=mjn7&DM$g zv+J7?_h9sOY0$+<3ShI~$-U_Oi%i_7uGIWbC3RQH4Z3zk)pfh(b+$;dqy%X*yf6A) zIppI^pDXO8*Ef{UF<&U*R-v|s_X65*`XO+jlS%7EsmI!=k6%U#`Iuoi+B@Eq^YzII zos^%*jh?fhy9R4=IeO*XTq@0T_2Mj`M)|1E$M#Q7Cl>YT8jm6FEsll_SC>s%?skGv zAHpW&JTi1HT0FuuNMf=KEV#s#Wh*xJrCj)UT+D@!1E;1V_6;uA!Uqe9m^xXFzSnl_ zTNm7URD3<78wX3&6jK?c=i2h(W7}k^kA9n)0FrppklN6sM6$yr>Ee&*?l4KRn>@W? z@z1o0r=Ff-{tDS67hN4OYF;sE=F>VGM!IY5$1Ri&K6Z4}ZOPc{bDU0yz@;{M=25#w zcn8fLJ$9YKdyr{6W>+fiK4w>+VJCI+G4XH<34Vum@@d24KZ+_bwoR46f9<3@2;1wd*b8qQ{QZsS&7&kx0)QHom$DoseCb)t* zL;-<6v3U|8rSi?&p9wY#ub5QDdUO%rRGw+Vd*YxZT+wv?CVoxBNg(P(m3^I&TZv# z>P+9XvC7?L-X|ZYmQ5X6c9_x0KdEsmrBin%C;6vk9T7h{w1=7Xd|4(GV3#at<5-{V zPP=nAZGOeePv>s~rNJ6+ci#4rB~=oo$?wQgpjP`h(!y|?&t$JcdBSG#y!mr(E_G@Q zj?8g{N=sjEMTwAJV+JI@rI&wZNKy}Ur400fpFGsGSqO2gz;74zvc$hY{D-#&%W767 z)!m88Q<--W{Uz`prX8Nhddjw6iI}%A#^ISFR6GDGdhU?xF3hMDkxqtLJB0o zNfR+;xd{g4!)#&GyEB`!sMQ+e#SrDzB&JWrRU#}aaSI5aE*ay#AYj6z`7QPdY)4G; zE#uvmWOn=At@7XN1ZFX%^bX(s8h%h}81-ruPY!I}+rHaTdOB+Rdh&D@9BxPHUaO28 zh^B(A(+-+8#J${4C-urEH==YUTy(8Td$=IQm;d*8F-q+VCetPx{$N9rJ@#c;>`bA! zbwa^HD<0pCKQea8+=o)!r+S*QKS3mC=txN-@!29#WEU;2b1|Li8zhayXT!viqS2iskHqI;M9g_7lEi0> zWRk|P?%`l!i@cTixYcz#!&P|)MVGG_@tJdU^3hPT6C2fvG4SzX!t|V#oKLF50PchZ zgjwIw#zRraW>q56C5R!eg;lo6BYJuGZ;^W-Y`%yo+ejoG&xM01ibaAV!nEDn$r}6S zcYqG`8o|H}?PGoatYXj;(&|9h3DGsNVbN_{z#jc@S+MAnHYs!-6tsiJ-3f*tiF8dC zk7j8UYiiRaz)&MnLp(PL-Pj$mwFl*~WHg8kvlI_$M-YJ7GuyU(lpp}zSKE4Zs7^X} z+eUZm?5XZ;T_iW45U&_ITU&&dJiT3h`VD%oH-`@1!aF<=?%~IZ$G1sB1D@cF zXYt1d&9ra|>64<2u?fr6$OQ#)b!c&cEZo!mw!&gSV3;Eb;+Er)ah)GuzP~SA$7k?b zgVh3fhK=5CVIW+_k(oO?88XzDGH|_TL#zf_w1WgYfYN<1B&`)5mulSNcd(QVOPNCF z#qnb8$U)9ABU;V26bhRf((S6Svqp6yCV6#@XBj-mS@co5f0*l5hkf1%QeQ3jw5;{7 z`k2zNRYpFhgymttF{MRy=o>C^*x1%W${t7xgH;+vI+k?n(fWKY;`!?ElRV=o_mqXi zGyHPv)5Coc`gNW0x$F>bGMMQDdhAJMO!j9T%6a){&A~B;U@_6=#ZFB;^pjwpS4nX< z6@U(AjpK6-O+4|FuwusZ0pe}Cth_gMf?QsXyg;SlWgM6`-@T@?A*LV|nVij|6r+Q) zWt4#l5Qow$M)QlJrs>d%qB$LARYR(DbtPH}T;@14Z0$?(d@bFipYd;r_7L@7`>+FF zVb!zxk1W46qkd+`N0d{048+#rkBM$d}+kz7*hcs z>X^-8;Su$FF(aeF?IH=l?!sC=yQ}s>4V`P;bLJU zMYia&d+d`U!03k7OFX>v8bc?Oj*aPr-l?(MhYe} zlb;e}l!|t9ftXa$BxV8$m$7a2^$s@s5M2RNkRWutVfS`m6Zoa6B#vdn^|8<}8_5M0K|@aKl7%RIwc0q#nTcTI#kj ztsUz{V^1SWr5#X&U>OW?Xm{k&8pUm$y4!Ef4>iZVfVw(v+dOHaqt3>|+KSnE8{vw# zxcgc;@(QOktw;!6FPGte8%xee*VUVz!k7P~eBL{L5*KB+& z=`}=^wq!<4YnBzOi@vTjM(wfatf@b5(RO~)wl+8Ql~xlJoePDu)g2@46gKq)YS&^p z7Wcai#;Zks)0mvCjq(_jO{dPHL-^xZ8Hu(T$nCFY@#CI)#_wXDi)m)Urwy3rsM?lz z$iX`=*7dL0YUu&4{f2!c=9X~QcPlm7iI$Rnk4OOG)p4wQR?52V4I+EDMS>JhUP+}D zLvW%9CM_z2(7dz32hCdv9Vm=!HR(5)2aKT^@&m@;y?G!fx!O(0uuN?jgLW0FW1Deb z$OFHs+`jsIp$`tH1Iet0Gmhnd=deSIf&=a_NQ8%q?@rN(4a9XEQQa97;Uk{=!y?qM zzm4#S`w6foX52SYp+>K(S7XRNkB3#XwUtM7I|-#Dm%1a$onCcDyE^it_XWE1Pdl=s zTQj3SbeP366ds=)V=X8Sb)5QWa7$CG4RO)h^aWj-k4C^gUl7 z8v}YVqt&1FAq5FWswP!{)RBG%fOQjq^)?~wjgtF3YKT=#)L*4oyp;im!+Df>0B-s0cw>pIRUH~qc z;4qvQVVOm%@;a}EU|L^%5Tj&JaP|QfOE7!Wa+gq*E0)osO=ZRiE8J5jP7--$${8MT z61a-Mz`u!~W$y+!2)exrA3B`$Adn8`B0rMjbqRNSKjo zj<`W1OJ{m<8_PJkn;yl-$Yxp%b1|}#qy%0X?`;?4>LmnHV{-Wb)f}Lj{XsRBnb@(P zw{7R|7n|A07Vt{0<6#Eu9DL~*ov%3RvX3h!)N-Hj%3%2%LpFDYpKK(LezLd`V1jl? z6vdQq{Q#OcKojF$vd0CTfbp#)vo2@N#h5S{3WQ?Z4|70JFe16+GcJ+HjM) zEnmole=q`CA}ZP^P$HV#I1d%xy|EK`1aIHCUu2}E&>kc(;yr*n#zdUz{~;nHcBVZf zP=r(1frsc_=!HU@!((lB6fA_63urQI*-gU`5tAkb3~64uZs1ZO5QV1)^y7ej><|5L zPCgt`*EJ{)4g(pw)_b4YyLS%z20}Uqsw*-1kTZMHlg9>!^zz2UL+;(@WQf3yE37+1 zM*IYH-}p!g$`z>l#180)GcR_{qDO{|G=#fRk*3T65viYD=jT@ETn&sk>32gVolC4O z;jP-RHJ7(RnRiBS^}8|hdTaIVHM_Ug@}}6zc~i@7AQrn$x(B31BjiD%EJH_h$6$+f z(#f}ngtzD>Oh>wJTZekl7wdR+5inxdkWeE(3N<2(GjH_8L6@2e+$>>B2yT{< zX~A1;KOi#)WM+>Skl7~Yqw-AI&`R(+|MxNwb`HvPj?q`_pVH5lZVwf6-!K2%6&$mH zq>dw{J40hOl*}C=G15B3Ex+gWUO>+(frG#|8^IvRn6tmUbe&U^ zXwkA}%eHOXyKLLGja{~F+qP}nwr#tr_qi{pqoeP``U5K>Bj?PV;~U8(mmd9*0Jx(K|swGYC8Y9VRDwb(zua^VvbGzBMiXjJZiQ))FLCz z*WlK;A$QnbVIr44Cu|1QmB1oRJ-}DoE9tTKc%!}7l~?4UJPp!hLY&JZLCkaOZ82+3 z7s0g}X$LVdf+bbvAh6+9qVfymhs*Za&BmHGNo2;;PF#D95QDVCx-_6+#rv&U$v+hC z$S+HJ8J(_a6tA?40WfQWi#ZQ8=!QX6{3XH;iH+jifCt3UlD*NT`32Nl#96HzQVPy^ zkgZT78xnpgF+HHa`^;lWBB}J>JCblhuK|lAV0TRKdejF$R2F`M(HUB$WEuh2tlX{S zuZocc4$5);&JPEVx=|uaz#%44HIhnPnP+e!hy0Usl1Raf3}4aTITwSjUpPyxjviU1 zS=X?SliTwqLyHT*KM_gL@wc)vzY59&*uxu3*$IMJb|mO9TIXA>3E$UDYlY(IZq2)y z*O!^LU#H6bk%(0_by^9L{<=(`NrEw9OLWZG_8b$-f@-0v5QOqkNdYbHDtcK7spS3=n# z{6n{HxJ%qk7tkP4pn?T?`~>%dS3O5gC+T(FHs7CW#Odj%YnioQcZvsz=pPk8ZzC;q zg;g@l{QqFY@=z&zh$xZ`J0pRszuRz1H!y{FYoL(_tLc#Kbao@(bKb=y3jdVZ{!1_} zn`#>Kl?X{zJ90mcei*=RWV*xkkx?&%_;u&vqk0HO4=L1OrA}aYT7Z0Ndnllpq#nrs zdWfX&-LngIS0!y-X6H$*^`U%}{uz^cH;W(Ro1D~0j#-{v=Xml?ORBJUFa4=mkQkU( zBn8zB^$hLQxn;;D!=zW*mRYa>#;l zB0@x^O`?K9UTDr%Blx!RTw$Cgolw!{s0v*WduOJI!k~*I`0s~syMYZ4TPGMVe=>E5 zyVUci`tk#K^0yL2jx@uINpOH-VY9a62Ul@Q{@l_~QXdX(@}TFrDzHV4JQb(OQ2)FL zvB(->2`IR1ZxgP`yB+4dgVu;?hw~rGkW*R@J3$q;v zcpj+oFHYPv5WG8D>nX1&mwEZ%AP+b9sGlO!9 zq+?0YAs3Orjca82fcQ%Q;vVM@BXv+|Hwo}R+>jT@+f!lE;SI(05gTu22=N{c+snR4 z{A>y7spUJG=rt#(yVhU+s9wO{cuJ5K^==L#{X0amEY*nm=rq& zuy;eSGy6d{uu{=jC0rmFHV-u*69N_!%|}e5S655q$^RimKv4crU3Vp}hb)yXUF@`l zj}8l=dJ?r0k2~zMblRXZg+%9!vceF0K7fiTdvYNn?9mmIGxkV!7REZS9=q-)DtCau zE#kF_3}ATVV336cVK)F`Wg$awq06*inX?A~=1kN1_e^!vpvO*Gsq z3^~Jjx5UbE#PXKJ0OJ*ajWLN;hhRN7&!0Q1dEtjAEA?S~h%XVn#Uq`lAHFUHv-P{N z?4x9d!)`u{YfU48(}z@$lsTz*Fd5&L0`z!FuU6GHM~GK_RT#hz#P~mOB>sV()pqbb z2on07CItzGFIHq)$c%x5hER!-kgl2UojGp}!H#|>13o#VSrsWitmPT0fK!zuoi}fR zzCC;!u(7+p-)^7gw|B<3`g~iP0z2p?1_V~a;G3JBqoe!d{jr^&9vX4P;ZmQjO_*(T z#SjXD&UGL-aAT1HnX^SzRG$341^9-{zz#9a&sLd3;-JJ9nC!%X-yr)h+V51f(sf7Y1;wXG zFO;W}kRk4V{%H9#wJ6P$l-(q*-F8qj{en?$pGGyO#=Aj*W|@{C$#DQnsBArZ&xF>C zwk!w-hH=s)giYCU)a2>D_i<*}!^j{O6Zl`mr~o^E*>n;P|H5E~R0uN9j<^os;vXAf za1NBoJa1w$N3@-bv({0tdvGi#Ym~VN{ky8GT>iL6~l5WFc6_Xq+p3l zookU1;gN47j$U$io#smsM|MCXWE&P$u`@qx{6&XhJ z6)uiMN&3a@HhKa5>`T#jv`*4Ja|wAyeI>%lrBA#UrlH4Lf%=`90|sb4yqx z1fItIl2 zbKlIc8c+hOl~)zLT1HoM?F6gl2=Is7yhxHM>t(m7+NoTO2d%pnMY~UND{CD zF$bNXeY&qY$-aO~j+jW4DcnqX+<4HPr>X&dvHv!9OmuLrx-cy^wRyz*^v$O0rX83V zIm0>)djh}q(giI9<)x{=D5DnfGI?TuNs?Dm9Fch=4ztlM0$H*HB`Qe$Y*GD5l zf5!Uoh7ol)SoBa&e@d@UheHYa375emm32)M$UwPx znszz=yqWH(^#d7h>^wp+{V#+M)X#Z617K71!#NB6`T)N7#WnsFelE<}EWWbs?+PI(d0M*n^`AOwh9+n7=Mv=@phSCsXP4(qq)?B?sJ#g^YREzY? z&ageK=EdZ8JCjIp$VzrQ?|wA3=l*4QUYhLay+h@=Eiz;OSSddvG*^U9`?jhsmMW?q zIKp|?v4WbLfo#VU@#j(?n@3lIXaM@NtjvLiTV5BR_ICJuPlWQJh?iH5|0oflsRx7- ztOdJ^Wk5(ysN#1B7LB!LDH_H~E&$^U$gffZtY}N><&Aq+t}gH&$^l}d3P@&xDY(Qtv3!?IE(C-^v4?`I{3T@J{I!^nsh0$;TubZ_LvOSXpgiIaxIp zMb$XiL{jFnN7FTQRV^5ZlWAefK4SPyEZfybCZLZ$n_|c;G8D^~5n?n@p@?J73|ex} zvil?)^GJ?DD$;aG?DI)S3n!Mt^@6mbJS%WShe%-P1gb?2lG`|J%Cdcb=sh^*<9N&F z=M>1tDwKg2H~B~S&H9_R*<2DRGKBb(r3EQOiEw3{&rTb9v-RG|Mud^@X@;hX@OHKh zsip-N*sK=F%k(9SrBP^sk_l*%B6~``1dBy_!H~7RHWu`u`U{mw@`y5P+*pa?IpXn< zuwWISQiF6$8nslDm(NCKR1+dQ2tvUC$8jL4>nY@+sSN=SNG(ACP)ylcw-JX7wzS?G z&_G=U1jhl)=sa?0uM>oN0k&BTu7{3f^n}Z@s9bZjQk^Mflj4xhUesb$1Afj{LBsBRa+{&_-dg zPY<1~%D~*K8{%yPy2=Hw@ALl?jFLERquzx#CX{D_PPWvP3P7?%$EtxN1Aa!$NHtK>JlSEZ2l`A z9PHYxC$5O6&8Vk5?*ZK9$vX@gWVCbEQqXqTV#9&ClK6Z^%dmAO-1PyKbeJci<*#fAZ9<8)SRA~Lq(ov#P!)hqnL3< z115yDrmfeVQ3AZOv*<)b8|tBPXU?kmIYTW+m$t_i$P6CwwYYlEH&20qc-LfUyyS=X5eO<#KbM5 z{$l;o9SdNIl5>&{BMSHXDugnU)^Yoi7yE7hnu=~vnkJ+d0j#x6i^;l}5w>gfl60M% zP!(RD%qr^Elya^76W5nm4#t1U0gNj;!>DeFAi2&!8^&NuDWP<`lmHx;Sp9)0hGD3) zSv}-8oAvnsTbS33yjY{>X=qZzFCpuMR{dGGxeoj*>LH%`XtDsQ|AIQ7r|s#<6@n)} z)`)UMFEec_<&Scy(ITt3>NVT`$yPps{008FI|SSLan=1fa~iRLl)t&VZUQ(A7u3pM z1v9xiZ~KkS4s;Fd_FiaW6`mfLOM&Pkiw6Y8Ev)Y>tEuihz3E3*wO-x%l!Ix{-d{(9 z3869zw=YB{0v0Wel3>X{=$aI;b*O>ux^=`Hy%9O}Bl+UY)tU2Wt-4&`UlKmoDK*h_ zw@OuErES&iUYM~fey?Q5PpPda>!Q*VxhI)c)ZEyc?g^-QHRj?8-mPrjJGJh)X=vvQ zD^YrS=2ZgEEzT-@msKciHim``t(+U656@=&!lAuMoT`66o#p>_KY!;li#_!ZQCUV+ zSMFJ6+U+-`16visiFC;0&T=?DH=qf1{owN4|49b)0HL)6Gv z>I}urFHf6w_-^FqW(r*HR=UoVIkf>(HS=}aWjlryozijvP3{3{$F}X+BL|ktfxeqZ zwyJB_?TlS-fmIJgDWV58x2mHiNw>D>^veQFECUeOPXpag0N8nxy^&E0TKVVjTNnb* z{9MaUoRLO8oPRAd4FyV$GhR)B7}xmsEQ6|ZV0 z|HmvkLvSTfBRxbub%S%Aqpr5$T}YP#k^vDFa!9bFn>q* zG_0q~U-L^2g|9$mE#uK)Lph_&~YEd{fBI+Jb=znw2MdA#VaumAICe51hy#) zYyLpNNe({_t%icJ0aOI9FJdE878cr^)JdidBKy7Bi24U6Hr1H-FuCG?iAX4hvk`@qd;4EZ`!P)+WH|H2D6|@41S8i6H`Rn>H?K8X zw|v;4s(e^J&e_`Jh5?bOkns&kj%Mf%78@^aKlFt48z^dbr;|9gD?5iEbwDJxz&y!M zC*nsK+LnhCMX5;HwVFKYW{qto-j~J&O92uuUh3*)D%!wd+7mSHu4W*RT_dVSP;>Wf zs9>HidLTLT36Q!5|3;E<5hem9eW`OkJ#0;%XwEndvDIm&1t{OBRL70Ytqbq&WvxB% zDx7L^0PgL-1y)>iCpC^TJSD4rnz7rVBjA3#!Bmw`s6Jwbs@104ssk;FnZ1yZ?;t*+T0S?XuQxs2q&E=4{ot{+3eA$9@0L9 z3&8&dvx9(SulWWez;zM{%Bn4F{t%%|5?C4Tlona=$I{#jRPC&I^~jD2ONOXpBacT+ zCQI=ofc|ctrwWE|1^*sK9H-8WfPC<#Vx&#FhYO^Oim>z_;TQMl<=W{G`8{`+|03 z$Q_b+ztW#tE~LZnHvw;b#@0TE$G>HFi+#k=-c4xx>H%-mSb!3Wu5$RBzep7|HXmqAy8eyMcRV_*Fz|{Bp7^*zWjph4xqT_V6>c+ zc`$><&kf!0b>V;Ko>(KV@GXve6uZBDe7JEGE9Udp^9^Qqp0Y^}D;m2v;$W~`7l6dG zBs|H<7Vy@MdQCW|YZXbL%`t>VA3x$?aVE&Y?Rnh+@}Qb0t*=2;tSNpb+RO}2Mb(V3 zje0HYS@aVgmgjS^JH6?cB6o_STx|CFOKQIP2^5l}ty5U)Ag+yMG&&OgaXGB6=W0ZkdI@kxlM8*gbgsy4G0>qqx{tK1?n+{{c7POB8v5%|9pDs9+qKcP&z{_EuptwhfXil6w3P@{AtruqszdrdhH}~P4a~JbrT51zxhe=%v6;c zWKHbPm&UFN2P!4+yC<(B<2Ds3qEN(u1fzxN?SCB-^ZRkiW2bJ18NRunW*MHQ1S1V| z2HV9;IBxBgI@V64>!(+lmlAthI?7BDMjsy1iTk9}_``}*B(n7YTqIYuajx<3uHbjB zKg={WQiQfup1$X`6couCMyS#jm(rVXTo(Y5-_XNOTv6$C)|D@f_tg!CEe3Q5(2ajs zkWC+F8d-9|)=sQ*aN^QOGl46FTuHa9j;~7srZGEl*E`BZjdE^^$yw>5G8z8S z*%)_Yh$_vG0x`?MnoYr8=qCF5k<%gQdoy2kqjQ&7hL<3<%i)X)QPc0=J65(n_5!F` zl2sN7J*1FY@>Ut`f-|Rhfm#%(>{R($#m@9Sx3PU;WApq<@T`GUH*{bejdw9f*Op#u zb_?-6Z{s*Y&HF%eYp-F{zKqwnzk>ftSduf53(C%7xtxWI7K8BWu2Ks75ih!V8XLL9mtJ1v&0v;W;G z``pu7^)Z^UbA~1S&k&VABnYfIa{ZV!;K1;9k|aW7GD^Z7d~+9|5+Lg%P{TPL{anmt zaC|qh48Z8|-gF#C~6T4#SGi?(yk z&WGEy*LMrF_flsw-OGFLMrsGmkkoKGO;;X?t}EdTV5_nd)*s^fjDq49^oDR%b*Cno zm-9@%PEMf)gWE{Hj*%sy7&vi!(+K*WQ5*8&OwHZIhE3Xy(vDxZhk@P}mUADao~y$f^qMPP{H^JY zsJ%bgSWTTjPX=?}PSyS9>UFZ6n!46HXLGi9H1yT1z}mKrXU3?sAhL%CoLI9(>J2i` zKP~+|_7q~F@%esrT=_%o1GEkp%;E1ywPWZ=rGpW)r0@+~^$A-eZf@Vsc89(^f%krg z(^~XuHq1`NB6UABWPnNN9u(30JhnnlmxYL7vD#NN^i&;Vdk1bD(4wT?msP8ixgQ0P zzgJ7OZzgj;m?sL=MmTjq`IRQfNEtPQPFT^W0Es48`wA+FL<3LD<*5EzU!n{MZjRw1ueH>?OjB3v2m3?^V#gn;rJ2 z2&RlO{v7lCviar1n|@P<*6MP+?Gq{x42zW-m=TkOx^~tWFF55C-cnxmG)qT&4?3Ss zLnvfkfjHKX(urP;7Ez31=y$o9XR>6On5FB>+Gb164u%|DYHIdH_2=0Sm|hA;%)}BU zKFf7Ky81=a-t}okv?*2%tFP@OSV<O50G3hr5Wc_=_uYBNq!GVW|f!925h&_BB)W+o*00I6VF_Un#q8D1dxIlsTD!X6h zQj*b=A0P15QKDBpFRfW_Ef@1Qf1g^@pXUcP;F3!ZlbkP5H|9sKCj$wgGCeR=g>`lH zj@81Ob@vr{73mb;I|7gek_y3S#g^Y(&{ZdotIsLs<4#$69?rq^5|`IZBgTij=(j|A zS5Yxcs>}J;-?cu#KgQf&>}4^#w-E6!yD=u(-*8!&u50{p*@uXA-p4X*$gaSj6Mx5l z4L0q4D4RT;h*`O9si5{BBvV;R(&GJV*_ApHEULYa$=AX1_URtmZsp99%iTu5$=k-f zsCu_Ie;L1g?tZQ%+#VM9YlNa9dqcpx!*+Hvzn=E6mDCd1;(NO^bJ z_6%4p*d`2kzvldixUMZqXC78=oXhX)Mz%@F_#`&wvd25#+|{9$Q&7J@FhJq z)+M)IrL0kfzF0U>T>0Ulo#>88GnE>s(c>6ob z%TN3iS6Ig|pHLkLZ8Y>MSut(o&=cF-PZv+qZhKo^pd%cX5GFlEp_qHWO>18h26F z?S)~xP9?);0}SwD`%N-e;})dsx3J! z9EQXV7gyY+Hzg!QxONB5x9mNQJO43t4iIMX z9S5!5Rvy!o=Yd33Ps~+Ase`S(bFre6DbldI{~@h3E<%ek<+c5A`u=K6e*j0!7op_Z z97;dFOLY#VbFp>LYC4~Q^rrK)E2KTw1dn-GP{zjjh+;6Qp0(0o`9lOD!7zDrfzg;_ z5^1QUOQ&XWK$Qn-=(;tDU$_}!&-U-ybpi!02eIxwogsH;gb4Vyj$r4XcjI)H9busW z9j0X|Qdd-s(vs6vv-=XS| zh6rW|x^((9oC4}4k}55Ki6)3@2>Arpm9Giu5IYb)93Zg-u^*!Q{(bXrHMz` z6wyieBB-fIwRzz3@_8EkwOio_9Pb0PSyCEA{Js;g&R1AVRspA!y=^{?Hp0T8423kL z92N`ivgfXXC|g=sJz~n*E78=!2e@M}DGTd^LOrr#2=rBUR1bJW^Ko_MI-c>o{9BOC z93@dR?IxJ6>dxOF)5Ie;P3_8Qei7AvV7c?zIw`r;T_!e}_Bhh;uq^3fdv@l`rJ{~}| z(}6Fi`Gk#6XFn7J7i6#>CE@eIE+j+jT{2n&Ykdoee=8aA>WaSZ0jfz_IE;;d3eSyi|5-sV(T|Gf|+O_SCA=HOAt*=A2%|j4xC3M2%&)xst;Jlk zG8z!l^sLGu)=o#fK)$#}yigK-e>Jl)7ydB0< z7pWUbz_C-Z(9&wD87GH6v>!1Lxny+Mz(&qqY!Fu%+FR*)bc^zq!R8g(?iAXdsmx}T z+}u{UQY{KaCu4aQnVIcLLdjX!`236NcgMqG5?d0eCU6bHK2uyLKFZU0Ctmv`Wfm9L zuVK?PiQf~+d=y{0MZFUc&nKe6_FrmUPKBcW~|;dVkZTQTSe!kyQDbi7}ODL!O3 z)45<;^=1N=hb2E2;koScyoZ~%k+lCCp%Nq78tm=6Z_|ig zfzIRK|5KmCQ9JlRI7}oTOVP(lYXRZF9@Gyl^6HKV8|(xE6NUN3nQ`8r+)Un~y@v7- zdsc?UavlJgvU_N5ezT^8Lq7=2Fy&2PTb2G9IfpPfd1dWAoG5**r35h9Ec=>4EZV7> z>cyjdhM4C(JknmbpqH76`bJ}*MeZ_}vRO8AjuWxdT2~hhTJJNxg7$|*_>^KLJUSr? z^u^NDjW)W{l%C!cX0yTpVmM>Jw*#&DY1ETAx^O+|97-cu6`CWS3vqTJl3E|7CiS2F zTO90}pTSEqXAk(%OZxs8oxUp@*zR{P=*F}((^n&jWSy1Zsg!|y!XQCJBqNZDXI`>s z-I=#X6rHtQAeiB3{JE^6W(!yn-xB!JV{doYxJj9Ccj0@0^yQm-{~bZ0Gcb#h;2|0B zY!{anKk#2LJ}Ax5xDxnUr4(< zjaB^N>?T4{pOV2=_aB6zGKqS7lU%YtnuevuZ%p1o5{Q=?*xL|JmEvHC7vsb@Budae z`RaQ|o!No_*9`=3u7SQm;Ge#H7&zBg*S`okSKXUDZoWtp+kSU$uAln8r)%{wgxPE} zJtfdRecvx;i;+YTu#Q+b5^xi4mro)thZE=$J#mup$(hVFn)tmUVqr%rkJj<>7N5F z%_d+ta{luK<`MXg8Ets9HCxxN%V&G@P0G$FQBdk=p;_Db?*0_T5k6v*PwL?U*4<#O zjkk`&rbIgos~M`4uFNcjG3!``^T2=n0f&ojh91PYx&YAzpd3Gp?}fE)RKg!Jhcw5O z=TcYHr_6^#8fU1kFCa!w;&x{%8{ML7H26}HCs1Iqp8eV;XFfWzR{ND!^9_qn&oH}v z+mYr@3qjNk$sw$L_x6VjK5Zwm7w@Mu2g`tYtxk46qO=8=CFUk$Tzf{e@QE!Su&^M& zcJ!$qkLi=e23FTtc$s*~!6)8ShKAt92P@eq+gu8FW-g)L(v>A|3}3jOUvh^r#>K2) zL6voDrFcQe-IMFAXTAYPFFo$P^2zEmVZ7<@PWRawK2$u~hQ0rrbwEI* zpx+-IX#w~oRil;`^vPc5Bpk;mPMt-J4RbpK4Q;Dup_$mXXz^E{za1kgDbDP*#W32!k6|y?xfb z^-g!UMDcl&KvK7gN>Nu!EL6kLh|^K0ws;+lM!Uc|d4nB$Igi1jb%l9(ZWYSu6|mWi zgKqiNjxNJ#W~*WfSx|7cH`t{Yt@);NCiAPh9;Z&Y81pP>SjD~pS~(+xxtQdTjjKxH zpMgySLK4MwM}tu|+OR%6q_ijiQ4r6pCx<>m)uBbp5u+UZQ5#Am2{C_E)M7AeXPvNH6mgF&xm`~Dwe%`y5P+bun%Bm&@N-`q|_^;C|l?|FQhp_ zuf_y^qenHGy~fbAPR$rl^x7b?sD2-o2qQi#dI8V{ncj~dffPiIXZ4W!<}3cZZ#NJC zq{meV06zxf7yzI%>(Z4J017P}Fn#LPtb?haaMl^EMyEhPo;bH!W_fF3Ezd^N>!t*< zfEvJNWTpL~$M@~kK)j#8oUMR42`#E3Gf1}LZ(39s8T)gVncdFVx9WO%=_fIkb@)$^ zj!Awecw}EMgz^_{knBMh#U0$Re}F|Bt;ZDi%QmPa0c$%6bLhv1h9j3bd!A6zE3a)0bSQ%%yc@7HzhrmnQRil-%U7|qFLDzRvCHe;l*x#GpPUH|9<}J(0+ASbf_wEtD4rEU@r4+ zS0}k?8Cub(;wwXjc*2xvsmzN2O-n?;;P;F)N{s1*+h9YY1db;yM{Y2)A82G;q(A`K z&Ddfb2BFM@eHIyxUntz$A4rlvDbRCslAg*jHcV^zFj6^)2I9XxEPz3D zc>_pcGbjXC34aS<8%CIEv%~;@g6H(!{?xU~`N74$@WRNtbmP1F7SQ+S{)qnG+}yJF zE)MJW&-9P)U2B11c9p-9!-^aM@;(D!Za|HgF+h7@$?^u;r)1W2$5{9;c)#dFoix%GfTNMIv+V%hb z3T@w$&;T$b3P3nC$BM|sy10UElKWkyd_3~K4Y48QxzI6OL40m$H(RMPciMO@tgo{6 z8;d@8%(_cN6MpB;%7J(Ligw3hclUOAE%SB$dK7-%J+|95!6ykmO<(A@Rl>dL)HBuV z4%*#3>9DN!^+`1b#bVmElZ1eU9Jqvg*{l@=?+Q2uwS4)~{Wjr!L00jf-Ic^ND|lfg zAIsX>$q?av!9lh zjlW@wO@oeP7)0z^v}xRt8isnJDGE=e2V&@|M?PrVw-&xX$Cpw)i5_cM8#V5F2i0FU z+h^3L#Iiisw0;uQaw+`5U;?%;*9YT1F}7tCTZv&#L$dtS(Zox)6LVtdv(FPx6JfEe zCc>Fd=dM+hXL&s!{!ur#X-3j;fziqt0hR^Z+9j2ctnLLetUa8EzfZRcr=f}s<{$wFa)-aJM{#D z9$48Ghebf(2_+q>^*&+O6FZ4R#2hV(<65pbXyGAdYqCN|hL2$0zpM5I0O*tNG^?hy z(`?iTaGg{;cE|wkyg3vEm%!eB4kCMcq6O+s za6@&*RN?p?-Gu3U+KCWjrYf#pNyiXqrvVe*p#ZIt+Vv?pIbV4d*W?U+@fT(S&26(N zZtP!bcNOPTk=4AZdbd6QyE_ja0-?PeGYd@JsfD({Uk6>0B-s*o1@}fw-Gx0OTp!4t z-rY??44Lo=R>3$BEBSdWc?|gyoxN4(U z6=0{rnsG;M!f{U?A)k6P3Xi;l5Y`>2i))O>sc6U<-eyu@U0t6*_r{W#1{b!7(IX?p z{5czsSArTVO5uZ?fL$fil1X$qopL)nuD*~@cT_wH@#~rlPu?k7=<<6Kx@UV6^)YVR zgXC0IuS_G_k20!>+3qPV&s4a`t|_r(>LjH{uvOs$w0gjyS(`*6+=j?7v|}3!$#xT) ze?g-@0T!jJEzfsvrPIuR1m)7qXf6dCovQv>4jjj*Z!`l~CS?^34>yE$3i^vn=y{(h zzoNDs-=rMPSmKSA!>WD$9u~^j1GkS(y?`mwW;|c7#y|ayY}EEvq2rjEj8$t~GDF^K ziJ3Y`jYV+8%DM7`*kezh>D$UB--Bpx7mPW)5mNguD%!2u%<2nkdXD#m^=n6NuYd?;I+9Mm`_;$rC z$%2Q5z))_Utr`7%mcURIL`^ABgbXT23Tkmv@uA{+M*t4wPp`>s?CWpJOdEAmP>O3KA;E*a%@nOH4N}Wou4-UB_WcYzF;K*dD+J zlT&STI)Jvl-1`P+7m}wdw1@(6_EQmklh_QAF(Ry7UVk9@de2pL(dsi9SssR#+N5r; zss$z3FHHWpeI2tKb`DO^ZOs0zt0y1MK5GZQOKi+5+=~WjM}F<)cR!M3(=>Ey9b{gp+Oxj3_Tra;iV+pc>r1`WdqEq9>_h`3#} z>2w{oLr|5_YR$cpsaGn0r@z`wU_}tHql+-8Jes3uDe*bN9rgWwa@WS2-G}>~XSE37 z7b(p(d;LaqOAFCj09P+l-jeq;6D6r@Lv25!XYr(=nh~c#S87cUM>4NnoL2{y`elZn zs%z=R+q%1!lNEqj`8AIt8sf6^0D}tO!}DX%15JCYi{2pa5E3xBM=-e%anP;Kw%gpb z3tO(0E4uTOGhnGah0{4Df@brz@g!OjF%(`bK5Fd|Wm2?Fj zQZ_EK5&-_kD-@-(s&qg__#W6E?H(48mLDT%L-VJ}C|)Cklq8xiDzPNtt?#qaZKcF* z<=au^pYGb7=N`@<@;pHkIx?E^F0v;`()!3KGm2;fJGf+R0UXoJC8fv(`*P}t%ma2S z_x8*139Lo&`?ZK-AbR>L9ATJ|gC_-<@{o)K_Exz5qeb&(#5CJHM<51F7|pq3BdV}b zy6?Qfw_ZQ(m7_|x>@8V=1%vIF-(6mHdEQB7|5BcNT0TVW?Ffjp4EjAw^zMMvDO!Zn zd%@}~gRM)(bR3uoHAJopG`0s8Zg>*sWGG(1|#Yk!uxApwuzslIuG^lzN z_HNo?7Ma|0vEj@%bgK`hgknvUyfKxV$Y}Nxx2urpE7^_9)^XDMGhI3L_%q1m&~rCk*o@sVdm9}$XXw65W^4+h`!QX!a=JfL&++0K)%;@N+S+wlFquvis{uXYbyuB4xM9j?e=>=9}gWU+*t@D&j{c z&u(GWB!jMXYoLGvLL6hgf>cgQNj_713-erO-CVx8eWxFJ#NG3L(r*^Wz0b+#3FfGE zouyk1EZvCNwVK|zbK*avW0DQCk%6L%1}aPl569C%TalE!dkzyV2HLD}Mo@*gL!Ywk z0ELhEDbog@CzDj3^&OxAU}odD#YusM*-@&q&TjH4hwXJ^4Jml!T!sq;*ijS)EN)~S zhVk{TL5=E?%vLFD_&%GvYWQ>F@#Es~*pV6!Z%j4~m2H~Bdj#xV;E1AI`La-bfh6;` zIf<(K2z%+Gi+{%(HiacLmACPAqqOr*09#MTGbAHi^e6<9dTPdB3AnGC>?Cbs^dg#a zMx9Pb{i29X+z8uGBW00vYkYc(_IMH&JUfeWQkNX8%9K}@we#ScKOMr>B8blNQGSl2 zed9e%@D6NS)sKb=NG6$&E;B#2c`!#dUjv2&e&Z#21EP{strH?xxk5*8sGj5lO0VC+ zcf^{mm8fI@DywY;S3ph__76DLp2oDSF;)Mo(cm0UQXL*7LxQNVKq%SN0q}2I zoo|@e3V{b4D&rwj1%82^_dO;;%HxV;vaz&etISqwEa1%?mwC;Xy_9t1AR?p1Ys&Ko ztcfQFV4&H7^?JZa4DRm9O&xu5Rdj^2;0@I6Dh=bGzp!aJjHv|@GIdN9=-i2z-w)&{ zi5xog(&M%>bSLI)ka@oJN?ZSvwFjL8ONQY2yK)8`PrgE75hB~D zr~}7&&ylsE@10=&!A^4kK-@Wn_{bJ_B4X>N98R-UI+XjxV)6AkekwOzBykEm)T;wk(4cOc5H-2P3M|o{T-SUu1p0s?Q6$y{_2F09xySEa;%9B;yZGbE? zE3x2lMbdYfaFzgOa~-*@5FHz4K_0qHg}m{JwO#AT(lWe^HM&E|EnQPV2eVaSV*TN`$->TasQ1;8Sm{3^GDBDD0z#sukX3@WO z&L6Aj_k(EodVL)G;AOU5QkMXv6eJOvYa2YelO2D5%gtLz_wIjiX_Lz%us_H}#Pb-}xo zf%ky(JbNI$K6&vGw4WbtUr@@dYdq|F28&!glgVErN66`6Z?4djKN;kXoVNa{Okab_ zi61&B@^Lnr!