diff --git a/data/bindata.go b/data/bindata.go index 83794843..1617c466 100644 --- a/data/bindata.go +++ b/data/bindata.go @@ -77,7 +77,7 @@ func (fi bindataFileInfo) Sys() interface{} { return nil } -var _dataDataJson = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\xfd\x7b\x73\xdb\xb8\xb6\x26\x0e\xff\x7f\x3e\x05\x4a\xde\x53\x3d\x73\x5e\x53\x96\x7c\x8b\xe3\xa9\xd4\x5b\x6e\xdb\x9d\xa8\x3a\xb1\x35\xb6\x93\x9e\x5d\x5b\xa7\x54\x30\x09\x4b\x1c\x53\x04\x9b\xa4\x9c\x78\x67\x32\x9f\xfd\x57\xb8\x90\x04\x49\x90\x22\xa9\x8b\x75\x59\xda\x55\xbb\x1d\x12\xc4\x1d\xcf\x5a\x58\x58\xeb\xc1\xcf\xff\x40\xad\x3f\xcf\x82\x6f\xc4\x0f\x6c\xea\xde\x13\xff\xc5\x36\xc9\xad\x17\xda\xd4\x0d\x5a\xe7\xe8\xe7\x7f\x20\xd4\x7a\xe9\xb6\xbb\x1d\xf9\x0f\xd4\x22\xa1\x69\xb5\xce\x91\x3b\x75\x9c\x7d\xfe\xe0\x79\xfa\x48\xb0\x67\x47\x09\x50\x0b\x3b\x0e\xfd\x6e\x78\xbe\xfd\x62\x3b\x64\x44\x58\xea\x56\xe8\x4f\x49\x6b\x5f\xbe\x77\xa9\xfb\x3a\xa1\xd3\xc0\xc0\xd3\x70\xcc\xde\x3e\x61\x27\x88\x5f\x3f\xda\xae\x65\x60\xcb\xf2\x49\xc0\xaa\xd0\xea\xb4\xf9\xff\xa2\xd7\xc4\xc5\x8f\x0e\x31\xb0\x35\xb1\x03\x56\x67\xc3\x73\xa6\x23\x9b\xd7\xb6\x75\x83\x27\x24\xf0\xb0\x49\x3e\xdb\x4f\xc4\x7c\x35\x1d\xb2\xff\xd9\x9e\xd8\xe1\x1d\x76\x47\xc4\xdf\x97\xcd\xbb\x30\x4d\x3a\x75\xc3\xfd\x2b\xf2\x84\xa7\x4e\x78\x1f\x52\x1f\x8f\xc8\xa5\x83\x83\x20\x7a\xf6\x40\x1d\xe2\xe3\x90\x77\x89\x49\x5d\x2b\xd8\xff\x32\x0d\x71\x68\xbb\xa3\x8b\xa8\xdc\xbf\xc8\xe3\x98\xd2\xe7\xfd\x6f\xd8\xb1\x2d\xfd\xab\x3b\x12\xd0\xa9\x6f\x92\xff\x35\xa5\x21\xde\xbf\xa1\x16\xb9\x23\x41\xe8\xdb\x26\xcb\x38\x6a\x8f\xed\x06\xc4\x9c\xfa\xc4\xf0\xa8\x1f\xf2\xf6\x46\x6f\x58\xc7\x3a\x24\x34\x3c\x9f\x3c\x11\xdf\x27\x71\xaf\x18\xe1\xab\x47\x78\x83\x7b\x6e\x48\x7c\x17\x3b\xbd\xfe\xfe\xf5\x8f\xf8\xcf\x4f\x34\x08\x5d\x3c\x89\x7b\xd4\xf3\xe9\x93\xed\xd8\xee\x28\xd7\xd7\x3e\xf9\x7b\x4a\x82\x70\x4c\xb0\x45\x7c\x83\xfc\x08\x7d\x6c\x88\x7f\x04\xbc\x58\xfb\x07\xfb\xe4\x7f\x1b\x77\x64\x42\x43\x62\x5c\xf3\x04\xfa\x8f\x47\x3e\x9d\x7a\xd1\xc7\xa9\xaf\x3e\xb2\x37\xfa\x8f\xa6\x01\xab\xf3\x84\x68\xbf\xfb\x1a\x10\x3f\xfe\x6c\xea\x86\xf6\x84\x18\x26\x75\x9f\x6c\xde\x0e\x36\x77\xa8\x6f\xff\x9b\x8f\x52\xfb\xf9\x2c\x68\xdb\xf4\xe0\xa5\xfb\x48\x42\xdc\xfd\xa0\x4e\xb7\x4c\xf7\x9e\x1e\x1f\x1f\x25\xaf\xf8\x84\x30\xb0\x98\x11\x86\x43\xe9\xf3\xd4\xcb\xce\xd7\x40\x4c\x10\xe3\x11\x9b\xcf\xc4\xe5\xd3\x99\x2d\x82\x38\x97\xd0\x09\x0c\xd3\xf6\xc6\xc4\x37\x82\xa9\x1d\x8a\x91\x79\xf8\x7c\x3f\xbc\xbe\xbc\xfa\x74\xcd\xfe\xff\xfe\x62\xf8\x57\xef\xe1\xd3\xf0\xe2\xfa\x7e\xd8\x3d\x3c\x1b\x7e\xbc\xfc\x32\xbc\xff\x74\x71\x78\x72\xba\x5f\x98\xee\xf0\xe4\x34\x4a\x77\x74\x76\xac\x4f\x77\xf9\xe9\xe2\xf2\xd3\xc5\x61\x67\xd8\xbf\xfd\xfc\xcf\xee\x51\xe7\x44\x49\x76\x57\xa9\xd0\xbb\x4a\x45\xde\x15\x16\xd8\x62\x5d\xf0\x2b\x01\x02\x87\x84\x0a\x10\x14\x2e\xe2\x39\x21\x82\x3d\x24\x6e\x68\x9b\x7c\xf0\x8d\x90\x3e\x13\xd7\xf8\x2e\x56\x5d\x2e\x2b\x75\x9e\x18\x13\x6a\x11\x96\x42\x2e\xd1\x28\x91\xc9\x67\x6f\x60\x78\xc4\x37\xfe\xa6\x62\x00\x95\x3c\x4c\xd7\x36\x1e\x6d\xd7\xb0\x6c\x9f\xbd\x3a\xa0\x5e\x78\x60\xba\xf6\xc1\xa3\xed\xaa\x49\xd8\xe4\x8c\xd3\x90\xd0\xe4\x69\x5c\x12\xb6\xad\x04\xbc\x9e\xa8\x6f\x12\xc3\xa5\x16\x31\x58\x27\x98\x38\x64\x70\xc6\xbe\x88\xd3\xbc\x10\x37\x34\xfe\xf6\x82\x14\x18\x4c\xf0\x33\x31\x6c\x8f\xa7\x0e\x8c\x69\x68\x3b\x86\x39\xc6\x12\xf7\xd4\xf6\xba\x24\xfc\x4e\xfd\x67\x09\x8b\xec\xad\xe9\xda\xc9\xea\xc3\x96\x41\x5d\xe7\x35\x8f\x36\x3e\x09\xa8\xf3\xc2\xdb\x10\xd7\x5f\x3c\x6b\xf3\x67\xf1\x62\xf0\x09\x9e\xd8\xee\x88\xa5\x74\x09\x87\x32\xc3\xb6\x1c\x62\xb0\xf5\x49\xa7\x3c\xd3\xa3\xce\x04\x16\x47\xe7\x24\xea\x83\x17\xd6\xe6\xc3\xf8\x5f\xd4\x99\x4e\x88\x1c\x9f\x78\xba\xbc\x60\xff\xc0\xb1\x1f\x0f\xe4\x22\x3a\x10\xa9\x22\xd9\x96\x59\x65\x9e\x4f\x7f\xbc\x26\xeb\x6c\x4c\xb0\x13\x8e\xff\x6d\x64\x25\x67\xf7\xf0\x1d\x5f\x76\xdd\x4c\x45\x32\xb9\x5d\x52\x37\xf4\xa9\xe3\x10\xbf\xea\xd2\x35\x71\x28\xe7\xb0\x69\x5b\x7e\x6e\x0a\x8a\xd5\x3d\x75\x43\x3c\x1a\x11\xcb\x30\x1d\x3a\xcd\xad\x70\x01\xe4\x0c\x98\xf9\x6b\xc3\xa7\x53\x39\x39\x52\x2b\x5d\x4a\xfb\x31\x0d\x42\x0f\x87\x63\xc3\xf3\xe9\x8b\xcd\x64\x2c\xaf\x6c\x3a\xad\x23\xa5\x98\x43\xcc\x30\xb7\x2a\x58\x65\x27\xd4\xb5\x43\xca\x44\x15\x36\x09\x5b\xeb\x36\xe5\xf5\x3a\xee\x04\xb1\xa8\xa4\x96\x41\x5e\x84\x84\x56\x67\xf4\xc9\x44\x49\x53\x28\x4e\x43\xe2\x4f\x6c\x17\x87\xc4\x32\x58\x46\x23\xd3\x08\xc7\x3e\x09\xc6\xd4\xe1\xe5\x74\x3b\x9d\x4e\xf1\x50\x04\xe6\x98\x58\xd3\x8a\xa3\x50\xd6\xd6\xe2\xfa\xa9\x85\xfe\x87\x2c\x98\xab\x77\x5d\x50\xef\x40\xbd\x03\xf5\x0e\xd4\x3b\x50\xef\x40\xbd\x03\xf5\x0e\xd4\x3b\x50\xef\xb6\x49\xbd\x3b\x04\xf5\x0e\xd4\x3b\x50\xef\x40\xbd\x03\xf5\x0e\xd4\x3b\x50\xef\x40\xbd\x03\xf5\x6e\x9b\xd4\xbb\x23\x50\xef\x40\xbd\x03\xf5\x0e\xd4\x3b\x50\xef\x40\xbd\x03\xf5\x0e\xd4\x3b\x50\xef\xb6\x49\xbd\x3b\x06\xf5\x6e\xc1\xea\xdd\x7e\xdf\xb7\xa9\x6f\x87\xaf\xa0\xe7\x81\x9e\xb7\x05\xa2\x0c\xf4\x3c\xd0\xf3\x40\xcf\x03\x3d\x0f\xf4\xbc\x8d\xd6\xf3\xda\xdd\x8e\xe1\x63\xd7\x1c\x13\xbf\x6b\xe4\x5c\xf2\x64\x75\x4c\xc7\x66\xd0\x64\x12\x3f\x8c\x71\x39\x55\x30\x21\xbe\x51\x98\x28\x33\xeb\x40\x77\x04\xdd\x11\x74\xc7\x9d\x16\x8f\xa0\x3b\x82\xee\x08\xba\x23\xe8\x8e\xa0\x3b\x6e\xb6\xee\xf8\x1e\x54\x47\x50\x1d\x41\x75\x04\xd5\x11\x54\x47\x50\x1d\x41\x75\x7c\xf3\xc5\x01\xaa\x23\xa8\x8e\x1b\xa1\x3a\x9e\xc0\xf1\xf2\xb2\xf4\xbc\xfd\x07\x6c\xbb\x21\x7b\x1b\xfc\xfe\x7a\x49\x5d\xcb\x16\xaf\x89\x1f\xd8\x41\x48\xdc\xf0\x1b\x5f\xe9\x97\x0e\xb6\x27\x77\x24\xb0\xff\x4d\x40\x33\x04\xcd\x70\x0b\x84\x5f\x43\xcd\x10\x34\x3f\xd0\xfc\x36\x7f\xf2\x83\xe6\x07\x9a\xdf\x66\x68\x7e\x70\xe0\x0c\xda\x24\x68\x93\xa0\x4d\xae\xb9\x40\x05\x6d\x12\xb4\xc9\x9d\x9d\xfc\xa0\x4d\x82\x36\xb9\x29\xda\x64\x17\xb4\x49\xd0\x26\x41\x9b\x04\x6d\x72\x9d\x05\x2a\x68\x93\xa0\x4d\xee\xec\xe4\x07\x6d\x12\xb4\xc9\x0d\xd4\x26\x73\x04\x86\xa0\x4d\x82\x36\x09\xda\x24\x68\x93\x6f\x2e\x50\x41\x9b\x04\x6d\x72\x67\x27\x3f\x68\x93\xa0\x4d\x6e\x88\x36\x79\x0a\xca\x24\x28\x93\xa0\x4c\x82\x32\xb9\xce\xf2\x14\x94\x49\x50\x26\x77\x76\xf2\x83\x32\x09\xca\xe4\x86\x28\x93\xef\xe0\x9c\x1b\x94\x49\x50\x26\x41\x99\x5c\x67\x79\x0a\xca\x24\x28\x93\x3b\x3b\xf9\x41\x99\x04\x65\x72\x43\x94\x49\x20\xee\x01\x65\x12\x94\x49\x50\x26\xd7\x5a\x9e\x82\x32\x09\xca\xe4\xce\x4e\x7e\x50\x26\x41\x99\xdc\x08\x65\xf2\x14\xa8\x7c\x40\xf3\x03\xcd\x0f\x34\x3f\xd0\xfc\x40\xf3\x03\xcd\x0f\x34\x3f\xd0\xfc\x76\x45\xf3\x6b\x1f\x81\x19\x11\x94\x49\x50\x26\x41\x99\x5c\x67\x79\x0a\xca\x24\x28\x93\x3b\x3b\xf9\x41\x99\x04\x65\x72\x43\x94\xc9\x63\x50\x26\x41\x99\x04\x65\x12\x94\xc9\x75\x96\xa7\xa0\x4c\x82\x32\xb9\xb3\x93\x1f\x94\x49\x50\x26\x37\x44\x99\x3c\x05\x65\x12\x94\x49\x50\x26\x41\x99\x5c\x67\x79\x0a\xca\x24\x28\x93\x3b\x3b\xf9\x41\x99\x04\x65\x72\xf3\x94\x49\xe0\xf1\x01\x65\x12\x94\x49\x50\x26\xd7\x4f\x9e\x82\x32\x09\xca\xe4\xce\x4e\x7e\x50\x26\x41\x99\xdc\x10\x65\x12\x78\x7c\x40\x99\x04\x65\x12\x94\xc9\xb5\x96\xa7\xa0\x4c\x82\x32\xb9\xb3\x93\x1f\x94\x49\x50\x26\x37\x44\x99\x3c\x03\x65\x12\x94\x49\x50\x26\x41\x99\x5c\x67\x79\x0a\xca\x24\x28\x93\x3b\x3b\xf9\x41\x99\x04\x65\x72\xf3\x94\x49\x38\xe6\x06\x65\x12\x94\x49\x50\x26\xd7\x4f\x9e\x82\x32\x09\xca\xe4\xce\x4e\x7e\x50\x26\x41\x99\xdc\x08\x65\xf2\x5d\x43\xfd\x51\x0e\xcf\xcb\x21\x28\x96\xa0\x58\x82\x62\x09\x8a\x25\x28\x96\xa0\x58\x82\x62\x09\x8a\x25\x28\x96\xa0\x58\x32\xc5\xf2\x0c\x14\x4b\x50\x2c\x41\xb1\x04\xc5\x72\x73\x64\x2b\x28\x96\xa0\x58\xee\xec\xe4\x07\xc5\x12\x14\xcb\x4d\x50\x2c\xdf\xd7\xb9\xc5\x26\xd6\xc9\x4c\x31\x6f\x58\x9e\x19\xa5\x6b\x86\x8a\x96\xd5\x7a\x3e\xe3\x47\xe2\x68\x35\xb5\xb4\x72\x55\xa8\xb7\x65\xb4\xae\xf4\x3c\x04\x1d\xb5\x5c\x47\x05\x45\x13\x14\xcd\x2d\x90\xb5\x0d\x15\xcd\xf9\x20\x02\x14\x51\x50\x44\x37\x61\x71\x80\x22\x0a\x8a\xe8\x3a\x2b\xa2\xff\xc1\xcb\x6e\xfd\x79\x16\x7c\x63\xba\x21\x75\xef\xfe\xbc\xbe\x7f\x0d\x42\x32\xe9\x4d\xf0\x88\x0f\xc7\xcf\xc8\x08\xda\x69\x77\x4a\xe2\x7e\x5a\xf2\xd5\x81\x49\x7d\x42\x03\x83\x3d\x3e\x7f\x39\x6a\x77\xdb\x5d\x39\xf1\x5b\xd8\xf1\x6c\x97\xa8\x69\xfd\x67\x62\x84\x94\x3a\xc1\xf9\x4b\xa7\xdd\x6d\x1f\xcb\x84\xee\xc8\x76\x7f\xf4\xe5\x14\x9f\x95\xd8\x24\x7e\x78\x45\xbf\xbb\x0e\x65\x1d\x52\xe1\x03\x36\xe3\x7d\x97\x84\x24\x90\xea\x60\x70\x6f\x5b\xc4\xc4\x55\xbf\xb5\x04\xe4\x46\x29\x9f\xcf\x02\xc3\x72\x03\x83\xbd\xe2\x7f\xe0\x89\x75\x7a\x7c\xde\x6d\x77\x8f\xdb\x67\xf2\x33\xcb\x0d\x26\x38\xf8\x5b\xf7\x99\x7c\x65\xb8\xd8\x75\x5f\x75\xdf\xca\x22\x35\x75\x8c\xb2\x08\xc4\xab\x92\x8f\x2f\xa6\x21\x0d\x4c\xec\xa4\xfb\xc7\x74\xa6\x41\x48\x7c\xb6\xa4\x98\x30\xb0\xa9\x8b\x1d\x26\x6e\x65\xd2\x38\xbf\x78\xd6\x29\x5d\xa7\xe6\x33\x7e\xf5\x88\xcf\x5e\x9d\x67\xa7\x89\xfc\xec\xc9\xc1\xae\x4b\x1c\xcd\x2c\x91\x6f\x58\x27\xbf\x6f\x67\x92\x5f\xba\x76\xf1\x17\x86\xe9\xda\xec\xab\xc3\xb8\x6e\x26\x76\x6c\x93\xde\x48\xf1\x1e\x7f\xc5\x9f\x72\xa8\x92\xb3\x31\x95\x3c\x5b\x86\x48\xcd\xf3\xd6\x24\x0e\x1d\x5d\xe2\xd0\x39\x7f\x39\x54\x3a\xc9\xc4\x2e\x76\x6a\xd4\xc3\xc5\xb9\xa6\x16\x56\xc3\xc5\xce\x1f\xf5\x3a\xf3\x3b\xc1\x2f\x24\xaa\x0d\xff\x07\x53\x0e\x82\x03\xfe\x27\x9f\xb4\xe7\x87\xed\x6e\xfb\x50\x4d\x2e\xab\x93\x4b\xed\x7a\x66\x2a\xb1\x47\xad\x9e\xfb\xe4\x63\x26\x3f\xb0\xed\xa6\x67\x97\x87\xa7\x01\x91\x73\xe8\x28\xae\x8e\xed\x8e\x22\x40\x8b\x12\xf2\xd5\x6e\xc8\x17\xd1\xe6\xd6\x21\xfe\x79\x87\x4d\xa6\xc3\x68\x32\x1d\xa5\x73\xf8\x3d\xd1\xc5\x67\x65\x64\x58\x62\x4f\x27\xd5\xf7\x73\xb6\x9c\x53\xc7\x3b\x9d\x76\x37\x2a\xe5\x70\x39\xc8\x76\x56\x07\xd9\xce\xea\x22\xdb\xd9\x1c\xc8\x76\x06\xc8\x56\x1d\xd9\x92\x69\x02\xc8\x06\xc8\xb6\x19\xc8\xd6\x5d\xb2\xd2\xd6\x3d\xaa\x83\x6d\x71\xea\xca\xe0\x16\x7f\xd1\x04\xdd\x52\x1f\x03\xbc\xcd\x82\xb7\x2e\x68\x6e\x80\x6f\x8b\xc1\xb7\xd3\x04\xdf\xba\x0b\xc5\x37\x91\xd7\x84\x84\xbe\x6d\x72\x24\x48\x57\x5e\xbe\x30\x02\xfe\x46\xb6\x82\x4f\xb7\x6e\x0e\x1a\x0f\x01\x1a\x01\x1a\x2b\x42\x63\x6e\x36\x03\x34\x02\x34\x6e\x2d\x34\x1e\x2d\x79\x3f\xdc\xed\xd4\x42\xc6\x4e\x6d\x64\xcc\xaf\xee\x1a\xc8\xd8\x01\x64\xac\x8e\x8c\x47\xb0\x27\x06\x60\xdc\xac\x3d\xf1\xc9\xb2\xf5\x3e\x40\xb7\x6d\x41\xb7\x13\x50\xfb\x00\xdd\x36\x16\xdd\x72\x84\x3a\xb0\xab\x05\x74\x03\x74\x03\x74\xdb\xc1\x4d\x6d\xb7\xdd\xe4\x24\xe4\xb0\xdd\x3d\xdb\x69\x60\x8c\xd5\xc5\x26\xc8\x98\xd5\x35\xeb\x41\x63\xf6\xeb\x55\x62\xa3\x3a\x5b\x00\x1b\x01\x1b\xb7\x1d\x1b\x9b\x1c\x85\x00\x36\xee\x2a\x36\xc2\x61\x08\x60\xe3\x4e\x62\x63\xe5\x0d\x75\x2d\x6c\x3c\xad\x85\x8d\xa7\xb5\xb1\xf1\x74\x1e\x6c\x3c\x05\x6c\x5c\x01\x36\x76\x93\x62\xea\x80\xe3\x51\x5d\x70\x3c\xaa\x03\x8e\x47\xcb\x03\xc7\xa3\x1a\xe0\x78\x54\x1b\x1c\x95\xde\x04\x74\x5c\x32\x3a\x1e\x2d\x5b\x73\x04\x74\xdc\x22\x74\x3c\x02\x74\x04\x74\xdc\x21\x74\x6c\x72\xd4\x0c\xe8\xb8\xab\xe8\xd8\xec\x3c\x06\xd0\x11\xd0\x71\x33\xd1\xf1\x74\xd9\xe8\x78\x52\x0b\x1d\x4f\x6a\xa3\xe3\xc9\x3c\xe8\x78\x02\xe8\x58\x0b\x1d\x4f\x01\x1d\x01\x1d\x77\x08\x1d\xcb\xae\x59\x05\x74\x04\x74\x4c\xa3\xe3\x19\xa0\x23\xa0\xe3\x0e\xa1\xe3\x7b\x40\x47\x40\xc7\xca\xe8\xf8\x1e\xd0\x11\xd0\x71\x37\xd1\x71\x29\x67\xd6\x87\xb5\x18\x6d\x0e\x6b\x53\xda\x1c\xce\xc3\x69\x73\xd8\x90\xd4\x06\xd0\x11\xd0\x11\xd0\x71\xb7\xd0\xf1\x68\x39\xa7\x32\xc6\x61\xbd\x73\x99\x38\x7d\x8d\x93\x99\xf8\x9b\x66\x67\x33\xa9\xcf\x01\x25\x01\x25\x01\x25\x01\x25\x13\x94\x3c\x6c\x44\xf7\x7a\xd8\x3e\x3c\xae\x8e\x92\xf5\x30\xb2\x3e\x42\xce\x85\x8f\x0d\xd1\xf1\x68\x1e\x74\x3c\x9a\x0b\x1d\x8f\x96\x83\x8e\x6c\x88\x65\x0f\xc8\x3f\x0f\xe4\x7f\xcf\xbb\x6c\xc0\xd3\xc9\x56\x89\xc9\x87\x0d\xb9\x66\x01\x93\x01\x93\x37\x00\x93\x8f\xf2\x98\xdc\x2c\x86\x11\x30\x19\x30\x79\x75\x98\xdc\x2c\x72\x12\x30\x19\x30\x79\x43\x31\xb9\xa9\xa2\x9c\x6d\xd8\xec\x0b\x12\x6a\x11\x0b\x1d\xd7\x26\x16\x3a\x9e\x87\x58\xe8\xb8\x06\xb1\x50\x43\x5c\x6e\x8a\xc8\x0b\xc4\xe2\x22\x14\x56\x87\x99\x95\xbc\x68\x34\x6e\x82\xc3\xcd\x95\xe3\x82\x0f\x33\x30\x95\x87\xe2\xec\x77\x80\xc9\x73\x60\xf2\x49\x3a\x79\x39\x26\x27\x89\x67\x63\x72\x63\x34\x3e\xec\x26\x43\xbc\x50\x0e\xa3\xec\xbc\xa9\x08\xcb\x15\x00\xb9\xc6\xe9\x57\x13\x40\xae\x65\xe6\x3d\xae\x6d\xe4\x3d\x9e\xc7\xc4\x7b\x5c\xc3\xc0\x0b\x80\x0c\x80\x0c\x80\x0c\x80\xbc\x1c\x40\x6e\x16\x23\x5a\xc3\x6a\x51\xcb\x1b\xa1\x5b\xdb\x1b\xa1\x3b\x8f\x37\x42\xb7\xa9\x37\x02\x58\x2d\x56\x69\xb5\x80\xc8\xd4\xcd\x03\x64\xb0\x5a\x34\xb7\x5a\x1c\x2f\x19\x93\x0f\xdf\xd5\xc1\xe4\x38\x75\x75\x0f\xb1\x77\x73\x60\x72\xea\x63\xc0\xe4\x75\xc5\xe4\x9c\x1a\x02\x98\x0c\x98\xbc\xc5\x98\xdc\x8c\x2d\x00\x4e\xf7\xb6\x0d\x93\xab\xa1\x23\xb0\x05\x6c\x1e\x3a\x2e\xcd\x84\x30\x27\x3a\xaa\x86\x84\x0d\x40\xc7\x5a\x56\x5d\xd0\x58\xb7\x0b\x1d\xd7\x59\x63\x05\x4c\x06\x4c\xde\x25\x4c\x6e\xc6\xe0\x02\x1a\xeb\xb6\x61\x72\x35\x74\x04\x06\x17\x40\xc7\x1d\x45\xc7\xe5\xfa\x21\x6c\x8d\xea\xba\x7d\x7e\x08\xcb\x52\x51\x57\x0a\xbf\xe0\x7e\xb0\xcd\x48\xbc\xed\xee\x07\xef\x40\x49\x05\x25\xb5\x32\x4a\xbe\x03\x25\x15\xa0\x71\x87\x94\xd4\x77\xa0\xa4\x82\x92\xba\x3e\x4a\x6a\x73\xf8\x05\x25\x75\x9b\x91\x78\x87\x94\xd4\x1a\x9c\x34\x4d\x60\x78\x5b\xa8\xbb\xb6\x0f\x86\xd5\x61\x5e\x93\x98\x05\x80\x63\x80\xe3\x1d\x87\xe3\xe3\xe5\xd8\x0c\xb6\x99\x22\x0c\x6c\x07\x60\x3b\xd8\x79\x88\xdc\x01\xdb\x41\x33\x12\xee\x06\x4a\xeb\xd1\x71\x1d\xb0\x8c\x53\x57\x86\xca\xf8\x8b\x26\x40\x99\xfa\x18\x94\xd6\xb7\x57\x5a\x9b\x33\x35\x82\xd2\xba\xcd\x88\xbc\xdd\x4a\xeb\x11\xb0\x83\xd5\x57\x56\x93\xe9\x53\x5f\x57\x3d\x69\xcf\xc1\x66\x9b\xfb\x78\x95\x9a\xea\xd1\x5a\x93\x74\x1d\x67\x92\x97\x02\x52\x2e\xf1\xe2\x70\xf1\x38\x9d\xba\x72\x35\x36\x0e\x17\xb7\x5e\x53\x4d\x41\x23\x04\x0f\xec\x2a\x34\xce\x38\xf1\x3a\x5d\x80\xb6\x0a\x80\x0c\x80\x0c\x80\x5c\x05\x90\x97\x4f\x2f\xbe\xb5\x16\xd6\xed\x43\xe6\x8a\x18\xb9\xce\x74\xdf\x00\x92\x00\x92\xcb\x04\x49\x60\x32\xac\x6c\x60\xad\x8f\x8f\x0d\x91\x71\x71\x98\xd8\xc4\xba\xba\x08\x7d\x75\xb5\x28\xbc\x52\xf3\x2a\x00\x32\x98\x57\x17\x6b\x5e\x6d\x6a\x5f\xad\x8d\xc6\x27\x9d\x3a\x68\x1c\xa7\xae\x8c\xc6\x27\xf9\x15\x5f\x1d\x8d\x4f\x3a\x80\xc6\x6b\x84\xc6\xcd\x0d\x07\x80\xc6\x80\xc6\x39\x34\x16\x2f\x3a\xed\xc3\x93\xbc\x49\x6a\x1d\x31\xf9\x10\x30\x19\x30\x79\xdd\x30\x39\xc7\x34\xb7\x8d\x98\x1c\x2f\xf2\x40\xf3\x11\x9f\x6c\x09\x0e\x04\x80\xea\x80\xea\x4d\x50\xfd\x10\x50\x1d\x50\x7d\xdd\x50\xfd\x10\x50\x1d\x50\x1d\x50\xbd\x2e\xaa\x2f\x9b\x72\x1c\xdc\xd3\xb6\xe6\xa4\x6f\x9d\x99\xbf\xc1\x92\x01\x07\x7d\x8b\x3e\xe8\x3b\x06\x12\x86\x06\x24\x0c\x5b\xa4\xef\x2e\xcb\x1f\x6d\xa5\xd8\xbb\x41\x6a\x2e\xc0\x30\x1c\xef\x65\x30\x18\x6e\x5f\x00\xf5\xb4\x22\x44\xae\x33\xcd\x37\xe0\x22\xa8\xa7\x8b\x56\x4f\x9b\x5e\xbd\x00\xea\x29\xa8\xa7\x8b\x56\x4f\x9b\x63\x2f\xa8\xa7\xdb\x0c\xc3\x3b\xa4\x9e\x02\x41\xd8\x2e\x62\xb0\x3a\xc6\x6b\x72\x24\x06\x58\x0c\x58\xbc\x8b\x58\xdc\x94\x51\x7c\xb7\x79\x6f\x00\x8b\x97\x89\xc5\x1b\xc2\xd4\x08\x58\x0c\x58\xbc\x50\x2c\x6e\xca\x41\x06\x66\xdb\x9d\x33\xdb\x36\xe7\x05\x03\xb3\xed\xd6\xe1\xe2\x0e\x98\x6d\xdf\xaf\x2c\x7a\xb8\x96\x17\xed\x71\x6d\x2f\xda\xe3\x79\xbc\x68\x8f\xc1\x8b\x76\x8d\xd4\xd4\x0d\xe1\x66\x04\x38\x06\x35\x75\x81\x6a\xea\x71\x23\x6e\x46\x5d\xac\x3d\x98\x6f\xd7\x1f\x8b\x8f\xaa\x1d\xa1\x25\x33\x7e\x4e\x0c\x3e\xaa\x85\xc1\xc7\x73\x70\x8d\x01\x06\x03\x06\xaf\x10\x83\x73\xe7\x0b\x0b\xc3\xe0\xca\xfa\x30\x60\xf0\x16\x61\x70\xb1\x3e\x0c\x58\x0c\x58\x0c\x58\xbc\x4a\x2c\x56\xa8\xcd\x3a\x4b\x05\x63\x08\xf1\x05\x30\xae\x0a\xc6\x6f\x47\x6d\x76\xb2\x3a\x34\x86\x10\xdf\xcd\xc1\xf3\x65\x87\xf8\x2e\x11\xd5\x97\x6b\xe6\x38\xa9\x45\x58\x79\x52\x9b\xb0\xf2\x64\x1e\xc2\xca\x93\x9d\x20\xac\x04\x54\x07\x54\x07\x54\xdf\x01\x54\x3f\x5a\x15\xa8\x83\xbb\x1b\x80\x7a\x45\x50\x3f\x02\xbb\x09\x20\xf2\x0e\xda\x4d\x9a\x44\x29\x37\xc2\x62\xf0\xe9\x00\x2c\xae\x88\xc5\x10\x06\x02\x58\xbc\x8b\x58\x7c\xba\x32\x2c\x86\xdb\x39\x00\x8b\xab\x61\xf1\x29\x60\x31\x60\xf1\x0e\x62\x71\x93\x90\x3c\x38\x4e\x04\x2c\x5e\x26\x16\xbf\x5d\x48\xde\x0a\xed\xce\x80\xc5\x60\x35\xd6\x22\xf2\x19\x20\x32\x20\xf2\x9a\x21\xf2\xd9\x2e\x20\x32\x9c\x04\x02\xa6\x2f\x1b\xd3\x6b\xdc\xcb\xd1\x0c\xd3\xbb\xb5\x30\xbd\x5b\x1b\xd3\xbb\xf3\x60\x7a\x17\x30\x7d\x0d\x31\x7d\xe5\xd7\x72\x00\xa6\x03\xa6\x6f\x3e\xa6\x37\x21\xd0\x00\x4c\x07\x4c\x5f\x26\xa6\xbf\x5d\x94\x38\x60\x3a\x60\xfa\x56\x61\xfa\x72\x23\x1d\xc1\x0d\x1b\x30\x1d\x30\x1d\x30\x1d\x30\x7d\xc9\x98\x7e\xd2\x5e\x59\x68\x0d\x78\x61\x03\xa6\x57\xc2\xf4\x93\x42\x68\x9e\x01\x1c\x1a\xee\xb4\xa5\x7a\x9b\xbc\x8b\x69\xd5\x2a\x60\x7a\x2e\x71\x6d\x4c\xcf\xe5\xb0\x38\x4c\x57\xb3\x9e\x85\xe9\x99\xb4\xd5\x30\xbd\x5b\x17\xd3\x0f\xeb\x60\xfa\xe1\xb2\x31\x7d\x5d\xfd\x55\x8e\xb2\x68\x0e\x91\x92\xa0\xa2\xaf\x1d\x9c\x37\x8d\x94\x5c\x00\x9e\xd7\xd2\xd1\x01\xcf\x77\x05\xcf\xd7\x5b\x47\x8f\xe4\xcb\x77\xdb\xb5\xe8\xf7\xa0\x5f\xd6\x0b\xac\x83\x1d\x12\x1a\xa2\x37\x84\x2e\x9b\x13\x0a\x5d\x20\x45\x01\x9f\x99\x75\x13\x0a\x0d\x29\xaa\x40\x28\x80\x50\xd8\x4d\xa1\x50\x82\xea\xa0\xea\x03\xaa\x03\xaa\xd7\x40\xf5\x6e\xf6\x1e\x85\x52\x34\xcc\xa7\xae\x8d\xeb\xf9\x2c\xaa\x02\x3b\x7b\xfe\x87\x43\x7e\x7c\xa3\xba\x0f\x3c\x6a\x1d\x5a\x98\x4c\xa8\x6b\x3c\x39\xe4\xc7\x0b\x75\x72\xa5\xcd\x96\x0c\xd9\xe4\xd5\x3b\xa3\x81\x6c\x90\x1f\x35\x6e\x10\xc8\x96\x8d\xda\x70\x2c\xf9\xa0\xb8\xd6\x35\x3a\x27\xb5\xaf\xd1\x39\x99\xe7\x1a\x9d\x93\x1a\xd7\xe8\x80\x68\x02\xd1\x04\xa2\x09\x44\x13\x88\xa6\xd5\x89\xa6\xca\x17\x1e\x83\x68\x02\xd1\xd4\xac\x5c\x06\x63\x0e\x35\xb1\xa3\x6b\x32\x7b\x69\x98\xd8\x1c\x13\xd1\xea\x77\x20\xcf\x40\x9e\x81\x3c\x03\x79\x56\x47\x9e\x1d\x26\xb1\x73\xb0\xd5\x02\x79\xb6\xc1\xf2\xec\xb0\x59\xc4\xdd\x02\xe4\xd9\x69\x4d\x79\x56\xe3\x44\x28\x9f\xba\x89\x3c\xab\x7c\x26\xa4\x49\xdd\x00\xff\x8f\xeb\x09\xb4\xea\xc7\x4a\xd9\xc4\xab\x12\x68\xc7\x75\x04\xda\x69\x02\xd2\xb3\x05\x5a\x92\x78\xe9\x02\xed\xe8\x70\x39\x77\xc3\xae\x97\x40\x3b\x04\x26\x52\x60\x22\x5d\x33\xd3\xe1\x21\xf8\x23\x83\xab\xc2\x3a\xed\x71\x36\xc6\x1f\x79\x65\x1c\xff\xc0\x65\x0a\x68\x5e\x11\xcd\x1b\x72\xfc\x03\x9a\x03\x9a\xef\x38\x9a\x1f\x03\xf7\x1e\xf8\x11\xaf\x19\x9a\xe7\x2e\xd4\x5f\xcf\x53\x10\x40\xf3\x5d\x41\xf3\x75\x3f\x7f\x28\xc6\xf4\x25\x9f\x1f\x00\xa6\x03\xa6\x03\xa6\x03\xa6\x03\xa6\xaf\xb9\x09\x7e\x65\x97\x81\x81\x48\x00\x91\x50\x51\x24\x34\xbc\x0c\x0c\x44\x02\x88\x84\xdd\x14\x09\xc5\x98\x0e\x6a\x3e\x60\x3a\x60\x3a\x60\x3a\x60\xfa\xa6\x61\xfa\x92\xd4\xfc\xa5\x7b\x8e\x02\x43\x37\x88\x84\x9a\x22\x61\xe5\x3e\xa0\x20\x12\x40\x24\xec\xbc\x48\x38\x5d\xd9\x2e\x01\x44\x02\x88\x84\x6a\x22\xa1\xe1\xd5\xc3\x20\x12\x40\x24\x80\x48\x98\x5f\x24\xac\xee\x06\x64\x60\x99\x02\x91\x50\x4d\x24\x34\xbc\x01\x19\x44\x02\x88\x04\x10\x09\xf3\x8b\x84\xd5\x5d\xed\x06\x22\x01\x44\x42\x35\x91\xd0\xf0\x1a\x20\x10\x09\x20\x12\x40\x24\xcc\x2b\x12\x4e\xdb\x0d\xb9\x68\x73\x8d\x80\xe3\xe5\xf5\x17\x09\xef\xb2\x18\x5f\x2e\x12\x4e\xe3\xb5\x36\xa7\x48\x48\xca\xad\x22\x12\x4e\xf3\xcb\x6e\x3d\x45\xc2\x59\xbb\x5b\x5d\x24\xe4\x12\xd7\x16\x09\xd9\x1c\xea\xb2\x29\xa8\xdf\xcf\x96\x12\x99\xd4\x95\xdb\xb6\x2a\x6e\x88\xa4\x4c\x10\x32\x0b\x17\x32\xc7\x8b\x16\x32\x9d\xe4\xc4\x7a\xc9\x52\x06\xb8\x8e\x40\xca\x2c\x8d\xeb\x28\x35\x93\x57\x2d\x9b\x80\xeb\x08\xb8\x8e\x80\xeb\x68\x3d\x04\x5a\x43\xae\x23\xd8\x35\x81\x3c\x5b\xda\xae\xe9\xed\xb8\x8e\x60\xd7\x04\xbb\x26\xd8\x35\x2d\x4f\xc8\x2c\x7d\xd3\x04\x3e\x5d\x20\x64\x6a\x0a\x99\xf5\x76\xf3\x05\x21\x03\x42\x06\x84\x4c\x15\x21\xd3\x90\xe7\x0f\x84\x0c\x08\x99\xa5\x09\x99\xb7\xe3\xf9\x03\x21\x03\x42\x06\x84\xcc\xc2\x85\x4c\x43\xfa\xc1\x06\x42\x06\xfc\xce\x40\xc8\x54\x13\x32\x1b\x42\x55\xd5\xed\x24\x1d\x54\xe1\x20\x27\x97\xba\xfe\x41\x4e\x36\x8b\xda\x27\x19\x6a\x06\x15\x8e\x66\x32\xc9\xab\xb7\x6f\x65\x47\x33\x9d\xb4\xf0\x00\x59\xb3\xce\xb2\xe6\x14\x64\x0d\xc8\x9a\x35\x93\x35\x1b\x12\x09\x09\xb2\x06\x64\x0d\xc8\x9a\x66\xb2\xa6\x4e\xd4\x3d\xc8\x1a\x90\x35\x20\x6b\xde\x5a\xd6\x2c\xf7\x72\x59\x10\x4c\x20\x98\xde\x4e\x30\x35\x8c\xfd\x07\xc1\x04\x82\x69\x69\x82\x69\x43\x62\xff\x41\x30\x81\x60\x02\xc1\xb4\x2c\xc1\x74\x06\x82\x09\x04\xd3\x9a\x09\xa6\xb3\x0d\x11\x4c\x47\x19\xe8\x9f\x15\xc4\xd2\x99\x57\x30\xe5\xb2\x58\xaa\x60\x3a\xaa\xc5\x62\x90\x4d\x5e\xbd\x33\x56\x18\xd1\x03\x3c\x08\x9b\x28\x98\x96\x6c\xca\x83\x08\x55\x10\x4c\x20\x98\x40\x30\x81\x60\x02\xc1\x54\x41\x30\x35\xe4\x6c\x03\xc1\x04\x82\xa9\x41\xb9\x4b\xa4\x4e\xd8\x10\xa2\x37\x90\x66\x20\xcd\x40\x9a\x2d\x47\x9a\xbd\x53\xd6\x72\x75\x69\x76\x9c\x0f\x08\x81\x68\xa3\x2d\x14\x66\x27\x6f\xb1\xcb\x7a\x57\x28\x5e\xd6\x4c\x2e\x41\xb4\x11\x44\x1b\x6d\xa7\x8c\x39\x5d\x9e\x8c\xa9\x6c\xca\x6b\x24\x63\xe0\x88\x09\x64\xcc\x56\xc9\x98\xb7\xf7\x7d\x00\x77\x06\x70\x67\xd8\x20\x51\xd3\x84\x07\x0e\x44\x0d\x88\x9a\x25\x8a\x9a\x0d\xa1\x81\x03\x51\x03\xa2\x06\x44\x4d\x33\x51\x03\xbb\x1a\x10\x35\x20\x6a\x36\x48\xd4\x80\x47\x37\xc8\xa5\x6d\x95\x4b\x4d\x08\xe4\x40\x2e\x81\x5c\x5a\xa2\x5c\xda\x10\xfe\x38\x90\x4b\x20\x97\x40\x2e\x2d\x4b\x2e\x35\xe1\x9c\x03\xb9\x04\x72\x69\x89\x72\x69\x53\x28\xe7\xc0\x03\x0e\x3c\xe0\x40\x2e\x2d\x5f\x2e\x2d\xd7\x8e\x07\xee\xdc\x20\x97\x40\x2e\x81\x5c\x02\xb9\x04\x72\xa9\x82\x5c\x3a\x59\xd5\x7e\x09\xe4\x12\xc8\xa5\xa5\x85\x19\xbd\xcb\xaf\x2a\x10\x66\x20\xcc\x40\x98\xed\x96\x30\x3b\x6d\x70\x75\x1e\x08\x33\x10\x66\xeb\x26\xcc\x4e\xdf\xec\xba\x3d\xb8\x6d\x1c\x6e\x1b\x87\xdb\xc6\xd7\x41\x9a\x9d\x25\x72\x09\xa4\x59\x1d\x69\x76\xd8\x48\x9a\x1d\x36\x93\x66\x87\x6f\x24\xcd\xde\x6f\x8c\x34\x53\xe7\x31\x48\x33\x90\x66\x20\xcd\x76\x50\x9a\x9d\xb5\xbb\xdd\x06\xd2\xac\xd3\xee\xbe\xab\x2a\xc5\xce\xea\x08\xb1\xb3\xba\x32\xec\x6c\x0e\x11\x76\x56\x5d\x82\x19\x78\x62\x9d\x1e\x33\x90\x3d\x8e\x37\x2c\x55\xe5\x98\xee\xdb\xca\xd2\xac\xe4\xe3\x46\xb2\x25\xce\xaf\x93\xda\xf0\xcd\x10\x16\xa9\x69\x52\x47\x58\xbc\x6f\x97\x8b\x88\xf4\x17\x91\xa4\x38\xcc\x58\xbb\x66\x21\x62\x1d\x2a\x86\x5c\xe2\xaa\x66\xb7\x0a\xc8\x5c\x83\x35\xa1\xdb\x80\x35\xe1\x7d\x3d\xd6\x83\x6e\x1d\x93\x57\xb7\x86\xc9\x4b\xce\xa1\xc4\x02\x57\x07\x5c\x3b\xdc\x6f\x2f\x9a\x4c