Private/Tests/Cleanup/Get-AvmBicepDeploymentCleanupTarget.ps1
|
function Get-AvmBicepDeploymentCleanupTarget { [CmdletBinding()] [OutputType([pscustomobject])] param( [AllowEmptyCollection()] [string[]] $DeploymentIds = @(), [string[]] $PreflightRejectedDeploymentIds = @(), [ValidateRange(1, 1000)] [int] $SearchRetryLimit = 40, [ValidateRange(0, 3600)] [int] $SearchRetryInterval = 60, [System.Collections.IDictionary] $IsolationState = @{}, # A retry snapshot requires terminal records and complete Create history, but deletes nothing. [switch] $RequireCompleteRemoval ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' $records = [System.Collections.Generic.Dictionary[string, hashtable]]::new( [System.StringComparer]::OrdinalIgnoreCase) foreach ($deployment in ConvertTo-AvmBicepCleanupResource -ResourceIds $DeploymentIds) { Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($deployment.resourceId) if ($deployment.type -ine 'Microsoft.Resources/deployments') { throw [AvmConfigurationException]::new("Not a deployment ID: $($deployment.resourceId)") } $records[$deployment.resourceId] = @{ Id = $deployment.resourceId Required = $true Depth = 0 PreflightRejected = $false Status = 'Pending' ErrorCode = '' ErrorMessage = '' References = 0 } } foreach ($rejectedId in $PreflightRejectedDeploymentIds) { if (-not $records.ContainsKey($rejectedId)) { throw [AvmConfigurationException]::new( 'Preflight rejection metadata contains IDs outside the attempted deployments.') } $records[$rejectedId].PreflightRejected = $true } $resources = [System.Collections.Generic.HashSet[string]]::new( [System.StringComparer]::OrdinalIgnoreCase) for ($round = 1; $round -le $SearchRetryLimit; $round++) { $queue = [System.Collections.Generic.Queue[string]]::new() foreach ($record in $records.Values) { if ($record.Status -eq 'Pending') { $queue.Enqueue($record.Id) } } while ($queue.Count -gt 0) { $record = $records[$queue.Dequeue()] $nextPath = $record.Id + '/operations?api-version=2025-04-01' $visitedPages = [System.Collections.Generic.HashSet[string]]::new( [System.StringComparer]::Ordinal) $operations = [System.Collections.Generic.List[object]]::new() $children = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase) $exports = @{} try { if ($RequireCompleteRemoval) { Assert-AvmBicepCleanupDeploymentTerminal -Record $record if ($record.Status -eq 'RejectedWithoutRecord') { continue } } while (-not [string]::IsNullOrEmpty($nextPath)) { if (-not $visitedPages.Add($nextPath) -or $visitedPages.Count -gt 1000) { throw [AvmProcessException]::new("Repeated or excessive deployment operations page: $nextPath") } $response = Invoke-AvmBicepRead -Activity 'Read cleanup operation page' -Read { Invoke-AzRestMethod -Method GET -Path $nextPath -ErrorAction Stop } $document = ConvertFrom-AvmBicepRestResponse -Response $response -Activity 'Read cleanup operation page' ` -AllowedStatus @(200, 404) if ([int]$response.StatusCode -ne 200) { $errorBody = Get-AvmPropertyValue -InputObject $document -Name 'error' $errorCode = [string](Get-AvmPropertyValue -InputObject $errorBody -Name 'code') $groupScope = $record.Id -match '^/subscriptions/[^/]+/resourceGroups/[^/]+/providers/Microsoft\.Resources/deployments/[^/]+$' if ([int]$response.StatusCode -eq 404 -and $groupScope -and $errorCode -ceq 'ResourceGroupNotFound') { $record.Status = 'ContainerRemoved' break } if ([int]$response.StatusCode -eq 404 -and $errorCode -ceq 'DeploymentNotFound') { if ($RequireCompleteRemoval) { throw [AvmProcessException]::new("Existing deployment has no complete operation history: $($record.Id)") } if ($visitedPages.Count -gt 1) { throw [AvmProcessException]::new( "Deployment record disappeared during pagination: $($record.Id)") } if ($record.PreflightRejected) { $record.Status = 'RejectedWithoutRecord' } elseif (-not $record.Required) { $record.Status = 'NestedRecordAbsent' Write-AvmLog -Message "Nested deployment record is absent: $($record.Id)" -Level Warning } $record.ErrorCode = 'DeploymentNotFound' break } throw [AvmProcessException]::new( "Deployment operations lookup failed: HTTP $($response.StatusCode), code '$errorCode', deployment '$($record.Id)'.") } if ($document -isnot [System.Collections.IDictionary] -or -not $document.Contains('value') -or $document['value'] -isnot [array] -or @($document.psbase.Keys | Where-Object { $_ -cnotin @('value', 'nextLink') }).Count -gt 0) { throw [AvmProcessException]::new("Invalid deployment operations response: $($record.Id)") } foreach ($operation in $document['value']) { $properties = Get-AvmPropertyValue -InputObject $operation -Name 'properties' -NoEnumerate if ($properties -isnot [System.Collections.IDictionary]) { throw [AvmProcessException]::new("Invalid deployment operation properties: $($record.Id)") } if ($RequireCompleteRemoval -and ($properties['provisioningState'] -isnot [string] -or $properties['provisioningState'] -cnotin @('Succeeded', 'Failed') -or $properties['provisioningOperation'] -isnot [string] -or [string]::IsNullOrWhiteSpace($properties['provisioningOperation']))) { throw [AvmProcessException]::new("Deployment has an incomplete operation: $($record.Id)") } $operations.Add($properties) if ((Get-AvmPropertyValue -InputObject $properties -Name 'provisioningOperation') -ine 'Create') { continue } $target = Get-AvmPropertyValue -InputObject $properties -Name 'targetResource' -NoEnumerate if ($null -eq $target -and -not $RequireCompleteRemoval) { continue } $targetId = $null if ($target -is [System.Collections.IDictionary]) { $targetId = $target['id'] } if ($targetId -isnot [string] -or [string]::IsNullOrWhiteSpace($targetId)) { if (Test-AvmBicepExistingGraphLookup -Operation $properties -DeploymentId $record.Id -Exports $exports) { continue } throw [AvmProcessException]::new("Deployment operation has an invalid target ID: $($record.Id)") } foreach ($resource in @(Resolve-AvmBicepCleanupResource -ResourceId $targetId)) { Assert-AvmBicepIsolationBoundary -State $IsolationState -ResourceIds @($resource.resourceId) if ($resource.type -ieq 'Microsoft.Resources/deployments') { if (-not $records.ContainsKey($resource.resourceId)) { $records.Add($resource.resourceId, @{ Id = $resource.resourceId Required = $false Depth = $record.Depth + 1 PreflightRejected = $false Status = 'Pending' ErrorCode = '' ErrorMessage = '' References = 0 }) $queue.Enqueue($resource.resourceId) } $child = $records[$resource.resourceId] $child.References++ $null = $children.Add($resource.resourceId) if ($RequireCompleteRemoval -and -not $child.Required -and $child.References -gt 1) { $child.PreflightRejected = $false if ($child.Status -eq 'RejectedWithoutRecord') { $child.Status = 'Failed' $child.ErrorCode = 'AmbiguousPreflightRejection' $child.ErrorMessage = "Multiple operations reference preflight-rejected deployment '$($child.Id)'." } } } else { $null = $resources.Add($resource.resourceId) } } } $nextPath = Resolve-AvmBicepCleanupNextLink -ExpectedPath ($record.Id + '/operations') -NextLink ( Get-AvmPropertyValue -InputObject $document -Name 'nextLink' -NoEnumerate) if ([string]::IsNullOrEmpty($nextPath)) { $record.Status = 'Resolved' $record.ErrorCode = '' } } if ($RequireCompleteRemoval -and $record.Status -eq 'Resolved' -and $record.ProvisioningState -ceq 'Failed') { foreach ($childId in $children) { $child = $records[$childId] if (-not $child.Required -and $child.References -eq 1) { $child.PreflightRejected = Test-AvmBicepNestedPreflightRejection -DeploymentId $childId -Operations $operations.ToArray() } } } } catch { if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') { throw } $record.Status = 'Failed' $record.ErrorCode = 'LookupFailed' $record.ErrorMessage = $_.Exception.Message Write-AvmLog -Message ( "Deployment lookup failed for '$($record.Id)'; known targets will still be cleaned. $($_.Exception.Message)" ) -Level Warning } } $pending = @($records.Values | Where-Object { $_.Status -eq 'Pending' }) if ($pending.Count -eq 0 -or $round -eq $SearchRetryLimit) { break } Write-AvmLog -Message ( "Waiting for $($pending.Count) deployment record(s); lookup round $round/$SearchRetryLimit." ) -Level Info Start-Sleep -Seconds $SearchRetryInterval } $issues = [System.Collections.Generic.List[object]]::new() foreach ($record in $records.Values) { if ($record.Status -eq 'Pending') { $record.Status = 'Missing' $record.ErrorMessage = "Deployment record not found after $SearchRetryLimit lookups: $($record.Id)" } $unresolved = $RequireCompleteRemoval -and $record.Status -in @('NestedRecordAbsent', 'ContainerRemoved') if ($unresolved) { $record.ErrorMessage = "Deployment record could not be resolved ($($record.Status)): $($record.Id)" } if ($record.Status -in @('Missing', 'Failed') -or $unresolved) { $issues.Add([pscustomobject]@{ DeploymentId = $record.Id Code = $record.ErrorCode Message = $record.ErrorMessage }) } } [pscustomobject]@{ ResourceIds = [string[]]@($resources) Deployments = @($records.Values) Issues = $issues.ToArray() } } # SIG # Begin signature block # MIInKwYJKoZIhvcNAQcCoIInHDCCJxgCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBu92YHriPalWfz # xzba+mHCZK8DS5yP1oNY6/Kw84jxJqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnHMIIZwwIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEIAccwEMd/TaL7uV5hEUIZN4m4XyErDbwOXKWYyLvBVHnMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAQ0aj6hmvWRUy/8pY # z3JTwcoycPI3/2dpKzNFannZ+ypgmJZYvnMwx9vSE3FDqqR+pa+pMJUaDzR+1AAx # dVfSl4NgUTizOLuFSwxhpBjLbZ7vNI12C/Aadf1l7grY89vb0Qhp01sDqggxFyYn # sPOSFkac5KiA2bwcn9Dvi7qOEpcmA5G4IhIn7ri0po/W05ZMq+Kn5Cxt0gwIYeYe # lNXIFSuMBBLV3a5iUO61XRJr1yvw9dsKzqGI81/Ae4gVZoU3CllFIZxM+m6hXhoJ # q4ZDVeYvS98ePT2roVTBQ4pHuYUH+99034AnNV4UoxfYxt0H9ti5HKdRyv3QrUlg # gd9puqGCF5cwgheTBgorBgEEAYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3Aw # ghdsAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9 # MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDy+p4PuJ2+otVU # DMp1zNeUBCdd7mIyQJjihlYkGmwo6QIGauIJT03AGBMyMDI2MTEwNTE3NTEyNS4w # MTVaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgIT # MwAAAh86cGnkojAulQABAAACHzANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTFaFw0yNzA1MTcxOTM5NTFa # MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL # ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk # IFRTUyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l # LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDL # O8XFOcfGqAqgiz0+AmQmFl3dZ0aTG4UFJkqqNdMHy28DaheCBs6ONufukye5x42C # WkzgRIy9kE2VWwEntZ8ZkgyrykC0bIqsID7+6FxguseTXf1Vwvm1D8104VmetoBJ # lJ4uGbuyJZUvXDx55nVh50ygLTzZ24WkQsnPpvRZv2kPc39f3bhLyHVtnHsa/W/8 # 6Vrftd+AfFveA+qN/EY+XGj5c/DPMXCYECb0arYb92dDJWtwzpyBrp4gfHlgY1UE # pc4l4AGELrf2J4wrxTzTW+SM8XhV1dOOPrYjD080IbZqL8B+IF0RCdn269YXrGK6 # QIHipznKZcCS8jN30YAHnTJVN5Zzs6t/2YsqBGDquvDad7934FFTwzvUcO3VoIyd # 93XWwvP8/SCFVJh21W8oGQTptGHyly+Fl4henVMVZF1v6osOtirX8GFTiEhnf8nR # dOg7yZYAJ0xy9CtDfbXaTn/cf3Lq3N/GCYKFjC+5mUCE+AJhmxMuMdvSUGmKiAFd # iPAjUTqsWWBBZJm0eCwgeGJFmmQA+V7/98BKcE+gUL7O9eWRDQwKeAcvo6rxNv2Y # 4jKrHA6Z/wi3a/fKUhLCNZES8qGdrpDAm7qh+6FjYxytAbkiKM6uTNy/ULPlwtlY # ZoAJDDQP7eYCywwVbNTbHXRBSS+NccC0sSB4W7U67wIDAQABo4IBSTCCAUUwHQYD # VR0OBBYEFNk72sGDlH0r5DwvfGR5XwJI8B7bMB8GA1UdIwQYMBaAFJ+nFV0AXmJd # g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6 # Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l # AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA # A4ICAQBlbu3IoynnPz0K1iPbeNnsej2b15l5sdl2FAFBBGT9lRdc2gNV8LAIusPY # HHhUvRDcsx4lbMNhVKPGu4TDLaqNt/CI+SFtGuqdRLpVP1XE9cCLyKrKPpcJFJCq # PpV+efoAtYBmIUQcxxwT7WIQ7gag8+rkKvrMkCoRqKS0mKv8J1sKfi85+G2uhZ/1 # RteSVdYZOZOj+Sb4wzonTCTj7EtgMN/BX35W5dTzd7wJdGepYkVi871dSrC2Tr1Z # FzAR7S44drCWZpJ6phJabVNOsNxFJKgSykugOGWzQ318Rr3MTPg2s3Bns+pUPVgM # ijd4bUOH2BlEsLMMwOcolTTZqg1HYrdY1jxpUAI9ipjBQRINL/O705Z+/f2LjNmJ # QooCVJVX24adpZ519SsfazGoqXGt91bmqKo0fI09Il4sUHh4ih6rpiQDBlyL7vmv # CejwVxYevY4qVwTZ/o3gvl+R0lFxYS9feIM4NeG0+WsDZ7jLci5MFeuNwosQY3z2 # 6Xg1oj0U9u+ncR9uTU+xBmJ8BtlCdhQ13RNMX5P+krRYPB3XCp9Jm6XaO1995q32 # AIZm1mzBGI6yHlviXaEC5TzGiO1LXuPtXZU2X93oQJbMoe3v8+5CPKrQalGWyYuh # 2a3V1pwbj+W0FEmEFPpu8TI+qYO1IIQWUSRvFjXth5Ob02hMMjCCB3EwggVZoAMC # AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m # dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy # NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9 # DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2 # Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N # 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc # ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ # j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk # lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy # L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M # 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX # pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU # HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode # 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA # ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE # FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB # MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE # AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB # /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug # SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG # AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv # b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt # 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP # MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++ # Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9 # QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2 # wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR # AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z # bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx # t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3 # Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN # uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z # cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCB # yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc # TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU # U1MgRVNOOjM3MDMtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T # dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBLIMg1P7sNuCXpmbH2IXT2tXeE # EKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3 # DQEBCwUAAgUA7pcSXzAiGA8yMDI2MTEwNTE0MzQwN1oYDzIwMjYxMTA2MTQzNDA3 # WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDulxJfAgEAMAoCAQACAh/eAgH/MAcC # AQACAhI9MAoCBQDumGPfAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkK # AwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAGli # fmTLlV8QXzOVmivo5Fc3HpVRUew6Pm4KOwC0/9VQHJmmeb1gdqoBtEy4OAIJz3pB # t4qgG4RjfqWNXfhDt2IomnJ47SGAmY4K69dAZ8mitK3HoHgFkGa6NwJPsScorZ2N # rRKvViGN1Ovzy5HJLIdq0GP4CL8cYICyuIhMM4uUyWW2ofp0tR7qcb6Y8cbYfiZm # MipkbTDiVJYd36UymEkSe38bAPziWKcPW5jGK9QrlYR55tBJjP+T2Z6nhhUq3cfj # J2AYYck9L8/EJM4/MehStirlb73Egd8nDTYBBxHGUy2cxhdA3huiUJZh+rTSY9Bp # pHC7B93b8X2Ijn8TohAxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEG # A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj # cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt # cCBQQ0EgMjAxMAITMwAAAh86cGnkojAulQABAAACHzANBglghkgBZQMEAgEFAKCC # AUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCAj # KU+GFRuCaOYQZllSZyDZL5+oQfvhq/qC2+wQ/ZD58zCB+gYLKoZIhvcNAQkQAi8x # geowgecwgeQwgb0EILAkCt9WkCsMtURkFu6TY0P3UXdRnCiYuPZhe3ykLfwUMIGY # MIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV # BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG # A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIfOnBp5KIw # LpUAAQAAAh8wIgQgFQsGSLh8KXG4bEdqIYCMWGnHfdNTDHYn+Vnx1Jukr7UwDQYJ # KoZIhvcNAQELBQAEggIAvtpb5OKRPeYRDbdESaCUcyXPJCWvb2bd7v4I1VNZs+n/ # N31VpdY+X7mUXtThtRNMxHEz4BhnDeXa6sncDFX4F4FiuzQJyDGGEr5X5+YPJwFJ # c4Bb4tnmjGZPPHJZP1RH6cXlm42aqX2Iy5Ri5PKnR/JEi+0JqR5No9gsDmWOtILM # mpmrXI4M5hFOHAJAFbPfxYt9TqNzifOiiVegz+kaO5hl1rLE6wVFmBv7HvomlGcS # mbWTGa29qyZBIgfRODZurlwPxEnfPG5rP7Hx12siFbTi+lzX3D7qIPgD15Y62g8i # nKyD0Lb0eEBGkrI1UEJbdrymGEZEUUw2LKecE32fQ83zZc8zXrDf6bEraaJfuLmE # HE5bhelBFvqDcoA2WgBfAT0LWaQZXpHxweGu1BtUWSykJB7O4iKhE5BlIDTjFqI8 # zfXccoHPa8C0X33sZqChqs7dMBi98bvg26z6XXbUJOGjOhiKsx+4HYH/P6P7Ty4C # bIrPPjx/LJXphHbaDaPCfO+mlqZaXcd0iovPr02WKUY2/t/VEPmuHtLYaCwgPqm5 # RAcxRNnOrjLY3fDjHguOGuUyH4KYojXxAQP6vCxYHLjUbql/5bW21cnKTs48X21F # 91HMITEbI1JlU3jnXlIl5te4mjmj1TGJhL/ssBVx76nTLbk4l0xdkC4fOOSbnVw= # SIG # End signature block |