{2IXIz$zuBZ_w=-Hrk>ixDKZCBdis6A4he@*pYoduAjmjk*{%GdBVxv~*K$tNEW<0ae zwnhMd)>()w+_Z-Sac31#&Z^_u4!zdbT)yyxdxZHQw>Rstuq~x{IOx2AzJhPo1<`jvn}H)X?at0;pT3)1BH}fX z(F|DCQnu_LRq#luzp6*C{NT{gsnx@`bJ zOD)SvBKT~F-LQME+g=*>+~^FlT}P_~Fg#dlsw`IJ-+omF`KH{pv;8$q9U>~D>K)# z{1mM;tP~y1{QgMvCgybp<^`hAs{?@kPb6ZNf@|lXB_Ox_i^M`GAfP}0?_(I-+u9o1 znfy;;wf*0*`1@zvpJS08nv|RdmnINSj8a>(8$ONR817)hT)Y|pEoqn4`~8+nyVbbF z@&|VXQ@XtSY&S1?&fqn~nu8-aRfT(IDK^xRB@p+IrKO3HWL@fV;fWI1J=au$3RA&C zLEkWk!{{21kRd~u(0>(!c1U)0tF0UX@)0wGyW0Cj%ZgflW8*<-i$cV#CVJtw7b)K5 z2!Ab;-Ty4p9SzYDo|1p39VE$dG%L+AQ7s-2E-*okCJkZWV1woz;>lE+ zx<^H~tZMlGdQ7O<)2rXr?e<%`3=x2#ieMuWU$8OF2_t83TBJUtV%ECDXsdbHYm$Z* z6dC$>8-j>oQPN5ejZ5`b1CI^^&qpQovRPt`7MV#M;dAHb_ZvLHviY<5R!9wqw~))? z0YB|j_PW9`+tD`Hg{7{xc-yl%ZFRag@LXV69Rz!kUX{uGGohq+1_&D!4C5gf$q*JZ zSO4?eje|FvI1G6}TL;m>(T`ctKfvrs2ccl_R<)~|@8TS3Z{RuCS^;S<5#kpJ+t4wc zT20k1Ch_eRMn+{eg0ux$gNxH%i$AmZP5MN>W}Fj)bdWWp*?T~YwYqUKk;!LLgsE^_&iN#F?{{ z&a;GJXtE12ggT)y%Sg1rck0%;1|};fghoM+5q<6qJBahXR+7JZ1~^R(rBEBlWshVO zx?j2f&4+?vCu!ro8 zc2ZBa%to8y-OQaKqgNF%RX07_vc)z&KKUd8s%>y;)0b*uF0W|49DNG)#uhx&E(l(_ zxhB(9%v3S@O_I5&ql@CqM6qW?vELE;F^ZIJ{vOHssbNG@N}64H>6%HRoWN!{;+IaD zDlTDF`TwN*|6qQ&HDzS=N1NvMR-b*8`lY6xG|l(dEnQ~$|CCaveU9~XbWNtKf4VDP z@T)(yjH1uePs;q&)UChrvGW^3dWq-Kt}**(-dy)2N>1UCskWi6Up1lY_j1CLjkaVH z;%_GXt&9<(DZ6T#3Aoarl`N&!)k)Xn;sr!~EOgs6)kQ0*Rj#Htq$k%biXz7Qd3;=c zJSn<(`FMf-#i+KSf?ac`$!N2CDqku--v25NHXoz!#})mW>Q;2oF*o&!Tw;h;E>q>n zJY%S${Dj*YcPsw3(oET~Ry66+JKVa!)jgxroi@$CsAoW|A&`$6A=Z^k7G>0(Yo?}) z_ADE9QZ1{#5_wLVUWAspr<)hBq&9J7nlZcZ(lc&Fwi)2jHgOehS(BQv%(2GV*k7)1xco<*j|qYV6(c(FZQ8mdvbg zNF>b<+ZrscpjKVVHqj()x76DTZ8UhbOHx$!YS>$QxumUDyO*k|t#MJFNU$`Ji1I=H=dNm+mndma0Bc{&+FVl(RD$;P%Oj2y0rT23F__7|as>Z0hKE zzmSkMM2iHO&@D=PGxLR>PhEjfA8*c5dzSrEb-Fm>l&0^QZ~VZAAv?cUHOlPaDqyc? zQkppcGn%j0SlB-^88skK9Qv$2u(7_0a+_!4_2i0vL@!Vx-LYmc@LX&K=%;R;aAoTp z{3+*Jjb5#C)g1UWU18Pn>gsxHYK7LVZLZL8Td#9>U)#W&70J;#ooeYZ1`W5r-U+K+ zKm;oEDZ(w*$7L%HAMTqt7*9r9Z{A-><#1wRF2%e!=F&GK`2nwMG18T5I)+K}Rh>Zm z1U&z;L2{KP>1se#%-J-ZcquaC{hJ5j*o$n*I> zzUe2D>ys(ujXUz1JWq&zCw|dg$m?Shf7*Ib&kO-b`B|%hIM=|0rUL8m_3`ENB6@qQ zK76uQ6RqE`x?1M#mDHX|@)TpLtzk^74YPqll!b$*%dt zIv`*DL#!TzdY`Qgqg5Gm*kK-iZchI=G@<8?w94Ax2C3C_iP^X+aPbcpOS^@N|sY*obA^gUt$S)v!fG>kICU zAd;I#j&~y7*C;sT6HK~5(0#EYe=iZ-DtB{F(HDcfuTF3{VjQV2Ak>JJL@$f5hJ*HE z&qhc^w-=O-n`F`h8nAHAjg(?uprKNLKC2^>BuabcFs|-FyEg60b!qNNY+d#9@IlR#-p9jc^7Bqpe9 z>$AO+r@*vXB%Qkc2FXquwLcaGvm&$WHaMitm`}I@k9kyWx%^|9>Gah`^BlMcD4DV@ zK4Rp6X5)uBcT?jXWGN{96>BSg*yB-YtB&I}`gmspB#Po9(A7OrFRDwn5I!j9?wTm# z?C61dB8@%FO%1kH{AjXt%B72Jflj87#9k6>)mB>%dloxfSh~Q=FgKMCj7=u%?cQY3 zz?{PhjCw#)B!B9HjboXzTI!|?zxtuUi_iz#s;L_}sY>Y1Gzd*-o1}z;@}>c|1Qbgz zYwRPg@40Foq?cQn1#!l(1c!z=jCw8KC{kpl;%yo)-n}iGRf$7UDsVMXC=Rz%)!edl zQYL}wEYWr<=#rLm>>6|Gl^0sUW2$?$vm?DYK3K{#p`2v`3h))3N0mB=Kv&n>iUjzS zxBW0=fm9TDRJQ+-*U?dEFSLdB_I1<*pktl^AOqq(Lf>j^srQFAsRnCeh1$z3r5C6} zeDm-V7bfgLHB&|80_?;5WNH~D>0nSwHj?ya8vuq9vS%O~#R+L6455bgSJBSX>{)GT z49(D?KN*$H7Y<=f5_wFn*HAf#|5@>=2j>GT3N`h#Ok3crc!h@GULT&|PX~>n@QyW> zxUx8SRX&s)0#L=pIlOp6)N;3c_|(;LL4;E;{uu8oG@aLJ2&X^BYa6sedjRd7PPxA3 zgTk^b=NqX9UeloV;SA3&#voPNZ&B#z6uhe7;hFfCbZR{XS?Zf{Xg68{@fVJyCNxeY zZBD_YhzpuqSo2^EaH|=p#~Pw&L&W{3q;ID5$r+m)*3Oy}YBy(rcnclUGI(0xRs$n8 z768}-Nz)VC;OU=qob#U!H0`Jj7^FG)TuJ)g>gj_>gJb{o#*uiA#e=fxhc&&hV(pK% zP^6Qs{4qZhxDweTz!P^UyY@Rg5AO*w66wCZy)I$5?5S{Dyqa?KQeGg+F>@%Ls~!tx zaDAK`NyTy$H2ha?162a+0R0zFc6T<8a?=W^;?VA!nKJtDYWVwCFBh2i^)mY@xcO)) z`Y1Vl;^AOF7JikFPUU@;PiSr9LI&veYc`d0Dc_>V@9uMsmXdS(h^LSy9PQMCij*rX&1VR2}#CuXj3uabE zI8byL5tZaE@CztE6fc@O2y0A3R2Yv?C|^Z^a0+EBVm9chz>_1kIR+ICE{=jNOfH{qL!zjv}HVF*@+d_-okCMMZW|mHgPp3Ty>RzKSbH zWT=W!$&uJd5r#ns4?KN=rRtOlNtR~0nod$!ibK|6VWBHWIC+XTTgW?NrLOryXd7Df zy77)-ECzzi&+5>3d~(}eBpbeB%;T0n$8^D;K}u?Y15GsmJ|qr-ff!q7y7U@m1RI$t zOu+7}ge*a0LxQ`ApNK|mZ2+kfWZ+JN2m?K=Z2$EY)Z%-vk~z;Z5t=&W6WgT;NQIv> z;B$g%SstO#@3E;O`Jaouk2E@6feuLs&q)^6rx!q zyq=bDM722&$?Gs2i8_bSTuJRpChR&!lv?J^pseTyET=E1S$ILNvbTT? zKjOYSu)D9o!p%A$yJj^^2ogjm*0YI@?A{o3ImO`MU0p|0iF|p!i&?6!SYXowP-4}i9)gss528~l%3VXn>fT{plwoGCFEjDd_lP1nsQ0R*3bbeRxV#^ zk*ig#P9K(q=$a{woN!64D5CVwG`CD8YsmUgs`CGKs#_LQ{2=M;BC%fn!}^Z*iq($t zVI_4w z00zCbK0jyVA!QbCAes}Z1;Uwm;7fTv4C0k*wxDhMu1vK+sSqS7*M^PCBQu>w%11eQ z9bW!bt%FZ)Lox_cs^a_^Bv?P5;9h`W3Z6cFSWS=Gsp3_42xwz`#xc@qVQ@h4g)WkB zXZY7NbJqn>PA0oSuo3*G@2X6^kcP*0#?l2gkv2-P0*9!bh6XKbKbXSgmuL-sfIOpI z=)>U6TaSVoKf%yA4aM?Bki@!Vy-{WBnNG}Lst$+Ozl5_}*)fzC)>1?pdT4TPlTV}w z=rrIqs4?sfwhQU1_k_k@$jV# zXP%OSf6gWj9zF&qrqabBF~!3vw+L*spQ`X9wWZyCRPupK;i4JyVZT-9Ld!rpaH)

Bp*Mr=(XAMPV6xLf zTm(2Ip`_L}p>zWGVnr<_7lY9z``(}Uo z$CBBGxe~9ESeA?3LMSS6i)-P}Ph=S;4xcw--r{NjPPYgPA#bymVA6q-!5E7 zYKPAG({Vfmm^IG3&Mv@5i1+s`s_3U&%}GoI7ghQkOXDn zg?ZO)g_eU=d#c*?^jDPsmO`Rko{`anJHdSt(fmOUseZvkRlg149E2mwg7N5ffGh$R zf03IZZwCqUG)<}l{k3Z+P?*4cVm-<&O%|4Jn|ED&_A8bu;d7qkUO4$IQWVTUj4R}b zFG-nlfok2=YZUpv*v1e=)(>4}v!0&;!*E19oG-&j9R`^WFF9$Tt}j|H$PF9aCW?iV z<3vi?P|GpfMLZyr_-5#xCDbr0{>61{Y~)3(=Y?_&c7?*h8i-&<=yd-eBs!+Dxiq1xF6J6ZbZ_W$jv%kGL_v_^NH5FHxk{O`Ng>aO(*O4Ud@m3SP9%aPI2js z2~L-hL&ZE!KfX?&&$bX7!^LIL)qy?7pj1R+0byR`H|Y{~vL0v}uUiqCCY{z5Hk10R zHo{L&KVA{7l~E$iA|Q3e70S1a3<@MTAeV}bHeZ#TEt4@ivq~npWQgo6_+DUWzW;gc z4%l+j1McheB#2K>Hfqc=Z|$!8xhLk6fv%>#lVKk(n^erG3u1mzsIZASlH0+;buR$a zCfnl2bC6eIpM(JJG~6Q)4i+Okpaod$;-fSbyc7mqkT3pqf&{|@w?mn!3GXxTIx4Zm z%S$MsgpP@)tS*G|5(io*72Ws{(0`j1GiBb$moJu9l_|E=cGWGi{4o=!n@ zbH6~Lopm&MVS@1GhZ=T(V`6J`{B7MupjNtE_PlBjvbo~jEB}jubR&wIL(7~J0GK!K ze(J&mx|}bh%jm+01{g$BH-2cNu+Vw|C%W^y0ndS+I0!+UC2{bQI(hU{0>V2jLR!hP z33r%RyqJi(a|UFXvqw7KJZ9}5S75@1KHbDx|6cpVycUc34waTPw%0-m359N9bAz_0 z@s(UzwpxRzTKSu*d~HlReu@q zQ;4E_q2pX-RXtGhKPId{wkUCfdM-DSX{N2MMWuM2x<}Fm;%JgV7;sULFb6;qnyqGW zxd$5c=fq63fN;vF3>3wd*IJPgES-Bo6r*cELOk22c5i}?X<_5|y}G*A#f-_%9*nrg zjZ)3)%v%rfQuoG1s_}!~qnrhrt>g zkePN>kh*pp-DP0-nR+EI>QKt-2D2nR|m3~OUC)ngYNRAo|w+VK^&hS4`rIRWSO`g~0cL&C;uE=;w?iRr~T0dVe9F6nD0c z)KHDU0~^3RYM$WGMeby^XLcb^<-P-8hS9vWSsruhag^vsp(9tlL4T4YU#K zl4#*J?Wn^VJb~FzCMsAqA#Xk=mqUrF0&_ji1H^l-*({mf(s!dzm6gN_a56jt$Hl5V z#Bc~wkfZq_8ZK{riqJ@b*m63mjX3$4L)n$6=zwWN6^N?{YGsL~T69O9e!#P|YE|x1 z53z<@oR#mPVHBf_Q;^m=b}#US6iMP7MH^+VF_79Q_W)B)P{QGP;(!qQW)Hpt2Ki;y zD7ti;sO(Cz>!Lgg@goAzcQbd2P)}z45Bon{?w-o^{XRaDDRdFa+rr)qSyG*PdAP|q zSgOz(8#a{{xpgqdW{T2; zf3PgUSABd_AC6?~!SOteN;Cy!5o%kg0A5-~)DebR0lQLOoiBdfi~ZleiX8Cs0e+Wx z-jYa9t>KpN_!LuLA@IzE64EOCuW}Nzpf*EDht`aKUjiprN53O(Ui`6=F@`(t6537EMkA*)gxtkNsmgp>)BB3a!ki5O~d-SnZ`2I9NMIY4_$glx~!MQ50@tooe`bX#~! zq&Cvvm<2HPG6o009!O2^jBMF#!MV;U@nD|{z(6C2eSc4q>G3-~ z_I>u=Qs6gdy}LnkyoSslWDG6Q+(M;(40G^thGz|9b^s%o=h}FY&lqRvIUMu2R>u*L0cCKh2>=spf#;0^rnGS4u!VBP*f54V2 z@;~J7?*bn+`9nVV2l9+Loc$whxD2WKkZ&D zuT5VJxb)3R{M~$J_=D@@4R zrlD%v0bZgl;pr&B07VG%Lgo!@L4ykK>W%TuxJ8}+D5mb?bpPS#q z#mynr$Ib2OI%!;y!AAS^FdL?K+t1--+(FE@i3xzzId)}UX8&|b1uulry7O_^~_OX(}WELv)&6DjK*FkL9*#0PHPBU2!E zZu5yJc-a*IohW`I)X}($cVTnTIArx4Wq0ON<{o`?C$slbAPrNPtl?%Pwx@6M!gD+d zG~_X`$H&9CoC*TlGd};4G=XCpvNB8M9>YkH-fp#2ly9_|>a!Hegzwk9oh^Yzo$HZw zvA6%x04F_4_tm>>OIpovMh$sF7l<`@*50_Lz$h6SH=NJaDqdE61G zbkk!~AVQO2Q=mnIq*tgJtR4Xkp9l#jNla`@R`m+sT?#a{dq`tsH`pf`CI6+^L;0gi zYVvvs_6~*C*<`e$Eo>3PwxrfkSZ#|bl7t?bB7P{IH74^s2_9cWh#5R6$=Md7pR8E2 z6w?x8*yUu13Rw(+0ejKwO%tt{WH3j;QRqiG9EGmrP~pAqmRKCYHH`mD%7=c?oG}jJ zaF!Z#Ox~LLCvr*NxMWRebU~4ZihFl`LjEim$`|fNSDD#Hcv$q$hhmvUX34^LPq$oco-uYli--Cib9xqu_5(4i!e7IeqG)>3uL5A z{x3xc#Hz2m8p%U&A3=I)!%(F4Kt z43TyJIiZu3ygiXU^OXAd5R>9WYspqEp(7PP1^EAGENXKkZ?3@k>moYmoZmAmA{*p`FK(G>6zeUl=Z&8i|bzmnf4GRCRnsB)J zKmq)iwoh9H!(Lk_;LyN{pa>ym-?NHe4Ls~1p@wqjx63VvAk z@#5HOVFK4EPAqC+gYEV#Tjduz|dWM4e^uE@Nd*4dPTlE-lFL26a2cT%LQVae9QDj% zsLsp45O7?8vgQTa1y!*v4^UuNKEoA{<9D`pT_>=#V_>~ld*|6_Efjin6*c#zf%-jd z;ydhLSCt?AIgyFfm(wj^K$g^6qO!>t3nSA0GrbLt@w01VfT+|>Uv7~g#_p(U)=(%- z=hEhVlf!rOM2SZ(;6)Un+ONXh( zx;tC21Kh}i8&QPrw zz1-{~gh`=|6+DbtQ{E1W73YY-7`F(_2ZiJgDum@nx1s#~fkB$rmAbzeJsrkdM8kc$ zQjvpN@=ScK|89Dh<#B2GEwXmSy+GTL?Uo!##J;aR+)6R@JIUCnfecq0SaL&sFXM@~{6HTwz$nfX|*PM2& z@9&FhTN`4c_Ow!x_z1z$c3%D_!M!uIT3RuaCBhA@O!#G{(@~;8ZT4759enSMSFRl< z4RSEQQdx_QO@IB;fUnX{$>O0)g}q^FFEuJt>`XKjXQ4B5h@P^Ft*)+p_|=G~4$|d+ z@6>sN@%a6m#4@(2VyF~RFB79jY{pf`s9R1=A3!o@*eo=`vbGQa&8F~S-nM#hD;VE) zQ?C!DJvnkdaBV=ZF*I*-MJ(4AyLHf4gfWP&zj z1HH0=Tr+-MGQL?dK3g*08){aT{Rq7C$hq^r0z&TH)>Pu#`cNC|k=p84r`7{T1L15I z$I+*dYpzP#f98d+!;S}n+=NyM@wACPZUWte)DYnX@lC`mZt8JUX#yP;ZW2zLq zj3P7<63h^K1VIy^OD?}87f<|xXbg`-Va(LVW=1`a_sK7e$u5*I!F~0hh3w;7N+Z$? zM-TW%Nc%LhWRL4?PhRPbRmBRkGtObTW_HFq5jMIe)`^|>jnNv?I>K=DX@8L7FHS{( z_G(X*T8Bjm{(^(tS!nRfdj&+gWvjETw7AjAl+o4&RbMfYolSnSKqqaJiizEmS!pXsbFlN56;T49wr z>V=72!_F60JzUweO}m}BBpCnQ)HSjM!DRV$8K-}VF#TQ++m<=qWJo3SJcX+p%-AAY z_DVFBo2tFC+ED~}mCnnqfNaORM@GhNJuA!0R$k3;>V zm4FDjZ@0fkGnbWZ7dKQi`(&!Gi9HUjr---V{H}NAX2S>SX73@Kw(qpG&xEa|l0n3} z+}US%BN}hV!aICzIL3Kt&Tt`};AHa6!>Bd?cVkxPE35q_yRF1#Ym)Z~l)T($RuNlP z9&cuMDZ_7}))h&0VVn_v$;dk(lfo8J3Mwvn?vzx&=$XW9m=WhuIyuslqnW+8IrQ9E zBlV@7#JBC$l0RZmE@=^9fO6Et4<;){;81&+QsM#|1=f35Wm*=t_+P_@j|6O(YMee~ zzC=5cS!h+$gH(wL$?b0E2DTLxj`gl`G}5Bxx|UQq{+>_6po@Z3?M8Nks5Qrhe)4{L zt&jl7G@rW$pv_v|Bgm_MhWtnum$7LyD*hjY}ldV@Kun%CCDD~%0<$>sDkrG7+(al^DD3E?)R&YyD#uoOw ztXE>zt(&T&&*=Fh)k-+mc;ozN*m4qA)>Qi2<`e03H1~*n6lNLvd`ok2UA#!7nJqtrz=h$jI*D+ZU;wsI*UPoHbbmK zJkkS6+GXc3u(IzmNs^VE2p#+$1aW3GW!S_K2)mH;v^%sgaju~g;pOFdAH@gDhhoYy zBaUS*UK5J?h5ldDteMRK3846TrxghuT@v8)q7DO+mAF9WU%fxEU}^!I+;IDY|EYt^2wpG}ne10BJBBLb%M|QC5kUMZ9f7XM3BMjs7fSeFIO=2X}6nvkP2aHJZ|EtlW6bD@jpd&Tv6A&?@EFLB5V zNL8L`wP7$Z?K6fw`WdCS=e|yiyhhpiV(FWwdmtufb|GgnLJty8?0{A7p236<1bz$> zx`~Dv50DX=4BZ7#B2csXfRYeQjD#Xn#;q`0p{cY^>4LC0Zu2I;ye5EB(4)D6iqa5I zyNdBFajl{Vom@zJ%zrH;oHqdUrmMK11+g0STA!5WN);!1q7C>`%qR48%0k5j`M^sx z(8$GXm`o9(u-ze}jAhi0ZYpxs*6h|K{jfCAD)^e`bhbF?8xLs@498&t`ip(aaFnD@ z7I95xvve_+BZfC!!+I_uJzKQ#DsiOhKfpC0Jw+$UF{H5=3m!E4V_xZ|+DC^jkkBmy zUJxl_jx;Fbm;27K4Kg1(Uck+_0I20c8{ywyaO|tmIIdUrp3(zd7TmS%Y_`!5)VC+6 zX6DW1%ig#uFPtO1SMG?zy6UDAm2r6#fUDTTJ6+sg0l0i5&YF|k;F6_UAQSnQuLd)}yfXKZhOGnn=5p1SJJPJrG)By`Hwf$HkD5Um#GmfQR!z7i(_(80v zCJo|sWj)8#g*V$j5nY$on~kx@<1L9k(N8ySMo@2n;mmd~#un`uR+eemd&!KpvWClW zBmL_~w;;W|hbdizu`Ok)7Me`A?DkJKfHMqcUuaYh!E1g$7Z?9d|GS^GL{$P&2>*GP zU>$izYVgPNtCS-XoPO&c31 zaSYl)Rv?;a^7+c$rYj^Y7Y}RL_o2Afl7a=eV)y*+1t2GF&7_`ol(oJfF9liHX81d=eaZ+w>KASIGUo1oyakurT862E*%g z)Wnze&YXG*fQs>LslPl5mGeUCguqUum}_oGIJ(j}6NEO<5s|tI8^n2xCdtj{ z>tE};haILA?JD2Efg@UH%Ti&8HQyIAS7PT{di83D9)!cqIVdblke_MiP@r8DFw?n0 zjtJy0-w2GJ^$9@0ISV)_KyHg{nu1CokZii5Rfor)`Kp@LZ$I@uDce0;n}B`G!Gg$dCiaItYf5bwlgT zB#|a~?o_y6uV2?!S)--K;TL-k_vzr#abF|IsvnGH!)9kqRte3qL$tg5W`&`}58O>b zVMc9{6kN|$tXOB#=E&Rio?~Y1=|7b}!_YcxaK5;ex3}6B@`{U_bm{4S>CATMPPP_> zR1)l47V`*v!P3lsS^c7+6i9iK){=2mWIM?$Ax0m0Hiw~SQEtk-iHXXLGac}+s(M>N z%e>W*8NP3A(_gRi3CM=I=y|3Y_CuJmnMhkwG(K!{=Eq9NHR>BdON@lGKo5hD$b(r1 zJUNlg6Nb{+gw;e;qL!ZZ1B#ie494*Y6Jx!!;VG5z4SQ&u`mzdGX+rZ|aL>G6GgXPP z_>acv?v$QM2Y`-7sr5ysKy3Wp9*G1|W2o)gb7SQ8kj|5SQN(Ep9e)q$#Mb@^Y5kg# zD;MHu1B8thF+pkCUAXoeQbwi+0CG)Fi&VrEWsI}HZdH%9>j!d(GQEgAR7tR|bq+xe zfLonBDg6Vb!fbtii%iq_o4}U2>}ARe^SczJO?)?QyH1t0Om#UDh{-7cN#tgZ-}sLI zZ;cF|#hpI~7dJnj=Y%b;i!$kKB2y8zrc_+8>)73nq90ay^o6?qX#XkAY6F+jFB0!R z+Br$s8vIU_mE&t2(T_fLY%%>}_1CP;fQZ8&00gebk6i$V``t4utsxTEZXW@`G6xy(&TqHrmp8FH*H0?p^e*OpBu|09e z=hY6JokcHL_~jDQAS*2RFMbTp+~#ZB(tQeuU?s#p=AZIHbzR-8S?qJ}oUrER8M;NXf5*N)I)Hc{W3DB`FMH#5x(#R08njv7=9Fe`m` z09$Z@e97q5_j;P^{q9^>w+NI>FTfI7XJ;!Wk{C2fTv0CxZg-;*_N_!GNWGZo&o?Lz z;cxbe?7PZZ1ntp_Q>vUD3g?`{u#J}-DnrS{OHqaw+6WYX;YX#s^?)_Z2hI=TM)~O3 z#Djk?7ysAr`Oxv{(gnBInmVi*LY@wwa%y4C#D8Rs7Htsxscll_tb|`N-J|6t&vq^x zfZnTj>JIOf@s8?kr7yEfkSB97=*4J(>K8-_>a#I}UK;n=q$s?9Fc)pqnus zU|{wFMUmK$3&mr4Xick2@iNKQ;}*I?Gd50o|vtEO3xtA zY(>mwpGzBdh&B;^EHy`8b7#q*4q(t1j-=mZATk`I{9R;)fn4TJli+0$dQ%;9xKnU|Md${VwB&|RyxayLKg4Vp)Ma2Z+t=P8JZ?DX5)&qH8y67j(0+|@3xuzx)6 z$bBZ>=a{=*B5b2{$efE^>4|a{dL6nODuA0vN_zP79oZ}(V=k0yk*^7 z7}_GVb`Ik&tv&*~BZWCvmCE}%6^SB=Y!Vx{NqEqiIt~RB?j}5!Nm_kV?(y|VBCXw5 zL~Hm{K<8VNx#^&fe^YxE zpLd;vfII)<%F(h1BqVo!UrK-c`E7<55b#G_eX;p|30Ua;&)|-`m3~a zTwPLi3Y`ga3=>Ndd(~aYd0fW;`8Z1K4(2$Rhh8d%U=SZa>NpPlY1v#Za&6;t&b-<7w4xWt}~JxeC61i z(}8@9LD^?;%Dt^w9To99?7%hYN&=FG+tI|s+Wd+)8MeJ>#s2wk7aog-Txi}pfPLs~ zqf4ZIHZLlDFua*?hlwX+v9RL6;a>=~s_M#JwPQJzMoZ!`vm z;2OpWSqeD|MlisNI3BIpepXOEeIVhI(#=i(JNtURF6R56_FJP?$@Y1rqV7o(|7=7~ zQ7}F@;as;iosQ4KHj79w)3Hk9+Q9$F2e@QUL+ig*x71ygn_Q^R$12LY)1u(&Y@3+e zn*AswU}=p9pg|Oyf{IZ*8(o|d(*cEU-+>Ky+A-pvR*kauR6UeL)5_X|8f!9)52i7) zc>BIO2ZAr!`l_S$>HP>`7#nf6-pK|}N2XGG$R7E7VW%fibSascwxtyB7QX)5jkC2t zz747)u?f&;QOMgi*O!KA2!NlWE8DuY>Lf1Ea!cJ=3%LbUcvY@rAIko18sb3Dj!+*9 z;2H9nNms6J!J8lK{^HS2qQSCOpjAfwfjB<}+-`*JK#e+dTs6RnyJ0emx4ZkJXdt-3 zQ(U9bp2C%jo&or3Yo@!f>cDRvGxH53`nxj|#%y=!YTU--oEYSBxNqduZ+wCBRan0S42Sd^C4GCEK0{|1W$S+? zviL}su#m6`&{3H@vnSt0l{mwHPfTcc1a5A{{)Rz}A9(P`oBGA$pqK^8cMe5iphqgY zL^bY(jNMWRCk#tc3Vr5945Q|x_6z3ZIt~kc_s+k(kt|t84GoVXfsvEmC$sNTC9%GO zku^{i4p@;GHZdL;U7~jGN+~M_reV~P*S^$~(^VS2`ESWB>~u9lRuL*r0T9yCz?ZDo zn_j?#Cz1jTCGNI&vKrMkkD4gk8C1U!gYt0}P`M9Zt-k+2U1Etl@PC^i{w^@4%-<}{ zWbA*~jmgDYxiw*l=m+v;fPYECm>fM+(=gq?TNush(z`J2q|R8}g_`X^V=bK{_C zDMj!6JE%ps8_{cJhf-r` z++wW7q?P2XIi`oyPKK4LoFJIF_MNBvDz3S&;pa}Ytfy1YiD+kY?>IJD`KmXebG`mM z`LV;AGrwTddrgPWDzk`*jjl}Hl5#VGmvCy0o>17+%%Z)5%Pkh<;sPC?LHp<4c?*kI zOK1dmK)n{)T<HItY`y2L zvKaCi-tg?k&k&5P*AZ7fRQQ`p9kf^Vm9soKlw(JW+4EPBB|&oG;3TM>t7H7O9+Yf1 zCOP$L8%}&J`y14iJgsp~?Sp4OqGB@RKL#V7ayQAKe|s8dGJh38mz+fUuJpOw3^Au} zx}Y}b=#ryvE=iN)0yUN(?p}q(?YPZUs>;}@hg|DeYviiuGZVR}=@j88778Yb8_rrQ z?y!_b5oaf$UHYpYt4-NV1tE~GK^8H+ddFDeQx+C)ND~Nr>G!Kk?u1_;&uGnasa%}1)A&q@h*a!vYpkQU zk%X2nttnIhqv`}bmJw)fq!BHG%H}Qv@Ce|{$CGC^!X*ekTjmvZWH@f#$WzeGM+!$v zZVi^ifNZ zzDngq($#=JzniywmlJ9tAI>)8?tQUZ1}byW)g78lO!)9_is zHSRWz57ATItV~M5U@xU|DsiD#l!nk(^so#e;bAM1-`+|@)nsTgukYjJ;_&>qd2kAoAAidUZ9VQPAU!#6+Jjq!vSD^UO3 z61`5}@dXJsC%C~##;Z zky^s+?1=*P>im;`b`3&e48X?egUEo02`2X8y-FjHxygG;sc&$jqE|1^+RO9*jem#! z-doyPlOO&2HuF_p-0!na)GowHN%eI&^6*+txdrK?bh9DjoRtMCuSZNlP$2FU=neUJM=Zj!~o203gt zw!Fncz(N@kA95$vdrOOESh%R_z-eYCaA0&zJ1&U)YTpI}&0+AA9Cz;L&G||C!%SsZ zH?|E)P{y|N@M@x3Cuke`sxaVaY|3?GwD0nn9e1Q}J}xF=%zsKV%y%lj5c=7XC{{@RcbiYn3iZVu{wxHNrLv|zL*wBR$IqC)AqVx(kX0Q)q$LLBFYYG3j zO+}I-fE)^1Di@|uko2F7uN1aG6g`f&KMZv?!Y$FaH4JvMfw~OWw|v)b^Z6W>DT5ta zukbn-vCB{(Fviq#3hJwo^s~g()iJOuommoNZ|apOy|k2?@M12gf&D7;t80Dz#y>AR zmzYD~ZaB#AeO6l3cCT~_FsXMFpcDs7!6s8l&c-q3&SW824>+{yJD9Q~nh3TOpPbUP z;5>BPH#be`{gM;^@l&K8(yTG&*oL`J4?<}ny<1W-0I8;x#Y5V&;fC# zoTvzme0@U<2KR936m%x2CoGgT7J*I7#f4#F>0I8X>av0=>03}9-lqK zsu;ydhT7#KpQCrHc|HL`^Wf}I%rfV}Qzs>2Ng#2cZ{DywS`4Psup*;oK(~;-#Zr6c z#^IgC=E+sm>M>VT7d)SVh@yOe&0pzg`kzB*HBiij`alsUP@%Ujg2iJ3J;6UVuhj1f zW#LhqtI+T*A)&4KicF1@=Ly3n9KA~z$^f|G)V6*=+>hYcfwAursYXm!y?oUWk|JHjb>tuy z4#nK;HC9s_X@MC4dzsfvu=wnac9DNYU8jiGfDxhWM`?u2f43~reE&AII>&jsBM!by~X5>IxAzh z%lSFD2Wa1BgB@O{+IjCZ@nJ_T!FLqOc;|g!Nj~f-XXR?=1%}(GidoGZopvUUcn+H3 z^XIvYlnN9EhyR)9mvMESe*TxQhBRh1B^7x}MUmT%ud{d4{0c~@p?i}zsE%8RUo{9X zS;IZTj}MNPl-3|a&odeXXTPTFQfSNt*%ORu@0$di(p;ELz#%o0DC((a^m37eR>~)& zgzi!aWTtra5FeCRGM~6RdT+GN(al5Zu(S12-ZaKa?B?rA-4>Fk7kR-+F6FYVt^g{X z)a!H}On>Vq2BhHTEY!Ln-zc*#-8ZlRaOG6%$pp|Ns@CstK~`y5E8V0$&R&^x`$b=G zSP)N^!cx7HL`BI_MBTQHQo9p~+TKR~{qEGX%H9P`BP6kXrIH7}SkxsN?8 za=K5NFY_QtqabH8c?zlmHRF`_S+|x?TTOVB%<2_h@j(+F9Gk0ImvVmh!07~)ltUWX zVlU11pQC{i-#1%+QZ(;bo=xLOWJ6XQs|fN}laNPN>eH2On7~aK5Ny5wuoVqrA%P2= zvVO!s>zRfDh%DB!cinHS`|U*+*w#>rOVN^5n;I8*N)+nmLECuGFwfb*Yj*IM4ZP*O zWJOZ(G7E@^0b2pk@Sw3G$5j9&eQecWiy643>Qnl+=VvFU1weS&sE)PS&lMHkZL5c} z-|0;vyK`V%;nxs?jxV#Te3{6#D^OEF37lO|a(`v^LYUp{!YtUHh4VeO$xd^zH<`2s z-w-R(#wWW>-2+lc$OLchn)hPsCS5*t8zdzbHq?I%@Fvse4$BD}h;5UAHMs-~e^($A zM(IIN`{*zwTq5oVQ|m5wiVa|@k&OG;K;c<)7b<9? z>7!ff(_$pWQ0*-e^;$78n|Xi?w=lBUnIN%#pHt%QMcYZC$)F=-wfBBNGac-bJorO1 zlNX5e{|~bszw`Yg_0spk6-~U&eQ<@qJBg1+Rs7fA2z9jh4cT^9P3}X@r9xgrcIhr> zBFFHq;c6szqE_c9HPMkZzENR*y1W}B$AE!eTZ&wY(7^45$W?kF7$CnG{L02yc3zC?WEV2C-i-lc$*>oR(>06_S(*EeXtM$J z7|;EOvn=`#MqP}JLs13TK%^bvbw(0(Q5|nkq?oQ{eouXx%>^r>3ksuK6ownmWXjTN z3T|&dL|1X@j7JOKsh@5=g-{Y6K>g$t>L-TY+H8g4};9oYZXdo1x$Q`IeyK^o$wVGOXsM)}v4-pW>|s z^b3evsP9Npk(#!!S%=N7`86IHdX4ok=nq!;NEZDhrF=w-ewWH{Ec}^8zhKlJYSAyH ztdD2WPhxM!Qk@A^xNK3u`2s<3g>k0x=ZjtZ+^+9C~qt* z8b_GoJ`D}mB0Y?2s_KUm0{&NXGyC5-rViDtZRXWE$I|{ZwA@^>%fuhrXuPLXOFdFx zV!zx>OW}O#2sPI7sVTZwd*Cp~==zLALkg%R2+PbEGa&bY57__yn}|38EF~6f%J#=z zbgYp8*`Ii@qbBQvsM_XskPnq=276Vye}F^V&)*rie=q`FF^Na>fc$&5W$?{w%f`Ly zLZc__qx}qRu9pQ+x3Kntp0&sWj%$(AF}Rg-&qyZ5S{NbNbI0*wjn;7U zyQ6oAhVr+W8jv*-;S43IZlJ5?`J{G6#eB6CuT-pL=*;Y0U8YuU@9PwCMrKlVN(PN3 z)3*GR*n93n^~qh$aaXha)KvR@+|`(6yF#0Lzr7Dz$Vp8*ZMFHRc~@`4rP_WQKbEc2 z@5)19GrsM;&m5SHQ9Fa}*Pp*pr$KL)U&Xlic|c@UQpNI0`c~ObN#9Dg2jPMObEjj{1lD$Pd zHQ?6PgHd>l?BrvRstyZRVU;}x~kqk2%NnP+GiyQ!zTLDWm z?)_}yl$xzJ@l7qF$W5tYs>*=0I#&y-H>?B^Xs=^$Sug9I{i-S^xsXMu-bkO};oL!B z%V~_aNh%x3650wY`sBsY`9<>GkLZ#&LnV|G^UJHv1un8i&?!`MmueN&wqSVdkRkG7 zI`ZGP_;ET{KtJo44ojH8=Kv6dO=MuHT-{zDFd@C)W55Z3hO=-^FzKNv z&fDJ85$_#qduI&RVXRT3Y8NMW!9LyT(D`9Ad|XTcvO3>VWG6^s@E>G45g&5NYZHHJ zh3g9hq_(!Bjmr&eO)$Ro28pY& zXZ|w5j+IhoKr8v)8{r2{V9+5xIX*mKm4$>(qSY2RG-tJ&(!Kc$A4>6NA{|;*ZEb<` zskBF}hQ~K*23_{a&r8rN@jz4B0|w-s(d!jgi_@LJu$9?sqdyAGeiOU95l07d8>cIG zZ7D{uH3-LLE`buyi{;hXdWrI0ZNFx@O%I(m*h+jO9P44FCRv6enGwcwTb0>N_)u0^ zCNCN?