Obs/bin/GMA/ArcExtensionInstallUninstallScripts/Install-ObservabilityExtension.ps1

#Requires -RunAsAdministrator

##------------------------------------------------------------------
## <copyright file="Install-ObservabilityExtension.ps1" company="Microsoft">
## Copyright (C) Microsoft. All rights reserved.
## </copyright>
##------------------------------------------------------------------
<#
.SYNOPSIS
Installs Observability Arc Extension.
 
.DESCRIPTION
The script installs Observability Arc Extension on HCI environment.
1. It retrieves information from Arc for Server Agent, including subscriptionId, tenantId, resourceGroupName, and cloudName.
2. All Telemetry data will be sent to the database present in EastUS region (irrespective of the device registration region).
3. It installs Az.Accounts and Az.ConnectedMachine modules (if not present already) which are needed as a pre-requisite step.
4. It authenticates the user using 2FA and will continue after user confirms their identity by following the instructions (i.e. "WARNING: To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code ****** to authenticate..").
5. It installs the extension on all cluster nodes or local node only (if the node is not a part of any cluster).
 
.EXAMPLE
.\Install-ObservabilityExtension.ps1 -Verbose
 
.NOTES
If Arc for Server agent is not running on the nodes or if cluster is not registered, the script would fail as it cannot fetch the required details to install the extension.
#>


[CmdletBinding()]
Param()

$ErrorActionPreference = "Stop"
$functionName = $MyInvocation.MyCommand.Name

#region Constants
$extPublisherName = 'Microsoft.AzureStack.Observability'
$extTypeName = 'TelemetryAndDiagnostics'
$customExtName = 'TelemetryAndDiagnostics'
$extPublicSettings = @{
    deviceType = "AzureEdge" # We assume deviceType is AzureEdge, so that we can install extension without HCI registration as well.
}
#endregion Constants

#region Helper Functions
Function Get-ExceptionDetails {
    [CmdLetBinding()]
    Param (
        [Parameter(Mandatory, ValueFromPipeline)]
        [System.Management.Automation.ErrorRecord] $ErrorObject
    )

    return @{
        Errormsg = $ErrorObject.ToString()
        Exception = $ErrorObject.Exception.ToString()
        Stacktrace = $ErrorObject.ScriptStackTrace
        Failingline = $ErrorObject.InvocationInfo.Line
        Positionmsg = $ErrorObject.InvocationInfo.PositionMessage
        PScommandpath = $ErrorObject.InvocationInfo.PSCommandPath
        Failinglinenumber = $ErrorObject.InvocationInfo.ScriptLineNumber
        Scriptname = $ErrorObject.InvocationInfo.ScriptName
    } | ConvertTo-Json # The ConvertTo-Json will return the entire hashtable as string.
}

Function Write-Log {
    [CmdletBinding()]
    Param (
        [Parameter(Mandatory, ValueFromPipeline)]
        [System.String] $Message,

        [Parameter(Mandatory=$False)]
        [ValidateSet("INFO","VERBOSE","WARN","ERROR")]
        [System.String] $Level = "INFO"
    )

    $dateTimeStamp = $(Get-Date).ToString('u')
    $formattedMessage = "$dateTimeStamp : $Level : $Message"
    switch($Level.toUpper()) {
        "INFO" {
                    Write-Host $formattedMessage
                    break;
                }
        "VERBOSE" {
                    Write-Verbose $formattedMessage
                    break;
                }
        "WARN" {
                    Write-Warning $formattedMessage
                    break;
                }
        "ERROR" {
                    Write-Error $formattedMessage
                    break;
                }
    }
}

Function Confirm-GetClusterNodeIsAvailable {
    return (
        (Get-Command Get-ClusterNode `
            -ErrorAction SilentlyContinue) -and `
        (Get-ClusterNode `
          -ErrorAction SilentlyContinue `
          -ErrorVariable clusterNodeError `
          -WarningAction SilentlyContinue `
          -WarningVariable clusterNodeWarning) -and `
        $null -eq $clusterNodeError[0] -and `
        $null -eq $clusterNodeWarning[0]
    )
}

Function Get-ClusterNodesLocal {
    [CmdletBinding()]
    Param()

    $functionName = $MyInvocation.MyCommand.Name

    Write-Log "$functionName : Fetching cluster node(s)."

    $clusterNodes = @()

    if (Confirm-GetClusterNodeIsAvailable) {
        $clusterNodes = (Get-ClusterNode).Name
    }
    else {
        $clusterNodes += $env:COMPUTERNAME
    }

    Write-Log "$functionName : Cluster node(s) = $($clusterNodes -join ',')."

    return $clusterNodes
}

Function Get-ArcAgentInfo {
    [CmdletBinding()]
    Param()

    $functionName = $MyInvocation.MyCommand.Name

    try {
        Write-Log "$functionName : Fetching required details from Arc agent."
        