\x47\x0b\x84\xd5\xe3\x14\xb2\xbd\x6f\x74\x82\xd2\x6d\x77\x0f\xab\x02\xdb\x71\x1d\x60\x3b\xae\x0b\x6c\xc7\x73\x00\xdb\x71\x33\x60\x7b\x37\x07\xb0\xbd\x9b\x07\xd8\xde\xbd\x19\xb0\xbd\x6f\x78\x3e\x01\xb8\x06\xb8\xf6\x56\xb8\xf6\xae\x81\xc2\x56\x07\xd7\xb6\x4e\x61\xdb\x49\x5c\x7b\x07\xfa\x1a\xe0\xda\xa6\xe2\x5a\x65\x4f\xcc\x3a\xb8\xd6\x3d\xaa\x03\x6c\x71\xea\xca\xc8\x16\x7f\xd1\x04\xda\x52\x1f\x03\xb6\x01\xb6\x01\xb6\xad\x04\xdb\x4e\xf3\x51\xf3\x8b\xc1\xb6\x5a\x96\x3d\xd9\x0a\x3e\xdd\xba\x1c\x16\xff\x83\x23\x63\xeb\xcf\xb3\xe0\x1b\xf1\x03\x9b\xba\xc4\x7a\x20\x13\xcf\xc1\x62\x65\x30\x70\x94\x93\x26\x86\xca\xc1\xb4\xd3\x39\x22\x1f\xba\xdc\x37\x26\x6a\x54\x07\xf1\xc7\xa6\x38\xe2\x8f\x9f\xb2\xaa\xc8\x49\xf0\xa2\x80\x4f\x92\xc5\x49\x41\x16\x89\x1d\x48\xec\xaa\xd5\x5c\x4e\x34\xb9\xa4\xd2\x27\x19\x9d\xb6\x3b\x06\x76\xbc\x31\xce\x66\x61\x78\xbe\xfd\x62\x3b\x64\x44\xac\x5c\x6e\xf1\x47\x6a\x3e\x8a\xb3\x74\x3a\xab\x53\xcd\xf7\x49\x62\x35\x8b\xb3\xa2\x6e\x79\xa7\xc9\xe2\x4c\xd3\x2d\xef\x8a\x7b\xf6\x5d\x59\x83\xde\x69\x3b\x59\x71\x00\x9f\x5d\xa1\xb2\xc4\x25\x45\x9f\x69\x4b\x3e\x2a\x6c\xc7\x59\x22\xab\x39\x46\xcc\x31\xe9\x98\x08\x98\x7b\xce\x45\x99\xd4\x98\x72\x27\xed\xee\x61\x5a\xc3\x50\xf3\x29\x1b\xa6\xcc\x97\x85\xb3\x58\x97\x99\x21\xfa\xf0\xa8\x7b\x74\xdc\x6c\x3e\x47\x99\xea\xa6\x73\xb7\xa3\x6c\x05\xcb\xa6\x63\x94\xc9\xbb\xca\x35\xab\xb6\x52\xe2\x7c\x2b\x2e\x94\x4c\x95\x8b\x2b\xd7\x78\xa9\x14\xd7\x48\x4d\xab\xe6\x70\xda\xb4\x42\xd5\x3e\x2c\xe9\xe6\xaa\x8b\x50\x66\xab\xae\x41\xea\x93\xab\x9b\x7b\xcd\x2a\xd4\xcc\xa9\x77\xa9\x59\x2a\xcf\xac\xf5\x53\xaa\x30\x69\xae\x3b\xf5\x75\x3f\x2d\xf8\x5e\xa9\x7a\xa2\xaa\x65\xab\xae\x5f\xfe\xa9\x2c\x23\xdd\x4c\xbf\xf4\x0b\x93\xe6\x1a\xaa\xaf\x7d\x16\xab\x94\x2c\x94\x06\x30\x8d\x66\x46\xdf\xb3\x8f\xa5\x5e\x5c\xa7\xfc\xa2\xef\x95\xc2\xb3\xfa\xc4\xcf\xe2\x7c\x59\x26\x32\xb9\x54\x32\xd2\x59\x71\x65\xa6\x17\x6b\x4b\x79\x38\xef\x2a\xc4\xbd\x47\x49\x2d\x8f\x33\x65\xf0\x7c\x22\x9d\x48\x3f\x30\xc7\xf9\xe6\x8a\xc7\xa7\x19\x60\xcf\xe6\x75\xa6\xc9\x2a\x59\x76\xc5\x23\x57\xa1\x4e\x9a\xd9\x26\x1e\x1f\xd5\xae\x93\x2a\x1f\xba\x69\xf9\x90\x95\x5c\xf9\x8a\x25\x1b\x58\x35\xc3\x23\x6d\x23\xbb\x19\xd2\xb1\x2a\xed\x4c\xd7\x41\x0f\xc5\x85\x95\x2b\x95\x39\xdd\x02\x99\x53\xab\xa9\xe9\xef\xb4\xb8\x5c\xbd\x76\x55\x3e\xd2\x54\xa2\x08\x87\x53\x0b\x40\x3f\x15\x92\xd5\xa4\xb8\xe9\xe4\x81\x2d\x51\x49\x8a\x96\x7b\xfc\x7d\x61\xc7\x17\x29\x9e\x95\xb3\xc8\x0a\xcb\x6c\xfa\xb8\x2d\xa1\xdc\x68\xfc\x49\x5e\x13\x64\x48\xed\x16\xce\x51\x6b\xe0\xfe\xfc\x69\x3f\x21\xf2\x37\x6a\xdf\xfd\x7e\x71\x79\x49\xdd\x27\x7b\x84\x06\x2d\xff\x11\x9b\x83\xd6\xaf\x5f\x03\x77\x6f\x0f\x05\x21\xf6\x43\xc4\x1e\xa1\x31\xf1\xc9\xc0\x1d\xb8\x7b\xa8\xe7\x9a\xce\xd4\x22\x08\x23\x69\x1e\xf0\xa9\x43\xd0\x13\xf5\x51\x38\x26\x48\xd9\xc7\xa2\x2b\xee\x5a\x72\x4f\xc2\x7d\xf6\x1d\x76\x2d\xf4\x68\xbb\x16\xb2\x43\x14\xd2\x5c\xe2\x40\xd8\x5a\xb0\x69\xd2\xa9\x1b\xb6\x07\xee\xb3\xed\x5a\xe7\xe8\x52\x94\x71\x47\x1d\x32\x70\xb1\x67\xcb\xed\xd4\x39\xaf\x55\x1b\x4f\xc3\x31\xf5\xed\x7f\xe3\xd0\xa6\x6e\xfb\xf9\x2c\x68\xdb\xf4\xe0\xa5\xfb\x48\x42\xdc\x1d\xb8\x13\x12\x62\x0b\x87\xf8\x7c\xe0\x22\xe4\xe2\x09\x39\x57\x4b\x1c\xb8\xfe\xd4\x21\x01\x7f\xb9\x87\x1e\xc6\x04\x5d\xde\xf4\x90\xe7\x4c\x47\xb6\x8b\x5c\x42\xac\x80\x55\x73\x44\x42\xe4\x51\x2b\xd8\x47\xec\x9b\x60\x9f\x37\x83\xe5\x15\x78\xd8\x24\x41\x9b\x7d\x6d\x20\xec\xd9\x1f\x7d\x3a\xf5\x82\x73\xf4\xaf\x41\x6b\xd0\xfa\x2f\xf6\x18\x21\x9f\x04\x74\xea\x9b\xb2\x10\xf6\x33\x78\x66\xc9\xbf\x78\xa6\xca\x3f\xe3\x8c\xc5\xb3\x17\xe2\x3f\xaa\x1f\x8f\x48\x58\xbb\x40\xe2\x5a\x1e\xb5\xdd\x50\x29\x46\xf6\xb5\xb6\x90\x3d\xf4\x35\x20\x16\x6b\xba\x65\x07\x26\x7d\x21\x7e\x94\x1c\xf5\xfa\x01\x1f\x67\x6c\xbd\x10\x3f\xb4\x03\x32\x21\x7c\xa4\xa2\x6c\xbf\xe3\xd0\x1c\x27\xff\x74\xec\x20\x2c\xc9\xf5\xe1\xd5\x1b\xe3\xa0\x3d\x5f\xe3\x78\xff\x1d\x04\x21\x0e\xa7\x05\xad\xb9\x21\xc4\x22\x16\xaf\xb7\xe9\x10\xec\xdb\xee\x08\xdd\x50\x8b\xdc\x90\xf0\x3b\xf5\x9f\xbf\xba\xf8\x05\xdb\x0e\x7e\x64\x73\xd8\xc1\x23\xa5\x3e\x9e\xda\x9c\x3d\x74\xc9\xa7\x0e\x0a\x42\xea\x93\x00\x05\x74\x42\x90\xc9\x57\xcd\xd4\xe7\xd3\x0f\xd9\xee\x13\xf5\x27\xd1\xdf\xbc\x6a\x08\xbb\x2e\x0d\xf9\x23\xb5\xa5\x53\xcf\xc2\x21\x11\x13\xef\x2f\x56\x8a\xa8\xde\x18\xbb\x23\xc2\x67\xdd\x9f\xb1\x19\x0d\xc9\x7a\xf6\xa9\x63\x9b\x76\xc1\x84\x73\x45\x1a\xdb\x1d\xc9\x35\x50\xde\x67\x22\xb5\x27\x73\xd4\xcf\xb4\x82\xb1\x94\xe3\xf8\xf8\x1a\x75\x07\xab\x38\xcf\xe9\x55\x6d\xff\xdc\xcb\x22\xb3\x0e\x94\x49\x2b\x01\xa2\xa0\xda\xea\x9c\x53\x1a\x91\x5b\xdf\x7c\x6c\x49\xc0\x8b\x95\xd3\xa7\x59\x9d\x4b\xe6\x9e\x32\x83\xe2\xd9\x33\xa1\xae\x1d\x52\x3f\x40\x2f\xd8\xb7\xe9\x34\x40\x97\x77\x57\x62\x51\x89\xb9\xa4\xad\x84\xe9\x5b\x6d\xcf\xa7\xff\x87\x98\xa1\xc0\xaf\x36\xf5\x47\xa5\x35\x1b\x39\xf4\x11\x3b\x4f\xc4\xb1\x7f\x88\x7c\x95\x7e\x54\x9e\xca\x99\xab\xbc\x7c\x1c\x79\x1e\x21\x7e\x90\xcd\xea\x71\xe4\xe5\x32\x8a\x9f\xe5\xb3\xb1\x3d\x8f\x52\x27\x97\x8b\x76\xe6\xe5\x5e\x07\x44\xc5\xaa\xc2\x6f\xa4\xf4\x51\x66\x9d\xf2\x72\x4c\x83\x30\x03\x7c\x05\x58\x3a\x63\xde\x44\xe3\x36\x0d\x42\x64\xfa\x04\x87\x84\x4b\x00\xb1\x82\x05\x0a\xf0\x21\xa4\xae\x90\x96\x53\x6f\x41\x43\x98\xeb\xc2\xd2\x71\x2b\xec\x8c\x6c\xab\x45\x1b\xf4\x50\x54\x0b\xe1\xa8\xcb\x45\x38\x43\xb9\xfa\x2b\x47\x11\x7b\xcd\x86\xe5\x61\x4c\x02\x82\x3c\xe2\x4f\xec\x80\xe9\x03\x01\xc2\x3e\x41\xd4\x75\x5e\x91\x4f\xfe\x9e\xfa\xb6\x84\xfc\xa9\x37\xf2\xb1\x45\xd0\x93\x4f\x27\xe8\xe5\xb0\x7d\x2a\x04\xb8\x89\x5d\x91\xcf\x23\x41\x3e\x99\xd0\x17\x62\x21\xfc\x14\x92\xe4\x03\xea\xb3\x16\x3e\xf9\x24\x18\x23\xdb\x0d\x42\xec\x38\x0a\x8c\xcf\x3f\xbc\x25\x8b\x27\xbd\x06\xab\x0e\xa0\x61\x18\xb5\x15\xa4\x9c\x8a\xf5\xbb\xed\x5a\xb6\x3b\xaa\xa0\x3a\x51\x87\xdc\x91\x27\xfe\x3a\xea\x8a\x92\x22\x59\x32\x8d\x3e\xa7\xcd\x3a\x98\x3e\xb2\x7e\x64\x6d\x36\xe4\x47\xf2\x1c\xee\x42\x40\x7f\xc1\x77\x28\x91\x1a\xe7\x88\x9f\xb5\x05\xaf\x41\x48\x26\x2c\x9b\x5a\x55\xe4\x29\x93\x42\x44\x2e\xe7\x72\xca\xfe\xfc\x49\x5c\x4b\xaa\xc7\xc4\xb5\xd2\xca\x31\x1f\x03\x36\x39\xed\x00\x09\x8d\xfa\x0b\xf6\x90\x1d\xa0\xa9\x54\x7e\xa2\x21\x67\xda\x73\x40\x9c\x27\x83\xe3\x94\x15\xad\x3c\x75\xa2\x25\x1a\x70\x94\x51\x7a\x78\x5f\x4a\x15\x5c\x51\x50\x59\xa7\xc4\xdf\xed\xa1\x07\x8a\x88\xcb\x35\x20\xae\x93\xed\xa3\x80\x84\x28\x64\x8d\x08\x29\x1a\x44\x5b\x87\x90\xbd\x1b\xb4\xd0\x7f\x62\xd7\xfa\x4f\x9e\x04\x23\x97\xba\xc6\xbf\x89\x4f\xd1\x0b\x76\xa6\x62\x13\xc0\xb3\x40\x3e\xf1\x1c\xdb\xc4\x41\xb4\xca\x1c\xfa\xbd\x8d\xd0\x5f\x6c\xb5\x99\x74\x32\x61\x3d\x37\x0d\x98\x2a\x26\x92\xdb\x4f\xe8\x95\x4e\xd1\x18\xbf\x10\x34\xa1\x3e\x41\xe1\x18\xbb\xe8\xa4\x23\x80\xa2\x8d\x2e\x1e\xe9\x0b\x41\xdd\x8e\x7c\xc0\xb6\x10\xb6\xcc\x9b\x04\x01\x71\x43\x1b\x3b\x7c\x61\xf2\x4a\x0e\xa5\xaa\x30\x14\x5d\x32\x68\xb9\xd4\x25\x83\x96\x04\xb9\x78\x08\x18\x7c\xc9\x8e\x97\x27\x3f\xac\xbd\xd3\x40\xe0\x99\x68\xf5\x30\x3a\x13\x42\x83\xd6\xa3\xed\x5b\x2c\x17\x5d\x3e\x5f\x1e\xbe\xca\x8f\xd9\x14\x31\x58\x83\xda\xec\x19\x9b\x29\xf2\xdf\x2e\x11\x8f\x3a\xfc\x21\x5b\xd8\xe1\x78\x38\x09\xa7\x2c\xeb\x9f\x3f\xd9\xab\x5f\xbf\x06\x2d\x91\x5c\xce\x31\xfe\xa7\x13\x10\xcd\x17\xdd\xe3\xe3\x4e\x26\x75\x5a\xd1\x91\x72\x33\x83\xe0\x61\x3c\xc9\x18\xbc\x11\x6c\x8e\x05\x82\x23\xfe\x5d\xe0\x11\xd3\xc6\x8e\xc8\x88\x0f\x69\xc0\x34\x59\x3e\x15\x44\x3e\xe8\xbb\xed\x38\x0c\x35\xf1\x34\xa4\x4c\x12\x98\xd8\x71\x5e\x91\x47\xbd\x29\xdb\x72\x5a\xa2\xeb\x5c\x7b\x28\x8b\x1f\x8a\xcf\xce\xd1\xff\x35\x04\x64\xfd\x8c\x90\x6b\xd0\x62\xa3\x33\x68\xb1\xc6\x3c\x9f\x05\x86\x47\x2d\x43\x7e\x34\x68\xed\x27\xa9\x4c\x37\x9a\xf3\x22\x2d\x0f\x44\x49\xa5\x10\x2a\x5d\xc0\x5e\xff\x2b\x7a\xaa\x14\x24\x12\x85\xaf\x9e\x2c\x4c\x0c\xac\x92\x83\x48\xe0\xd0\xd1\xd0\x21\x2f\xc4\x11\xa9\xfe\xba\xb8\xbb\xe9\xdd\x7c\xcc\x25\x63\xcb\x86\x0b\xc8\x61\x92\x63\x72\xe8\x9d\x4b\xce\x3a\x37\x69\xe7\x70\xf8\xe7\xd7\xdf\xaf\xef\x6e\xae\x1f\xae\xef\x87\x37\xb7\x57\xd7\xc3\x9b\x8b\x2f\xd7\xc3\x61\xee\xb3\x49\x38\x65\x5f\x0c\x87\x97\x37\xbd\xe1\x97\x87\xaf\xc3\x61\x26\x81\xed\xe1\x09\x4b\x91\x6a\x65\xba\x9d\x0c\x5a\x0c\x6e\x20\xc8\x64\xcf\x92\x05\xd3\x47\x97\x84\x22\xe1\x34\x20\x7d\x6a\x5d\xda\x96\x2f\xd6\x48\xf4\xfb\x95\x29\x53\xa8\xf9\x9a\x52\xd3\xe5\x3e\x9f\x05\xe5\xf9\xa8\xdd\xa5\xcd\x8b\x25\x90\x00\xd6\x92\xab\x83\x6d\x88\x2e\x9f\x46\x62\x85\x28\x59\x27\xff\x50\x4b\x29\x1c\x7b\x8f\xfa\xe1\x04\x7b\xb9\xfe\x0e\x5c\xcc\x3b\x23\xf4\xa7\x24\xf3\xca\xc4\x1e\x7e\xb4\x1d\x3b\xb4\xa3\xfa\xf2\x5c\xbe\x60\xcf\xb3\xdd\x51\x10\x7d\xa5\xd6\x24\xfa\x53\x8a\xff\x5f\x52\x30\xc4\xa2\x61\x82\x5d\xfb\x89\x04\x61\xb4\x14\x03\xc5\x18\x72\xc0\xb7\x8d\x66\x74\x60\xbe\x8f\x70\x80\xbe\x13\xc7\xe1\x16\x94\x40\xc5\xac\x64\x37\x13\x08\xa3\x44\x6a\xc1\x23\xca\xcb\xe3\x2b\x7c\x82\x99\xc8\xe5\x89\x58\x0a\xe2\x8b\xbd\xa9\xed\x22\xac\xee\x34\xa5\x0e\x19\x0b\x9e\xd8\x7c\x93\x16\x3c\xe4\x47\x48\x5c\xae\x73\x55\xb7\xb4\x14\x8b\x21\x84\x1c\xfc\x48\x9c\x48\xc3\x61\x48\x80\x3d\x2f\xab\x12\x78\xc4\xe4\x09\x02\xe2\x10\x33\xa4\xbe\x4c\x3d\x61\x0a\xe1\x67\xf5\xfb\xa2\x1c\x90\xd4\x93\xee\x43\x1f\x87\x64\xf4\x7a\x2e\xed\x5f\xed\xaf\xa9\xc7\x02\x74\x51\x48\xff\x89\x27\x4e\xf6\x25\xfa\xbf\xc8\x76\x2d\xe2\x86\xe8\x58\xa4\x63\xd0\xfc\x4b\x8e\x36\x9b\x63\xe7\xe8\x8e\x3a\x8e\xed\x8e\xbe\xc6\x4a\x35\x42\xbe\xfa\x28\xae\xe5\x04\xff\x50\x2c\x0f\xe7\xa8\xab\x68\x16\x08\x45\x16\xbc\xa8\x99\x6a\xef\xb2\x9f\x93\x6e\x72\x71\xa3\xd9\x4f\x31\x41\x28\x5f\x88\xa9\xb8\x8f\xb0\x43\x5d\x86\xea\xe1\x58\xcc\x2d\xdf\xe6\x98\x7e\x61\x59\xd4\x0d\x6e\x99\x3e\x1d\x52\x87\x48\xe9\xc1\xe5\xf8\xbe\x9a\xc9\x04\xfb\xcf\x62\x56\x7a\xd4\x62\x13\x14\x23\x53\x66\x81\xb0\x65\x19\xd4\xdd\x47\xc4\x0d\xa6\xdc\xec\x62\x87\x4c\xbb\x0f\xd4\xef\x3d\xdf\xa6\xbe\x1d\xbe\xa2\xc0\x1c\x13\x6b\xca\x7a\x8a\xcf\xd3\x70\x8c\x43\x64\x87\x41\xa2\x3b\x73\x05\xdf\x27\xfc\x2c\xc4\x52\xb3\xb0\x9f\x58\xc6\xe4\x85\xf8\x3c\x77\x44\x5e\x6c\x33\x92\x44\xe2\x27\xf3\x26\x7e\x9b\x1b\x5b\xdb\x09\x00\x31\x6d\x38\xaa\x2f\x93\x40\xe7\xe8\xb7\xdf\xc4\x77\xf1\x94\xe3\x5d\xf8\xf4\x64\xbb\x76\xf8\xaa\xf4\x1f\xeb\xe1\x8b\xfc\x63\xc4\xb7\x1f\xb6\x4f\xac\x2b\xde\xe6\xfb\xb8\x59\xbd\x91\x4b\xe3\xc7\xd7\x3f\x88\x39\x65\x5d\x7a\x9e\x46\x3f\x96\xeb\xbd\x9c\xe3\x0f\xc4\x9f\x04\xe7\x59\x74\x34\xc4\xa4\xbf\xfe\xe1\xf9\x44\xec\x7c\x72\x49\x58\xa2\x67\xf2\x7a\x8e\xd8\xe2\xcc\x34\x96\x06\xf9\xd4\x08\x51\x8f\x8d\x30\xf5\xcf\xd1\x0d\x0d\x7b\xae\x2e\x89\xd0\x06\x34\x65\x89\xf2\x64\x34\x5b\xf4\x9a\xc9\x1e\x69\xb8\x12\xf0\x18\x2d\xb7\x1b\xa5\x81\xbf\x62\xa0\x54\x9b\x1d\x17\xf1\xf3\x27\xf2\xb1\x3b\x22\xe8\x1f\xcf\xfb\xe8\x1f\x2f\xe8\xfc\x43\xfa\x73\xf4\x4b\xc1\xdc\x9f\x3f\xd1\x3f\x9e\xd1\xaf\x5f\x42\x5c\xb0\xe4\xaa\xa8\xf8\xf9\x93\xeb\xea\x72\xd5\x46\xab\x8c\xfd\x92\xc9\x9d\x5e\x1c\x5f\xf0\x33\x41\x01\xd3\xee\x54\x1b\x35\x9f\x5f\xd1\x6c\xb2\x98\x06\xc5\x14\x29\xa1\xa3\x26\x5f\x1b\x88\x3c\x3d\x11\x33\x64\xbd\x29\xc7\x9f\xa8\xfd\x96\xf4\xf6\xf5\x0f\x3b\x48\xaf\x87\x2f\xd8\x7f\x2e\x5d\x4e\x5c\xc7\xf6\x49\xb2\x5c\x52\x05\xf3\x61\xcf\xaf\xe1\x6a\xa5\xab\xf5\x16\x13\xb4\x52\xb5\x83\xd4\xe6\xec\x46\x07\xfe\xb2\x6d\xb6\x6b\x4f\xec\x7f\x13\x64\xd1\xef\x6e\x68\x4f\x08\xb2\x04\x2e\xe0\x08\x24\xd5\xdd\xb7\x45\x1c\xc2\xc6\xe5\x7f\xa2\x90\x38\x8e\x2a\xa7\x42\x8a\x2c\x8a\x30\x1a\xb4\x9e\xa8\x6f\x2a\x05\x44\x9f\x30\x99\x3c\x0e\x43\x2f\x38\x3f\x38\x48\x4f\x7f\x8b\x9a\xc1\x81\x49\x5d\x93\x78\x61\x70\xc0\xa6\xa7\x43\xb1\x15\x1c\x70\x4b\x9e\x47\xad\x83\xbd\x90\xf8\x13\xdb\xe5\x33\xc2\xa0\x4f\x0c\x13\x92\xa1\x55\xde\x7d\xf4\xb1\x49\xfa\xc4\xb7\xa9\x75\xcf\x74\x15\x2b\x38\x47\x9d\x28\x1d\x03\x85\xd8\xe5\x2d\x0f\xba\x89\x74\x4f\x2b\x00\x8a\x5c\x7f\xb4\x5d\xec\x2b\xd6\x2e\xf6\x29\x83\xc5\xbc\x62\x8f\x9e\x6c\x87\xa4\x75\x79\x75\x44\x85\x2c\x96\xc5\x18\xa6\x6b\xab\x23\x6a\x4f\xf0\x88\x9c\xa3\x9f\x3f\xdb\x97\x37\xbd\x1e\xfb\x87\xba\xa4\x10\x62\x3b\x35\xcc\x34\x81\x7f\x0d\x5a\x07\x4a\x1e\xed\x60\x1c\xdb\x36\xc4\x8f\xb8\x2f\x19\x68\xd8\x43\x6c\x26\x20\xfa\x24\x9a\x76\xd3\x4b\xd5\x97\x6d\x85\xb9\x1d\xa3\x9d\xfe\x2a\xaa\x30\x53\x7b\x2f\x6f\x6f\xfe\xe0\xfa\x71\x16\x73\x38\x14\xf1\x3d\x50\x47\x7a\x67\xb4\x59\xde\xdc\x56\xd4\xca\xd6\x42\xbf\x1d\x2a\xdc\x07\x15\x57\xe7\xe6\xfa\xe1\xaf\xdb\xbb\x3f\x79\xb5\x7a\x1f\xb5\x75\xfa\xc3\xa7\x13\x0d\x42\x9a\xd1\x06\xfe\x4f\xf2\x1a\xd9\x4c\xb2\xbf\x82\xcd\x7b\xf6\xc7\xd7\x77\x7e\x7b\x95\x6d\xf4\x3d\xdf\xbf\x13\x0e\xc3\x2c\x67\xf4\x88\x03\x81\x57\xec\xe9\xf3\x59\x20\x14\x40\xf6\xaa\xa0\xc5\xba\x7d\x4a\x9d\x36\x3f\xd9\xc4\xb1\x8a\x1a\xcb\x5f\xf6\x71\x38\x3e\xe7\x62\xb6\xcd\x2a\xc3\x66\x4b\xb6\x19\x6c\xdc\xd8\x8e\x59\x1e\x4e\xbe\x60\xdf\x66\xda\x52\xf1\x18\x7d\x79\xf8\xfa\x96\x03\x13\xed\xcf\xb3\xed\xe8\xfb\xe4\x85\xb8\xa1\x54\xf3\xe3\xc5\xcf\x6d\x92\x81\x43\x08\xdb\x48\x30\x5c\x67\x3a\x4c\xc1\x78\xdc\x7f\xbe\xbe\xee\x17\x2e\x84\x27\xec\x04\x24\x3d\xf7\x5f\xa8\x33\x9d\x90\x2f\xfc\xa8\xe4\x3c\x9b\xe7\x84\x3d\x16\x03\x70\xc0\xe6\xc8\x01\xf5\xc2\x03\xd3\xb5\x0f\x1e\xed\x9c\xf0\x97\x1d\xe0\xda\xc6\xa3\xed\x1a\x96\xed\xcf\xcc\x8c\x84\x26\xcf\xcc\x25\x61\xdb\x2a\xce\xce\x25\xa1\x9a\x9d\xa9\x07\xcc\xbb\xa9\x1b\xe8\xb7\x46\xf1\xc2\x55\x44\x43\x6c\xcb\xb0\x53\xd0\x99\x7c\xe3\xf9\x74\xe4\xe3\x49\x10\xe3\x81\x3c\xbb\x62\xe0\xea\xd3\x29\xcb\x43\x66\xab\x7e\xcf\x9a\xa5\x81\x55\x8d\x94\x43\x29\x58\x65\xea\x8a\x06\x57\x75\x68\xf9\x35\x20\x6a\x43\x2e\xfa\xbd\x68\xbb\xf7\x88\xcd\x67\x36\x41\x62\xcb\x43\xc1\x14\xb9\xba\x78\xb8\xb8\x7f\xb8\xbd\xbb\x1e\x3e\xfc\xb3\x5f\x0c\x9a\xea\xee\x3b\x07\x96\xdc\x18\x17\x4c\x3d\xb6\xc3\x3d\x47\xb1\x87\x34\x3f\xf0\xe3\x38\x1e\xad\x98\x82\x3a\xfc\x71\xfd\xb9\xf7\xbf\x59\xf9\x9f\x2e\xfe\x3c\xbb\xbf\xbf\xbe\xfb\xd6\xbb\xbc\xae\x8b\x1d\x8b\x5e\x96\x79\x9b\x60\xb6\xdd\x7f\x61\x3b\x8c\x3d\x18\x66\xf5\xf3\x5f\x17\xbd\x87\xe1\x1f\xb7\x77\xc3\xb8\xc3\x0b\xfb\x9a\x6b\xbe\xb9\x5e\x66\xe8\x5c\x1b\x90\x19\x0a\xbf\x0d\x08\x8f\x29\x0d\x48\x3c\x13\x33\x56\xd2\x7c\x45\x2f\x2f\x3e\xf7\x2e\x6f\x23\x71\xd9\xbb\xf9\x38\xfc\xfd\xe2\xf2\xcf\xeb\x9b\xab\x37\x15\x99\x29\x63\x6e\xae\x89\xc2\xf0\xc1\xf7\xf0\x5c\x33\x60\x9b\x7c\xfb\x49\x4c\x79\x8b\x78\x0e\x7d\x9d\xb0\x6d\x3f\xb7\x23\xe9\x1b\xfd\xf9\xeb\xfd\xc3\xf5\xdd\x8c\x95\x77\x16\xec\x3f\x8e\xbc\xfc\x84\xb8\x98\x86\xd4\xb0\x48\x48\x4c\x21\xb6\x7f\xff\xd8\x47\xbd\x3e\x53\xf8\xd9\x1e\xaf\xa0\x9f\x7b\xc5\xe2\x00\x4f\x43\x2a\xb2\xcb\x97\x75\x2d\x0c\xfd\xbd\x7e\xf6\xfb\xcc\xf8\xf5\xfa\xdf\x8e\xfb\xb7\xb7\x9f\x87\xf9\x94\x4a\x49\x17\xce\x77\xfc\xaa\x01\x12\x36\xc5\x99\xe4\xe6\x6b\x6a\xea\xba\xc4\x41\x16\xe1\x3e\x24\xfc\x24\x84\x6d\xd9\x3d\x9b\x9f\x8c\x88\x83\x07\xab\x0c\x4e\x7a\xfd\xde\x4d\xaf\xbf\xa6\xb2\xfd\x81\x4f\x11\x1e\x3e\x82\x7a\xfd\x97\x63\xe4\x51\xea\x24\xfa\xad\x72\x2e\xcc\xcf\x00\xa8\x4b\x10\xe1\xdb\xa7\x36\xea\x53\x8b\xbb\xd4\x48\x93\x7a\x36\x67\x73\x4c\x03\xe2\x0a\x2d\x81\x5b\xe0\xf9\x6e\xb8\x8d\x2e\xc7\xd8\x1d\x31\x81\xc0\x1f\x8a\x83\x17\x71\x76\xa9\x1e\x1f\x89\x5c\xc7\xf8\x25\x97\xaf\x4b\xe5\x3e\xaf\x2d\x76\x23\xc1\x98\x4e\x1d\x0b\x3d\x31\x5d\xf8\xbb\x1d\x8e\x6d\x17\x19\x46\x14\xf9\x65\xda\x56\x91\x4a\x92\x9d\x28\x97\xbd\xab\xbb\xc2\x89\xc2\xf6\x18\x22\x4b\x96\x2c\x6b\xc6\x65\xd5\xba\xb2\x03\xe1\x84\xc3\xf6\x07\x0e\x1d\xf1\x26\x06\x94\x5b\x0b\xcd\xd0\x61\x8f\x02\x6e\xbe\x2c\x5a\x10\xb2\x3e\x57\xbd\xfb\x8b\xdf\x3f\x5f\x0f\xff\xe8\x7d\xbe\x1e\x7e\xbe\xfd\xf8\xb1\x77\xa3\xd7\xd6\xcb\x01\xfa\x0f\xe2\xd8\x3f\x62\xdf\x29\x36\xa0\x4c\x09\x88\x87\x1a\x9b\xd1\x71\xca\xc5\xe5\xe5\x75\xff\xa1\x54\x1e\x5e\x5d\xff\x71\xf1\xf5\xf3\xc3\xf5\xcd\x55\xff\xb6\x77\xf3\xf0\x70\xfb\xe9\xf6\xfe\xe1\xe2\xf2\xa1\x77\x7b\x53\xbc\xb2\x78\xb6\xc5\xdd\xd4\xeb\xbf\x9c\xb2\xc9\x95\xe8\x0c\xa5\x55\xe8\xf5\xbf\x9d\xde\x7f\xed\xf7\x6f\xef\x1e\xea\x68\x91\xa9\x81\xe1\x3d\x12\x8d\x4c\x48\xf9\x48\x95\x95\xf9\xf9\xf6\x23\x1b\x84\xfe\xc5\xc3\xa7\xc2\x32\x93\x93\xb9\xd9\x45\x32\x30\x09\x5e\x03\x87\x8e\x66\x94\x7a\x7f\xfd\xed\xfa\xae\xf7\xf0\xcf\xfb\x7f\xde\x17\x16\x5c\x88\x8c\xb9\x66\x06\xa1\x45\xa7\x61\xd5\x22\x2f\xef\xae\xaf\x8b\x47\xf5\x2f\xec\xbb\xb6\x3b\xca\x16\x9e\xce\xee\xd3\xf5\xc5\xe7\x87\x4f\xd7\x37\x6c\x1a\xeb\xa5\xa6\x7e\xea\x06\xc4\x9c\xfa\x76\xf8\x7a\x49\xdd\x90\xfc\x08\x33\x90\x97\x84\x34\x44\x16\xb9\xe4\x5d\xde\x41\x21\x7a\xfe\xf7\x94\x04\xb9\x0d\x04\x42\xa6\x37\x3d\x47\x87\x27\x9d\x89\xfa\xc2\xb1\x5f\x88\x4b\x82\xa0\xef\xd3\x47\x92\xf9\x64\x1c\x86\xde\x47\x92\xad\x13\x42\x9e\xd8\x37\x44\x9f\xe6\x5e\x73\x3d\xf4\x7d\xe7\xfd\xfb\xec\x1b\xb6\x1a\xcf\x11\x3f\xde\x62\x7f\x66\xda\x9a\x36\xcc\x74\x3b\xe9\xd7\xb6\x6b\x87\x36\x76\xae\x88\x83\x5f\x0b\x13\x3d\x61\xdb\x99\xfa\xe4\x61\xec\x93\x60\x4c\x1d\xeb\x1c\x9d\xa6\xbb\x0c\x5b\x76\x51\x6b\xc9\x0f\xc5\x78\x1c\xf7\x99\xb4\xa6\x64\x9f\x1b\x88\x6d\xbb\x0e\x0a\x36\x13\x22\x85\xf1\x68\xfb\x96\xc1\xca\x7c\xd5\xbc\xe4\x53\x56\xf7\xb6\xb4\x1f\x2a\xef\x10\x1d\xfb\xf1\x60\x42\xad\xa9\x43\x72\xe3\x23\xa6\xad\x63\x3f\x1a\x05\x09\x58\xa5\x6e\x5d\xe7\x35\x3f\xe7\xb2\xa5\xf8\x53\xf7\xe0\x47\xc8\x96\x60\xd0\x76\xa8\xf9\xac\x2f\x4a\xa6\x30\x74\x29\x92\xb2\x04\x92\x95\x14\xf6\x82\x7d\x5e\xa0\x3c\x0b\xd6\x16\xf5\x82\x7d\xc3\x9f\xba\x86\x3e\x4d\xcd\xc2\x58\x1f\xce\x2a\x8c\x75\x63\xad\xc2\xc4\x08\xa6\xf7\xcb\x91\x7b\xa6\xb2\x65\xd6\xec\x5c\x0b\x46\x8c\xad\x24\x5e\xe9\xcc\x34\x2a\x99\x07\xc6\xcc\xde\x2a\xcf\xb4\x68\x24\x8c\x99\x1d\x33\x3b\x5f\x5d\xa7\x1b\x33\x26\x52\x79\xae\xe5\x93\x54\x9c\x01\xfe\x61\x3b\xe4\xd6\xbf\x4c\xb9\x69\xa9\x0e\xd0\x91\xdd\xf1\xf2\xa6\xa7\xb3\x29\xe8\x0d\x2d\xe5\xd5\xd2\x9a\x6f\x8c\x62\x5b\xcb\xec\x1c\x33\x36\x9c\x81\xbb\x87\x2e\xa5\xf7\xa3\xe3\x08\x53\xc0\x34\x08\xe9\xe4\x4e\x4a\x8e\x2b\xc2\x8f\xc2\xb8\x27\x9e\x1b\x7b\x5c\xf3\xcf\x84\x55\x5b\xb1\xb3\x24\xde\xca\x68\x22\xa6\xa7\x3c\x1e\x57\x4f\x99\xb1\x67\x27\x07\xcd\x45\x8e\x6b\x05\x55\xc8\x9c\x47\xcb\x7e\xd0\xf8\x4f\xb6\xf5\x7e\x7b\xca\x79\xb3\x49\xd9\x90\x4a\xd5\x95\x3d\x19\x09\x37\xb2\x82\x0f\xb9\xbb\x5e\xe2\x9f\x25\x8f\xbd\xa3\xb3\x6d\x5e\x69\xae\x58\x5e\xaa\xd5\x10\x6f\x3d\x67\xea\x63\x47\x5b\x4d\x91\x20\xb0\xdd\xd1\xd4\xc1\xbe\x2e\x49\xec\x7c\xb6\xa4\x2e\x14\x3d\x18\x39\x26\xbe\x45\xb7\xfd\xfe\xb1\xdf\x27\xc4\x4f\xf7\x55\xda\x53\x32\xe9\x20\xf9\x3c\xee\x95\xe5\xf7\xcb\xdb\xcf\xab\xdf\x3f\xf6\x4b\x66\x55\x81\xbb\x69\xaa\xcb\xf4\x33\x6a\xc9\x7d\x27\xdd\x9c\xdf\xa2\xc7\x7a\xfd\x3e\xa5\x4e\xba\x9f\x52\x5e\xd7\x49\xef\x88\xc7\xab\xea\x93\x94\xf3\xfa\x5b\xf4\xcc\x27\x1a\x84\xd7\xb2\x02\xe9\xfe\xd1\xf8\xd5\x27\xbd\xa4\xbe\x5c\x55\x5f\x69\x1c\xdf\xdf\xa2\xc7\x64\x5e\xbd\xa4\x1a\xe9\x7e\x2b\xf4\xcf\x4f\x7a\x2f\x9f\x64\x55\x7d\xa8\x0d\xce\x78\x8b\x5e\xfc\xc8\x2b\xa2\x46\x3c\xbd\xa6\xbb\xb1\x24\x8c\x24\xe9\xc8\x7c\xa2\xd7\x37\xe9\xc9\x80\xbc\xcd\xea\x4d\xf5\xe2\x3d\x09\x4b\xba\x30\x09\xb5\x29\xe8\xbe\x80\xac\x6c\x25\x37\x9c\x7f\x37\x91\x63\xa1\xb5\x90\xce\x2b\x99\x7c\x33\xa6\x9d\x7e\xc2\x65\x5d\xf6\xf5\x01\x0d\xcd\xfd\x27\xd9\xff\xb8\x6b\x95\x4b\x50\xfb\xd2\xa1\x53\xab\xef\xd3\x17\xdb\x22\x7e\x6c\x5d\xfb\x15\x39\xa0\x36\x89\x27\xe0\x86\x5b\x25\xd7\x5f\xbf\x8c\x48\x18\x56\x88\x2d\x28\xfc\x3a\x71\x08\x57\xeb\x90\x1b\xb2\x83\x97\xa3\x22\x89\x9d\x73\x8a\x54\xf5\x09\xc3\xf6\x6c\xcf\xe8\xca\x21\x52\x5d\xf9\x4c\xdb\xf2\x65\xab\x54\x73\xb4\x7c\xcb\x3e\xfb\x42\x2d\x72\x8e\xe4\xc9\x46\x9c\x77\x78\x3b\x0d\x47\xd4\x76\x47\x91\x25\xa3\x64\x74\xfb\xd4\x2a\x19\x52\x33\x2c\xed\xbb\xb8\xb6\x1a\x1f\x3a\x6e\xa9\x0b\xb1\x1f\x8a\xe9\x79\x8e\x6e\xdd\x3f\x84\x99\x8a\xbd\xcb\xfa\xb2\x15\xfa\x73\xe9\x3c\xb9\x8a\x9d\xd6\x74\xa9\x33\x87\xf5\x86\xae\x81\x29\xff\xa2\xe8\x45\xd4\xd5\x29\xd7\xa2\x47\xdb\x3d\x08\xc6\x83\xd6\x3e\x1a\xb4\x0c\x53\xfc\x37\xce\x0a\x61\xcf\x73\x5e\x91\xf1\x54\x3c\x99\xda\xaf\x78\xe2\xc4\x1e\x49\xc9\xe9\x7a\xf9\xc9\xb8\xb4\xa4\x2a\xe7\xe1\xfc\x85\xc6\x2c\x66\xa4\xe7\x56\xfa\xa4\x28\x65\xc3\xa2\x34\x3c\xe0\x30\xa3\x58\x66\x4a\xbe\x8e\x0f\xa9\x32\x93\xb8\x74\xd1\xf1\x9e\x0d\x49\xca\x37\x54\x7a\xfe\xcd\xfc\x2e\xd9\xe1\xcf\xe8\x4c\x1e\x01\xc2\x3b\x41\x04\x80\x10\x44\x42\xd3\x42\x0f\x9f\xef\x51\x40\x4c\x9f\x49\x36\xc5\x97\x32\xc5\x82\x27\xe9\x08\x2a\x71\x0c\xc8\x80\xa9\x7b\x2e\x1f\xa2\xf9\x73\x10\xb9\x3f\x07\x07\x3c\x5a\x4b\x54\x68\x16\xf1\x40\xf6\x26\x10\x36\xc5\x3c\xea\x12\x77\x16\xfb\x40\xee\xc3\x95\x32\x11\x64\x4b\x4f\xb3\x12\xdc\xf0\x68\x27\xec\x13\x11\xfb\x28\x0c\x48\x32\x86\x98\xb7\x3c\x72\x79\x6c\x10\xbd\x5c\x12\x83\x59\x12\xc8\x1f\x07\x68\xee\x31\x98\x13\x75\xfb\x7b\x4a\x78\xc0\x65\x48\x91\x39\x26\xe6\x33\xaf\x19\x3f\xe5\x24\xae\xd9\x20\x3a\x34\x89\x05\x2f\x08\x0e\xdd\x43\xbd\xfe\xc5\x97\x8c\x6f\xf8\x04\xbb\xb6\x8c\x42\x42\xdf\xc7\xc4\x95\xa1\x62\xec\x15\xef\x25\xe9\x12\xbe\xe0\xc8\xdc\xa2\x00\xf4\x05\x44\x88\x3a\xd4\x7c\x96\x9e\xe7\xa9\xc0\x67\xdb\xc3\x13\xfe\x32\xf3\x6c\x8c\x5d\xcb\x69\x10\x56\x5b\x1c\x12\x2c\xfe\x2d\x7a\x4f\x4e\x48\xce\x8b\x81\x4d\x93\x04\xdc\x11\x57\xc6\x41\xeb\x76\x61\x8b\xe9\x85\xca\x81\xcd\xa9\x06\x96\x06\xc9\x16\x47\xbd\x2e\x73\x55\x2f\x23\x60\x36\x5f\x4c\xfd\xe0\xd9\x7c\x1e\xab\x09\xa4\x95\xd0\x0f\x6c\x32\xc0\x26\x03\x6c\x32\xc0\x26\x03\x6c\x32\xc0\x26\x53\x99\x4d\x46\xa7\x01\x2d\x81\x61\x46\x9b\x1a\x68\x67\x80\x76\x06\x68\x67\x52\x03\xa8\xef\x95\x28\x10\x96\x77\x88\x12\xdb\x16\x52\x96\x94\x8d\xa8\xd8\xc5\x61\xc7\xa1\xe6\x62\x1b\xb9\x7e\x3b\xa7\x45\x2c\x4c\x3c\x49\x81\x66\xe1\xde\xf8\x77\xd6\x42\x94\xb4\x5f\xa0\x08\x76\x02\xca\xe6\x1d\x9f\xcd\x5c\x41\x79\x7c\xe5\xeb\x4c\x0c\x10\x0f\x7e\x41\x78\x34\xf2\xc9\xa8\x58\xe8\x2e\x68\x2c\x0a\xd5\x03\x29\x59\xc5\x64\xe1\xb3\x63\x62\x8f\x24\x0a\xa4\x94\x68\x71\x6b\x29\x3f\x61\xd1\x4c\x3f\x13\xbb\xd2\xa1\x7a\x2f\x5e\x67\xdc\xfb\x3a\x94\x0b\x8d\xbb\x93\xb2\xb5\x89\xdd\xb4\xd7\xb4\x20\xa5\x49\xa8\x33\x78\x25\xb4\x5d\x81\x3d\x2f\x28\x6d\x79\x52\xc5\x92\xf1\x02\xd6\xa6\xd5\xb2\x36\xcd\x32\x38\xa6\x82\x01\x62\xcb\xe3\xc6\x11\x3a\x09\x52\xa5\x80\x