&ZC@L0AFJvGFB23Ax5}P%UZQ7L&#o>1ZpJ;jxawKRw(o82F?Tu319<6nwBb# zq9Ywt?yt(=WKof%H-4K}Ygny%Jx-`s%b zXH>AhE{j{T+@Z+X$RQ|kkxKyeB7S~Mb77T4_gr*Ndmv&2Os@TrBl#=^PUvCvUgABf zoKWTDLVQ+E*~(g8wj>XZY%j#6AOuk?0ao%pXTa)yk=|Wq=#z~WW$+(LhZ7o;%!h*| z;Tjw~U}g6iP`}sxe-JB+VmxbY=L$zDZezGk&%ius}ZxMXIH+c2r;222zI-kM(BRe`7ftcLn>B`bHuulPq zX@|W4Q0@5(=|EJOT_O2)C)9m={(<`L`26DRCz1NX9{B44o~0_Ui}DWbpayT4=+9}_ z5zM%~It!paH!Z$1aYyXs_#tbt7T!RP*(G#DLjVXbNdRCCOi8GBbsRW414ct(SAYFf zFMvQIh*FkHdxXJ4oaMvcWYtj}h@xf%fu{qm9Jrb_9`@xOJI#b5Wt(t=;B`*F#QZQ! z1ch9^%%UxI`o@2ixkvvt{;O_C+LQimOZ2Er788vvMr^=jdFf9|WahSVw8GvGRKEjV zjfy)ANitHYQAd$GDr>d8eNazeM6c~RyouaYvAzM=>i`cV#$|ta^V%IH+b+qWOAAfL zZi^QfdC!t%xFy)ygl09knirSpJkBdpgDUX@PH#XY_`ngZSdb69pa45EI&Kj^-?@cs z5O0v7ILDx?6&Mp5eeOp2)e`9R*Xt$GCpd*S%{ak1TuZNuUl{nC=nx`^Mi%)|Z(^IOH#aw7KFiocUD+@TDHx^3hwfo& zj0tfMovU>)*;huj_0a@3$Gk9m>ht`P@yn+H&W~}p7`oD=jycjUmB=| z_!R9}LL(Nzfu0{9OY<`>Kl)6KJsKcu26Q>_Zs!5t+2qNsj zB7gU>`1|{G8S1>#txPSIWUsaV(^pTP43vA3$uh*Ei!0VyV%18vq+{s+lUX0jx&QV7 z#pMRt_Q%nE43GsNJeCFW#*ys3K=yxBSE)~SW&dP$WqpHv>nr)Uh@_tVj*-+QT5b!W z+#IiXlND9v?WiXby+1I{F(J|oVjVm9@S!n}@zHT>!`BLp@Npv`Lxn(~$=P7zD9F_# zhC!xzZWs#L*$sR)4v9?L7&0;0EHp9=zi)VC>hm`Wk&I6`OtJ-d%^_qo+$7}{%X+s_ z1VYmWr|!BN5lRWgk{>F zK>or;%2YjsMidRAPZjNi6%3MvqMR0P&`cS(lHKrugG{}t4wM@Xk(Qp8pJwB~>L0I| zrfz(XJLY)h%w?L-W|;^e8jhl>9^Xq@5zA-aY5Msk^rL+d8X8hg%6^pcmgS%jx9yv& zxCLqF#1N-cp3=l8wY$#*l5Cwu(gL(;TaoQhok*F@_$vCVJQ;tB#>?oh9Dx6})pN@m zqrR$@3da2v?1pM15Z3Enk*_JTtOgWZj)McUaP9u=`1sIrz*|cW4w5s4H$=RwskmE$ zMw8O3oe#kt934s)c~)~ADopR?od5{I5?lzlkZGP6)WDUHbPb51i33}V zr+2*-vK3Tw0>UDMW_bxC6A-)A5PcdTGDK|rRhLz_>sUfCg0r00m=1~fuqDytSkfmJ zang8b2Hvpb4{=g99Ydd3-S;~~j4~Hih9o(a##xPb_5RsGvj6G=F8ss&3-_`PHWV-f zU|`+?3+_5ALpN;Cq29X;XAvW0x`h#y@24~nG%M=iqBUeG+ z)2_;^$1lYP8B2Y#bMow*0BE@NE%eUp0z0gT1~5cU;0;6@)+?iA;%}LHg}-ky4|=0v zid&jkkk2O()6PzZuc05KNFG>Ar84`lHpwuhccWujV_+}(8+Niplpo$maz!ziP65l3 zmkym^MK}e+W^Yse(y{XvO1h+XP!R9epFJV|@f@1mBsRa=> z8*#dn>W0WrL9}ud--7R-R}Aq)cRAX?lYOu1m}+TBpj0%rUZ~ zP=59sxSLh5X^s1ov}dDxM~QwqFB;FLl!|V6`^Y*1Vy!-ZsQ@F{rP8`sSow3ht!P z;oT0qJIEG-B%Le*J&`y(Y{ef?@wQFRcuTP!0y0adQ*=kAZUcfyu^4XYs(AV)s*s@ z3wGp?K7fl^HBQAz!_-767Lb?|1m6o$p<>|qTX7Ms%hO4nswv_8)U>*j1Q?UMoZIS3 zGUp+LXK!Akc{@W9eWcGzSL^2@@pnj2r-k~$MW!=~WpBrrCeN1+hnWV)m=2E^`8h-d ztHv8#RxIP`^po-QC*$c)#?$QiWIX-Jc>0s^beN(0U5%%O%Nz=Sy(3H$@?SCY2sdrX zy{v*m-ToceXbVE+H?qbg_O6U%rQiIxFtt${_p@kGP1nl-GJh{K>}DcAxA{t68e^`(yBsQ+XP?L zdJ107wd@UgGYqD1QtqBhBE$`JtN;Ybmv>r*gu1hLhy>MVNi|5&R?sGi&yjjB@;2h8 zjZ9ISxD~Szfo4?WiT02js#n|2FarU%NNk_?#9Mja-9AOJW}4q*z}L;6^sxn!I4tVh&X{( z=x+(20~c1phYC%J^cNo*Hs*-s+@e%YuF~SiZnjs}P1M5l&@A`suD3^?MpIjg&6Ud} z1Ug#+D~=VbRc%F+bSY#F3NZ)|F&k&N5T}ajy>%mRJ{)X3RB4;cHQaeB{i#FSHJ056ogRxBOn+K$a;A<7tRjV^r@v%N6Is}Y!8s6Gnl3?1{v@D0Ym|%)MDy&DY+lj$ zQ`pB(VITi+VIM!G6YfeU{K+@`lW+JZ-|$bq;h%iNAImrVQ?3ptSBIb-$BGX9l&9k! z{_B4~j)Y|fRNOeI6b?8FcDNlHjqg9FdrgPXrQ4xuP~8DOSjdARl$r6>IxVNMN{3A` z=(r=C;kl3|m#%6U!0vka0yV%3{0F#z0YVXprbL5+OQ5d+0#$TcoJxJcWs1TNY$2u# za=)BJXW#4}L{Cq7w^6!URYKMUMPKgVzyB|Or0MGM@8Pidd|M?7uK6YI5>x<$u8`~7 zC-IZ`i_a;QT7Gp+xpL9W2pLF;1H~eV#Cy1|dS!;ycI-*=Xc-alXW3L3&(RFfpoX%P zk^wZDKGQ1Ef;Y(cdiucyWGHe${V%hYB}U$JABAqjWbVCh5XOCQ+kN8=o{Q-$k1a>tHsRz%nz$A3`n z?I-U+xksP82PLSgKkw;1NTmd_KueKtB^}(~e^3I45Xgt5>C)a`Nc;DKS^&10VF|Mg zFzX7MPx5KW%HitzrsF_j0hHHDJrSrKaX9?9kw4Z z{^(~W;+TPKW+*`ukRp4A$v6Wh@?ug5qwE%y_BGdYE`Xa(r$`=U^E19FAd_V)Gwbq=cH)*`6c7S$#_H}irnmaSCSqZcL4A<8_ zw0l>q;nd4NZc`E5MZyyfyUN&xzE^)bImiXeM<|c4&M>r8Biy?`K+w;>2kQ@&U-kDi z|4^{-F#C^H(6MvyN3{QVs8N_g#*;Z<7-L7JUUNe#Q}mH6sXi$dKPeVJDHcB|7C$K# zKPeXfeie%>O}ur9avMo6;D_z6)$D7=A74~|KYavS4gPa7XZd9U-E)@_Bwj=EBmga6 zI|Ut&5j5ZUZHk5*A(U%FWeO_8RX2u!H<2P__1AwA4Z{+zq3unk>6>xkNn*5=}U_Hb?BG;poXBhl8U2 zeHb|yeJh%+HVB09L0f>9d+H;QJOoxPN>N6@v$p|$$^U5cSfTGO*|n*3PO{(+63_M8 zn+9Q>+k-E+``B*M!R_N8x$4<(+TX{Z;4XaOx0ejd^_VTlC(EBtmOp=F%O45KpGJ44dS%XG$zV)W+kr@Q`#WA-_J zhY!l@!ao_@YVDkqBwGr+A@-o5syWn`El8%Ap>#>8>f0zKgGyPta4;88*cw8+LidOU zh-Z8M!EQzhBus1KvlP~yoQse~uBa|2sRF4dvUhNI!ZBYKaEU%469oDdAH6&|dU^2( z@iw6c|Fe%XpJ`H1`Q2U=394b+LnABfIUBrJi~gY_hG#IW;=m| zUPQrV>}pVBCUoNm{!r!|QYUp)=71^a9xAT@p_Ca4UUMiUmk9YQfo7SmUcM**hu)TX zoh2$dlaTw6Tmuo4xjZDI_fhp=FnEDo11S`(m)UYs-mMT}Gs6HFp$K1076LNzWwpvC z`3!Ss36>QX0p}9sXeTAw7Q~~{q!TBMQPjtSSof{PAJ|+vk0ulwRW&A6^`ae3FbbA> z4;x~TMiqu;*k1H6!?I^fvg@KKp71|J$rx%N$`-5oF8bdcii9phzl$?bDFGXXOfJeh zA$}s654^)w9^wzqaHx_hLy;;k18?gB+pW4gsI^FMGAPZfm@*y6P>v>h7Zc(`Qd(lb zqyIWScQIi91KZ=^s>eUT=F}48B?kuR+wmd6lnyG4!AwP*ZMZ=&&OV1(y;gC^K0ToH zYdqrNVf61l`g0@|M2+K+dO8O}2%x+hxQb^}x`yE|`ma2GReX{hoE`07z)7bcKc1bu zeEt*Md&O5zo@~QKcv}x#7DH&k)UhBGL`QX*-3AeW4g#lj^Rwv)KxVO0axVNE(L}ts zL6&u;n3Z%Y@>HgCWu|0if^7_L|Ew<_`xH1eV?uc0bM6+M0WEjU*(HHwn+PLU4=z?# z&n|>-ZA|Ok9rAS24f@mmi|64(>YCM=*coC+*rlLsqEu=SLCF6b3N$rmRet*Duck-hcahca8uiOHZlOEUt&i^~aA$1bpN=twBvP6S)S z4Zu)m1J<ez)=>I2n2A{q$UG@H415@qSj#)y?)b9 zx8T;)@2s`Ljs|byss`@7!pm%^mSi6X>s?M_72u0bdx8zhW&1NwfAle63evH3td%|1 zf#1$0TWm@-UL%EAw>PPdyK~>V3@-fYsz!J>TK3AowXpIfa@`@$(f)inzoYa&Vkq5f0xQ|3w)($1^IHtTLGHc8g|!rF)d#z3iyS>>+`;>AtT2C z$1AX`x*dr!B;xulII9f`P`Ks)dFg zy4JX5o$tNY@Um&e8xpT=CikK-n=r$H!O^x)(C|?=Nob!5tGS9`^#ou5pGNUna|eDrR0b*DB`gtCoUYI~dH9RIZ7lTk zdiRYKLQ&~J3DrQ(?gAB=KcA|oz_%q9D}Pr-FNJw&_VdU!Py$G#^FR>nXqL3yTj+wNFjp)z2B$qi8@*i=3r5f=bb_-h17B(0e=gl?6^> zFBQ@W<>tcuq9C8$^>SUQjjFHVlwVy(<1zgd?!2)hGLt8&ys8+*CCy-gcop2Kfb(~E zm-!M8HU=TMM&Pe<&|qb@~G;F@k?-;U9PXtt*sai4$e=b zAB=tRU=%z+03hebCoi|VT01$HjkrUyVi0r!I8GEP9X(;?_AMQndYy_EC~J?-Pc3`+ z0B(4Ig%P~3h0I>?*6C6}im0ShZa4Vl`#D^zx>(sN7`r9Xzamtoj1*~u#~x>?M|wL6 zaJZhroC+OPNt&fpyZP)9Hp1`V&)%NES*HW;H1omV9G$AW0szGz^X`%n?dG~l+3ROT z4B6gvsy@zpNRkV&bsQeiAzse4JI{rvo(Lp?YuH0$(7Vg+`)y(fOZ(fX!ri4y=YA$p zp%|RIjd&Gk0N{oIuoL0X-z|8X_K94@wsd z*PbTBonE%>&ZjviZ1f>9H%$;2Axh}Tz@*78`R$WQ97J!3{5l0sZMgI)fTKA@8= zqP4+p1Hn5ARH#@D_hw|}KX50QoXiC3I~;>zgAU<`=A2aN4{RlXbAhIFAR*Gpq*zm! zD~!AmjdUb6gmvpNqR7%n%+ovVYzs$rHp}0+4G+ZYtP;b48fp;d^ntrok)S`& zCc2&?u*WS&)tR`&gWs$xx4UqBk6^#f4fgu!?wh`cdz0aG^xfQQI;r!w*`cye?7h1f zg&A>=l~9v5_w|6HTAP--r3vT;B`yge2G9uBxb-$TAB1Qk)Ef)6@hqexCiSphkWn=2 zR1N?38G(sx?WU#zl$5kS<>am~p9bopi4*HXNIC7ACVg^>)ANJzWDp?p8%SA=;|!0$ z4Y#azr%b`@$?F$s?&gK%+a<{#E7F-0`m8<1Swmnn9HG}JqwIK5n}*{NIrQB5n32xf zqkq|3W%Xm^daFysaf@<7Ma3|%#Vt+$ zNa__=RdPK6tg_0>yHS+Z`cKBRD$%EQljFSiZ+{L*c645+^}33`&C9AjTQC34j)@tV zwZMA}B#iwM8N{HlgkK8zB8#hemaT?gJ+XD0%~HWhwL+nw6fq40190{BQjKn+8!%JNg@tEE-2bhh|opELf1&YV@#J%9XZKZ|xV!E?zU zT%v|g&iVAm7e1?26OHGVKfyE1pYVC+Pv~r01MYFo{R!Gz)m(esMZ+p^p5s($JYXo_qF5;Abnqt=vbRh&ot0PvmworP$XE>Q;Pw;#g=V4ybl= zq-*ySI`;29C~g$V4ahjMT(9b()F=m9Ya_J&cr+Fn*>K?bXQjQ&^sEEFD?*~YzPzim z>P?tptJf>wuqkL5{ljZ09m{H^ox z_Fam@EN$Q&*Lwi#7`LW%y2!!Fw)gwRa7++ zdUb(pr?c&(uXl-f#=V4A$F$%kbJ*lcQQ^OKqciyzTj~4Ybss6{2xC$;(*uj6KE{c) z)#r=_Rw=I0DQn4Mo~cI$IW8CGFeYNJLQw~T*j${y?_eT!5Cw89YCVSR_>tp>in}D- zK}};1KY*~zyg}#i;Ul-j6O*h;BrdXquPQ0htPSO^ij0R6nj`^;2O18IB7_POC4G@E z9G$Of-#$llfJCHDR96&1kpOn(USYCD~*&R&FZJY)0-uk|TVEJr6;&*a-^$sYVw-WbtyTB(t1o2~ zLKfCT2PRzCv+>t9!tjBpC61B_sXLJobt!0?#TxpF6DXd^pWGlrtbiMNph4_tPc|to zf9Z@Y!6FH{4|%p&J?}ZK2OX*1W?I~>LOp~d6sRX?A+4U-fVc&6`p^iXo&yFWdq;HN zj<()=oqpKTUY&vlV(`-7z%?5HWAPr>?n8Te2=&-rq5c;j$B_g)sLT1E4}{TRQDsUE z`UfJveedB7agqo#!;k+T11tIC>OxC0WMFUo857x&N@g-wq2fjC6r2Z=iA6qb5aG$Z zDONO1_x27%U=yMv5v&d6Y!X-m4bv;2wTHLF{?GL*qf11d^8mXAT z!xuVN;1LBF&Zg?qc64?M^tPEPvPrct9U$iXoXub)yn|{yrM05yD1)NiUnKkyqvOM9 zcyfHWJtEs2K`!Z>Ey~0~CZKil%~}qkp=7kov%tOt%9SJ&Mf71o9?3j;WyR8_DLI?B zOFTfc0|sJo_Dm<_y6hYZspYb>;8w}090NILQp`_AY{h;z=Br5D8yE;)OJ`bR9YTH<^(;8nMf-s#mmNs@be1&j04ztz$b}@ zqg&0OyG5=B$dv;&jiVQ6qOX}t0AH0YnMM-oOV41Q;uzgAPg1n}ho;s5^w+S!(b!ES zE7ArYI4PT2QKl2ZLoGWeYyCU9;Q$cd8u%oP?gc*b37T+Y4cVT0!BE$&*BcO{EVw|yG8qB(WGwCbu1x0 zQ$|D%NtP+TwR9PX;|5Q!Zm{?Wwq`Dd;`cy8m&ryJXfq1+ToHSSXV2ZU z>6ha#zW#bL{xbWI={Wt%*V*_#o;-Q_A74EABFnzGWWa%maR5_dHthY?YA)?9<1_UA z-Jj11#cAXieTO58D$=B2LR0Y@u-P;Nq>F*}0lv?(3?P19+*0M+qP!WWC8D>OciTJ7 zu*wCpV;Gnn-jJKU>@(~9nD^siImQSLV~Kfr8<Ta6Ml`3r}l!&&g>_JD)Y6mV^~6_O@~ z?KIbO41$&@hloV#NI5w-@W0>AW8b?JCEIBaJpx5zYIk-yJ2N{wJCDgMDgG_aA+&0D zUzk+_K7-(HxTP{`UnTXG*l?i0bGf$m>jlO!%9#w^(gg}$4xa!riNfYqH*3_fAW2(E zB5IifSHZ`Ejrl`CY*q*w7BU0sE0f6Z#XObqGw%oO>VA59crq_%UhWil_!6b-Xos>n zpdi3!QPc<$q6)24g|`Lc+~f;rH~73A$|CSAHX^6H)DkD+8^(z%aH)E51CGsrGmyDa zXB7_x{ro#vTqAM@3PnSAfnOI=piy;uTsU5Fyc=`LNo__z0i&dB!1h(3r#4DdmsTi) zjyMtUaU8rebZXZRqK%MH)M%#hGr8JW$-C8so zFrsWser6mPNz(W`kWrtV?kuU`RpM@9`T!%aP5~c6sD_lt+z?I}`+s#SJ2X=nQ8gBa znOjpK)%EJHZjndi>(CIRfW#~z-F71m5}>J4lHtXzUGH)2sxOY7O5Zp+>eg3xa`bW0 z3Dd3Tt}fOh`}TAF@pKhIfEhY27%ED3`21x#%M5=G^NDIKFgv_V>oYx%$4^;f!Ia?u zCdNytwYeWJT1z+(6Ip%vS7M5Onzn#jVf+`I2jTYAOx!k?ejX@&fD6$cV=19V+`fyZ z;6Yz-2nk&?rTY=Bgcr#6?2ENEvjY2*^)gZW?j+>6^;kFLnMI7-NZkZVS942YZDn zPoYgmQCffodH#8|ob(dGxlHEl6;!b%z)m0lVb43fE%RG>Y@?dki(7f<3yfs$7J6X! z-qL3>h4rcqAf9%w*8~@Ly{1zFc%Q79x6r)0pM*@BeLljFF7g<(7D~OqN&B|0|CA+) zY@fSWr6Rjk`>tGNZM%T_i{-qOWrqUAPpdkEQh~wW);Tye>ga8-xNezP+)dJcROZ)J z4VUHYyw4sQK&xx;Rm)lY3O)2qWgaN@<6Votpf*$k6Xl;b(M#lrhO>lWJb?%O*z}7}+r< zg4LF*g;1B=OK_RRfE4dcXl)tR{cN*is2nQx03ex%g!@1ckBZfzzFj^5NJ6L*0t%(F z?Dy`F&jh_eQYXbE08k?GEnQ!AW*jOmCWU4ViC*LjNEj zafbJVqcL|+Kni8|go8w!aSE_|1Cv~lfmcbf6S%vu_%Ze#{j>2B6A-R5oM;DqW5#bhYQ%2AtCbk^}*?j$%~&H>HM6l8U)gPg5$JV?10RRmJfir@35;t zV76{;;NWKI%xhwnU! zka<74H*+DE=?({}&E8evl7QwfPFcVhazl<+giUp+OJ*(QN67_X6zz~D!|aJ_2&K#i z{WYJlGEZLliyVvml*>Y>?5)sIib{c}YFl7OKISWxgJ)-QjMf~3vtn|hOR`w1WG}{S z=vG}Kg}-6oeCn39A`$LG)r(|g%dAm!vz{+kV(`TbuY*u|Do}@kPo62gPkgU|6PckL zo!p;NJS1M!4~)=A^Ik{1$Y`jimW=@KFyUZZQNCakaGJeM?Y*h)u`xI>!iCC_QFhSnh(xs_`E8L zN^i>sLm4&#ArPobwyI~cG(%t_WB5sHJ~L?Uphf-oG*x%Ep=w%+q)>aj#aTDgZD&rs z+{us2b+K%{o6sM{Uf0rD5jR*h9#O2eP$~r55CYc`QKF3<$wOCv{dhb~wDK-5Gthu? zKeRJ?>$w-F;*BKht>y+Kw@L9H|7UA54}n;1L-`cw#m|T#xt~<;KP`CrNq5;YEaA;x z1E+-^3yIQPTZ3GlIasaQ0MF#BRktux{oHt^oruCUS3Md%7?_BWg8%7{z-}b+rKbu? zTtlv*1Lr-MEoeE}9jAyDaq?zHYS%Z@cY!87?ZUkljE;oZf!taDFu|x-YT1^_v}o33 zH1W?tE{Z_YM#VYgITKqt+Y%SaDF{ytXJVF_G0P0f{1la^25mrOxN*SQC4jNX+(lJF zlR$s)iYm!{fEz&}o>oNzgzk=9my@J_2~nxc1H zRKm!>Q&S&dQD!v;pCx%di4#WlSE!6DCl2 zcA%3mpe<<@(G!WO>zq@sEdibw(Z0)9xGf9mCFA`dFolB|-k9LcL{qG4PbSp}rl{Tz(w~o?|8jbK z^76&OFUKj>dkOsd>hyWAtT0F3&t`O`0fTkjtAx1Kn?J|i%~mQa@1EjYfxxnoksDsS zkOG8}9PWNF)){XNRBqIBSQiJ}{*1RiZy_S{<>4eb02a%q>wqm39`@S5H9Qq;4F5Da zJ3sv`#gdMCnHi_lx8viw(Y5ijz(-seH0+B4k}1+X%sKyHGI4c!%w(6R_UDe<)uLPv z(*1OJ@#L~gd9+7{n@WMot8!uGyN4&P)cbd<5n0f!PV*dMNeX={SOgbA!5{fE5Vo}0 zV;7S|>>CcVY>&vrpICH&_YK!ymm_u9KqVy=0H~|0I&V;Z)bpS_t=wYln=>uTIKEK` zvo~&0af|q_z%jr31pNav@s7}+B`2g2qnC`jMgl1Vu>_5)5l6|z@eR0)o`8HBiqVgn zPNt^Q^H}D$3Lz-u?E46I8Oycm!OpSp^igZnO=5BDpD}3 z4Z9<@2On&r>^~vaRoRZiQ}L==3Dm83$Fzi&O~nDS$`RUMhk{|?kvPVU=okkWWgL(t zg0CT`SVyxd--EqkQC9CLSgb|A6AhLUtvG5hcgvugjLnC-Hr(6wQ`mO>;0weDP@;(V z8unYq{%hI2o*UM*|GM^D+xYsn zyUe{)a3)aOEg0LjZQHhOJ8x_!9ot67wrzH7+ji2?^mnGF=KQBlP5m=hbGz?W?N!fy zwAU(#Zh|{{S;EK%1KGYd^Rw`P3%mj~xsqR0IND)8_gTO*RVRA>K^u!N6kbX_Ba8rD2JC7dsW`n8?e#>VR*srriUioV*bFGK30}kFEZtjMn zrovHFOf@~pUewYNg3o-ep4o7m!k$m?_@Q3emjTA5*S3Y*c6ryvS=X~3cTa+XZstBA zl1*l;_|mTNXvl&Egafu6X{gcxl+Rc9_%ObWl89-73w}kYhiC71?VggFaf*91s0myF z@NIE3;4233LF)cynsMdW4Uo(2078LkMLD^EZl7^Wv%R5%VU|_2kKw-X5(-L#ZG#=* ztk~w=hB{QR4eq!heI(+tjE6H>bRo0Dx+@nnjBb#5tKjs-@E z({pOUZ!Jc!eOvkiZ6{HMGUr?as$XNbS#C}w5>3i^ff;BC^Mhi(1SanT(uGpD)9Zt# zdgj1#|EZfiam7d|_MivHsHU5UfOk3xJsJO1!TYU#gN~#vB<_uRj`RJ&}F!SIgJE!B$a9Zv4 z?wxCDfvv!=Y;usyXYHV&H7Z26+ZFu4HSK^iXug?tHT78%X6wbbCWBpr6BJoS#1>?8fA6H9gsnps905T)b%H{EiC z-oUxiL=C`D>PL-~nlg%|ApRY%>Wt~5l0ABzD z>}Wn-&JW$Y_#g7Q?LRTL^22s$46Sx*VLG_p8**te5P8Z2#wEl4RiwGAutkBxe`yI?qN4n0Yd0UrdoX%xhQ%J$VDQ@ z)XZwUj+E#VV?mF(nKqy&Yuu>3z#6TMdSf;+9V8jG|E}2)8l4j39VaH!)SDG64)Yl@ zh?tNciF@(~t(>l&F9T7D?Jv#=D<9wBZYOn~uUn8Ti>RWup-wYy0y2F+`;){PfWvDxCs)tr_^}t@8W$c(6_)7iK z>qNFOvUJxRN9teIp)u{>KR@zy_B2Wh>KuhRPf3)CVZ_LlG2wpfk$Uu?pW|`CpX2%D z#+kreuu8nqUhCPi31&3N%g4_jV?`->aj*G>PvHZBa&V}Z&UHoIgb#>n;LtT`&An-s&;qRS ztoh7;`h-sxiL=(CBxOP}3QrtdO-}x3xoyMJwg2p^?n2EyU(ti$_WiV^Slq zM({tUmxNU`nK8Ku2d|eBML6cVzPMR{G36)Py$f?M{Q3;Sw5BF42_66-8ve}ut z9ERTBlz!rT%3`ZvABV}Pr;DrVjPL8^^=M!FfplxL5TtOT**+|=IhmWS9f(a+=Lkx4b_<8I9`#E1V{(A;3wOl)fiQW>L*jUO%DrQ z(@d@9)WY$w(*oO=*Z8J^(2Ss&zT}%sB!+O|HL7uM&{KqpYc@cz#`5IVaBg$7nLErZx@?3>ke%FVr|b#aqSNY!?#gIY1DvBd8r+1efXCxt5?CcKpck7c z^Vn4qpa6zF`pMm6YiSFyb>aX5*YNo>b*WAEpj%;M80L783e{;7I3$%rQ3WQ=wgRFI zI`mO~&U&Mi=Qpz?&|+~p0kVoU=LQXD(zP`s?|~Y2G$Yxzy$;CJrfW~wweXsE2ub@P zaU78h56=Y&)&;%aT-bIY0RPwX&F;=HTWmeBqC9=Og6KMiv4Xei>QAA&vnc}jN0O2@ zr9q`VQw^2-#Hr|c)O!fmjiqP}As5b|V3ma|Hc@Q91X{0`MB4uE*W$ZkC}xW)GLo1z zX41{X3tA3LrGo|qHP^s-C`u-fw0QPLbCCjNBB|N?=Nddbn z*7Q72>7MfuWv=0C*CI7D$qXqCKCwJVV08Ig8hO}U_NlxoFqII zT|=dTez?EwKkI(st?tF>Mo%<13m+;LVKN%#5*t7fgbf1UVU)T-1S>qZGGxo z*~#m!sbW#=atoH-=^xe|DO-8QH@R0PL1jagZYced7O5&j@V0aYr}9y*Yhs1AdUV<% z37lc&oUBu&5%&&nV}%}(sClWBTvM7L@iUb)gec z9JCy-#_M5B1?2m(@@2Q7%XPlG25p`t2MT~P&T_4bRK1jLV`4FQ5_0j?& zm(`002vU87Rrv+X+Kc;-@%#QJHx#lwS*Kyv`b=`aDRG2Uh*S?99O}cdrm$(4l2E95 z<4KA4s2&h);Y7u*`J%#t4$lP1=MP(e)g^>L9<-V_ef$+~p z2^nbF>kp7Hjd~d{?R^G>N>Vm!7r_;IP)_+2$s@kvw~hfnq_0kwADzpFklAl`b%M0G z@KN80f0R@rIa%)Q2=xXf8RgVW7E+SVeL4Fm3sBvllv!mgG< z<7o}eo-i-cJB{aj-eVO;9g52|)ooR@3QrA+DoR^I`2m7ra=#BcwnE98DtUWH0xTg) zm4)P7tiFf`Yn5AWC2DVkQP~U=dkeZ41_@UK0Q@x+d7;P7DI}$N4d5xZgSk~6#kAD^ z7M>Wpv$*^c7w$pXe#>EuhSmY;C&dt*C_Z7V`DiW)*Ni#j@R1-bl1?A{5wy$;%5dJF zq|C3`a!mM*8++>p5!nX1lN;)H?M3jCq$GfUaY}H9gAbU48y{#6VT_t>ZA_|s^^>Z% z!Grof_Z_VWnDLz65_x2`kjc$@iob6OtO@y4rMe=yP8agdyGLW`tt5JDl9OT4rNnmh z!r-G0fSJr+ORy(1I9Y>v83>(J($f~r^CNcZR}3aKR#kYmer4Dh-R!vQ9HUfraX!`8 z-B0&7o+(lHI|DA3Qx7&lu}H@v+c%rxsiENI&!Lb1EB>X^Wm*a27_(ZhTRQ9o%CL_D zg$fFqLSGFndR$EWbIA3}MD(Ha)pzCqIvsjHDn_2c^p`^f&_syG3RoKNm4)fs70vZd zuS8S&RH#?TfoI8LOZn9%*s48!}#e~#@`$_0JCB4INq~t401ttPb9BMG6Mc|X#LdS}O zn`M|k&-1P0zA0K1eLcUJ{hBwbbIBGo^DP0h($<0VV(r{)pIK!n6~gXm8FQ0kw>v9lEI`3I3mmt*1F#R-J~bja<*o*KTi=qFY} zRD~XCJYy{UC!xg6@pS96xZr%m_f?&A{|FRoVDxRoe_wRk? z=BdTIR8l3N>>-*GNyD6yMWLW+PvrSBt#01?uX?360XmO93^j%9zw{^u$*4SRlors} zXH^$vZfP!VxUw;|wt@Fej}oeSxcbo?*1gK5OIu_Nhq@4(QC}ToP14U+ei2wPj%9Nf&MEU?mU#4ga6S${~slo{`Yh+wX-${ zxc-kIWMyvWXzt8tXlMO5!Y!_>C&Am(f{w(UPL@y6X4OH1WTL zTj~AfMR6D)AOmV3Ah!QD9usSTv9p((tF@iWKTOv;h7Mcp$N`*txBaR}o^9Jy9`;UL zSZg4)hiDLZymvg|v~Z#Y{|yU1b0xDh@GCl#u&*&6&zsz`h4%O2^Z+el1NuzUY|v}kQmiql zCgUi3FG6cvemz!qZw#(lNsUFBUz=n-giTaXlkID3A?S}IbBStCDCYY>F_O5UUfn`!3KO9W(UQVxjHVAF$cRUdk*YIshPD^K>~vhmVQ}RQM-&L5a?8A*p}w@!0@s# zOKU1i8&(Ob|GsWqTpb`~5hz6C?r>!os7~(6q>L{$NYGygP0wAlE`bQ%#_FyFJ0Yz; z1$YoCP(uyyQneLxM5~2SKY|k%3 zTa+Dy$EUNEhj2jE?{vY@Bf{*1Ad?D$Y`~Hcu7O*qB+|>oAS4;Qpy~vVX?t2`9W6W(~JO{N&N2Ui>-wQ)(J$^3R>?m zC3LDKhgH%X@=Nj+gE3;belT@{riEg5VXgxvjLqlAszZ88L32zIPmWe?p5{ z-bUw3N8e5kM~PfLMaJb8Hlb~}pn)%+m(hgJasc?(j?lbN)_%6vQ$=B$(fdwS3vUx- z8V5?3-D}IzkTq~9wk`N^256;l{jxRM<1Q=I{bD{~IwPU{Kvd3}RZw!RruX?;U~|X5 zYcl!NZ5hWj^`Uq_L#oBpSgoG}9o)z%S6tW@S}kx6vDxd%3PPaA&ko+v-P_qe)wjF* z?U<0t$l1;H{WY1E=x!A&{h5CWPxY)Z{p|^(cZZ6Zl)sEY!33Nh7Drh($HlO`a#T?C zCqbA|D&Aqf^w^Aie0`ACs@B!)G~azEwd^eFQ|C$fDiiHcIOejs^d=4CqtG~#^y7S>A= zP4i*A7gdp2tv6=SwSY+^y}A5gTsx&fz=+tGT>nsDegM)7G{JhJxyw>bg~+?PACY!o zTKY4N`gv5cy$QI%M5}brzv__I2nV0%aoS+;)H0ViXapkzJ5Eue6@iIu3Wy2Cy&+?H z9n&>=d?#0oRd%?7_8G@r!*xOp$r;w9OEO%=b)xwBxAcbzQK0PJ-kk;8TPy<;g(#qj z;mmuvK6u0>RWi_U_dHN$l_-7)nBN}`{wM^(ISRM9o}*zXS(>HG7Ai#c)vcW4*v9bK zzCi9>A1ZadatW7}g*EK)^@}OT~ zGSyh7H#?b-4!NG}ID=Ua-wWAfl_X_0IP4UZcgSFpg&kWXzmGW2PnRCDXI1&+`IR$G z8f0^jIC}TrCqocu*}kG*3gRf%J((l!tX4jKH>5eFv6@^6)O2+O(FUd)E8=-QWlZ!2 z*Iaa<>I|%qzRXLu>P#XMpN{YBStgl4&1w1?c5bliAk}_;hkuiAlp%9dOx>)dD1*Lw zZ)_5oS_dSl9VtX(^Bc6%!H?40=8Zxuw2B@*LQ)TZtj&@mr{tz|Tu*s^vv*rzcCvHA zwf}f@48{^4Ue!G93z8o6E*)Q;W{VLjh8c&0qiuCIQ?-BZTY%9aGy);26!^%ItmU0; zOG9N1WqOz4sx&QRkJ&}KF4T;>slBX%AxV*VY2Mkv+pYtFyH>np|Cp}%eUCBInRJG& z<;XvkiAHj8zJst?Q4Mc>hNA(|*rzfUt{Okg+ETTvU<@@JXvm(vaQ|o;f#S; zd$(0KMNXN8;d{y+wXrjg6 zHdwj-v=7a$fN;NNZ03N?lyKuZ6r7?8sZIcbuMu?dFSYe`2PP5FHQ8baT;lM?rkYmw z@EHZbVhxuzY^Rm>(}z<}Oz-;%P3FeAJ_XDA4AhCswHl**fHLDTlaKqw7Fp#T(w~ceF)BB^_+Vk$AIC@3(}nfeK6iZZ-1;dHougkO@0_Y z9qF@{W5>%E%dMNvW}Y1KW+Z`-6mqWGob4_I1e95yx<~&SF9e>MB_8BwBzuJI{*(nE z6GW^X%KbQ2&<=1+uYbJ019IL3wD(+o+%Yd2CHV2(&>`p{1+GFVwKwgY?IO*HV)z9( zz1$o*^SFsUpFS4D=s);et_XH&c?i1AP1C}V(x`uC=dH1|q_)3igH*>!%wWKQ&KfQ^ z1n*nt1A>$_1;5D$^~}9_wM1~Dshpu-bvs`$EInJ%L2k7ED3uFO=Ry5#bJjASbqb7V zhy|5M+4nrQ)g_JX&2kFwJEj8J5)NZ74l=5C4r@KK$_;lWi7KrfDL#pQ6o%pdNu$ z+I$642^W>IC)~Mla%51kZOE27`uknCf)9r*b4KZ_8JEJNH`$wjMlJ|=m=j7M z09S?I{ln)6_`jy5Qka&*JpWQ`Gf*HPhW~b2Y7TI-|4%~NqC90Y#Dvt1`-uqKL6(pq z00>G8n_Cb8C7;l5f9TYpwH=b7fiC$mm~hVOMd&e8+{x6w{^JdlOsbIwZ={foUsX0b zpcH5Hn=H9x13ZUwxJ1Pttxc^9H#L%luVS`o>Cpt?zgt1fG&JcJtk|1uI zTY+5JIun19YrhzRjmexe>f2n4wYBe0`@U@{#;@|8#~6`78&MO;66PZwM2=Z+be!Fr z_scu{NWSFGW(xeH(hR*p(!?A5 zF%!5|rXHT}`Zgy0tEL!Y_gxpVtG&lBLy9Se$Hdrgfh$4_!T+V$L2pTx^#TV13PA<} zV*PL5!vCmz>>MnuP5)g*kEXrDCI`|t0nyKXsjoDXq%ipAtW#` z(p>u)mWo6*leWu%-9+#7R0{1?YD1F0aUQQ*E{r_Eiwmwa5Lmiq9E;;v5%A)6L9!LquLF1lXe#dM zFdcN{Cjoy98qTvd7pI~<>L48{JW`2%q&z~ENd~2?>CovY+J&on^sG-v0rb%+DPZ8E zm-+H%J2A&eMkf%T(eFuonZnl4)7OAd=_nqvOmyj5{hyOr8pNSH1arBWkw3$>r~tK? zVim1_>VQDrwZ9q`$yhO-Atzr`iqAO)k~1~T#$eb&hC)yYX9{D-xcUY*S=Q;jkbYO( z{cea5D*qd~dXCD+sS2w-L~5*H#LS23qM zOw%4ANyhLH&-UEvZ&Es`FzQWWcL^I)^J#sXC?rE*5w;n)Hrg@v3&gNZaKfj zCD4D)c#{_lVv9Uv79X(>V&6>2!b6B6jQp6HYrhM+8!vXW#aP9veI8R=Hh?9F zP_n2M1RO#bfea~$8wm@tcJ)TzBC@dM??k)bGIIAlTkxn`r&Xx^L}h*`1pScxuL{(Q z;e))3Ht9On5WiUPG7!@xN2er@e#cS^yAyqr^x;&^O*L4We^W{>%7HvxISI4XE@`33 zX-|zM9N7pS8_Mfd%SMmg(6YOZ!