        $arcShow = & "$($env:ProgramW6432)\AzureConnectedMachineAgent\azcmagent.exe" show -j | ConvertFrom-Json

        $requiredArcAgentInfo = [Ordered] @{
            ResourceGroupName = $arcShow.resourceGroup
            SubscriptionId = $arcShow.subscriptionId
            TenantId = $arcShow.tenantId
            CloudName = $arcShow.cloud
            Location = $arcShow.location
        }

        $missingDetails = @()
        foreach ($key in $requiredArcAgentInfo.Keys) {
            if ([System.String]::IsNullOrEmpty($requiredArcAgentInfo[$key])) {
                $missingDetails += $key
            }
        }

        if ($missingDetails.Count -gt 0) {
            Write-Log "$functionName : The script cannot proceed as the required registration detail(s) are missing (i.e. $($missingDetails -join ',')) from the Arc agent." -Level ERROR
        }

        Write-Log "$functionName : Arc agent info = $($requiredArcAgentInfo | ConvertTo-Json -Compress)"

        return $requiredArcAgentInfo
    }
    catch {
        $exceptionDetails = Get-ExceptionDetails $_
        Write-Log "$functionName : Exception occurred while fetching required details from Arc agent. Exception : $exceptionDetails." -Level ERROR
    }
}

Function Install-RequiredPackagesAndModules {
    [CmdletBinding()]
    Param()

    $functionName = $MyInvocation.MyCommand.Name

    Write-Log "$functionName : Installing NuGet package provider."
    Install-PackageProvider -Name NuGet -Force -Confirm:$false

    Write-Log "$functionName : Installing PowershellGet."
    Install-Module -Name PowershellGet -Force -Confirm:$false -SkipPublisherCheck

    $modulesToInstall = @(
        @{
            Name = 'Az.Accounts'
            Version = '2.10.4'
        },
        @{
            Name = 'Az.ConnectedMachine'
            Version = '0.4.1'
        }
    )

    foreach ($module in $modulesToInstall) {
        $mName = $module.Name
        $mVersion = $module.Version
        
        $isModuleInstalled = $false
        Write-Log "$functionName : Checking whether module ($mName) with version ($mVersion) is already present. If not then install or update to the respective version."
        $existingModule = Get-Module -Name $mName -ListAvailable | Sort-Object -Property Version -Descending | Microsoft.PowerShell.Utility\Select-Object -First 1

        if ([System.String]::IsNullOrEmpty($existingModule) -or ($existingModule.Version -lt $mVersion)) {
            Write-Log "$functionName : Installing or updating module ($mName) with version ($mVersion)."
            Write-Log "$functionName : $(Install-Module $mName -RequiredVersion $mVersion -Force -AllowClobber -Verbose)" -Level VERBOSE

            Write-Log "$functionName : Importing module ($mName) with version ($mVersion)."
            Write-Log "$functionName : $(Import-Module $mName -RequiredVersion $mVersion -Force -Verbose)" -Level VERBOSE

            $isModuleInstalled = $true
        }
        else {
            Write-Log "$functionName : Module ($mName) with version ($mVersion) already exists."
        }


        if ($isModuleInstalled) {
            Write-Log "$functionName : Validating whether module ($mName) is installed with correct version ($mVersion) or not."
            $installedModule = Get-Module -Name $mName -ListAvailable | Sort-Object -Property Version -Descending | Microsoft.PowerShell.Utility\Select-Object -First 1

            if ([System.String]::IsNullOrEmpty($installedModule) -or ($installedModule.Version -lt $mVersion)) {
                Write-Log "$functionName : Failed to install or update module ($mName) with version ($mVersion)." `
                    -Level ERROR
            }
            else {
                Write-Log "$functionName : Successfully installed and imported module ($mName) with version ($mVersion)."
            }
        }
    }
}
#endregion Helper Functions

#region Main
try {
    Write-Log "$functionName : Starting installation of Observability extension."

    $arcAgentInfo = Get-ArcAgentInfo
    Write-Log "$functionName : All Telemetry data will be sent to the database present in EastUS region (irrespective of the device registration region). All Diagnostics data will be uploaded to the database present in `"$($arcAgentInfo.Location)`" region." -Level WARN

    Install-RequiredPackagesAndModules

    Write-Log "$functionName : Authenticate user's identity."
    Connect-AzAccount `
        -SubscriptionId $arcAgentInfo.SubscriptionId `
        -TenantId $arcAgentInfo.TenantId `
        -DeviceCode `
        -ErrorAction Stop `
        | Out-Null
    
    Write-Log "$functionName : User authenticated successfully."