6d\x8f\x78\x78\x45\x23\x6e\x24\x20\x45\x02\x52\xa4\x34\x29\x12\x53\xc4\x36\x8c\x11\x49\xd7\x4c\x43\xa4\x55\x13\x02\xd7\xd1\x62\xb9\x8e\x4a\x20\xf6\xd9\xb2\x0c\xd3\xb7\x02\x89\xae\xe0\xf4\xd9\xdc\xe9\x73\xf9\x2e\x9f\x89\xc6\xfc\x36\x1e\x7a\x17\x5f\x7e\x4f\xfc\xac\x13\x27\xbd\xb4\x1a\xaf\xfa\xe9\xc9\x37\x2b\x71\x87\x4d\xab\xb6\x6f\xe2\xf4\xc9\xaa\x10\xd1\x10\xa5\x3b\x49\xab\x78\x2b\xfe\x9e\xca\xeb\xd7\x55\xcd\x24\xb9\xcf\x7a\xab\xa9\xf4\x89\x17\x9f\x9f\x4b\xa9\xed\x5f\x7a\x32\x8d\xe5\x27\xab\xe9\x1f\xb9\xbf\x7b\xab\xfe\xb9\x54\x5c\x13\xd4\xfe\x49\x6d\x3b\xd3\xfd\x13\xa9\xa5\xe0\x7c\x9e\x77\x3e\x5f\x49\x9f\xbc\xbd\x6c\x5b\xb8\xe3\xf9\x2a\xd6\xda\x26\x39\x9d\x2f\xbf\x3f\xb6\xc3\xe1\x7c\xf9\xfd\xb4\xdd\xce\xe6\xcb\xef\xbf\x5d\x70\x34\x5f\x71\x2f\x6e\x8d\x93\xf9\xf2\xfb\x6d\xcb\x1c\xcc\x57\xd6\x61\x75\xa6\xd8\x72\x3a\x2b\x37\xbf\x4a\x66\x56\x6e\x4e\xcd\xb6\xf6\x72\x63\x5f\xca\xd6\x5b\xc6\xd0\x6c\x54\x60\x68\x06\x6a\x66\xa0\x66\x46\xe5\x8d\x46\x40\xcd\xbc\x08\x6a\x66\x2d\x75\x30\xd2\x53\x1f\x9f\x23\xc7\x76\xa7\x3f\xa2\x54\xcb\x21\x18\x16\x0f\xb4\xc1\x1b\x08\x08\x87\xe7\x23\x1c\x9e\x15\x4e\x20\xe7\xd4\x2c\x42\xe2\x0c\x07\x34\x30\x13\x6b\x98\x89\xa5\x8b\x46\x90\x76\x65\xc9\x1c\x8c\xf3\x13\xd0\xe4\x48\xa5\xad\xe6\xd7\x0b\xe5\x31\x7c\xe4\x7d\xcf\xd0\x80\x1f\x9a\xd9\x6c\x96\xe5\x5d\x5c\xf6\x59\xdf\xaa\x17\xc1\x60\x27\x43\x69\xb3\x17\x55\x26\x3a\x93\x2c\x28\x3c\x8a\xb8\x91\xa9\xc5\x71\x8f\x32\xb1\x6a\xf1\x1e\x2b\xdc\x1a\x07\xa9\xe3\x23\x1e\xad\x24\x8b\x98\x49\x87\xbc\x46\xbc\xba\x1b\x4a\xd4\x58\x99\xae\x28\x66\x7e\x11\xf4\x25\x5c\x19\xcc\x96\x97\x98\x3d\xc4\x6c\xd6\x11\xa4\x64\xf3\x9d\x83\x28\x77\x06\xef\x37\x10\x7e\x03\xe1\x37\x10\x7e\x03\xe1\xb7\xda\x3a\x20\xfc\xce\xed\xb4\x81\xf0\x3b\x5d\x9b\x05\x10\x7e\x03\xf1\x35\x10\x5f\x03\xf1\x35\x10\x5f\x03\xf1\x35\x10\x5f\x03\xf1\x75\x61\x6f\x28\x6c\xd0\x91\x13\x6c\x59\x99\xd5\xf9\xa0\x67\xe7\x05\x64\xd0\xc9\x6b\x20\x83\xe6\x29\x80\x0c\x1a\xc8\xa0\x9b\x90\x41\x1b\x40\x06\x0d\x64\xd0\x0b\x20\x83\x4e\x5a\x91\x22\x88\xb2\x6c\x9f\x1f\x9b\xbd\x72\xe5\x37\x7b\x52\xa0\x46\x79\x0a\xf5\x2b\xbd\x63\xe7\xea\x31\xa7\xed\xc9\x44\xe8\x29\x19\xa5\x4f\x1b\xe2\x90\x5a\x25\x9a\x56\xcd\x31\x0a\xf8\x0b\x84\xca\x48\x52\xc7\x01\x1c\xf6\x13\x33\x81\xa6\xef\xcb\x8d\xc3\x15\xe7\x5b\xca\x04\xbd\x12\x3e\xc0\x8a\x2e\x0f\x59\xd6\x97\xd8\xfd\xe1\x9e\x90\xf8\x84\x6a\x64\x87\xe3\xe9\x63\xdb\xa4\x93\x83\x94\xfb\xc6\x41\x9e\x33\x66\x96\x17\x82\x74\x5b\x88\xb7\x94\xf5\xc8\x73\x1a\xfb\x28\xe8\xb2\xca\x1f\xba\xd7\x3d\x84\x8e\x0f\xa0\xc5\x2e\x28\xc9\x9f\xcf\x46\x1e\x0d\x2e\x0e\xb0\xb8\x5b\x8a\x43\xb8\xd2\xfc\x42\xc4\x62\x8f\x18\xb1\x7c\xe2\x39\xb6\x89\x03\xee\x60\x80\x50\x90\x78\x3f\x24\xe8\x71\x47\x92\x08\xe3\x59\x8e\x07\x33\xbb\x30\x4a\xa4\xef\x46\x54\xc5\x77\x41\x9f\xed\xa2\xce\xe3\xe1\x68\x5c\x5f\xef\xd5\x1c\x8d\xe7\xc7\x36\x73\x4c\xae\xb5\xd7\x1a\xd5\xe6\x1d\x4a\x1f\x3e\x25\x09\x2a\x1a\x4b\xa5\x2d\xee\xfb\xd8\x36\xc7\x48\xe5\xea\x0b\x29\xf2\xa7\x6e\xc1\x0e\x50\xee\x9a\x86\x97\xb7\x37\x0f\x77\xb7\x9f\x3f\x5f\xdf\x15\xdd\x07\x94\x57\xb4\x6b\x19\x59\xb3\x1c\x92\xe2\xb7\xd0\x5d\xc1\x34\xf0\xc5\xce\x60\x4c\xcc\x67\x43\xa5\x89\x51\x93\x19\xba\xb0\x83\x26\x62\xa6\x0e\x06\x6b\xd8\x1f\x8d\x64\x83\x29\x88\x20\x23\x96\x8f\x07\x89\x62\xdf\xba\xdd\x93\x7e\x9c\x66\xf6\xf4\xdd\x66\x8e\x48\xa0\x87\x04\x7a\xc8\xad\x20\x39\x01\x7a\xc8\x46\x0b\x1a\x98\x21\x37\x95\x19\x12\x48\x21\xc5\x37\x9b\x46\x0a\xc9\x85\x13\xba\xec\x5d\xdd\x71\xca\x0e\x79\x04\x29\xe9\xc5\xd8\xbc\xc6\xd6\x44\x8e\x4f\x82\x65\xd2\x91\x68\x82\xbd\x06\x43\x22\x3e\x66\xdf\x2e\xae\xd7\x81\xad\x12\xd8\x2a\x81\xad\x12\xd8\x2a\xd3\x2f\xe6\x63\xab\xac\x4c\xd9\x06\x34\x96\x59\x30\x03\x1a\x4b\xa0\xb1\x04\x1a\x4b\xa0\xb1\x04\x1a\xcb\x99\xbb\x26\x60\xb0\x04\x06\x4b\x60\xb0\x04\x06\xcb\x0c\x83\x65\x17\x18\x2c\x81\xc1\x72\xe5\x0c\x96\x55\x6a\xf2\x88\x5d\xeb\xbb\x6d\x85\xe3\x5c\x5d\x34\x05\x2a\x89\x37\x87\x2f\x13\xe8\x32\x81\x2e\x13\xe8\x32\x81\x2e\x13\xe8\x32\x2b\xf7\x0f\xd0\x65\x02\x5d\x26\xd0\x65\x02\x5d\x26\xd0\x65\x02\x5d\x26\xd0\x65\x02\x5d\x26\xd0\x65\x02\x5d\x26\xd0\x65\x6e\x10\x5d\x26\xf6\xbc\xa0\x92\x17\x17\x70\x64\x02\x47\xe6\xf6\x71\x64\x02\x3d\xa6\xf8\x41\x0c\x10\xd0\x63\x8a\x74\xd1\x72\xbe\x74\x70\x10\xdc\x28\xa7\xb0\xbc\x67\x8c\x68\xe8\xa3\xe4\xc0\xa6\x89\x80\x4d\x73\x33\xd9\x9f\x36\x99\x4d\xb3\x39\xb9\x09\xf0\x70\x02\x0f\x67\xe6\x07\x3c\x9c\xc0\xc3\xb9\xdb\x3c\x9c\x68\x2e\x40\xbd\xb0\x2c\xa6\x80\xfc\xe1\x90\x1f\xe8\x1b\x6f\x3a\xba\xf2\x6d\xb6\x9b\xe1\x7b\x20\x01\x36\x2c\x85\x47\x7c\xa6\x94\xa1\xaf\xae\xfd\x03\x5d\xd1\x09\xb6\x5d\x74\x4f\xcd\x67\xc2\xa3\xb4\xb0\xe3\xd0\xef\xe8\xca\x7e\x66\x1b\xfc\x14\xfa\x72\x17\xb5\xc9\x64\xea\xda\x26\x0e\x89\xd8\xea\x09\x56\x2e\x2a\x4a\x21\x48\x18\x87\xd0\xfd\xab\x6b\xa2\x8b\xbe\x8e\x48\xe5\xc9\x21\x3f\x5e\xa8\x63\x58\xbc\x6a\x7a\x28\x66\x4d\xf8\x46\x9d\xde\x64\x94\x06\xe3\xc2\x01\xd5\x67\x6e\xe4\x19\xa8\x72\x03\x95\xaf\x46\xb3\x01\x00\x0a\x55\xa0\x50\x05\x0a\xd5\xcc\x0f\x28\x54\x81\x42\x15\x28\x54\x81\x42\x15\x28\x54\x8b\xba\x09\x28\x54\x2b\x0d\xe7\x3a\x53\xa8\x2e\x9e\x54\x54\xf0\x86\xb2\x32\x35\x2f\x39\xe3\x68\xfe\xdd\xf6\x51\xab\x16\xb2\xa7\xa2\x32\xe2\x55\xa0\x56\x2d\x28\x6c\x3b\xa8\x55\xa3\xc2\x44\x16\x62\xf7\x13\xbc\xba\x66\xf6\x73\x5d\xcb\xd9\x3c\xc3\x23\xe2\xc6\x5b\x42\xe0\x69\x05\x9e\x56\xe0\x69\x55\x72\x5c\x3b\x9e\xd6\xfc\xe8\x4b\x7d\xbc\xd8\x84\xa5\x59\x5b\x7a\x98\x28\xa8\x8f\x98\x84\x57\xd1\xc8\xe4\x67\x22\xca\x2f\xbe\x1c\xb2\xe8\xe6\x6b\xde\x2e\x97\xaf\xe9\x0c\xfb\x55\xdd\x2a\x47\x71\x92\xd2\x9e\xd6\xe7\x8e\x3d\x57\x76\xda\x5f\x20\x69\x4f\x62\x79\x8b\x53\x6a\x62\x24\x73\xbd\x30\x0d\xf8\xd0\x31\x0d\x40\x39\x2a\xe6\x7f\x3a\x24\x34\xa4\x3b\xd1\x81\x40\xdb\x03\x9e\x2c\xee\xb0\xff\x37\xb5\x82\x38\xc4\x12\xc5\x41\xb5\xab\xe4\x4c\xdc\x15\x2e\xe0\xd8\xc5\x6a\x6d\x08\x80\x0b\xc9\x7b\x83\x79\xd8\x7b\xeb\x3b\x76\xe9\x1a\xb9\xc1\x24\xc0\x45\x8e\x5a\x6f\xe4\xbc\x04\x7e\x44\xfa\x7a\xaf\x09\x97\x70\xb1\xa3\x4d\x6c\x3c\xca\xf8\xda\x00\xfb\xf0\x66\xb0\x0f\xe7\xc9\x80\x4f\x05\x03\xf0\x62\x18\x7e\x81\xe3\x17\x38\x7e\x81\xe3\x17\x38\x7e\x67\x37\x10\x38\x7e\x17\xce\xf1\x0b\xbc\xbc\xc0\xcb\xbb\x54\x5e\x5e\xa0\xbf\x05\xfa\x5b\xa0\xbf\x05\xfa\xdb\x37\xa3\xbf\x05\x96\xdb\x72\x6d\x10\x58\x6e\x81\xe5\x16\x58\x6e\x81\xe5\x16\x58\x6e\x81\xe5\x16\x58\x6e\x81\xe5\x16\x58\x6e\x81\xe5\x36\xfd\x19\xb0\xdc\xae\x27\xcb\x6d\xf4\x67\x86\x77\x76\x3d\xc8\x67\x77\x87\x7d\x16\xf8\x67\x0b\xf8\x67\x57\xd3\x3f\xdb\xc4\x41\xbb\xba\x19\xb5\xb9\x3c\xb4\xab\xeb\xa3\xcd\xe5\xa2\x5d\xd1\xca\xdb\x38\x3e\xda\x95\xf5\xcb\xdb\x4b\xbc\x85\x73\xd2\xae\x6a\xdd\x6d\x12\x2f\xed\x6a\xfa\x64\x3b\xb8\x69\x57\xd3\x57\xdb\xcd\x4f\xbb\x9a\x3e\xdc\x05\x8e\xda\x37\xe8\xc9\xad\xe1\xa9\x5d\x4d\xdf\x6d\x19\x57\xed\x4a\x3b\x6d\xc3\xf9\x6a\x81\xb4\x76\x00\xa4\xb5\x40\x5a\xbb\x2b\xa4\xb5\x0c\xee\xda\xc0\x5c\x2b\x7e\x5b\x13\x71\x92\xbc\x5b\x10\x87\xad\x9a\x21\xb0\xd9\x02\x9b\xad\x32\x35\x81\xcd\x16\xd8\x6c\xd7\x88\xcd\x16\x38\x69\x81\x93\x16\x69\x67\x0b\x70\xd2\xaa\xcd\x00\x4e\xda\x9d\xe2\xa4\x05\x66\xd9\x05\x30\xcb\x02\x3f\x2c\xf0\xc3\x02\x3f\x6c\xe6\x07\xfc\xb0\xc0\x0f\x0b\xfc\xb0\xc0\x0f\x0b\xfc\xb0\x45\xdd\x04\xfc\xb0\x95\x86\x73\x9d\xf9\x61\xc7\x61\xe8\x7d\x24\xd9\x3a\x29\xac\x90\xe2\xd3\xdc\x6b\xea\x87\xe7\xe8\x7d\xe7\xfd\xfb\xec\x1b\x36\x43\xcf\x11\x37\x88\xe4\xd5\xd0\xed\xe3\x81\x2d\x62\x7a\x45\xa5\x24\xb1\xc0\x03\x5b\x50\x18\xf0\xc0\x02\x0f\x2c\xf0\xc0\xea\xab\x05\x3c\xb0\x08\x78\x60\x53\x93\x10\x78\x60\x81\x07\x76\x7d\x78\x60\x81\x09\x16\x98\x60\xab\x57\x1c\xad\x9c\x09\xb6\x8a\x47\x10\x38\xe7\xe8\xeb\x0d\x74\xb0\x40\x07\xbb\x62\x3a\xd8\x77\x40\x07\x0b\x74\xb0\x40\x07\xbb\x25\x54\x49\x40\x07\x0b\x74\xb0\x40\x07\x0b\x74\xb0\x40\x07\x0b\x74\xb0\x40\x07\x0b\x74\xb0\xdb\x45\x07\x5b\xa8\x74\x01\x4f\x6c\xb9\x9a\x08\x3c\xb1\xc0\x13\x0b\x3c\xb1\xc0\x13\x0b\x3c\xb1\xc0\x13\x0b\x3c\xb1\xc0\x13\x0b\x3c\xb1\xc0\x13\x9b\xfe\x0c\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x21\x14\x05\x78\x62\x81\x27\x16\x78\x62\xd7\x85\x8e\x71\x43\x09\xb9\x80\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x81\x27\x16\x78\x62\x65\x11\xc0\x13\x0b\x3c\xb1\x6f\xa9\x96\x02\x4f\x6c\xb6\x29\xc0\x13\x9b\xf9\x01\x4f\x6c\xa5\x89\x02\x3c\xb1\xf9\x3a\x01\x4f\x2c\xf0\xc4\x02\x4f\x2c\xff\x01\x4f\xac\xda\x4d\xc0\x13\x0b\x3c\xb1\xc9\x0f\x78\x62\x81\x27\x36\x6a\x05\xf0\xc4\xce\x98\x6f\xc0\x13\x0b\x3c\xb1\xc0\x13\x0b\x3c\xb1\xc0\x13\x0b\x3c\xb1\xe0\x9c\x03\x3c\xb1\xc0\x13\xbb\x78\x9e\x58\x23\xb1\x8c\x08\xca\xd8\x88\x54\xe8\x41\x42\xda\xb7\x6e\xf7\x5d\x3f\x4e\xb3\x28\x4a\x59\x20\x94\x05\x42\x59\x20\x94\x05\x42\x59\x20\x94\x5d\x39\xa1\xec\x02\x09\x82\x80\x9c\x16\xc8\x69\x97\x4b\x4e\xcb\x85\x13\xba\xec\x5d\xdd\x71\x9a\x20\x79\x76\x2e\xd9\x0c\xd9\xbc\xc6\xd6\x44\x8e\x4f\x82\x65\xd2\x91\x70\x82\xbd\x06\x43\x22\x3e\x66\xdf\x2e\xae\xd7\x81\x35\x17\x58\x73\x81\x35\x17\x58\x73\xd3\x2f\x80\x35\x57\x3b\x08\xc0\x9a\x0b\xac\xb9\xc0\x9a\xab\x9f\x19\xc0\x9a\x0b\xac\xb9\x85\x2d\x07\xd6\x5c\x60\xcd\x05\xd6\x5c\x60\xcd\x05\xd6\xdc\xb8\x81\xc0\x9a\x9b\x4d\xb0\xc9\xac\xb9\x55\x6a\xf2\x88\x5d\xeb\xbb\x6d\x85\xe3\x5c\x5d\x34\x05\x2a\x89\x2b\x73\xf4\xbe\x39\x3d\xef\xce\xb0\xf3\x02\x37\xaf\x96\x9b\x77\xf9\x7d\xb3\x4d\xbc\xbc\xab\x99\x49\x9b\xcb\xc9\xbb\x9a\xfe\xd9\x5c\x3e\xde\x15\xac\xb6\x8d\xe3\xe2\x5d\x49\x9f\xbc\xbd\x6c\x5b\x38\x0f\xef\x2a\xd6\xda\x26\x71\xf0\x2e\xbf\x3f\xb6\x83\x7f\x77\xf9\xfd\xb4\xdd\xdc\xbb\xcb\xef\xbf\x5d\xe0\xdd\x5d\x71\x2f\x6e\x0d\xe7\xee\xf2\xfb\x6d\xcb\xf8\x76\x57\xd6\x61\x1b\xce\xb5\x0b\x34\xbb\x40\xb3\x0b\x34\xbb\xbb\x40\xb3\x0b\x0c\xbb\xe2\x07\x41\x3c\xe9\x75\x07\x6c\xba\xc0\xa6\x0b\x6c\xba\xc0\xa6\xbb\xae\x6c\xba\xcd\x59\x79\x80\x87\x17\x78\x78\x33\x3f\xe0\xe1\x05\x1e\xde\x5d\xe7\xe1\x9d\x07\x50\x81\xc1\x77\x6e\x06\xdf\xe6\x03\x00\xdc\xbf\xc0\xfd\x0b\xdc\xbf\x99\x1f\x70\xff\x02\xf7\x2f\x70\xff\x02\xf7\x2f\x70\xff\x16\x75\x13\x70\xff\x56\x1a\xce\x75\xe6\xfe\x5d\x3c\x1b\xae\x20\xbc\x65\x65\x6a\x5e\x72\xaa\xdc\xfc\xbb\xed\xe3\x04\x2e\xa4\xfd\x45\x65\x8c\xc1\xc0\x09\x5c\x50\x18\x70\x02\x03\x27\x30\x70\x02\xeb\xab\x05\x9c\xc0\x08\x38\x81\x53\x93\x10\x38\x81\x81\x13\x78\x7d\x38\x81\x81\x11\x18\x18\x81\xab\x56\x1c\xad\x9c\x11\x18\xc8\x80\xd7\xd8\x8f\x08\xc8\x80\x81\x0c\x38\x22\x03\x3e\x13\x04\xc0\x33\x09\x7e\xf7\x84\xad\x93\x13\x65\xa0\x31\xf1\xc9\xc0\x9d\x8b\x9b\x51\xfa\x71\x57\x27\x68\xac\x47\xc1\x54\x8d\x45\x11\x95\xf1\x30\x2d\x96\x6f\x2d\x21\xed\x59\x2c\x99\x6e\x69\x13\x50\x9a\xea\xad\x56\xc9\x65\x0c\x91\x0b\xa1\xa1\x5c\x18\xc7\x62\xed\xfe\xc9\x12\x28\x15\x0e\x79\x12\x80\x30\x3f\x6b\x61\x93\x29\xb7\x3a\xf2\xc4\x2d\xe4\xf5\x5b\x02\x87\x5f\x5d\xba\xbe\x59\xf4\x66\xf5\xe7\x68\x2d\x26\xa7\x74\xac\x0c\xd0\x39\x35\xa0\x73\xda\xdb\xe3\x9b\xd0\x94\xd4\x53\x69\xa8\xab\x31\x2d\xe9\x4f\x23\x67\xf1\x2c\xed\xa1\x07\x2a\x0f\x51\x05\xe1\xd2\x3e\x0a\xb8\x03\x9b\x1d\x88\x73\x1a\x99\x21\xa7\x5d\x1a\xb4\xd0\x7f\x62\xd7\xfa\x4f\x9e\x04\x23\x97\xba\xc6\xbf\x89\x4f\xe5\x21\x22\xd3\x5e\x05\x67\x53\xb4\x33\xe2\xf9\xf3\x88\x8b\x36\x42\x7f\x11\xe4\x13\xa6\x5f\xb0\xb6\x0a\x4b\x8f\x64\x78\x52\x3c\x94\x27\x94\xb3\x2e\x61\x17\x9d\x74\xa4\xf2\x8d\x2e\x1e\xe9\x0b\x41\xdd\x8e\x7c\x80\xec\x50\xd8\xa3\xf6\x10\x09\x02\xe2\x86\x36\x76\x98\xfa\x35\x83\x18\xaa\x29\x7d\xd2\xc0\xad\x44\x7a\x54\x89\xf3\x48\x4f\x79\xd4\x51\x13\x68\x19\x8f\x54\x4e\x9a\x59\x7c\x47\x39\xba\xa3\xbf\x2e\xee\x6e\x7a\x37\x1f\xb3\xa9\xea\x10\x1e\x35\xe3\x3b\x8a\xe9\x8e\xba\x27\x9d\x4e\xfa\x85\x9e\xe6\x48\x6d\x5a\x62\xd2\xcb\xd0\xed\xa0\x41\x2b\x98\x3e\xba\x24\x14\xe9\xa6\x01\xe9\x53\xeb\xd2\xb6\xfc\xd4\xc1\xdd\xaf\x74\x79\x45\x44\x48\x39\x16\xa4\x6c\x51\xcf\x67\xc1\x90\x2d\xf1\x61\x48\x9f\x89\x1b\xb5\xfe\xfe\xfa\xee\x5b\xef\xf2\xfa\xe2\xf2\xf2\xf6\xeb\xcd\xc3\xf0\xe1\xf6\xcf\xeb\x1b\xd6\xfa\xe2\x0a\x94\x31\x28\xc9\x52\x3c\x7b\xe8\x53\x2a\x9b\x15\x99\x5c\x52\x3d\x2d\x8b\x1d\x7e\xba\xbd\x7f\x18\x0e\xcf\xb5\xef\xfa\xb7\x77\x0f\x39\xe2\xa9\x3a\x0c\x4d\xc9\x4e\x48\x69\x42\xd1\x04\xd4\xb2\x33\x15\x93\x33\x35\xe0\x66\x8a\xfe\x4a\xb8\x92\x24\x36\x56\x0a\x3c\x3c\xa8\x10\x78\x98\xd0\x79\xbe\x45\xfc\x61\xa2\xfd\x55\xdf\xaf\x40\x28\x22\x84\x22\x6e\x70\x28\x62\x44\xa1\xa4\xf4\x1f\xeb\xe1\x8b\xfc\x63\x14\x33\xef\x5e\xf1\x36\xdf\xc7\xcd\xea\x8d\x5c\x1a\x3f\x16\x06\x2d\xb6\x9c\x52\xa0\x97\x32\x1b\x3e\x10\x7f\x92\xf7\xb9\x30\xc4\xa4\xbf\xfe\xe1\xf9\x44\x10\xae\x6a\x1c\xbd\xa4\xe9\x4d\x7b\xff\x58\x3e\xb5\x6a\x4c\xbb\xa1\x61\x2f\xe7\xd3\x8d\x22\xab\x8d\xae\x2c\x51\xde\x77\xdb\xb5\xe8\xf7\x38\x73\x4d\xa4\xa4\x58\x6e\x6a\x28\x66\x62\xc2\xd2\x5a\x4b\x97\x13\xc9\x99\x31\xe9\x55\xb5\xb8\x1e\x80\xc5\xb5\xec\x43\x5e\xae\xd0\xb9\x0c\xb6\x3b\xca\x2e\x31\x61\x7d\xf4\x1c\xec\x66\xbc\x95\x92\x4c\x07\x2d\x99\x6d\xea\x7d\x54\xa3\x41\x4b\xe9\xcb\x56\x8d\xa2\x49\x68\x5a\xcd\x8b\x8c\xba\x21\x4e\x30\x33\x0c\x55\x4e\xab\x8a\xa1\x9b\xb3\x5d\xe1\x0f\xc0\x15\x7e\xc9\xae\xf0\xb1\x1b\x66\xd6\xe3\xef\xc9\x2e\x0a\x1e\x8a\xbd\xfd\xfe\xe8\x7d\xbe\xee\x5f\x3c\x7c\x2a\x2c\x38\x61\xf9\x9d\x5d\x24\x5b\xd9\xc1\x6b\xe0\xd0\xd1\x8c\x52\x63\x1f\xc3\x7f\x16\xd9\xe6\x07\xad\x42\x3f\xe8\x5c\x33\x83\xd0\xa2\xd3\xb0\x6a\x91\xe5\x6e\x8d\x7f\x61\xdf\xb5\xdd\x51\xbe\xf0\xb7\x76\x38\x07\x5f\x5b\x54\xcf\xd7\xf6\xdb\x0a\x7d\x6d\x57\xe4\x37\xaf\x32\x55\xa7\x2b\xb1\xda\x68\x18\x70\xa0\x5f\x90\x03\xfd\x6a\x22\x3b\xe2\x52\x0c\xdb\x35\x7a\xfd\xa8\xc1\x7c\x09\xcf\x58\x15\x6c\x36\xd6\xf7\xe0\x4e\x98\xe4\x83\xa9\xe7\x51\x3f\x3c\x4f\x8e\x6f\xb9\xc3\x25\xdf\xa8\x45\x26\xd6\xd2\x2a\x3c\xfc\xb3\xff\xe9\xe2\xcf\xb3\x7b\x69\x6b\xa9\x1b\x4e\xb5\xe8\x90\x92\xbc\xc1\x53\x07\x07\x9b\x13\x29\xb6\xba\x30\xa6\xed\x8f\x0d\x18\x87\xa1\xf7\x91\x64\xeb\xa4\x78\x04\x8b\x4f\x73\xaf\xf9\xfa\x78\xdf\x79\xff\x3e\xd3\x98\x37\x76\xf2\x9f\xd1\x9c\xf8\xdb\x85\xb4\x67\xcd\x9c\xf5\xb7\xc5\x7f\x7e\x06\xf1\x46\x62\x86\x05\xfe\x0d\xe0\xdf\x28\x14\x7a\x3b\xc1\xbf\xb1\x71\xfc\x11\xb3\x03\x5a\x0e\x20\xa0\x25\xf3\xdd\x66\x07\x96\xf0\xeb\xfc\xe5\x6d\x8e\x8e\x23\x70\xae\x80\x28\x35\xe0\xf7\x9d\x89\xdb\xf3\xf8\x67\x02\xea\x15\xb3\x59\xe2\x82\x84\x26\x62\x9a\xc8\x23\xbe\x25\x71\xb5\x46\x41\x0f\x5b\x7d\xd3\x09\xdc\x30\xa0\xbb\x61\x60\xd9\x53\xcb\xdd\xe2\x5b\x06\x56\xd3\x77\x9b\x75\xd3\xc0\x6a\xfa\x64\x3b\x6e\x1b\x58\x4d\x5f\x6d\xf7\x8d\x03\xab\xe9\xc3\x5d\xb8\x75\xe0\x0d\x7a\x72\x6b\x6e\x1e\x58\x4d\xdf\x6d\xd9\xed\x03\x2b\x8a\xf8\x64\xff\xe3\xee\x21\x2e\x41\xed\x4b\x87\x4e\xad\xbe\x4f\x5f\x6c\x8b\xf8\xf1\x09\x6a\x1c\xee\xda\xe4\x2a\x57\x7e\x92\xa0\xe4\xfa\xeb\x97\x11\x09\xc3\x0a\xd7\xba\x16\x7e\x9d\xb8\xd4\xaa\x75\xc8\x0d\xd9\xc1\xcb\x51\x91\xc4\x2e\x88\x84\x14\xd9\x1b\xb6\x67\x7b\x46\x57\x0e\x91\xea\x8e\x64\xda\x96\x2f\x5b\xa5\x9e\x8f\xc8\xb7\xec\xb3\x2f\xd4\x22\xe7\x48\x9e\x68\xc4\x79\x87\xb7\xd3\x70\x44\x6d\x77\x14\x99\xf0\x4a\x46\xb7\x4f\xad\x92\x21\x35\xc3\xd2\xbe\x8b\x6b\xab\x65\x4c\xf7\x09\x3f\xde\x12\xd3\xf3\x1c\xdd\xba\x7f\x08\x3b\x2b\x7b\x97\xf5\xc7\x29\xf4\x49\xd1\x79\xa3\x14\x3b\xde\xe8\x52\x67\x7c\x2f\x0c\x5d\x03\x53\x46\xb7\xe8\x45\xd4\xd5\x29\x7b\xdb\xa3\xed\x1e\x04\x63\xc9\x08\x6d\x8a\xff\xc6\x59\x21\xec\x79\xce\x2b\x32\x9e\x8a\x27\x93\x08\x5f\x8e\xcc\x74\x89\x81\xae\xdc\xd1\xa1\x20\x96\x4e\x63\x8d\x31\xd2\x73\x2b\x6d\x88\x4a\x31\xad\x50\x1a\x1e\x70\x98\x51\x2c\x24\x25\x5f\xc7\xe6\xb2\xcc\x24\x2e\x5d\x74\xbc\x67\x43\x32\x49\x87\x45\x72\x73\xd9\xcc\xef\x90\x1a\x84\x5f\xd6\x99\x6e\x8e\x44\x82\x84\xa6\x85\x1e\x3e\xdf\xa3\x80\x98\x3e\x93\x6c\x8a\x3f\x58\x1c\x02\xe8\x62\xc7\x78\xe9\xb6\xbb\x47\x15\x43\x00\x51\xcf\x35\x9d\xa9\x45\x10\x8e\xd4\x1f\x9f\x3a\x24\x3e\x4e\x56\x23\x76\x63\x8f\xda\x7d\xee\xce\xeb\x5a\xe8\xd1\x76\x2d\x64\x73\x0f\x80\x6c\x62\x79\x4c\x86\x05\xbe\xb6\x97\x1a\x56\xa8\x46\x14\x26\x46\x58\xe1\x5d\x9c\xbe\xfb\xdd\xa3\x56\xb0\x2f\x5c\xde\x04\x45\x46\x12\x53\xa8\xbd\xa9\xbd\x62\x18\x5f\x26\x6a\xad\x46\xb0\xe2\x3c\xb1\x76\xb3\x02\xfa\x12\x83\x97\x65\x07\x26\x67\x6e\x95\xc9\xf9\x29\x3c\x1b\x62\x6c\xbd\x10\x3f\xb4\x03\x32\x21\x6e\xe2\x2e\x55\x18\x50\x56\x90\x2b\x3f\xee\x0d\xda\xf3\x35\x8e\xf7\x5f\x49\xb4\xe5\x1e\xba\x89\xad\x5a\xc8\x74\x08\xe6\x4e\xb9\x37\xd4\x22\x12\xa2\x15\x8f\x64\xf4\xe4\xe0\x91\x52\x1f\x4f\x6d\x4e\x6c\x10\xe3\x6e\x12\x01\x0a\xe8\x84\x64\x62\x53\x94\x1d\x00\x5b\x7c\x7c\x42\x2b\x8e\xc8\x4a\xce\x49\x44\xd7\x1e\xfa\x8b\x95\x22\xaa\x37\xc6\xee\x48\x5c\xbe\xa0\x38\x88\xa9\x8a\x8d\x5d\x30\xe1\x56\x17\x1c\x98\x18\x8c\x65\x77\xb0\x8a\x4b\x1b\xa1\xd2\xfe\xb9\x97\x45\x66\x1d\x28\x93\x56\x62\x43\x41\xb5\x0b\xa2\x29\x73\xeb\x9b\x8f\x2d\x09\xd4\x60\xdd\x66\x75\x2e\x8d\xf4\xf5\x92\xf2\x65\x77\x4d\xa8\x6b\x87\xd4\x0f\x38\x53\x37\x9d\x06\xe8\xf2\xee\x4a\x2c\x2a\x31\x97\xb4\x95\x80\x08\xcc\x65\x44\x60\x56\x89\xc2\x4d\xc6\x6d\x1a\x44\x14\xd9\x5c\x02\x88\x15\x2c\x50\x80\x0f\x61\xe2\xc0\xb4\xa0\x21\xcc\x75\x61\xe9\xb8\x15\x76\xc6\xac\xb8\x53\x15\x8a\x6a\x21\x9c\x3c\xa9\x8b\x0f\x8c\x56\x10\xac\x9d\x5e\xce\x01\xa7\x79\x9a\xd8\x22\x22\x80\x87\x4a\x70\x4a\x18\x9f\xfc\x3d\xf5\x6d\x09\xf9\xa9\x5b\x5c\x5e\x0e\xdb\xa7\x31\xc7\x95\xc8\x27\x21\xba\x92\xce\x61\xca\xf5\x38\xd4\xd5\xdc\xd6\xa2\x87\x89\xfa\xc3\x5b\xb2\x78\xd2\x6b\xb0\xea\x00\x42\x38\xf0\x4a\xc2\x81\x25\x53\xd3\x1f\x0e\xe6\x7e\x9b\xa9\xe6\xec\xa1\xfe\x94\xfb\xab\x09\x9a\xb5\x3c\x1f\x93\x49\x7d\x42\x83\x83\x27\xf1\xf1\xc1\xa3\x43\x1f\x0f\x44\xa0\xda\xc1\x15\x35\xa7\x4c\x9d\xe2\x55\x12\x54\x4d\x32\x99\xc1\xab\xfc\xca\x94\xfb\xa5\x68\xc3\xb2\x98\x22\x82\x8d\x64\xa6\x25\x0e\xd6\x8d\xe8\x29\x9a\x64\x5a\x82\x13\x15\x78\x13\x6a\x95\x52\x45\x90\xcb\xc1\x67\xab\x84\x83\xdf\x53\x7e\x16\x24\xbb\x1a\x17\x3b\x99\x89\xab\xdb\xcf\xc4\x2b\x6e\x11\xdb\x1a\xb6\x8d\x4b\x86\x73\xa1\x4b\x34\xce\xb6\xd6\xf2\x74\x71\xa9\xcd\x24\xdb\x9f\x91\x7b\x51\xe5\xee\x5c\x2e\xde\xb1\xee\x8c\xf7\x8a\x4b\x00\xbc\x05\x77\xe6\x32\x48\x0f\x84\x27\x00\xeb\x7b\xd9\xcf\xe8\xe5\xa8\xdd\x6d\x77\xd9\xf3\x08\xe0\x2c\x6a\x06\x79\xe9\x77\xc0\x12\x1e\xf8\xc4\x21\x38\x20\xc1\x5e\xf2\x59\x36\x1c\x98\x1b\x12\x84\x7b\xd9\x13\x75\x1c\xfa\x9d\xed\xd0\x4c\x3a\xf1\xa8\x4b\xdc\x30\xb2\xfc\xb2\x2e\xda\x43\x48\xf5\x53\x39\x4f\xf2\x8c\x9f\x9b\xae\x9d\x7e\x9c\x42\xdc\xf3\x97\x4e\xfb\x3d\x7b\x15\x4f\x3d\x5e\x99\xd8\xb2\x8a\xec\x40\xb8\xe0\xf3\xab\x4c\x84\x74\xe6\xf4\x72\xc4\x79\xe2\x6c\x8b\xc4\x92\xbd\xa1\xaa\x04\xed\x66\x16\x5a\x39\xbf\x62\xb3\xd2\x4c\xa3\xac\xd8\xc4\xd8\x6e\x48\xfc\x27\x1c\x05\x0b\x70\xd7\x1d\x56\xa3\x88\x22\x14\x0d\xa6\x9d\xce\x91\x69\xf0\xff\x08\xff\x2a\xe5\x5a\x96\x68\x6f\xb6\x87\x7a\x4f\xc8\x21\x4f\x21\x7a\x74\xb0\xfb\xbc\xcf\xba\x5f\x28\x74\x49\xfe\x76\x10\x39\xd7\x27\x8c\x9f\xac\xdf\x7f\x0b\x44\x0e\x91\x3f\x3f\x0f\xa7\xe2\xb9\xf2\x9a\x0c\xed\x27\xde\x08\xe1\xcd\xce\x9e\xf4\xa2\x2c\x85\x43\xbb\xdc\xf7\x8e\x49\x38\x26\x3e\x53\xb4\x5c\xca\x8d\x41\x13\x1c\xfc\x3d\x25\x5c\xfb\x0a\x7d\xfc\xf4\x64\x9b\xdc\x5e\x40\x82\x50\x86\x95\x05\x3c\xa5\xf0\x45\x17\x99\x44\x51\x83\x72\x93\xc0\x2b\x91\x64\xa3\x3a\x04\xa7\x77\x81\xf5\xc8\x25\x10\xff\x2e\xf0\x88\x69\x63\x69\x62\x13\xa1\xa1\xc2\xc6\x26\xdc\x25\x9f\xec\x51\x14\xa2\x80\xf0\x34\xa4\x4c\x4d\x36\xb1\xe3\xbc\x22\x8f\x7a\x53\x07\x47\xe1\xb9\x55\x68\x2a\xaa\xf1\x54\xcc\x26\xaa\x28\x62\xaa\x48\x53\x1b\x14\x70\x55\x44\xec\xa0\x5f\x1e\xbe\xa2\x88\xe7\x53\x9e\x57\xb0\x47\x9d\x0c\xdf\x67\xcc\x23\xf1\xf3\x27\x7b\xff\xeb\xd7\x7e\x4c\xdc\x19\xb3\x84\xaa\x51\xa8\xa8\x32\x0b\x46\x4d\x1a\x8c\x86\x3c\x18\x85\x7c\x17\x15\x09\x2f\xaa\x31\x5e\xa4\x19\x27\x4a\x38\x2f\x74\xb4\x17\x65\xf9\x94\x51\x57\xd4\xa3\x96\x50\xb8\x25\x52\xa5\x14\xce\x19\x2d\xbd\x44\x09\xbf\x44\x13\x82\x89\xa4\x52\x2a\xc5\x04\x5b\x89\x91\x26\xae\x5d\xd2\x6d\x61\x0b\x27\x16\x83\x35\x9a\xd2\xd9\xd2\x4c\xc5\x2e\x09\x39\x14\xb7\xff\x4f\xc0\x20\xfb\xff\xe6\xd6\xe3\x4d\xb4\xfa\xf4\x61\x3a\xca\x8a\xfb\x5d\x5e\x3f\x93\x1e\x86\x41\xeb\x21\xee\x30\x4e\xa4\xcb\x6b\x21\xd3\xb6\xd9\x3b\x75\x18\x7e\xc5\x8d\xdc\x49\x16\x8d\x19\x9a\x4e\x31\x7f\x06\xff\xb0\x21\x73\x86\x2c\x74\x57\x38\x33\xdc\x84\xb1\x13\xd8\x32\x80\x2d\x03\xd8\x32\xe6\x60\xcb\x60\xfa\x37\xf0\x64\x68\x3e\xd4\x53\x47\x28\xd0\xb3\x43\x57\x96\x57\xbf\x83\x1c\x42\xae\xd2\x5f\x35\x08\xb9\x72\xb1\xb3\x3d\x11\x57\x69\x3b\x41\xf6\xb7\x3b\x01\x57\x70\x51\x70\x51\x76\x99\x38\x21\xa0\xd8\x79\x7b\x8a\x1d\xb8\x6d\xb6\x78\x11\x5f\x51\xf7\xb7\x30\xe2\xb3\xfd\xfd\x63\x7f\x21\x97\xcc\x16\x53\x0f\xad\x90\x88\x47\x28\x37\xb9\x1a\x08\x9d\x60\x9f\x6d\x9c\x03\xa1\x18\xec\x23\x1c\xca\x7b\x0a\x04\x3b\x91\x4f\xd8\xce\xcc\xb1\xd9\x3e\xc6\x71\x90\xed\x89\x7b\xb0\x50\x10\xe6\xae\x17\xca\x52\x6e\x3c\x5c\xfc\xfe\xf9\xfa\xfe\xee\xfa\x8f\xbb\xeb\xfb\x4f\xbd\x9b\x87\xeb\xbb\x6f\x17\x9f\x0b\xab\x79\xaa\x21\x83\xb9\xa1\x0a\x87\x83\x0c\x04\xac\x4f\xe5\x00\xb4\x2f\x0d\x69\x5f\xba\xef\x0f\xdb\xdd\xd3\xb3\x76\xa7\xdd\x39\xe8\x9e\x02\x93\xd3\xc6\xdc\x9a\x0a\x3c\x6a\x4b\xe7\x51\x03\x16\x98\x9a\x2c\x30\xc2\xb6\x72\x8e\xf8\x29\x45\xf6\x8a\xb8\xed\x23\x89\x99\xa7\xb9\x6b\xc6\x21\x03\x17\xbe\x2e\x82\xb0\xc6\x67\xbb\x9c\xe8\x94\x27\x39\xb9\x16\x27\x08\xfc\x84\xce\x98\x8c\x7c\xbe\x15\x20\x6e\xca\x4e\xcc\x7d\xdb\xe5\xad\x9a\x4c\xc0\xf2\xc4\x81\x66\xb3\xa2\xba\x67\x15\x98\x4e\x98\x1e\x28\x0f\x79\x7a\x93\x51\x91\x05\x05\x0d\x5a\x7c\xbf\xf8\x68\xbb\x91\x8f\x82\x25\xe3\x69\x0c\xdb\x33\x26\x38\xf8\x3b\xfa\x67\xa6\xfe\x83\x16\xfa\xaf\xc5\x00\x5c\x7e\x07\x15\x35\xb3\x7f\x7b\xb5\xb4\x4d\x7e\x74\x56\xd1\xce\x33\xa2\x65\x8b\xbf\xef\x5f\x5c\x2e\xbf\x0e\xfc\xa0\xa9\x40\xf4\x7c\xbe\xb8\xb9\xb9\xfe\x7c\x35\xec\xfd\x51\xb3\x26\x8b\xb6\xf2\x24\xfe\x15\xb3\x6a\xda\x1f\x7e\xb9\xb8\xff\x5f\x6f\x58\xd7\xc4\x0d\xa3\x12\xe2\xd6\x41\xc2\x59\x38\x58\x02\x4c\x46\xda\x9d\xcd\x30\x9f\x32\x2d\x50\x6b\x41\x42\x33\xe5\x89\x79\x10\x25\x05\x22\x9d\x8d\xbb\x19\xfa\xf1\x35\x1a\x73\xcd\xa8\x14\xcc\x86\x7c\x98\x9f\xf8\x95\xad\x82\x4d\xe7\x0b\