=R~w4%UQ2g^(8ap6seugn)b#&diw;N5-qkc+JRH z#EY-7R8;{(ZDD?DuHb0!JMd?ICMmIqfl#0Lr6e$W(uO3AG%3^h)FmJ`%x1xY6`8il zORwj%yr1mNVlNI$myuF}+)T;SoamzowAs)B8bbQJaYVhU6{>CHI3CY6!u?MI@Io6syQBa+iXZjel4V^NsEp}3vh~0`Owzc@ zKnbYmqkbipl**@h!`-2dtVxYPXS=0SR%4}D7<>(%p?PNXdOU)!-U=UE)<{ZEVG=Ur z5D1o-bqO+ryu4a*TMyOB+B@-fb-~}dCmY%;bzp+()a$YqYGWbRuGu;Vzqt_x^fb7q zY)v*7Y~s>H8=2el5Fnt6vuP`Lj^@7zee>Cg*oNivNCgn2z4f}^B?%$!5;91r-blBuV2|!G^?N=wz80EHU zTHVyex&sdSXL`Fa4IyuE0~b<2&SOlUtdl5nfbo9ADXM}(PAjkC>cmAVMCQ!Jnj_eU zts;5!rud0ZfR~s_<6hF<%S@&qdBmBRCR5cCbl<2%&MGqTE9Zo}K`bjp@9`nc5}M(g zNQHrYR*Ia}0L5i!!r`&Xo9o~90w?3i4iYiFymF-?AA7OdWI_v#^o^Af!A`3J)x(bq zXCK3Ino?)2oVv42j>M=yZqx{Y1;K}s%<_DZr1j23!&Q$ zY0}oMXtyhy#H##VGd^`}!b8&Zw=?MJTBL_gitfL!BiOlLk9IHq{@<4wIg{HNIaTp^ z?nI#Gvfq*;E!O0>YaFj|>y~TwNhc)I>Jzr3VW+-R@*TLvGF0t$^bcX5gFOhSO|y67 zQz&?s6PAQ0F4msZ+WujO{@W6buE|H0>pSe6Xa;p&^2%qE5#4!lh=@?13X3VWUum)f zO%1p_n(6A^pgQ|8gdg!6|HjO5(ntw3)Wm=1`uv+6+0+7~nAl+GCIlWoETCsO`p&?1 zn~hPDf~-vp^$M!HZZf$}+zC5%yoh7L)dy;(aBwVR)$H5kEO?l<|G>LNKt6RIvw%KY zs#)UZqLKHZf5v@3{Vn5sdfq+1Og4j6PQA=yzUK^4*TWfjh}YBXsJJ$P-~SXY4RSG& zA>S04)CwL7iK&zJ9$JJ)w~hK!F^Bewc{m03uZuK(FE}n!v84-6V!uFx)D8yroP*}@ z>rZK7;J(#Tt?(9;dQb)m5~SQcqyX?f^Bnzmr(O=7q!|yn0=4t6juGK5TWAYiyHJJn z?d3OGdq84U;{hOPx2&7#=+8H3A{H1Q(x#b8p)p}MMRZqn_B}PBhvfG$9?EdD07v-e{YiO{WrsC@#1ph(B>IL=&XI{EdSk zk+77^d+MJ!MNyu)J{j5dcOEG>(&_czxZ@4nR^EkS^;)(v`){RjFdY`)kU*BDLAk9` zCn0Vp?pCd9xYa4<^@~gBd5D4$2vhj%t@|nH!KHMw=ebOrXzeM%whsA~ zXe&TFKiI5xA}onn;0Pwn+JC7dc5zcfhbdN{($Y41G{h^Q}oMd6UJ^vRP~`Ci_gy_w6J77+>0#+s_)ADgC>Gjj2_oYLIsfIV@T zzlq)5v5JmITaOgytxON-nC)X(E*_hAsL{sX4L~*7RUR7!+BuAsmCJd;j@}k@yg09Dn;N@d0KBh{k_{n=+n& zvPil)fvY<8R}(_`Ys^&x-r@jaCoTOsP4Z6C+1{M~JnepVAu{Y>6@})A z#E{4xaex@=r=#U6Jz z?}Pky;i}~`ND2wIIt=F;fwHndM)w8QDE_J4?tb^RwdMXbCRE zfcx!YnHd+J3jzML^ClOf)=-al*%^bOtc=U5!$49Hoz|j4AZlElA07b-ZU$lw#0n!@ zgBa`z>%0->^_lwgq#i4Kc35$i(kcJ?ye74-Nil$|MPDSN6V=$ zijI5{E3$7dHct@iI3ZJ!eMHga2C2^uNvRE#XJg39R0Ub%DPk%f_|-6%dn@D)BE+P6 zf3p`opU@A;`x>UHkt}iou#(p@%%`JZgH9|#dKm9an(AJwMQhs~;otc;a`emz`D^Mw zU7(0$ujlAJDy|kyw}Te>Aw!tCL3n`9*bbqPkcb*5r9Flvai|I$W7ifRG$qg?KhbEG zwJfkKk^(pMkr1`=NuiI0BfIO7Hi771Jj8C8cNJ8Kk0?B@8Ri~>=yER%2FH5t09aTY zF!)nlHJ1=Kcke&nr7K~XKlx#$1a+LB_OWuN)dm^iy*D0k?HAzJa+{Mm+nYYwr);c> zk{2F&AKN@wy9!VGEH?!NeT-m#l*l*pM5XwUxjsWnLjjfOOUfM>tM_}*8`o3rNIl;K zGVWdNfQST0SApsFFo`qvCy_R~I!}Enz2g~>^`#mBL);<4W9iE3$Ziv`JhcJ%kj!WL zngU2yyQh{&z&1%`KUPcBTa117wj-EZKA3uuxf<*c201|M`k4}x!x{IGat`yd+wIoDTF7L;*Z?GmL5t|r#6t^G07@dJk< z4|eZ-zrQjcH@<-r1Z!r#!T#QJ|K*>GFm@KGi4i@zHNuT9dO_VteZ#0~zNFp>>*>cM z0MqN*>`8q-CVlytH>8(=)T~oJTC~tGG!=aeG@N8Jc9#511$@mzQDhEy+hD1|Y+CBU zTFFE_n-bBUJB@Y8=8RrW-GQooK3~dot3zIZt&fpXc~`UHd_*`J7X90k>_NnSd+hPs z`to1-8eI8GSh3tTU~s>^{rO+^9N<{>75+0w6#3WXAp76f)~@C*t}g%c@USLc7zTtH zPW(0456#~2Z?)7N`VqLaL zn;@1F{2Vg-NFMEoT2>Ogd$x(~HJVCZ?|~!^nsHc40ehO!`po2bRappCLR5u>vI;A-{kqo2BEDRdS=?0d zOx0P^c{Fc5Bthwg;KTkr0k6Mez3>ag1*_tCxvO>l=GH2L#ns=I7$4v-Mg9X6=Ex({ zq(Tk^lP*M(LfWc*5v6J-tG+e$ynI|+nsdR#CIBQ!HfpGKq7k~HE;1ZSYXwE|MB&W6 z&AaM>c8kzr^21swF|Q4OFy8mZl*g&34VwcoA~ZaefiF!Fo3!!BM;M?WQa~dp0Z}9MHSh^f!71487HF}uzd4~moF@jxAF{+^$n^dS zyV?ELkcu$GI46>ALOBXgsw&S&NDL63C?Nz5NveVd_kTL%>N&Wuyxrc^gcJnT;A|Vm zGDahEB?6X?#RwueSRW#w0h@jMZoAq_HBS_vJ^0^SF#y#Yu`sPYkMkbBeqL6j4& zh--lMr&|X~tBU?C_p_;fiyfeq7|=R8|5o;ytje?+$uKB|l%RpfZyCL03P&G8k6^X? z{)W6W^s`?#NQ7Lu&-EfyrNIB&`~%*!yHK2o*lrYvu6eQ})`zMPsF5_rk>$lK(b)b? z|Gu>Eys&oiqgxsn?U{^2@>eT`v3F`gMAEM2+EUJt7=FT(yJ`V>Z6O#9t7PH=OonFA zomOJe6}&KlK0s5@e|SaEzZ=}%}%l5;2gtLQMq!@&XnpUR+#lsp0$En>ABBqv2$ z8)yK|_mkwSY6^8AZC0ByTe}@~%)XmsQ(=~DUB%)7+2?zKtc1T(&fDR~iyTO)(<)L> znTi4LUeUT>xIaRO=NRyogjm}xyDvS+t|c3+pvPGL6jS=IZYK-GwG?Na0}KD z%2Z*wKT2#BPllgZf8@DHwZO`?E|sEpEjT(WVz|IYfgr<^C98e)B&=hU8Gxeuoy$^$ z|A^O-YBcARm(Jd$KC7Dma17KFXJa_uK!H^60t>p8bs1&qK(o-z@_&S#LtcgH_u#(W z4BqE{kodEKe5gMl?*>|=A2Tl#2#I8-Kb9=Y-4K=_AEMM_IeH6KXlT*;gPem

8JPnA=m9#jxpcq%asRPfz- zyY)z0Dy$pIwr^;@#YV^Ilm8$x@U1K28kP7!KnYQ2$Su~Fl(ycXo+NC*z!~@`g(m$x zkR|(E;eTF!-Oq=>_YG^r_><1bvIIVD$yaZFzlnPxL{R~{jwC^XKMf+85ihX0R**#Y z-=Y?HXr(=R7fu(@IB66uFyGp^Dw&Kw#g}vBL*y5z+3ku4t&BF&qSUrU2pY*rXtXjs z_ivC#=^7V=o|f0uN+M4|vxbYK0pK<}-?Uc7`I`g;>De5RHB;bhOPtIL1-tb9)===o z2yNNj(ZthMgY2F(&V9FW6Wk+~L`vn@Gv-BjsVN*RS-Cb5<3+&gSOhaJeS#`HB6dMc z8!U8)r~Vo_-}mRqt*B9bp)dr{l|I@u>T(i)*u74~JHMh@v0yaio)rH2ETauANg8W{ zElU}JUP?@udmEo{DB%AD|K5_WEZEvVG*ap*cX89j*|F4+EYi^S-2i)A4&3Xs( zV&3`$ovQ+Z=3`Nr9bbxrjP+h#A~+aK|epspg1&P*?O0j#r|!-?CSGnpo8;!e3nC>P5&M7n=I)@iV?u`v6-j&~hqMC;J=NOvGZ$@>^}u1g{KsZ-Cil3T`h$ z#C>taL_xsaJr=p)tqY+Q9vst+7Yah&!6VOMLx}wgB5*pSraTrzY2sx=qvvErUv_l2 z+_CB$Ii!4m?W!oaasp+D5`41S198=dKT)c1lG`pu{bd2unjio3B4V?|;NnSJE> zgwKk@CuN6P>PQ7O$uTp|m_!%~wsxbTf2s`8wfm>NA)Xz9m^jEn(+v%UIs%%hWEzA1 zjMXF9D6lTRx+CfoO)ksb!cf+7@D^1WRmp!K^x-RKNm;S~U@*a*D!{7X%W*H}p2Sw# zn1>zzN;!CA;VfH318M!R9qOELSV!>25-L{45|S@wDCM`pV%7i=h_*Z0Ai6h+Um>zb zqSzK-AsQDGV?y}7bqWWq6qFna)mkZ#?iDle_pr&1zsuaV**bK@cZy=1S11aROj?%% zo*4_OQPVs}TG`Cb!v~i($|FSLM7(!E-m2lcder;n<`%48+IzWGz;G0gk*V6^{zKaV zF9}qDEZl2yRZt2W1d7s28gt1Z;E2smbcE+;?~s0{Z`M>-C3DpvOP>yCQZSx6fX(sX5BxLfn8!1(K42p`7k{s(N->E>1k#Y#Pf2g$T(Cye3n z6XSyLuMHsLZG}ag9MfyBTj$SZ#ILy_Zj%jKMM$I!K4sMt3nb%yg+Vq@;xlz>cT`@YxVpWG5*YbNt;ud}qb_gWnmevxBhVooWMLC#& zP>4|ag9AxwV~51dq$X~|jxx>Xv(_96R;*s$)cU|b=u##RX3v|NR3QahyT@B>choSK zs$*#%RfyJa^i1mbKU>24UheE$Zm#z?ryCw;UjueA57cUe_C>4bl-FlWTt-{A8RY4S z_|RCWEI`foZUg%>jy#6bdR8tKW^v@?%M^E(aE|u2h0o?|b06@%Cofq))JBZLuTXyX z&FxpZCq_-c9Q(0{&qKP?9wy`*S~LR9g%Qmfi-nGH`xU!d0Drf z2c8rO)f)s2!v%5TKXCVc^sp4nVJqGw<5mW3{$5Msf)~DsMv{SZN@fWFN}eV}quRmP z57WE*{j?em*QDLU zY;Qj%x^&Rdu`9^sF>%|LC5|No%g%4HBk8Sle%rF-RaA8me``YMFpP347X7flpYFGV zvaA@7oz897A2#8oJ#NS?$+RoWo;m^|HN0|dSf9avlMD5Llwe&eHsKY=T!Cv}WDeo= ztgRY}SjKUbT~l%032i*kL zq_J$pU%()EBUH(+EVv84BWU+xgV4X(z+_YF2*<3=D6K33|3Zhlt5bDt$5!@m{!F7k z^(a`O$v+!-%7SoYkGfvxFHO~?th4=o$N3~ZqlUEVcZsF7ENsDjd49kCa2>i?KC^7{ zECYQT(`QzddTd@}Y zDs>+&%!>N-cjZVt3nuc?E~CquCBGiRHT2<*t z&LRq(X$d)io--d6+|4YO6>g*(GOhysFohX~l0sZ&Wk`{iJHiIpf)D>Up zN{VQ zGP8()fso4hy6gNZ>V73AIl*YdUu4#z3pzqT%bgrN-$tQLZRo%3XEP3yAb@1*R|+^+ zK*|1=j-_Q_6(1w`Xa!alYb+8=UL3Qz(cs#!6?Wem9y@980ch}7+%PqXGY5gDSs8bp z8Cg8kOp#N{TLY0T&jriF^>>Cpu^=JDMA9Le=k5-$%VhPWb_Td2X&!d{GpYbRLM@?H zY*S$l@1IurcREzd%g!_7p=$_R(hCDh9F24ZbY#%u*R7SkHPW# zE!=Sod93_T$TEC0Bz@3hzR{|`1Syp)XhTKvz&B7!h<*trHt1K7u8{Yfn$~9{U5ZKE zi7wN=H`q|hq+KJAXHE<8X zzlf{0ltG~{0lB41VM&O4QLc^Z0sfjztHDu-oL)79mpNT0Sx4do-Ft8g2C_kiuX&)} z<>;cc2|Zn`5LmTzBe1Js&)0^4w8la|(O-PvClcOvJu;`SGk|R-7vvf|u*628o@L2A zL{&);P*Bt9kKOM~jJl4`eW&kme@Eb3#4nSFK7S1OVkv}t!OizaBTLIWyRs-af5y}w z=^M$3gvjLbnr(3d??}#TD?4@M0r4!G;faL{xZTQ=3f0|lR?(%U+&E>F1>1OBu0p3~ zE5f)6KejsZxA z(6ut0_KGbt3HXgZD-d4c$tX6DjkGV$YF;H9R+6ePFekv|+Wxpw<40wL`F_wNeKRop z566@&^LJ+~yjvoINy9VvEF7{Yfh&=@&)y+!I+nRB?>mb;IwS*s3e{{kG|{&)y*dzX z0%QmLRt+M#yV-GSR3&Y1bfUWQ+*~ws4~K;yrYDD(mu*_*mu4o=u69V--xs^^ci!eK z%P!$x(~iTRjSqJDl4}ql4a@2YRAH(D(}H@06&4|P`AXuO(?nIWzZ4W84Np^s9dcE5 zPE-7|TYm;#>#dHI)OS`h;|*{>Bmq}Vd_8$JPnFC&gXvi~Hb4S>gu|zZeev%udeID* zzIFEPvn`FYeGa=OAy@Y;7VV=U2lAVrqqd2p$(Dr$T89@|P*((8MVU6j-PT) z0@Q7LM}6uBO6Z1C{x$!(Xi*kSyWi%@S5;}hS)&eN6nPm!XBimkmtOVSN_vR~u+XnU zMLhEfuP%aCF_d#~y+S8ePFN9e2K(LkuxX>I+{vXFY3?3eOoQV5@4I2ZW3j_Qmi4XI z9qFxL#h#-jib(^<2t^!C1>syY;pUJG_jPJ9!y$L>zvsihNN?}9=cPHJB2(~TYW@6t z4)6(jK34lq`_DxP0uJC_5&iK(^?KiQHonK5azq)BINg6aAU9+)umK|D$2cDz@nwMm z1ggfc#0AJWbNclJ0Xv;X35pcZy-`t7%AV+x4j8AhLW#_CVj3o1RKgsqrI&DEbkmz1 zp)+`d~nPA5!#y z2@b)m!`bF|B&uL1rdy9fk5vFmJQ%gi;K+-**D7a|L8VH)ff-in@N+_=#d~tE(e0Ri znr16bBMuoV^N*1M)>&66Rai3f%$*LX42XJM7{wM<(Qi6It*-Ql&vm8IvtSEGoa{zrW7(oN6#^MG*2Jh z9DDvnU~5PDI@TRqM87H&L`r7^LcIK|K6NbG>4XX48@>vqaH0->;55sND9#JB(^SW# z?iA2uhGdY~OPIO`9y6)H)e$!FqXT%||AVr33=*x|mPE_;F59+imv-5*tD?GuBumb7badSAFFY|L_bJPi^I*JteQML`D?);7axV z`|Cy^0nInTsI~-ZG`t%pmOQ*Rp2T3??;#m>QF{0@&|yP&C9`I`!iW`zJ8={ zqrU8bc~s}$Pc*Xkt@TfxneUZ#UY;j!9{1<38Q;7UG$_DzakH1C5kqs@NC!D#Q#mr& zLK%j_RsxpENLG{pIN@;=F##%4-)E&=A zk-m5V-H3yFiVZtYTFGj|j|_Jr;t4#5j_Cb);SGY%ayf`462;dd-f zn;?BSk+>)8p>{y><0L7ER>|{~tXDp1%%nl6DO_qnL$vn*0kj`9inkFA4hDM_Qws<1 za%9*)tRc*PpsNSWTL3cVvyI~elcey25zvN6y6D42NrsY1*lmg6g%{Hn)(&khuvuky zDkYxhk&eX+a?sp`=I7r)+xpb$KO5K^5FJ&50ytZ60Ladb42Kbhj{uC)z?4HL#bZqo z!e{nMKy(@*X_8gmc0xiv>eta=1s*A=9KsTk`-2A#ufN52?G(8a25OtAx0nip$=KIW4b)4CX0ojENmyP8eGnv4i^2ekS)B5uj^0^ zbPSxWSnUG5A%`(#)-r;9y-doIV=qc4iUlDXi=j)qcWdqFD8;r(Y3{O=tQ~@fKFsxy zNn!**>1wWe^HA_G32#uJ67G0magh@!B|CoK2ac=4p>OU?u1=C^w2~UX1gNlWFY{$J zyZjtc%1d8dabpB5%P%*_B}Q%|%vTN8voBB;M-Cc<9vOVoxBf~??g!C4A_hA95$uc*mAn0UfWIvDkK) z_zv6LNj#o-5OovTON3N&+Q>TO@&|D0`Z zzh-Ev{LE%Af4u0_|K9^aXCrGv8+#)|9S1{;f6i&;I<5QY5w?g9aisMDz!+6TVIcCL z8XJ%lwaUgAr%3F?JZD$)4ld8xi7)41ZCsu|H{F23<*n|N_Ui@(u%&eEnwLwhO03n6 zg96gh`?aY^CDQJ_s=^BA4Utq+NI+sig(EzBnNLTi)$?jo`3>X^Z9)6IpIIAzu@goI zwf~+W)ip1oQ-n($;S+{2in(>rQR+0qqZJyN&4u67lD^FGt?$QPiuwzzz6^}#fp0fW zQ!qNqPog1P2YD8r%DMjw^)A1&mYKrSqI(lEkC?8YK33Mry=~q3M-<@o&OVk(DH=#< z;7KVt*vdhGa^;qbD*e?m8`Uw{p zYlNYWH}7*;oRj6h?~Ea`vprdnER7PNL>?$L4e-m>DoSFem0&2FG1}ywy|27)t(TU* zd17E3(8vn=^M4Virv-y)II?QuQT>>*v0(uK82_US`Uw#*HZyUu*K;(pvHls;Rw_%` z?6V?tf{*y1vxATNRT6tp!nF9FgJtNt)bp`w<&s1BB@Z!LgdvMksx_PXc!cCXnz?Bq z@AlTb1m7Fuh6rf?AvU0mchg&%$D5j_)qOMWch?y6EOxD9*by;!86YBQ)Wk|xX;qxC zr2tYbphy(PL^fBXLkD-h6~WD$K^GvZEZXUr{N zu1SWHHxXd>GKyXRMI$06j|Cz~UaUgN{bmjp(mVKNz7Mm_DNwqx2Kx)rd}IZVP&sjn zs5Fs8dpEe#me80mSVelZ5s9Q7znrhl{JjihgXR=y+TIVZn z)dZSM&Q;_n?-+5OC>~8)xd3z@nqnKu`0{!&-E$6J1z_0fsEM;T7&9&Ywj8@L7{jt< z(q0Eb1MlsETPiZ4T;0eyc8(Cm{2CN_ z2|fLnY=tZ&b4dyXS$lMy_pwEXj0rQQ)6sZ1&l!CQkasLt=~617@M8+oAY+|8W(Be? zu`E~xbKdU*ek@W#kRk-;zxUu3X-;ry4B^#K`ehu(g&L*}seB2%5Cz?K7}jd{MxG?~ z&|6|Kp z>LrvIE>PGf;C%GKr!k5MKv=0$(!X-7gix(%ngtl7tuCn~pgWYrDSaMPlMr1e&Ef0( z)iYw7Zj-$IXIuIg#xK5S9yK#}792a0zPF_}3pSeVWNl1IZd%r^%xyGSAnubrxy!wq z?!CXbJ(BO+MknC*P35HFYB>}PQ1 zYI&<1l!zLKW;~TJN|q1WUEd%B9CrciLpjq0#KtvQx*Rg-tQ%}Og?P1=ID5{YQ_3B# zqlUeL;7t>pxHPy|#l?BRM+wQ!)dk&5U69GIlY#pMyXM;Yw0)lSq-4qYY!|;Zd9!JH zR^iR>-dVEs*(Otq)(1ix!g&UwuK)4BXm`?oO3(f(B6a+aFJ=+}0N~GmT6+GSU!r5- zq;F(zZSP^;5m6gc=UY_7#la zDl*TVq!=-8x323vY{DLpx?R(`9F9Su72 zq~%S9S|L~xPW~bDkZiHSid~kg6~6>MQhV0}ss4#QJ1i>`?$@o>?v535 zHGd9eMeQAu!u6j1>t~y}!*;guXP2BUXT}SQN_vXsLNRg>%OJG!nCFf@e`rlq>>#rN ziAqa(%u)>vhAF5o6eUR#vmBb=L7X-0?HvGbT6|8#icA5S7EQFa+R$UV-undm>Xu0r z<<@*2jZC-H0}R2_NtNVO6@$`K!-oB0j6oc3GTx`O@b)qKtCcy+<>@=W{-(}ISIhaB zNH+F$TZjv6bj0;&gS_kwO} zb1PY|E8^@WjPV9el19C}%IOp|wcZBrwQkX>OG&8=C~4A!ASuOafGCll?1siMgsUVj zTh8W)cTToo>J&u^O59%}C$J6aVjA5Ty!1j$bNIz++d167xJU3sL--IDC|%)-bk<+7s#lCsCVPHdAmXWJaB!vQ^N+a4}wC&fFk{B}@_#;$Xzg zm71p1!r~C$Qaay zy)W}L))oq8gkVTY$8$k0gm6G5wi&MKWE8%VQP3lptKGrJf7PS;Jeq%t4$gMs+m&rw zhiob|ZAZovr}a(B=+3@drI606lx#z4`EzJqhtfP=Jf6oxHVw`lRa-URxu=#V3y57B zbzlTh;1rfeIsUHO6EWoBxyh$ZyA*)gDt0^B0pKLB=@;c5NBZD>$H3N1xHNFjT@T+D zpJP78cogr0P5zy}=4d||#42fsj-#LQaoSxR?E+5c_xuxeR>K+Iq#%yTAw`@umwK~- zr{wUGR)iz-Xb&?PRQxrv6LuEr-|rti!h-oEt(uP>ti}sTj_cu$=|#Wl@bYa5#{35+ zu6S%4g>V=^S0q;pO8t1F0hSh%Io0|h7%f^k`y4{^9*_(OPh?9ORt}8 zCBZs_`NM`i-Zc9eF}0>ZdtQ0=yi8t99jW>wndIn`BUSU4{h@UOPCC&m!Ai4(5Jrqq}kAL+=L_V*=-dCZ%amw3uTH;%A zlj51G@yhrz0sPkCay=p}Lb*^v&1k}}vrHJ19Y;=5EMcu-S^GFt@}KaGZ#_(GM?jk( zn%I|L1lUalVZ&{Xl;&iImJ_>??S#Kd@Jb8fQG$+8DIhd1{A<&_A!}8-4-{X5(8fFp>NQPneZ(h z!wI(nmHl!vs1?Zd+Sx~kQCq0j!7k%QGtT|X44ea?z2gP`pICtXF9Gw_Po2O0!2|yp z7H~GQcldvs%-G(4VFAJGxI1{FmL5Q8>rUH0C}pwYR6%7f!>hzq{%q=;4X^LNYs23F zUz*zM?~OYHcgNa{c>~?=6HO#6ai2(=O|C?0rLbxkEix++pEN^OQnH1>$E9~?oKl5w z`Lhp%lhTuQDhZBD`*tXi0+VfdygnLHXa%1MKR{I3EZleL7y8<15yX_^>OIi6W1*(?kTkv-6REaCZL?~t zApMROZp!|ZJ~}PEymfju>yu-WGrVW-?$eJOk+oK4)v9r@O83um)1(ULANs*h+A#mW z{?UJ8C@UL7Bg=n6Ddk@4b$Xbe9-SBABoB7xsBT3)u2>@1^dD9FXMySZ3vd&P{ zUitfzoHJQr*l)jyWAMNOS*+9K1*RoBXw8#C)Be%zH%CA@{QIkU^KZJSl>#{07no#! zEGwrya%+35)L-h8yTalne^6o6nKdGhvpwn9DI*w=DTRS)g;Z&?({HeqLw9>S*%8Y6 z4urpju6j%_@n^vdqw=`8jUMxy92ok*P~?dm$J#b5ZuacJ*n;L`OtoM?w1FE-TPYN< z8e(ga*s03SG_m&KwGGCa{Nao#gMIvqG>Al{f&}HAM!dLpi(!kWdEKAq!=*?WQ=^^2YPYZ}|4J3GAn7i)^8C>Ef%Ke;Ji8@;C~UwQn{#8s*Ra1UAk z3)7I5n&)n6!m~=D{Y7D0qJ*mA&Y9lQaj`)>C_Avqkt?kJ--gq3_YswA^4;ZEIQPS5 zhL7m9Extyg7Vd29@v2XbS}C< zAS)!WPm$i`yD;~a!K*YUi8oaVK{CGOZj@y6d6&%Uxq%F|^yblM#`}6f#019h9q5m$ z-s4TSp4Y=TL4_;wp6#1i!$*CydYo%Ksg>B%+K+QhtCQv0p(=tko1s{qUUNXKL@)H! z)dTulbD>G@pg&YQ2xlWq1MdTio1fVoPtWU66*%vI^a-5s>jIvhjgAt0iW2@eYQdj* zQ~>k`xuQb@07(5O?c;xc7XKp!@Bi!~b^hD?KKb*({2SEr!gPeJ{8>8A@4;16gA5#~ z(_6Jd6Uv)e7}2MS0}|u7-F6WbYw9@7P6sUupfL-!G2ZGRc!X>j3*z!Lv$}mPUeA!Z zdF`hSK`lEf7|d&+KV(vcs!EazDtvB}OIOP~!1gZ#x;Fgtm(Od!^9q$0I(kkQu5v;y zfCe%7*4dRi1o`$ucbgjG)C;rni{F}$$|z43vurBl;z7}cul>M25LmoGkbLZmS=_cQ zjc-Q1k9h_(j?7h6kNI4-)Wda?1*9IRttv3}t zQCQV(08sDu#)NlQCt#aBHU2o9Y0%*B@glJDJzU~)yBpgS;dOJ!A}d)Lllxns6xxZTLC{UoK(m;#FNsp>a`f_f~|J^z|W=-w^r&`*xpAg5GihER5iG= z+>&66S=nw_S*lV0wcqFjmA}DTbKT0WAZXAw+{x9CjLJ1jvv+8L=^|2y%GKMp|MqWC zX=vw)_C!Go-`U^cpcv@BsY7YU7sRlid}fR=h4=urt4m$6upEXOdkbwI_MXj$F3Pos zKDsUK8nRf_@eXyqIUrw085rzB%ET>+`#=wY$l)Ta>u;++&~}}7tq1Iw-iRkE+wztd z)W{#sTR2H~lZ|=ME4xtUzyjq#H47?U4n?bvQ}LbjROL@hR|Q-(l^2uy(b2D#b;~_r zgZB1y=68>hY|Dy?1<*zJWy{aWTYMQbVOefSlUJTTM?mw?*aB+e5dE^!=`a`Tc=N*9 zr4-Az#UhKLy(ds{OVv#KJ2(>VW~0f?#WgH;AX%PY5;(Ah@Yxm3wwZoXiMUqHexEmc zY1W^`?bsrJ2l`zMU6x{^)=Ww(fek zj>Rms7?JCu3MO`gPE+TKNV4wwzUW4iW(Yp9&l9wDPjM$K|6cN8Vtf%Fy~zJz3kNaz zTkBo*o0oJ+9Vdu@Jw5{~G6vtj*>P;{q4QbO5{tmWXkN#Rs)I|?nC_=i; zY@9>iJNaDzf!8G&oV4uzoL;oAge_3gz9V%hW3k#!{Nr(-rK-hcwGyqD-m9I|u)=M-`K!3pc1`C3_4#fLd@SU08n(6I$FPUb(CxA< zpd?XDUPJ4D`*gnmhd6`~7Vjz&f|3AM&_>LcBVI8a^mW5sJm=@*axbC0d3BiUVLV@b z%BpV6mp&9DRvl2jF?x;n&)=}c%=nYT4^$o2`wyA2|E@Rxe*VkQfW2Bxao2?XjEq~&sh$^!Ak1gqG5Jo~BXM~NvI8$t^4y`iZm z|Cd3kaHdR*sUU2)M^LdbW~!<#tJkw$w&!avKHQB}ydQy1xmA`{B?pIO^oU#Xf{{WM zd&9DlnnHHcVCIh}7%>Y|zCL)7jXI0yW}aG4s9$~#m7*L{hsplyK%Q-SRAOiX*k@Qw zIh039>nnsLbHQkIw5&pm_Pxi$b!~)?#EybUr9$@)L}cBDItXqTJ7F;molZ^gcr@=w zv=NQoazl$g?CK1Sm?>2anUU6hk3>@u8wQMIL}JIJZ#xN*8)Rr*QZ7B8Cx*R+aL#t) z#r3wv;$iTN&U*T!A0w;DHIg#HJ?tnezL&K3K?e{Rm8pKrd0WNxwt@{S>;yGTNlZd}1Zr-A?PiXhuR>65zl?=g{%kHJ zMJiUo^-L~r5nNH21HF0LjDo2H5H3#}ULG-Cu7y9m3q~5f9>=d3n>Fz8eAPCL^dRS# zLFRpMQbNB@jJC9_sov#wQmMRsap0;!C19(qXrWJB_-Xy%KZM4T#uGyRJUz+oV1@BN z+{(oc-wrir(A@!$eFj{HOX9K!qP0@ZG<5Za*u<@umP|Gq%` z=J381ECJxl;vy)fpVpiKjk%ZZ9{hVo7Z-YEmVC49dx}2WX?J7R$OA|$zkK9>OQp;+ zb1kdD*KdW~Uni?uWW@_O z8PpMECJT8GL-9jf^dn8_r4iw3woNby2WFJAK(gfKc5P@SF~DSBLv z9)~0i^3q;7l;FJ(z!l^Z2hu+q*;B4@oJ#_AX9^7xfudBmNwNDc?E4#4AC#oE?=k|w zz?tOQ5Ib36IuKi3da^%S?N|{9bwWgg+Pp>Z_01sCCy6MampT}h&jaV$q~koZbeV~1 zGIoy?E5C;*6H%j|ne zz5ny@P^PTUMSX+{$o7W2Csrq0S0))zT8}HNv7y%|xjLJ{aXT80cALa?%G$z|-DwRxxy74R&@?@a=i(l1od1;737Vf}8-RyjB5vlhpk*Z1`^ot0v~Vx*G!94CF>~&en?H zc-hs;9Ms!4#i@GZD=aB|?k@B%OweD20NGR!fFIES<_T}} zor(XT8541Y7m9F}jYhY-#-4J(uiX%<_K<&xy}CfwT!NQX^%Ds<>c`qc)ub-+05pv zW||%CgNQgm5S|8v(d7!zo=1Pj)&En%0P~Di1dLAQ1Nl3AN&7b(zGGWtS!;b4R?m?W zX8-Za1P|%GJIwIZRReD{e_qtA{D<{ws0E`4TKZito6h(7cD?G493Pc)y*#3YAXw7{ z&u31f^@1Yn!lM;uibg59bQ}ST?rrGYf@Ab1?kE+w0Sx^y;Vaimhs`$gjH9|%J4*m_ z-@vh@>-?tf4saW3YL?SO5iR7HgnwqMXg=urH3$LB>Q0ZxrS_3NxW+H|9gLdBR*(mI zZlBW2(I#Q$8$3%-kv>jL*)QDS>|0(jy%crDc0ZUtRzvo#r@|qagJpNJDITNuUS1~Q zcfP1ml;7AkQYw<}%G%ufJ6{SV@AwE5)KJlBQj92dE=_`D%{S}*xnC(Jp}Jg$A)Z8o zkjix;UnY0Us=F7m{zs`O34D1fpnPDN&|xXzxvI@jMzmqv59fFVmYo+iF%mqRPaw1^ zr)Mu7tdmp)C(E1(_vfNz*Tsx0H9^EuXgzcNbuhu3?RZ2eXMKPa_~A5)bzOp}zQobD z(qsNziTk+S5ZwBQ?kAe6AXj`(xW&nmsNQl68=@HDt!^+M@erX?vn+)bbfZa`9iuvi z(Ym`XznWEDaf6!Wpgn*Pk*u!cU$KF+t)fzfXxEoJG)?3qaK$4(_5FP>kFfIoIE)R_ zHktZ9K6Zt;LeHKe4D#ffi1Et)Qn7DS~=!emV5Po<${6i`@Q?GfqP3eVk^ z0N^)Nyz+ER&T}TyFb5sYUAQO@QF#W_k1I(A0nAphi-t`4TY4~uPKb~5#Fq!x`nCX~ z4`QeX3K21K7O1WG#Kp^c+iFxAUs#W1D4yllun}r(#kaJn-#Peb$ka`7r7D$9rgrw{ z3c~@OOIoj4?WWWsFJaJ96xvqO+D>6=k(XJ^Opc7=n&G6f&Hf_8mWo~IBD#$!+!?4u ziYs_Fx~L)s080wslg2(?)y`>2MA@#K9lx?5*9;2c6NQmlMP0cv&Q4`rhYNMFEOm3{ zY+Df^H=bsq5KfPy^tUp_T~__peD6@r$LPg~!kpGUuzl2GUxdN6 zTeRoYETzG9s-h&QCfn#qh9IuDFaFp|z7e193Qe$nI!b9MAEJ>T!`I(lVb^E8-rsn6 zVttsM0egomRGviWxJ<^6kAHo6n0icrmX09#NQRD_m(K9Rb#UF+ZjHf-@Q@}8b~OsN zwmw8kWx=}OqywyOcf-!`##Rie4xH=jbsvS==}hJXJrW33gSaCHO?#$8+dYcSD6dL- zhMH89ZnKNpF9_@6uqwLrLt|wF654y!8qLcCZ^fdidb&bNwYw{lFg`$*BI6%alyp`A%DFg(Jba2Cr7!=8 zbj9V~XhK(^Z!_z77#!)n*bo{w&GRKe0WHk9DD^U7w0As4Ss|T)v|5ZaJ zS72o_H(F|Yjv=^m zu&!5L8~TwPBH}Z3wLdW>s9xvFM$Pc;JS~foiLTh?zV|?F(!R~fE}RrE>ukAQ88|W<{VAs$yNuuYf*$tf6x1 zM#%?$KIV&K7|ILRy(~@1UK!Pi-7bDjfkO2YgtuDsn8}6LJ}O%&E%*IC;;(&dGmv~4 zg|ffaG)+6~x?F1K9RPvnjF02u^ts{K<)PKMlGTO+Vl`A7ErJ;OheM~QM9pvpx<5u1 zCTSd)V<5l&+>5S~v%4&Z*2ng`2@D$IN%Cx%z7TT6KvMwrM-~f2@td<>w4R9o>C}zk zaa&e#EBTISlvgbh=vLs*7>VPmg(1FmAst?7BlNKDR(J@XCDW&~#V!K*pZv`0;Mn-} zGKYSI6|`$OprA%*>0qFzDyeIIwZ1rM9C#A0RVv%Jr$HN|)F{46JyZqeU z*R;DXWY9}!U^~Tm&Ci8?JHII=)5R-%Wr6HP2xOKlp0Cue(KidsnElax3}4)c^PK75 zN>E}5k7U^68bp@NfEEq?UO#*&fm!!AdP@uRi4YFGtoNj7NTEx{bloN1L!ZV6C4RJ^KkWi0( zk`Qv9Gym(kQqJ$PZiiK~lksFc1-&(`tf=~~_P49pc7`N03RHdE6cZ7?I)vUG7y5;PkJuVHa9%6LjRB^0xk4I z0jah^pTVpyHL0M>_~7HT&|EtIaFvmbmEHMoV8A+|b!#^Xg-;YdUN8Y zP$%24oya~}@DVZ65cHdu&eqk`T~OQT2KdyL`OQM14pejm^+IcaU9qs_Lv|SyMiEfz zLQL(b@XAx8H*yI&bs?~5wA%B6Wpa>mtR6-oxL=ZJE*$qSg^Stj2<4Z!ijg5KO_DomxN2fNCc^pc+f(ta*9Z@ zFtG{-3>lYBJq!S2g8+YCfDUG&c$^Mta|5wh2k|xw#mrYBpc-GgYCV5;wp~>rdWRKX zb_Y=m2C$Gygh&!{z>3txiRc}yZj1@p&_iNLP-5HT;ohf4GyrdUAvUITMgFdbp^Aq z5slCCyf8XWW+jxX`9uPxaeNDCS7~*$!