    $exceptionMessage = [System.String]::Empty
    $clusterNodes = Get-ClusterNodesLocal

    foreach ($clusterNode in $clusterNodes) {
        Write-Log "$functionName : Checking whether extension already exists on $clusterNode or not."
        $extensionExistsResult = Get-AzConnectedMachineExtension `
                                    -Name $customExtName `
                                    -ResourceGroupName $arcAgentInfo.ResourceGroupName `
                                    -MachineName $clusterNode `
                                    -ErrorAction SilentlyContinue

        if ($null -ne $extensionExistsResult) {
            $exceptionMessage += "ExtensionExistsResult = $extensionExistsResult`n"
            Write-Log "$functionName : Extension exists already on node $clusterNode. Skipping installation."
            continue    
        }
        else {
            Write-Log "$functionName : Extension not found on node $clusterNode."
        }

        Write-Log "$functionName : Installing extension on node $clusterNode. This might take a while..."
    
        New-AzConnectedMachineExtension `
            -Name $customExtName `
            -ResourceGroupName $arcAgentInfo.ResourceGroupName `
            -Location $arcAgentInfo.Location `
            -MachineName $clusterNode `
            -Publisher $extPublisherName `
            -ExtensionType $extTypeName `
            -Settings $extPublicSettings `
            -ErrorAction Stop `
            | Out-Null

        Write-Log "$functionName : Checking whether extension is installed on node $clusterNode or not."
        $installationCheckResult = Get-AzConnectedMachineExtension `
                                    -Name $customExtName `
                                    -ResourceGroupName $arcAgentInfo.ResourceGroupName `
                                    -MachineName $clusterNode `
                                    -ErrorAction SilentlyContinue

        if ($null -eq $installationCheckResult -or `
            $installationCheckResult.ProvisioningState -ne "Succeeded" -or `
            $installationCheckResult.MachineExtensionType -ne $extTypeName) {
            $exceptionMessage += "InstallationCheckResult = $installationCheckResult`n"
            Write-Log "$functionName : Observability extension installation failed on node $clusterNode with exception $installationCheckResult." `
                -Level ERROR
            
            continue
        }
        else {
            Write-Log "$functionName : Observability extension installation succeeded on node $clusterNode with version $($installationCheckResult.TypeHandlerVersion)."
        }
    }