x9a\x37\xf8\x79\xc6\xd1\xbd\xe2\xd0\xb0\x44\x5e\x22\xa0\x24\x9a\x87\x92\x08\xa8\x77\x80\x7a\x07\xa8\x77\x80\x7a\x07\xa8\x77\x80\x7a\x07\xa8\x77\x80\x7a\x67\x65\xd4\x3b\x39\x3a\x8a\x13\xa0\xa3\x00\x3a\x0a\xa0\xa3\x40\x40\x47\x01\x74\x14\x40\x47\xb1\x40\x3a\x0a\xdb\xc3\x93\x47\x87\x9a\xcf\xcb\xa5\xa8\xd0\xa6\x06\xde\x0a\xe0\xad\x00\xde\x0a\xe0\xad\x00\xde\x0a\xe0\xad\x00\xde\x0a\xe0\xad\x00\xde\x0a\xe0\xad\x00\xde\x0a\xe0\xad\x00\xde\x0a\xe0\xad\x00\xde\x8a\x5c\x5e\xc0\x5b\x01\xbc\x15\xc0\x5b\x01\xbc\x15\xc0\x5b\x01\xbc\x15\xc0\x5b\x01\xbc\x15\x2b\xe1\xad\x98\x75\xe2\x2c\x52\xcd\x64\xb7\xc8\x0c\x09\x90\x5d\x00\xd9\x05\x90\x5d\x00\xd9\x05\x90\x5d\x00\xd9\xc5\x76\x91\x5d\x5c\xc6\x46\x47\xde\x17\x08\x8f\x46\x3e\x19\x49\xd5\x3a\x5a\x7a\x4c\xfc\xb3\x7d\x67\x41\x35\xbe\xde\x5f\x0f\xfb\xb7\x57\xe5\x91\xf2\xfa\xa0\x74\xe0\xda\x00\xae\x8d\xb8\x06\xc0\xb5\x01\x5c\x1b\xc0\xb5\x91\xae\x13\x70\x6d\x00\xd7\x06\x70\x6d\x00\xd7\x46\xba\xb5\xc0\xb5\x01\x5c\x1b\xc0\xb5\x01\x5c\x1b\xc0\xb5\x91\xfe\x01\xd7\x46\xb6\x16\xc0\xb5\x01\x5c\x1b\xf2\x07\x5c\x1b\xc0\xb5\x91\xe6\xda\x90\x2e\x89\xf7\x3c\xb3\xc8\xb8\x79\x10\x9d\xf1\x07\x07\xcf\x96\x65\x98\xbe\x15\xc8\x1b\xca\x81\x9a\x03\xa8\x39\x80\x9a\x03\xa8\x39\x80\x9a\x03\xa8\x39\x80\x9a\x03\xa8\x39\x80\x9a\x63\xb0\xfe\xd4\x1c\x2b\xed\xb4\x3a\x53\x6d\x39\x1d\x96\x9b\x67\x25\x33\x4c\x9d\x5b\x79\x06\x13\x23\x31\x07\x09\x32\x13\x19\x97\xf4\x20\xd5\xe3\x6f\xdd\xee\x49\x3f\x4e\x32\x9b\xeb\x64\xc9\x7b\x86\x59\xba\xbc\x88\xe9\xc4\x73\x06\x75\x02\x0d\x0a\xd0\xa0\x00\x0d\x0a\xd0\xa0\x00\x0d\x4a\xfc\x0e\x68\x50\x66\xd0\xa0\xf0\xb6\xb1\xba\xca\x90\x85\xc2\x35\x02\xfc\x28\xc0\x8f\xb2\x6d\xfc\x28\x1b\x48\xdc\xd1\x84\xb3\xa3\x86\x3c\x5a\x84\x0e\x36\x1f\x4b\xc7\xdc\x5a\xd0\x5a\xd1\x73\x6c\x13\x33\x47\xf5\x36\x03\xb1\xc6\xa0\x26\xb1\xc6\xac\x0d\xa2\x74\x6d\x97\x7a\x93\xd8\x29\x6e\x1c\x5d\x05\xdb\x03\xb1\x4a\x5a\xc2\xff\x4f\xb8\xe7\x86\xec\xe9\x50\xea\xbb\x43\x91\xb9\xea\x38\x08\x34\x17\x73\xd3\x5c\x24\x61\x04\xec\xcb\x2f\x0f\x5f\x59\x09\xd3\x80\x54\x26\x75\x78\x21\xe1\x78\x38\x09\xa7\xb2\x79\x9c\xcf\x61\xd0\xca\x13\x3a\x38\x01\xd1\x7c\xd1\x3d\x3e\xe9\x64\x52\x0f\x76\x86\x7e\xa3\xbb\x20\xfa\x0d\x35\xc1\x5a\xb1\x64\x48\x9a\x8f\xe1\xf0\xf2\xa6\x37\xfc\xf2\xf0\x75\x38\xac\x46\xa3\x51\x99\x48\x03\xa8\x34\x96\x4c\xa5\x51\xa5\x26\x8f\xd8\xb5\xbe\xdb\x56\x38\xce\xd5\x45\x53\xa0\x92\x18\x88\x3b\x90\x42\xdc\x31\x5b\xc0\x73\x84\x4b\x89\xf7\x22\x8e\x0f\x26\xfd\xca\xd9\x3d\xde\x88\xd6\x03\x7b\x5e\x50\xaa\xf9\x96\xa9\x0b\xc0\xe5\x01\x5c\x1e\x6b\xc6\xe5\xa1\xe5\x9a\x40\x28\x4b\x93\x71\x8e\x1c\xdb\x9d\xfe\x88\x12\x00\xa1\x05\x10\x5a\x44\xa9\x80\xd0\xa2\x90\xd0\x22\x82\x80\x4b\x07\x07\xc1\x8d\xb2\x43\xe6\x92\xd0\x88\x26\x40\x94\xbc\x29\xff\x05\x10\x5f\x00\xf1\x05\x10\x5f\xf0\x61\x63\xfb\x7a\x89\x54\x2f\xd8\xb7\x99\xee\x51\x3c\x44\x5f\x1e\xbe\xbe\xe1\xb8\x44\x46\x84\x6c\x33\x80\xbf\x43\x97\x9d\xc6\x71\xbe\x69\x44\xd5\x1e\xba\xb0\x2c\x26\x80\xff\x70\xc8\x0f\xf4\x8d\x37\x1d\x5d\xf9\x36\x53\xb3\xb8\x72\x26\x90\x86\xa5\xf0\x88\xcf\x90\x1f\x7d\x75\xed\x1f\xe8\x8a\x4e\xb0\xed\xa2\x7b\x6a\x3e\x13\x6e\xdc\xc2\x8e\x43\xbf\xa3\x2b\xfb\x99\xed\x30\x52\xd0\xcb\x6d\x94\x91\x7d\x8e\x08\x1d\x54\x04\x65\x53\x51\x0a\x41\xc2\xbd\x0a\xdd\xbf\xba\x26\xba\xe8\xeb\x22\x10\x9e\x1c\xf2\xe3\x85\x3a\x86\xc5\xab\xa6\xc7\x61\xd6\x84\x6f\x34\x1f\xc1\x56\x12\xc6\xa3\xcb\xdc\xc8\xc7\x65\xe6\x06\x2a\x5f\x8d\x66\x03\x50\x4e\xbd\x92\xda\xf8\x01\xe9\x4a\xba\x36\x40\xba\x52\xaf\x34\x20\x5d\x01\xd2\x15\x20\x5d\x59\x03\xd2\x95\xbd\x1a\xb4\x2b\x7b\x40\xbc\x02\xc4\x2b\x1b\x43\xbc\x92\x8c\xba\xd2\xc6\x41\xcb\x76\x9f\x68\x39\x51\x0a\xf0\xae\xf0\x5f\x19\xef\x0a\xf9\xa1\x18\x2a\xe3\x5c\xa4\x8d\x21\xfb\xdc\x40\x9c\xa4\xa1\x40\x61\x13\x29\x0c\x3e\x35\x0c\x56\x66\xa6\x9d\xc0\xb9\x12\xff\x80\x73\x65\xf3\x39\x57\x90\x82\x0f\x62\xfb\x13\xbc\xba\x66\xf6\x73\x5d\xcb\xd9\xc2\xc1\x23\xe2\x86\xea\xe6\x08\x08\x5c\x80\xc0\x65\xfe\x3a\x00\x81\x0b\x10\xb8\x2c\x86\xc0\xc5\xc5\x3a\x92\x10\xa0\x6e\x01\xea\x96\x35\xa6\x6e\xc9\xb7\x42\x6e\xf7\x8b\x8d\xcc\x9a\x29\xa9\x97\xe6\x05\x15\x11\x63\x77\x65\xfb\xfc\x40\xfd\x35\x3f\x80\x28\x3f\x67\xb5\x0a\x40\xb6\xdf\xf3\x96\x73\xdd\xc0\x97\x5a\x98\xeb\x56\x39\x72\xe6\x94\x16\xef\x3e\xf7\xfd\xb9\xb2\xfd\xcc\xcd\x5c\x51\x7b\x12\xdb\x78\x9c\x52\xe3\xc8\x99\xeb\x85\x69\xc0\x57\x18\xdb\x79\x28\x27\xc6\xfc\x4f\x87\x84\x86\xf4\x38\x3a\x10\xf0\x74\xc0\x93\xc5\x1d\xf6\xff\xa6\x56\x10\xfb\x81\xa2\x2a\x7e\xcf\xab\x21\xb9\xd9\x19\x8e\x9b\x25\xb3\xb4\x44\x61\x6f\x6f\x43\xd4\x72\xf1\xe5\xf7\x04\x9c\x13\xae\x96\x74\x2c\x9e\x4a\xd7\x22\xdf\xac\xa2\x6f\x32\x21\x76\x6f\xc2\xfd\xc3\xaa\x10\xdd\x40\x94\xee\x24\x6d\x00\xa0\x42\xfb\xa3\xbc\x7e\x5d\xd5\x4c\x1a\x63\xd7\x72\xde\xa6\xa7\xd8\x54\xfa\xc4\x8b\xcf\xcf\x25\x59\x2d\xdd\x64\x1a\xcb\x4f\x56\xd3\x3f\x32\x42\xf5\xad\xfa\xe7\x52\xd1\x3c\xd4\xfe\x49\x05\xce\xa6\xfb\x27\x52\x56\x56\xb0\xda\x64\x48\xe0\x1b\x51\x6c\xf5\x49\x24\xed\x15\x66\x2d\x25\x46\x31\x45\xa8\xe5\xf1\xc4\x2b\xe9\x93\xb7\x97\x6d\x0b\xe7\x1f\x5b\xc5\x5a\xdb\x24\xee\xb1\xe5\xf7\xc7\x76\xf0\x8e\x2d\xbf\x9f\xb6\x9b\x73\x6c\xf9\xfd\xb7\x0b\x7c\x63\x2b\xee\xc5\xad\xe1\x1a\x5b\x7e\xbf\x6d\x19\xcf\xd8\xca\x3a\x6c\x4b\x39\xc6\xa4\x1d\xf2\xa8\x7b\x74\x5c\x81\x6e\xec\x32\x4e\x0c\xc4\x63\x40\x3c\xb6\x9e\xc4\x63\x7b\xdc\x51\xea\xb2\x77\x75\xc7\xe3\xa3\x0d\x8b\x84\xc4\x8c\x98\x6a\xd8\x14\xc2\xd6\x44\x8e\x0f\x36\x4d\x12\x04\x09\xab\x00\x9a\x60\xaf\xc1\x90\x88\x8f\xd9\xb7\x8b\xeb\x75\x60\x44\x03\x46\x34\x60\x44\x03\x46\xb4\xf4\x0b\x60\x44\x03\x46\xb4\x0a\x80\x00\x8c\x68\xc0\x88\x36\x5b\x1e\x01\x23\x1a\x30\xa2\x01\x23\x1a\x30\xa2\x01\x23\x1a\x30\xa2\x01\x23\x9a\x94\x28\xc0\x88\x06\x8c\x68\xc0\x88\x06\x8c\x68\x08\x18\xd1\x80\x11\x0d\x18\xd1\xe2\x4c\x80\x11\x0d\x18\xd1\x80\x11\x0d\x18\xd1\x80\x11\x2d\xfe\x01\x23\x1a\x30\xa2\x69\x1b\x0c\x8c\x68\xf2\x07\x8c\x68\xc0\x88\x06\x8c\x68\xa5\x03\x00\x8c\x68\xc0\x88\x06\x8c\x68\xc0\x88\x06\x8c\x68\xc0\x88\x06\x8c\x68\xba\x3a\x01\x23\x1a\x30\xa2\x01\x23\x1a\x30\xa2\x01\x23\x1a\x30\xa2\x01\x23\x1a\x30\xa2\xa5\x7f\xc0\x88\xa6\xfe\x80\x11\x0d\x18\xd1\x80\x11\x0d\x18\xd1\x10\x30\xa2\x01\x23\x9a\xd2\x1e\x60\x44\x03\xce\x18\xe0\x1f\x02\x06\xb4\x35\x60\x40\x03\xf6\x18\xe0\x72\x7c\x4b\x2e\x47\x60\xdf\x01\xf6\x9d\xb7\x63\xdf\x01\x8e\x31\x60\x5c\x05\x8e\x4c\xe0\x58\xcd\xf7\xcf\x2a\x39\x56\x81\xf7\x11\x18\xd1\x76\x99\x11\x8d\x77\x51\x8e\x16\xed\x54\x10\xa0\x41\x78\xf6\xb6\x87\x67\xbf\x59\x70\x36\x04\x41\x8b\x5f\x95\x20\xe8\x8a\xe1\xea\x49\x2e\x32\x38\x39\x8a\x59\xdf\xcf\x87\xac\xab\x71\x37\x68\xfd\xa2\xab\x37\x21\x78\x5a\x53\xe4\xf3\x59\x30\xc4\xd3\x70\x3c\x0c\xe9\x33\x71\xa3\x36\xdf\x5f\xdf\x7d\xeb\x5d\x5e\x5f\x5c\x5e\xde\x7e\xbd\x79\x18\x3e\xdc\xfe\x79\x7d\xc3\xda\x5c\x56\x91\xd2\xe8\xeb\xcd\x8f\xbd\x8e\xfe\xdc\xb1\x68\xe8\x75\x31\xfc\xef\x8e\xfd\x0c\xce\x4e\x1a\x9c\x9d\xac\xa6\xef\x36\x6b\xef\xb5\x9a\x3e\xd9\x0e\x9b\xd8\x6a\xfa\x6a\xbb\x4f\x4f\x56\xd3\x87\xbb\x70\x02\xf0\x06\x3d\xb9\x35\xa7\x00\xab\xe9\xbb\x2d\xb3\x3a\xad\xb4\xd3\x36\xd7\xf2\x54\x89\x34\xbf\x1a\xab\x3d\x4b\xd7\x73\x4d\x67\x6a\x11\x84\x23\x38\xf5\xa9\x43\xe2\x88\x42\xc5\xfb\x3f\x21\xf0\xd9\xe7\xb4\x41\xae\x85\x1e\x6d\xd7\x42\x76\x98\xd0\x62\x26\x89\xd3\x8c\xd4\x3a\x72\xcc\x85\x30\xe8\xcb\xb8\x04\xa0\xd1\xd7\x14\xf2\xe6\x34\xfa\xc0\x56\x0f\x6c\xf5\xd9\x75\x00\x6c\xf5\xc0\x56\xbf\x32\xb6\x7a\x20\xa5\x07\x52\x7a\x20\xa5\x07\x52\x7a\x20\xa5\x5f\x38\x29\xfd\x46\xd1\xd1\x2f\x90\x82\x7d\xb9\xd4\xf6\xea\x96\x66\x09\xcc\xf6\x32\xeb\x75\xed\xdb\xba\xf4\xf6\xc0\x7e\x0b\xec\xb7\xc0\x7e\xbb\x56\xec\xb7\x51\x18\x88\xd2\x7f\x6c\x79\x5c\xe4\x1f\x0b\x5e\x0b\xdb\x27\xd6\x15\x6f\xf3\x7d\xdc\xac\xde\xc8\xa5\xf1\x63\xc1\xae\xca\xd6\x8a\xfa\x69\x9a\x01\xf7\x81\xf8\x93\x3c\x3b\x86\x21\x26\xfa\xf5\x0f\xcf\x27\x42\x61\xcc\x25\x89\x79\x60\x1f\x49\x98\x6d\x2c\xcd\x51\x2c\xa0\x14\xb3\xeb\x0d\x0d\x7b\x39\xb6\x3e\x14\x05\x2c\xeb\xca\x12\xe5\x7d\xb7\x5d\x8b\x7e\x8f\x33\xdf\x78\xe2\xdf\x07\xf1\x9c\x08\x37\x22\x41\x6a\x84\x02\x1a\xcd\xf4\x98\x59\x29\x9a\x5b\xdc\x3e\x83\x43\xce\x3e\x15\xda\x13\x52\xc0\xaa\xbb\x03\x6c\xc0\x71\xb9\xc2\xdd\xc7\x60\x12\x3f\xbb\xe2\xa8\x1b\xfa\xd4\xf1\x1c\x9c\xe5\xe7\x49\x32\x1d\xb4\x64\xb6\xa9\xf7\x51\x8d\x06\x2d\xa5\x2f\x5b\x35\x8a\x26\xa1\x69\x35\x2f\x32\xea\x06\x65\x62\x01\xf5\x31\x50\x1f\x2b\xb3\x05\xa8\x8f\x81\xfa\x58\xdb\xe0\xb5\xa0\x3e\x06\xce\x60\x5d\x76\x39\xc6\x06\x60\xfe\x5d\x00\xf3\x2f\xf0\xf7\x02\x7f\x2f\xf0\xf7\x02\x7f\xef\xae\xf2\xf7\x56\x67\xb2\xad\xcc\x63\x0b\x64\xb4\x40\x46\xbb\x08\x32\xda\x6b\x57\xdf\xcc\x20\xb4\xe8\x34\xac\x5a\x24\xb0\xd1\x36\xe1\x68\x8d\x3e\xcd\xbd\x5e\x02\x45\x2b\x30\xd2\x46\x3f\x60\xa4\x05\x46\x5a\x60\xa4\x05\x46\x5a\x60\xa4\x05\x46\x5a\x60\xa4\x05\x46\x5a\x60\xa4\x05\x46\x5a\x60\xa4\x9d\xc1\x48\x9b\xe7\x58\xd1\x7b\x55\x35\x71\xf2\xc9\x71\xcc\xbc\x03\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\x5d\xc9\xc0\x31\xa3\xbe\x02\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\xe0\x98\x01\x8e\x19\x4d\x23\x80\x63\x26\x79\x07\x1c\x33\x33\x38\x66\x78\xdb\x74\x17\xa4\x01\xf9\x0c\x90\xcf\x00\xf9\x0c\x90\xcf\x00\xf9\x0c\x90\xcf\x00\xf9\x0c\x90\xcf\x00\xf9\x0c\x02\xf2\x19\x7d\x73\x11\x90\xcf\x00\xf9\x0c\x90\xcf\x00\xf9\x0c\x90\xcf\x00\xf9\x0c\x90\xcf\x00\xf9\x0c\x90\xcf\xa4\x7f\x40\x3e\x03\xe4\x33\x40\x3e\xa3\xbe\x00\xf2\x19\x5d\x37\x02\xf9\x4c\x41\x25\x80\x7c\x26\xf5\x12\xc8\x67\x80\x7c\x46\x3b\x8e\x40\x3e\x53\x54\x33\x20\x9f\x01\xf2\x19\x20\x9f\x01\xf2\x99\xb9\x9b\x0b\xe4\x33\x40\x3e\x03\xe4\x33\x40\x3e\x03\xe4\x33\xe5\x35\x05\xf2\x19\x20\x9f\x01\xf2\x19\x20\x9f\x01\xf2\x19\x20\x9f\x59\x1f\xf2\x19\x23\x51\x44\x04\x0f\xcd\x9e\x60\x88\x79\x90\x5e\x30\xdf\xba\xdd\x77\xfd\x38\x49\xc5\x48\xa2\xe5\x35\xa0\x46\xa0\xd2\x72\x82\x87\x20\x6e\x08\xe2\x86\x20\x6e\x08\xe2\x86\x20\x6e\x08\xe2\x86\x20\x6e\x08\xe2\x86\x20\x6e\x08\xe2\x86\x74\xf2\x08\xe2\x86\x56\x10\x37\x24\xf6\x31\x1b\x15\x3d\xb4\xd4\x88\x1f\x6e\x04\x89\xb6\x29\x4b\x08\xf9\xd9\x9e\x68\x1f\xa0\x51\xdd\x58\x1a\xd5\xc1\xdb\x11\xa9\x26\xee\x5d\xec\xcb\x2f\x0f\x5f\x59\x09\xd3\x80\x54\xa6\x0d\x7d\x21\xe1\x78\x38\x09\xa7\xb2\x79\x9c\x31\x94\x65\x9f\xa5\x0c\x4d\x2c\x4e\xea\x17\xdd\xe3\x93\x4e\x26\xf5\x00\x08\x5e\x6b\x12\xbc\xaa\x09\xd6\x8a\x87\x55\x12\xc9\x0e\x87\x97\x37\xbd\xe1\x97\x87\xaf\xc3\xe1\x06\x12\xb5\x96\xe5\x53\xca\xb3\xba\x0d\x4c\xab\x55\x6a\xf2\x88\x5d\xeb\xbb\x6d\x85\xe3\x5c\x5d\x34\x05\x2a\x89\x81\xd7\x55\xfe\x07\xc2\x79\x21\x9c\x17\xc2\x79\x37\x31\x9c\x57\x1b\x6e\x8a\x50\x36\x52\xf6\x1c\x39\xb6\x3b\xfd\x11\x25\xd8\xf8\x98\xd6\x2f\xf8\x99\xa0\x80\x29\x8d\x02\x6b\x78\xf7\x46\x9d\xc9\x7d\xe7\x99\x66\xc6\xf7\x31\xa9\xb3\xe9\x9d\x0a\x5f\x85\x88\x4e\x88\xe8\x84\x88\x4e\x88\xe8\xdc\x90\x88\x4e\x36\x6c\x6c\x5f\x2f\x91\xea\x05\xfb\x36\xd3\x3d\x8a\x87\xe8\xcb\xc3\xd7\x37\x1c\x97\xc8\x88\x90\x6d\x06\x04\xa6\xea\xb2\xd3\x38\x6e\x35\xf5\xe5\x85\x90\xd6\x05\x84\xb4\x36\x1f\x00\x08\x86\x85\x60\x58\x08\x86\x85\x60\xd8\x5d\x0d\x86\x15\x3a\x66\x74\xd0\xd2\xeb\xbf\x1c\x23\x8f\x52\x47\xf1\x25\x4e\xdc\x47\xf8\x71\x05\x75\x09\x22\x7c\x63\xd6\x46\x7d\x6a\x71\xdf\x3d\x69\xfd\xcf\xe6\x2c\xcf\x76\xb8\xae\xc0\x0f\x0b\xf8\x0e\xbb\x8d\x2e\xc7\xd8\x15\x91\x8d\xec\x21\xaf\x9a\x74\x71\x50\x0f\xcb\x44\xae\x63\xfc\x92\xcb\xd7\xa5\x72\x07\xd9\x16\x3b\x91\x60\x4c\xa7\x8e\x85\x9e\xd8\x98\x88\xb3\x1b\x64\x18\xd2\x82\x66\x98\xb6\x95\x55\x4c\xf6\x6a\x84\x00\xef\x55\x0f\x02\x56\x62\x46\xd9\x26\x21\x0a\xdf\x0c\x28\xb7\x5f\x98\xa1\xc3\x1e\x05\xdc\xec\x57\x14\x28\x0b\xf1\xc3\xa5\x8b\x08\xe2\x87\x51\xf9\x5a\x4e\x46\x5d\x69\xe3\xa0\x65\xbb\x4f\xb4\x3c\xde\x17\xc2\x87\xf9\xaf\x2c\x7c\x98\xfc\x50\x0c\x95\x71\x2e\xd2\xc6\x90\x7d\x6e\x20\x1e\x1e\x58\xa0\xb0\x89\x14\x06\x9f\x1a\x06\x2b\x33\xd3\x4e\x08\x1d\x8e\x7f\x10\x3a\x0c\xa1\xc3\x10\x3a\x0c\xa1\xc3\x10\x3a\x5c\x5e\x53\x08\x1d\x86\xd0\x61\x08\x1d\x86\xd0\x61\x08\x1d\x86\xd0\xe1\xb2\xd0\xe1\x37\xbf\xec\x5a\x0e\xc7\xf6\xdf\x75\xbd\xe4\xdb\x9a\xa3\xb0\xb7\xb7\xb9\xb0\xf9\xe2\xcb\xef\x09\x38\x27\x77\x36\xa7\x63\xf1\xd4\x6b\x9b\xe5\x9b\x55\xf4\x4d\x26\xc4\xee\x4d\xee\x00\x67\x55\x88\x2e\x21\x48\x77\x92\x36\x00\x50\xb9\xfe\x5b\x79\xfd\xba\xaa\x99\x34\xc6\xae\xe5\xbc\x4d\x4f\xb1\xa9\xf4\x89\x17\x9f\x9f\x4b\xb2\x5a\xba\xc9\x34\x96\x9f\xac\xa6\x7f\x64\x84\xea\x5b\xf5\xcf\xa5\xa2\x79\xa8\xfd\x93\x0a\x9c\x4d\xf7\x4f\xa4\xac\xac\x60\xb5\xc9\x90\xc0\x37\xba\x6a\xbf\x4f\x22\x69\xaf\xdc\xb0\xaf\xc4\x28\xa6\x2e\xd6\xf7\x78\xe2\x95\xf4\xc9\xdb\xcb\xb6\xdf\x3f\xf6\x4b\x24\x5b\x41\x90\x67\xaa\xbb\xde\x40\xaa\xf1\xc0\xe2\xb7\x59\x67\x7d\x4a\x9d\xec\x1a\x53\xe2\x9c\xd5\xf5\xe5\xf1\xa4\xcb\xef\x8f\x54\x0c\xf9\x5b\xf4\xca\x27\x1a\x84\xd7\xb2\x02\xe9\xbe\xd1\x84\xb7\x27\x3d\xa4\xbe\x5c\x45\x3f\x69\x42\xcc\xdf\xa2\xb7\x64\x5e\xbd\xa4\x1a\xe9\x3e\x2b\x8c\x84\x4f\x7a\x2e\x9f\x64\x15\xfd\xa7\x25\x4c\x78\xf3\x1b\xf3\x75\x57\xbf\x97\x50\x3b\x14\x5c\x9c\x1f\x5d\x03\xbf\xe2\x5e\xac\x73\x11\xfc\xd2\x7a\x30\x77\x17\x7c\x01\xf5\x45\x41\xd7\xf1\x7b\xe1\x97\xdf\x6f\x0d\xe7\xdd\x72\xae\xcf\xd7\x4d\xba\x19\xd3\x6d\xe5\x13\xad\xc1\x14\x5b\x4e\x67\xe5\xe6\x57\xc9\xcc\x52\xe7\x54\x29\xc7\x98\xb4\x43\x1e\x75\x8f\x8e\x2b\xd0\x8d\x5d\xc6\x89\x81\x78\x0c\x88\xc7\xd6\x93\x78\x6c\x8f\x3b\x4a\x5d\xf6\xae\xee\x78\x7c\xb4\x61\x91\x90\x98\x11\x53\x0d\x9b\x42\xd8\x9a\xc8\xf1\xc1\xa6\x49\x82\x20\x61\x15\x40\x13\xec\x35\x18\x12\xf1\x31\xfb\x76\x71\xbd\x0e\x8c\x68\xc0\x88\x06\x8c\x68\xc0\x88\x96\x7e\x01\x8c\x68\xc0\x88\x56\x01\x10\x80\x11\x0d\x18\xd1\x66\xcb\x23\x60\x44\x03\x46\x34\x60\x44\x03\x46\x34\x60\x44\x03\x46\x34\x60\x44\x93\x12\x05\x18\xd1\x80\x11\x0d\x18\xd1\x80\x11\x0d\x01\x23\x1a\x30\xa2\x01\x23\x5a\x9c\x09\x30\xa2\x01\x23\x1a\x30\xa2\x01\x23\x1a\x30\xa2\xc5\x3f\x60\x44\x03\x46\x34\x6d\x83\x81\x11\x4d\xfe\x80\x11\x0d\x18\xd1\x80\x11\xad\x74\x00\x80\x11\x0d\x18\xd1\x80\x11\x0d\x18\xd1\x80\x11\x0d\x18\xd1\x80\x11\x4d\x57\x27\x60\x44\x03\x46\x34\x60\x44\x03\x46\x34\x60\x44\x03\x46\x34\x60\x44\x03\x46\xb4\xf4\x0f\x18\xd1\xd4\x1f\x30\xa2\x01\x23\x1a\x30\xa2\x01\x23\x1a\x02\x46\x34\x60\x44\x53\xda\x03\x8c\x68\xc0\x19\x03\xfc\x43\xc0\x80\xb6\x06\x0c\x68\xc0\x1e\x03\x5c\x8e\x6f\xc9\xe5\x08\xec\x3b\xc0\xbe\xf3\x76\xec\x3b\xc0\x31\x06\x8c\xab\xc0\x91\x09\x1c\xab\xf9\xfe\x59\x25\xc7\x2a\xf0\x3e\x02\x23\x1a\x30\xa2\x25\x8c\x68\x67\x82\xfa\x6c\x96\x87\x7f\x4c\x03\x72\x47\xf9\x22\x9e\x83\xda\x41\x76\x7e\x25\x72\xb1\x7a\x8c\x09\xd5\x18\xc0\xd0\xc2\x28\x1a\x66\x72\x05\x25\x34\x2a\x8b\xe5\xa9\x28\x6d\x02\x4a\xd3\x14\xd5\x2a\xb9\x8c\xdd\x6c\x21\x14\x6a\x4b\x26\xde\x28\xe9\x9f\xa9\x12\xa9\x56\x3a\xe4\x4b\x20\xde\x6a\x32\xf3\xb6\x80\x20\x6a\x06\x19\x54\xe1\x8b\x26\xe4\x4e\x05\x5b\x9e\x59\x3c\x39\xf5\x27\x8c\x94\x32\x2a\xab\x8e\x2f\x30\x71\x9d\xf9\x74\x8a\x41\x77\x06\xa9\x4e\xd2\xfe\xc4\xe9\x69\x6e\x6e\x9d\xaa\x99\xce\x47\xb1\x53\xab\x94\xca\x4c\x3b\x6f\xce\xb5\x53\x26\x3f\x37\x8d\x70\x47\xd7\xa7\x02\xed\x6a\x74\x69\xcd\x8e\x03\xd6\x9e\x41\x4d\xd6\x9e\x98\x19\x17\xc9\x7e\x46\x2f\x47\xed\x6e\xbb\xcb\x9e\x47\x30\x67\x51\x33\xc8\xcb\xab\x03\x96\xf0\xc0\x27\x0e\xc1\x01\x09\xf6\x92\xcf\xb2\x31\xff\xa6\x33\xb5\x88\x88\x81\x78\xa2\x8e\x43\xbf\xdb\xee\x08\x99\x74\xe2\x51\x97\xb8\x61\xa4\x15\xb3\x2e\xda\x43\x28\x3a\x3f\x63\xf5\x3c\x4f\xf2\x8c\x9f\x9b\xae\x9d\x7e\x9c\xc2\xdd\xf3\x97\x4e\xfb\x3d\x7b\x15\x1f\xcb\x65\xf8\x85\x4c\xec\xa2\x47\xb2\xde\x1c\x43\xc0\x15\x34\x1f\x57\x50\x33\x4e\x9e\xc1\x2a\xa8\x74\x3a\xdb\x4e\xa5\x53\xc0\x94\x53\x91\x27\x67\xc1\x2c\x39\x39\x8e\x9c\x5c\x71\xcf\x67\xc1\x90\xa1\xe8\x30\xa4\xcf\xc4\x8d\xda\x7a\x7f\x7d\xf7\xad\x77\x79\x7d\x71\x79\x79\xfb\xf5\xe6\x61\xf8\x70\xfb\xe7\xf5\x0d\x6b\x6b\x59\x25\x4a\x29\x76\x64\x41\x9e\x3d\xf4\x29\x95\xad\x8b\xc0\x35\xd5\xb5\xb2\xe4\xe1\xa7\xdb\xfb\x87\xe1\xf0\x5c\xfb\xae\x7f\x7b\xf7\x90\xeb\xf9\x6d\x20\xf1\x89\xfe\xdc\x6a\x5a\x9d\x7d\xf5\x83\x6f\x37\x3d\x9e\x49\x2e\xf5\xb7\x9b\xde\xaf\x5f\xa9\xa4\x7d\xea\x87\xfa\xb4\xec\x4d\xe2\xe8\xf2\x4b\xe9\xbc\x58\xff\x2a\x65\xe1\x89\xc5\xed\x0c\x2e\x1e\xa9\xba\xbd\x11\x25\x4f\x62\xea\x9b\xad\x26\x97\x09\x5a\x60\xe7\x59\x05\x3b\xcf\xdc\x8c\x35\x91\xeb\x86\x92\x27\x9b\x3d\x17\xf9\xc7\x22\x16\xc5\xf6\x89\x75\xc5\xf9\x45\xee\x63\x6a\x95\xde\xc8\xa5\xf1\x63\xc1\x88\xc2\xa6\x52\x1a\x36\x55\xd6\x9a\x07\xe2\x4f\xf2\x11\x2d\x86\x18\xfc\xeb\x1f\x9e\x4f\x82\x20\xd3\xd0\x24\x11\xf7\xd6\x65\x13\xb3\x9d\xa5\xd5\xc9\xa7\x56\xd9\x58\x6e\x68\xd8\xcb\x45\xd8\xa3\xc8\xc9\x58\x57\x96\x28\xef\xbb\xed\x5a\xf4\x7b\x9c\xf9\xc6\x90\xf5\xcc\x64\x92\x29\x62\xf3\x79\x10\xcf\x89\x08\x6f\x14\x91\x8a\x28\xa0\x91\x7a\x18\x87\x4b\x46\x93\x8f\x87\x89\xe1\x90\x87\x94\x86\xf6\x84\x14\x50\xe5\xec\x00\xc5\x4f\x5c\xae\x50\xeb\x0c\xb6\xd5\xcd\x2e\x49\xea\x86\x3e\x75\x3c\x07\x67\x83\xee\x92\x4c\x07\x2d\x99\x6d\xea\x7d\x54\xa3\x41\x4b\xe9\xcb\x56\x8d\xa2\x49\x68\x5a\xcd\x8b\x8c\xba\x21\x4e\xb0\x43\xcc\x43\xe5\x24\x0b\x1a\xb9\x0e\x54\x0b\xe9\xda\x2c\x80\x6a\x61\x57\x42\x60\xaf\x5d\x7d\x33\x83\xd0\xa2\xd3\xb0\x6a\x91\x8d\x62\x60\x77\x90\x34\x61\x8d\x22\xde\xd7\x9d\xbf\x21\x89\x7a\xff\x76\x8a\x82\xa9\xc7\x76\x99\xac\xb2\xdc\x93\x73\x59\x81\xef\xab\x65\x38\x59\x0e\x45\xc5\x9b\x53\xa1\xac\x2f\x97\xc2\xf6\x47\xdd\xcf\x88\x45\x8f\x3e\xcd\xbd\x2e\x08\x45\xdf\xb6\xd0\xfa\x4d\x8a\x9d\xdf\x96\x70\xf6\x19\xfc\x97\x89\xf9\x69\xf3\x69\x30\x1b\x10\x5a\xf2\x53\x37\x60\xb4\xcc\x57\xfa\xcd\x59\x29\x37\x90\x56\x11\xc8\x1e\xf8\x0f\xc8\x1e\xe6\xac\x03\x90\x3d\xbc\x31\xd9\x83\xc8\xdb\x9f\x66\xb0\x24\xc3\x01\xa1\xfb\x66\x3e\xe6\x06\x54\x81\x8f\x20\x57\x8d\x12\xfe\x81\x02\xa5\xa0\x9c\x20\x22\x36\x70\x01\x4d\x04\xcd\xf5\xd0\x76\xf0\x27\x94\x92\x4e\x64\x66\xf6\x4c\xfe\x8b\x7c\x0e\x0b\xa4\xad\x58\x35\x3b\x07\xf7\xdb\x92\xb7\x93\x3a\x8e\x50\x91\x0b\x82\x1d\x22\x93\x01\x93\xd5\x8a\xb7\xbf\x30\xe3\x1a\xfc\x06\xcd\x89\x58\x45\xf2\xc0\x78\x49\x51\x16\x3b\x11\xe9\xbb\xec\x4e\xdc\x66\x9e\x87\xd5\xf4\xdd\x66\xc5\x89\xad\xa6\x4f\xb6\x9b\xbd\x60\x35\x7d\xb8\x0b\x11\xf8\xab\xe9\xc9\x2d\x8b\x5c\x7c\x83\xe9\xb7\x35\xd4\x05\xab\xe9\xbb\xed\xa0\x2f\xd0\xf6\x55\x72\x97\x71\x36\xee\xa0\x89\xf7\x5c\x14\x61\x4a\x7d\x62\xb9\x81\xf1\xd2\x6d\x77\x4f\x45\x90\x29\x2f\x5a\xd2\x77\x95\xc4\x9a\x36\xaf\x9a\x28\xb2\xac\x72\xf3\xde\xf0\x9c\x29\x37\xed\x27\x98\x72\xef\x78\xa4\x34\x0c\x42\x5f\xf8\xb2\x8a\x72\x0c\x79\x64\x15\x0c\xb2\x11\x17\x71\xcd\xa3\x20\xac\x6c\x1c\x53\x12\xc3\x94\x3e\xf7\xc9\x04\x58\xa6\x23\x38\x93\xa8\xac\x6c\x70\x6c\x12\xe0\x94\x44\x52\xc5\x51\x54\xd5\xcb\x8e\xe3\xb3\xd4\xfc\x46\x5a\x3a\x91\x85\xdc\xa4\x9d\x77\x24\xd4\x65\x9b\x1a\x06\x3c\x0d\xa9\x70\xb9\x4c\x1f\xc0\x2d\x7e\xe4\x16\x1a\x1b\x94\xcd\xbd\x4e\x8c\xd0\xec\x55\x90\xa3\xa6\xd3\x2f\x39\x25\x8c\xa5\xd9\x6a\x8b\xbf\xb8\xa4\x3e\x79\xb2\x1d\x12\xfb\x54\xb7\xcf\x4f\x8e\x54\xc7\x68\xe2\xfb\xd4\x57\x2c\x2a\x63\x82\x9d\x50\x71\x16\xf2\x09\xb6\x14\x07\xb8\x64\xc0\x50\xe2\x85\x2d\x18\x13\x7f\xfd\x42\x3f\x7f\x72\x82\xc0\x3b\xc2\x30\x95\x5c\xf6\xae\xee\x02\xf4\xeb\xd7\xcf\x9f\xba\x47\x92\x03\xf0\xe7\x4f\xce\xd5\x6e\x60\xcb\xf2\xdb\xd8\xf7\x30\xb2\xbd\x53\xfe\xc7\xa0\x25\x13\xf2\xfe\x4a\xfb\xbf\x73\x97\x42\xdb\xe5\x36\xe2\x94\x39\xee\x09\x3b\x4e\x38\xf6\xe9\x74\x34\x46\xfa\x5c\xe3\xc4\x8a\x05\xdb\xf3\xe9\x84\x84\x63\x32\x0d\xd0\xf9\xfb\xee\xc9\xd1\xc0\x1d\x84\x11\xdb\xe1\x57\x2f\x08\x7d\x82\x27\x5c\x81\x21\x3e\x6b\x46\xca\xd5\xf2\x89\xfa\xdf\xb1\x6f\xa1\x36\xfa\xf9\x53\x3a\x68\xda\xb1\x83\xa6\xe6\x63\xd6\x26\xfb\x09\xfd\xc3\xe6\xfd\xc5\xbd\x2f\x7f\xfe\x6c\xb3\xff\x8b\x82\xbe\x42\x2d\x45\x62\x52\xce\xa0\xc5\x0d\x33\x0c\x13\x9c\x17\x7e\xec\xc4\xc3\x6b\x42\x75\x72\xc5\xd6\x12\x6c\x8e\x09\x3a\x52\x8e\x48\x1d\x4a\x3d\x75\x78\x1d\x8a\x2d\xf5\x2d\xb6\x1e\xb1\x83\xdd\xc8\x20\xab\x9b\xa8\xf1\x0d\xac\xd2\x29\x3c\x76\xba\x69\x3a\x5d\x8b\xfc\xbe\x79\x22\x2b\xda\x47\xa4\xc1\x42\x64\x3e\x68\xb1\x19\x7e\x75\x73\xcf\xba\x20\x51\x02\x36\xc2\xc9\xbb\x8e\x17\xbb\xda\x13\xcd\x9d\xc3\xd3\xfd\x59\xe8\x1f\x4e\x4c\x93\x4e\xbc\x76\x74\x02\xa3\x75\x13\x17\xde\xe1\x16\x35\x9f\x89\x7f\x20\x41\x5a\xe7\x2b\x5e\x7c\x01\x63\x7c\x59\x49\x7c\x07\xe3\x6c\x0d\x25\xaa\xa0\xc6\x4b\x39\x9a\x65\xf9\x55\xa0\xf7\x59\x8e\x5d\x5f\x35\xfe\xbe\x35\x1c\x5e\xe7\xf0\xfa\x6d\xe6\xe6\x5c\x70\x5d\xac\xd6\xb9\x3d\x73\x67\xec\x72\x5c\xc8\xe5\x54\xda\xcc\x98\x80\x22\xbf\x67\x11\x14\x93\xff\xac\x78\x5c\x34\xfe\xbe\x46\x1e\x01\xc5\x4f\x39\x56\x15\xe8\x95\x73\x61\xe0\x29\xfa\x53\xc7\x11\x3b\xdc\x73\xd4\x7b\xba\xa1\x61\xdf\x27\x41\x8a\x17\x58\xef\x8b\xe4\xd8\x13\x3b\x77\xdc\x3d\x21\x13\xea\xbf\x9e\xa3\xee\xbb\xce\x17\x3b\x3b\x1a\x1a\xbf\x25\xee\xb5\xd4\xed\xa4\xbd\x96\x92\x6c\xd2\xb9\x60\x7f\x14\x88\xd3\x5f\x43\xc8\xa3\xfd\x48\x4a\xc9\xb6\x1f\x44\x8a\x48\xfa\x98\xb7\xe0\xf4\x2c\xe9\x38\x86\x00\x86\x48\xa5\xd6\x23\x7b\x0e\x96\xeb\xe1\x62\x1f\x1d\x8f\xfa\x99\xb2\xe2\x91\xeb\x73\x87\x23\x26\xfe\x93\x6c\x44\x45\x32\x79\x7b\x3e\x0d\xa9\x49\x9d\x73\xf4\xf5\xaa\x5f\x3f\x2b\x23\x34\x3d\x7d\x76\x0f\x97\x65\xd9\x09\xd5\x24\x9b\xe1\x84\x84\xbe\x6d\x16\xd4\x2f\x95\x61\xb1\xcf\x99\xde\x45\x4b\x9e\x7f\x64\x55\x42\x14\xfb\x66\x9d\x75\xce\x32\x7e\x62\x81\x39\x26\xac\x52\x9f\x1e\x1e\x52\xce\x8e\x5a\x27\xb3\xd3\xd4\xc7\xa1\x3d\x21\x74\x1a\xc6\x6f\x4f\xd4\x97\xc1\xd4\x34\x49\x10\x28\xfe\x67\xdd\xb4\xda\x97\x75\x4f\x3b\x49\xab\xb0\x05\xce\x69\xa5\xed\xce\xa8\xbe\x4a\xb3\xbb\x67\xdd\x2a\xcd\x2e\x73\x61\xe0\x37\x57\xf6\x23\x2f\x86\xeb\xc0\xc4\x22\x94\x5d\xe3\xe6\xa5\x46\x6b\x66\x6a\x8a\xad\xec\x35\x3c\x06\xba\xb9\x7e\x18\xfe\xde\xbb\xb9\x8a\x62\x52\xd3\xef\x2d\x9f\x66\x4f\xce\x0c\x56\x19\xdd\xd2\xb9\xa3\x34\xfc\xc3\x76\x88\xdc\x13\xa5\x16\x92\xe5\x06\x11\x34\x5d\x09\xe9\x1f\xbd\xc9\x9f\x0b\xcf\x5c\xce\x33\xce\xf4\xf2\x8b\x1b\x21\x3b\x24\x39\xe8\x8f\x02\x78\x22\xa8\xc9\xa0\xb7\x18\xd6\xe4\x6d\xc9\x06\x4c\x6