-~*%1yj)RbsB#b6SuU>#Qg>S);mosE$c=9v!6NzwLW@-v@o7bu{f! z@JkXT?1Anz9lCbxX3yAs5^ww=z+(tZ-Cz@=V>hrOvgOZ75D?p%cKmf}KjPd&(xEV| zqX7rPnkTNx3Llmq4zWcwY5|auz9+M~{`}D~BHXF>yTPUBnP?y8&p&PArlB9Qk>HJV z&daAv_VzM9J;Q2cl~irWEHrpn3-bJ9^D^xA_i{%STCYl}n3A4Xs+Z**8{J|FT6w1m zb^-^x3+_aW7=gE%I!7gWnrgfxN$3giSLUKvr^CDKrMa&_(bAkv>Bmz2sP+wdy?V>h zm!f{gyyoT3q%-I_j#j*bvciW@59cCs2Ld|DiX6x}G9GY)t}QVOSgr1Fdqc2>@iRS` zbvlkdj2;al2>1BK@_e;ou?Bx3T@=6se`w?Av*reU9Umdp;8*k;Ol&{&o`TW_hxoEl zv%e*FQ%1YB98v@=Q+sFWTlAhGbW106ddM@yB#14Y#PilgSw-H;I08&VfE$K`jo>W% zBAe2N9>vj)(O#iV7RPQ<^GaX_jeEi^#M9|Cx_Txn>WHlfC5dA%TV8Ww%I{tVZ==`m z4|^!RY%W*Z#McjWM`AG((@*r!h2$BL>wG+oE+H-F2rvA;)xIxfWv#}V=vINvQK|O! zaVknc7Bve-5IR^@sQ?(jv#aBz;XhPJDo)(03$xf@wL-d(G3X6reIgGr0tD=rPvT+*b%&s(MZ;bJ5}@@6*F?&bC&{9(K;x;qH0OHa&ea%c zS?_>Qw=>o*74TKRMMkl6dchlINVN#_ci_Aifz|w4bn`qRbX*gnM;*> z6FXcj%{12lRpV0Xl*Ql{N|@+PHT`=>;E5;;f~D*mW!MR*#OOx6{cGCNr48kGr|GZV zN{ANWQff#0hyjo#68jR9z-sFrDxKMQ7)927HIz`%Y7ARYK+?(|CIsU%v{xNZf1OxUID!8qnD-S1 zYpALK=8m&>M+WvI1^e^510_WhauWxHSwFvb>)k)BH~IrW*HtuA$%B}`eIh#1l$v); z4i-rI7Qf#Cw_%sB!B_4hq3#K2*BgnwOXw6Z)(T92S=nUE!Z}{IkPVx3)ESF0$2caQ za^Qyu5!a0vk)vfFim`Mt?|B~G(rf2=MU@q<`J6|qv&kU`_W+YE#vaLq;BySk-v{_j zo(;4>FSIS-2y=$+_u11BpuZcO+i5sCQyY*AI#+(A?77T033&F`lXyNS2d3Km;0RE%q2B~mu%(y^?p|~r%nXGl#OFe z1^0JtA?FqL3f7Z>h!eKyA!dJv^lg|Pl%5D`Fsy6AA3**TG;|e_!raH+VcwI9V&AaH zc%TL37*Sd`#5_wthk+;ud~l*+;QD*WBiz>IZAiVA2@4jfJ908q6l}(6DP8eDx z4nxcsUiHtcg|(Vno9L(YqCYnk&$5YAYxviU$c+A>(|Yr<(GRztIuR3(;FSVUSbE{*WQ5^4eD3IN@ilb6z1Bv zrRiw**uSS)N0o?TOxeWFa5}`1&b1~@)#iND9D@`7Mz5?59!rPdC;aq8Xxub+#cfGD zl&7ZiCtX3g$tZNtJB~_GY!En@pF%ME?#;9bs$^n!mL!R(Dr`IXq^PlIGPEOnkPR!< z&29>aFG>eu%6NC#-!GrtbhlcsKRgQ&bGT|@rexN3%>;}870uZxSp2+n!tQC0Zn$C^ zC+C$Nn_%;JAvKOa;9{^vXL z*Y|2RFAFXuUl;)>r6u2!jQT-`~b!s8w>Yg=As)zR-C zz@iC-QD92%-j$+*Bmnb39K(!l;v}FdzhQiBXmsg9(Ap^~_}C@jf_L5?({vW%50!{g zFB%3z6jzHD4N5u|#Ju{3Y>(<)vRgKZ)Q$(0 z+o(&v&HSu+H{d0+v%hWVldOKh4!Z1TzY0#-%?M++@0q?bRX+rXD|*$aopg&vG4;D@ zZqUYVJLQBkext4ZP*-DsWSUizmdL*4`QiLwgYPg4p5s6g_)k5TCUSY-Lno38$^W8g zN50nX3@x=tBTcpIg8I{jrJ}q1tV4$6xRife=sT*J2r$)b z+9d}fX?fS*R?r&x4Gk{Ga%3QMIfBlGB~IDYk53UA{N=8}LQ0vt1N(fhl~}WnaXmAX z$Q%^H0W%&_UY-ks~?`VwbM85Q0s}~Y}=8K%;9fkHbxRnuvC_rq` zf6gT2m33fP%##2U|r8dBE; zxx7TfAMOQ-#Y5Q*YSl2e_0FekMew;k#6XTh7~j*j5W~it2xU?oc=1?^e(P8#lwMuE zJ~Xopvc05e&{o1K2{i4wgCvXKe!u~uahFaR2qv!I5fr|2M$s!17gFBITh>)ak0 z8(^Zz3src3;Mw#IJF2dfAxoC86=d#{)+ZHmtVoQj*NkR^aCjxL2d=C@p-m;>!` z2hLP%rOI^-zKc?IbHPCyPI4dX((A7?Cz^mX%@V9P^b6T6YY!36Os}hRV2!6Pjg3IH zN+aKj>h{n*H8&a3hcMb&FV>k&qc*Q*^9bUOaqi7e7*cB6l%abRp*V57+uMyU_DCt- zy3LA!>%{{L=3<~{js34kB8H^lf+%n}|fFHl!%V9U!9;05FMhliE9_|no1FY2p>{}HUh0Om9 za8@`J<>08Ea4n;DDA{n-?kJ(pqnROP2ZJGaxiI$Fg)D--K3y`6bl7Mn2%2S@L|IcJ8|CAap!>}<(oYChc!_y+!`?1Vgc zvlQn?F&q1%0A>46I2)UvU5WqY&HASTG>*aIXPHZoOTc$OUoi2E>s35~A$d?R|5_z7 zfrN>M&{A4LChK=sd{TPi9L?I*!=}e|0Vw(0P~$oSbH;m}YR{1|S?Q%2d%amZ099jf zfShD@I>I{_!np2;QcXQ7=?L&&5uUuNxtj#J6E1V~EaBi80&H9zpEZ;Y{3)RqDBX<# z7)iVmAbL69V0264J+F#4%k+M;KvbL|{MkYt9Z*f2ZAnY3I4dle`oY zS^LZd6b7<=Oink(S=HaLIi%JqM5^KZMQKQ71txP%^&U>=&2$mLr6JJG~ ze^8lqz1`u9Vzy&ZJLumdxuyrG?_EwXDWM4p8u@!rx5j|>)V}E2I@sveb8+g~NhMQbm z{-NKv2R@eUyiMN<&F~Z$h7W%R$;u**gc~_&fvT?C%Y|4-&L%8@!=@6%vhmg4g$wuk zN+f*BWkANCUR%XuvZ_RvA?-YuTN>4Bnpk1h^md0 zXOhH;cNZIDdL>>vuqSm0uoXtnkx4io1R}_RA}{8FAG>n*%39;uA-f_}wV1w@Sktc# zl;d^(B+BJwJfmM{+spI)E{L|XfGb#dbsVkj*C*BSL{Kk%ir14`_}ds1W{BK~K47|9 zA8#IA(rfU2Am;%ZfxN5=RAm~if3?_@*VB?r;%0g_df+ zE7{6fD6Q(u9KEC(@=%58kJ|)I-|5*FwAhZ6^R&yH{d>9>pv=I6AYL$zWaoWLNhJaF&0@&dTdTQ5(+@`& zBM;+tLBtZ6Rh=PmbQ}#N`&zUOj8UK8pZ;%ssMJ0B1kZ|GLnfE@4Y7Mmc0 z^9Vr{VZmN(4nH0;wTj9KCwsf5(g!IEA5lnVg~Agr)Y%8J03=jcfy_ul2?nf8uz`|0 zx{)e`lhF6P|MIEXCayFm*(*#7<*GCjU?$&5J<}&V)Q$-Acn`w>Lxn3Uwy+zR|93Lu z;X<7pqW~H6(i#>F*rt`3K2O`=&X=ftJWT=@lxSwI#W+Y1D0meR7eou(ATPx1uAoIq zM*vtP7@S%Pj@MKT_hN+duiH4Fbfmi46aP^PmoVfR2RVY0ZpA}gLgpbP+$sCs$kc=z ze|syDU$zGX%*bJsvW)yb%)bsZ1uQBA*CNVKAu{Xzr?$QGsIIwk7;u>ortc5QH~Qp_ zniK8Y2+NG+BY%PW>49wUw5W2lrfFQp4&2)^^u7l8IMB#4vTZU~i<6Z=n<0Moz7!c{MIn*%(+#H8)|xHJoj}?cpSTc7K0i^Pdn>dH5yBE;hAAjK!U| z8Pwh9M47(Zf1!BY+?|?2kO;s~F<_-IH%@b2lDa9+B{D1pm_jFZCl0=JY^~>LqV4Kj zcV;^VT`zm^O0VsCjqa8Sfw9Q|r#{4S3o1YYf7-L)rfiyGx}!y!w5S#v-k4u6eocM- zKcu~5kZ3`>{WqRDW81cE+qP}{jBVStZJx1h+xAT6O{$W6|CLlFHy`%?+Eu-~cK5S- zJ-@X*z5SiXm<18;{=3tcfC8X^Nr@bDT7o z@$LNCQ#I;AoEpXa9%0Z)MM@5xkpr7QcUzV9&mKXDna-j}nVKiL!IM718+5>IN(0OE zjrzfZd~mB%pS`?R2kkWq>>0@UidGjL8rxB)8JHU+^h`at9|ViMni=_a0YHZ_y^k_ zyn2E4x&ae|48P~Dswy;Yctuwu(8)(-U4n(`?Anzx2(+;f4H|vDDIaFdh`DYVrEKtB z)x1#Zm81w8WlW|2O2qDw3kSDisUt9_TE%^-w7%-9w)k^}o- zLH`P+%SCwA`qFg<6{F5`5wR%5h0G4FQ6ys_|C?6KlC4gtax&$dHRo6m!);yyp--G*5oOjW2nDq}EMCUfwP2Z7?<`*c2vo3oFtr&PvgvO# zt3W^BE0GGy*z<<-+8E% zwLnaGY`x{%S2F6^fdhN>Yla1nKdZ4RmF!$$B&jUMXA4mHaZ)E{^%6jlB$3lb@(B2o zZK+N=u4G0P(iu!R2w~;frI+&81}Hk3M{*fsq`!!igmwy{Z3k}8n{x@3=X zRSbjO`@AaKZsNUQaDjXzj9@Vuj@clp-p!J-d669x!0a_?`iXH$>2VsL*7(0Nls-G- zY0U`AtpUyyMTBJBt*wEFv~Ls{f>(=sld$m{I~o!0KpINID=OnG-nwk{1~7eUtc2&$ z6D0?dzQNogKu}S9j~Z8}ssh)(s4V z7XZdz?VoD)w6!6tcq4qhlbt4v9|y1B?B58n2a!c}_3`*dS3EhBL~nNQ);)YFy;Jp{ zPP}I|!xv^C8i1HpY}0*$DXeqRdV*WGQ<5;tO_wJ$zk&V zlW0W)hBg+BMWt0-kkqfzf6Fte3O*QE_0nRE=V7!ftAd{vPw$jTF?^4<((O;+2{b zxk67I%DF;3j8+mGhNQFsi5z&nNwxILWPb-t7uxwhyXn4j(FLQsbvy+47*D)t zTh^Riw6`i^srw2QdjRsq0a_K@^99q0S+JBVyU5z(%wsztw?7ysV747}L zzPFxWkB)MQ+9C&}(^}6R(*U|E2zMUb`>w1%XcCTjVqfqJaM#J;Z)Zo{j5} zsc8tUy5f}x@s-gjP)PME+yCfpi|2hYhJDWcvFxr>0u6qBmKg(1-YT4eoi1*c5ihmT zsK%tW2FmP0YxD=?BPV9H16`u|%F%_YXtco39r21_=`db*h|ILvi*nA&k}Uy!TG zN1i&UBy(ynwB6O?h}nSm%kP!s2rLf4)jb9-O#Azb0{wg_Uv!{h)y{0#cUoy`ZoX+@ zl=MEVufsQWrx_8-c5iY&Z)@5+W)mwKZX{r&$sr4nk7kzxF5h=@xpLmZHPSW1wh?c1 zzYb&X?AU?3r_Q<3CG9Ug$|}x+YD=RvL_8 z1;}!=XZKeaY`uhpB=fro40(dtMn>GVtL;Y2bPL&)w|I$;rr5BS6oVFL1hu-p>!=qi zX&jkk)`MDfGWm&tHD>xNYsJ}yy)W%e?^GM8DVV`Md6umR@pNZ-m8toAwlsdG`02)0 zc^WSfRpM%#m5QnIH2lgZzjRi+z{(cDjPL&?G}gx+w9yI-06+l=0D$xVYx(=%irs4U z-@rRo`2Pgn@wdUHK>bE{a$AFOs&9a5u;$SN`NvPQVreXrQ$}kQ<^HGCl}K4Y z6?#OxaR0e+b5qu>Q#NT(pZ*1lo*yYXExrI&8&pd_duMrGXC`8+b@o^9op| zsgBnL&r`c`yT{mBnJsdp0%{2YoMg@=g5*Uumpc7mo*DHEeD4<LjZ0}FJRaxQ;egM}ktl!vD!H|E*SDtC1Lc-|d-)hwbjN_PS? zi0KfgCap~Ez!whAFi*AU>>IoH5Ri=JyeO?fO68C_SVar(y5_%tvNEh#*#R9i9)9Kb zYkLh}OCNQbM{L|Ni2&4eo?tGyv~;^IjTSv*=-f`ajh#KjIqNcQ3_*^r9YGS~nV=%v z*C1lIi<&&y2u|Zm-@;-($;wazGw|Qu-hAad<2UG{3BejSXa+`lPB3Uq!#ffZzR2DMem}y!mOQ*#h z}@z`I*xv-D=zu3a@g({6xOAP+rI)T7W z%L0sMzRp6L0pahL4j=FLM>w>8CL+Kgd4lbmZ3ni}QwBpExpjd%18Hfo-iRLNoo?(G zVr{X zru0jTRMa8_Y)^jq9U?kKs3D8l26(B9g6S^*Shz6m9(dGe^(}SOy(JD>__j%}^RC>Z zz=NS4YPr(qoO?G%g*=2`X-KWyr*-B+C+a?Lk<-t9WTf`&BaT4%2*c~{rF z2b$^1uh79!bt@P#iA=B?;VS$jpx}E!eSlD1SIF9)6s}fMq-VzF?jF6^q7w@f&y-fe z5)1W8JFju7gGX?9Z#yRKmBqGR2M9#po*d>WGRRFF;W`NAr&dpw<|+>Y4+;Yd4`h3U zB`Hdb6jIt>er}bDBNWhv7W0b1ur1?W<1tZg^$|Bye($?BE%-Q`?L;2WFbO&brhH&0`U+1EHYE9&nJc}Ibt8bK)1LV>)$z%(hqzSSXmKKwYgNqO^% zPGY-HUQQM#_bIo`7I?SV$&n=E!e!+x$$?>hrlq*=%5Yab6xE_|p}8iFnD8Ort}Q%& z`nUbrCf~m1h8B)oBnHVZdqWluR*es48>f+mP z_NjZw0*x7_x=C-Rw?`!xg!5CSAOTQAp3j>2eh2oQ7{vIe*sFU~+F=r2Xz0rL^!qS)t903o~(^>MM=Wj9-Cn1d`SH;l!q{n<6VUrWw3|gdc-qPs$FKtWztiGwiWjz3fqa zuILTz5C>;I%|ivT{FIi>-G02%pZFrcU0znPlZq!!JO;kV&nwO4F<#a?kM81KR=}ev zIt5Csz11yU=q##nLwv#S_y(FU>bk39@IpV1`Tj2j7rOvZi=Sf>ar##?C;n{@=lg%N zh1olrxLTOF=`qqXvgpyX>(Mj(x0EfVEvpTBcwe?xU-tD><3%4_f9@#wj@f1^8;mH# zDC%q*ml$GMNz9)YF0J}Z+u73dD_$Qww**=N&0?AE%}~mZ4ARuNzw2jfs>?1#7o>gC z(|f8?4cn^z4~Nv@dDUZkS{nnihyJrfIPyn4uc0aC+?1Z$>1T2pIE6PD@STY|Nb!eoEhX#ABOf!>o4TG9(t`9=G^gHy3 zLU^(Ix@~*&Sb0D-swUU>(1lq1yW2x9yum2!9u~~|t-s3LUnq>G&qTZ|oFe;Z=gxZD zmCfBt6vm_b#i4XaE(>4%+ta4|*_jeq$-E{T&4CMy$>QZYSm^fU#{ST!cG|bPmzo8? z;n7vOchh~9fq=#lYX!`J?^R93#j`)j}f0B+F$0C@kWOXdGWP*tn{A35#6^1i=3 z-y$tC2^GCQ{V{;Re6zp`i8vFq5CTM#a|?%5fvBRxroqP*R|27kgsY|gM5_AYmQ!sP zS~nraj7DJVJ7ldMMC;owZ0yBh2e@%tBUT5r;0@>uzO6%Qgo?4HXy{O z2;!EiLj9EX&MYJL^l?U#QQeNpcu5sEyE9<1`_BT) z-EwWUrf8wSlGo*O*j<2oB1IjPL)i!ewfgZeNKbI8(v(^A?N}zR0dn@cZuP0;DNsxx zRdk(HDb8@xiZE(Zte4cqM{esi{L1+KnH{Bt#>91Q=u@^d1*&0*nAiiM^lK+eho-cr`~a&^Y2Z}BuGKX;`o@KwB+z2B@BI919mFX z3@vUZw4@|g#l+)Lp8X+>rrkMJTh~7tEQGGaLFIL-FZRiYDxiH+FF-1=<3=jM#x$?= z^!uFo=9U!wgKSQk89WKX)J$XY7PVP8dOfQ3&D&-mka&wTt8f+PCp!6E7HXC@&&NT^h*`j?Iv`qaM zB>$q0Mas<6D=)heD^b?F*;K$bs#sGUv75*1<7;dUj?8Q)dl3j1!@3ZJWgxDcMJ0%c z`8d3X4~*fa|5P`OL>o_^$d+<#@!e5qyP&ftEhvV8^m!6pD?C`iEn4t5{wexDF}#+g z20d?>ScD`^azO&h-xtwKZ&PZ~JT6|Li%o1FzpLiMr~d(*ku4oQkXy}~3N4TK+#zKOs0|JXxqnSV$A23*rf%;v-05Bh zPXBkGP>5*~KizjHwwc{^>A)RHGH^OF={WXwA{OgcquK)RxjLr0!f7$D1KfhjAXq@? zdEU%@axGjX@}`$?(g3K=@C?gac;^5|BCi9^6#TB<96}-cyWAG4fYb1B>z>&E!Ni$) zNrBdLD`RB$y16q@^YmELlYEs5k+ejEkf=~SNl*lx8p}}ao2ovc7;cecSZmgL-cSm5!2klD#BD=%7LLQe zUaH~i<%4t~0c_4e1f|WJjRjs9j6pdd!c{iS4zRVyZT8RP(v3aICX1RIsY|2!Dip?O z&q|_!Wq5L;^8(p)_U-M>oQ%8f{UtqX)I*#xe7m=E#0TjNi`cBRbmNNEpGM$$vFcih`4V{l%~U8cN09PVlAmTXIUQz5NHbmCVAjV!2!f3_D*<=8tR9ccq>hp;}+zT3Lvp zrd)w;qyrBAc`Ckdj2pyP)sC%t_V?QEI$JLqOwix^8=+@nS6MhJoq5bW7L0`R{l=A1 z3y9jnwa`tsHR!TR2d57@bKL`*;>!HCSaJGcrybd)L~DuCFA?}h)`-kJu~|F;I0EOx zk7#UuzI2=g)MvKaBm*h=Bou*WA6XqZ_=bW_-~Xa}Wc}hOe^Q`Kn|=?BIlou`BLCx) z!2b%zRnxLM5JmQZJLJPo3T;kRmuN*s6@u*lgVmV1c-SB>iC}cLnxmPaU?w_UQT%nq zQ`q^>5!&Pl`NI3X$0>IVBZzU|@NaVZ(&53`7>0DuhS8cS;}nXX9dy(H!{&p$1dUqA zcBL|LxKrmfSPPQ4T53$Sg*>Sp7~o_bo1PEuiLSloT?>u||D0iH;XbTh@OS57J~CrEoR3)wSz zrLZ>B3G~{iq{N_b?}1+=VGz5)Kk}Z*D4B$((T6TvnYrMaIJ>`fr{ETGn1L91O#4KRtqG8QXf|fIUOpDBk z#&tGU;E7;kp<;~oD$F(lGBP1N$G)MFdp9ci2kFx(oXXtIXOQm9!Db0rJATw=|LB`V z7lhtGjYsyO3C5amxG_20J<@luZyn@>u$G(*$C$y=3*d9c^$moaE(T$0)KN1fqbhc7 z%KV=m_XFPjsu}8!ssd%Za?B^zDr^{hlOrfo?>n|8{A$sh%06=EZP6lavJ37Rhdm8C zzLT1E|F(VJE*#z;9NvdYRM?N)Ej@5uk%VhHbY4sSD-$zv!>HE#2tc(Ubxv7d>n}5` zeaYC7(LgYyiz1c84Cwd}hY0Y4vJKEzo|`LV(9Le;>!dm4=-zj+7c#j_^ZFB7Nz{Dq z{rdg&oV+eAcU3^G7i)0OL?XZ26x=?SApC|?J>Y!kGP(VxFY(Vs^HPYbI(nlerO*^_ zn4M)nO{-X|xCqlD(o>?Z^ZCN<2pvKrD&Xj@T2*XpZ1X4Hi5%Aa*=kb*D5+{z0{~|H z>3aNWrGF)uRR60q@N_YNKU)v{3(8sCsU$n&dab;nw|h+u&4)#M`z9MvISW(91jmDO z9V{H#J94}wl1Gg!(_6x*!)7`%viIli^ZuN%B4+Sz^^bpy0cY_tv$1lCPW-84^z-qk z(^S#ZLGc7a&{BSIp(pCUZUoz_;nQa_Q*%{F&2>Y{Jm^12$f?1bcQ!M>yxtVuzxB6z zqdqoMM=JRjT5@KAQ8nS7>P2?W$k&nw2tFNZJ`f^&Hb4Hz+s9mr~9t*WJTThiTXrGuIi?EyF;v00B**7gdz)LS4&>% zBlVnwvB^(mK?>lOJ1kf6iDwW@7hCb6Bw!5Jwr;4^UpIp_M}vgZ>%I$_My>A(xmNm( z^DXGx%~zObPV(;mwP)}@1=7#hX?MwQEo}_^{}}1~-|2(@ceS*=fwPhMul=c7QQ((D z2;T)YiwE|cKSuD}Odlr{SHSOoyto~}pFfs7oUzY%I3E7+PFu_gM_z#CX69yU))ZoL za_?Veo|s2Axw13JpOL~~!}|pO6@}ZROL`kOGObIzh>fX)-y~FkIC;y}D#ny4rP_n; zx=qFmgWXoA;=}o)Sf4Jb(XZuhQza{&;MWeeS}*g547e=3}h*c@G`J7E|q z+pMQ^vkvxN-e(t8mTrvsCagZRjMEJlDS-0w$?y(+g#n^;E?vGNUr$4A>mj zX=I03xQJDqEx3*Q+sFYYzvKF{k*-0fzsjj+_pV-z7qJF(QQ56<72heKy(LUN1?goL z1gysJRBSXiSFg6(LPJWzFcip4XO>%{$UL@Bkxwi|CT>p}?Dd-%guD^5UNyVqFrxNooa-s^OT^W8=Ci;; z#jugGd|V^Zx}xdP>8K`d!dC3D95)l?VcYh+Q(gIfGkkt?X20Int?&O--73$#_tBm7 z`7dXT|IFq46z~xC?_6U3KHUGqGlsnft+R){iLsLEtqk?JERCZ0#H56Z_ynCIgguNr zJqyz!@PA?a|7X=Yb{0JKc zifIuy3ymg@)cS|g;V3P4JBJw|3^*?PYUYN=Ec_<6dw2y=3zzIqw_4RD=7)YTl3T_H zV*@%2HkNe=AgCm~B(a*~RM#gK^{_B(>Zy2MPTda&?*`0wxNh(^3IVDqGH<*JL}P(b zzkE9P%u;*CvVF{~QV}+BXVZdK-_j0ds07bQ#1-W~MYis69+Ipn5Gz`djfPR{jRdxp zI2#$~wqS29DRlNDZ=EqSvu^sG_j}rc+|M`g|E?Z>6Iy#TkO2U!H3I;M|Non=|GjTo z&(OfhWL7a!DhrGeM=cTzDb&CR*L z9tT$86B`1`$fl8a)co&Y<$v3bsSpP(|)r2v;=tx)x# z_|?6x3Z-Aspdz=f_0?T9GvnX6xMSuq(etMHwMPHc+_{woqtUE$!ME(8P_j|er=Tj+ zEt|sMRHF`z0jj!xL-9A0^poq`ZET$OM9;U9iuCM{r4QMB^OGY;b0wS`5+CQsL(k3I9hPbZKCUlW^oXwkaF=d9vhz+NX;5n{3 zR-;|f2-PNfG?MqtZX=|)Pl@`7%J|vKUs3VU)BK*WmIl0*6!DQc+_c3x`xkVwiSDu z%yK|odCxM@@P}pczG0HloE;B`jxHJ$Lnd(!!JFa^>NJE_3#CfCqSvn-O{SifGHG&- z0*LF)>iJ>J$&Vxz8{G`hC~KEUGwkuub?`fj?Lfhmkr0IU$9havqU4oiVgov*@G8Th zm3z^fS>pMJ$GW+B#8D-HMO+)ZL;CYR)xQu_ zNwCNP08O7kO3fpeD8~2qYya>pmCxJ7-uZTBBo>|y`xqqx9g$t{80&H<9g=zMk9pS# zfI2y4{wr)^WX(oXs9a7K+Sc$h^s?pG;a1C4gop!l#}%jDD$*$=kB1n?>>jDzeRGa& zKq8;NLlhZ{J+F+0vxQ&DCHx5iUY+fRawxk-233$UwTKYMr>scq8+U8 zMx^IP-%dfKZMl9~%ETw?chPf4`sw%43K9o+VfvpI>UG<$X*MJMU<*dr<_u}lYv@c& zR$kzX@RCJe>qy6R`@j7oSL$Gq0NrtUuMnetrkqY-XR+8QzqGFIl?Tf6kBUyc5B$-;^e1dPM-st`hD3B=K4p| z7#K| zzFQ=5FB?9pv#`3dwQDq9UZSSiYs(GuI+MQ)w;G!q9$|Cl4A9%@zc{yWi+s zKVD|mzBM}VNEp1`Z3v$s@$xeQCwY9>D8)o^{CNajRHk0AW|qKep?Cnrip4!J?X~0e z2#{lJPht(*^*);Bb{-Ga#5<(rq6KANb_iNWqq zP`8>;tqTaIW=B1_uyvicUL$4&xQu4|Sk1q>et+M=uMVb9XS}Xt#>-=v)73AFF*k4M zPLjps;bmv%W=AJ6cU`VTnS|Z!xhBN;asjbDtUMW0)BF2W%{pFFTe}e8QrToXoeSW# z`%@3vQHLbQOzjL)zH21w5Esr2x$PI~pBc(3atCE=m||l&CSx1L89c$AwAu92Z~C#30{us_cVOO62QbF+PSsMnpj~l>{n4ehYT;NBMi{?F?vSu z6x=tLMfJ(Ilaifg$&-&mkIA}U*$mfFLe#t35*cT;d|K0Q3g4g))CLX>`=$i;Jqc#h zz)^?Z?sdwPfViG_UcLa`Y`?se?h3O|*|j-v%^LrTuI-J98QFI8b!6Zu5=U2h8|;Th zF9dj!z>Lh@tk4N{zHU-~`mdt1-nB=A%=7lC6~jmJaDXP6PVP#J_Vi!JJh3>;y?Q^U z3e>vjC=nb+q~RwUGWr=P0d(gh=ua#7YDJY3))syr!=LS>Lpr;RPuF>1CgVqcH~%Q<{&gRo=EXjm3N_0F`|kd_Ewustq2uG;$nj-2&4jZ<+X`iSS^|&j`Q!ik zF3Zn&awqlig}}Le%-UlN2qs!x-cp`RwOVW+n?YH_MN+8uUF@cX<7$k)y$1KM!M*7s zxO=5UHtbI}a*PO3Kx6~kBPc7=?7vm^C*=5&pKyp;2<~QX!=uY5M&p!1)E#RsqURtz z>#LwJ3q$FuKCwIV>_ZY;;8xUx9G*b_SD{a^u7IDS4VbG(LiuF3NT}E0-QA=d1hDn+ zf$q?pOjV?DgL|_i?u5;|Qx{N2b?T={4gokMV>`gO7d`E|VG~m3j-jgI*$wxkn8&tV z+NkQ5#KWD$Qd915KG%KO*Z%AzAmB0xYV?QF(r;H0nSS_U-#`Nxr?L^IZ3Fqoedy)$ zc}7KhO)&PXMK)P6r?H|j8|U(@nxhW7= zvn1)ac6{No@exlyD&w%p`{u9$t-X==5FoT+{o#6jh;DCPxnA_{@#VWBVd0}$U3gdo zv%-L1zQ+z}Bk=ZuSPJ#2`Wa#D;xqS8kX^dP;8<{;`Mgt%XN8Eq1|c*NbwMjy_JrGA zJpH>_&N(YCOFG;LzSIvJ%x~=?RkQVy>LU5{oS*yt#@tZKp&b@K338wE;jKyEvP6LB zr&I2q0z@1Kdpc=orScBCOE8ht9<^I#pb!1e`!__H{&lI{?|5VhHSDljx!LRSoo$Qz z^t|r9z&Jv|gUj_^2=%4?o_AyJxpL9Vq09Z0b`{Bq7@^_@`+o3j)0_;={(@>ia-{w0ABiY~{Ojc9bSdOcn+|K{}cOvPq= z-p`&gZw&T!tgy0?RaVK<&sF_V_gDCR3+Wgp4EQ6Wb|lz6*U3ZdHGs z39uGkPLeEK86z%o`$ti+OF&PzoK!Js0rjft%Oick!OY7gnjVdOiLG(<-Jy_BgHEHe zkaHse!RrgEO9%e)!@k+^|T zLle_komM6b?DkkiRSxAQe}{Siaqh;hzeY&GLiVuN7#WA7_;|w+bF@dXJZj% zm1u~sFZ(63QVuc8n;5Pw0 z+gFk1Pl+g*St^R{4We0_ej0#`9)HNmp~x4utLyO+`1-p@S^0ZBw12Bq**`yI9;B8z zw|h{+nZ50qyE^dWz=1?6y0hyn>i7wzar+S!%li`;oIpKDX zUp*{O zj-o54K3%2LbO=0ZMk1EmUG-jjI}1&13y@T&GPnVG?z$XChY^#5moIo=_l)8}UAcL7%3RcIX)&$P*{@-mC@op;HBi!mg|O}Za?zvh(fLt0D$fg zMA5e$AR8imza6y>--&;26cj;h55F{D$o}XMaoh3l54mbZkD-jliB$J_re~v(*>5%x z49VKz)LV+9<#Xz=<#0x5l!?8%t01r$*&Lu2y@pd74iaz+9!Ei87q~P>L_g2J0Vnu| zWH3qi84BA(SK#ZL3Vo@4b;qQjF&VceOk5k{t$rqKuy9!Xud`uNVq(mwXeuxz4$e-H zV|n31lmoI_8fI1ZFFyz(`&7Q)S*wyHI;2rGb?RYsP(WTsO3lDx;MyR^O=Is0z+Bys zlD)-tx#cC)5MlzZlYlAdw&*6w>@qi`+Gl~L2FkvArU8z-1x1XlX4|rfnic>;fT13s zmP}#GppN0eNaJBIAlbq75dIW_1~f9}4P&XfJ&6L5pz+WP!`Ot=NsNMi9LUg`k;&!vp zt+T#Vp7K*HdLSLl+HC^a`mpHpHT?4FCAg_Pj-4Z!VZdlBV!lE{&gcMHO{Ay?fZmyd z)3=#S;haib+`cg(HE?_dPWmFN3&Sl+jV4(y&bcZvprQF}_Hy^`!4cbXUyY=FkHZpI zKo~?yiVn7TQN(QtA)|JjDf}gHRWVqTQ_j^zAK6`CF_8|%SQ*0hjkTb8ESU8^#|r}h z$sWJRP5TU2(l@-AkCz$>ssir!r|RJ*{9F~k><5qZ^-pc~orvx;5wIPHG}Oou-O6(V z-O_8D`*k%4c(!l4A)LAskN|k2H89vW^@9W47uD#<2LeuHV=VBb&#PX3^QLe0N7=#w z=q}0Kse0sDO>KRP%bnQI^sF3Wd$1cSe{_@`%UMS=&|h@&ZEO(k)(lx>FLD#-bGa9m zu=#tfy!MI>wB#g~G`m3N-{^%2oBtS!;tyHl#K|DJ3=3(Kv9Z11=4*n0 zHmRtHls#BF?GEuRrJIyVpzQ@Iy_qmpGD=5EsuJdi`g1yV*o}MQaQ{f#ZVGb{5B;FX zo=q{pnfI@8CWWJrVk#bEecZchKgg7CUcl32=}a|Nv;i>h@-0vtEdcAGV!4RK}R}tBl;_d04;qUeelzQ`;PG-&F9zt%TIqg?? zX&U`}`N4Ie+8{E!gf9qoI|!${>lA9c=`Vz{XEwG43D%xMo2K^3whQ$-4fe0v4?s=Zmf^v;Gf%z6gj{aQzP1DDaZ@&YVgHvmZvQCRJ8 zE(cFi4OC#RIn?mjk2zx113lJZuP0zvWC#x2L(sQ2-RqvITn)Qef@ZEyqv+6R}I z8M`wUApw>O1O2|fpHL46CC3jT1QJpZgOJEDacC*uKlH2sJaGj3qOk0c5|MVzEG>L- zcZru6+^RzhQoHc-V4nC2l%;S05RD@)iI&119$|dIlM}lu(ihUF?Z;Q8n#fjQ&@lFr zx~s~c4T+zDE_FT&d69ZkkpES{D=0p8%mO)`N*?s{`coUsr`zLYb~J-bApb4g(mGwe zuU@KRv{@V}gF6u-R)&CeBGQHDJM9mv3@zDi*;+mOn6Rtx^yg!$UHQ3WTx1tQ6E)o% z0E7-VvlQ!4ozta)V;RkC|HSQE!3Gc=J{k$MPC^QlqTAf!3bKHPLf2VGzotfA(Ta-@ zDcrYfWDjogn8uQchTek1m542=$>@yz$Vu0~A%oSUwW*MEuZ+TkpG0oY8)+ES-Rt;H z8Caw67X#XG1rHw&%XUdtvZqJEe}CXi9FcNkayu`oE|becKUHCoGLBR?$Eiu zohk=^3e1b~i1zZq_fQ`|RO!gBG5={KU43=gQ?`PgD7uOiih%3q4wA!%OVp`_4tm;6#$gOITzac!VT3r!Mf5QF}76H41+`+ zmDx1YN~Vlnh>IuS6;KjgtnE)albQt`%TQUrgw!!mcB;v+4-z?f2j3?_oVX1+ z%fDh{lB_FV4pTRU&NLwi@??~8P?(I)g!1N=O;DO{&yO5{xQt~s@v$|Q4_ciE znUD}ft^E?>dd(73Jd#WlCT|k2o9RR>@V{4IM9DT=T|k?8Qi!vt;wl@7q}TC~CWZ^~ z3^V1V$_jL(*2N{x=w2g=Nq{OdqeFs-%G*;nCLGnXR)k1Csx^Tpf+E0zPtyZLqmL1V z=z088UAiY<*?pZAb{FSD4^0z>{s%0yU<6f{=dT-B9JsW6|Jy0LqaOWbK7&yOH;pJR z=3X;t_ShgF-X#AGE94}s?yb9=9sn)<0IV`N^-jh<>skS`v;svHZ3$7TAB%m1 z($a@j3onz6vd4yWbe86NiP&5kmdb_=B zF`(Q=5;_!t8{1XIzc8N}w5=C1mJPf4&VGMT@CJLskhB{bJ^otMU8pd~;GERoUl>zv zGsWO6;SBHF=_@EOl5=30f-3|R(C1>hh`tpx{kAE%K4ibm()fB+vsi6olsuu-XIYt?Sc$S!RR=0_|~9TEZYro5gvXv%#XtMFr+bC#21J3PyYejZ+iu7|5PMtJ$Mub04MS-W7=vd=NT29Zh^s{@pz>zw=K<39<+p z9{3GXjlYB#wU0I;1D~LWKN3%rFvJMSM=bBZFUyhP_@^xv|2U%bhsgfa^JB>vyXa&J z-t(Ngzp|{^>4;1Ulf6qXfDcz#pTk_l!-Q|LfOM=Ea>$_=Fl&6u5I}h_w7)O#lq16) ztSe#>LBVaOf03b*`L!nH^`reZTCTLLHd+%}708x676EDx!&l3zG!_6HuOHJY(5$)7 zTDz)ld|Rv_78Lw1k{7@=HUq*Rf|o zvXJe#Lw?o-Oo~<9bHp!*tbc!U_}Fj7-N_H_9YT4rhrb0519dqhWu zbnZ)%yMUA%G&ImlQym|lv{^Mx&F^abIycn9xv}_mTi)V6zcffnc8U$NUd##->aQk) ze$}OhUK@;QzgXBdw$}71g9JssfQpeX8j zXnB0i$T5QLo6IPFj)E0klDMqQ&<~kG=*qqHP56X>n7f6OoDttr_***-x!EMkp zK~~w(0ar{*Cb-9V9zyncxV6c26&wrq-7J3p-CEZAq(+jJq031Nv3h;Q1HQ8%m@-5B z$Hw5HsW)ymAkL|uS5^MQ-EpPo@jz067&hhvB^JcJn+A97?W!pQJWE~La|l%foox55 zVyTb$JbXeW1H3!IX*$4++{56h?C8^a28>8+; zuBtne(}Rncue?$)a`9eSm;6zaHX}Z(gnrIbDBj)*4+i0azpb~^)%rwun)SL~b6}b{ zs!Xt*OW6?-H>my#1B{A7&DFyrZ>ezJ!)3hNZa-LavwA9N#1nIM#eQ-U-{mwBpcQfXB%)zsL2hM>;oAcW)-Sm29=h2rvorfJZTsB6AlP06j0;o|5P`lq4E- zMu_?v;G-yxQP*rMO)R;lP6t1`VSYf{b1qxtKD163Wm9|8T{*UHCz?