    if ([System.String]::IsNullOrEmpty($exceptionMessage) -and `
        [System.String]::IsNullOrWhiteSpace($exceptionMessage)) {
        Write-Log "$functionName : Successfully installed Observability extension on all the cluster nodes."
    }
}
catch {
    $exceptionDetails = Get-ExceptionDetails -ErrorObject $_
    Write-Log "$functionName : Observability extension installation failed due to unhandled exception: $exceptionDetails" -Level ERROR
}
#endregion Main
# SIG # Begin signature block
# MIIoRgYJKoZIhvcNAQcCoIIoNzCCKDMCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD/4Xtx77PceTtJ
# EOy9UeIPKnVLl8QbeYw1VOToPY00x6CCDXYwggX0MIID3KADAgECAhMzAAADrzBA
# DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA
# hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG
# 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN
# xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL
# go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB
# tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw
# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW
# MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci
# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG
# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0
# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd
# mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ
# 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY
# 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp
# XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn
# TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT
# e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG
# OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O
# PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk
# ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx
# HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt
# CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq
# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x
# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv
# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg
# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03
# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr
# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg
# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy
# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9
# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh
# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k
# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB
# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn
# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90
# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w
# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o
# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD
# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa
# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny
# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG
# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t
# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV
# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG
# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl
# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb
# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l
# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6
# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0
# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560
# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam
# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa
# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah
# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA
# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt
# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr
# /Xmfwb1tbWrJUnMTDXpQzTGCGiYwghoiAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp
# Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB
# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO
# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIO0zIVn1yM0C1VA0rL9K54NH
# 36I8e+aeGd6cmOGL1DQ4MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A
# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB
# BQAEggEAeM01aKIzoxRJKMrhnvlHfPPbqG4mcrdzBkM/OcDMh+j/kFwwXaGK4fiW
# JnP/du4yMV5NsQHAXa1X5DkemUStPhcsNbannarN+qO5cQY+6fkcAvIWHR0qAkc0
# aA/BEd7izOQbvXpFsDFadJE6WBwqEhlbwXwx0rBAUgtVfBbCkwnZ4N1jDv2L2veX
# W8BlVF8c/9l1KNpih4KxIMmFxUy2qRz0yAKBAJRaWeW5gzQgVA9C2oLfqyg2uISl
# l5bJ4T6EGdjkr0phRgbpWXADAcjw61ZPmuExOML3ygIOwNpcEbcpJoO2b3SWWFmg
# tAIlqBMJyB9prmox7j5tGMhNB0kE46GCF7AwghesBgorBgEEAYI3AwMBMYIXnDCC
# F5gGCSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsq
# hkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl
# AwQCAQUABCAU1V5n7bxjY/cmlnR1bgsBZlzyB7HkQQ/wP9iyYxBHLQIGZutYcryb
# GBMyMDI0MTAwOTAxMTU0My41NzZaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT
# Tjo1MjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# U2VydmljZaCCEf4wggcoMIIFEKADAgECAhMzAAACAAvXqn8bKhdWAAEAAAIAMA0G
# CSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0
# MDcyNTE4MzEyMVoXDTI1MTAyMjE4MzEyMVowgdMxCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9w
# ZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjUyMUEt
# MDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl
# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr1XaadKkP2TkunoTF573