e\xf1\xb4\xfa\xac\xaa\x44\x15\x2b\xb4\x79\xd5\x2a\xd9\x64\x08\xfd\xc9\xe7\x41\x32\x7c\x4d\xb7\x74\x29\x02\xd3\xc7\x5e\xe9\xe6\xb9\x8a\x9a\x1c\x69\x59\x52\x67\xca\x3a\xc3\xd6\xd0\xa9\xd3\x3a\x87\xb6\x70\x59\x58\xaf\x7f\xae\xee\x0e\x6f\xee\xef\xf9\xd6\x47\xc8\xb7\x04\x7f\x8d\x2c\xb8\x7a\x29\xd0\xcc\x81\xac\xa1\x43\xd0\xa2\x6f\x24\xf0\x19\x3a\x90\xf4\x32\x68\x9a\xf9\x6a\x31\xfb\x1d\x03\x4f\x43\xca\x96\xb5\x50\x23\x6a\x87\xbc\x6a\x72\x69\x16\xff\xaa\xad\xce\x1c\x01\xa6\xda\xfc\x62\xad\x7f\x01\x3a\x7c\x2a\xeb\xbc\x3a\x3f\x87\x02\xbc\xf3\x4a\xaa\x6e\x2b\x54\xba\x83\x29\xca\xa8\x7c\xf7\xd2\x40\x47\xce\x4e\x27\xa4\x53\x93\x2f\xa6\x21\xbd\xe7\x89\x72\x0a\x73\x6d\xaf\x7c\xa9\xe1\x0e\x5a\x87\x9d\x49\xd6\x65\x17\x29\x8a\xee\xa0\xd5\x65\xaa\xae\x92\x42\x77\xff\x9d\x81\x62\xa4\xf5\x7c\xca\x00\xc6\xa6\x2e\x76\x72\xab\x24\x4a\x6d\x18\x31\x20\x7c\xc8\xe0\x81\x9a\x48\x08\xc6\x09\xf6\x3e\x14\x2d\xbb\x24\x6d\x88\xfd\x11\x09\x3f\x24\xe8\xa4\xd3\x8a\x39\xeb\x8b\x1b\x01\x35\xb2\x03\xe9\x50\xea\xb0\x8f\x85\x59\xf9\xbf\xf3\xbb\xb2\x27\xd4\x27\x7c\x41\x06\xff\x83\xe9\xf2\xfc\xaf\x3e\xf1\xef\x88\xe7\xd8\x26\x1e\xb4\xa2\x0b\x48\x2d\xca\xa3\x21\xd3\x5e\xcb\x9c\xdb\x46\x64\x1c\x4c\xb0\xe3\x88\x8c\xf7\x65\x9c\xe9\xac\x7c\x84\xc9\xe6\xb3\xed\x12\xec\x5f\xc4\xcd\xed\x63\x1f\x4f\x82\xb4\xdf\x29\x6b\xb6\xb4\x3d\x18\x1e\x7f\xff\xe1\xe7\xa0\xe5\xf0\x2f\x07\xad\xf3\x9f\x3f\x0b\x73\xc9\x59\x76\xaa\x65\xa8\xe9\x88\xf3\xee\xe1\xd9\xbe\xa6\x61\xe7\xc7\xfb\x83\xd6\xc4\x76\x59\x8a\xfd\x41\xcb\x13\x77\xca\xdf\xdb\xee\xc8\x21\x7d\x6a\xbb\xe1\x1f\x42\x67\x1d\xb4\xce\x39\xd7\x46\x3e\x18\x3b\xaa\x90\x43\x47\x21\x0d\x42\x8b\xf8\xfe\x87\xac\xaf\x2b\x7b\xff\xf2\xe1\xb0\x0a\xee\xce\x56\x77\x2a\x1c\xf1\x54\x94\x6a\xbc\xac\x39\x58\xf3\xb4\x55\x48\x9b\xe6\x53\x35\xa9\x45\x5c\xca\xb9\x26\xf9\x01\x4a\xf4\x4e\x9c\xa2\xb0\xe7\xc2\x81\x9f\xcd\x54\x71\x26\x23\x52\x54\xcc\xd4\x17\x63\xcf\x9a\x22\x43\xb6\x1d\xe2\x07\x07\xbc\x92\x9a\xb2\x46\x44\x16\x25\x09\x0f\xf5\x65\x25\x87\xa9\x83\xd6\xfe\xa0\xc5\x74\x91\x82\xe2\x93\xe0\xc7\xb8\x4c\x96\xbb\xac\x55\x40\xc2\x79\xab\x52\x50\x6e\x0c\x52\xba\x0e\x8d\x73\x96\x04\x90\x2c\x85\x7e\x76\xd4\xe6\xe3\xab\x3b\x49\x94\xa3\x1c\x2e\x5a\x0b\x0e\x73\xca\x67\x7c\xf1\x9c\x57\xcf\xa1\x2a\x1f\x30\x65\x72\xaf\x74\x7e\x95\xa8\x44\x9a\x13\xdf\x77\x70\xe2\x0b\x27\xbe\x70\xe2\x0b\x27\xbe\x35\x4f\x7c\xd3\xe7\xab\x0e\x9e\x10\x6b\x6a\x3e\xa3\x13\x25\x61\x4a\xdb\x86\x53\x61\x38\x15\xde\xb0\x53\xe1\x48\x11\x92\xb6\x63\x38\x24\x86\x43\x62\x38\x24\x86\x43\xe2\x55\xda\xdf\xb8\x8c\xba\x70\x43\x7b\xf1\x4d\x36\xc4\x92\xd6\x8c\x7a\xf4\xab\xde\x60\x89\x05\xe5\x2d\x2b\x25\xc6\x63\x5b\xbf\x18\x48\xd2\x11\xf7\x88\xaf\x36\x8f\x3a\x74\xf4\xfa\x27\x2f\x2d\xd5\xa9\x63\x1a\x84\x6a\x08\x2d\x9c\xab\xc3\xb9\x3a\x9c\xab\xc3\xb9\x3a\x9c\xab\xc3\xb9\x3a\x9c\xab\xc3\xb9\x3a\x9c\xab\xc3\xb9\xfa\xda\xe9\xf5\x70\xae\xae\xfc\xe0\x5c\x1d\xce\xd5\x37\xe1\x5c\x9d\x65\x2d\xf0\xf8\x43\x39\x12\xf0\x53\xf7\x7d\x2d\x10\x7e\x48\xe1\x20\x82\x13\x7b\x38\xb1\x87\x13\x7b\x38\xb1\xaf\x71\x62\x7f\xb6\x36\x07\xf6\x39\xed\xb4\xd6\x8e\x87\x6f\x9a\xa9\x3b\xc1\x2e\x1e\x11\x3f\x03\x94\x13\x6a\x91\x73\x74\x47\x4c\xea\x9a\xfa\x3d\xe2\x9b\x39\x07\xd4\xab\x37\x38\x13\x6c\xae\x33\x41\x85\x91\xbe\x76\x83\xa9\x4f\x12\xe5\x1a\xfc\x0f\x1a\x83\x47\xcd\xbe\x5e\x5c\xc4\xfa\xba\x3b\x23\x4c\xe5\xe9\xff\x20\x65\x67\xad\xec\xa0\x80\x50\x18\x3a\xa9\xb3\x7b\x70\x59\xd8\x68\x97\x85\x19\x72\xb5\x9e\x74\x82\x28\x79\x70\x80\x98\x6d\x09\x04\x07\x08\x70\x80\x80\x28\x79\x38\xcd\x87\xd3\x7c\x38\xcd\x8f\x5e\x36\x3d\xcd\x9f\xbf\xdd\x70\x9c\x1f\x15\x00\xc7\xf9\x6b\x7a\x9c\xbf\x44\x25\x1c\x8e\xff\xe1\xf8\x1f\x8e\xff\x37\x5b\xab\x85\xe3\x7f\xe5\x07\xc7\xff\x70\xfc\xbf\x9a\xe3\xff\xed\x8a\x99\x2f\x3d\xdb\x58\xa0\x7e\x02\x27\xfd\x4b\x39\xe9\x87\x03\x7e\x38\xe0\x4f\x0e\xf8\xa3\xcb\x8b\x5e\xba\xed\xee\x89\x38\xe1\xaf\x88\x36\x73\xac\x4c\xc9\xb1\xaf\x19\x82\xf8\x6a\xbf\xa2\xc5\xf8\x5b\x32\x95\x7f\xd3\xcc\xa8\xdf\x3c\x6a\x45\xdb\xf4\xe8\x62\x85\xdf\x32\x13\xeb\xb7\x69\x40\xb2\xdf\xf2\xe3\x22\xfe\x7d\xe0\xb5\xa3\xcb\xa2\xa6\x6e\x72\x7b\xdf\x6f\xb9\x59\x9d\x68\x30\xc9\xad\xc8\x79\x2d\x24\x39\x22\x57\x0f\xb1\xc5\x9b\x11\x09\x9b\x66\x1a\x1f\x8c\xe7\x73\x8d\x8e\xdb\xc5\xbf\xe4\x91\xfb\x1c\xa5\x1c\x04\x21\x0e\xa7\x05\x85\x79\xf2\x44\x7f\x31\xab\xb2\xca\xbc\x58\xe8\x91\x76\x9c\x6d\x8d\xb3\x6c\xe5\xf6\xc9\xca\x8c\x12\xb5\xa4\x71\x85\x02\x62\x65\x22\x57\x52\xb2\x3c\xb2\x77\x59\xf4\xf9\x55\xc4\x7c\x65\x44\xb7\x91\x68\x0a\x2f\x9a\xff\x7a\x1b\x48\xa5\xb3\x25\x6e\x1a\x23\x56\xdf\xa7\x4f\xb6\x13\xad\xb4\xf4\x51\x53\x8d\xdc\xe4\x17\x4a\x6e\xfa\xcc\xb0\xe7\x61\x7f\x42\xfd\x24\x37\xcd\x0e\x51\x5b\x35\x7f\xea\x86\xf6\x84\x34\xc8\x4e\x57\xb7\x5c\x6e\xf1\x2e\x5e\xbd\x1a\x34\x36\x12\xa6\xad\x6d\x46\x62\x4a\x8b\x1e\x04\xc4\xf4\xa3\x2b\x51\x0c\x44\x26\x5e\xf8\x7a\x15\x5d\x95\x67\xc4\x17\xc4\xf1\xe1\x12\x8d\xfb\x24\x1f\x25\x79\x7a\x38\x1c\xf7\x7d\xf2\x64\xff\x38\x8f\xed\xfa\xf1\xe5\x79\xad\x92\x54\xa9\xdb\x57\x8b\x12\xfa\xd3\xf8\x46\xd5\xc8\xa9\x47\x6f\x7e\x8c\xdb\xcc\xaf\xe9\xf3\x03\x7e\xfd\x32\xbf\x04\x85\x83\x8d\x3f\x75\x2f\x02\xf6\x22\xf2\xc4\x99\x3a\x4c\x3f\x64\x4f\x2f\x5c\x1e\x96\x15\x4c\x3d\xcf\x21\x4c\x69\xc1\x4e\x0a\xd9\xf2\x49\x9f\x02\x81\x14\x45\xef\xf7\x50\x6c\xbb\x45\x89\xf1\x36\xee\xc5\x72\xc3\xae\x1c\xda\x8b\xd9\x29\xf7\xd0\xa5\x62\xfc\x55\x06\x49\x7d\xcc\xc4\xd0\xcd\xf5\xc3\xf0\xe2\xea\x4b\xef\x46\xc8\x9d\xa8\x04\x2b\x9b\xf0\xbf\x44\x07\x4b\x53\x85\x4f\x3d\xdd\xfb\x3d\x7e\x33\x4c\xc6\x43\x8b\xcf\x94\xde\x95\x52\x39\xf6\xa4\xd7\xbf\xcc\x3c\x91\xd7\xf0\x24\xd6\x62\xfe\xa1\x62\xc4\x9b\xd8\xee\x39\x92\xf6\xf3\x09\xfe\x71\x8e\x4e\x4f\x4e\x8e\x4e\x44\xb9\xf7\xd7\x9f\x23\xfb\x4b\x40\xf8\x9f\x72\x04\xe2\x57\x7c\x0b\xea\x06\xc4\x42\xb6\x8b\x2e\x31\xbe\xef\xab\x43\xf4\x5b\x34\x46\xbf\xa5\x65\x4c\xb2\x28\xb2\x28\x5b\x64\xe0\xcd\x5c\xd2\x58\x71\x6f\x13\xda\xc4\x17\xf6\x97\x18\x05\x14\x7c\x8e\xcb\x31\x5d\x9b\x6f\xd5\xdb\xff\x27\x60\xf5\x90\xfe\x40\xb1\x97\xcd\xa0\xc5\xe3\x84\x5b\x6c\x79\x98\x8f\x7e\x67\xd0\xda\x4f\x5e\x99\x6e\xd4\x80\x41\xeb\x7c\xd0\xea\xb4\x8f\xda\xdd\x54\x02\xcf\x99\x8e\x6c\xa6\xb8\x33\x9d\x38\xde\x1d\xa6\x5c\x78\x06\xad\xf0\xd5\x93\x05\xc4\x4b\x6f\x3f\x9d\xc2\x22\x0e\x19\x71\x2d\xfa\x3c\xfd\x31\x7b\x39\xc6\xb6\xef\xd9\xee\x17\xd6\xd0\x96\x18\xea\xfd\x6c\x1a\x3b\x90\x07\x03\x1f\x71\x48\xbe\xe3\xd7\x28\xa1\x9a\x4e\xd9\xde\xfe\xda\xaf\x50\x59\x8f\xfa\xe1\x04\x7b\xb9\xca\xaa\x47\x24\xda\x0a\xb3\x0f\xbf\x08\x07\xba\x60\x56\x45\xa2\x3f\xa5\xca\xc7\xff\xed\x92\xb0\x7c\xc4\xe4\xb4\x17\xd5\x4c\x8c\xd9\x97\xbd\xab\xbb\x5f\xbf\x52\xe3\xf3\xbb\xbc\xce\x3a\x5d\xcd\x41\xeb\x21\x6e\xe5\xcf\x9f\x6d\x79\x21\xb5\x4c\xdb\x66\xef\x52\xd9\xb0\x0f\xbe\xdd\xf4\x78\x26\xb9\xd4\xdf\x6e\x7a\xbf\x7e\xa5\x92\xb2\xf5\xa7\x4f\xcb\xde\x24\x56\x86\x5f\x71\x93\x6b\x28\x0a\x57\x98\x4c\xa8\xcb\xef\xdd\x9a\xb1\x9a\xe6\x58\x49\xb1\x3d\x39\x51\xc1\x22\xb9\x58\xdb\x36\x9d\xcd\x5b\x9f\x3f\xca\xfa\xb2\x6c\xa8\x35\x58\x6b\xe8\xce\xa7\x56\xad\xb0\x37\x34\x2c\x25\x41\xd0\xbd\xe2\x9b\x07\xdb\xb5\xe8\xf7\x38\x73\x8d\x38\x10\xb6\x3a\xd5\xeb\x64\x86\xa1\x7e\x39\x4e\x2b\x19\xe3\x9a\xde\xcc\x5d\x64\x95\x9e\xe7\xc8\x22\x73\x15\x7d\xa6\x1e\x25\xf6\x6e\xfd\x45\xf6\x89\xc5\x3b\x67\xe0\xce\x5b\x9d\x0d\x94\xbf\xc1\x3e\x7e\xc9\x5d\x38\xd4\xb4\xc9\xb5\xf6\xa9\x87\xd9\xcb\xed\x95\xbe\x17\xde\x98\xd1\x55\xfa\x6e\x48\xfc\x27\x6c\xa6\xea\xc4\x73\x65\x0f\x3f\x24\x40\xa4\x4d\x98\x33\x7e\xea\xcd\xf5\x65\xbe\x2b\x83\x16\xf7\x5e\xc9\x58\xea\x13\x2b\xfd\x49\xc6\x4a\x5f\xe0\x37\xd3\x28\xaf\xb2\x83\x7f\xad\x16\x1f\x97\x56\x7c\xd4\xcf\xcf\xfa\xd1\xbf\x06\xad\x58\xd5\x4b\xd1\x8f\x10\xf7\x45\x73\xe2\x1e\x5d\xcc\xaf\x66\x55\x74\xb3\x7c\xe1\x5d\xfc\x45\xf7\xf0\x17\x17\x77\xdf\xcf\xdc\xbe\xbf\xb0\x32\x33\x77\xff\xcf\x70\x20\xca\xdc\xd5\x5d\x78\x41\xbd\x72\x97\x78\x51\xfa\x82\x1b\xc3\x67\xdc\xe9\x5d\xe9\x5a\xfb\x28\x0f\x79\x73\xba\x91\xaa\x85\x72\xa6\x75\xd3\x2b\x5c\xe4\x6c\x5e\x1c\x28\xdf\xb7\x83\x71\xc9\xec\xd8\x43\x0f\x63\x82\x2e\x6f\x7a\xd1\x9d\xa1\x72\xd7\xa8\x5e\xdf\x4e\x5d\x44\xb0\x39\x46\x05\x37\xdd\x5f\xde\xf4\x86\x37\xd7\x0f\x7f\xdd\xde\xfd\x39\xbc\xbc\xbd\xf9\xa3\xf7\xb1\xca\x70\xc7\x9b\xd3\x3f\xc9\xab\x6e\xd4\x8b\xf5\x6f\xf5\xc7\xa5\x5a\x4a\x85\xd6\xd7\x8f\xd5\x4b\x3f\xfb\xc5\x8a\x8e\xca\xe0\x0e\xda\xc2\x06\x5f\x79\x66\x95\xcc\x14\x26\xf5\x66\x4d\x17\x96\xc6\x90\x77\xe1\x97\xe6\xa3\x5c\x7d\x1f\xcf\x97\x62\x07\x9b\xf9\xef\xa6\xcf\xb4\xab\xd1\x2d\xfa\x73\xdd\x73\x5f\x3c\xf8\xb3\xfa\xae\xbc\xae\x4a\x47\xb2\xf7\xd3\x94\xd3\xf7\xba\x39\x8a\x1f\x76\xfe\x9b\xa2\xa3\x68\x2c\xef\xa7\x60\x79\x07\xcb\x3b\x58\xde\x37\xda\xf2\x2e\x2e\xea\x06\xab\x3b\x58\xdd\xc1\xea\x0e\x56\x77\xb0\xba\x83\xd5\x1d\xac\xee\x60\x75\x9f\xe1\x4a\xfe\xc6\xa6\xf6\x3a\x8e\xe4\x4a\x45\xc0\x42\x0f\x16\xfa\x38\x31\x58\xe8\x51\x94\x17\x58\xe8\xc1\x42\x0f\x16\x7a\x25\x63\xb0\xd0\x8b\x1f\x58\xe8\xc1\x42\x0f\x16\xfa\x0d\xb6\xd0\x9f\xcd\x67\xa0\x5f\x4c\x7c\xc2\x06\x9a\x62\x17\x1d\xbe\x33\xe3\x94\x22\x01\x78\x38\x19\x90\xa1\x1e\xd9\x49\xb9\x48\x23\x8e\xbc\x3a\x45\x8e\x78\x3e\xa2\x7d\xc1\x86\x9c\xf9\xec\x38\x33\xcd\x38\x95\xac\x38\x39\x9b\xc8\x13\xf5\x4d\x72\x61\x59\x6c\x5b\x28\xa9\x7c\xab\x18\x71\xe6\xb2\xe1\x54\x36\xe1\xcc\xb2\xe0\x80\x01\x67\x0d\xdc\x26\xeb\xae\x22\x70\x9d\x54\x7f\xeb\x6e\x98\x59\x4f\xfb\x4b\x05\x4b\xc9\x22\x4d\x23\x8b\xe7\xbf\xe2\x56\x82\xa3\x42\x3e\xab\x93\x4e\xe7\x4b\x76\x12\x16\xb2\x62\x9d\x14\xe5\x72\x7a\xfc\x45\xed\xea\xd9\xe6\x96\xd4\xee\x30\x67\xfa\x69\xed\x0f\x5a\x89\x91\x47\xfc\x2b\x6b\xdd\x91\x69\x4a\x4c\x36\xea\x2e\x33\xe2\xad\x5c\x70\x1d\xb2\x25\xa4\x2d\x43\x55\x6d\x2d\x69\xe1\x02\xe6\x12\x30\x97\x80\xb9\x64\x27\xcc\x25\xda\x03\x6c\x54\x60\xf5\x97\xb0\x3a\x22\x28\x52\x16\xa5\xae\x85\x06\xad\x97\x6e\xbb\x7b\xc8\xb9\x8b\x93\xa9\x58\x4c\xc1\x59\xcc\x48\x53\xed\xab\x0c\xf9\x8d\x86\x13\x78\x06\x1f\x8f\xe4\x6b\xf0\x1c\xec\x56\x20\xc3\x29\xaf\x70\x69\x41\x24\x34\xad\x7a\x05\xe8\xda\x96\x62\x55\x52\x4a\xcc\x14\xe6\xd2\xd0\xc8\xdc\x84\xd7\x84\xfb\x07\x6c\x68\xbb\x65\x43\x5b\xba\x27\x9e\x34\xd2\xb1\x67\xf2\x86\x8a\xc8\x8d\x76\x4e\x02\xb7\x88\xd1\x6e\x4e\x06\x37\x6d\x36\x8d\x4e\xde\x0b\x2a\x34\x3f\x71\x74\x11\x89\x9b\x48\x0e\x9b\xbc\x9a\xa7\xef\xb9\xaa\x2c\x8e\xb8\x4d\xb7\x5f\x2b\x1c\xc5\xcd\xe5\x79\xfb\x73\xfa\xb8\xe3\x3c\x6f\x25\x83\x8a\x0a\x89\xde\xb2\x44\xf0\x08\x98\xde\x36\xf2\xa2\xb7\x4a\x64\x70\xf3\x09\xd6\x39\x85\xdb\xb2\xb8\xde\x96\x1f\xf9\x52\xc6\xf8\xa5\xed\x94\x1d\xa1\x83\x83\x8b\xdf\xe6\x9a\x25\x35\x89\xe1\x0a\xe1\x7d\x31\xcc\x70\x05\xd9\xd7\xa4\x86\x5b\x14\xc6\xac\x03\xb0\x2c\x68\x2f\x30\xcf\x06\x60\xc9\x2d\x8c\x75\xf6\x3d\x14\x2d\x4b\xa6\x79\x86\x5c\x99\xb7\x9f\x6c\x62\xa1\x31\xf1\x89\x4c\xd2\x6d\xa3\x9e\x8b\xa8\x6f\x11\x1f\x85\x14\x4d\xf0\x33\x41\xfc\xaa\x14\xf4\x45\x14\x87\x2c\xca\xbf\xf6\xa3\x12\x50\x38\xb6\x83\x38\x6b\xc4\x85\x25\x09\x89\xdf\x16\x19\x1e\xb6\x23\xc2\x78\xa6\x63\x74\xe5\xd3\xa3\x36\xfa\xcb\x76\x1c\xf4\x48\x50\x38\x75\x45\x9c\x81\x4f\xb0\xc3\xaf\x05\x60\x48\x7f\x75\x73\x8f\xf8\x24\x64\xaa\xa2\xc3\xd5\x42\x83\x4d\x58\xa6\x49\xd8\x01\x0a\xa7\x3e\xfb\x8a\xba\x3c\xbf\xa5\x5d\x00\x54\xb8\xb1\xbd\x9f\xfa\x4c\x25\xed\xb2\x2d\x6d\xfc\x30\xb5\xdb\xed\x6c\xc6\xe5\x3f\x52\x67\xf7\xb5\x51\x5d\xd1\x5d\x3d\x86\xb8\xfe\x27\x7d\xe1\xcf\x7a\x1e\x5c\x69\x36\xa5\x1e\xb5\x2e\xdc\xd0\xd6\xee\x4b\x3d\x9f\x3c\x11\xbf\xd9\xc6\xd4\x40\xdf\x89\x3d\x1a\x87\xfc\xde\x94\x8c\x79\x86\x5a\x51\x71\x6c\xc3\x9a\xdb\x74\xf0\x61\xd3\x90\x94\x47\xbf\x0a\xbb\xd9\x78\x13\x29\x47\x5c\xbf\x07\x4d\x76\x60\xfa\x0d\x6c\xbc\x85\x65\x72\x33\x9e\x32\xaa\xe5\x5d\xfc\x42\xea\x51\x87\x8e\x5e\xff\xe4\x25\xa6\x26\xc9\x98\x06\x61\xfa\x34\x05\xac\x00\xa9\xf2\x56\x67\x05\xd0\x6f\xeb\x2b\x5d\x7c\x55\x76\xed\xd5\x0a\x2d\x03\x59\x2b\xb0\x91\xd5\x8b\x84\xe2\xa7\x6e\xc2\x75\x76\xd7\xbc\x70\x4e\x0a\x16\x3b\xf2\xf4\xc1\xc3\x8c\xb3\xec\x82\xdb\x9c\xa4\x35\xa2\xa2\x0d\x62\x0f\x3d\xdc\x5e\xdd\x32\x05\x29\x94\x46\x05\x79\x72\x8d\xbe\xb3\x8d\xf8\x77\xf2\xdb\x0b\x41\x9e\x08\x52\xb5\x50\x38\x26\x49\xad\xd0\x13\xf5\xc5\xc6\x3c\x9d\xa1\xd4\x12\x82\x7d\x96\xdc\x45\x01\x09\x23\x3b\x07\xfa\x20\x32\x67\x32\xfc\x99\x10\x4f\x08\xe9\x24\xc3\xb4\x91\x79\x0f\x8d\xa6\xd8\xc7\x6e\x48\x88\x85\x4c\x07\x07\x41\x1b\x5d\x4e\x7d\x9f\xb8\xa1\xf3\xba\x9f\xfd\xf6\x09\x3b\x4e\x80\x6c\x37\xa4\xac\xd8\x74\x3e\x83\xd6\xe3\xd4\x0f\x42\x26\x02\x07\x2d\x64\x32\x09\xcb\x1a\x1a\xf0\xa4\xbc\x2f\x1d\x12\x22\x8b\x92\xc0\xfd\x2d\x44\x8f\xd8\x7c\xa6\x4f\x4f\xe8\xc9\xa7\x13\xd6\x6b\x21\xf6\x43\x2e\xe0\xc3\x94\x11\x61\xf5\x17\x5c\xcd\x75\x75\x92\x39\x26\xe6\xf3\x41\x6e\xde\xa0\xf8\x66\x91\x6e\xa7\x73\x72\x9c\x7e\xb1\x4d\x17\x29\xc5\xdf\xe9\xda\x7e\xd6\x39\xeb\x56\x6b\xfa\x1e\xfa\x4e\x90\x47\xc5\x51\xae\x47\x2d\xc4\xa7\xc7\xd4\xe3\x8b\x81\xcd\xa6\x3f\x93\xfb\x51\x27\x98\x1b\xb1\xa4\xb6\x8c\xb0\x6b\xa5\x73\xa2\xae\xf3\xca\x96\xc7\xd4\xe3\x5f\x26\x55\xe4\xa5\x22\x71\x11\x28\xa2\xae\xc9\xb4\x59\x1c\xfe\x16\xa0\x58\x93\x6b\xcf\x1c\x8e\xa3\x8a\xa3\xa1\x09\xe8\xb1\xf8\x6d\xae\x1f\xf2\xd7\xbb\xb6\x33\xe9\xdc\xc0\x60\xfd\xf7\x81\x4d\x9d\xa3\xf4\x3b\x79\xcb\x92\x65\xfb\x1f\x0e\x0a\x61\x32\xb6\x0e\x45\x0f\x0a\xdc\x2d\xee\x6e\xbf\x5c\x3f\x7c\xba\xfe\x7a\x3f\xec\xdf\xde\x3d\xa8\x0d\x53\xce\x9d\x3b\x27\x27\xaa\xe8\x98\x79\xc5\x5a\xa6\xd2\xea\xd5\x68\x0e\xe5\x57\x41\x2a\xb3\xa4\xe2\x5d\x6b\x25\x79\x86\xa6\x57\x96\x6f\xf9\xa5\x6b\xa2\x75\xb9\x7c\xab\xdf\xba\x36\xe3\xdc\xbd\x70\x84\xd2\x67\xe7\x05\xc9\x94\x2b\x8e\xd2\x81\x60\x89\x50\xba\xba\xb9\xff\x82\x83\xbf\x73\x42\x69\x01\x90\x96\x2b\x15\x6d\x1a\xa4\xe5\x97\x60\x6a\x51\x18\x48\x35\xb1\xa6\x9e\x8b\x71\xb8\x62\x8b\x8c\xfb\xc1\x9c\x05\xac\x3b\xa2\x2e\x31\x5c\xec\xba\xaf\xa9\x0f\xa4\x38\xbb\x12\x09\x32\xe6\x5a\xb6\x1c\x53\xff\x7a\xce\xac\x69\x6c\x8e\x89\x11\xd8\xff\x26\x6c\xc5\x77\xd2\x2f\x1d\x3a\x32\x9e\xb0\x69\x3b\x76\xf8\xfa\x21\x9d\x8d\x21\x90\xec\xc3\x41\x1e\x51\x0e\xba\x87\xef\xda\x9d\x76\xa7\xdd\xdd\x93\x6b\x27\xb9\x51\x39\x73\x63\x74\xf4\x4a\xec\xd6\xf2\x6f\x0b\x0a\x2c\x2e\x23\xda\xab\x15\x5c\xa4\xac\xe6\xa3\x5e\x1a\x9d\xcf\x4e\xfb\x85\xbc\x59\x7a\x56\xe1\xea\x84\x2d\x85\xab\xb5\xb9\x11\x72\x0f\x05\x84\x9c\xf3\xf5\x19\x9c\x1f\x1c\x8c\xec\x70\x3c\x7d\x6c\x9b\x74\x72\x90\x6c\x14\xd4\x3f\xed\x20\x98\x92\xe0\xe0\xf0\x7d\xe7\xe4\x84\x4b\x49\x8b\x84\xd8\x76\x82\x59\x9a\x69\x33\xe7\xc7\xc3\x94\xc6\xb4\x18\xd8\x9b\xb9\xb4\xa2\xfc\x02\xdb\x22\x26\x2e\x3b\x23\xbc\x17\x29\x16\x85\x83\x1a\x01\xb0\xf1\xd8\x97\x03\xbf\x42\xf4\x33\x3c\xd6\x5b\x1f\xa4\x4e\xbb\x1f\xaf\xb4\x73\xbe\xd2\xf6\x95\x7d\xab\x3c\x33\x6b\x07\x2f\x66\x3b\x0f\x42\xfb\x27\xfb\x17\xba\x8c\xe5\x58\x2b\x19\x37\xcf\xb5\x92\x3a\x72\x3c\x8f\x88\xaf\xb5\x8a\xf4\xcb\x05\x25\x3b\x92\x78\x79\xe5\xaf\xd8\x64\x10\x70\x45\xd9\x4e\x69\x1a\x90\xf8\xa8\xf6\xea\xe6\x3e\x56\x0f\xcb\xce\xfd\x97\x7c\xe3\xe5\x9a\xde\x4d\x29\x97\xff\xc6\xdf\x4d\x59\x32\x76\x4a\x8c\x56\xc3\xd1\x93\x9f\x44\xf2\xff\xab\x17\x84\x3e\xc1\x13\x4e\xb5\xc5\xdb\x1b\x09\xfa\x69\xfe\x4d\x1c\xd6\xf3\xaf\x9f\x3f\xa5\x3d\xd7\x8e\xed\xb9\x9a\x9c\x7e\xfd\xe2\x96\xe2\x7f\xd8\xbf\x7e\xed\x47\x34\x02\x3f\x7f\x7a\xbe\xed\x86\x4f\x68\xd0\xfa\x6f\x7f\x0f\x5a\xa8\xcd\x1e\xf1\x37\xff\x95\x3e\x68\x8a\x6a\x78\x1f\x4e\x1f\xc5\x72\x8f\x6a\x16\x24\x4f\x92\x40\xa3\x9f\xe8\x23\x09\xff\x14\x28\xa5\x7e\x92\xfb\x3e\x77\xcf\x91\xe2\x26\x76\x56\xee\x25\x96\x0e\xea\x59\x03\x57\x31\xf0\xf3\xca\x26\xda\x5e\x0b\x2f\xf8\x79\xc9\x1f\xf8\x79\x81\x9f\xd7\x1a\xfb\x79\x81\x13\x17\x38\x71\xad\x91\x13\x17\xf8\x6e\x81\xef\xd6\x0e\xf8\x6e\x95\x04\xdf\x83\x1b\x17\xb8\x71\x81\x1b\x17\xb8\x71\x81\x1b\x17\xb8\x71\xad\xfb\x26\x1f\xdc\xb8\xe4\x0f\xdc\xb8\xc0\x8d\x0b\xdc\xb8\xc0\x8d\x2b\xca\x09\xdc\xb8\xc0\x8d\x0b\xdc\xb8\xc0\x8d\x0b\xdc\xb8\xc0\x8d\x0b\xdc\xb8\xc0\x8d\x0b\xdc\xb8\xc0\x8d\x2b\xe9\x36\x70\xe3\xda\x38\xa3\x76\x3e\x73\x70\xe3\x02\x37\xae\x39\xdc\xb8\xe4\xea\x17\x75\xae\x4f\xcc\x5f\xf3\x3a\xd4\xe2\x33\x49\xcd\x80\xca\xaa\x49\x85\xe7\x5c\x9e\xea\xb1\x02\x0c\xc9\x1f\x4e\xfd\x45\x53\xf7\x17\x14\x52\x83\xc8\x3f\x5d\xeb\xb2\xc9\xd8\xbc\x03\xeb\xf5\x9c\xc1\x5b\xc3\xb6\xfe\xe5\xf5\x69\xdc\x93\xe9\x2e\x8c\xcf\x14\x0d\xec\xd9\x4a\x0d\x88\x1b\xca\x23\xfb\xb8\x2e\x6f\xdf\xad\x5a\xe7\x89\xe2\x53\xef\x6c\x2d\x22\x6f\x88\xec\xbd\x03\xc9\x9d\x03\x69\x99\x99\x5c\x94\xa0\xdc\x6e\xa0\x5e\x41\x10\x24\xa0\x99\xdc\x71\x99\xdc\x47\xa0\x5c\xa7\x10\xdd\x80\x10\xdf\x7e\xa0\xab\x83\xea\xd2\xa0\xab\x8d\xe2\xd1\x50\xa3\xa0\x39\x3b\xb8\x6c\xe6\x16\xf5\xf3\x32\x16\x79\xb6\x90\xa5\xcc\xc6\x52\x47\x02\xec\xd9\x3e\x19\xd9\xfc\x18\xb7\x78\xb5\x5f\xf4\x7b\x65\x5a\x8b\x4c\xdd\x96\x75\x8a\xbb\x40\xd1\x02\x84\xda\x21\x64\x45\x51\x03\xca\x54\x9e\x91\xe8\xef\x6c\x09\x7c\xc2\x44\x42\x5a\x56\x99\xe9\xfa\x9c\xcf\x9a\xdc\x3f\xdb\xde\xc3\xe7\xfb\x6f\xc4\xb7\x9f\x5e\x93\x63\x07\x9e\x57\xdf\xb7\xa9\x6f\x87\xaf\x5f\x6c\xd7\x9e\x4c\x27\xf1\x49\xa2\xcc\x2f\x7a\x2d\x9f\xcf\xe7\x80\x31\x07\x72\xd4\xa3\xb6\xa9\x5e\x50\x91\x12\x99\x9b\x91\xea\x89\xb3\x74\x9b\x93\xfe\x7d\x89\x4b\xc3\xcf\x9f\xa9\x57\x0d\x0f\xdf\xb3\x45\x17\xf9\x13\x64\x9c\x0e\x2a\x3b\x17\x44\x75\x9a\x75\xb0\x5f\x3c\x3d\xcb\x0e\xfd\x75\xe9\xc1\x25\x3b\xfd\x5b\x83\xd3\xda\xf5\x74\x9d\xd0\xed\x25\xf5\x13\x70\x7d\xbd\xc3\xf5\xf5\x55\xcc\x43\xa8\xfd\x45\x24\x11\xfb\x3a\x6e\x1e\x42\xa5\x37\x4a\x5c\x38\xdf\xf1\xab\x32\x1f\xb4\xb7\x71\x16\x95\xab\x6c\x1f\x14\xf6\xf1\x4e\xfb\x28\x45\x3e\x8e\xe2\xfb\x38\x1d\x12\x1a\x91\xe0\x30\x42\xd5\x74\xa7\xa6\x88\xbd\x56\xb8\xad\x94\x04\x81\x11\xbe\x7a\x24\xf8\xc0\x6f\x73\x70\xb1\xd3\xeb\x0f\x66\x9b\x75\x8a\x4d\xb1\x5c\x35\xfa\xa0\x4c\xef\x60\x3a\x99\x60\xff\x75\x88\x3d\xfb\x3c\xb2\x46\xea\xad\x33\xff\x7f\x59\xc5\x4f\x2c\x95\x30\x7a\x4f\x3b\x9d\xc3\x53\xf9\xb8\x2f\xce\xb0\x0e\x4f\x3a\xe2\xf1\x34\x20\x69\xc9\xa5\x7c\x12\x75\x43\xc6\x74\xae\x33\xe9\xaa\xcb\x43\xae\x8e\x5b\x7e\xce\x9f\xb5\x57\x23\xc3\x88\x56\xc7\x87\x78\x69\xa8\xd9\x54\xf7\x75\x5c\xb0\xe8\xd3\xda\x32\xbe\xa4\xb3\xab\x62\xd2\xc8\xd7\x40\x35\x5a\x08\x8b\xc3\xf1\xb1\xde\xe4\xc0\x97\x36\x8f\x0d\xe8\x27\xe9\xe4\xfe\xd8\x1d\xd9\xee\x0f\xdb\x1d\xf1\xd9\xf6\xd2\x6d\x77\x4f\xc4\xfe\x58\xdf\x47\x37\xc9\x85\x15\x9a\x5e\x8a\xb2\xe1\x79\xce\x71\x89\x18\xff\x5e\x5a\x94\xa7\x7e\x7c\xc5\xbf\xd2\xe5\x99\x92\x32\x9d\xce\x3b\x2c\x93\x24\xb6\x8c\xcc\x98\x51\x45\x20\x9b\x9d\x43\x4d\xda\x15\x9a\x5e\x64\x23\xcb\x5a\x71\x16\xd5\x75\x53\xab\x6a\x11\x5c\x56\xd5\x31\x7f\xd4\x52\x4a\xc5\x10\x46\x45\xca\x1a\xe1\xf4\x36\xa3\xa4\xe9\xf3\x9a\x5d\x2a\xd4\x49\xda\x05\x7d\x9e\x7a\xbe\xcb\x01\x15\xff\xf5\x44\xfe\xb9\x96\x47\x6d\x57\x15\x89\xca\x75\x7f\x28\x75\xa5\x20\xfb\x57\x40\x4c\x9f\x84\x2b\xba\x0d\x50\x5f\xca\x1c\x37\x19\xaa\x53\xae\x30\xe3\x46\x6d\xc9\xee\xf0\xa3\xe7\xf2\x9e\x17\xdb\x1d\x45\xdb\xb5\x92\xea\xc9\x31\x57\x7b\xdf\xe2\x97\xaf\x05\x85\x5d\x3e\x4f\x9d\x8b\xab\xc2\x67\xc6\x0b\x71\xf5\xa5\xf2\xb9\x24\xa2\x1c\x94\x27\xde\x6a\xbb\xa8\xf4\xa6\x48\x19\xdd\x31\xa7\x69\xaf\xc2\xea\xf4\x15\x83\x86\x1e\x27\x16\xbf\x64\x4b\x16\x64\xde\x66\xb5\xd0\xe5\x93\xad\x4d\x94\x86\x8b\xdb\x38\xdd\x5e\x74\x7c\x14\xa0\x90\xb2\x1c\xa7\x9d\xce\x91\xc9\xf5\x05\x9b\xba\x86\x6d\xf1\x07\xc4\x10\xcf\x13\x9c\xc3\x41\x20\xde\x24\xd3\x63\x0f\x7d\x22\x3e\x57\x45\x32\x89\xe3\x60\x23\xc3\x11\x36\x4c\x35\x4b\xd1\xf3\xb9\xac\x1e\xc6\x76\x80\xc6\x98\xd7\xea\x91\x20\x6c\x61\x2f\x24\x16\x53\x8f\x5f\xe9\x14\x99\x63\x2e\x6f\x89\x1d\x8e\x89\x9f\x44\x11\x24\x9f\x73\x2f\x49\x07\x4f\x5d\x73\x6c\xbb\x23\xee\xc7\x95\x41\xea\xb8\x52\x6d\xb5\x43\x0b\xeb\x2c\x67\x48\xab\xc2\xc2\x9e\xc6\x77\x96\x2c\x62\xd8\xb2\x45\x25\x6b\xb9\x49\xee\x19\x09\xa2\x6d\xc7\xf2\x4c\xec\xf9\xe5\x68\xb8\x76\x80\x8d\xc7\xe8\x9b\xd2\xb5\xb9\x18\x4b\xbb\x0e\x12\x6a\x86\x60\xcd\xd2\x43\x96\xae\x89\x54\xef\x63\x45\x21\xc9\x74\xf5\x62\xad\xc3\x25\x6a\xd0\x0a\x3b\xb7\x6c\x4f\x96\x35\x4b\x96\xde\x93\x5a\x84\x15\xe5\x33\xb4\xce\xb5\x3a\xba\xed\x44\xb1\xf9\x50\x73\xe5\xd2\xc2\x8d\x88\x39\x43\xa1\xae\x8a\xf2\x8d\x36\x3c\xc8\xf3\xe9\x84\x84\x63\x32\xe5\xb3\x57\xec\x1e\x7f\x63\xfb\xf7\xe3\xdf\x8a\x12\x05\xa6\x8f\x3d\x72\x8e\x7e\x63\xdb\xf6\x74\xc4\x90\x2c\x09\x4c\x90\x6b\x60\x82\x14\xcf\x0b\x2f\xd4\x13\xf3\xf6\xea\xe6\x5e\x58\xc1\x12\x2b\x89\xe2\xa4\x22\x9c\x4d\xb3\x09\xe2\xe9\xb9\x9e\x46\xce\x59\xdb\x59\x91\x4a\x67\x0a\x9d\x8d\x62\xa9\x72\xc5\x83\x37\xb6\x94\x4a\xf3\xa3\x4b\x50\xfb\xc2\xf1\x6c\x97\x08\x7b\x27\x53\x28\x92\x3a\xb2\x65\x77\xa9\x33\xa9\xea\x2c\x9d\xc1\x58\xfd\x97\x61\xa6\xde\xbd\x06\x66\xe8\x20\xe3\x3b\x72\x49\xd8\x36\xa9\x4f\xda\x01\x9d\xe0\x1f\x26\x75\xdd\x0f\x47\x87\xef\x4e\xcf\xfe\x67\x26\x8d\xed\xbd\x1c\xb7\x6d\x6f\xc8\xdd\xb5\x87\x0c\x5f\x86\x7c\x0a\x7c\x18\xb4\xba\x9d\xc3\x63\x74\x7a\x72\x72\x94\xf2\x35\x4f\xdc\xfc\x94\xf6\x34\xb8\x10\x38\x3e\x00\x35\x43\xc5\x4d\xbc\xc9\x05\xb4\x79\x7b\xa4\xc6\x3c\x9d\x18\xa8\xcb\xc4\x50\xbe\x91\x3d\x91\x2e\xd7\xca\x9c\x37\x9f\x28\xe2\xa0\x4a\xee\x28\x45\x5d\xf1\x28\xee\x29\x8f\xe6\xf3\x87\x7f\xfc\xf7\xd4\x55\xb6\xff\xe3\x20\x4a\x38\x0e\x43\x2f\x4a\x9d\xcf\x2e\xe1\x1f\xc9\x65\x50\x60\xa5\x4b\x7f\xaf\x9a\xbc\xca\x32\xcb\x9a\xc6\xd2\xb9\xa8\x56\xad\xb2\x5c\xb2\xd6\xaf\x74\x2e\x8a\x28\xe4\x96\x76\xfb\xc7\x07\xde\x86\xb6\xec\xd7\x34\xea\xaa\xdf\xeb\x10\xec\xfa\x47\xe8\xe3\x0b\x7f\x94\x36\x45\x47\x65\x45\x30\xc6\x61\xc9\x25\xec\x23\xb6\x38\x55\xfb\xb4\x86\x0d\x24\x07\x33\x28\x7d\xd4\x50\xbc\xd6\x67\xcd\x72\x84\xd4\x8b\xfe\x35\x12\xca\xf2\x69\xf6\xa6\x4a\xd1\x96\x8b\xcf\x9f\xf3\x8f\xb1\x65\x69\x13\xdf\x5c\x3f\x0c\x7f\xef\xdd\x5c\x0d\xef\xaf\xef\xbe\xf5\xd2\x37\x26\x23\xe4\x4f\xdd\x8b\xe0\x6b\x40\xfc\x73\x74\x74\x94\x6d\x62\xbe\xe1\xe9\x50\x16\xa4\x86\xb3\x68\x2e\x81\x46\x25\xb7\xf4\xa2\xb2\x8b\x99\x51\xa5\x0b\xa1\x75\xc5\xe7\x2e\x85\x5e\x4a\x1d\xa4\xbd\x5d\x88\x5d\x3e\xeb\xae\xdd\x97\x20\x13