^TW4X^8-ZT@{ zW*09%%A+qP}nwr$&W%C>FWwr$(C`*x4s{QW{sa;?nR5yGSJ`Xe%R^eJ z9JN`pH{S6bobd5#e&Og?H03zWiosUJamaGO z?iBn=O`sMm{$5`6B`1{C6er&YJqSa~_Q(!}KVm@o@XX)h5{K((BbJYyT8-GBd=JM? z>yv;-Gvep_`Qnb#=lE3pgMX*7r{~W{Y<%4$Y!+t_9s|ACl#}pgnWk&RL65?Wb#$%t za07h5wT-%JS=eZhqrk~!*6>f%RSc{qfaTS;kfNEj&!fJomlQFvU5dVz&18V)gE8xkYpJB-IB$&>Cu ztYDw%YX~k}$W7jSNrex%W*ulwYtG*S$~EOB46Q_xbMD86E}cBMvdpPPVh21j2ZG}U zKkb~OPTj^ET_=kj>pg7?m8?%1sa62s(omj%oN{ z=u;mk!JMcLh9iQ(l)?3WE#4FY4G$+r+Q0Cxp}Tl{X7#!Y!5>`dd&>_a{uO7kzk%v7 zYfdRi%sr*{)M}}>$@RfgdOQKQJ==zI-Ul%$yO!tZ zcQtQHPMk+C$Q~hX7p8m^%OP|1#z2&BEY98|a?Hv9D0>!IpzS|KgHuy`yXR;mySl?w z51EF3c*AYCgX4O_%jWg27#_y|4xjlR7~`UmfrN=CGXd~Ol=pfN93+~ZrwURhjZu@^oaZb$d{#8SQP#Zhwhx8&)3fz{a(qM zr!pX4tTTgGnmSJs{TmRCO9`EU60YiwjJ@L&cyrGKDP4GXXh;C z9P%Ns%(gEFJ&yyS#XQ5(ZxNzi_n-jdcfkSwgtuEKcS+_Ye;-5d6Ln}8Xe?Sln%<6M zevRG|UVRHT7)Fqs-ff;O^nJq&GVvK);FFn$uzN5TFZE<$SInUh_%KIUKgs8$5!TE< zOBmn}1KRR+oB+k5aquLc9LAZSz%rT0Et%I9zuzSPqVd|+er?$K9y|2A&9P~1(Y7c( zo^9V1e8BO?>lsNt)E0cvhg{9W6{tg46GWbdSi<)Mk(C_DA{+o30+!Lg$7BDe^dxTB zyE~Q0Qs1BWG?pT6IhWl1RBgCkkD=;oV*33!1|pD4Uzy;qHiQe zhi>%zLZ-tu`nmzNn)_bzQm0rSUNoFBZ_$War^pX&@&AMhWqeWS8`p{q-V+K^@ww59<2wC8+iOx{l-9kd9c)&M;YJ+mTHK^i;su!>G7oc z76^SV#8Q02|CI$0HChD}J1olLQH>i@6~W-RLDb`yt;zzyupI?RUTp`{ezgpT+Zmo?E*Frw`>;m!> z{5TRl-nk(015ucDAh+sH7|C#Mk7o_Z5&C@cM>yE}cnBC~J*l(z zNZdx{6XT1?|MG#iD_Y7P`(WlKs-7uf8w*C)@65t|Lu^_5Yq9K66HQSf`9x)v6 z1=Ii6dz0D695`N+C8i-%AJahFDmcjs-IfN|*;z2#v0&j!t-n`=G0Ezu`_LEX@3ap; zb&JA)p1P?Tg~I;gJ?x?fi^TV~1Kqs)0jNf*288cyMe+@xg^c06zbE+ zO(VBde_}z=Gm}hp)e58J$as9i68^&M99PenyrWCD5rz0Hian)-%ihL*x4#Me4 zx*>n?j@>bI@;s~k$|X=9i4r!X=R=t|CeC~Nu0%q2w?0^%E)x z`IOQ{E*E%+FYGXD*bc2tjF98PGx`_x%w@%H%8r{#+0eS#zq45}I$tvZnETUXoe`N? z!MEBaRn~d_lnhjhs-o}bDY89=7f_@B+0oZ6(T)&V`cLmSnW+u&ViZLOl1@k)1Bk45eMogz^QQDb>_ zJu0^RNXU}CcS}e!Xypb#fo;D}9U&tKt230BnOgf&TX@e~40uO}q{@Gq;DyCV9ps+e z{1kyxY?iKF2egVw+sggn&?JGX@Lf(zv6#|kSr96y<{YP)!GBIt%I6>y0!&ciu!nxF zyWc^K-c_l6jY-tm&t>KBK3nK2go0$W|BBOlk? zsrAKDpKPKU>JyMVLKM#bkO$0gq6Jp)k2CUU9gNY&SK_qt3P$O!{=DPi7R_=tstJHc zw`?EQ>SMD<0$Z=DY5=cYhP9(_ik8>x1_mFj=PpOC$eyDPNxU$z{(VGSvZGDAJUkBp zwCoZ}H*Q~QXE_PJb#%HXR0ivaWeCRrqqrg}Jjlkj6rQcuh&yk@4iUmFTXuD1fFrNY z$it{&ClRJoU$R@@iy0~psTupi|eal0Pk*9xB54(u*k2YP-Z%>Cf`C21deTpGEhMb2ekz$s? zP`vUomG(NoL0%GMq{EAK+v+JS(C3aTi)Ojya=thUnsmci? z`iTNM10ak(Cp~gXb;+0DvO_2q69c#|1i@I$0Xp zSbF`Rr}KZ&KwoQj?6HJ%_q?M&225RiKt>43*tIMNVQ*APw`7gPI1$}5uv4S3{`hQ& zbU`yPB15{ruNrawN_=Jjl1W83^s{gvv(760m6es3?xbqAs6rd~B+mttvZ!wezY}m< zRa~0NN1tZ9N6}pt@ENa`$^&V|6k?x_>B$*DG+Vx(V>za(Q&CU9X1h5!zoM2h>@*B}y9&fK|{J11_PdmS6bz7xm6*EsEEDyv%0gp@PSB$_5!rm0mBZ?zRxHt$S*6MJY2 zHtMqpQ$Suf94SNeGS>Iqpe)ekTSDh1gxMAJN-0MK46yd%b5qW6n9uMqtwq&~mT2rtelG*8Ys zt0x1vBg?1~T0qw*(^iJQCsQ>V6=BZ~y-Ty)es|?_ds)>?{HV)s9EauaTH1TFrS)2Y zKC_shZ96pu(IGsaPf4J>v5{)rhqbU1G2blH7{7O;(Dnq{<+(LdJ51$YRqZN#dHr(w zxkgmBB0t_qH0bTH&y&s(eY=c1Xe--r=bhCoVLvHdy|pM&$I7nnH`kR@NhfgeM0_$( z+O@L0WA!GV6*BpX`J~R;ON3#Ml$G#Ap!kg9suQE^HrL#^JQ^pRPviGo6WPaOjILrS zRN2rg3^w{xw@m$(`Wk~stexd5A4juziZ4&yGvjsCk92NYX}(ckJ(H+I^UYY6c*Nzm zywLh=FRbmSwLSm1V1UL%etmkh^@t06Js#;;6t(DsvFDeEwmw{DDtL&Pg!>Ya4<)U5 z{vNLfoXU1+c1wdD#~=Cn@v^*WG|eRv`X*`ae>muYX$NwT4r0{FtqlB>*S@9jX&*aW z@|CK3WK%%n8$6mPD^>|{W5%`Nw(|OXAGZ_wegSmz7HL&R3GkQC{9yCQ1V${!e?sj; z-ocV?_fKa>Npt?6KJT!%seePl`+Piesh*8ui;ygiYAG7x2j@{|WAeXFJifp88^{*q zIa`9$W%Z|;l?C72ur3+Eu-Q*Zo_?v}kIFikltFmYXfqJ*er^`8^C50?A~)FUOyuOm zw^AE&m=!XL=?BQ?(@&MtVG{#u92-zo4@spL##$^^gcD`~;O#Dw+Li&}5DwMea$hOx zgwg{Vh{2T4 zZaPnaAu@+=duFV+aVPRaoX=gBP8r1CQ@mM{72plWgvdR?@=~i@qnumxrW@Qna-pQ>vuP|<1NOWucGg)Y#D$l`2goel z9bgc`W@Cn}MwU`!u?4fL!!8cL-yBp~uF5!?#d;VxB00^YoVA0yj^M~G=ikZKszt$k zBvWbHsbP=6GaT*D*sXKGMwTPSNWp~_^nrByW|8{`IR3{59B1U3zF^}}GX=B<&9fMv zwF*}1AAzFj!^Wq7K9N6wd|+<(?gp%s3IzC_h%%#**u&UtTpJMxenK0{Pf0*a0FJfC zWCfo8%+uD*&i-Z5u5#wk{RdWc#s@LA7l+fV0b{0J49aX!=SYt9h2}K*SkMdC@^E^zjV?d=!bH3jLwhTz$?`=VVlICHVm8p0gE{X2$p^TTki16f=R1Sc z39%}Pru%5DnZbs^(gC}}oYNE#CH`S(cuE{Z#=zDcqLrUpbCWYx>uZ2-L{QpoQzHEMbQD&+v<3XS6m@G<9ATM{ z7l96Wv;<(-fdA3zC5nlhISj{DJ<{m~1k_E*Q5%qNLgz!>GyRjE@%ooWf4hTH{@}F$ zlpA&gUo{9-zKN@g!lED;YlKNda(y1v{f}`zk%&2{iq;P(GkRI+aWz(u2!#YFf*MxG zsLE5OH)x0^o33&r%Ov0~K@Ec@9Oe$L0p9$|Net&l6buzHXcL0pCjOnq@VURaT7CNZ z*&_qm#y6-@ zXV>um?$*Mkc}7wYoV>G}w|mr88!pLL0=}2mP|T zIDAHNDW@66-w#YK4!t(!%fq%kejYx*$L+LDnBI?{I=@fL_oZ}D<~+Y366CtJk&Dim zGTWRKSR`GHi7X%HLUrZzjtvNPkD7N^{oy`3#cJpHl{4#N;cdtDM0jL?M2P%oD62MP zR)y~Fi=cwk!&`WPbf$DANV!Jk*zwql8hsqNi0C`-LZ~GKJaqN^y2@xmNuF@m;B)+& z03ylLW9DWFLby2+`MjLxrWd2YXvM6WNXq1Q@M&H*z}hp}ulukv6|a;Qbo?VA8mN3+ z2Oj}`tQMrstr@V{o~ni}6pdYN=t`*Snoab`+st1%C5rf5n4Qop8O=(j7H*S_8iy7z z`+qLUy#v4ihIt{>(LCq9)ZKHBh;h`ZcSqVCM;`QF?lC*G^?G;p(m_4!oE`|8Ih4C3 z27+~|QI-+vA8g$C1rnFl?OZ}y{8E$udc##cMO^pWjbnZANYw$t!{GD>H%5`Rq0kTS z1QB_CHTpD7nceL^a&AMoixf>Ge{W}4p%3zXjl`urz4$os);>6Gio0_&-xV6B zhC#NMwn?AJq^sq=SueAyv|{#D*Y@YnZgEX%P9<@NW{N?FRnE}jr$6iz)-=~ z*em}Dv$$0Y+n~4_dV_kOWymQuGUmW#`Z%&l`Tbn6r#aveT+pz)m_8KeYuIGZoPp~5 zmR5CYow#aqycOK)9gZRKuc#bbEJhyzCR_s-GlPp}(PO8H1EY8eN7GCOHkj{DyXq$w zTp*3;Uzo${*&>Ric2ibK4=C(+475LM9$EBd++~&(9nVO#aF+xPcTb$2YkiNp&CwwN zKI6;nW)lc=5U2{O(y`5hNLm^h6&p~{tCBJX&0+N|6$>f{Z(0HXhRs;aCz=H}fCb!Z z3H^o9xt;j4w~IbPM`@I)wm8ra#RaSlZ$aQA!eTK@pCdlVGe9xdn&EVKRVInD2CK;N z682yP#_nQUbI=*2xKynJ6F`?Aw1sBy8KrU4#n$F$ej-fUd8aX(O9AeBpEfhHqOkn}zxi1AA)bv_QgS?Bg=J(u=ni3)E+;u@85 z<1vL0SzHpVOsVZ`Lbz`El!GHBv30dy@`{?A-}&_$9w6}WnE6rdm-2K&d*DWxao=+T z{)RS{l3$;roy`q4kF}%^82G7p^6|u<0TmbQT4W4TI7Tusr#9a2`D?O$hBg&M!-y#V z@aW6F2#$E8eO4ty5fTRi;kiTVYas(GEzYx^C}ly$`=M{pqiHsjz)jXeROGzyjgEm@ zrsM}>I@>Rv`J==l77A?m78$43uzK3w+ z6%)5??Z!-|edtdyNjJ^=J=h&a_$Az%u;7cpYXhCH5;(7L2SB?OaIuB~srsD!R#d==~*{_yH> ziitY4Pp};j+VHGRZc8~lMaN#H%eOo}L}}5iAApE>Qp1QmFy|qAY91OwjX3q`A(Z=e zYRcmg_Crw;^o0DF`v80M!h6K=DSAQd*EOL97r=STNEkJkJcz4|2&niI@VLbs}m|41zbM7Rpi^UCXa z7Q+;CrNivWavt!-LEE=-g;K^prAJz9kiLY1qWT_hUl+wQXQc^Rg?3U_PD?+Vugu$G zEc$*6x_M-}j%k^R)l9&AgvfpVl%N;gB#@7YZt4Yc_V*&33z#+YIAAj*h)>9B0ZM(8mtI2Xy zry@hcL(ekRb)&U*4~NWN6AE}Z^;-BMr2{BNa*+wcD{ZrlSS#}&23ilZ&r(h~$~aq% zn|86fW0JrZ4mIX=zLSw)!{r(wg*A~aBYZMW?usf4AEPNUShMvX^UO_XLpRGRQNk*C zxsOdR=HLZm9{EZq7>IWi*E^V+ALtuz{uQWhig%gL>^$M@nruB`HWxQGm4veCGvN9P z38w6pE?tmK*E*CcBlP3Dk!eKzYEU8}F$Mv;yejK z^WIBketd~+aUwbd%OMF?xM+nzhDEel6OeCFd?+G&R{6^WVFtZwI}t~zG*2D3;Ocsh)0Xbs}G;S8HLyj|2OF~b$zdXDNA>L4#w-q#Y2Ck5H9)2RL{7)GjCuFY(uLh@m`@WDb_RT2_Y#+<4(z~l{XkU3DC1-6Jc zayMa^U`}_f$W9LmYRyL{qBpD2EXT)i(70%GlF%V;SD4{_7g@SE3n8FzlUu#jL!u5Y z4K{EAWHZ+W8mVVBet~$$JfJfqFPCOlglN*uQD&dIiq*uMwiaAc)+1#W^FvloNI^Gl z-~T2^mzdVxhcFNtN4h(qzuESmI6^+mK^~Of#dYoAQUV{E!nHi4g@9clN%`wWz{wb8 zh`j>-*?=#}&ar164RB@YOI&li*UcS3#*t%4H%P5W6LON2p?1yI&mA$a?2zmQEmu2> z{1LG|4(-A5Y`y!U{%O6yViBT0tL&kVuVdumMuGrZu26~K!7gm@;lbBjU2yW+Eq@d zy=Gma!>!#+L@=OU1Cvz)O9oe*@=7mnKou|7gf}NV<2bNRp{ZOiGT}v4dI2NPF+g{w zQxQJVfctH6h&TZ5Ehg33OI773*L0BoQ)cB&gDzT|uWQ3#Eut%&RflGQlJWn9e3P+? zp7bQw%y3faG%xI}UM+JF<=OvPNI%u1YT`4^6mqAfbU+*RtoMz=Tu@J3Du|It9MnHY zVa*uaa~Up0mW=!xsB02UIpF@>%QTAT(gSFAvh5tub#@iFu<_)YOQg;$8c2EAP=NX7 zA@)AH`kEhXsuV$F@Zr`glKX>xebXd>Xbnp zC*9VkgD4+y2l*_kP6oj$@XyMd6knfis!olo?+K$mTj*1$i17*GeP7xH{HuGmAjJPc zGpw0ADcUn!drI+n1}HlmsdmjZ{L53f&oSo+82ganS1v*qbDxDN7T76^>gKVhAFhl> zT8F(yK_mO{B|6c(VCuT0|7%gl(|AAexD;ybtA|atmn|Zn4 zroZDKj|a6#UOC_$_aJ%Iv@sA2uK!(H1=aml)z71co8Kj`j!Uzzo>|9Pt*Vau!&eSo zCT5Q7ah7&>h29Ij?~GA8OZMKP56xTHS*Z}uSjW@pZt9w2+ewuHBq$rnxuO}f`|0}L z9mIvVdhgu#d`vbZvyo9DJW+y4c%!2pvpvC*d_3zVK)2J+oOM<ra+&B zE=Go8t46F2Cq05Bf`-$`9$uyJn(iEok8=h3sndWK3*%(!kWWAnZ=GcAozKAxGFFIZ z4UUpFngvIFhg_`WCu;;n{M(GvU*aGOp|OfL+Gix$btD|fcOm;6>ELtFeE0Fhr5=bd zb4%z(&Yk`9ZrD$_ffDuzoG-m8W1v0cl zTG%@RxF^|LbEz3C{+dj*XEBw}+#NaNjG|3VPA?CL3gus%@VdN%f^|aHiAxxNjed0v zfHJyACA%dslm=pRtq}*G^APoO?)8FV&MW&>s1GS()MUTfUFJlPZDg%}(sI08^~T0b z2V-?lQ^WYvNRBbpP-xiF7ua)jCJ*hOK0!*s+&=zd+> zvVgLYv3^nAW2J06ccY0uC7+>xxiB(Iz?_&c>=XOE;D|CY*G0#-N^nT}Iro(VA9|IQ zn?cGn<03QUh@-%zbKE6B>28FdepT66!Y;d>X6CJ$&fA7`@QfyOrb^dUs5v3O&AbWc zS1j=Iyn;z5@8{*~>+9@HT!_b*oIu$OnoHnCBCgmX24?9VE=$h8(=6{Fgjsgp$UWPB zP6s;5)tGhl+C_ODYA3o7z2hyJ5PBBuo-X@{AL~}2|3k~~-rVzt)034DP2Ga)(-X#M z?4@F_gU_*LUZ;;sE@d@0`m@pD>Xc8-$cIJlufcp&2rB`b`Nh_l&|x-MAglNMK`voj z*>jc7a#MdKK?#gAkMd=WXd3OSDz?hr;9!xkn~<&;fK4R*I8qQRPa{NY^EIxw{~H?f z)mBLXjtuGN^fzp`&$n5@kDEDz%ayOafmzVBa+!mu)c`Vvj+v=zUL9DlslCu{^W?lN zrddp+rWqD^S0~RQwFb3}GKxcyae5;gLu()#t59QnYPKiYvhS9?irYbh>{c*p;2_IK z{%f8`QTdK&1M`V^p2w~m4e3`}nE1P?yxD=fiO(Gk1Kxb*VFCiV@Cf&1fu)C9dgq}x z3CXlaZtuqMaDI+3*w6={q~RR5KVX$R%m{K~v~cqU!4v^PnpzGAqr-omkYF8+By-j8 zaOA7aCc;~TIQRlfSA-Nc7>5ZS=>nS1pAw{qARWjN+vR_^ZlDt$lt~ouX&tH)9p(ZlCqY=Wb$~3sZ(V>h- zQ!bfYE%mXNzd#jQi^~j!K+QALduV{QT#?SeOajbL?LmQ2z?h4(!wn<0zOsNG~ zWDFb9j=e8A|AA)J9jalQ^qLp&K;#-kCB2fg}sY19jx2B%Ph=#Vs`|Ij1%aW0rhVt+N}R`DQt&*>Tpx<3!aF z#xp)8EQF}MkiJqr=o5||kPBn|Vxvg-felh*Z^Njlt#WFeIJyYkbZ=t3-&_=~4)yaH zuMW*UGIwcL#wTshEobE3MAlL2Xn3Bx3(Q3ZSqj-uMq-6a5=vLxVB#G;o%%AvDStEV zoluCXgnpXWSa$6~nSf^|E*Zud+y}f&CqYL91b^V}>Mg<-s>Zl|^;M`5d-_TTZt2m> z)ZGq3{(Ax=WC1O9io%%lYKsj=MEuRWcmuT@%cC5gP#nRrEX$Zp{`P zr89n{1VL;eDk{BA2gYHWKnx-GRNP{Co>%)@gqF^XPbiNfR50uO z9=5T9?39BqGus+km#eCQwPRQqj=u3xL-Pk36ICCGoO(;FJ0% zgCoakIZnTh2Mm|@tn?T?1qu+UhK`zvoBJN_`Hcw5#tovG*JAK4=y^NaxF?(=u_hIr zFTZ_y#;wpX`LzC*>V zIDEF6B_$il6q7e-bM5hwSxT+Al&zNsq$L9-7!`C4M6AHK$@RXoD2{p{kk^HFlQ$>L-M zx)pjY3=#A4Is=&=&?tfBBbJ;I3l_wBOEg`N;427>4{O*a&@3F9@;oS{Mh>9SG0Xo& zb+mt-T;$4>GlOwOpu|XQ^~X#(jx3Av^4E7}vIc>e9FGUUq`}dK0>ys(NU*m|m`D+i7%M;$^ z_}3HJm7Y(F;TTu<3L`gUMfoFWyWP6q9T`D((E6{S6l?NtWCv-MvUN;QIQK~?%)K&l z>A(hRt%ML@JArnJ{uCgAmvJ(yd?HPvcjZhK`?=ko)Cb5)&49l*@J3a^VvDGcz!OAw z7lrLX10rFkDOO2+$nxwSjbBApSdmlpTL0^m;Nri22liWaMr4&+qQdq9nLVc%AZUx? zox|C1>X|@=EJt{ScAq)uVRXW5j-3+l^#n5EPNhpL031#hvg8or^`sbx&P0KUgx3>CI7<)eP!xY|c}=s#ThW&t?zQ_g9Da|Z50PhFkwC>RP|0{zY@du5Y`f>m)6F#?{+C(sj8PmHX*YA!$7uBMwNp%6LM zrv-GgjWAw9Iknuz3hV2*BW2f(uxPn5Zd8I2W;NQ^2YZn~c5>*{=3WiJznq5^Y-z- zw{wgC@EKmI-rs*G-fGwCwUt3D2ihhELilZ1|;UASfjfccsZnjY6-H1SC}umrb&=nrH71 zIEaPPveQL!!O6|*Z&XfhQH&!};Hj=_!3_!v@?0PjZJ%U?5Ud=STxxjL(isO*Ag8R5p_KK^zD zoHb!L)Cez_zkn+OI_g97l%!lzy)j=tMw8Y|uNPMOq;XEVT0Qoq8`_MEZVhoW*9}k_ zFNkB6*U9nkk8p2BOb*Jp3%|ITwJ&{?uGPTfLh}OVyzX*CMyYemtxOsp>Mu}7vqO?( z2_HRD_Z;20N$jl9C@qxI%5C!`bwJf96Dl6`TUw$D{$i_z8Lw6o6C5GzfsJv5y3@{8 zIVk^~5S#dd>iM0oJ!~ZDtcfG^%c_sD$QAvAaeg#m*eZrkfrv!?_uH zu8~@?!R7aJNrckT5VFXqSs2J{1=sa1Z$`t-T=s4stI;J2U${9WSOLoSeJ1i^FIPIx ze-7MYCt-JtbP%sBk8xRZsXr*L4VP##Q$ta@v2ur6S((2TskH0(#s>bvA18Ugn`GYh z!X$ckytK@X4yo51UQuMZad#Im@?`9t+WiAqozH@c6z29d=Wncv-vl zC14hBw)H+ZhVQ7~24Kfg_^IY&wU-fAKR_W{iP>w=;zowO^>uRw^y!!P$z7*BfXN}C z4MkH*hJNzRu@O32y6cHMvv%dU^3bK;HN?)6-oK)w6!-;z#_ZU=1o=5SQ~Y*9dnwk; z1fiW^@t&WH1Cxt$y3;pRE?3vS*U*p1@rAvPCWwjTya^(o<@$P;KVr~--o?_R4d2-N zvF^hQ0&tn2ZFC({M=b?vNOj7F z*s;xS4i3A}ST7gH8MP`v^yfuAR!8at3?^H6l^?e#szIu=KHB8KVjdCU@MC>xeYjQ) zO~)Qk16i$AfjS;^N<24q7A;{`W6@^HeHP=)zZ0F-JaNF*DFA6MU1cc>nSd9CFF>Y( zn9zURZZs4~+3msjEeNj47_=X`arT7ZlNT8%-LE*|nIIqvaQG&H0rzp`&l_U-3afDL zIvteRDbfdYN1}JxE711+1Yo<^vt7QjS$HV#`IimC_!7X;cv<`{UHh%D2To6{P2BAV zr@?+azfAkyj?{cYWOm_yi6uk>cW-yDa%@` z!j)t^efr#QZnwGcLP?LpuTqF`?X7g4&YH}$3k7VGs)%xW8&9Mwxg}ek*Us+cg>Y>s ziv1ua9M5E=-x{FNK0e{8y7=ccivM2<8xywH%}+V zeZ+MZ_kxUe-!)a~7c7~snhfqnq*zA>mCr5F#Q9l|@so4x8QbRU)Fa&V9c_%ywt}SG zXa-v?m#EZ#htdXV#AJ)0QdGdL|ENDPOnf%2S2rupj@1Nxp9;PYR{DcI-Jw$33oitcl4{k(A@q>QJa#E4?0Yyee{fR^OfW zVT8C7Ui+AG2FDO(JA0$T%fZ9=9aV`rjX>vb(&YlK6>SFp$OeVfej_)&5c7UPp2@KL z%a_ze)Cm2XWfPuun=!oWk z{D#8@da6C6q;xgII8Q&~Equf$rC3WOyg@pMvz;KbKkb3b-Oosc({_o%UK+@P)`!Fw z{FRWxI;mwijARAgYHUMr5y$tXM_1GHh1|BlAdXV z_RPUaOIbL-91=&u+w>&;23mj29m}ekX^~`8AJYpAxsyM5uq&bL6O z)AB?uLH9x%)IPg&5fH3v)Vqja6p-y;oD5ISAu;kff>8Vn~yjB{BiZn+%dsfULlS)qpLtroWS|C)s<1UCetv8yw|R*5aidVbdn9Fc1gG zy`LAS>yvid*+}GIu)AY5M&Ob~Ms6_gH!OO`aU9Ow0PIfT_gR0^h)`k*bi~&R8Wnu) z9z$M-gNk1|exi#L%5|=5)&EFA$+>1YzrV=cMNL449aw!Ftn zXZ{4>UCf^|Z5dF=ws+O2#Ns(|xJMNAQD)PfM@<8(kK#1U%_~}%yw-UIdq=`x zZzVZ`jWHMp=@2b5aa&i+)))?`a#31K356TE5^x)$B=r5^H+wO^e7ifq82xOm;5Uu z3#7OJESsDzm>uJ&{y$K*?BgYkJt-LZ{SW%-kMV~W#or&x|7q!a&Hu;D>HcGa9ofs} zai-wItcL$w4?awJL9T2PcU$HYS`?Lh&LC;v+Q~=uae5`zY3O+0THmNv2RD?EX%D1! zrzRCmRPL<*a)2!rWBN_(zt5OiN59_i4UZHAJ9Ul4vwWYyKpI4WxJSvsV z_hr9F-&`C2!FL|6OYWI%MD#oJoMc`dcJIqIdP-SeRGFe&R*t<#wIW16j#AtU;}E^? zVM<=k$TZ>elk~t1jZ$&|*k&RN4`hvG>Gs#|zj#e>%NUk95!|A1UzAZD3{c#op*?%e z6r)T>M51&ThvC_N;O2uc)Z*kGr^I>-Jl%9Xx>T2V!Lc~SeIRC3sYr1XoU0_Pw6W9r zMF9bBoj28PK1c?10e@s@g13xlpb<0Bq=<8ZFXmud>lS`##+st5xn z=2s$?GB?{N9yXa%h_s!kCVs&S%u7(RtYAb7*P>u%bgZ!&s{$>ujM89f!_YT?u}W1^ zX7Fb_IUn1{_XuMwf%#U#bZNazrtF59x?G-YbZNqCu&AE3uGRGGyn(loluY_jE+dBb zMm8f`9RsUG_ds%qr9*`H4%bad{~h}5miV|$m+`1*jf0TlFtBimqE)@_Zb&P1*aV|* zn_;ytTx-psfixAjEHhho%zqN7HgrQ2lm%4IMdB8Vk8GGtveae$URkz1SsaWOvPJ=qcKy4cG4A|z z@CJ7A`smobxmv$;brm=sLd13GB$!!3aDTpwwUJpMg_eviAb^F$LK!! zyU&bO5YAQ75Fb3ydlA9yOycPrH@8oQkQ0YryQE1paf~EoVH=e+MumL1t1vb2XZW_} z!V^bow9X9oBrCMBm!jCWHmUHTdBgGRWVg%Fm18}C5k26!CO-i+DokhU%!-$N@d3t` zJaLA;+Qd?#=dM!A8i;pBQ4n}V%|uaW38m5pY~*8cT%Z%RG?(eymKHiXW)|b(HdAdr zx5$w7poBC=YDFDR9FAie%7~mY!t8=_e~y^3c#ga^f?e=zl~7skbHpQi=Yar zf1Rm|CAr4)csK0Jg=6gcE|yQw*r#3JjC1sM=eNFnEO~AkP3Jrqase-&Fz8iFbAnAb zp|FXh25m>3bPLlqaFc2KeZM7R_)N&IRy>sC^IFILx!`YkAdU#Ip!t{Esqrnr93Xb! z7X7TWZ~^(t3t1Fr^~dtojQ(Htd?N2@MlaXuHb-;^2oCxA7uiP8->1edMm!8%J2?`2 z7uZ>AKxB9l=DGvLM(yl&a#~2+;8?S>9HLb~_K{*2_RVZ-4IR5vwU{SHrC{zwpN|p^8ZDKgzW$Ni=*MX@SO%bx` z(Q>)RUImYf2Me$~pc4d6lhedNuxvLlJ;;Dxw%3y9*4C)km=Z8`Nw*NKSqw4hqb?c0uj9j)R3 zh(t0XJRn4~RtwD>ohn?Lm@v)=ab^T<)dHadZPq+aorZK$b0bb ztqh+zXP^ExvRWDW!xy?x>DJYHi`5)!;&ghj-gk&Obvh+wG)%U>YA0bUxoNbTljrf~ zl}ysuE%lDzZKqa-fQ;3CyeTS3mJOxHJ|+zqj`KDFpumb4IMt>hpeKv*qaV`Y1~ERo zd?%|L#Hd$CDaacd1ahM1epv0pc&oM#^?=VI&nuNdw$HN(2@|i#AeEZ+&@$2wXgGTc|Oc)b&JUO>=ArD|N(T+0B z9Q=FlIBkWr6i>fSzBo+t9uxTJO6MMAXLDdL&i`TWoti_9x^BVPwrwXnwr$(Vj&0kv zZQC|>Y}>Yz&ReHWo&L^ESDmkKx~i|9=Ld{6)|_+9HHK1)YFVtZ)^u%3!Q_Zl1l)^Q z)otR{u+9~!^L5x3f?4b?R^x_C%Cz2kILNFqPhg4TjCPplZr-a>5548MX3D30l|$O+ zXL0h|684$sumj?Js_NhI$;`C@F-?D)vTJ{iq4UmKdDY7PN zofRu=@7fh&e(Wew6GA_gBkmRpIQS|f7(zxH)(KqACL^0c%5fpFXqBBL!V_5Wz|?P0 z*_E>pS;)m4+KLCm5uU|#Zopy=Ta&0+eR(U`_c&*ZDj6kK=D7c~{ zLKkm$&FeX4kt99#^-*R@$s5o@(rjGNM}jMQ6N+qPFD5p>s|M}z$6>^@IuE52lV;xD-QeFIwQXk+{FFb;C-`NP7EQ9}jVu+@WYSNoCwk*NB4y3Z=`l6&~*VF%4@Cd%~) zx?NE$J}s2`EbfY68OJbDmg<8{-mY@ukz4`_e*8G6i(y4W8#5TymKpe9{F>B3BzLAz ztLF$dwv`zlBKEG^2E-Gk|Bq4N13cpu!o+7!d<=(@-;VtW*z5?agh#Q z6)G&Drm6K3rKe?Am8INQR80G{%a@o03GJ#cvhTDZj>1FQn%*T|O(iHJ;rhWVXHQ-b z79m@W*)lHN1rd=bkTHV&TnoSDdE-(*2Qy|A!5)qvxXGM_oOm!=+bE4dK{Dfje?oz9 zxerxaLkyyrL4=uqS!M!rr0F%)XtYkHqxOkdcY3ONs_S{b?L~~eB1f?kqlbbo%V48< zcRKP|-NVd@sH~W%(ynO&yE{@ZuzN6=-nx1)$wxi{SA<8}syRbJ2fGb`4KyZ+=IPh>r^=%uyEeF}rP>_H}K?2AR}yDbBs zVJ`alsSJr6g=pBqo&9%w$-to)epQ0oFa*-xuFn}RuAP^DOTXm4(Az>3x0ak-r`EzL zBfKl}7FCP6Y{HL@)s3rDhIfEW1% zwU>p`$>0UuOB@Bmm2!lXG4^F}u5q?EV{|bOzVeNo z+v0`Z0XnT+oxP7~4$45-2zNCf`w)dia*C2i`hJ7SngtZtt8%KA2SV$w^D9E!A};i3 zY=pT+R?WEl&U#Q@rx0CKw_VDK35Q3^zE`pd;;aL-yq0KX904bQ&$2kf!?x?S!eGRx zwl}~~aKLSL_MUg{34D{{%KM_Qs za&@tY556;FZD{(fW{JJ+&`u^oXED=LPoO}2t(8XzIC6M&ncyrM1RQh1Y|IzOcxUHi zRA*rTk*@M2x`&I*bUC*XPPK1{(Mv{Q-+>oo$idKrW~6qBtO+t3SY6HSzdj$zP{ z7iQ?QaBXtUGwSYnwk@DlJE``qwnUs2jWq%$vfdxZp0^CFk1w9jiI?3Al%CSi@beKF zr@$w5_j0)R1D^$!-PV5g;!}|wGuw{14eJk!>d5vUn zGqW|S3+{FC0f-{8Wsi-d9kGQ`R8O43Kt?+}LKRR9b0DC%$R$LRo@EOKhEkmja@fTCozG{< zXxsGeEo{-P>AV|+j7gSbEU!0O>*`9Xo6VO3S@I~ zUor>Tw<3n*@Mv)=<>vK|O;5p$95l}+`1S>Wbp(uTxoJ#Q-dJnTEDM?9%Gx+dnEUv- zzBQa%=s08naW&ITCKEd0uVWHAU+(0zY9Bg5_OCHT*@JEjA+pMW{U6|BEU2xEPPF2L z-jReUL0MP|M+>8aG30KK{$cKd#aL{VmyhHlkB52fY=Ke8%|V^pWLIiMF=A=fs-liQ z64<`E`C1oEloYE_bEwjb#QrfL(b?>tf(4yug{j>P#p? zUSR70_sREes=^sq3VZjjFk zz&PEDQIZPximaw@tjb!yH^iK;0tZ4VxZQN6>X zt`X5_eo9$mi?*^HDsxpyv_?|4(y4) z)?)dXA=D;3MDqMn8n}6p=1?$Xn2I7B{Oa}|#~(zb~(Y#|uQWj2W)~DOQdAz5E#?gN*nVVkPBIq(1 zv2|7CM%_4djwctoMD+-&3GouHDX)#6nzByRc+y|W%6j;9e)l5o*aZ9m)a^nqB1H^w zWLjaeaLI9kqcybCTWUR-9>>cqU}4T65@B7o>7D>eL^Jefc_)%q8@Q)J1UNVwiYkdq z#jAGkJoZ9kN;v8h%r5-!R3{}l4639Y-lUV5_nBT)AT;=&?~uuSlR{QKOp?JM19go2 z{Hx+0;Y^SJII%seQgskzm$btD)Pwu85i+LJu1B|IO18T9N9iFuOA)$9_N?z|Vi*T( zSFpOJUZnQ`r=9V9olCixDsRmc zw<+E+`HSNhkJl#l+a?4W``OpLec!s@XBymV+?&K+((&synr|GuoPeh^aN6;fc}B*=ShWX-8Hp_U@i3dLU=^ z=cpXtH*;=IktQWLeJ;=r@K5(P*~9st(}LkV<3|!M67n2(`pJV0h(DdYoD+e zirsPUOSOCtNDwdrF$od^nHJrq$qFm_>vDX@wi%Mz@uyf2Zuhk+X9x6V0E)In@Jn`n zRog!n+&CQ7xLa(!`Td0-A9iLK>OVXR*aDx5Wzp6m>a^(^yT10HE_U1z{%AVSef95F zEwID7J|AHX*^lxwdPq}wTwvwa{YBxj$dky7>u4mMlzFklDSEjCLf*a^ z+EcxpcUn~-p9&``1HRDP@4|*=u+g}Ep>Wz31q>psFV5EQu>BV8Ulgw%v(AZ zaR{Cf-KTqz+XQEsxsGIL2Ic_XB0UZdRm??twCAH`9Dw}%)qM9+tUHI5S%WbX(V=B% zA$Gq~JS`DiXBpCr*H2|cMCix00^*a-%V!AnpqMzP_r7pGS&TDqfiR8sxoTh$O)Jm5$4?WR$v~l z>)qSw4)afT=Lx}=k$;(2uzre_RcdMP<<-+c{&CtBt?0B~`n1PlhQ#YagNT0!k$;ah z;TmljK=n#Y1y>(o69b-V2}qawBkwOOrF025R%== zxZ5%kM*Rxf(V<k7zPek0;8f0G`C{tx|449som_4Leb z%$@Y~{*(8pq-Xh?_vp*^%7t?!#bnAC%a11tp>xVPv7D+95MSI_JvA4exH+=plaSnI z4(?sCef{`R`tXKDLTSDJw41pvm7^ncXFy(IJr+~7F+C_qwe2Y7~0p8FPCPA zUm?UKvxg!W2__V`s~C$8h|ZU4$M+s19k4}$VQ=U%&~&;>AR1?w)ZUR}@&y z0F~qHrWHM#2>q5pnH%N7+2j07$LDkJa@l-GEx#V#G5Yi;(Hzgx1dq7QXkUb?JD+#j*3l9+{Ewt#X@ch9E0kQ&rV%ExSDz;F}F!IxU`RfH?`J zN|w>|r6HkP^k4?7RVdnOws51!Ck_VE9<+mH2qQda)KyVA`Sha#XpcZ==skPZJwz;g zdC=z9;5c0Fp59A+@W3bLQ)mq?qXOd*hcqs6cWL89$9uZ*3x?