# /tF7KJM9Doiv3ccv26mqnUhmv2DM59ikET4WnRfo5biFIHc6LqrIeqCgT9fT/Gks
# 5VKO90ZQW2avh/PMHnl0kZfX/I5zdVooXHbdUUkPiZfNXszWswmL9UlWo8mzyv9L
# p9TAtw/oXOYTAxdYSqOB5Uzz1Q3A8uCpNlumQNDJGDY6cSn0MlYukXklArChq6l+
# KYrl6r/WnOqXSknABpggSsJ33oL3onmDiN9YUApZwjnNh9M6kDaneSz78/YtD/2p
# Gpx9/LXELoazEUFxhyg4KdmoWGNYwdR7/id81geOER69l5dJv71S/mH+Lxb6L692
# n8uEmAVw6fVvE+c8wjgYZblZCNPAynCnDduRLdk1jswCqjqNc3X/WIzA7GGs4HUS
# 4YIrAUx8H2A94vDNiA8AWa7Z/HSwTCyIgeVbldXYM2BtxMKq3kneRoT27NQ7Y7n8
# ZTaAje7Blfju83spGP/QWYNZ1wYzYVGRyOpdA8Wmxq5V8f5r4HaG9zPcykOyJpRZ
# y+V3RGighFmsCJXAcMziO76HinwCIjImnCFKGJ/IbLjH6J7fJXqRPbg+H6rYLZ8X
# BpmXBFH4PTakZVYxB/P+EQbL5LNw0ZIM+eufxCljV4O+nHkM+zgSx8+07BVZPBKs
# looebsmhIcBO0779kehciYMCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBSAJSTavgkj
# Kqge5xQOXn35fXd3OjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBf
# BgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz
# L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmww
# bAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29m
# dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El
# MjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUF
# BwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAKPCG9njRtIqQ
# +fuECgxzWMsQOI3HvW7sV9PmEWCCOWlTuGCIzNi3ibdLZS0b2IDHg0yLrtdVuBi3
# FxVdesIXuzYyofIe/alTBdV4DhijLTXtB7NgOno7G12iO3t6jy1hPSquzGLry/2m
# EZBwIsSoS2D+H+3HCJxPDyhzMFqP+plltPACB/QNwZ7q+HGyZv3v8et+rQYg8sF3
# PTuWeDg3dR/zk1NawJ/dfFCDYlWNeCBCLvNPQBceMYXFRFKhcSUws7mFdIDDhZpx
# qyIKD2WDwFyNIGEezn+nd4kXRupeNEx+eSpJXylRD+1d45hb6PzOIF7BkcPtRtFW
# 2wXgkjLqtTWWlBkvzl2uNfYJ3CPZVaDyMDaaXgO+H6DirsJ4IG9ikId941+mWDej
# kj5aYn9QN6ROfo/HNHg1timwpFoUivqAFu6irWZFw5V+yLr8FLc7nbMa2lFSixzu
# 96zdnDsPImz0c6StbYyhKSlM3uDRi9UWydSKqnEbtJ6Mk+YuxvzprkuWQJYWfpPv
# ug+wTnioykVwc0yRVcsd4xMznnnRtZDGMSUEl9tMVnebYRshwZIyJTsBgLZmHM7q
# 2TFK/X9944SkIqyY22AcuLe0GqoNfASCIcZtzbZ/zP4lT2/N0pDbn2ffAzjZkhI+
# Qrqr983mQZWwZdr3Tk1MYElDThz2D0MwggdxMIIFWaADAgECAhMzAAAAFcXna54C
# m0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE
# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z
# b2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZp
# Y2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMy
# MjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH
# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV
# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0B
# AQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51
# yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY
# 6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9
# cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN
# 7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDua
# Rr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74
# kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2
# K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5
# TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZk
# i1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q
# BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3Pmri
# Lq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUC
# BBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJl
# pxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIB
# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y
# eS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUA
# YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw
# MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w
# Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/yp
# b+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulm
# ZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM
# 9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECW
# OKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4
# FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3Uw
# xTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPX
# fx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVX
# VAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGC
# onsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU
# 5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG
# ahC0HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl
# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT
# Tjo1MjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# U2VydmljZaIjCgEBMAcGBSsOAwIaAxUAjJOfLZb3ivipL3sSLlWFbLrWjmSggYMw
# gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD
# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsF
# AAIFAOqwM8UwIhgPMjAyNDEwMDgyMjQyMTNaGA8yMDI0MTAwOTIyNDIxM1owdzA9
# BgorBgEEAYRZCgQBMS8wLTAKAgUA6rAzxQIBADAKAgEAAgIJ7QIB/zAHAgEAAgIU
# ZzAKAgUA6rGFRQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAow
# CAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQCHfDaMBF7L
# U6ON2+6DqTHowJztzaZ7JYhbM5cDvp7WAsXDR4mrVHkkLyEV4KO9ze228fLAov2G
# ddJfFG10kJlCsmnqNN12+1B9KYoYw2oVzUCqWqg7K2NiU1Y37PJudpejkS2zpnIf
# 2rKp9eLtgro5VelkBiGQ/P87qzUOPpKwtB3IGB+9zsmRBpR0jmWbrNN0d5WT/UDc
# d2WTCskXhsScssCECx5EbDbFX6iJhZFKb94dR9PNUdSghFWbiwQYD2uUpUy+3SNj
# NXNbD9TMOJd3S2LDwkNbhR0qw5tFkb6HLwEB1NMpw6NGaMo/J987RxyeASI1DVwC
# MyS6KSM2L0qFMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m
# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB
# IDIwMTACEzMAAAIAC9eqfxsqF1YAAQAAAgAwDQYJYIZIAWUDBAIBBQCgggFKMBoG
# CSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgdMDJtZdW
# gj/Fd3uSdaERWLF7DDaG/ib4ypXpYn+lZpUwgfoGCyqGSIb3DQEJEAIvMYHqMIHn
# MIHkMIG9BCDUyO3sNZ3burBNDGUCV4NfM2gH4aWuRudIk/9KAk/ZJzCBmDCBgKR+
# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT
# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACAAvXqn8bKhdWAAEA
# AAIAMCIEIL7yxdLHbjIdPZfNgt/QFPZNuaVDnYegpYvRNiabhlHgMA0GCSqGSIb3
# DQEBCwUABIICAH/wZc2pms1x93yUYk9zQNYyx4F8IgG4Pu0nbNlUsnI84F6t3F+g
# VXynSZZBfGPfp5Uwf8XaCpoAZJHnk/bC3vPpVd/fZporR7OrZWvapYpuhJWJ8MBN
# lFxOPOVcgATJ6oepTi2n1Lopi/FMGUUYWbHWsABUjc8sw65fFpaxvG4di582SGcI
# raORK73OrAJyImbSOWGrB89hM8Ow6tgYNVvsrDyhToG7uWDcbh4z+eLUc0+hkLPt
# BPpmZlMmHgMH2sA++o8OrPwjR0wrMPu16ab7frZ+807VBWrvVT4LSJ93reDfhRe6
# NeF2bgursXPynt2ehTScAHb5S0nvnRIsNpWVu8WTwh+9dWLnIPtMyzVMvBI7zKAI
# H4jC9myoBKxKe51Hc71HxJMcEI8fQfI5KoGAzNXBP4hO+8unDDaLiM4LyTUshqWY
# KG89VoXVwwc2TOOYoT6EgpA5zuaPF4Q8a0qJK2YMNBYFLJHVoZjVvk7JHdOhARhE
# SqQH4dNv8up0ugduKpfzdZmaog1XxhUv+5h53gXxw3lTMzigHh2bxmV/j/G4/+mD
# yRf+Sz3+MGl0Qoc1bQN1y3SK943Zy/v/pyB8hxfQR/PlRhX++ZB+eovWfpNH+Gvt
# 1nMzW+VCpa+Es0KCB4usgBsoZuyOdH0heOjVQYW1rRg/LRW1qqYXiaxc
# SIG # End signature block