\xfb\x1e\x3f\x4f\x94\xca\xee\x61\x01\xe7\x4c\xd6\x91\x36\x69\x18\xc3\x82\xcc\xac\x49\xbb\xd8\x9e\x75\x8a\x3e\x0b\x4a\xbf\x8b\x4f\x26\xc4\xaf\xd8\x57\x5b\xe7\xeb\x7c\x94\x4e\xa0\x77\xe7\xce\x04\xb6\xfc\x3b\xf7\x56\xba\x08\x1f\x66\x5d\xba\x8b\x9d\xba\x0b\xdc\xba\xbb\xd9\x98\x70\xe2\xdb\xd4\x2a\x7c\x3d\xc3\xb5\x3b\xef\x18\xde\x4d\x2b\xca\x85\xb1\x7a\xeb\xd5\x55\x4b\xe8\x05\x65\xc6\x7f\x53\xa2\x10\xd2\x93\x39\x13\x9f\x90\x5d\x12\xea\x87\x85\x4b\x23\x57\x90\x52\x46\x12\xb8\xac\xcf\x5a\xc9\xf5\x2c\x95\xe9\xdc\xee\x36\x45\x02\x3a\x7f\xd4\x55\x94\xb2\xc2\xf6\x37\x71\xb3\xe9\xd6\xd9\x0d\x17\x95\xd8\x6c\xe3\x5a\xac\x8a\xc0\x06\x33\xfd\x5b\x9b\x0d\x66\x48\x7c\x4e\xd6\x66\x53\xf7\xa3\x8f\x4d\xd2\x4f\x2f\xff\x24\xf4\x65\x7d\x5d\x4a\xca\x15\xe0\x3d\x74\xe1\xbe\x0a\x8d\x1d\xd9\x01\x83\xb7\x89\x1d\x04\xf8\xd1\x21\x08\x07\xc8\xa1\xee\x08\x61\x75\x20\x04\xc3\x4e\x28\x42\x8e\x03\x84\xd1\x71\xe7\x18\x79\xec\x6b\x1c\xa2\x03\x35\xdd\xa1\x9a\xee\xb0\xd3\x41\xd4\x45\x38\x06\xe3\xd8\xec\xab\xdb\x1b\xc9\x6d\xc3\xef\xa2\xb2\x0b\x8b\x02\xcd\x48\x80\x38\xa0\x3b\x8b\xe1\x75\x82\x9f\x8e\xaa\x06\x3f\xcd\x0c\xeb\x49\x57\x44\x1f\xa3\xa3\x65\x12\xc8\xc6\xe1\x88\x5f\x51\xdc\x4e\x39\xbd\x40\x69\x26\x0d\x9d\x4a\xea\xc3\x76\x75\xf0\x8f\x81\x33\xef\x25\x12\xf5\xa6\xea\x11\x12\xf5\x71\x06\xff\x4b\x0a\x28\x74\x1f\x69\x77\x0f\x85\x07\xc9\x9e\xe0\x97\x88\x44\x02\x5b\x45\xb6\x1b\x12\xd7\x22\x16\x0f\x62\x9c\x06\x04\x3d\xbe\x22\x71\x9e\xf4\x41\x6e\xa0\x3b\xed\xa3\xc3\x76\x07\xdc\x4f\xc0\xfd\x04\xdc\x4f\x12\x81\x05\xee\x27\x4b\x72\x3f\x49\xce\x7f\x2b\xb5\x4d\xf1\xb4\x50\x6a\xa6\xf1\xb3\x40\x7b\xe8\xf9\x2c\x40\xdd\x76\xf7\xf8\xff\x57\x5c\xed\x8c\x5b\xca\x6a\x5c\x50\xca\x1c\x50\xb2\xee\x27\x33\x9d\x4f\x96\xd5\x21\xbb\xe1\x84\xb2\x42\x8f\x92\x0a\xfe\x2d\x55\xfc\x0d\x96\x30\x1b\x61\xed\xae\xd1\x92\x02\xf7\xa5\x15\xb9\x2f\xcd\x72\x5e\x9a\x3d\xa9\x36\xd8\x75\x29\x2b\x64\x16\xd8\xae\x06\xb2\x0d\x7c\xa8\xc0\x87\x0a\x7c\xa8\xc0\x87\x0a\x7c\xa8\x52\xbf\x9d\x37\x71\x83\x0f\xd5\xb2\x7d\xa8\x36\xf7\x0c\x01\xfc\x7e\x66\xf8\xfd\x28\x6a\xfd\x87\x62\xed\x3c\xf7\x59\x4a\xeb\xff\x90\x02\xe1\x24\x11\xf8\x14\xcd\xed\x53\xb4\x49\xae\x42\xdd\x4e\xca\x55\x00\xbc\x82\xc0\x2b\x08\xbc\x82\x36\xc4\x2b\xe8\xad\xba\x6a\xb3\x5d\x87\xc0\x71\x08\x1c\x87\xb6\x75\x57\xb5\xc1\x4a\x3f\x38\x0e\x81\xe3\x10\x38\x0e\x2d\xc9\x71\xe8\x0c\x68\x67\xc0\xef\x07\xfc\x7e\xc0\xef\x67\x5d\x69\x67\x80\x57\x06\x7c\x76\x80\x38\x66\xf3\x3d\x2f\x80\x38\x06\x88\x63\xc0\xe9\x01\x9c\x1e\xc0\xe9\xa1\xa8\x8a\xf2\x0d\x38\x3d\xec\xa0\x79\x0e\x9c\x1e\x80\x38\x06\x88\x63\xe2\xa7\x40\x1c\x03\xc4\x31\x1b\xeb\xe4\x01\xc4\x31\x4a\x01\xe0\x22\x02\x2e\x22\xdb\xef\xf7\x90\xbc\xdc\x18\x17\x11\xf0\xfe\x00\xe2\x18\xf0\xff\xc8\x24\xda\xde\x0d\x26\xf8\x7f\x80\xff\x47\x5c\x3f\xf0\xff\xd8\x5d\xff\x0f\x6a\x11\xbe\xc9\x57\x2f\x1d\x9a\x7d\x29\x6f\x73\xcf\x00\x86\x60\xa2\xc0\x9a\x37\x60\x2f\xeb\xaa\xeb\xd2\x9b\x33\xeb\x5d\xe8\x6d\x44\xd7\x39\xd7\x69\xd7\xba\xdd\xec\x1d\x5d\x31\x9d\xba\x0e\xab\xf9\xcd\xdc\xe9\x79\x2a\x92\xd5\xbf\xad\x5b\x9f\xcf\xec\x7b\xc7\x1b\xdf\xf2\xdd\x78\x9e\xd6\x19\x8b\xb8\xcc\x4b\xea\x93\x27\xdb\x21\xca\x4d\xdb\xd9\x4b\xf8\xcf\x4f\x8e\xd0\xcf\x04\xc4\x88\xef\x53\x5f\xbd\x35\x0f\x9b\x63\xa2\x26\x88\x41\x5f\x28\xee\xe8\xfd\xfb\xb3\xe3\x0c\xa8\x8b\x9f\x45\x5c\x1b\x3b\xe2\xbd\x02\xeb\xbf\x54\xc8\x76\x28\x56\x44\xab\x43\xa9\xb2\xcb\x7c\xb4\x5d\x8b\xcb\xb6\xfe\x85\xb8\x2c\xef\xd7\xaf\xe2\x1b\xde\xc5\xef\x89\xfa\xdf\xb1\x6f\xa1\x36\x1a\x0e\xfb\xbd\xcf\x9f\x2f\xee\x86\xc3\xcb\xcf\x5f\xef\x1f\xae\xef\x86\xc3\xab\x9b\xfb\xe1\x50\xd7\x92\x27\xea\x9b\x64\x18\xcf\x97\x4c\x25\x93\xc3\x0e\x74\xfe\xfe\xf0\x44\xd9\x48\x09\x19\x99\xa9\xe2\x79\x5a\x2a\xc9\x8c\x6c\x97\xdf\xf8\xd7\xc6\xbe\x87\x2b\x75\xf8\x51\x67\x6b\xba\x29\xea\x02\xef\x74\x97\x9b\xdf\x5e\xcf\x76\x7f\xed\xdf\x3f\xdc\x5d\x5f\x7c\x19\x72\xc3\xdc\xf5\xdd\xe2\x1b\x3f\xe7\x21\x6e\x63\xb1\x1e\x61\x76\x3e\x87\x25\x0a\xc1\x58\xae\x69\x0e\x7b\xf5\xe7\xc2\x35\x0e\x81\x9d\x20\x3e\x12\xf0\xa9\xc3\x36\xad\xe2\x8b\x58\x31\x9d\xe0\x1f\x5f\x5d\xfc\x82\x6d\x87\x6d\x47\xa4\xa9\xa4\xd1\x6d\xca\xf9\x4e\x9b\xb5\x81\xcf\xef\xe0\x67\x8c\x41\x6a\x07\xef\xc9\x0b\xb3\x2f\x1d\x1c\x04\x37\xca\x25\xe7\x06\xff\xd4\xf4\xed\xd0\x36\xb1\x53\x45\x83\x14\x19\x6a\xcf\xf3\x32\xb5\xc8\x1b\x97\xc1\x90\x50\xd3\x90\xa0\x39\x4e\x5e\xcf\x53\x60\xe5\x14\x5b\xfa\xca\x71\xb7\x39\xea\xfe\x16\x72\xa2\x4a\x89\x01\xe8\xea\xe6\x3e\xf6\x25\xd3\x5b\x28\x1a\x18\x14\xc4\x1c\x66\x00\x3f\xd0\xec\xdd\x6f\xa2\x9d\x52\xee\xd0\x4f\xbf\xa5\x2d\xdb\x8f\x1e\x9e\x14\xec\x47\x4f\xd4\x3d\x2d\x3f\x4a\x44\xff\x42\x83\x96\x58\x0e\xb6\x37\x68\xed\xf3\x0e\x55\xc5\xc9\xbe\x5e\x9c\xf0\x94\xfc\xac\x4d\xfc\x79\x40\x42\xf3\x20\xd2\x33\xe5\xdb\x68\xbb\x12\xbc\x98\xe2\x49\x7e\x23\xd3\x42\xff\x95\x54\xa8\xc9\x31\x6c\x05\x03\xc1\x49\xca\xea\x9d\xd9\x5e\x44\xb9\xe7\xb6\x15\x75\xb2\x32\x52\x22\x51\xbb\xbb\xd0\x66\x97\x96\x92\x99\x5b\x88\x2b\x64\x58\xd7\xaa\xc3\xd6\xe9\x79\x46\x5d\x48\xa7\x48\xd9\x7d\x32\xaf\xb4\x66\x1f\xad\x71\xe7\xb4\xaa\x71\x27\x63\x9d\x4f\x3a\x6a\xc2\x1e\x89\xc3\xae\x03\x7f\xea\x1e\xfc\x08\x99\x2c\x0b\xda\x0e\x35\x9f\xf3\x3d\x26\xdf\x1a\xd9\xb7\x3e\xc1\xd6\xad\xeb\xbc\xfe\x7f\xec\x3d\xdd\x6e\xdb\x3a\x93\xf7\x7d\x0a\xc2\x37\xbd\xd8\x48\xb1\x65\x3b\x76\x02\xf4\xc2\x9b\xe6\x6b\x8a\xa6\x6d\x90\xf4\x7c\xd9\xc5\xe9\x41\x40\x4b\x13\x8b\x6b\x99\xd2\xa1\xe4\xa4\x41\x71\x80\x7d\x8d\x7d\xbd\x7d\x92\x05\x7f\xf4\x43\xfd\x3b\xb5\x73\xec\xfd\x94\x8b\xa2\x96\xc8\x99\x21\x39\x9c\x19\xce\x0c\x47\x67\xe8\x01\x7b\xa1\x96\x16\x2d\x3b\xca\x58\xb1\x21\xc9\xc8\xf6\xcc\xe2\xe7\x9c\x6d\x73\x61\x4e\xc3\x22\x84\x84\xa5\x25\xa8\x3a\x18\xfa\x09\x3c\x1b\x3a\xd0\x41\x96\x8f\x86\xaf\x9d\x00\xa6\xf1\x45\xf3\x0c\x45\xcf\x01\x9c\xa1\x7f\x10\x0f\xbe\xb2\xf3\x5c\x69\xac\x86\x21\xd8\xf1\x11\xf6\xac\x38\xe5\xf9\xc1\x20\xa1\x57\xb8\x94\xc4\x9e\xbe\x43\x1b\xe6\xba\x0e\x49\x99\xc1\xa0\xd8\x2e\x82\x82\xb6\x54\x6a\x30\x11\x42\x39\xdd\x25\xe7\x2a\x7e\x6b\xce\x31\x67\x08\xe5\xa6\x7a\x02\xfc\x08\xc2\x45\x75\x22\x5d\x54\xc2\x5c\x55\xa9\xcb\xc9\x49\x1e\xd9\x98\xa2\x39\x70\x4d\xe1\xa0\xc8\x47\x71\x6e\x03\x20\xcc\xcd\xaa\x07\x83\xaf\x11\x38\xe8\x8e\x43\x43\x5f\x20\x42\x84\x86\x11\xf6\x3c\x99\x7d\x59\xe5\x29\xb8\x12\xd7\x03\xd2\x11\x89\x64\x60\xad\x1d\x27\xbf\x3a\xd9\xb2\x60\x84\xc9\xc9\x93\x63\xa2\x69\x3a\x73\xb5\xc9\xac\x63\x4c\x2c\xf3\x14\x6d\xc6\x3a\xdf\x04\x63\xc1\x18\xdc\x98\xb2\x9c\x81\x18\xe6\xad\x86\x72\x03\xb6\x06\x55\xce\x80\x2d\x1d\x0d\xaa\xcc\x8b\x44\xca\xcd\xed\xac\x3d\x60\x26\xf6\x02\x37\x6f\x71\xc5\x36\xaa\x11\xf8\xce\x19\x7a\xfb\x76\x93\xbe\x59\x4b\x03\xc5\x99\xf5\x39\x2e\xfe\xfd\xe7\xf7\xde\x12\x9e\xbf\xf7\xce\xbe\xf7\x1c\x70\x88\x8d\x23\x70\xbe\xf7\x8e\xbe\xf7\x62\x8b\x44\xbc\xba\xf8\x73\x8d\x3d\xf1\x58\x58\x72\xe2\xd9\x0a\x73\x25\x2e\x1e\xca\x50\x89\x78\x9a\x89\x96\xf4\xfe\xfa\x23\x8b\xae\xc4\x94\xaf\x9c\xd6\xdc\x3a\xa1\x72\x2b\x1a\xd5\x59\xd2\xe8\x57\xad\x69\xd4\xca\xa2\x46\x6d\xad\x6a\xf4\x02\xcb\x1a\xb5\xb3\xae\x51\x93\x85\x8d\x74\x2b\xbb\xce\x98\xce\x8f\x3a\x07\x71\x23\xb3\x3a\xe9\x52\x63\x5c\x27\x6d\x2a\x4c\x6c\x54\x95\x09\x87\x32\xba\x40\xf0\x4f\x1e\x6f\x31\xed\x30\xed\x76\xec\xfa\x2b\x38\x16\xdd\x8e\xe5\x5d\x10\x33\x74\xf3\x0d\x8b\x09\x41\x59\x9c\x97\x5f\x6f\xbf\x95\x25\x05\xa1\x86\xa4\x1c\xd4\x94\x98\x83\x44\x24\xa4\x28\xb1\x2b\xc0\x48\x8b\x80\x6f\x17\x93\xaf\xdb\x97\x42\x1a\x51\x96\xe8\x8f\xd7\xb3\xab\xab\xaf\xe7\xf7\x37\xb3\x2f\x1f\xaa\x29\x97\x2b\x15\x9b\xe9\xe7\x1f\xdf\xdf\x14\x57\x0c\xa5\xa9\x62\xa6\x50\x50\xd7\x38\x0c\x9f\x7c\xe6\x14\x19\x20\x45\x7f\x77\x31\xfb\xe7\xc5\xfd\xf5\xec\xf6\xf6\xee\xeb\xcd\xfb\x26\xfc\x79\xb0\x15\x14\x14\xd8\x45\x27\xee\xf3\xb7\xdf\x4a\x98\x52\xcb\x69\xe5\x4d\xfa\xa5\x8d\x74\xc2\x3f\x7f\xfb\xad\x89\xe6\xcf\xdf\x7e\xab\xa5\xb4\x92\x94\xf2\x77\x99\x58\x6c\x31\x77\x13\x35\x25\xec\xa0\x9a\x9c\x1c\x94\xd8\xef\x03\x6b\x62\xf6\xcd\xbe\x59\xca\x66\xca\x22\xcc\x5e\xd2\xcb\x35\x10\x66\xfc\xc9\x64\x5a\x48\xde\x69\x15\xa9\x45\x95\x07\xd2\xf8\x5d\xe9\xb1\x54\xfe\x95\x07\x4b\x9b\x32\x13\x51\xed\xf1\x4f\xfe\x55\x1c\x24\xe2\x3f\x4d\xee\x38\xf3\x32\xda\xb2\xd6\x7a\x65\xb3\xc4\x96\xa5\xc4\x98\x93\x52\xd9\x9e\x85\xc3\xd7\xeb\xd8\x0f\xa2\x46\x40\x56\x2b\x48\x5c\x06\xd6\x83\x12\xe7\xf1\x36\xa0\x20\xb2\xab\x21\x39\xf3\x72\xd6\x29\x40\x79\xc4\xec\xd8\x23\xf3\xe3\xf2\x0e\x31\x38\x8f\xcc\x8d\x95\xcf\x2d\x8c\x46\xa8\x1c\x58\x65\xd3\xfa\xf3\x51\x39\xc0\xba\x93\x51\x8e\x2d\x0c\x1a\x14\xe6\xe4\xff\x8d\x46\x49\xe5\xd2\xf9\x97\x8f\x95\xa2\xe9\x50\xb7\xf5\xae\x38\x22\xf0\xd6\x0b\x42\x0b\xac\x58\x6b\xa8\xf8\x41\x74\xcc\x96\x60\x44\xbe\xef\x85\xc7\x1a\x1c\xc3\xa6\xa4\xc4\x6c\x49\xd7\x46\x28\xd0\x2b\xdf\x0f\xe6\xd8\x5e\x56\xac\xd2\xab\x4d\x6a\x4b\x19\x97\x13\x6f\x95\x37\x8b\xe2\x97\xd7\x1f\xdf\x17\x5f\x30\x08\x23\xcc\xa2\xd8\x37\x3b\xf3\x9e\xf0\xb3\x36\xed\xf5\xa3\x0e\xe1\x8a\xd0\xf5\x0f\x55\x6b\xe3\x0c\xfd\xcc\xe5\xbd\x17\x83\x00\x25\x07\x98\x72\x4f\x2f\xaa\xf5\xf6\xca\xbf\xba\xc4\xb3\x4d\x7a\x17\x72\xdd\x8a\x3e\x22\x7d\x89\x2a\xf4\x54\xa9\xab\x48\xfe\x29\xf3\x20\x16\xdc\x25\x76\x78\xc3\xf2\x37\xc3\x2e\xe8\xbb\x26\x5d\xd7\x0c\xb2\xa8\xf8\x9a\x94\x5e\x33\xcc\x82\x06\xac\xd3\x7e\xed\x67\xb4\xd8\xbb\x85\x1a\x6c\x06\x5f\xa9\x18\xdb\x88\xc0\x66\xf0\x55\x42\x71\x9b\xf1\xcb\x69\xe9\x61\x51\xba\x27\x6f\xb2\x81\xcc\x36\xe1\xbd\x5f\xab\x1f\xa3\xed\x7e\xcd\xcd\x51\xf2\xbe\xca\x39\xb5\xbb\x52\x32\x1b\x90\xd7\x54\xe5\x22\x76\x40\x95\x15\x10\xd0\xeb\x59\xe4\xcb\x57\xa0\x56\xe5\x5c\xd0\xe6\x05\x4e\x8a\xdf\x38\xa9\xa4\x50\x35\x0d\xb8\x5a\x20\xdb\xa7\xa4\x6e\x72\xc4\xd0\x6b\x6b\x9d\x24\x85\x55\xd0\x96\x4a\x9f\xb4\xac\x0a\xb0\x09\x77\x64\x0a\x03\xd4\xdc\xf8\xd7\x20\xb6\x2a\x20\xb0\x61\x21\x80\x9c\xb6\xdd\xfe\x8e\xda\xc6\x56\xaa\xa6\x6b\xd3\x4d\xa6\x97\x65\x31\xf2\xc3\x7f\x49\xa9\x90\x8d\xaa\x92\xd4\xf1\x75\xdb\x9a\x24\xbb\xab\x1c\xb2\x9d\x25\x29\x70\xf6\x7e\xb2\x74\xc6\xdf\x95\x0f\x35\x4d\xbb\x48\x53\x5a\x7a\x2a\x65\x22\xb4\x77\x41\xa7\x2e\x64\xd4\x85\x8c\xba\x90\x51\x17\x32\xd2\xff\xf6\xcc\xc1\xd7\x85\x8c\xba\x90\x51\x19\xe1\x5d\xc8\xa8\x0b\x19\xd5\x82\xea\x42\x46\x5d\xc8\xa8\x0b\x19\x15\xfe\xba\x90\xd1\x0b\x26\xb5\x0b\x19\xa5\x33\xd2\x85\x8c\xda\xc3\xee\x42\x46\xe5\x70\xbb\x90\x51\x17\x32\xea\x42\x46\x5d\xc8\xa8\x0b\x19\x75\x21\xa3\x2e\x64\xf4\x2f\x18\x32\x7a\x83\xd0\x5f\x47\x6f\xe2\xa8\x51\xef\x0c\xfd\x14\x31\x24\xe9\xe8\x7f\x37\x30\x07\x27\x66\xdf\x10\x71\x81\xde\x99\x7e\x8b\xe9\x48\x6f\x38\x35\xfb\x06\xc3\xd4\x76\x81\xf5\x65\x9c\xc0\xae\xec\x3d\x15\x68\xdf\x08\xcc\xbd\x4f\xd3\x50\xad\xe7\x47\xfa\xe0\x2b\x0a\x7a\x1c\x47\x3f\x21\x67\x85\x7f\xdc\x7c\xba\x50\xcd\x38\xa8\xbe\x69\x99\x96\x22\x81\xbf\x94\x88\x33\x0d\xf8\xeb\x64\x6c\x02\x98\x39\x88\xe9\x1b\x24\x70\x1d\x08\x18\xd8\x38\x82\x6a\xe8\x69\x93\x66\x1c\x83\x6d\x12\x6c\x6d\x13\xd8\xb0\x0e\xd8\xd0\x1c\xd4\x03\xe3\x0d\x34\x70\xa3\x6a\x70\x03\xb3\x6f\xf6\x9b\xc0\x0d\x75\x70\x63\x73\x90\x2e\x8e\x91\x99\x45\x42\x6b\x80\x13\xfa\x02\xe0\xd6\x2e\x81\x0f\xeb\x81\x4f\x9a\x80\x4f\x0a\xc0\xad\x18\xb8\xd5\x44\xf9\xe6\xc0\xc7\xa5\x53\x5e\xc6\x6b\xd3\x06\x5e\x33\x4f\x75\xd8\x27\xe6\xa0\x9f\x12\xde\xb0\x9e\x9b\x12\x7e\x62\x4e\x77\xc6\x2b\x1a\xec\x2d\xb3\xca\x89\x79\xda\x9a\xee\xe6\x39\x31\x98\xdd\xd7\xe1\x4f\xcc\xd1\xce\xe6\x45\x83\xbd\xe5\x79\x99\x54\x30\xe2\xf6\xe6\xe5\x64\x67\xbc\x38\x35\x87\x2d\x61\x0f\xb8\xfa\xb1\x4f\x4f\xeb\x11\x8c\xf8\x3c\xe7\x06\x30\xdd\xa2\x1e\x98\x66\x36\x66\x76\xb2\xb7\xab\x07\xa7\x59\xa1\xb8\x23\x1c\xa7\x5b\x9c\x95\x53\xce\x36\xbb\x21\x57\xd9\x38\xaa\x81\xaa\x08\x92\x5a\x3c\x61\x6c\xee\x58\x26\xd7\x1d\x8a\x5f\x7f\x08\xf8\x82\xdf\xfa\xf1\xd3\x71\xf6\xe9\xa0\xf4\xa9\x55\xfa\x34\x81\x7b\x92\x3e\x1d\xc5\xcf\xa6\x99\x67\x29\xae\x49\xf6\xe9\xa0\xf4\xa9\x55\xfa\xb4\x38\x06\x55\xba\x31\x8b\x2f\x9e\x92\x4f\x17\xd5\xd3\xd1\xcf\x92\x3d\xcc\x72\x6c\x39\x54\x6d\x17\x16\xec\xca\xf7\xbe\xbd\x04\x96\xb5\x2e\x95\x71\xf9\xbb\x58\x46\x6e\xb8\x29\x7a\xc5\x0f\x2b\xfb\x63\x98\xfe\x98\x98\xfd\xcc\xaf\xa9\xd9\x3f\xd1\x7e\x9d\xa6\xbf\x4e\x65\xcb\x37\x08\xfd\x71\xa4\xd0\x0d\x5e\x17\x9d\xf5\x8b\xe8\x26\x1a\xba\x89\x86\x6e\x43\x52\x86\xfb\x43\xca\x28\x4b\xca\x6b\x20\x1c\xbf\x36\xc2\x93\xd7\x46\x38\x79\x6d\x84\xd3\x57\x46\x38\x7d\x29\xfb\x66\x60\x9c\xbe\xce\xe6\x2f\x08\xbe\x3b\x99\xab\xa5\x1c\x06\x2a\x12\x95\x3d\x61\x8f\x13\x75\x07\x91\xed\xf4\xce\x10\x5d\x7b\x9e\x04\xbc\x5c\xcf\x01\x07\xa4\xf0\xcc\x83\x28\xee\x84\x7a\x58\xd6\xf8\x91\x8a\xb1\x9f\x1a\x7f\xa8\x87\xa9\x4f\x9f\x57\xfe\x3a\x34\xf0\x3a\x72\x79\x03\x51\x20\x27\x79\xbd\x8e\x5c\xa0\x11\xb1\x85\xbf\xc3\x88\xfc\x25\x50\xe3\x09\xe6\xae\xef\x2f\x79\xe3\x88\xad\xb5\xb6\x89\x6b\xc4\x58\xf9\x0e\xf0\x16\x77\xaa\xb1\x6a\x64\x03\x8b\x0c\x87\x30\xfe\xea\xf7\xeb\x9b\x8b\x7f\x7c\xfc\x8f\xfb\xeb\xd9\xb7\xcb\x3f\x92\x20\x88\x22\xfe\x38\x58\x92\xa4\xd3\x42\x78\xa9\x8c\x00\x98\xf1\xa7\x1f\x16\xa8\x54\xc1\xa1\x72\xb8\x7e\x10\x1d\xdb\x94\x1c\xcf\x09\xcd\xb6\xb7\x7d\xfa\x50\xde\x41\x54\xf9\xa1\xe4\x98\x42\x64\x3a\x71\x17\xa0\xa2\xe4\xa1\x2c\x3f\x87\x3d\xcf\xb7\xb1\x08\x79\xf0\xee\x6f\xdf\x26\xad\x1e\x81\x46\xc6\x9f\x81\x9c\xe9\xf8\xe9\x03\xe0\x68\xcd\xc0\x58\xe0\x08\xc4\x9b\xcb\xe7\x00\xd8\x3f\x93\x2f\x2e\xbd\xe3\xb3\x78\xa4\x98\xe0\xc3\xe7\xdb\xd9\xbb\xec\xb4\x8a\x08\xaf\x11\xac\x3d\xcf\x08\x98\x2f\xab\x3c\x3b\x80\x1d\x8f\x50\x81\x7d\xd8\x5f\xc5\x4d\x85\xf7\x88\x81\xa8\x18\xce\xb9\xa4\x67\x07\xeb\x77\xe3\x7e\x7f\x75\x24\xcb\x7e\xf1\xff\x7f\x26\x47\x10\xb8\xb0\x02\x86\x3d\x23\x8c\x7c\x86\x17\xf0\x6e\xf0\x21\x99\xeb\x15\x5e\x82\x41\x02\x15\x11\x5a\x47\xc4\x33\x6c\x17\x13\xc1\x8f\xda\x72\x2b\xff\xba\x8a\x4f\x0b\x6c\x34\x81\xc2\x00\x3b\x86\x4f\xbd\x67\x23\xf0\x59\xa4\xcd\x06\x83\xd0\xf7\x1e\xc5\xfc\xeb\x93\x27\x0b\x81\x11\xba\xe0\xef\x68\xf2\xad\x52\x0f\x0c\x55\x37\x2a\x37\x5a\x55\x10\x30\x3f\xde\x41\x3f\x33\x60\xeb\x43\xd9\x70\xad\x74\xb8\x91\x17\x1a\x36\x09\x5c\x60\x46\xb8\x26\x6a\x7d\xbe\x5d\xdd\xde\x5f\x9c\xbf\xbf\xbc\xe0\xff\xde\xce\xee\xef\x3e\x7e\xbb\xbc\x9f\x5d\xdc\xde\x0f\xac\xe9\xfd\x87\xf3\xcf\xf7\xb7\x97\x33\x6b\x7c\x72\x54\xd9\xce\x1a\x9f\xc4\xed\x86\xd3\x51\x79\xbb\xf3\xcb\xd9\xf9\xe5\xcc\xea\xdf\x5f\x7f\xbd\xfa\xcf\xc1\xb0\x3f\xce\x34\xbb\x69\x85\xf4\xa6\x15\xca\x9b\x4a\x84\xf1\x1c\x3c\x0a\x4b\x38\xf9\x25\xa2\xc6\x6a\x59\xdb\x6d\x55\xd9\x45\x25\x2a\x70\x11\x27\x6d\x76\xc9\x90\x01\xf3\x7f\x3c\xa7\xa2\x08\x28\xe7\x2c\xc3\x09\x59\x61\x1b\x17\xf6\xc9\x1d\xa1\x5f\x1f\x81\x79\xf8\x59\xdb\x11\xaa\x16\xbd\xf8\xec\xa5\x91\x11\x6d\x49\x6e\x5b\xdc\x50\xa0\x4e\x24\xd1\x12\x18\x05\x4f\x38\x5a\x73\x23\xcf\x51\x7c\x9e\x7c\x35\x4b\x93\xaa\x49\xfe\xb5\x7a\xaa\x7b\x0d\x3a\x09\xdd\x49\xe8\x4e\x42\x77\x12\xba\x93\xd0\x7b\x2a\xa1\x27\x9d\x84\xee\x24\x74\x27\xa1\x3b\x09\xdd\x49\xe8\x3d\x95\xd0\xd3\x4e\x42\x77\x12\xba\x93\xd0\x9d\x84\xee\x24\xf4\x7e\x49\x68\xe5\xb0\x3e\x27\xa1\xcc\xa6\xbe\xc6\x0c\xaf\x12\x07\x75\x1a\xe5\x93\xc2\x7b\x0e\xd4\x76\x57\x98\x2d\x33\x71\x56\xb6\x04\xc3\x26\xa1\x31\x30\x47\xb9\xf4\x96\x97\x75\x3b\x79\x59\xb7\xc9\xcb\xba\x4d\x37\xea\x96\xce\xd6\xbf\xe7\x5a\x67\x43\x9b\x71\x8f\x34\x3c\x4e\xf1\x42\xec\x6f\xc1\x2d\x72\x31\x56\x84\x7e\x4a\x6e\x8e\xeb\x79\x0a\x43\x15\x58\x08\x97\x24\x08\xc0\x39\x77\xc1\x5e\x86\xda\x4a\x52\x3f\x9a\x05\xe2\xa3\xad\x73\x0f\xb4\xf7\xc9\xe0\x24\x11\xe3\x17\x13\x31\xde\x06\x11\xd9\xf9\x2b\x12\x22\xb4\xc6\x4b\xe9\x50\xbb\x51\xa4\x75\x88\x00\xf9\x05\xdf\x97\x84\x2e\xd4\x2d\xa1\xeb\xb5\x27\xbf\xb2\x11\x8a\x3a\x1b\xeb\x10\x50\x48\x16\x94\x3c\x10\x1b\xd3\x08\xcd\x31\x75\x9e\x88\x13\xb9\x66\xbc\x95\x38\x24\x4b\x40\xba\x73\x81\xa2\x05\x50\x71\xe9\x87\x2e\xe4\x45\x21\xba\x40\x5c\xf5\x8b\xfe\x11\x84\x47\xe8\x61\x4d\x6d\x59\x0a\x9f\x44\xcf\xc8\xf6\xd7\x9e\x83\xe6\x0c\xf0\x12\x11\x8a\x6c\x9f\xfe\x97\x7a\x8f\x9e\x48\xe4\x8a\xbb\x16\x14\xaf\x00\xf9\x8f\xc0\x18\x71\x20\x44\x4f\x2e\xb1\x5d\x84\x19\x24\xe5\x0d\xd0\x83\xcf\x04\x16\xcc\x41\x78\xfe\xda\x41\x01\xf3\x1f\x89\x03\x2c\xd4\xe9\x1c\x69\x23\xbe\xf6\x1d\x74\xab\x6e\x42\x21\x79\x59\x4a\x0c\xda\xc6\x7c\xd8\x58\x2e\x92\x88\x3c\xa1\xc8\x47\x6b\x0a\x3f\x02\xb0\x23\x70\xbc\x67\xf1\xf9\x68\x0d\xf4\x50\x07\x0d\xd4\x66\xcf\x22\x6a\x85\x6c\x17\x53\x3e\x9d\xae\xff\x84\x1c\x1c\xe1\xb8\x7e\x09\x03\x9b\x0f\x0a\x1c\x84\x43\xf9\x82\x84\x71\x3f\x70\x74\xe0\xe3\x5d\x02\x17\x65\xfd\x2f\xb8\x05\x73\x83\x23\xb8\x22\x2b\x12\x21\x0a\xe0\x88\x51\xcf\x01\x45\x6b\x0a\x0e\x72\x20\x00\x91\x85\x8c\x7c\x8a\x22\x37\xf9\x1e\x4c\x06\x96\x25\x93\x2b\x66\x8e\x68\x16\xb9\x24\x44\x98\x2d\xd6\x2b\xa0\x11\x0a\x98\xb0\x91\x42\xa4\x12\x4a\xde\x86\x68\xe5\x53\x12\xf9\x4c\xb4\xf5\x7d\x4f\xd6\x72\xf1\x3c\xb0\xa3\xf8\x33\x1f\x31\xaa\xb4\xce\x47\x8a\x6c\x68\x4e\x76\x83\xcc\x4e\xb4\x00\x8a\x3f\x69\x95\x62\x1d\xc9\x04\x85\xde\x4c\x7d\x7c\x29\xbe\x0d\x87\xb0\xcc\x69\xe6\xd3\xac\xb1\x25\xb7\xdb\xe5\x02\x38\x84\x89\x12\x11\xcf\xc8\x7f\xa2\xc0\x42\x97\x04\x26\xba\x81\x07\x60\x9c\x98\x94\x52\x17\x33\x07\x28\x27\x74\xb1\x26\x0e\x08\x28\x2b\x9f\x01\x72\x20\xc2\xc4\x13\x74\xf2\xe5\xd6\x4a\xdf\x88\xf1\xa7\x70\x53\x82\x27\x72\x4d\x76\xc0\xf3\x13\x99\xe9\xb2\x13\xc8\xbb\xda\xa7\x13\x73\xbc\x13\xc8\x96\xa9\xf2\x72\xf6\x5c\x08\x72\x3a\xc5\x76\xbf\x95\xdc\xeb\xc1\x23\x78\x09\x1b\xa9\x91\x6a\x50\xc5\x67\xc7\xf8\xe0\x05\x30\xae\x60\xe4\x76\x4b\xbf\x07\x45\x28\xf2\x99\x03\x4c\x10\xa0\xef\x43\x29\x3f\x42\x10\xff\xe3\x6a\xcb\xcc\x9a\x5c\xe5\x8a\x30\xa3\xa0\x4e\x85\x4d\xee\x42\x0a\xd0\x30\x18\x04\x98\x30\x63\x85\xbd\x07\x9f\xad\xc0\x31\xe4\xed\x0d\xbe\x6d\x42\x34\x07\xa0\x88\xc1\xca\x7f\x94\x82\xcf\x7f\x40\xa9\x7e\x44\x8f\x52\x41\xa2\x81\x39\x18\x69\x82\x44\xcc\x88\xba\xca\x13\xa6\x03\x05\x07\xcd\x9f\xd1\xcd\xa7\x0b\xe4\x62\xea\x78\x5c\x23\xa6\x8b\x88\x98\xaa\x67\xa4\xf6\xb5\xf7\x8c\x22\x97\xf9\xeb\x85\xcb\x7b\xe8\x12\xa3\x09\xbc\xe3\x43\x48\xdf\x46\xf1\xa4\x23\xbe\xe1\x31\x11\x87\x44\x84\xf5\xd5\x41\x0f\xc4\x93\x22\x41\x9c\xf9\x70\x40\xc4\x21\x88\x99\xdf\xe9\xcc\xcb\xad\xa4\xf8\xf6\x36\x0e\x43\x70\xf8\x1a\xe1\x74\x5d\x42\x84\xa3\xb4\xa8\x0c\x62\x6b\x2a\xbe\x43\xa4\x13\x3d\x6c\x43\x35\xa2\x7e\x84\xf8\xe9\x0a\x04\x4b\xa4\x35\x7d\xe2\x2f\x1f\x8b\x47\x92\x2a\x64\x33\x70\x80\x46\x04\x7b\xa1\x1c\x86\x12\xb8\xe2\x6e\x98\x8e\x7c\xf4\x37\x22\xb7\x0e\x71\xb9\x5a\xad\xd6\xc6\x44\xa7\xaa\xd0\x88\x55\xe1\xb6\x09\x6f\xb5\xd2\xfb\x48\xf8\x78\x27\x84\xa7\x96\xce\xb6\xe9\x6d\x14\x72\x7b\x46\xef\x64\x27\xf4\x72\x73\x6c\xeb\xa4\x4e\x0f\x83\x54\x61\xa4\x34\x4a\xb7\x97\xeb\x3a\x01\xbf\x51\x10\xfd\x1a\xfc\xc6\xa9\xb6\xe3\x77\x98\x3a\x68\xe5\x87\x51\xde\x16\x4a\x16\x21\xb6\xaa\xb2\xd6\x91\xa5\xac\xb8\xc6\xc5\xfc\xdf\xff\xfe\x9f\x0d\x97\x33\x56\x51\x1e\x44\x5b\x5e\x55\xab\xa5\xf4\xff\x25\x9a\xe3\x83\xce\xd6\x69\x6f\xa7\x00\xf6\x93\xf6\xd3\x43\xe1\x15\x61\x75\x97\xb8\x97\xca\xfc\x5c\x5b\x73\x2f\x1d\xd6\x41\xd9\x52\xdf\x37\xdc\xc1\xa9\xd3\x32\x87\xc3\x9d\x39\x70\xac\x5d\xba\x9e\x2c\x69\x36\xec\xf7\xa1\x76\x94\x88\xed\xfd\xa7\xf3\xef\x3d\x7c\x2b\x42\xc6\xb1\xa7\x6e\xeb\xbc\x3e\x8e\x95\xd1\x4e\x20\xef\xc6\x2b\xc4\x21\xef\xc6\x2b\x34\x8e\xaf\xb6\x25\x90\x55\x29\x2f\x09\x94\x28\x1f\xbb\xf2\x56\x26\xfc\xa3\x21\x78\x60\xfe\x4a\x54\x48\x5b\x53\xf1\x8c\x2e\x24\x5b\x02\xb6\x5d\xe4\x47\x2e\xb0\xcd\x7c\x2a\x07\xe8\x8c\x68\x63\x55\xee\xcc\x1f\x30\xf8\x3b\x9d\x11\x2a\x1a\x78\x38\xc7\xb6\xf8\x23\xc1\x87\x44\xf0\x6e\x0e\x9a\x3b\xf7\x40\xa8\x20\xec\x41\x52\x7e\x80\x2e\xb6\xc1\xa1\xba\xd8\x06\x87\xea\x62\x1b\x1c\x98\x8b\x6d\x70\x60\x2e\xb6\xc1\xe1\xb8\xd8\x5a\xf8\x7d\xf6\x85\xd4\x9d\x46\x93\x46\xad\x0d\xb8\xfd\xf3\x97\x8c\x92\x10\xe9\x21\x38\x4c\x32\x44\xb7\x53\x56\xfb\x39\xe1\x07\xe3\xa0\xca\x1e\xe5\x77\xe1\xa2\x4e\x1c\x60\x2a\x15\x6d\x39\x4c\x92\xf5\x18\x78\x80\x43\x91\x78\x28\x6e\xba\xff\x8c\xf3\x61\x7f\x9c\xbb\x98\x52\xf0\x6e\x85\x3d\x91\xf1\x7f\x3d\x5a\xe6\xc8\x8c\x0b\xe2\x08\x37\x59\x6d\xcb\xbe\xc1\xec\x24\x35\xf1\x31\xf3\x52\x96\x10\xfa\xb7\xe5\x30\x1c\x64\xce\x70\x5b\xc7\x3f\xaa\xc1\x3f\x35\xad\x0c\x7e\x75\x15\xff\xcd\x5f\xff\x17\x00\x00\xff\xff\x76\x66\x07\xf2\x43\xf8\x09\x00") +var _dataDataJson = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\xbd\xfb\x53\xe4\xb8\x96\xef\xfb\xfb\xfc\x15\x0a\x98\x13\x7d\xef\x04\x4e\x48\x5e\x45\x71\xa3\xe3\x06\x0d\x74\x17\xd1\x55\x14\x07\xa8\xea\xb3\x63\x33\x41\x18\x5b\x64\x7a\x70\x5a\x6e\xdb\x49\x15\xbb\xa6\xe6\x6f\x3f\xa1\x87\x6d\xf9\x99\x76\xbe\x1f\x5f\x26\x62\x76\x75\x5a\x96\x65\x59\x5a\x6b\x69\x69\xad\x8f\x7e\xfc\x1b\xd9\xfa\xf3\x24\xfc\x4a\x83\xd0\x61\xde\x1d\x0d\x5e\x1d\x8b\x7e\xf6\x23\x87\x79\xe1\xd6\x29\xf9\xf1\x6f\x84\x6c\xbd\x76\x3b\xdd\x3d\xf5\x1f\x64\x8b\x46\x96\xbd\x75\x4a\xbc\xa1\xeb\xee\x88\x1f\x5e\x86\x4f\xd4\xf4\x9d\xb8\x00\xd9\x32\x5d\x97\x7d\x33\xfc\xc0\x79\x75\x5c\xda\xa3\xbc\xf4\x56\x14\x0c\xe9\xd6\x8e\xba\xee\x31\xef\x6d\xc0\x86\xa1\x61\x0e\xa3\x3e\xbf\xfa\x6c\xba\x61\x72\xf9\xc9\xf1\x6c\xc3\xb4\xed\x80\x86\xbc\x09\x5b\x7b\x1d\xf1\x7f\xf1\x65\xea\x99\x4f\x2e\x35\x4c\x7b\xe0\x84\xbc\xcd\x86\xef\x0e\x7b\x8e\x68\xed\xd6\xb5\x39\xa0\xa1\x6f\x5a\xf4\xa3\xf3\x4c\xad\x37\xcb\xa5\x3b\x1f\x9d\x81\x13\xdd\x9a\x5e\x8f\x06\x3b\xea\xf5\xce\x2c\x8b\x0d\xbd\x68\xe7\x82\x3e\x9b\x43\x37\xba\x8b\x58\x60\xf6\xe8\xb9\x6b\x86\x61\xfc\xdb\x3d\x73\x69\x60\x46\xa2\x4b\x2c\xe6\xd9\xe1\xce\xa7\x61\x64\x46\x8e\xd7\x3b\x8b\x9f\xfb\x17\x7d\xea\x33\xf6\xb2\xf3\xd5\x74\x1d\xbb\xfc\xd2\x2d\x0d\xd9\x30\xb0\xe8\xff\x1e\xb2\xc8\xdc\xb9\x66\x36\xbd\xa5\x61\x14\x38\x16\xaf\x38\x7e\x1f\xc7\x0b\xa9\x35\x0c\xa8\xe1\xb3\x20\x12\xef\x1b\x5f\xe1\x1d\xeb\xd2\xc8\xf0\x03\xfa\x4c\x83\x80\x26\xbd\x62\x44\x6f\x3e\x15\x2f\x7c\xe5\x45\x34\xf0\x4c\xf7\xea\x66\xe7\xf2\x7b\xf2\xcf\x0f\x2c\x8c\x3c\x73\x90\xf4\xa8\x1f\xb0\x67\xc7\x75\xbc\x5e\xa1\xaf\x03\xfa\xf7\x90\x86\x51\x9f\x9a\x36\x0d\x0c\xfa\x3d\x0a\x4c\x43\xfe\x47\x28\x1e\xeb\x7c\xe7\xb7\xfc\x1f\xe3\x96\x0e\x58\x44\x8d\x4b\x51\xa0\xfc\xe6\x5e\xc0\x86\x7e\x7c\x73\xe6\xae\x3f\xf8\x95\xf2\x9b\x86\x21\x6f\xf3\x80\x96\xde\xf7\x25\xa4\x41\x72\xdb\xd0\x8b\x9c\x01\x35\x2c\xe6\x3d\x3b\xe2\x3d\xf8\xd8\x61\x81\xf3\x2f\xf1\x95\x3a\x2f\x27\x61\xc7\x61\xbb\xaf\xdd\x27\x1a\x99\xdd\x5f\xf5\xe1\x96\xeb\xde\xe3\xc3\xc3\x83\xf4\x92\x18\x10\x86\x29\x47\x84\xe1\x32\xf6\x32\xf4\xf3\xe3\x35\x94\x03\xc4\x78\x32\xad\x17\xea\x89\xe1\xcc\x27\x41\x52\x4b\xe4\x86\x86\xe5\xf8\x7d\x1a\x18\xe1\xd0\x89\xe4\x97\xb9\xff\x78\xf7\x78\x79\x7e\xf1\xe1\x92\xff\xff\xbb\xb3\xc7\xbf\xae\xee\x3f\x3c\x9e\x5d\xde\x3d\x76\xf7\x4f\x1e\xff\x38\xff\xf4\x78\xf7\xe1\x6c\xff\xe8\x78\xa7\xb2\xdc\xfe\xd1\x71\x5c\xee\xe0\xe4\xb0\xbc\xdc\xf9\x87\xb3\xf3\x0f\x67\xfb\x7b\x8f\x37\x9f\x3f\xfe\xa3\x7b\xb0\x77\xa4\x15\xbb\x6d\xf4\xd0\xdb\x46\x8f\xbc\xad\x7c\xe0\x16\xef\x82\x9f\xa9\x20\x70\x69\xa4\x09\x82\xca\x49\x3c\xa1\x88\xe0\x3f\x52\x2f\x72\x2c\xf1\xf1\x8d\x88\xbd\x50\xcf\xf8\x26\x67\x5d\xa1\x2a\x7d\x9c\x18\x03\x66\x53\x5e\x42\x4d\xd1\xb8\x90\x25\x46\x6f\x68\xf8\x34\x30\xfe\x66\xf2\x03\x6a\x75\x58\x9e\x63\x3c\x39\x9e\x61\x3b\x01\xbf\xb4\xcb\xfc\x68\xd7\xf2\x9c\xdd\x27\xc7\xd3\x8b\xf0\xc1\x99\x94\xa1\x91\x25\xca\x78\x34\xea\xd8\xa9\xf0\x7a\x66\x81\x45\x0d\x8f\xd9\xd4\xe0\x9d\x60\x99\x11\x17\x67\xfc\x8e\xa4\xcc\x2b\xf5\x22\xe3\x6f\x3f\xcc\x08\x83\x81\xf9\x42\x0d\xc7\x17\xa5\x43\x63\x18\x39\xae\x61\xf5\x4d\x25\xf7\xf4\xf7\xf5\x68\xf4\x8d\x05\x2f\x4a\x2c\xf2\xab\x96\xe7\xa4\xb3\xcf\xb4\x0d\xe6\xb9\x6f\x45\x69\x13\xd0\x90\xb9\xaf\xe2\x1d\x92\xf6\xcb\xdf\x3a\xe2\xb7\x64\x32\x04\xd4\x1c\x38\x5e\x8f\x97\xf4\xa8\x10\x65\x86\x63\xbb\xd4\xe0\xf3\x93\x0d\x45\xa5\x07\x7b\x03\x4c\x8e\xbd\xa3\xb8\x0f\x5e\xf9\x3b\xef\x27\xff\xc5\xdc\xe1\x80\xaa\xef\x93\x0c\x97\x57\x33\xd8\x75\x9d\xa7\x5d\x35\x89\x76\x65\xa9\x58\xb7\xe5\x66\x99\x1f\xb0\xef\x6f\xe9\x3c\xeb\x53\xd3\x8d\xfa\xff\x32\xf2\x9a\xb3\xbb\xff\x4e\x4c\xbb\x6e\xae\x21\xb9\xda\xce\x99\x17\x05\xcc\x75\x69\xd0\x74\xea\x5a\x66\xa4\xc6\xb0\xe5\xd8\x41\x61\x08\xca\xd9\x3d\xf4\x22\xb3\xd7\xa3\xb6\x61\xb9\x6c\x58\x98\xe1\x52\x90\x73\xc1\x2c\x2e\x1b\x01\x1b\xaa\xc1\x91\x99\xe9\x4a\xdb\xf7\x59\x18\xf9\x66\xd4\x37\xfc\x80\xbd\x3a\x5c\xc7\x8a\xc6\x66\xcb\xba\x4a\x8b\xb9\xd4\x8a\x0a\xb3\x82\x37\x76\xc0\x3c\x27\x62\x5c\x55\x99\x16\xe5\x73\xdd\x61\xa2\x5d\x87\x7b\x61\xa2\x2a\x99\x6d\xd0\x57\xa9\xa1\xf5\x11\x7d\x34\xd0\xca\x54\xaa\xd3\x88\x06\x03\xc7\x33\x23\x6a\x1b\xbc\xa2\x9e\x65\x44\xfd\x80\x86\x7d\xe6\x8a\xe7\x74\xf7\xf6\xf6\xaa\x3f\x45\x68\xf5\xa9\x3d\x6c\xf8\x15\xea\xde\xb5\xba\x7d\xfa\x43\xff\x4d\x3d\x58\x98\x77\x5d\x98\x77\x30\xef\x60\xde\xc1\xbc\x83\x79\x07\xf3\x0e\xe6\x1d\xcc\x3b\x98\x77\xeb\x64\xde\xed\xc3\xbc\x83\x79\x07\xf3\x0e\xe6\x1d\xcc\x3b\x98\x77\x30\xef\x60\xde\xc1\xbc\x5b\x27\xf3\xee\x00\xe6\x1d\xcc\x3b\x98\x77\x30\xef\x60\xde\xc1\xbc\x83\x79\x07\xf3\x0e\xe6\xdd\x3a\x99\x77\x87\x30\xef\xa6\x6c\xde\xed\xdc\x04\x0e\x0b\x9c\xe8\x0d\x76\x1e\xec\xbc\x35\x50\x65\xb0\xf3\x60\xe7\xc1\xce\x83\x9d\x07\x3b\x6f\xa5\xed\xbc\x4e\x77\xcf\x08\x4c\xcf\xea\xd3\xa0\x6b\x14\x42\xf2\x54\x73\x2c\xd7\xe1\xa2\xc9\xa2\x41\x94\xc8\xe5\xcc\x83\x29\x0d\x8c\xca\x42\xb9\x51\x07\xdb\x11\xb6\x23\x6c\xc7\x8d\x56\x8f\xb0\x1d\x61\x3b\xc2\x76\x84\xed\x08\xdb\x71\xb5\x6d\xc7\xf7\x30\x1d\x61\x3a\xc2\x74\x84\xe9\x08\xd3\x11\xa6\x23\x4c\xc7\x85\x4f\x0e\x98\x8e\x30\x1d\x57\xc2\x74\x3c\xc2\xf6\xf2\xac\xec\xbc\x9d\x7b\xd3\xf1\x22\x7e\x35\xfc\xed\xed\x9c\x79\xb6\x23\x2f\xd3\x20\x74\xc2\x88\x7a\xd1\x57\x31\xd3\xcf\x5d\xd3\x19\xdc\xd2\xd0\xf9\x17\x85\x65\x08\xcb\x70\x0d\x94\xdf\x98\x96\x21\x2c\x3f\x58\x7e\xab\x3f\xf8\x61\xf9\xc1\xf2\x5b\x0d\xcb\x0f\x1b\xce\xb0\x26\x61\x4d\xc2\x9a\x5c\x72\x85\x0a\x6b\x12\xd6\xe4\xc6\x0e\x7e\x58\x93\xb0\x26\x57\xc5\x9a\xec\xc2\x9a\x84\x35\x09\x6b\x12\xd6\xe4\x32\x2b\x54\x58\x93\xb0\x26\x37\x76\xf0\xc3\x9a\x84\x35\xb9\x82\xd6\x64\x01\x60\x08\x6b\x12\xd6\x24\xac\x49\x58\x93\x0b\x57\xa8\xb0\x26\x61\x4d\x6e\xec\xe0\x87\x35\x09\x6b\x72\x55\xac\xc9\x7d\xf8\x26\x61\x4d\xc2\x9a\x84\x35\xb9\xcc\x0a\x15\xd6\x24\xac\xc9\x8d\x1d\xfc\xb0\x26\x61\x4d\xae\x9c\x35\xb9\x0f\xdf\x24\xac\x49\x58\x93\xb0\x26\x97\x50\xa1\xc2\x9a\x84\x35\xb9\xb1\x83\x1f\xd6\x24\xac\xc9\x15\xb4\x26\x0b\x67\xb9\xc0\x9a\x84\x35\x09\x6b\x12\xd6\xe4\xc2\x15\x2a\xac\x49\x58\x93\x1b\x3b\xf8\x61\x4d\xc2\x9a\x5c\x41\x6b\xb2\xc0\xf6\x81\x35\x09\x6b\x12\xd6\x24\xac\xc9\x85\x2b\x54\x58\x93\xb0\x26\x37\x76\xf0\xc3\x9a\x84\x35\xb9\x22\xd6\xe4\x31\x92\x70\x60\x4c\xc2\x98\x84\x31\xb9\xcc\xfa\x14\xc6\x24\x8c\xc9\x8d\x1d\xfc\x30\x26\x61\x4c\xae\x88\x31\xf9\x0e\x39\x38\x30\x26\x61\x4c\xc2\x98\x5c\x66\x7d\x0a\x63\x12\xc6\xe4\xc6\x0e\x7e\x18\x93\x30\x26\x57\xc4\x98\xc4\x81\x87\x30\x26\x61\x4c\xc2\x98\x5c\x6a\x7d\x0a\x63\x12\xc6\xe4\xc6\x0e\x7e\x18\x93\x30\x26\x57\xc2\x98\x3c\xc6\x11\x88\xb0\xfc\x60\xf9\xc1\xf2\x83\xe5\x07\xcb\x0f\x96\x1f\x2c\x3f\x58\x7e\x9b\x62\xf9\x69\x47\x20\x02\xe5\x03\x6b\x12\xd6\x24\xac\xc9\x65\x54\xa8\xb0\x26\x61\x4d\x6e\xec\xe0\x87\x35\x09\x6b\x72\x55\xac\xc9\x03\xec\x4a\xc3\x9a\x84\x35\x09\x6b\x72\x99\x15\x2a\xac\x49\x58\x93\x1b\x3b\xf8\x61\x4d\xc2\x9a\x5c\x41\x6b\x12\xbe\x49\x58\x93\xb0\x26\x61\x4d\x2e\x9f\x42\x85\x35\x09\x6b\x72\x63\x07\x3f\xac\x49\x58\x93\x2b\x62\x4d\xc2\x35\x09\x63\x12\xc6\x24\x8c\xc9\xa5\xd6\xa7\x30\x26\x61\x4c\x6e\xec\xe0\x87\x31\x09\x63\x72\x45\x8c\xc9\x43\x18\x93\x30\x26\x61\x4c\xc2\x98\x5c\x66\x7d\x0a\x63\x12\xc6\xe4\xc6\x0e\x7e\x18\x93\x30\x26\x57\xc4\x98\x3c\x86\x31\x09\x63\x12\xc6\x24\x8c\xc9\x65\xd6\xa7\x30\x26\x61\x4c\x6e\xec\xe0\x87\x31\x09\x63\x72\xf5\x8c\x49\xc4\x4c\xc2\x98\x84\x31\x09\x63\x72\xf9\xf4\x29\x8c\x49\x18\x93\x1b\x3b\xf8\x61\x4c\xc2\x98\x5c\x11\x63\x12\x27\xd6\xc0\x98\x84\x31\x09\x63\x72\xa9\xf5\x29\x8c\x49\x18\x93\x1b\x3b\xf8\x61\x4c\xc2\x98\x5c\x11\x63\xf2\x04\xc6\x24\x8c\x49\x18\x93\x30\x26\x97\x59\x9f\xc2\x98\x84\x31\xb9\xb1\x83\x1f\xc6\x24\x8c\xc9\xd5\x33\x26\xb1\xcd\x0d\x63\x12\xc6\x24\x8c\xc9\xe5\xd3\xa7\x30\x26\x61\x4c\x6e\xec\xe0\x87\x31\x09\x63\x72\x25\x8c\xc9\x77\x63\xda\x8f\xea\xf3\xbc\xee\xc3\xb0\x84\x61\x09\xc3\x12\x86\x25\x0c\x4b\x18\x96\x30\x2c\x61\x58\xc2\xb0\x84\x61\xc9\x0d\xcb\x13\x18\x96\x30\x2c\x61\x58\xc2\xb0\x5c\x1d\xdd\x0a\xc3\x12\x86\xe5\xc6\x0e\x7e\x18\x96\x30\x2c\x57\xc1\xb0\x7c\x9f\xb7\x2b\xbd\xa1\xeb\x56\x19\x7e\x89\x4d\x66\xc9\x71\xc3\xeb\xcc\x19\x5d\x23\x4c\xb4\xbc\xd5\xf3\xd1\x7c\xa2\x6e\xa9\xa5\x96\x35\xae\x2a\xed\xb6\x9c\xd5\x95\x1d\x87\xb0\x51\xeb\x6d\x54\x18\x9a\x30\x34\xd7\x40\xd7\x8e\x69\x68\x4e\x26\x22\x60\x88\xc2\x10\x5d\x85\xc9\x01\x43\x14\x86\xe8\x32\x1b\xa2\xff\x26\x9e\xbd\xf5\xe7\x49\xf8\x95\xdb\x86\xcc\xbb\xfd\xf3\xf2\xee\x2d\x8c\xe8\xe0\x6a\x60\xf6\xc4\xe7\xf8\x11\x3b\x41\xf7\x3a\x7b\x35\x79\x3f\x5b\xea\xd2\xae\xc5\x02\xca\x42\x83\xff\x7c\xfa\x7a\xd0\xe9\x76\xba\x6a\xe0\x6f\x99\xae\xef\x78\x54\x2f\x1b\xbc\x50\x23\x62\xcc\x0d\x4f\x5f\xf7\x3a\xdd\xce\xa1\x2a\xe8\xf5\x1c\xef\xfb\x8d\x1a\xe2\xa3\x0a\x5b\x34\x88\x2e\xd8\x37\xcf\x65\xbc\x43\x1a\xdc\xc0\x47\x7c\xe0\xd1\x88\x86\xca\x1c\x0c\xef\x1c\x9b\x5a\x66\xd3\x7b\x6d\x29\x72\xe3\x92\x2f\x27\xa1\x61\x7b\xa1\xc1\x2f\x89\x7f\x98\x03\xfb\xf8\xf0\xb4\xdb\xe9\x1e\x76\x4e\xd4\x6d\xb6\x17\x0e\xcc\xf0\xef\xb2\xdb\xd4\x25\xc3\x33\x3d\xef\xad\xec\x5e\xf5\xc8\x92\x36\xc6\x55\x84\xf2\x52\xcd\xcd\x67\xc3\x88\x85\x96\xe9\x66\xfb\xc7\x72\x87\x61\x44\x03\x3e\xa5\xb8\x32\x70\x98\x67\xba\x5c\xdd\xaa\xa2\x49\x7d\xc9\xa8\xd3\xba\x4e\xaf\xa7\xff\xe6\xd3\x80\x5f\x3a\xcd\x0f\x13\x75\xdb\xb3\x6b\x7a\x1e\x75\x4b\x46\x89\xba\xc2\x3b\xf9\x7d\x27\x57\xfc\xdc\x73\xaa\xef\x30\x2c\xcf\xe1\x77\xed\x27\x6d\xb3\x4c\xd7\xb1\xd8\xb5\x52\xef\xc9\x5d\xe2\x57\x21\xaa\xd4\x68\xcc\x14\xcf\x3f\x43\x96\x16\x75\x97\x14\x8e\xdc\xb2\xc2\x91\x7b\xfa\xba\xaf\x75\x92\x65\x7a\xa6\xdb\xa2\x1d\x9e\x59\x78\xd5\xca\x66\x78\xa6\xfb\x7b\xbb\xce\xfc\x46\xcd\x57\x1a\xb7\x46\xfc\x07\x37\x0e\xc2\x5d\xf1\x4f\x31\x68\x4f\xf7\x3b\xdd\xce\xbe\x5e\x5c\x35\xa7\x50\xda\xf3\xad\x4c\x61\x9f\xd9\x57\xde\x73\x60\x72\xfd\x61\x3a\x5e\x76\x74\xf9\xe6\x30\xa4\x6a\x0c\x1d\x24\xcd\x71\xbc\x5e\x2c\xd0\xe2\x82\x62\xb6\x1b\xea\x42\xbc\xb8\x75\x69\x70\xba\xc7\x07\xd3\x7e\x3c\x98\x0e\xb2\x35\xfc\x96\xda\xe2\xa3\x2a\x32\x6c\xb9\xa6\x53\xe6\xfb\x29\x9f\xce\x99\xed\x9d\xbd\x4e\x37\x7e\xca\xfe\x6c\x24\xdb\x49\x1b\xc9\x76\xd2\x56\xb2\x9d\x4c\x20\xd9\x4e\x20\xd9\x9a\x4b\xb6\x74\x98\x40\xb2\x41\xb2\xad\x86\x64\xeb\xce\xd8\x68\xeb\x1e\xb4\x91\x6d\x49\xe9\xc6\xc2\x2d\xb9\x63\x1c\xe9\x96\xb9\x19\xe2\x6d\x94\x78\xeb\xc2\x72\x83\x7c\x9b\x8e\x7c\x3b\x4e\xe5\x5b\x77\xaa\xf2\x4d\xd6\x35\xa0\x51\xe0\x58\x42\x12\x64\x1b\xaf\x2e\x18\xa1\xb8\xa2\xde\x42\x0c\xb7\x6e\x41\x34\xee\x43\x34\x42\x34\x36\x14\x8d\x85\xd1\x0c\xd1\x08\xd1\xb8\xb6\xa2\xf1\x60\xc6\xeb\xe1\xee\x5e\x2b\xc9\xb8\xd7\x5a\x32\x16\x67\x77\x0b\xc9\xb8\x07\xc9\xd8\x5c\x32\x1e\x60\x4d\x0c\xc1\xb8\x5a\x6b\xe2\xa3\x59\xdb\x7d\x90\x6e\xeb\x22\xdd\x8e\x60\xf6\x41\xba\xad\xac\x74\x2b\x00\x75\xb0\xaa\x85\x74\x83\x74\x83\x74\xdb\xc0\x45\x6d\xb7\x33\xce\x4e\xc8\x7e\xa7\x7b\xb2\xd1\x82\x31\x31\x17\xc7\x91\x8c\x79\x5b\xb3\x9d\x68\xcc\xdf\x3d\x4f\xd9\xa8\x8f\x16\xc8\x46\xc8\xc6\x75\x97\x8d\xe3\x6c\x85\x40\x36\x6e\xaa\x6c\xc4\x66\x08\x64\xe3\x46\xca\xc6\xc6\x0b\xea\x56\xb2\xf1\xb8\x95\x6c\x3c\x6e\x2d\x1b\x8f\x27\x91\x8d\xc7\x90\x8d\x73\x90\x8d\xdd\xf4\x31\x6d\x84\xe3\x41\x5b\xe1\x78\xd0\x46\x38\x1e\xcc\x4e\x38\x1e\xb4\x10\x8e\x07\xad\x85\xa3\xd6\x9b\x90\x8e\x33\x96\x8e\x07\xb3\xb6\x1c\x21\x1d\xd7\x48\x3a\x1e\x40\x3a\x42\x3a\x6e\x90\x74\x1c\x67\xab\x19\xd2\x71\x53\xa5\xe3\x78\xfb\x31\x90\x8e\x90\x8e\xab\x29\x1d\x8f\x67\x2d\x1d\x8f\x5a\x49\xc7\xa3\xd6\xd2\xf1\x68\x12\xe9\x78\x04\xe9\xd8\x4a\x3a\x1e\x43\x3a\x42\x3a\x6e\x90\x74\xac\x3b\x66\x15\xd2\x11\xd2\x31\x2b\x1d\x4f\x20\x1d\x21\x1d\x37\x48\x3a\xbe\x87\x74\x84\x74\x6c\x2c\x1d\xdf\x43\x3a\x42\x3a\x6e\xa6\x74\x9c\xc9\x9e\xf5\x7e\x2b\xa2\xcd\x7e\x6b\xa4\xcd\xfe\x24\x4c\x9b\xfd\x31\xa1\x36\x90\x8e\x90\x8e\x90\x8e\x9b\x25\x1d\x0f\x66\xb3\x2b\x63\xec\xb7\xdb\x97\x49\xca\xb7\xd8\x99\x49\xee\x19\x6f\x6f\x26\x73\x3b\xa4\x24\xa4\x24\xa4\x24\xa4\x64\x2a\x25\xf7\xc7\xc2\xbd\xee\x77\xf6\x0f\x9b\x4b\xc9\x76\x32\xb2\xbd\x84\x9c\x48\x3e\x8e\x29\x1d\x0f\x26\x91\x8e\x07\x13\x49\xc7\x83\xd9\x48\x47\xfe\x89\x55\x0f\xa8\x7f\xee\xaa\xff\x3d\xed\xf2\x0f\x9e\x2d\x36\x4f\x99\xbc\x3f\x26\x6b\x16\x32\x19\x32\x79\x05\x64\xf2\x41\x51\x26\x8f\x97\xc3\x08\x99\x0c\x99\x3c\x3f\x99\x3c\x5e\xe6\x24\x64\x32\x64\xf2\x8a\xca\xe4\x71\x0d\xe5\xfc\x8b\x8d\x3e\x20\xa1\x15\x58\xe8\xb0\x35\x58\xe8\x70\x12\xb0\xd0\x61\x0b\xb0\xd0\x98\x72\x79\x5c\x89\x3c\x45\x59\x5c\x25\x85\xf5\xcf\xcc\x9f\x3c\x6d\x69\x3c\x8e\x1c\x1e\xdf\x38\xae\xb8\x31\x27\xa6\x8a\xa2\x38\x7f\x1f\x64\xf2\x04\x32\xf9\x28\x5b\xbc\x5e\x26\xa7\x85\x47\xcb\xe4\xb1\xa5\xf1\x7e\x37\xfd\xc4\x53\x65\x18\xe5\xc7\x4d\x43\xb1\xdc\x40\x20\xb7\xd8\xfd\x1a\x47\x20\xb7\x72\xf3\x1e\xb6\x76\xf2\x1e\x4e\xe2\xe2\x3d\x6c\xe1\xe0\x85\x40\x86\x40\x86\x40\x86\x40\x9e\x8d\x40\x1e\x2f\x47\xb4\x85\xd7\xa2\x55\x34\x42\xb7\x75\x34\x42\x77\x92\x68\x84\xee\xb8\xd1\x08\xf0\x5a\xcc\xd3\x6b\x81\xcc\xd4\xd5\x13\xc8\xf0\x5a\x8c\xef\xb5\x38\x9c\xb1\x4c\xde\x7f\xd7\x46\x26\x27\xa5\x9b\x47\x88\xbd\x9b\x40\x26\x67\x6e\x86\x4c\x5e\x56\x99\x5c\x30\x43\x20\x93\x21\x93\xd7\x58\x26\x8f\x47\x0b\xc0\xee\xde\xba\xc9\xe4\x66\xd2\x11\xb4\x80\xd5\x93\x8e\x33\x73\x21\x4c\x28\x1d\x75\x47\xc2\x0a\x48\xc7\x56\x5e\x5d\x58\xac\xeb\x25\x1d\x97\xd9\x62\x85\x4c\x86\x4c\xde\x24\x99\x3c\x1e\xc1\x05\x16\xeb\xba\xc9\xe4\x66\xd2\x11\x04\x17\x48\xc7\x0d\x95\x8e\xb3\x8d\x43\x58\x1b\xd3\x75\xfd\xe2\x10\x66\x65\xa2\xce\x55\xfc\x22\xfc\x60\x9d\x25\xf1\xba\x87\x1f\xbc\x83\x91\x0a\x23\xb5\xb1\x94\x7c\x07\x23\x15\xa2\x71\x83\x8c\xd4\x77\x30\x52\x61\xa4\x2e\x8f\x91\x3a\xbe\xf8\x85\x91\xba\xce\x92\x78\x83\x8c\xd4\x16\x4c\x9a\x71\xc4\xf0\xba\xa0\xbb\xd6\x4f\x0c\xeb\x9f\x79\x49\x72\x16\x20\x8e\x21\x8e\x37\x5c\x1c\x1f\xce\xc6\x67\xb0\xce\x88\x30\xf8\x0e\xe0\x3b\xd8\x78\x11\xb9\x01\xbe\x83\xf1\x20\xdc\x63\x18\xad\x07\x87\x6d\x84\x65\x52\xba\xb1\xa8\x4c\xee\x18\x47\x50\x66\x6e\x86\xd1\xba\x78\xa3\x75\x7c\x52\x23\x8c\xd6\x75\x96\xc8\xeb\x6d\xb4\x1e\x80\x0e\xd6\xde\x58\x4d\x87\x4f\x7b\x5b\xf5\xa8\x33\x01\xcd\xb6\x70\xf3\x3c\x2d\xd5\x83\xa5\x86\x74\x1d\xe6\x8a\xd7\x0a\xa4\x42\xe1\xe9\xc9\xc5\xc3\x6c\xe9\xc6\xcd\x58\x39\xb9\xb8\xf6\x96\x6a\x46\x34\x22\x79\x60\x53\x45\xe3\x88\x1d\xaf\xe3\x29\x58\xab\x10\xc8\x10\xc8\x10\xc8\x4d\x04\xf2\xec\xf1\xe2\x6b\xeb\x61\x5d\x3f\xc9\xdc\x50\x46\x2e\x33\xee\x1b\x42\x12\x42\x72\x96\x42\x12\x24\xc3\xc6\x0e\xd6\xf6\xf2\x71\x4c\xc9\x38\x3d\x99\x38\x8e\x77\x75\x1a\xf6\xea\x7c\xa5\xf0\x5c\xdd\xab\x10\xc8\x70\xaf\x4e\xd7\xbd\x3a\xae\x7f\xb5\xb5\x34\x3e\xda\x6b\x23\x8d\x93\xd2\x8d\xa5\xf1\x51\x71\xc6\x37\x97\xc6\x47\x7b\x90\xc6\x4b\x24\x8d\xc7\x77\x1c\x40\x1a\x43\x1a\x17\xa4\xb1\xbc\xb0\xd7\xd9\x3f\x2a\xba\xa4\x96\x51\x26\xef\x43\x26\x43\x26\x2f\x9b\x4c\x2e\x90\xe6\xd6\x51\x26\x27\x93\x3c\x2c\xb9\x49\x0c\xb6\x54\x0e\x84\x90\xea\x90\xea\xe3\x48\xf5\x7d\x48\x75\x48\xf5\x65\x93\xea\xfb\x90\xea\x90\xea\x90\xea\x6d\xa5\xfa\xac\x91\xe3\x08\x4f\x5b\x9b\x9d\xbe\x65\x26\x7f\xc3\x93\x81\x8d\xbe\x69\x6f\xf4\x1d\x02\xc2\x30\x06\x84\x61\x8d\xec\xdd\x59\xc5\xa3\xcd\x55\xf6\xae\x90\x99\x0b\x31\x8c\xed\xbd\x9c\x0c\xc6\xe9\x0b\x30\x4f\x1b\x8a\xc8\x65\xc6\x7c\x43\x2e\xc2\x3c\x9d\xb6\x79\x3a\xee\xd1\x0b\x30\x4f\x61\x9e\x4e\xdb\x3c\x1d\x5f\xf6\xc2\x3c\x5d\x67\x31\xbc\x41\xe6\x29\x00\x61\x9b\x28\x83\xf5\x6f\xbc\x24\x5b\x62\x90\xc5\x90\xc5\x9b\x28\x8b\xc7\x25\x8a\x6f\x36\xf7\x06\xb2\x78\x96\xb2\x78\x45\x48\x8d\x90\xc5\x90\xc5\x53\x95\xc5\xe3\x32\xc8\xe0\xb6\xdd\x38\xb7\xed\xf8\x5c\x30\xb8\x6d\xd7\x4e\x2e\x6e\x80\xdb\xf6\xfd\xdc\xb2\x87\x5b\x45\xd1\x1e\xb6\x8e\xa2\x3d\x9c\x24\x8a\xf6\x10\x51\xb4\x4b\x64\xa6\xae\x08\x9b\x11\xe2\x18\x66\xea\x14\xcd\xd4\xc3\xb1\xd8\x8c\x65\xb9\xf6\x70\xdf\x2e\xbf\x2c\x3e\x68\xb6\x85\x96\x8e\xf8\x09\x65\xf0\x41\x2b\x19\x7c\x38\x01\x6b\x0c\x32\x18\x32\x78\x8e\x32\xb8\xb0\xbf\x30\x35\x19\xdc\xd8\x1e\x86\x0c\x5e\x23\x19\x5c\x6d\x0f\x43\x16\x43\x16\x43\x16\xcf\x53\x16\x6b\x68\xb3\xbd\x99\x0a\x63\xa4\xf8\x42\x18\x37\x15\xc6\x8b\x43\x9b\x1d\xcd\x4f\x1a\x23\xc5\x77\x75\xe4\xf9\xac\x53\x7c\x67\x28\xd5\x67\xeb\xe6\x38\x6a\x05\xac\x3c\x6a\x0d\xac\x3c\x9a\x04\x58\x79\xb4\x11\xc0\x4a\x48\x75\x48\x75\x48\xf5\x0d\x90\xea\x07\xf3\x12\xea\x08\x77\x83\x50\x6f\x28\xd4\x0f\xe0\x37\x81\x44\xde\x40\xbf\xc9\x38\x59\xca\x63\xc9\x62\xc4\x74\x40\x16\x37\x94\xc5\x48\x03\x81\x2c\xde\x44\x59\x7c\x3c\x37\x59\x8c\xd3\x39\x20\x8b\x9b\xc9\xe2\x63\xc8\x62\xc8\xe2\x0d\x94\xc5\xe3\xa4\xe4\x61\x3b\x11\xb2\x78\x96\xb2\x78\x71\x29\x79\x73\xf4\x3b\x43\x16\xc3\x6b\x5c\x2a\x91\x4f\x20\x91\x21\x91\x97\x4c\x22\x9f\x6c\x82\x44\xc6\x4e\x20\x64\xfa\xac\x65\x7a\x8b\x73\x39\xc6\x93\xe9\xdd\x56\x32\xbd\xdb\x5a\xa6\x77\x27\x91\xe9\x5d\xc8\xf4\x25\x94\xe9\x73\x3f\x96\x03\x32\x1d\x32\x7d\xf5\x65\xfa\x38\x00\x0d\xc8\x74\xc8\xf4\x59\xca\xf4\xc5\x65\x89\x43\xa6\x43\xa6\xaf\x95\x4c\x9f\x6d\xa6\x23\xc2\xb0\x21\xd3\x21\xd3\x21\xd3\x21\xd3\x67\x2c\xd3\x8f\x3a\x73\x4b\xad\x41\x14\x36\x64\x7a\x23\x99\x7e\x54\x29\x9a\x47\x08\x8e\x12\x76\xda\x4c\xa3\x4d\xde\x25\x58\xb5\x06\x32\xbd\x50\xb8\xb5\x4c\x2f\xd4\x30\x3d\x99\xae\x57\x3d\x4a\xa6\xe7\xca\x36\x93\xe9\xdd\xb6\x32\x7d\xbf\x8d\x4c\xdf\x9f\xb5\x4c\x5f\xd6\x78\x95\x83\xbc\x34\x47\xa6\x24\x4c\xf4\xa5\x13\xe7\xe3\x66\x4a\x4e\x41\x9e\xb7\xb2\xd1\x21\xcf\x37\x45\x9e\x2f\xb7\x8d\x1e\xeb\x97\x6f\x8e\x67\xb3\x6f\xe1\x4d\x5d\x2f\xf0\x0e\x76\x69\x64\xc8\xde\x90\xb6\x6c\x41\x29\x74\x01\x45\x41\xcc\xcc\xb2\x29\x85\x31\x11\x55\x50\x0a\x50\x0a\x9b\xa9\x14\x6a\xa4\x3a\x4c\x7d\x48\x75\x48\xf5\x16\x52\xbd\x9b\x3f\x47\xa1\x56\x1a\x16\x4b\xb7\x96\xeb\xc5\x2a\x9a\x0a\x76\xfe\xfb\xef\x2e\xfd\xfe\x95\x95\xdd\xe0\x33\x7b\xdf\x36\xe9\x80\x79\xc6\xb3\x4b\xbf\xbf\x32\xb7\xf0\xb4\xd1\x9a\x21\x5f\xbc\x79\x67\x8c\xa1\x1b\xd4\x4d\x63\xbf\x10\x74\xcb\x4a\x2d\x38\x66\xbc\x51\xdc\xea\x18\x9d\xa3\xd6\xc7\xe8\x1c\x4d\x72\x8c\xce\x51\x8b\x63\x74\xa0\x9a\xa0\x9a\xa0\x9a\xa0\x9a\xa0\x9a\xe6\xa7\x9a\x1a\x1f\x78\x0c\xd5\x04\xd5\x34\xde\x73\xb9\x18\x73\x99\x65\xba\x65\xaf\xcc\x2f\x1a\x96\x69\xf5\xa9\x7c\xeb\x77\xd0\x67\xd0\x67\xd0\x67\xd0\x67\x6d\xf4\xd9\xfe\xdc\xbc\x80\xd0\x67\xd0\x67\x0d\x55\xd3\xfe\xc2\x54\xd3\x71\x1b\xd5\x74\xd2\x79\xdf\x5c\x33\x15\x0a\xb7\x56\x4c\x85\x1a\xaa\xf5\x52\xb6\xf0\x68\xb5\x92\x2b\xdd\xf8\x45\x66\xb5\xb7\x73\x9c\xec\x1f\x35\x50\x0a\x69\xe1\x99\x2b\x85\x83\xfd\xd9\x9c\xaf\x3a\xed\xbd\x9d\xfd\x34\x23\x1a\x0e\x34\x48\xf5\x15\x5e\xa5\xec\x8f\x97\x47\x3d\x6f\x55\xd0\x3d\x68\xb3\xcf\x5f\x2c\x3d\xce\x2a\xa5\xf1\x4e\x7f\x49\xe9\x31\xac\xfa\xc3\x76\xcb\x94\xe6\xc1\x02\xf9\xc2\xf3\x5a\xa6\x1c\x42\x23\xad\xde\x32\x65\x7f\xd6\x6e\xb7\x56\x87\x24\x1e\xb5\x3e\x24\xf1\x68\x92\x43\x12\x8f\x70\x48\xe2\xa6\x2a\xb4\xfd\xa4\x71\xd0\x63\x6b\xa5\xc7\xf6\xa1\xc7\xd6\x56\x8f\x1d\xd6\xe9\xb1\xc3\xd9\xea\xb1\xf7\xad\xf4\xd8\xfb\xd6\x7a\xec\xfd\x24\x7a\xec\x3d\xf4\x18\xf4\x18\xf4\x18\xf4\x18\xf4\xd8\xca\xeb\xb1\xa3\x99\xea\xb1\xe3\x56\x78\xae\xe3\xd6\x78\xae\xe3\x49\xf0\x5c\xc7\xc0\x73\x41\x8f\x41\x8f\x41\x8f\x41\x8f\xad\xa6\x1e\x9b\x5b\xf4\x03\xce\xad\x83\x1a\x6b\xa8\x91\x16\x17\xfc\x00\x7a\x0d\x12\x5b\x57\x99\x5e\x33\xb7\x13\xa1\x71\xf2\x1d\xa4\x79\x43\x69\x3e\xe6\x89\xd0\x90\xe6\x90\xe6\x1b\x2e\xcd\x0f\x71\x52\x13\xa8\x33\x4b\x26\xcd\x0f\x57\x23\x67\x06\xd2\x7c\x53\xa4\xf9\xb2\x67\xab\x54\xcb\xf4\x19\xc7\x25\x43\xa6\x43\xa6\x43\xa6\x43\xa6\x43\xa6\x2f\x97\x0b\xbe\xa0\x12\x8e\x60\xe6\x43\x25\x2c\x99\x4a\x28\xcc\x10\xa8\x04\xa8\x04\xa8\x84\xc6\x66\xfe\x11\xcc\x7c\xc8\x74\xc8\x74\xc8\x74\xc8\xf4\xd5\x95\xe9\x33\x32\xf3\x67\x9e\x91\xde\x2a\x60\x14\xe7\xb9\x42\x25\x2c\x20\xb7\x1c\x2a\x01\x2a\x61\xe3\x55\xc2\xf1\xdc\x56\x09\x50\x09\x50\x09\xcd\x54\xc2\x31\x56\x09\x50\x09\x50\x09\x8b\x52\x09\xef\x70\x26\x09\xce\x24\x59\x32\x95\xf0\x0e\x2a\x01\x2a\x01\x2a\x61\x51\x2a\xe1\x3d\x54\x02\x54\xc2\x92\xa9\x84\xf7\x50\x09\x50\x09\x50\x09\x8b\x51\x09\xc7\x9d\x31\x4f\x2e\x2c\xbc\x04\xb6\x97\x97\x5f\x25\xbc\xcb\xcb\xf8\x7a\x95\x70\x9c\xcc\xb5\x09\x55\x42\xfa\xdc\x26\x2a\xe1\xb8\x38\xed\x96\x53\x25\x9c\x74\xba\xcd\x55\x42\xa1\xf0\x18\xc8\xf2\x6c\x0d\x6d\x69\x0a\xfa\xfd\x4d\x28\xe6\xdd\xc6\x5a\x22\x57\x76\x2e\xcc\xd9\xf4\x99\x50\x32\x53\x57\x32\x87\xd3\x56\x32\x7b\xe9\x8e\xf5\x8c\xb5\x0c\x18\xea\xd0\x32\x33\x43\x1c\x65\x46\xf2\xbc\x75\x13\x58\x47\x4b\xcd\x3a\x02\x43\x7d\x89\x59\x47\xb3\x54\x68\x6d\xf6\xdb\xc7\x50\x68\x60\xa8\x43\xa1\x2d\xa1\x42\x03\xb3\x6f\x4d\xf5\x18\x98\x7d\xeb\xab\xc7\x0e\x0b\x7a\x6c\x4c\xcc\xd3\x18\x7a\x0c\x0c\x75\xe8\xb1\x59\xea\xb1\x31\xe1\x50\xd0\x63\xd0\x63\xd0\x63\xeb\xa4\xc7\x66\xbb\x1e\x03\x43\x1d\x7a\x0c\x7a\x0c\x7a\x0c\x7a\x0c\x7a\x6c\xfa\x7a\x6c\x4c\x86\x3a\xa2\x31\xa0\xc6\xc6\x78\x6e\x33\x8d\xb4\x38\x86\x3a\xa2\x31\x10\x8d\x81\x68\x8c\xa9\x6f\x5e\xed\xcf\x2d\x18\x03\xb9\xa2\x50\x32\x2d\x95\xcc\x72\xe3\x03\xa0\x64\xa0\x64\xa0\x64\x9a\x28\x99\xf9\x6d\x2c\x41\xc9\x40\xc9\x34\x53\x32\x8b\x3b\x3f\x04\x4a\x06\x4a\x06\x4a\x66\xea\x4a\x66\xcc\x63\x4d\xc6\x50\x32\xc8\x67\x85\x92\x69\xa6\x64\x56\x04\x81\xdf\xdd\x4b\x3b\xa8\xc1\x46\x4e\xa1\x74\xfb\x8d\x9c\x7c\x15\xad\x77\x32\xf4\x0a\x1a\x6c\xcd\xe4\x8a\x37\x7f\xbf\xb9\x85\x7c\xef\x65\x95\x07\x74\xcd\x32\xeb\x9a\x63\xe8\x1a\xe8\x9a\x25\xd3\x35\x2b\x42\x58\x83\xae\x81\xae\x81\xae\x19\x4f\xd7\xcc\x38\xbb\x08\xba\x06\xba\x06\xba\x66\xaa\xba\xa6\x31\xaa\x07\x8a\x09\x8a\x69\xc5\x14\xd3\x98\x4c\x51\x28\x26\x28\xa6\x99\x29\xa6\x15\x61\x8a\x42\x31\x41\x31\x41\x31\xcd\x4a\x31\x9d\x40\x31\x41\x31\x2d\x99\x62\x3a\x59\x11\xc5\x74\x90\x13\xfd\xa3\x92\x58\xf6\x26\x55\x4c\x85\x2a\x66\xaa\x98\x0e\x5a\xd1\x51\xf3\xc5\x9b\x77\xc6\x1c\x49\x41\xe0\xab\xae\xa2\x62\x9a\xb1\x2b\x0f\xe4\x3b\x28\x26\x28\x26\x28\x26\x28\x26\x28\xa6\x06\x8a\x69\xcc\xb3\x20\xa0\x98\xa0\x98\xc6\x78\xee\x0c\x89\x09\x2b\x72\x80\x04\xb4\x19\xb4\x19\xb4\xd9\x6c\xb4\xd9\x3b\x6d\x2e\x37\xd7\x66\x87\xc5\x84\x10\x64\x1b\xad\xa1\x32\x3b\x5a\xc4\x2a\xeb\x5d\xa5\x7a\x59\x32\xbd\x84\x6c\x23\x64\x1b\xad\xa7\x8e\x39\x9e\x9d\x8e\x69\xec\xca\x1b\x4b\xc7\x60\x8b\x09\x3a\x66\xad\x74\xcc\xe2\x63\x1f\x10\xce\x80\x70\x86\x15\x52\x35\xe3\x70\xe0\xa0\x6a\xa0\x6a\x66\xa8\x6a\x56\x04\x03\x07\x55\x03\x55\x03\x55\x33\x9e\xaa\xc1\xaa\x06\xaa\x06\xaa\x66\x85\x54\x0d\x22\xba\xa1\x97\xd6\x55\x2f\x8d\x03\x90\x83\x5e\x82\x5e\x9a\xa1\x5e\x5a\x11\x7e\x1c\xf4\x12\xf4\x12\xf4\xd2\xac\xf4\xd2\x38\xcc\x39\xe8\x25\xe8\xa5\x19\xea\xa5\x55\x41\xce\x21\x02\x0e\x11\x70\xd0\x4b\xb3\xd7\x4b\xb3\xf5\xe3\x21\x9c\x1b\x7a\x09\x7a\x09\x7a\x09\x7a\x09\x7a\xa9\x81\x5e\x3a\x9a\xd7\x7a\x09\x7a\x09\x7a\x69\x66\x69\x46\xef\x8a\xb3\x0a\xca\x0c\xca\x0c\xca\x6c\xb3\x94\xd9\xf1\x18\x47\xe7\x41\x99\x41\x99\x2d\x9b\x32\x3b\x5e\xd8\x71\x7b\x38\x6d\x7c\xa9\x4f\x1b\x9f\x5c\x9b\xe1\xb4\xf1\x55\xd4\x66\xb3\x75\x19\x9e\xb4\xd2\x66\x27\xad\xb5\xd9\xc9\x24\xda\xec\x04\xda\x6c\x33\xb5\xd9\x7e\xd2\xb9\x50\x62\x6b\xa5\xc4\xf6\xa1\xc4\xd6\x56\x89\x1d\xe6\x95\xd8\x38\x1c\xa3\xb1\x94\xd8\xfb\x56\x4a\xec\x7d\x6b\x25\xf6\x7e\x12\x25\xf6\x1e\x4a\x6c\xc5\x95\xd8\x98\x18\x23\x28\x31\x28\x31\x28\xb1\x35\x52\x62\x33\x5d\x89\x1d\xb7\xc2\x17\x1d\xb7\xc6\x17\x1d\x4f\x82\x2f\x3a\x06\xbe\x08\x4a\x0c\x4a\x0c\x4a\x0c\x4a\x6c\x05\x95\xd8\x49\xaa\x8e\xb0\x39\xd6\x46\x89\xed\x8f\xa5\xc4\xf6\xc7\x53\x62\xfb\x0b\x52\x62\xef\x57\x46\x89\xe9\xe3\x18\x9b\x63\xd0\x66\xd8\x1c\xdb\x08\x6d\x76\x50\xa3\xcd\xb0\x39\x06\x6d\xb6\x69\xda\x0c\x4b\xb2\x35\x55\x62\x58\x92\xad\xaf\x12\x2b\x2c\xc9\x8e\xb1\x39\x36\xce\xe6\x18\x94\xd8\x92\x29\xb1\x31\x0f\x9f\x87\x12\x83\x12\x83\x12\x5b\x23\x25\x86\xcd\x31\x28\x31\x28\x31\x28\x31\x28\x31\x28\xb1\x15\x52\x62\x27\x9d\x6