+Ibgpc;Fgs;s zq`7Adfj1abXrUz+&BW1`Ytwhyef~_}_trk(IfL zjnjWnp{`}S!HVKTKl{U92Hy-VG7bfU5yjyb?_@pe0yz&ehyVgai@T9!qCi~Eem(pB zjGI6tBH@x?FeycIuHECf*M5pR?lwJf)TA0&n5*04CKB`A%13(@rN-5tLM4gq}qZ2#6BwOufKEAERL`QQH zks=jmEaXa3*c_j2PuR51QFY2A)ZFxMJSE@SkpMI`%+}!6L=$hJ#bayy=jtt$9xcFD zUZt7XDzHYC1ib9g@j>#6Dyq|ygW8ob-I`L#Nta)mj{1sJbLj9mw$k-%E!6cdKE01O zeqpnsGfB~H-fX8hZFU{KJPkL4F*OERrHAa#JpWMFROZwmD{jh`; zqCo2Y8_bd`7MgTr)}>nJoohe&VfQ^!I)P$kD@BTjh(<+;n;8-b%VDT+7bsEa=Ou9$ zuan&vfguctmkq{JOnP)HjYznaQ4hER5YYJyZ!{zhRb79cTY~tip{UT$s zp!OXs4pSfUSTcG&gwKmmI^?)Qk0BbR3h#CMTUb3I_hX4)>ZflAkmO*hZ=zL zqWvGppC<;Bx1i0u=Sar^YeqHYU7ag=(vZU(G?qBn_1X(Q+Hu=noh*Dmu33N3LSRE# z(xPU5%O3U4aVTubfE90n3qh8Ny3)@HsnakU4y|;{RqOUK$ZB;Dc)=AL%ak6VDgWoj zYs+`hGE`_J)3RoXxYMig4g6SHA5PAq5+ z`pXO8%L8Z13rRiiG3>LNYO;KzsBqjrA*zN?i`gZ!-B7-TKTfLb*iMsw!dAhuK`o&D zT5Q`5;zvH^R#Hi5e4rKYe+6ZVdaevwCmnUbB@+bw&sJ) z#`g^#uSlSXs$J)p+G_60z$FT%zvc@jh=nPfWT$K^Zi!VR;}Bm4bcV!%UGopX(hyoH zZhv0#;>!Ncf{CSgZ_a1hl`Vr`VJEUoF-}+nZ;BR_f1ibj=mto8&fNLjNIxmFogdD#^A>g0TX3?U z*|$|$%8g$CCUJZaR$S=1UNV&c{bsmzdG~A4j7!H8}l){>#g_wT3sM+rEfjj8+O#Az;&e(swqsZ zwsprC24&^sz`4v`&+;F#35^}7N(sj)JbtdhHdKpl^0IJ#x8OHG@J>sp2=)x!aX|CG zIrK?d$K247{|t2V4t>2h#rAiA3&>w}jT{#tS0DS9x$W*ix_deZ((&bl)VzU$w?)74 z&igPEd(h4%cD@BPQ@pC4AY2o{8g`V7i{dTRGU?%;B$o_qyK1M;n2i$F$SXDOzjAl1 zA+O`s+AEG425F6l)P!2*A{w^<(w}(JmyK_my|eTel~1nisQGCa^Kp3asX3|Ht@|uA z4ng$OBAarsxZ@QJ9IHi|_TM+yc?xF+u`w5l_&c!6(s^V|arEmz3e^>u)Ucsnc?|B7 zI5DqEc61V8b~;ly6!T@kSkRTc zQJgc=u5cCDjNhNQmCmlcUuCGA>9N!#Enq7Mt-AN(HjvjJ_^M+jjsQd#$yG=#>JpFU zyW!5)jCrq2LpUefS^PAU+Hq?KR6%{5NvY{-yO5-PH`p39uJi;BFhzwX%qIot`q|EkDu1Eht^`m7Lb z&|{x0@$nEc@sBeB>7b-54sS59IGmSCkc%;`f(+Tt1h8ht!5-r!Xa`vhFb)~iphSKgMIUl4p^5( zH-5I$`FJ#_)BVPksOWBk60G&f?j7AeP26$++18xoqPgN@6MXzpI#q%=E#)3ggRbh8 zBt42Pye3SPF{E-cu@SzuwT+VCo16+MN?n$$_>&zOC!N&BE;_MAQ>Y9vI9Px~T6H(_ z639a(6O!?C@$@ygKbb8ekLJlJEhp!P#}*}TU<|5W1#G&64Sp3X)-J?oOOW#NND`I4 zd`qd7k7Oo4V-lqHa%#DFN*E*}<|P&SP*qL#_1 z(KP#kyH-r8shIju3!mm)7OP0s0E|K-j%gT4kP7mV27&I1Z2SyuJM_XQL#US=AcjbH^ z9=+(GXj+w1nY%e1+Ko9_Oi|AZKw~=5z#_0D^d5RFXBbm3!JI3JIp+4U>D8`p3mt2{ zEC-pogmDZ-9mDP8I@r)3t%$pqxbp z3$ikLtK|*7J?m=dJ}d^?w%JI^Sy(bAxbB?mpy4Q9p%X2UJZ|J0ULuVhmeaA3z2DED z_cnhjWGC)cA^oS#Ih$FT&6P{M<4+}{Q%=Slr;45qiYF0+mIy-%J z%~YW@HBG4UU?7oETEjQ*u7bC)fvtPqkN5cEy-lZ%SPCw*^u+ zFX|>p)TchOQ9mZ_3%Aw)4;7(DI?z*%BE=LdF@8H6(C6P)pI zJvPV|i0VAbPPY6}sE2;93v&eMI-m0GIFEe~0**{c8NEHXZk5apH2g&WUp)CAU(uiO z)9#YrzT5b>?-uy)@T8rAlabkf`YS~No8PXx3wjnG>^Xm&@VS{GPAIN`-~V`VJAglb zJb5@{pXqQS{NbIhm=m6&0NeGitLfjS5R;RGJ(q;eM#LHWz)l2)Kqw~E337)_&d&v{h+v$OQwkxlfx+0F)O)brFkZZSvRnI+ zqJO?)P)v<^CsB3!O|`Z5gkP6RYL!c0%0Xg3vh4CCJhI7^ok9Lglm;7KCkU^o+$LSp z+jx;_UE)P-e@ggGLIp^Yw_Ge^O#h@*yVGB{$^6A+x6!HiaQZ0Lr%!71YdQN98|OGL zyeHE=Y;*StQe}UF(*(J#wgWZIy|*MRknw!3!#Q%&?Umxq%f!~X2Xu96E9uk5B6AZ=EgDoe+7XL+!1cwF9?u+FHG701_*5JO#a6` z>G)sgF#WQd3<%v~6MRv-4UrjHmC4WYB4I?5k(zX3LeX53U5QG($4LTx==JS9@E!R+9B9Dc0GBb*-mn0<(#W@7@m4B97V zxx$GY!LtPdtOHb?cftKjGc21?`NWC(=#Zjx&i|Rj7|{P`64OS?fo|fu8ZI`~FhJop z@70PcD3|lalE{bo=G1jjrQ`E?c(rPY%$nDP-ig;L7bC58$`i|jlF}7pG}g#%iE~95 zmC_2Jh-u@yleMz6@^F5B{~A^DsBiX; z8XEKA?2&m^OB<-pU9;@|{J#-I@p7|5EHVIq4*%@mvs zaIZQMBs1m??C5K-+0U3NHv1$LBP3Cd>|ra#qOpQ3*#yG-%|$ zqaTTZIuKXPI<^gF?iz7>Uc$V>4>VH?B7ifE&KYw=lE}GT5k>>hM7~u;zw_0|e#}M=bJ*?Irp(US0QfjmEIKZN_Tbreg9O0_`4*^~j&`H7Y zPTgSBY9@tEK3~@heCE?Re3dr7Qwv2@N>+7(I@c-2_dXsoOzb5GOSYII56q5h%|phNF=lrr zqu%(N(f~ z$7qWDt!jEvFbgY{;+QWS`|`ERZB?Cc>&|_QT|9LZny;N?jyl9run6op!*_hYokASa zR7k$la>5mtyq#bC`_-Xk;_?unKy##(Y71^{NgMB~$4+thKL|5RwfQai^L|5mGm;tZ zfoP1+A{5wm1s5R&x>)y;L{QiafeWSsAQ0s4%ff0j5C$j|&Z|-?3#3kUy}$d~Uy#)d zahIsjl!@dTRrHOZ{3=ejVQ6<=E{Le*f9v!q2?C!M5uk1STs}BcX4{|xDYvIyJzj6G z#5@;ZU2sB+`>>I@o4yi#fqX0-hPQgaW}m@P1=v?-ExbD!4c1s3E#64&5Yw$^3S z6BKZP?inO`i2mjeZT|$UK^-x0K%xD5F||g=#-zg%Tf6Zdb5Xsa={4pWjbR*6|FOzz zMm_1L7azT+BtJN$%ru5c%~)3~voYk_4+NDhnQbBqx5Jr(i)hxE6=ASw3;RWyX_!Ji z{HRQ;rvT(T=3B@e2~u>N7%R$A4EDbP>}HQ}@cNxRCH<-XTYRRhW}qbD>sI2^?zbi> zZK8y6jVJ4lj=t1;G9$m8kLk>54Nc@RlRIUUapET_<5!fL$A!=qdgpH3~UfCVk5H(=jA|aKaS7L&L#F_ht zA~s|cD8$Pnu!A3qY?xGh^}Yd==@>T3_f1NXHZ@ZNEm#ef%?qozXF5x-XNHubiK5|- z-dd;^!D~RJgno|y6J{*{BoDKY2qJ_d5*^Q7pwR^GM^}4mw-%A(&Gw#ACQZ1QLL*hg z&(-EiMSO2)3Gw7lGtX>?h9wtA;qOJ?V~lT3x{ul2xK$VhmKE({QOQ3%E># ztL-R4pBlLT`Qz_;Sj%r-zu9-C&+p5&p@gY$L_ z-!}&0@hg_Em{UJvAz4?1TiLS7`Izyxc79gLcyv*JeK;5l@f?61=bac6g-sin!C*84 zEacp`Y54a2?r3L(%lfJ1Huj*})J^NQcSMWk?fqR2HfPFd^g>Q*#fz~N&cuP4-UN#} zso%a4%reAu%8FZhbp?p*?a*QXl0(%#$RN|Nb`u3_au>@-tpWwGwDS}!02DBe9Lf+Dl;8*ZGX)+tfM1JdBg!kSMD=ZU-o1-PaV}AM!G9>XUxb=( zgkZaZoy4&-urILHc3R-p`S=^Eu;!@xFH}&h1Lr*!t^Qfy0>rwrax{T-X$kCGb6C+X zGpIC>XDx(&O5q^qcF;6Eo5rKLBon?+-wMTzUVvM(D@OaG7|@I3f(XF&2NeI<@m1X* z-d&Q5cau1{mlF_M2|95#V4CFI7-M*KGfZ&EeIX*1lmWBoB*-N@HH(b2{Pa%XCwv>J zUt%Z9gtAs$BS5JQNW-9T9GHEnwZRyF+`}sI;#>Gg`!Z>uw-NCG1nL=VG?WT+U`I)A z@;Jg-Nv(q)qu%ZAQ24D+rwBe6ikQ7({`xznMRxpj3|K#|Vp$@{VId_1ov^|&pdLK` z2XxcdV`wTpJNc2vPsaluk`w4;Ik(PQd(ot7v%aS@WN@Rn{F|M@J>txX&wrEN{VirjVr_-sh5VM!|-TZ_NI5G9P# z2?nf8EzeWwPi3>WF5w1ewpWWa+<~wc{Q1mdLEKZY&>`4UWHM(1&VnjAGh$Zf#5Bz> zcT^ao#x;~tGceoH9(9~bK?>B(4hGVpz(_KTG`RpOEYI&dktwC7e<7-`0O6~m$8IY? zJ=asMz}=laIC`(GUq#LEEK`uB<5B)MZ6U0~T1RK`Q)Y53OFhRtDjs}JxMyyHaxzMx zEaa&vRdb1_z@MwYFME#9{Qlx>Rr8j;haa5Q z2Z%|cY`yw{{iZw002u2HuYWuO9a=kende^Y9i#3bwhya0rsOBhW6FV~bXZ`Gu>XD> z2qutdRshr`@@EKGEhySD{L3alM|Kk#MHksq)7GQXlJ;b%!(35ptGy>(upi;`dzc;V zUHLIrTzdI)?3}>`JW6L$jq2~}91Wi#Y%cq{BY%S}BcUNP_Fcn9Cp4M$h-%Iynp{~m z;4}aAz%>pkCWb8OmS|?6@bB}7SvML%2#?jx6eR#uk7#vqqteSw4@=n$M;pH-!3buS zJu-ut;Kb?Q(>hrLFrli=-{Y4d9io0$FenSvMdXCtdvFcTV$kAYM!@#t?Ultu_1QtM zmUXEdNuVOC@zJPVY=!_J7!}yk2Wh}-n=9)wODDP!OIKLGSA-I7wWHtGr!6(`OCM%- zX6~RiNldZ)&Bh<+R8xD(!rV^V!+YC1+Hum_w6VeOU+n2jzmmS>C3DfyX@EYolTOW& zCZoU&X|5c|fYUWFy9%1=o2TnHC7E1g#8fwrP)(zT_NyJ#B(!Y0P#3nE`}oJ7Bd1HN zZ+hBi;TKU04c^{y4)gdR2Y1SS>dlozeHZ(jg|OX{GaN-*IF!|Yvrv8NL_zW*5KNGs z1AvQRq-p2v9ebQ6nKaA}Qeb2Ir0 zWUQIy1VOVBH8iiSURltt|1=_)tX2N+h60h$EERDpmBXY;JQTQ6#>_2f6Eqb&y#kd# zPv4PJKi@iCTAV3vF*YFb=dXWi&FV4Pl%O@j7xLdHu)Fso$eu@uqeA;;A{a$o2-nTK zL>x1uu`KT?w5F&?4{}`_%&Z>Sv5waBz7)xE?1^I9!*c|%k%fZ!h~w+P=_e}47p)p? z36>wG*oU`_fVEI(@Xf~WTXG;gJ_pGiO7GIgDgV8sHl_VofpE4x-_r4HGS`eQOD7ze z?3scfQ|!{&wZ2|OT<-khtl!hW-{MYU>lZWr08{G;4oR6>tL3l?^8xx zMXl>{VVH}@-`y3)n2(=KtBzGmbQ{=mLsOo=|K^!nNNeW}RF(kn^b~CNhBYGI0#8SD z0apRj{QV2*H7{<&s3Zc3x(&x|0z@Uot4S5MFX`yMnRn%D&B>i^Cr)8&zVb**X!%}N zcb5RxEb)VPt$VvsP|cM^SQuZ@)GeRZB^4yrNlGd;#K+ZQt+?+$FnrREJV=;U(}(g_ z?uIPBI``sT7+Q4TTk+Yi*85E^#VTfEM<~TjRLR_KX~icEbQxKC}N4AFq48_ zIF}2^{k19$z_@~mQ2nsHnGy?;C`;3Gxv^v)Tp5jtdFEPv`$H~c<7i-w*N{h&-dL5l zJDM@dE+f`PR`Xy9f3UJVu(Y?OiqoN#)L>(XUm7|2JZG5s(yRQW4ByQwpX`p$1(0Rx zlyMi6aTi`a%0)_E<(-IWtLz9ac#ttWuCeaAaFCcDMq z?3#9@-3hZ@3SCWip$grtmFk*XAzNvyO$Cq&waee0Z_Is7iR&j1;VKD5z;C7V>(hmm zCwjb%1X7mUX0HLLtqLIGpgmm!o=DSobm;&I>SDKjba|fMSoyxF(;a(3u;!uDQ#G12 z_y|W?>7lN2UW$SrsdA*4)hufD(S&L(L0nZt;f*SwXu?k;YN$fT*Q@K5Z)DU90dby`$3)gTvs zz!}cOMi0mgp9#kX$T>*f&HI|+!?omAt*@vq{MLF8SuXNtL%qTBu~}OIPb*jjX<+K4LOfyWY@8URi5`Ea$#f>|3hqPeMh5__qs14MlsTryY$hR)zFvV62s?o-r z=QUD4N|%+@d`dg~&F9zGTHVBnb+qg=%t=R|mzqAFv+_x*eRb|)um&Wtt4x0Vw}R62 z^VXeXr|D%_>B`D?3yZF6Smw$K-rd9dxk30r^8%J@?ho(wNiVGnmhMhGDkx8E2;{UU z#RrIq-sSGWhdc++&WZ5*ZWpNQ*T>B);8*6|XXw4N1#rX>^<8%7%w^Lx0!&xUs;P7d zlxmja;059iqffLd&N>MeZByKS)@rOA{e(?`#0v}dxN-$ z9Fq(JQ;8|xj^b?cv2uE3Yj-0{SOEIwN>i*d$xH>o>s}J+ zH*8gGyT59~SPl(f$P)mss6X*o;2MGm3m6qJ7HgBMD6Ai_|BV;Y@3%ok6h_p=@mbU| zACQgwQpvZEdrp40Pf@sA ztyOBv&W`4SOdf$aa|k?57EgPC{C?9v5lKM5eE;iY`2Q{sNdLby{rmrwg8%O-1*ze2 z*Y>|s(E}6!faw1r9;|JRO|1T_LZB*Ri_D17t#;>BjO@O3|BH?R@qj(PFP->t)Nq_nHP0U_pQ^H9Y4>z8jaIUir30$7 zd;mt3t5w^!uK|}{VrYtEB~*(SeL2laK({#O22>hT%DYzRH&d?Mdt=G^!cVQ2 zE>-y!2lD)VazG?Hv&Wx!u7oWa2czQDy~o2x<7m@S?eqndx(L(Q9ki9nwb6^U(zg?A ze4%XDx`zd1QN7jQrTeErWlQIg?Io0MsEIPPh=~Pv~IDRJq zisEW;v(WT|mN-vIz?_gm&hWqpf-*HdezZy0enxHx`-)+9t=d!O+Z+E-+38fU^RGC@ z5llMrHN5ujyznPcB^6%8A*s(S?o~C_T)%{Strq6`F|Uiqj+fE)+^V_SXYxCOzuzU- zwTtP>M3nT=TzU9a3AO~-)Zo7?ZZ$CJJkX!z6+1iA^AQ(>oo1=8-C((iW^x3YpklQg zp*mK-oTUSGV}nNDs82^rRU7R3xCrzRVNG)GVI2Tp+&wAiebFJ7aJ>j})uq@NSaOTd zbR@6OX5nKx3s}Ur|MDhPmt2oKnkf7FJIEonD)N0q$LTkwrgRXwnjI))mDy#xWEr2k z4LFP^Ytmu1{>JvcyPb9(*fmc^oT$QSzIld^)33f%w6aA@b#X+>--m;pa}EP;zeJ$S zuK31F>*37 zwq$ptcQLUswskNu)^jwrbfmX)FmW+Aan)mDU}Di@VAo?{r2n6X+Qi1$+VMX!uv)*( z20KDG_!u9|rVuv4lY4z69*V{|l)dp_LhBV}9_9M6C>dyk!@<{kHX)^ktYV(sxs;Xt zqv`g)Ow40oI~~d9xB2y_6Fxe6-oBHaXTm1+6>wrUE$H8uquk;)PK7IIxtW^Srp2m8 zVHHqW3c#Yw1D7HkC8?ze&`V)RnkrDhF4Vh(v>l^HW5K7stAC*tIWpHzeL-9Gn_B9Y z!KiElPhKrgvfp|38@h#CrIT-kh+32VB-t=_)`v$S<&ajkUtV4Re%~8fKf(oBxDvRgSwKVjz{jrn zRwEk0s5^x+S_(&SC`LCq(2qR}sEhKaqIVg}03((Tp@wRDSyZ*VxUJL)QM-O0kt3-2 z>godch!!f`Tb((nK%%c=D5^-td}61fALICmz#Cx{Pe2u_vkY)o2MZwM(u`$j=wtAx zsDTOHh*q8h%yCn&7?qiHY)(*r+lQ$elL8}Q*H0;}f6p%tp8VC-g&Iaf|P zDk%~C;GPNA`l}%s_-FUUf(u8ic_$!73i3gsQV7ol;qB$73Y?pCGghHAt}}A84H?z@ zSjAhKjg8sqml<8^Ty4NFZF_{0+RrZ9WvQeIR}o+;gBTjbiaceD!;u+Itxt3?kw@f< zPOP9xH=LSgu;=uX#pM>c`!dDLxH5|aQ-0qJPK@1yW!lhQ-ADxvg2BT9X1{B#FsmGz zpP@|-sZ2K!4f$ZpIKEt_sK~r9WTM8-dGX2^?TeJAw;3zdcyLM~O&oRW z_*V}dKD&9^O#=Gp?<)D7!A0sjwNpU(GLPplY313HfL>6-Bb4#<@CpGFEkrgSSV(+E zSnHNzBB5Qhh8w&QT*_LQXhc8JBf4kj;`!@%qPF_mlSwS0^1iXkp$qKKG&6r;&*>zf z#uh~~Pez(yE#fKM=r50iNkeyl=h(zAuWL|qx?fnbTJk+S)YbV_q_XCLCgE3|3D~_c^@(6HU1E5Cp_k!|E>`B6uF~gI>W{L;l))>6lxK05ApiTT z=|z4DUSb!LY<`ySL%W*o3u)|jak|fIU-q((9-lL`cVv^k=Ph3Gq8#;{T7XHD13JoR z#VK>4`5L*R=jXqhZH{OG&Q_C8JRNMyX6Y1+o}Wq4W!pxI)~8EaFKNu~5GtChn$4IGHO!@)NUg=zkk9_y^%DQ%pMI_6~x( z$kDXRZyeu)BgNh35YM_)k!Mbvt5d{2#So^by82LyLS!&nJNVYDs6A5Ts(a5{oo8;- z)E4Hc73=M@d1J;6C-R0!JmQ#Ex9-kRIih1e6xaKz{0^O~4s#@z{(xPAjCZ_(csb#qLHcFh3Y#72rD9V+g5Tt{BWS_T~`L(8Vz)6u}}WHtWVTEclTrf zh^(Pl=g z05g*6YFtZE4D)5kP0>J^2GSaehN(zq>%qvcxWkiYDF@jtbv50L#i7V1JkyR$mD1^Q z&KFLVPuw-D1(Hfx@uZ}Fs%X8z*4MU)hXdxB>zH#U*@Fgdx{Ik2KX{28+`Yk3f(<;Q zh5Jc*AF%;$$%f7q=Vsn-^iLn|HGDy?Nwy85_RiWd0XOlQgu1awFP;9IVKVvvD7%cr z1!mGF1qpzeHn)gE4wr8_$b+gVV#U7-+HvQ+WNN9c`zIXj;YM%8@5=Ech1RSh->K|X z;_)Y_8YiF<8rW`dJ9uk(Fzpm%uJ&laL<|!al>~0LdvV&fl^@(jQ#}S#_W@5`@C}`9 zB(eP|K>{)cq3#O1b(OEYZj$<|1d(HoKuy(#3CEgn#q6s_6%FoXEGr&`1gxgjfw(;kq%yP;TL zKf}6q2(k!xh+2P~z3aI@p7$@Wjyi2)#ztW@Vh-i(Cn1 z{2oR{+XwW-zDUF)((ORpP78p?HbdvcI*_8987p4=F<+`&nip zX&LxYe>Vc!F~$-PDJjIW_JC-BFI#C;1>6LCdSm^O{fZsGlZ3u*j~}Dp?pt(+MbHk? ze)G)LN%){=Q5gDykHU58)ZB9_2Epfy5@>HCy0&Q^P$fs0G(?Xe+d*}u4Jajg$iz9U z1=W!q+;xE(!B7wMcTdv*fy#lb9$2vb?;JH#RkYK}+((BQeJLvU#ZV`qD8}#1qns!!XzF3hF{_0YDHg$O96VmWow6In^ zmPwN)k*YjZ(%7yqvnoEbR+lp8Lvo~(J0h7DaBcczt3h9KLdf~!_VEoOJ<<)|k}OvL zcX>7kA}B0BZXV}nUBKEtL0ZIRf{Y??3`_`-Cy9Tj+b=9C(uhPb^J^L{3aheXG3Aor zcYQQm_qq=*k~>}8vZwFo<3PjLg;35XC}^l7SkQ|d7oJrZYFEld0mb8hq4+I&K8&=J zci$ngoNhh`;+%N@)Dc?o6=E0RUlrA_id~<-XuUo+ZogR|519=w02;%jF52CCPm;8dU&r(s>(BKF_WdrtdM z$ZCB;{^4{-14IAxWl=#NI&aGeD01?E(fzy;4Uj$uK5KI);<+#_bI6ew$*B2p|>?Sqgag@0iN-F`a26U&KmrYPlfCS`RK@ z3Qb1zFp=F%KVQcQbs$vot#0PF6!N}xYP=Y=UIV&PTWvn)MXoDXM`3>P ztzcYzD+BDeALD;0Z&M)fQu(Mm-b7+KUF()%;~rM%FW08d*VGD;cd7!H#LzpoW?OH(!W~kWc}e#42~6Ng36xm;+$s+<`E+ z(h0^#zHDVp8#fJN`3!YN>T(kc12cM{2EC?HXR(^9Sb8fSfVM}~NI!pBU>>oISgFxv z5*T)XPkRDKp=5_!i`56J2!P$wU21@=36|k)u^C*@dkk#(@40lo*|ow{UC+wb!@rT0 z&gOTS`f#-ZYYt}kxsD`zhB<84Ebbp%lC;XanZbOam*_h?d<*Ko3$yNUGZ06u5`l;b zgl983jZPXpb`h!N2sr7EXjvX@5QE_zNKl*K^2^P4gRfPdbya>%m09x^0eDd&sC`=? z;5LtjSjfiBFwkJh(<}9>;4=75z8viF*vLxj z@whP24UX4uAy7Tor#Q@_@oE;C<`x1jpR3Mb@|*CgD(5A^ta}=f3r_^b6}JIJW!m;l znD@vSxp-wq+iDO5TUJg_?*j!8TTMrw%8q};a2bs>`$K!3wPMBfPOc8x4PCg_*hg%P zYDGSTum?2bT`^&S950Napefm!TJvdEyJEHBnv+^CXx(jp->~ffE~_dmnZnv#%y#vQ zxoVGdMqS;ZUAvTDX_y{t0uNEQK4pmM2CNP!z5yErAf}Hgww4-Okn7y z>ZN_65>LmR-buycrj_tUL(fSfNO6f$6tNLbK2}>?u@3{ARY2Sf~3C%v(dYsYKF97b5}C z0x?u9@v@%|^6daIU60ZYcz%g26E%|2sa5Mwyc*GfB-p%NzbN+oN_71BP+RtI99~`Y z(mS18pOc2fNmE*>Efceu=6gaQ&a&Ipu z)1R$t4AX->ikM#bjnH80%G{a$o-oL-lY`)T-A9>TPIr!C!X@C`f@A)mL0WjY34Vp! zEUnIuH9^Dzb4hScA~}xOh?VR?UJhjhvuV8pNFG^sSH9)5lUUYxCE_CjE>s3msD9%a zp$d}6coP`78w>6dX)el{3sgT*7%J`}x#zI2fgGWTf8i_D(u#;ACepGa4Z^OYhP~ zySpfI%S4f@&fw~cG}3JQ<>A1I59sqxvVBUL{+!KW5@*A98<-6|Qf&a%!M6Q$4 z$zVV-6S&pZz!Q<0%GJ}uLB9D(_+r4ufYx|qPs7hniaVb|0Pu@AM=IUai?v2My~+{M z%9n|8N1~~2ACV<6vYcpx+XFl$F2T2b)m_FKFg7V5Fv)Rs<3>2f%9*5S5*zVjl|Gzr ztq_x_qDKHcwyS@i&1^qH=ZR>E)Nz>gRHZAKWz8TftbH+EZlYw!vB3QPX1q9Vqz@JK zlxIr%kH(8-44jmAsP1eZdRL5laT%x#E9WIy1h))`hTGs9=*U~7Yyje#Bv7PNq+@jU zd%=G-S!Zg4tGL^FAzt(JWMY{m4q3jltw-cPaZd%3|1pf44t;2dZ ztNkST_oLG&7kHgS(04)-UeIPuU+N*2dxvbV(XNvJ6Xl4oWTiT71%+~Bmoub_|IvmI z%P$;eP6DevI*O&*VJ9)PFM;DPh7~~W4JZUH^aG8AvpVY{3RKnomfA{er_Oym=PgW} zD;+1nVMr5WueH2P|7HY01B`DjbfBY~W6SoBv6VFXTm&Xp6|Uv&Cxg+7tv+eHxOyH0 zFL52CK zwG>fjE@Uz2=w3;U9kGQA;*49?@_YmGUrQ4`@wrEcvfhG%mib#4)b1`R?pLm5;qSGKBUL^D#hB?j@I^j&UP-M z{ii5)XL-8ZC{M?axH@;BM-$z%*oK_OB@{et#qgMlap|5((c0rmA2?( zr!tER<_H5M@Lg46k}n5T1LJY-GW_kEIFs(@9VZ6;bDD}65DSZN3f(DzsUKO%A^+9u zt>=CVZB0;%yzGi$7uOEEZ_8z4b3#(!LCaS2FYHZil}(dkLZwYFyW|MN;^Mku%wsNySK%~RFU3yLW|$7t`Jhw0 zZ0Sy4&~B=vZQUr3!RJW3Nw(c(GTHHks{>J)fY694W1mR$+(3<|Zh%df+G_)!hqH8C zB5SKu+*?V*&63g5{VzB8V1zA|iQKu);+K?FLqcpmQ~|osgRBoMViU`&NLQ~^Uzi9% zn+4QS&-sSE7h#27e5IjfD&!IGz;)U|lG)Iu%VPMeBf%Mk(kKNM%*;s#!^ZLc_sRPP zVMp=IF*l4S@eNK9{O(-=G4^r*Cw>0t&H>c6x`oZ#ou++Qw!$%MCD5>D3m91=k~Ka^ zpFvEHx5bLR68g9srz`|>8b297^c4NxV}VZnF0J;@0%!OSdV;4dz>@2QPsus?F%%Gu zi(G4X#^%{yrz6ec$btE;`qVm5X8UEs);UxVNt9(cy~9*7 z^Yt9VOuYe7T#!l_CxLE0H` zR+-gGO*yirHMu7WaVtdutVB;>OpcO`UMHtNc*2V-md_;!lEN-q7z=epIgxR_jJo}) z!&EJvsID*-nS^M9GJ9# z1<^;1%i3RC!5rqF8Tc77vqdM-%Xh(xxNseRytNi8t%5B?t}wH^5i%lEJFAC1dsbn= zdGhrnCBb&QzQG5s;AvZz#8mWNe0-C9sC+xcwiFg?Me=NHfZkHF;4Nthek_6AwvaQ= zQqim!rQ>|68b(Qpo8^#lJoQu}!z8Dg87zxP7%e@pd3gRO_hT3DKtjot+EQkumZ%mY7cb^J$~sL!9dQm;Dfe=)>lt$8jqFHOtQ`L`uNkD2zI;VZ3< zI7vA#T<#$p6KvjZr=*MFWAW_OwG=nZPEK`a#u#ozSytEONn(Y=+!J2(Y-_`VH$Yay z_61ps?t@vRTzuNvNkKq*?k|tX?w|-o;#oWsmBN{2|L)K~pI~{Ye!pA4@dPkOiX`?` zUxclaz~4qM8-Av#`_italVT;1pA6wA9B|73&$|TdX_LE=FLM4hMLWl?qNK04x;;$M zM`*e99j$RRXY)p!)0j=(PpSrZ#HvsJXBH@=Fm+SbIbEPqrv>Vl*}YS_J@}mQJr}h7 zr!n9Up7=$$K8shAhSoPA2NWG4p@OX~7`9(iwAt%b*m4~}_%nwbZ?i6j3&mbO>zX3X zAq^noXx2aK#9y{+0b(!1Q*9~iKH$ATy+B&HYE%F(Q9c)-R%WXyP4^l%bAF9_dNW!t ztBRA+m-Hy9&<)lYb7L1+aH?|#?dOW-)H1CiM(*kwKV-&upJJX_?3s=5y_H9TPPGH6(O)LOD+5fLzi%u(U> zg(cO2W3W|P1zj7>#9d+zs7-Wm5ln=b;A%JaNhWf;6_^O`_1v0nWZn!reJciwdD8aX zIWDyr=fl7V91f?|7T+FHYv%&IxfF(LTDfjU1Djoh4fQd459?q;aqG%5r?g0qD_^6$ zlD$tr<-XTMBO7hWIU&8KT!3mFO=KH0I!Kta5M5kjY(Sfyk%!E0UWRU!m`5_2(=Udw0{L0#$dDM z`p@n9GsghMQ!wRD1I*$600xhc(k>Td4Mcx2MV#+mmf1XtRnydcxk;W2bMw-|f6wA_ zfEVPf(ADxOtx4a_lB!<@!z^|KoIPpRm^G5mliF0Tu(Dx^W+hH%M@qr`q&qkH(40}! zUwiC&bJGgI*&;33 zn0N4O%A=;kpCX#c4Hi-;+Zx95qgmtwM?P({ z<;M<8Tj6}qhD;@V?3%>E`6o-_K8?ft4{rN@g7iJW^|YEUo8=Z8AKzaFWOosn8x zOrNCF$QP-gQb7WkdU3>OJ;nK(W zsxnSCb7{9FhU>CqD=yJdpb>EQ5Z`D=;;Xn05OO!@3)!?bg9J3m zc~wG`hCZQ_7@^fdHH{=f@`DoQvZ8z@$?^lcK{Jur;pl*w=QV2O+!(|qNtJl&M*9Ai z=j4c22VA{tZ~#z?T|Rdh-a}}7+WiQQP4M`aO{i`mWtj{6kz^bj0idr;r#U>gBt^aP z@DN!VNj)2dx8=j3)|z~tc%P6vEj$Ip*cFml)88>CKtrqO1Yp#J)|eJ?cNd;z@kGwu z$u$vTS+HV|LD&biiV%?R=FB@|zWLcqiLy*o@1_{<8N0G%nPCIvob68DUGtyufvrhr zc2zdhMo?ud@PfKdHEFqSgRv~9Im@%(JE_ykS|;X!b2o-j%!>`&w4KkqX2ujt-#unP zQo1KSU|0k?a~F+q^63~FKb+t=eYYp#uWW3R$cp3EsOYE}<)jM_>O(n^OUA5F3I z_h;QYjK%Jupr`zThv@H@ZSC87_Hq@@_|yfr51k<0?QNA~=u5A~pY{wVJsGKn#upGw zFkNS68)nIFd5LSJNhSHGr<&W+L}7i-X;Q z^WCN@Fk|xIQfOqP(>ZZqh-uW8?bS(@|9YxVJ=$UT64B_w|CNLo}L z?TNRk*R2SLL?XG+G5KTUY*ZRh zX)y&>)dCuY&HIhR5|5H7PI5d=?;b&^_W@sBO6VKdT^3LE(bM5;#4pe9FIFqGlg)7am#~51x{EcHD`>O#XG;Re*K9VX)2%JDy6YsepC0#SHb}vZjFRcBLb9Ff- z=qH%Ku3XMxm1v|4CW!B})TGzjy{p!vSn}ldq}08GH0!e7q;y&2>h7)B4b!zHjzNx| z)xZ*QI%?TRFp98SdU3w|A+w<9t&G)-n}-C4abugB8S|EbdPnf;r(y|gL4woT(VcPH zxNYZH)5}UoHi}bTydkm5kn+$fX;-hS!4G&{ySCi9j>(w@Z7Y~7@jfPl7HWcuUQ~ZV zYItr-H^6?Nh^)3h2YW<#+J)$oCLvMfJHxH4OeU)Xjx=^>dM zupa^mR$pgYH$+z<;oknHs_;P zSg@UIEvD9g+V-RMG~jcUs_Wo7eNt>Boax$N7u(J+8$3i$J7;q9O$#kwaxDuPmrILV z_ByL)eO^PRG_NWi)ryo+bw}vivQceUD_NXtZRzyDdRO7-D7XyHqB=R_mmJ)dU)qPe z>JF2RH!98i`(ktI-1icAZVQXsBp(%-dDpH;{KQu8suo}Y=FGr5Q z@h1c4c%(6jnlm7Wj__-WdG9;ZCePPvpt-oDgMQ^hx57k_!$f|e|F6`~f1;iLU#Xw} zMmqoZMLPde{vi4Pl0NvK1O5Lke)#{3_(3Tj6YBJz_`&=Z06^w{!M^yPd*r|96dfD8 zEe@m~-TdExdtZ*O_!V0__;u#}p_4`HIyWE4#V0;(1ap%p*X9J$I^9H1^qxIm=3n2{+?x5Ca}uwD;m);-A~QYeCDh3Gal^rL1h{G2RC{oHB`2 zX-D_G*`(#U0P?hK5k!LwCLr&{r&usLG+*pki|hq|6bAvN#69_k+nEygo5Z+eRsM%L zPDrCvvs|*ic?a1=l8Fft35nrH0j{sizml9zfTT)TO8Ov{n6xBdUFf`yz2kO?>1JLt zO{A3c9!FzJnF$$v1V(-O&0`XohAqUNM|&aiHTdAie8H_T6cLFqZ&?gKqksN+)m2@( zx>CPLWK881Pyof}x2K=QjgV#qPB}f)j>~E9zTR>ET|=?Sh~8(y{N6BqK8nBIrBa7Y za=imUMS7Fm58{>hBjeMBbwiG}0|xK)W=T&3&W!JGhj29RiNmz%PM`SsNW3EzFa@2{ zbGH{*B){@28~+qh;B+|gi}FoQe(yylcM=#=VQ|2op{%^IKv`t7H+DQdrZ-kHD-?b{ zK?a1Ob5Q0pAM)TZhj2(K?WdRhGS8i%vt$WNQ1ykmNhHKxY?zs=nM!)(9rKgs*U(zr z=~v4LRg(BkD_zdX3JONw1%w%vmQH_lh)?bHm^PjLC|{DEM{jiSmjnp-n0I!6@(e$0C>N z1cK@7<%Sjki6w+(z?ekwL{s4cg4IlZba&|i)$qiZzASxaIx-k}7NIPXZ#PFps zub5~&>WD31ziX`Q;RkK``F!2~(1-~H@;w28?9Imw?&&8BBUAOQMnr;y)Tp`m z=6^JNU~73xgaUzf=1jqr-&rIdK)ci1A4>X9uB6l^s?}gQ!JZEao$k9=f3jb}KrK->) zcljsAeNX#|!vCc2y$e!tL|^=rtutQ1Ke7j&EWF6>hxCduDcCDSs>?g-UanXln&1Iz zg-ZA5*XgFsf`dY!^Q>l!XPiNa(50m95^E)84ak*7 z@6;~Vo5v!svlZCzRDrDx#(Bzg=Tase9{!!D{$rtA+)!<{gBf&gaQ3`GiUMo^t6&Ic zXU|5nbphcU8i*PO@qKgg0mp$FGy$m26B`L*Tw30M}4>Q>|`4*rtADhn`N6>-Yc-A+?zXzh18%5_6!wYpWdG|V>rKcJ*An736 z0SAzvh^_t??#%4=j2(~tkQV`0UCbdC_mNv}w5;f16_X+ebaUy(oNL9xJOhI}R-|=- z1lc6W64+%(O9@udOQ!i`U_oIlQtT$`TaVjvP#<_vB`n0TvQ{doe6I%UmJVjVJ@=)SO)Ga z?}dXC*W&Ik)M~O_~{*edwOIz)Md4Qb;Y&~Uj?sr&XHHedBnzt@%!5oN51W>YYctTpK zk|7t}x}IR4K;A{FAPVNs#IrlYxd60i7?Fzy*c!cO`81LOmWgssp!$St6BybOw>sWc zmqJLiK+_jh*t*%4VxoK__uhbt-r{@r{bHVwK{D}w%3KZ%eH#**I0=8xokd5S*ns6?yje#< zxRqZkkdH3bA*rzB-BhcLc6?J7rSP?aJKH0UV5(p;BrDVSf%&9K<R0>n46!Yfn5e`5t6wkul+{lYF9G;{%*KrU|d5>U&$R(!~ z3xcGokFH|S2OTWJJ(`F(V^J6rZ)cOoLG5P7l*}dzW_xC(x_3)hVHIC47PwPL4jcV9 zi}a~zekV#*MGNNK6M-f`8O^27MTCImE&JPVO%hIA-BM82r8~^ckCL8W?OU<&C4CEf z!xbG)?852|kQG#r0-yQnf6CxTK%y~Ulms3FC^7kgai8?Pdt#U90DcpZMk(0tCS;QU zH46$B0Y0nH=|+A_QT8V`dfisLlq$Qxk_B|CHMVW|LNwi2yS^%k}w z=UaM)%gbJuOsIpx+!ssk?Rl^$h|MN75sDmg1@*lAe6Rk-DcjVP zQvksl)A8jLJqJ5ICmP-!m-zET@si8sr z&Wg>{U_eds^i+$R=S=Y?vwt38T-W-^s{$V>(oe≷tY(AfdX4LK{SX6>f!0q$fG5Dm|~468$28csETY09O1j zN8|{ZX?>=sJEZl2UZ7|~M7^|aPHg|sElfEtw%VW~%Mf4!(8Z2_%}Se#b`Wn1zDw_= zfeI^X=+d_gN3S65!L=wN!~E<&^*hX!Lua5pY}%@Ji#1JQjnlO*PiO)si;ZSw$*~}dax3wQ_vUG3r)1e( zccm!1`nFa>`C4Z>xs1D2=Vg`l(+3P?2dotQbK7lAYHM%@IFTF4V` zsi$CW(K67*R-GJ`9#hG;m1;WISG@IZdXDhE$Gtw|t9)yz=~Q$M5+m5O`mxFU9emsbTLBOHgp>Jx_VQ~Eeh=4B&~6pzPB60N$jn>YYerBC4~MpFYiq07Mv-?<+Sz5xTIOagYhy2|!R(2} zq>Yp^_3xfuEF~Nwyc8WORI$);k+q+w_DiHaY(N=Mi^0<1nt`KPC{R6e95l-+6`Rbw z)@%i^dZD8*clwA-rP4(VHC7k+e=84s5oYUk9$ zUvx2d!6HEyEFsuP=i%wIsH-{9Q*NVetHZ0T>id@y(rS5=l)jsly0`(vrgS=aO@8;a zo@cp*O@3y_a8IQp5idx6g~K8>H5+gp;{zYa&DX|a?ur7`l0mu%N^!A48(X)1Na0~l z_2A*s9<)ymM6{hBsLOZqeYVzxU%ZK8VU{o9I~5bB)!8n$D1goX+h5Ubs7><1xIkKh zKU!bR*Ev{tunszJ4nEHN87cckG%1>_ZHkdrOZR6%(?wdU;~2t@va}1UXa3Arw@{y1 zKi_3f!q967m*T|o0ZW?gq7-*D7N2>sNt7V!5^aUHlGV8?4cq=mpn@Ix!;DGSCOIa`XU^5{MxryA2`bN;P| zz8%59g*=fVnmKG_&t`7;SC9yYEz$-xdD0g}X^29C=q4(VE29x4-f*jpwSq$C-qXa- zfDV8cP&y!@@DAbXf>$L|H+Or{y@h6|UH=7cZqM4nqXSk>>}^rDeLv~rwf!QnRk>xY zOYBKm#kMIs=~kS%(Rl+N1TR-T&oEinh)7g~mf<1s z)@$p%D}g)r`fc+FN0ft>;r7usgYU6?n{n8ymcj0Wjm|BoU1OUS;jGZMEt}>Hm-`D|Oit zRbGav3EdS7dMGZkEiig0&xqg8fnBsG^O!UnTWHUYht~YI3HJ?HL8&|7%1Jg6L%VMU zh&q?6xk+X#@7e7bP*rf|!|R$HSg#Q(&5oq`T-c2)Qa5W-tob6ISra*jn@_IaXE@3V zXzwdrYD3M&&yhPj!{x@-btO)2j+CPJP_dvR1aXIJ!3zN%J3!Nc?&Y?I)1C8{w;$q>SJ-h@KP;;v_pq*aH`X$})TX&hP} z)HSut3M-#LZ9Ohlp9mh}w}9xQ0?$4m}Gjj z@6WMnGM!<-t_yw06{9w-wGWcd#`}MBUK!u@VGDf=;G5Vn&3hJp1bY^CbUImoZAZ|z z+1Z2tZWvBz^1L8F#C-%U{CoVL3k~t|Y`|Bj*MNG1eq!r?EdE>i38NnuG)!Y7wSWDy zdT2;|QaIO^=y}N{&x=*5Hr)?4-OfW?`qzb;v>ALWB`x|b&yCfo)b*Bd{T}NplmGGF zQjb@ew$n`#9#e2BZ8h2lgPU*HI99i`#xA?eE>0wr;{F7=&Qa6OQOAV;@77j%3ymh6 zP+@yzmATfCO~IrX6|GayK;`aA3iybNGhO&3!B%E;+G$Y$jM1vM7GUTn&j>k&AT{L? z-_oQ)U7{^Tl_XKqwA?sK5MSwj&)#@(RNcKN?AOx<&G!`P+E(w*15iTSU56LHz0Zf zG(Fmqmgvv6upQ+2fV~~|?jE4|MRIyHCB1VKcP1y@2~u*k56sC{eOl}DRH|b# zNXNBf`rk(%opXbl0sqHG{sl_Kem{O7PaEh8Nx104sQv4xW}t%a?r9leOClCYwL zyt0IxES;m1^N6OE-PWJR?^?ZuKYSb+kfc(x$Dr4sINZ#PNaUe88=$wqjH0c@x=Ge_ zSsCl(M^d5y(0!OjagzyDm~2%8e;v z-5qu&CdswKLlehKVwehL8#0}#Kz_B(#G5fF;2CT(qXu{nfTlHIpVrre{=E%?nkon_+`A)*gn>hbFRP;DQo%v#*oQdaPyg zDfgBTtwZRtYVpN&nYPW(6*Tn=b8k#-)c^7Yaj5^=J(An?xoFCk9jdfSRI%!te@909 zK=LZ}uW7xBv%BBg4f#Dydvoz;^W{nVp7;qMIAkL~rPtQFEHOo&P8xrxvVl1F(~Fu( zLJySspNr9Q^ECsU0(PsyHnv?b1=dnZd^OD~Jv0u{!^asCM`aSIs&q_36heqnqS)W3 zXhwA=#C)lhMO)V7@2&6-&nr!)%SLv=;;oB%&@8`h1=Y{x+(v3wE2@NZuh@!^-tC*> zjMuMvjt~hoWPo+?e1_^g>8PBukaz9Vl&Duy*`NfvubeAp=V{A+hPYWM9SCZrGrb|m zfplwWg;X-)gr)Kz&hVi6QR_CM|lB+;MF0C2FPAe9fw;3$k{!Juc~R|LO@T*Nl49 z2gZiu*T**6wtbI^cVVMf8m?(p*+G9~p)$(7btS{@*;=XBRXSVo{s>R301c$(V_?^8 z{Qz*@qdnNipN6KYexZ9P103WlcbyQ=GdD`6g~T`^-67B_64iil;jnM~#bV05fy6F; z4Db~1bA{MTbtRCeY9*p2fDy_D=LW+s?~&NbH>q%H+3XZxZY0gh&|ed^R)f~%h5JY( zt9IQPs>Q^Ol;zvr!wXv;5?d9r{^J_(dD#?|#bx6Uu3R%-UK@L? z+;CyxbxNUwod%;Iz62_L zQ2pSTE}GUTQWDgp?i?v!=ZMV}X_!WcELK-c;#5Zc06;w~=xS7m zU)ntiB%7`rf{|2<`Al#jPq?*>69IAfBnQf2kVsQ?4su_*s+Kkdk5d^ zim5crRyJy+fCBLEAtHL_`+-r}aa2Jf{&CJ9tCK6}RN7p!u(>1;pt~KakCgtE5;U9U z%gX6NBvCSp2JAYzC3O$+N0C!3w(NOuuS(4+oI(~v)tR#)h~7?x787D^JV7XLi;~Gf zeuCsBAg^OBz0G3qh_lbaXO|*7e_=C|{zzQUL$y1|c4!|!>LdV7P7*LQz33!WFAKqp zA>KdR%r!QCEK!nlAo2z2!8`(f09GWUD3A+lDUHro0qUq1n>G*DABR@u=SkJqk*Wnv zuHgDz0qPif!!YcKlr*{?>mm^vghTsuiKc_Tz^$-FK;0$oLoguIJ8y%c?l__~b&M3p zY=8i9oOMTyFzG$q~aO?*3em@vW~<~pz#GkM2Zx+Q`p`^ zVh#$zmW(nMQTb!(&W4XvA&|4Oyi%ZPJCMQkUl$0`S3v26v2k)E_%fPyH0NQu6Fw4) ztF57t$WqmN+=e#8CnL7*gfUlxBZ2c%eu{E~!|&*S;X$SUsifV-f7hRo#M1GO#&SI$ zM~zJU$%kw0C>7n3CAhsu_b?GtC>zJ&V|ds|S`YKRw*J*6bZ1Nf=1VhE3wVPEOdBP+ zn2pkNKY*vLL&0o>`Ug0)s31hl<+VAl z!F8lnR>m$2ldXF*M9i3A&fnL(=mY6z6Q`U4=4Ak3DFq)CnDWTOoWy@Lk_1_c{%Z5b z1hu6m*VZ-{GQteOXQvkBcA)Y~%fwRm2u|?6C2xHUwj76BTTqU93yPPi^uankD;Ij( zzd}=m^hal)`iRJg9pZ#ft^I?s6lBI1-$6qfsbO@w-WiI1f0q`;bOnkg!x0fXJH(df z*eI<5xGUYxX&Z`)Koc5cH0{ETY?WIPu^DF8LCZyOpyN>)d@tuX`U74y_wv8DCcv}2 z%zEMWY0NyLIrLKn{ApWyb#IpnwDYTvOI=Cf;z3&Z-IY#Sz*sp1eBw*F1jZcXh^eyw z`X7QYQD5LQfd^qgfpdH)s`&5tvmL(es63p?@N^t%guh&&b915~@*H~QZXiB~R=1Ix zq3sqzMx~e!Q~%Ywh zi33(~V}+F(!yR!my&&TBwrENoMj(tkaleH3BixU{RcW7qeA`Zx=$Nu}k)nxYZ6^LL z=e{|+cTIbrVthl$_Xw~jVz1LfxSq(sH{|_z`yh6l0$Vt$AMuyY1^}Yo3Pv&kM$6I8 z#ez~*UqN8DZ{dTA5r06Nh$#=1pnWh7F`S6S5{)hR8H=OG zc`^}=)NEB;p2ipqGEE7*NVm`BEfRc!Yzai^Pqeb*Q3@SYWmcOTdFeHkD0C9UgJ@+62UeD#Ot?HxK%fjpX6S3KJJ z3u-8nPF0ft<$f!HA~KynFf`8s+Z%>$({d2uYaS-yUYc1=y%<^=CSp1f`B;%>V-z_>CCSr>bUzFgX)0d|#q0xF8&F|CMT`&ej$bE7 zg#VTQFFj06MN5fr;tpNkDqHwZMOw7`fws7?JB<}M)xw)~9LI}Os|4U^Z!7s>&@AG0 zNO6bFpTYWt^xOd;JUt3?;s_UTrff}uQo@sqkoGtCX9SaATVZkbEvdl~% z*P=(n{jIO>X#20}np$FZnfGf8db&Xt{^yj}jOI3h5*9G2m@6jl0$A}cum)#B8D4Pa zOm`{}_aH3)E(E+->5-zaZOsWekwVO1om&axKHk?<36>c#>q@3DlaN_ha-xkYZJv^X3IW~&$o$^;HCh#y}Mf7vG?0otTdf* zu8>v~p3f!B2J4|6j_}01owFLr5cjx>o_MoQEPpN= zg|1Y`AaC)IhTgNSlC~|AAP{%h({4rDi*VP<9Z!qC8%P-z9|$InZ43}FL?H8lE%jdz zU9$eE50`KMbPePOd~D{A^GZ>1GLLnEN?XGfVy>&bl5rE*Okk=(HFD^CNkbpi170=! zil*+h#0?Ktyo1GVIZsNX${9uP!*Wac4R{y_iqC*X9~4xtd#irvL71cqP}o5#H*zMN z)fiUSsc&JzsF#ku;*pR*fc6<+`i$7ILEnqqFX5K`4#9%TEWW<;zatQ>p4A0V`!XZA zNoJ7B!uFe+8xfW}QNrv8tb&(#v@eY2W_2*D58q56A2aUCC-g46Jq(D$8#bc=0;LCU z{-)<{MfxUC;r!PsvRep{;o}X&*1ES*4jRRo?v5^qS~)hnew_R~o`LGkaoS^QKx?&v z;`kzd9>eYHg46Ts9y9LZnovCf3V_|Sh7(rK^pE~IZ#gLN(FE6 z5Z)IXM-=+3{n7jyiM+q{=@TrF^s&+NJKM(mzHAUeq6~n#et3vmaNBtt$h`$>2KF*Q zWwt(F0Hsbfh5NWXgWK_Uc}9A8dO`pRBYa*U*Sv5d$hK&%zfZ(_Gg}Cyf*Mdy;Pr5s zCr$_4yivIy3HITcyWvx8TL0FWZV(=CRFq@}rHO5S(Jwm71o3Q%dQ5oPg1n|?QTR&M zRMGS#5Uz}J%9p+p!xxzwRi*W~y~L)yjJ`g;FYx%D#~C@ee9Z3J(wt6wA?&=Uhui61 zR3t6Iw@%oj#|<&|RECZ?^#Y3<;Ni%f5hEe>pqd3n5A9qE!Wzq+6oO6Cd33;o82Q(` zk!kDj(0sH2*WVkx=KPJRKO+rA=8Bydp2Bb&;<<;hK(Os7H$~f&fj_)y2W_LrW~l5` z$nFM*m0!Ne@~s1;%4Ys8&P^n65S%TktLwY(-F>D8KTWXkPQj=@#|4~q7wjKTA6oeV zEqdGUmC}02=G)F0M%0JrH03emDMZtZnTW2avd3PO^6bGd+lr*HS_A zUvI%SAr=@~CYs0Hn8NEbA1Evr|IseU@_bTH|01&w>L0UhcshCV6?m(o0Ql+-+B%re zdWbIAbK>dAV%-i_?=l2;i!%y}&^wpE^^GNn-PROwOVPITy(x*Cr>OY`Wy1{r!!S3Y z!3HHbThViif`Govxac^I&ykq{IlXNK_!HWchx_S8g>GH*Y|Vt9a>9aP)zs46a!H=Y3q9fSkjLq)4Js zx5}c*sy6NBm@yjNht~G z?(UE-X=wzc8wA1oan3dH;yLGc&K;lqeE#*mYpt0zvt}_fYml-O`E+z5Qjz1C>Vib9 za+Zoilhrc|i;IvsPamh|rHo@}*;zzxgSkkV#uH8_=7i_A^6WKaFsp7nu>qmMTQ^^O z%f{2mX)w#ua6Pljy+w3J;yXLu8#$GBRHPzfLPbg;Yl3yxK__;I!hY2Eo=0cr^+lao#$L=;q3y~VbG6ZMK^;VSj3ux)I`_J$!HbzAnZ_TM@5%`MZC#Hxh z*LM|_PcH#4Yr;qwO>+#=X-k3Db zNnovgCsnUU%!r$nkiV z9r`3!NK(FX%rAvvEMeQna8;MFo!}+0h7=BvQlx{&E`F*mcRB7w+ox~d1;#sYmh>Nt zdwZ~rj-`>KktLnIv%O@lL>@(eY+rx3q%@tlbZ0rmGW1Us;xEyARJSD!0c3mNM*{r* zI+Lg>CL$t**e@pCJBTbvOV!uYU!uV9o_X#gM7CFwR)VIJzF0v_qLYR$fF7PwVSr(P znQef1VCmznu73K#Lz+=!3R;QYPN`xA3Q8*Jj~{P|OI0XPWU>tPcK1t;NcZIUBI1zT z+=W2>BBV?2MNHKl5U89T1S0=iA*Dr>1cU{Y1b{rJ9Z(q!$a8v0T;@3sA&D~(a{?}A z+cp_ZM`P=e>1hdyJK+q=7B`2=m&dk0wfhjg<&M|T7$ejSM_|DX+8WNlL7#{RzkA^3v3=|{}k}A+y3-jc~>rY>dPR(KKUv#x2>Qh#TuGVB*Slup< zTBvOGAr9(Oy5E*j+{5Cr1{+Y}6htHTepM^BJM)F=WAka2NZuGJm29<&KwE`n^eDD~ zPo5EmRN>Z%i7aIiueep(gvUD5GM441a=SU-uT|#e6bIv}4{`^QE*rxyoW4ysO{&6^ zrVi;-@{W8n^7&K7pe?3FUX+C3YCvt6n%c)=(^h5lhk2Or@C#YbTk&Fw9v+lFEzgo_ zlaHfPBMldw{9L$n+@Wn{Phw{qv79Ye-2~UwR2o>VIbs{ULT!tQm4g|T7K?>vSzOs6 zcUtN>ySun@oVdF%!>oN|JZ_i#h_FDWO4)uu?8tE!wh$t9jBP?b<66{W_j?*T!zg}QEzn$}vK}oRIN(L6 zo@S$Z;(p@Bea3jWQQAx1=Q3%}UDE+!^@yk*EI?gZJpUY$H=a=HywrEPTY(bi7rQuv zdsMccPU*Iw!MytJQx?ZT$1#V)?z@DuMct$)j_ot~J{gp52Yf84o=3)2pX!!hFJ{DU zfR1B3@97$cqkb^Rwu63c`9b%1X;3ISwNIudjdaH8V(!%|XLek7b!ysd_9}A2<_;sZ zKx5iA?HJo5Us)+xU)=7Z@xZTJZ~N+Y5j;@|c`>%TGzKG5Zurfwo7$_dlJ_woJhP{V z>%WO^_V&h58?8lLOfDy``{z9)mgZa2JM7XT7a{k7|!|QUWbxg7A7kB{G=<>fZ+nhNy6wDx{9s>&Oz2;D|5Q-$}NHlPBzzF zmYhYHf;8q89R0nxWsL0GGRRGiCtX`i;Rn*g$WgpuIGCrgB~raTp4(<9ktY=i59k|; z)Pp+~h}3-Ip!`(e4L2lLabW6a=H0q*7g5eUS^N-vu~G*MzQDsm1(2-{THPR?VR)G? z@nFuH6^dX-axig0s*v*eX0}Lo9A+c;)3G}oC0SFxZ!Dzle9e?AmQ=5qF#`7 zA=n0ni(u?wcDNaslhSsP1@3ejZ*1;;;c|px?CoMFtI?&edYnm|e>dJ)ExL-GuO8nC z9lTiG$p0$lPW*jQ=UNTiH&}@Hs#H5Ik-6Z;(54#Yu*_Sd=~Srp!e5e;xw6CY$#oC) z8r2tW%jG{0$#{@()GxRh^a*oQA`@RNT!AKvUPXQyGcEd!!~<(VAEfETytS8ITs0Ar zfLWV)1am4`50kK1pN_Eihau~J1ZZchzK%`lNOu{{vQ4L6WS8|%c)ZwkizBtcHW zbH_8kc3=t`Ei81H2on-xCL}>_+qNttkC2TdYorzJ>oh?6@IiR_#@6=g#r)0Z?0BF10hTQ!6cBc2B) zqC9edlzP8(wd;X1OGup=8phm`G$Qd)C`Yq})4Q!NTWGZ7HMw57tG;ZM9fh}Us?KJ} zyt&DVx@q2+(;^UEY-pRhRy=p)ElP{1LtB#?Yem?rt5~{!acaz!b`O&YQ(tHgZ9Iur zqajOQX)(O`F3!kuSOgPW5Ze?Y0zJX*m6Iu(E6kMC!XkZ>C}?gjX$+B>;JF5q`?Pg5bVZ;PJN` z9u9~-4I!xS?B&&Hx+;zBC6#NbB&I>V;bl_!tRyhYMT|5!w^6Em^ylCt`@QQnZCd7s z_GHNOnvk4{X%b%0*GN32hslNJ%y_E)f*UsBtuW~qudHIIz8y?*B2-v;8l|j&gV)k$ zjOE$L2Q9u2H7ykHct5K5%#wY{`25b^z1F)n(#87;@=Ifwb0_cQIY)Y2`WCr%Z+=R* z407_^$nB2V%BfQ5$smSr4SW=DYCPPb(i!be#`jJGO||PImQ);HP&$2zn(uIp{6R$H zh#w|xsbyem;~f_u3%*&vHuTs&H42BxyC|)f%WZbDB<9;3bq%)$xMXb-{SsrZR93T7?{nr9>79sos=2 z4>DBCG)y4&fiX|Ig4IW26v#kdX2IP-7Q*T#XoF*KnJ%;7#=Bi~dv0I$G%{DcX}~3- z$;IV(msxPr=vEdiG)5Y2_Hp4CYQ)VpnxsHEZdXe@(YN)P&fP#3T&t!P$bviPbu)@B z0ntlvG5V>Su5*rwC<>4T*K`!AwhSDe(6#zBG## zY5$Q0XDa9jwb$Pz_PZ$~i+`B~hrsfkn-RXuK?1Vi!7{De4w`w$t4r}!sLr@T+Hv{;|z3jxQ2Ng@cbj(wcsI2?wIP#sg#qAoV=4cKPZcLg*@K6LHbt6%JS z5!h6vQkXt*9c)aMVKrer>ik&sZnF$qV9$dkPGmTi>}#$#eVqK0{Pp(vQcR3|wz3q4 zgI?5)s5&71jhs&0k*-~^gyJS4?J=)eEL+YJVZfG=H=Jv7{+K6Bj8OC3TcU|k$XG-t z>=hdOlZCzB!J?Z=o2mAW0{NEcLQ}bXQmbG2kgb+(zRyO&MoW&P71jd3`T$p$S`AZo z-?5bMfkL@T4y$cXnZ&3*ayrgEC?>QsXhWBmgf%=zHgmu$3Gx?KZ9V~YiqY_e(Zejl z_zaRnjeZh3501@r=;Tx&@--Mw5TF$aYiWnFVOht8JVL9-h1zT%(Nb;LhJ1l#Li_~x zsV))qGxCNfEp?+cKc4Nu1(oX=+lHnseVYCLiUuRbZ6N&}{73rRsUrh!#v3ItEVIq) zq~Ju|v(G&Ts|~-t+n$WCC94H|cIx>OPPT%HL*H*7?M>+VbP*o=l)|Bb?1+{0`FlN) zT_1VQkn{qnh;VG;rDXg^=eF85&Q|Jo%k7|fD|8jCQ`M($2kIkBck^Y+)bQ4-86BA; z@WPtP5TS$xjujv{F7>b$-E()_M=LUlUoFx}c|;xz<@JnGFrXMJFqmGJg@ZabI{;@~ zld!U##KmW>ZFKS3a)}_mbEp%L{vLlSo)eLUyhj?V-x-B_177Gb#6suss^o_t+7~#| z&T{ky3Ig=F_yjyO_kxCO5@o<{VGQl0uq;0OSBOs^QTL-sjsR{4p@sr?U z7KjBK>1pTa83a!_iU&>#!nTXSO^coe+_|%1*4Ip#-Qa=i^$-^^Lyr+MxW>Aul7OCS z^8SdH$Flu69-1~F&}yudhiS=aqD4*zt|}38{wZeIn;AN0B`lq^_On#Plh*?xn)fjn zw#4WDNPf$)9C~yxzP4;3aMwY3wIe(t9@oa|fEv&fe%HictYgV=<*9c*hBUP^uSe;* z0rs0O>jumTeDHqitq8SctpRcbQqoRq2Vq7P{i7PW(FDO+IM$Y1uAX;gq-+L(M z^mR_|gsE`xr)>;dnKbL;IMmR5G`An)DyOj1^378a-KtgSez34HJYu_3`J`1ATiw7w zGLUpi*+Uuk!D)^r!@_6x&Et8-0-8+N%@TrzllWH-NDPiuJa-7YF!~b3*QQR14iJ$) z;n2+OJd0-weOyM=QUs-Mu8^qtJTOEx3D#Ca$EUJd@Z5?7qqIvnCI6k?m=Pz)4ZR_0 zJ~*lBec4iaUlQMD>y4P@>iRvpuw_h&Xmx|^a%DfsQjfsd`%$BBvzB#5(H)hD;|l?ZV5&q@egsk!x($~v?L6B6Y7 z$dA#azd~~RBoBQTuE!+{cL?pHQi<(Q;--x>hPw?De&whQ5;5$6cQoV5qDw4@etp>i zS>IUtxhGA}sv;&b6;o#~oPq;E_PqhMV>%HkYS;NZv6HpddP}3bGq#6l8r@v9u?bi$ zm~@9{X|I^lCTZGk1XH=jy33;bGwD!F!fO}7G`Q9_9y7#h%aP<3IuV~6PsL ziFjjj;?v3R+zvI69FPAH-BK#Xv3s&cT*^7+dIZE{p3pihLiN6?&^nf0!JN-|Ia&+B zY`AGG-G@~>(pj4G=7Mb>B-8V(vPZ%v7nhJbVmbZjzu;6iZ+sr_o`xdUiDR4HPCp!2 zKvnTAAnYMya)6eahgNbra&{lzZ+78(YUQ37I*F;7I8MO(W@t{&|Dzl`wxsQ%-ZzR`N&HN=TrN_xyj5yoF`j(vW02ru> z*bDbe%kZ)%tlcd4Wo3~@HtJaP&pf@-sm+&Ssk+2xY)LAar(rK%MH_{+jt%)wGQjPf zSlcvzcH-oklH@u+YqRvkL^(Yd(@dy+Sb?{%#uAq@dGD5O8+8yT?`Pc?NKbah z!NWNzN!%tHHcMwsdQQAV_nS0qC%a>;O;D+bxTvr&PQI78pEy zR`Y5Aria}B-9E~(4Y~*Ik zcI+QH7W>ny7gA)0@nL1A-{ZmLtULP9xL<@P<<45aj&?x}0gY|XLB_|@KNzfz;yZ4W zvtr$E&wt!Bvxsf7fW;Y6mqhYB)u7kAMxyUwgX0jqDTeA6bR3c}Y0TLY4PF4z#{uoK zTh9^KuuVCZP&ayeV9AflKu#?ahryqDBDA(Kagu$;F#4onptGTdgX!GpQk#bFSDaXL zBWYXsc)Q)EWo^mJP;3aI?k{MChgy|!IaQg6@cE!bw<)P~o4}?13f7XvcTJmu=7%>Z6!&g3u&6P z-At_H4F$wLoubhhe3_DC`y1MVVrS<)c@ycvr=6W1B(n*YY{g%F@HjHC>LNC+Vx~&A zVmw;Y+y&R8l4jSXe9C-m^zXLIENp1s@gFptZ9E)GKMr5ciFa zej-wqr?(LX{P=tJxq0idtdHx~%-<_pbGg-_-A`tJ(10&v?9KDUz=A_0@rlfO)y|0yV@ zHPiF!!zVY!#7XGEw6l(rDT#@51+kdirdX-);T9iUOkZ^|ZR7N?zi3l2aOUc$eKVbn zG6O>@&QCuVSZlUfYn2#!U;LQ8A>uftY=TgYgljf-m?a2fW_n~uUT;c%fZHt|1?lN+ zZ0}s5Gx;?Ks|a2pr%_R_0JfMN=`aHdAEi&53`!3XSID~Tmc1~zHY|9{yNP{ zcWce5_xU%h?twOUtaU0QkCI7q*pA#`F3utMy7Bd)b}k*tMZFgS&hmKa*7G+Ht$yL z8J%dpg!kDv5{IU_8PvF5SeGE0U#HZ~?D%4%Z|437#V-N3(vVr66%~%e&uw*xFUiW3 zdTq0r7t&P1%OSi~O^(KW`Qpn>+=>H8z<|Wuxz9=GZXF;+1!0`a9XiQBl;Z$Qi)Bj7U=Zy zrT#9t&?Fpx5!UWm8@Av2QB6DCay>Q5-$Yiw1|Od+k$Gi&UDuy_2)dEMT&q##9WQ5r zbyw}&=cQUR;$ciAmE7kfis8IuE1`Z2HEWrZ@q!6&;fN>~M8ut?YdH0GDr{|DyQ`+S z+#(mB$*Ft!Py{AvB?VgX-BYWaCJGBF7?As5dV^2K(b?fw-^KIAj472xXUPSTHaqId zQ<^B&_|8gad$c9WY1|zx5Sk{(ZRz&`>eW@*s|ZxMg}(mkWA!uL(Z4@Mm_ zW_V2tO?B)jjowVje`s#Su8uCgEpm^HbTV1614<43)%v9H@Ulr-18H8QOOLHz2em6fl-*1!iMr$y(5*K?D z<%{03te7a@kBp_t;6TH%ic%Q#k?zd5o6Ypu<_Q}Q>CQz8GdE)`wx@#@lZ8TUmy?ll zp_i*2pO?qoo;cmwd`DxFAa;wN!cq%+toOvjePL}rH?Hv1JIpTxLXZ}n(sWPBGW9h& z?jv#$2S?=`XbLQlx6rC;$_aCCPcE{JtA;U*68TQ9 zBfM;HxH`p`6y{nsgUARgN3=8!Ot+H$>BX3LlSLCZ(bk($Ze^7^2t8CR3+oY7e;?dF zx)PPd5qzKC;EN3GdS%vkm>iaQc03Sf~y9Hb5m46Mvbh?jkVq!A)5 z`IzSHjYTUI1GHxmvFC`dkw8FHp3_ClYCv0j-^xyP6W&C$nCe7)oAkV7k@%#^foRyR zC&O(dNn_;v$p?Xv8;aB$nU4_#BYXVsO=pE+Tll6^Wbkh@qG3F<@b7|wlCk6{osVS; zH6rnSQ(zyey3|0?b1v66xB;mSX<{=+F;jn7y?pC6c{G$O#70K?(1H3^fYs`@_Ain;LTY(JF%V<8k%I&3q{=+dU22 ztJt=Zz)Quu*h*oVQxN35cwZ7>IMWF5iUO{=GB?W92^-DLoea*i!Qc_h9MgDxCbf?3 zop!T#GXD9F6vpXV*%_y|rI=zH4KR&fV(kwe^)WKD5DJ@Ix z#;>1(l%iy-Mi@UCE7(IU%(eH#_KqfDdDlKR!B42>@o`wa!j?jyTTAl^R-wcRvWccr zNR3y?F#-txZF0c|MZ^5pM}l9!Cg0=B6KM&><>5SB=2(9XFSQwRnnj>*mSl&}t|Mqu z$ull(*Fcj)3?;Ps)tlh!qAs_h&ki0^ojln3eW`B5Sz819MYa4iClzWSDaUGcVp_$w7)(S>6Ow#^#G#r0W8+r1smSiulo3AZ>~ZbU8^VXbcbr5NsoWCSohp-FjwW<$gbqRo7wB=08cgjj0KKB*O+KWczpoi$N@lP-;sd7ZF>a) z4A)^9SehAG+v^zX8Q6m%F26vs2f%6cK6~tfjRyj;nSekw#?a zAbNk)<^0uHuOl!GTY-}aQtE$h&b|p%?uE|t8z_j8fvJ&!#qSK(l)#B_%me~8^+16r zzQFk;iCUfD*>Dz?Ss>cbrT4*lVswa@4al1CC;WA=izM1jPOJPGGbR0dQ9ZyVYvK)Pgv zUmZWf3g$dN*eod4%W~n(3KXgYAqUI_6+~9Vat;Qym)!*xALv2x6~e1$MBu zr*qM>vi#W;m;HVKMt8^q9625K&nmayc+0(*@3o9OPV$W20F4&F3i##s zR_-OBa4qAX6XhSuTzb9{nW76_yb%pEM>u`i8?rua|M_06pHATGc2 z6frE5R!%^6L%>_;t}tW*DqS;?UL*gvdceO*f4A(Fq{|Hu$OjDsV!nb+r}Iy-|1gv# z*u>1>nlTo`wX`7$tRB_CGIdq>6T^Q>@H@jGF>A?OcB~*^oXd>Xw^r`;!uncldm}sh zD;3XwHOJ40)ZgHMZ@HHY_%9GG^)8YBYLs*mN$!_lE;e-_5HO*CZ@_G9^Y_4)=vN9s z>)06>0Ye73e*gcjyR)C;G*tnMYyzH5^PT8Y2dbCXQe7=7{hN>@)(=j@o=uaG8gN^D zWDp2gS-!V&ukN6Kf()DqG&VDFfaqN_^S%b~7bnnY!hylqdm9Ae|BiksxoG%5#Q(EY zwvL5^z7fRQ2(X*ZpU!ZNo!C?FvjA^uf_4F0U9}Ti%s*jsG=kV&zk+B|zYuH(tgj8k z23MWRI`$tRf2-kree8ERhkCPg3f%xY0vlNDF5d+G*2=w}#s3ck-_L0NzxLAk-GpH= z(0ybF^iPN0uVdiw&Hq6Cy*}=*9>^o!z^DsMM#jcK9QsW!;9KrhS@b{S>)5z3U(@px ze$!b5K(B`aeFVfZ-&?ttWy?R{`0;}3UwOO>LIZgu3J8?s1w?h3MBcB z68M&T9brOW7Y|-t;IH$$KQ#qnc{5;-<$B%vd`S#0Od&4^%)0>uqL(|QZ>`*GRO8zRT7%D$A=AG;?2r!T<1eP=bj^773zW5bBa^wHP z_dhtlz!h2#b5R4+tD)l5MW)B=mOTKE8Jl4{~zuj za$Ms&KToq)7iBA-|3CD8~j1zAE>Ccp47% z*R8ffz<=YsE;_tq6v(81h7RoXUJd=aat;OmH^yrN#!JedyA+rdzqfKPvAq9A`Ma+C z*?%sRMBiGummF}f@S6Sj-_E~3#_V7D&aagKe(;(W{de9UGW?C-TwUm@+WtHBb%wq? zvGVKdR6i7M>wx~78)m<}RrPbUa0&hECD0$xRpWmL{o736CGfAe?0x_jP5mA4l{0rvosfT?IFggR0c>4B SAOYYXGY+uFJOegqp#K9HUUEzT literal 0 HcmV?d00001 From 191dd51af4e3772814e0268edd73146d37c71cfe Mon Sep 17 00:00:00 2001 From: Bavneet Singh Date: Mon, 25 Aug 2025 15:16:42 -0700 Subject: [PATCH 12/12] clean up code --- src/connectedk8s/azext_connectedk8s/_utils.py | 1 - src/connectedk8s/azext_connectedk8s/custom.py | 19 ++++++++----------- 2 files changed, 8 insertions(+), 12 deletions(-) diff --git a/src/connectedk8s/azext_connectedk8s/_utils.py b/src/connectedk8s/azext_connectedk8s/_utils.py index 4d8c56d1caf..1e151a46af3 100644 --- a/src/connectedk8s/azext_connectedk8s/_utils.py +++ b/src/connectedk8s/azext_connectedk8s/_utils.py @@ -945,7 +945,6 @@ def update_gateway_cluster_link( } } } - print("sending raw request to associate/disassociate gateway with cluster", url, resource) response = send_request_with_retries( cmd.cli_ctx, method="put", diff --git a/src/connectedk8s/azext_connectedk8s/custom.py b/src/connectedk8s/azext_connectedk8s/custom.py index 8f58c1fc418..712ba84bdee 100644 --- a/src/connectedk8s/azext_connectedk8s/custom.py +++ b/src/connectedk8s/azext_connectedk8s/custom.py @@ -2340,17 +2340,14 @@ def update_connected_cluster( print( f"Step: {utils.get_utctimestring()}: Associating gateway with Connected Cluster" ) - - gw_associate_test = os.getenv("TEST_GW", "false") - if gw_associate_test.lower() == "false": - utils.update_gateway_cluster_link( - cmd, - location, - subscription_id, - resource_group_name, - cluster_name, - gateway_resource_id, - ) + utils.update_gateway_cluster_link( + cmd, + location, + subscription_id, + resource_group_name, + cluster_name, + gateway_resource_id, + ) if disable_gateway: gateway = Gateway(enabled=False) print(