e\x77\x8c\xcd\xb1\xbd\x4e\xf7\x5d\x53\xe5\xd5\xca\x8b\xd8\xda\x89\x38\x89\x0f\xb1\x85\x0b\xd1\x30\x07\xf6\xf1\x21\x97\xad\x87\x49\xd8\x43\x53\xf5\x55\x76\x6f\x63\x25\x56\x73\xf3\x58\x2a\x25\xa9\x6f\x2f\x13\x36\x32\x42\x47\x64\x86\x49\x1b\x1d\xf1\xbe\x53\xbf\xe3\x94\xbd\x23\xd6\x14\xfb\xb9\x5c\xdc\x51\x12\xb1\xcd\x41\x51\x85\xc2\x4d\x93\x82\x1b\x48\xe6\x16\x67\x3a\x75\xc7\x38\xd3\xe9\x7d\xbb\x33\x99\xba\x6d\x12\x72\xbb\x2d\x12\x72\xd5\x18\x4a\xf3\x83\xdb\x08\xd7\x3d\x41\x15\x8c\x07\xd3\xc1\x14\xc5\x6a\x56\xb2\xbd\x1f\x8b\xef\xd0\xed\x74\xf7\x9b\x0a\xb6\xc3\x36\x82\xed\xb0\xad\x60\x3b\x9c\x40\xb0\x1d\x8e\x27\xd8\xde\x4d\x20\xd8\xde\x4d\x22\xd8\xde\x2d\x4c\xb0\xbd\x1f\x93\x9e\x00\xb9\x06\xb9\xb6\x28\xb9\xf6\x6e\x0c\x83\xad\x8d\x5c\x5b\x3b\x83\x6d\x23\xe5\xda\x3b\xd8\x6b\x90\x6b\xab\x2a\xd7\x1a\x7b\x53\xdb\xc8\xb5\xee\x41\x1b\xc1\x96\x94\x6e\x2c\xd9\x92\x3b\xc6\x11\x6d\x99\x9b\x21\xdb\x20\xdb\x20\xdb\xe6\x22\xdb\x8e\x8b\x67\xfa\x4c\x47\xb6\xb5\xf2\xec\xa9\xb7\x10\xc3\xad\x2b\xc4\xe2\xbf\x09\xc9\xb8\xf5\xe7\x49\xf8\x95\x06\xa1\xc3\x3c\x6a\xdf\xd3\x81\xef\x9a\x72\x66\x70\xe1\xa8\x06\x4d\x22\x2a\x1f\x86\x7b\x7b\x07\xf4\xd7\xae\x20\x77\xc5\x2f\xb5\x47\xc4\xcf\x96\x4c\x14\x4a\x7e\xe5\x4d\x51\x83\xe0\x55\x13\x3e\x69\x15\x47\x15\x55\xa4\x7e\x20\xb9\xaa\xd6\x6b\x39\x2a\xa9\x25\x53\x3e\x53\xd1\x7e\x4d\x45\x86\x1f\x38\xaf\x8e\x4b\x7b\xd4\x2e\xab\x73\x7f\x64\x9d\x52\x85\x64\xea\x4c\x35\x45\x79\x5d\xfb\xc6\x7e\x5a\xd7\x71\x67\xcf\x30\x5d\xbf\x6f\xb6\x69\x59\x72\x93\x5e\x8f\x86\x9a\xcd\x56\x75\x5c\x72\x7f\x5a\x58\xaf\xe2\xa4\xea\xb3\xbd\x2b\xa9\xe2\xa4\xe4\xb3\xbd\xab\xfe\xf2\xef\xea\x5e\xe8\x5d\xe9\x20\xd0\xf0\xb9\xa3\x1b\x54\x57\xb8\xe6\xd1\x27\xa5\x4f\x3e\xa8\x7c\x8f\x93\xd4\x96\x10\x32\x6c\x82\x49\xc1\x55\xd4\xc4\x73\x22\xae\x64\xd2\x29\x91\xd4\x33\xbd\x19\x91\x54\x39\xc9\x84\x28\x6b\x97\x21\x3f\xc7\x41\xf7\xe0\x70\xbc\xa9\x11\x57\x5a\x36\x33\xba\x7b\xda\xaa\xb7\x6e\x64\xc7\x95\xbc\x6b\xdc\xb2\x66\x93\x2e\xa9\xb7\xe1\x9c\xcb\x35\xb9\xba\x71\x63\xcf\xba\xea\x16\xe9\x65\xf5\x1a\x8e\xc7\x6d\x50\xb3\x1b\x6b\xba\xb9\xe9\x7c\x56\xd5\xea\xd3\x99\x05\xf4\xe2\xfa\xae\x64\x42\x97\x8c\xa9\x77\x99\x51\xaa\x76\xe5\xcb\x87\x54\x65\xd1\x42\x77\x96\xb7\xfd\xb8\xe2\x7e\xad\xe9\xa9\x55\x9a\x6f\x7a\xb9\x24\xc9\x54\x19\x9b\xa1\xe5\x52\xa4\xb2\x68\xe1\x45\xcb\x5b\x9f\x17\x7b\x5a\x15\xda\x0b\x70\xe3\x6d\x44\xdf\xf3\x9b\xd5\x12\xa0\xcd\xf3\xab\xee\xd7\x1e\x9e\x37\x9d\x7e\x54\xd7\xcb\x2b\x51\xc5\x95\x3d\x95\xad\x4a\xd8\x6d\x57\x89\x61\x58\xd4\x0c\xe9\x54\xed\x1a\x07\x69\x2b\x0f\x73\xcf\x10\xf5\xc4\xe6\x5f\xf9\x87\x39\x2c\xbe\xae\xfc\x39\x17\xf0\x5a\xa8\xeb\xa4\xa4\xaa\x74\xda\x55\x7f\xb9\x06\x6d\x2a\x19\x6d\xf2\xe7\x83\xd6\x6d\xaa\x54\x35\xc7\x9d\xbc\x12\x2c\x36\xac\x5c\xe1\x1c\x94\xbe\x64\x41\x17\x36\x78\xcf\x6c\x1b\xca\x45\x71\xab\xda\xf6\x4a\xab\xd3\xe4\x73\xab\x57\xcd\xde\x57\x2a\x97\x9b\xb7\xae\xc9\x4d\x25\x8d\xa8\x92\xc3\x99\x09\x50\x3e\x14\xd2\xd9\xa4\x05\x22\x15\x05\x5b\x6a\xdd\x54\x4d\xf7\xe4\xfe\xca\x8e\xaf\xb2\x61\x1b\x57\x91\x57\x96\xf9\xf2\xc9\xbb\x44\x6a\x4d\xf5\x27\x7d\x4b\x25\x43\x66\x61\x74\x4a\xb6\x1e\xbc\x1f\x3f\x9c\x67\x42\xff\x26\x9d\xdb\xdf\xce\xce\xcf\x99\xf7\xec\xf4\xc8\xc3\x56\xf0\x64\x5a\x0f\x5b\x3f\x7f\x3e\x78\xdb\xdb\x24\x8c\xcc\x20\x22\xfc\x27\xd2\xa7\x01\x7d\xf0\x1e\xbc\x6d\x72\xe5\x59\xee\xd0\xa6\xc4\x24\xca\x13\x12\x30\x97\x92\x67\x16\x90\xa8\x4f\x89\xb6\x64\x27\x17\x22\x8a\xe6\x8e\x46\x3b\xfc\x3e\xd3\xb3\xc9\x93\xe3\xd9\xc4\x89\x48\xc4\x0a\x85\x43\xe9\x56\x32\x2d\x8b\x0d\xbd\xa8\xf3\xe0\xbd\x38\x9e\x7d\x4a\xce\xe5\x33\x6e\x99\x4b\x1f\x3c\xd3\x77\xd4\xca\xf1\x54\xb4\xaa\x63\x0e\xa3\x3e\x0b\x9c\x7f\x99\x91\xc3\xbc\xce\xcb\x49\xd8\x71\xd8\xee\x6b\xf7\x89\x46\x66\xf7\xc1\x1b\xd0\xc8\xb4\xcd\xc8\x3c\x7d\xf0\x08\xf1\xcc\x01\x3d\xd5\x9f\xf8\xe0\x05\x43\x97\x86\xe2\xe2\x36\xb9\xef\x53\x72\x7e\x7d\x45\x7c\x77\xd8\x73\x3c\xe2\x51\x6a\x87\xbc\x99\x3d\x1a\x11\x9f\xd9\xe1\x0e\xe1\xf7\x84\x3b\xe2\x35\x78\x5d\xa1\x6f\x5a\x34\xec\xf0\xbb\x0d\x62\xfa\xce\x1f\x01\x1b\xfa\xe1\x29\xf9\xe7\xc3\xd6\xc3\xd6\x7f\xf2\x9f\x09\x09\x68\xc8\x86\x81\xa5\x1e\xc2\xff\x0c\x51\x59\xfa\x5f\xa2\x52\xed\x3f\x93\x8a\xe5\x6f\xaf\x34\x78\xd2\x6f\xee\xd1\xa8\xf5\x03\xa9\x67\xfb\xcc\xf1\x22\xed\x31\xaa\xaf\x4b\x1f\xb2\x4d\xbe\x84\xd4\xe6\xaf\x6e\x3b\xa1\xc5\x5e\x69\x10\x17\x27\x57\x37\xa1\xf8\xce\xa6\xfd\x4a\x83\xc8\x09\xe9\x80\x8a\x2f\x15\x57\xfb\xcd\x8c\xac\x7e\xfa\x9f\xae\x13\x46\x35\xb5\xde\xbf\xf9\x7d\x33\xec\x4c\xf6\x72\xa2\xff\x76\xc3\xc8\x8c\x86\x15\x6f\x73\x4d\xa9\x4d\x6d\xd1\x6e\xcb\xa5\x66\xe0\x78\x3d\x72\xcd\x6c\x7a\x4d\xa3\x6f\x2c\x78\xf9\xe2\x99\xaf\xa6\xe3\x9a\x4f\x7c\x0c\xbb\x66\x4f\x6b\x8f\xaf\xbf\xce\x36\x39\x17\x43\x87\x84\x11\x0b\x68\x48\x42\x36\xa0\xc4\x12\xb3\x66\x18\x88\xe1\x47\x1c\xef\x99\x05\x83\xf8\xdf\xa2\x69\xc4\xf4\x3c\x16\x89\x9f\xf4\x37\x1d\xfa\xb6\x19\x51\x39\xf0\xfe\xe2\x4f\x91\xcd\xeb\x9b\x5e\x8f\x8a\x51\xf7\x67\xe2\x31\x24\xaa\x9d\x37\xcc\x75\x2c\xa7\x62\xc0\x79\xb2\x8c\xe3\xf5\xd4\x1c\xa8\xef\x33\x59\xda\x57\x35\x96\x8f\xb4\x8a\x6f\xa9\xbe\xe3\xd3\x5b\xdc\x1d\xbc\xe1\xa2\xa6\x37\xfd\xfd\x27\x9e\x16\xb9\x79\xa0\x0d\x5a\x25\x20\x2a\x9a\xad\x8f\x39\xed\x25\x0a\xf3\x5b\x7c\x5b\x1a\x8a\xc7\xaa\xe1\x33\x5e\x9b\x6b\xc6\x9e\x36\x82\x92\xd1\x33\x60\x9e\x13\xb1\x20\x24\xaf\x66\xe0\xb0\x61\x48\xce\x6f\x2f\xe4\xa4\x92\x63\xa9\xb4\x11\x56\x60\x77\xfc\x80\xfd\x17\xb5\x22\x29\xbf\x3a\x2c\xe8\xd5\xb6\xac\xe7\xb2\x27\xd3\x7d\xa6\xae\xf3\x5d\xd6\xab\xf5\xa3\xf6\xab\x1a\xb9\xda\xc5\xa7\x9e\xef\x53\x1a\x84\xf9\xaa\x9e\x7a\x7e\xa1\xa2\xe4\xb7\x62\x35\x8e\xef\x33\xe6\x16\x6a\x29\x1d\x79\x85\xcb\x21\xd5\x65\x55\xe5\x3d\x4a\xfb\x68\xa3\x4e\xbb\xd8\x67\x61\x94\x13\x7c\x15\xb2\x74\xc4\xb8\x89\xbf\xdb\x30\x8c\x88\x15\x50\x33\xa2\x42\x03\xc8\x19\x2c\xa5\x80\xf8\x84\xcc\x93\xda\x72\xe8\x4f\xe9\x13\x16\xba\xb0\xf6\xbb\x55\x76\x46\xfe\xad\xe5\x3b\x94\x8b\xa2\x56\x12\x8e\x79\x42\x85\x73\x29\xd7\x7e\xe6\x68\x6a\x6f\xbc\xcf\x72\xdf\xa7\x21\x25\x3e\x0d\x06\x4e\xc8\xed\x81\x90\x98\x01\x25\xcc\x73\xdf\x48\x40\xff\x1e\x06\x8e\x12\xf9\x43\xbf\x17\x98\x36\x25\xcf\x01\x1b\x90\xd7\xfd\xce\xb1\x54\xe0\x96\xe9\xc9\x7a\x9e\x28\x09\xe8\x80\xbd\x52\x9b\x98\xcf\x11\x4d\x6f\x60\x01\x7f\xc3\xe7\x80\x86\x7d\xe2\x78\x61\x64\xba\xae\x26\xc6\x27\xff\xbc\x35\x93\x27\x3b\x07\x9b\x7e\x40\xc3\x30\x5a\x1b\x48\x05\x13\xeb\x37\xc7\xb3\x1d\xaf\xd7\xc0\x74\x62\x2e\xbd\xa5\xcf\xe2\x72\xdc\x15\x35\x8f\xe4\xc5\x4a\xec\xb9\xd2\xaa\xc3\xe1\x13\xef\x47\xfe\xce\x86\xba\x49\x6d\x39\x9e\x49\xd1\x5f\x71\x1f\x49\xb5\xc6\x29\x11\xdb\x8a\xe1\x5b\x18\xd1\x01\xaf\xa6\x55\x13\x45\xc9\xf4\x21\xb2\x96\x53\x35\x64\x7f\xfc\xa0\x9e\xad\xcc\x63\xea\xd9\x59\xe3\x58\x7c\x03\x3e\x38\x9d\x90\x48\x8b\xfa\x93\xe9\x13\x27\x24\x43\x65\xfc\xc4\x9f\x9c\x5b\xcf\x21\x75\x9f\x0d\x21\xa7\xec\x78\xe6\xe9\x03\x2d\xb5\x80\xe3\x8a\xb2\x9f\xf7\xb5\xd6\xc0\x95\x0f\xaa\xeb\x94\xe4\xbe\x6d\x72\xcf\x08\xf5\x84\x05\x24\x6c\xb2\x1d\x12\xd2\x88\x44\xfc\x25\x22\x46\x1e\xe2\xa5\x43\xc4\xaf\x3d\x6c\x91\xff\x30\x3d\xfb\x3f\x44\x11\x93\x78\xcc\x33\xfe\x45\x03\x46\x5e\x4d\x77\x28\x17\x01\xa2\x0a\x12\x50\xdf\x75\x2c\x33\x8c\x67\x99\xcb\xbe\x75\x08\xf9\x8b\xcf\x36\x8b\x0d\x06\xbc\xe7\x86\x21\x37\xc5\x64\x71\xe7\x99\xbc\xb1\x21\xe9\x9b\xaf\x94\x0c\x58\x40\x49\xd4\x37\x3d\x72\xb4\x27\x05\x45\x87\x9c\x3d\xb1\x57\x4a\xba\x7b\xea\x07\xbe\x84\x70\x54\xdd\x34\x0c\xa9\x17\x39\xa6\x2b\x26\xa6\x68\xe4\xa3\x32\x15\x1e\x65\x97\x3c\x6c\x79\xcc\xa3\x0f\x5b\x4a\xc8\x25\x9f\x80\x8b\x2f\xd5\xf1\x6a\x93\x8b\xbf\xef\x30\x94\xf2\x4c\xbe\xf5\x63\xbc\xfd\x45\x1e\xb6\x9e\x9c\xc0\xe6\xb5\x94\xd5\xf3\xe9\xfe\x8b\xba\x99\x0f\x11\x83\xbf\x50\x87\xff\xc6\x47\x8a\xfa\x6f\x8f\xca\x9f\xf6\xc4\x8f\x7c\x62\x47\xfd\xc7\x41\x34\xe4\x55\xff\xf8\xc1\x2f\xfd\xfc\xf9\xb0\x25\x8b\xab\x31\x26\xfe\xe9\x86\xb4\xe4\x8e\xee\xe1\xe1\x5e\xae\x74\xd6\xd0\x51\x7a\x33\x27\xc1\xa3\x64\x90\x71\xf1\x46\x4d\xab\x2f\x25\x38\x11\xf7\x85\x3e\xb5\x1c\xd3\x95\x15\x89\x4f\x1a\x72\x4b\x56\x0c\x05\x59\x0f\xf9\xe6\xb8\x2e\x97\x9a\xe6\x30\x62\x5c\x13\x58\xa6\xeb\xbe\x11\x9f\xf9\x43\xbe\xe4\xb4\x65\xd7\x79\xce\xa3\x7a\xfc\xa3\xbc\xed\x94\xfc\xb7\x21\x45\xd6\x8f\x58\x72\x3d\x6c\xf1\xaf\xf3\xb0\xc5\x5f\xe6\xe5\x24\x34\x7c\x66\x1b\xea\xa6\x87\xad\x9d\xb4\x94\xe5\xc5\x63\x5e\x96\x15\x39\x37\x99\x12\xd2\xa4\x0b\xf9\xe5\x7f\xc6\xbf\x6a\x0f\x92\x85\xa2\x37\x5f\x3d\x4c\x7e\x58\xad\x06\x59\xc0\x65\xbd\x47\x97\xbe\x52\x57\x96\xfa\xeb\xec\xf6\xfa\xea\xfa\x8f\x42\x31\x3e\x6d\x84\x82\x7c\x4c\x6b\x4c\xf7\xf7\x0b\xc5\x79\xe7\xa6\xef\xf9\xf8\xf8\xe7\x97\xdf\x2e\x6f\xaf\x2f\xef\x2f\xef\x1e\xaf\x3f\x5f\x5c\x3e\x5e\x9f\x7d\xba\x7c\x7c\x2c\xdc\x36\x88\x86\xfc\x8e\xc7\xc7\xf3\xeb\xab\xc7\x4f\xf7\x5f\x1e\x1f\x73\x05\x1c\xdf\x1c\xf0\x12\x99\xb7\xcc\xbe\x27\x17\x2d\x86\x70\x10\xe4\xaa\xe7\xc5\xc2\xe1\x93\x47\x23\x59\x70\x18\xd2\x1b\x66\x9f\x3b\x76\x20\xe7\x48\xfc\xf7\x33\xf7\x4c\x69\xe6\x97\x3c\x35\xfb\xdc\x97\x93\xb0\xbe\x1e\xbd\xbb\x4a\xeb\xe2\x05\x94\x00\xdb\x52\xb3\x83\x2f\x88\xce\x9f\x7b\x72\x86\x68\x55\xa7\xff\xa1\x3f\xa5\xf2\xdb\xfb\x2c\x88\x06\xa6\x5f\xe8\xef\xd0\x33\x45\x67\x44\xc1\x90\xe6\x2e\x59\xa6\x6f\x3e\x39\xae\x13\x39\x71\x7b\x45\x2d\x9f\x4c\xdf\x77\xbc\x5e\x18\xdf\xa5\xb7\x24\xfe\xa7\x52\xff\x3f\x95\x62\x48\x54\xc3\xc0\xf4\x9c\x67\x1a\x46\xf1\x54\x0c\x35\x67\xc8\xae\x58\x36\x5a\x71\x6c\xc0\x0e\x31\x43\xf2\x8d\xba\xae\xf0\xa0\x84\xba\xcc\x4a\x57\x33\xa1\x74\x4a\x64\x26\x3c\x61\xe2\x79\x62\x86\x0f\x4c\xae\x72\x45\x21\x5e\x82\x06\x72\x6d\xea\x78\xc4\xd4\x57\x9a\xca\x86\x4c\x14\x4f\xe2\xbe\xc9\x2a\x1e\xfa\x3d\xa2\x9e\xb0\xb9\x9a\x7b\x5a\xaa\xd5\x10\x21\xae\xf9\x44\xdd\xd8\xc2\xe1\x92\xc0\xf4\xfd\xbc\x49\xe0\x53\x4b\x14\x08\xa9\x4b\xad\x88\x05\xaa\xf4\x80\x1b\x84\x1f\xf5\xfb\xab\x6a\x20\xca\x4e\xba\x8b\x02\x33\xa2\xbd\xb7\x53\xe5\xff\xea\x7c\xc9\xfc\x2c\x85\x2e\x89\xd8\x3f\xcc\x81\x9b\xbf\x48\xfe\x9b\x38\x9e\x4d\xbd\x88\x1c\xca\x72\x5c\x34\xff\x54\x5f\x9b\x8f\xb1\x53\x72\xcb\x5c\xd7\xf1\x7a\x5f\x12\xa3\x9a\x90\x40\xff\x29\x69\xe5\xc0\xfc\xae\x79\x1e\x4e\x49\x57\xb3\x2c\x08\x89\x3d\x78\xf1\x6b\xea\xbd\xcb\xff\xdc\xec\x2b\x57\xbf\x34\xff\xd3\x5c\x10\xda\x1d\x72\x28\xee\x10\xd3\x65\x1e\x97\xea\x51\x5f\x8e\xad\xc0\x11\x32\xfd\xcc\xb6\x99\x17\x7e\xe6\xf6\x74\xc4\x5c\xaa\xb4\x87\xd0\xe3\x3b\x7a\x25\x03\x33\x78\x91\xa3\xd2\x67\x36\x1f\xa0\x26\xb1\x54\x15\xc4\xb4\x6d\x83\x79\x3b\x84\x7a\xe1\x50\xb8\x5d\x9c\x88\x5b\xf7\xa1\x7e\xbf\x1f\x38\x2c\x70\xa2\x37\x12\x5a\x7d\x6a\x0f\x79\x4f\x89\x71\x1a\xf5\xcd\x88\x38\x51\x98\xda\xce\xc2\xc0\x0f\xa8\xd8\x0b\xb1\xf5\x2a\x9c\x67\x5e\x31\x7d\xa5\x81\xa8\x9d\xd0\x57\xc7\x8a\x35\x91\xfc\x53\x75\xd3\xa0\x23\x9c\xad\x9d\x54\x00\x71\x6b\x38\x6e\x2f\xd7\x40\xa7\xe4\x97\x5f\xe4\x7d\xc9\x90\x13\x5d\xf8\xfc\xec\x78\x4e\xf4\xa6\xf5\x1f\xef\xe1\xb3\xe2\xcf\x44\x2c\x3f\x9c\x80\xda\x17\xe2\x9d\xef\x92\xd7\xba\xea\x79\x2c\xf9\xf9\xf2\x3b\xb5\x86\xbc\x4b\x4f\xb3\xd2\x8f\xd7\x7a\xa7\xc6\xf8\x3d\x0d\x06\xe1\x69\x5e\x3a\x1a\x72\xd0\x5f\x7e\xf7\x03\x2a\x57\x3e\x85\x22\xbc\xd0\x0b\x7d\x3b\x25\x7c\x72\xe6\x5e\x96\x85\xc5\xd2\x84\x30\x9f\x7f\x61\x16\x9c\x92\x6b\x16\x5d\x79\x65\x45\xa4\x35\x50\xf2\x2c\xf9\x3c\x95\xb8\x17\x5f\xe6\xba\x47\x39\xae\xa4\x78\x8c\xa7\xdb\xb5\xf6\x82\x3f\x13\x41\xa9\xbf\x76\xf2\x88\x1f\x3f\x48\x60\x7a\x3d\x4a\xfe\xfd\x65\x87\xfc\xfb\x2b\x39\xfd\x35\x7b\x3b\xf9\xa9\xc9\xdc\x1f\x3f\xc8\xbf\xbf\x90\x9f\x3f\xa5\xba\xe0\xc5\x75\x55\xf1\xe3\x87\xb0\xd5\xd5\xac\x8d\x67\x19\xff\x4b\x07\x77\x76\x72\x7c\x32\x5f\x28\x09\xb9\x75\xa7\xfb\xa8\xc5\xf8\x8a\x47\x93\xcd\x2d\x28\x6e\x48\x49\x1b\x35\xbd\xdb\x20\xf4\xf9\x99\x5a\x11\xef\x4d\xf5\xfd\xa9\xde\x6f\x69\x6f\x5f\x7e\x77\xc2\xec\x7c\xf8\x64\x06\x2f\xb5\xd3\x49\xd8\xd8\x01\x4d\xa7\x4b\xe6\xc1\xe2\xb3\x17\xe7\x70\xb3\xa7\xeb\xed\x96\x03\xb4\x51\xb3\xc3\xcc\xe2\xec\xba\x4c\xf8\xab\x77\x73\x3c\x67\xe0\xfc\x8b\x12\x9b\x7d\xf3\x22\x67\x40\x89\x2d\xe5\x82\x19\x0b\x49\x7d\xf5\x6d\x53\x97\xf2\xef\xf2\xff\x91\x88\xba\xae\xae\xa7\x22\x46\x6c\x46\x4c\xf2\xb0\xf5\xcc\x02\x4b\x7b\x40\x7c\x0b\xd7\xc9\xfd\x28\xf2\xc3\xd3\xdd\xdd\xec\xf0\xb7\x99\x15\xee\x5a\xcc\xb3\xa8\x1f\x85\xbb\x7c\x78\xba\xcc\xb4\xc3\x5d\xe1\xc9\xf3\x99\xbd\xbb\x1d\xd1\x60\xe0\x78\x62\x44\x18\xec\x99\xcb\x84\xf4\xd3\x6a\xd7\xfe\x08\x4c\x8b\xde\xd0\xc0\x61\xf6\x1d\xb7\x55\xec\xf0\x94\xec\xc5\xe5\xb8\x50\x48\xa2\xfb\x8a\x42\x37\xd5\xee\x59\x03\x40\xd3\xeb\x4f\x8e\x67\x06\x9a\xb7\x8b\xdf\xca\xc5\x62\xd1\xb0\x27\xcf\x8e\x4b\xb3\xb6\xbc\xfe\x45\xa5\x2e\x56\x8f\x31\x2c\xcf\xd1\xbf\xa8\x33\x30\x7b\xf4\x94\xfc\xf8\xd1\x39\xbf\xbe\xba\xe2\xff\xa1\x4f\x29\x42\xf8\x4a\xcd\xe4\x96\xc0\x3f\x1f\xb6\x76\xb5\x3a\x3a\x61\x3f\xf1\x6d\xc8\x3f\xea\xbd\xe6\x44\xc3\x36\xe1\x23\x81\xb0\x67\xf9\x6a\xd7\x57\x99\xf6\xf2\xa5\xb0\xf0\x63\x74\xb2\x77\xc5\x0d\xe6\x66\xef\xf9\xe7\xeb\xdf\x85\x7d\x9c\x97\x39\x42\x14\x89\x35\xd0\x9e\x8a\xce\xe8\xf0\xba\x85\xaf\x68\x2b\xdf\x8a\xf2\xe5\x50\xe5\x3a\xa8\xba\x39\xd7\x97\xf7\x7f\x7d\xbe\xfd\x53\x34\xeb\xea\x8f\xd2\x36\xfd\x1e\xb0\x41\x89\x84\xb4\xe2\x05\xfc\x9f\xf4\x2d\xf6\x99\xe4\xff\x2a\x16\xef\xf9\x3f\x31\xbf\x8b\xcb\xab\xfc\x4b\xdf\x89\xf5\x3b\x15\x62\x98\xd7\x4c\x9e\xcc\x50\xca\x2b\xfe\xeb\xcb\x49\x28\x0d\x40\x7e\xa9\xe2\x8d\xcb\xd6\x29\x6d\xde\xf9\xd9\xa1\xae\x5d\xf5\xb2\xe2\xe2\x8d\x19\xf5\x4f\x85\x9a\xed\xf0\xc6\xf0\xd1\x92\x7f\x0d\xfe\xdd\xf8\x8a\x59\x6d\x4e\xbe\x9a\x81\xc3\xad\xa5\xea\x6f\xf4\xe9\xfe\xcb\x22\x3f\x4c\xbc\x3e\xcf\xbf\xc7\x4d\x40\x5f\xa9\x17\x29\x33\x3f\x99\xfc\xc2\x27\x19\xba\x94\xf2\x85\x04\x97\xeb\xdc\x86\xa9\xf8\x1e\x77\x1f\x2f\x2f\x6f\x2a\x27\xc2\xb3\xe9\x86\x34\x3b\xf6\x5f\x99\x3b\x1c\xd0\x4f\x62\xab\xe4\x34\x5f\xe7\x80\xff\x2c\x3f\xc0\x2e\x1f\x23\xbb\xcc\x8f\x76\x2d\xcf\xd9\x7d\x72\x0a\xca\x5f\x75\x80\xe7\x18\x4f\x8e\x67\xd8\x4e\x30\xb2\x32\x1a\x59\xa2\x32\x8f\x46\x1d\xbb\xba\x3a\x8f\x46\x7a\x75\x56\xb9\xc0\xbc\x1d\x7a\x61\xf9\xd2\x28\x99\xb8\x9a\x6a\x48\x7c\x19\x4e\x46\x74\xa6\xf7\xf8\x01\xeb\x05\xe6\x20\x4c\xe4\x81\xda\xbb\xe2\xc2\x35\x60\x43\x5e\x87\xaa\x56\xbf\x9f\xbf\x56\x89\x58\x2d\xd1\x72\x24\x23\x56\xb9\xb9\x52\x22\x57\xcb\xa4\xe5\x97\x90\xea\x2f\x72\x76\x73\x15\x2f\xf7\x9e\x4c\xeb\x85\x0f\x90\xc4\xf3\x50\x31\x44\x2e\xce\xee\xcf\xee\xee\x3f\xdf\x5e\x3e\xde\xff\xe3\xa6\x5a\x68\xea\xab\xef\x82\xb0\x14\xce\xb8\x70\xe8\xf3\x15\xee\x29\x49\x82\xc1\xc5\x86\x9f\x90\xe3\xf1\x8c\xa9\x68\xc3\xef\x97\x1f\xaf\xfe\x0f\x7f\xfe\x87\xb3\x3f\x4f\xee\xee\x2e\x6f\xbf\x5e\x9d\x5f\xb6\x95\x1d\xd3\x9e\x96\x45\x9f\x60\xfe\xbd\xff\x32\x9d\x28\x89\x60\x18\xd5\xcf\x7f\x9d\x5d\xdd\x3f\xfe\xfe\xf9\xf6\x31\xe9\xf0\xca\xbe\x16\x96\x6f\xa1\x97\xb9\x74\x6e\x2d\x90\xb9\x14\x5e\x8c\x10\xee\x33\x16\xd2\x64\x24\xe6\xbc\xa4\xc5\x86\x9e\x9f\x7d\xbc\x3a\xff\x1c\xab\xcb\xab\xeb\x3f\x1e\x7f\x3b\x3b\xff\xf3\xf2\xfa\x62\xa1\x2a\x33\xe3\xcc\x2d\xbc\xa2\x74\x7c\x88\x35\xbc\xb0\x0c\xf8\x22\xdf\x79\x96\x43\xde\xa6\xbe\xcb\xde\x06\x7c\xd9\x2f\xfc\x48\xe5\x2f\xfd\xf1\xcb\xdd\xfd\xe5\xed\x88\x99\x77\x12\xee\x3c\xf5\xfc\xe2\x80\x38\x1b\x46\xcc\xb0\x69\x44\x2d\xa9\xb6\x7f\xfb\xe3\x86\x5c\xdd\x70\x83\x9f\xaf\xf1\x2a\xfa\xf9\xaa\x5a\x1d\x98\xc3\x88\xc9\xea\x8a\xcf\xba\x94\x8e\xfe\xab\x9b\xfc\xfd\xb9\xef\x77\x75\xf3\xf5\xf0\xe6\xf3\xe7\x8f\x8f\xc5\x92\xda\x93\xce\xdc\x6f\xe6\x5b\x89\x20\xe1\x43\x9c\x6b\x6e\x31\xa7\x86\x9e\x47\x5d\x62\x53\x11\x43\x22\x76\x42\xf8\x92\xdd\x77\xc4\xce\x88\xdc\x78\xb0\xeb\xc4\xc9\xd5\xcd\xd5\xf5\xd5\xcd\x92\xea\xf6\x7b\x31\x44\x44\xa6\x0c\xb9\xba\x79\x3d\x24\x3e\x63\x6e\x6a\xdf\x6a\xfb\xc2\x62\x0f\x80\x79\x94\x50\xb1\x7c\xea\x90\x1b\x66\x8b\x90\x1a\xe5\x52\xcf\xd7\x6c\xf5\x59\x48\x3d\x69\x25\x08\x0f\xbc\x58\x0d\x77\xc8\x79\xdf\xf4\x7a\x5c\x21\x88\x1f\xe5\xc6\x8b\xdc\xbb\xd4\xb7\x8f\x64\xad\x7d\xf3\xb5\x50\xaf\xc7\xd4\x3a\xaf\x23\x57\x23\x61\x9f\x0d\x5d\x9b\x3c\x73\x5b\xf8\x9b\x13\xf5\x1d\x8f\x18\x46\x9c\xe4\x66\x39\x76\x95\x49\x92\x1f\x28\xe7\x57\x17\xb7\x95\x03\x85\xaf\x31\x64\x95\xbc\x58\xde\x8d\xcb\x9b\x75\xe1\x84\x32\x08\x87\xaf\x0f\x5c\xd6\x13\xaf\x18\x32\xe1\x2d\xb4\x22\x97\xff\x14\x0a\xf7\x65\xd5\x84\x50\xed\xb9\xb8\xba\x3b\xfb\xed\xe3\xe5\xe3\xef\x57\x1f\x2f\x1f\x3f\x7e\xfe\xe3\x8f\xab\xeb\x72\x6b\xbd\x5e\x40\xff\x4e\x5d\xe7\x7b\x12\x3b\xc5\x3f\x28\x37\x02\x92\x4f\x6d\x5a\xf1\x76\xca\xd9\xf9\xf9\xe5\xcd\x7d\xad\x3e\xbc\xb8\xfc\xfd\xec\xcb\xc7\xfb\xcb\xeb\x8b\x9b\xcf\x57\xd7\xf7\xf7\x9f\x3f\x7c\xbe\xbb\x3f\x3b\xbf\xbf\xfa\x7c\x5d\x3d\xb3\x44\xb5\xd5\xdd\x74\x75\xf3\x7a\xcc\x07\x57\x6a\x33\xd4\x36\xe1\xea\xe6\xeb\xf1\xdd\x97\x9b\x9b\xcf\xb7\xf7\x6d\xac\xc8\xcc\x87\x11\x3d\x12\x7f\x99\x88\x89\x2f\x55\xf7\xcc\x8f\x9f\xff\xe0\x1f\xe1\xe6\xec\xfe\x43\xe5\x33\xd3\x9d\xb9\xd1\x8f\xe4\xc2\x24\x7c\x0b\x5d\xd6\x1b\xf1\xd4\xbb\xcb\xaf\x97\xb7\x57\xf7\xff\xb8\xfb\xc7\x5d\xe5\x83\x2b\x25\x63\xe1\x35\xc3\xc8\x66\xc3\xa8\xe9\x23\xcf\x6f\x2f\x2f\xab\xbf\xea\x5f\x66\xe0\x39\x5e\x2f\xff\xf0\x6c\x75\x1f\x2e\xcf\x3e\xde\x7f\xb8\xbc\xe6\xc3\xb8\x5c\x6b\x96\x0f\xdd\x90\x5a\xc3\xc0\x89\xde\xce\x99\x17\xd1\xef\x51\x4e\xe4\xa5\x29\x0d\xb1\x47\x2e\xbd\x56\x0c\x50\x88\x7f\xff\x7b\x48\xc3\xc2\x02\x82\x10\xcb\x1f\x9e\x92\xfd\xa3\xbd\x81\x7e\xc1\x75\x5e\xa9\x47\xc3\xf0\x26\x60\x4f\x34\x77\x4b\x3f\x8a\xfc\x3f\x68\xbe\x4d\x84\xf8\x72\xdd\x10\xdf\x5a\xb8\x2c\xec\xd0\xf7\x7b\xef\xdf\xe7\xaf\xf0\xd9\x78\x4a\xc4\xf6\x16\xff\x67\xee\x5d\xb3\x8e\x99\xee\x5e\xf6\xb2\xe3\x39\x91\x63\xba\x17\xd4\x35\xdf\x2a\x0b\x3d\x9b\x8e\x3b\x0c\xe8\x7d\x3f\xa0\x61\x9f\xb9\xf6\x29\x39\xce\x76\x99\x69\x3b\x55\x6f\x4b\xbf\x6b\xce\xe3\xa4\xcf\x94\x37\x25\xff\xbb\x41\xf8\xb2\x6b\xb7\x62\x31\x21\x4b\x18\x4f\x4e\x60\x1b\xfc\x99\x6f\x25\x17\xc5\x90\x2d\xbb\x5a\xdb\x0f\x8d\x57\x88\xae\xf3\xb4\x3b\x60\xf6\xd0\xa5\x85\xef\x23\x87\xad\xeb\x3c\x19\x15\x05\x78\xa3\x3e\x7b\xee\x5b\x71\xcc\xe5\x9f\x12\x0c\xbd\xdd\xef\x11\x9f\x82\x61\xc7\x65\xd6\x4b\xf9\xa3\x54\x09\xa3\xac\x44\xfa\x2c\x29\xc9\x6a\x1e\xf6\x6a\x06\xe2\x81\x6a\x2f\xb8\xf4\x51\xaf\x66\x60\x04\x43\xcf\x28\x2f\xd3\xf2\x61\xbc\x0f\x47\x3d\x8c\x77\x63\xab\x87\xc9\x2f\x98\x5d\x2f\xc7\xe1\x99\xda\x92\xb9\x64\xe5\x5a\xf1\xc5\xf8\x4c\x12\x8d\xce\x0d\xa3\x9a\x71\x60\x8c\xec\xad\xfa\x4a\xab\xbe\x84\x31\xb2\x63\x46\xd7\x5b\xd6\xe9\xc6\x88\x81\x54\x5f\x6b\xfd\x20\x95\x7b\x80\xbf\x3b\x2e\xfd\x1c\x9c\x67\xc2\xb4\xf4\x00\xe8\xd8\xef\x78\x7e\x7d\x55\xe6\x53\x28\x77\xb4\xd4\x37\xab\xd4\x7d\x63\x54\xfb\x5a\x46\xd7\x98\xf3\xe1\x3c\x78\xdb\xe4\x5c\x45\x3f\xba\xae\x74\x05\x0c\xc3\x88\x0d\x6e\x95\xe6\xb8\xa0\x62\x2b\x4c\x44\xe2\x79\x49\xc4\xb5\xb8\x4d\x7a\xb5\x35\x3f\x4b\x1a\xad\x4c\x06\x72\x78\xaa\xed\x71\x7d\x97\xd9\xf4\x9d\x74\xa3\xb9\x2a\x70\xad\xa2\x09\xb9\xfd\x68\xd5\x0f\x25\xf1\x93\x9d\xf2\xb8\x3d\x6d\xbf\xd9\x62\xfc\x93\x2a\xd3\x95\xff\xd2\x93\x61\x64\x15\x37\x8a\x70\xbd\x34\x3e\x4b\x6d\x7b\xc7\x7b\xdb\xa2\xd1\xc2\xb0\x3c\xd7\x9b\x21\xaf\xfa\xee\x30\x30\xdd\xd2\x66\xca\x02\xa1\xe3\xf5\x86\xae\x19\x94\x15\x49\x82\xcf\x66\xd4\x85\xb2\x07\xe3\xc0\xc4\x45\x74\xdb\x6f\x7f\xdc\xdc\x50\x1a\x64\xfb\x2a\x1b\x29\x99\x76\x90\xfa\x3d\xe9\x95\xd9\xf7\xcb\xe2\xc7\xd5\x6f\x7f\xdc\xd4\x8c\xaa\x8a\x70\xd3\x4c\x97\x95\x8f\xa8\x19\xf7\x9d\x0a\x73\x5e\x44\x8f\x5d\xdd\xdc\x30\xe6\x66\xfb\x29\x13\x75\x9d\xf6\x8e\xfc\x79\x5e\x7d\x92\x09\x5e\x5f\x44\xcf\x7c\x60\x61\x74\xa9\x1a\x90\xed\x9f\x92\xb8\xfa\xb4\x97\xf4\x8b\xf3\xea\xab\x92\xc0\xf7\x45\xf4\x98\xaa\xeb\x2a\x6d\x46\xb6\xdf\x2a\xe3\xf3\xd3\xde\x2b\x16\x99\x57\x1f\x96\x26\x67\x2c\xa2\x17\xff\x10\x0d\xd1\x33\x9e\xde\xb2\xdd\x58\x93\x46\x92\x76\x64\xb1\xd0\xdb\x42\x7a\x32\xa4\x8b\x99\xbd\x99\x5e\xbc\xa3\x51\x4d\x17\xa6\xa9\x36\x15\xdd\x17\xd2\xb9\xcd\xe4\x31\xc7\xdf\x75\x1c\x58\x68\x4f\xa5\xf3\x6a\x06\xdf\x88\x61\x57\x3e\xe0\xf2\x21\xfb\xe5\x09\x0d\xe3\xc7\x4f\xf2\xff\x13\xa1\x55\x1e\x25\x9d\x73\x97\x0d\xed\x9b\x80\xbd\x3a\x36\x0d\x12\xef\xda\xcf\x38\x00\x75\x9c\x7c\x02\xe1\xb8\xd5\x6a\xfd\xf9\xd3\x88\x95\x61\x83\xdc\x82\xca\xbb\xd3\x80\x70\xbd\x0d\x85\x4f\xb6\xfb\x7a\x50\xa5\xb1\x0b\x41\x91\xba\x3d\x61\x38\xbe\xe3\x1b\x5d\xf5\x89\xf4\x50\x3e\xcb\xb1\x03\xf5\x56\xba\x3b\x5a\x5d\xe5\xb7\x7d\x62\x36\x3d\x25\x6a\x67\x23\xa9\x3b\xfa\x3c\x8c\x7a\xcc\xf1\x7a\xb1\x27\xa3\xe6\xeb\xde\x30\xbb\xe6\x93\x5a\x51\x6d\xdf\x25\xad\x2d\x89\xa1\x13\x9e\xba\xc8\x0c\x22\x39\x3c\x4f\xc9\x67\xef\x77\xe9\xa6\xe2\xd7\xf2\xb1\x6c\x95\xf1\x5c\x65\x91\x5c\xd5\x41\x6b\x65\xa5\x73\x9b\xf5\x46\xd9\x0b\x66\xe2\x8b\xe2\x0b\x71\x57\x67\x42\x8b\x9e\x1c\x6f\x37\xec\x3f\x6c\xed\x90\x87\x2d\xc3\x92\xff\x9b\x54\x45\x4c\xdf\x77\xdf\x88\xf1\x5c\x3d\x98\x3a\x6f\xe6\xc0\x4d\x22\x92\xd2\xdd\xf5\xfa\x9d\x71\xe5\x49\xd5\xf6\xc3\xc5\x85\x12\xb7\x98\x91\x1d\x5b\xd9\x9d\xa2\x8c\x0f\x8b\xb1\x68\x57\x88\x19\xcd\x33\x53\x73\x77\xb2\x49\x95\x1b\xc4\xb5\x93\x4e\xf4\x6c\x44\x33\xb1\xa1\x2a\xf2\x6f\xe4\x7d\xe9\x0a\x7f\x44\x67\x8a\x0c\x10\xd1\x09\x32\x01\x84\x12\x1a\x59\x36\xb9\xff\x78\x47\x42\x6a\x05\x5c\xb3\x69\xb1\x94\x19\xe0\x9f\xc2\x11\x34\x62\x0c\xa8\x84\xa9\x3b\xa1\x1f\xe2\xf1\xb3\x1b\x87\x3f\x87\xbb\x22\x5b\x4b\x36\x68\x14\x78\x20\x7f\xe8\x09\x1f\x62\x3e\xf3\xa8\x37\x8a\x3e\x50\xb8\x71\xae\x24\x82\xfc\xd3\xb3\x54\x82\x6b\x91\xed\x64\x06\x54\xe6\x3e\x4a\x07\x92\xca\x21\x16\x6f\x1e\x87\x3c\x8e\x91\xbd\x5c\x93\x83\x59\x93\xc8\x9f\x24\x68\x6e\x73\x31\x27\xdb\xf6\xf7\x90\x8a\x84\xcb\x88\x11\xab\x4f\xad\x17\xd1\x32\xb1\xcb\x49\x3d\x6b\x8c\xec\xd0\x34\x17\xbc\x22\x39\x74\x9b\x5c\xdd\x9c\x7d\xca\xc5\x86\x0f\x4c\xcf\x51\x59\x48\xe4\x5b\x9f\x7a\x2a\x55\x8c\x5f\x12\xbd\xa4\x42\xc2\xa7\x9c\x99\x5b\x95\x80\x3e\x85\x0c\x51\x97\x59\x2f\x2a\xf2\x3c\x93\xf8\xec\xf8\xe6\x40\x5c\xcc\xfd\xd6\x37\x3d\xdb\x1d\x23\xad\xb6\x3a\x25\x58\xfe\xb7\xec\x3d\x35\x20\x05\x17\xc3\xb4\x2c\x1a\x8a\x40\x5c\x95\x07\x5d\xb6\x0a\x9b\x4e\x2f\x34\x4e\x6c\xce\xbc\x60\x6d\x92\x6c\x75\xd6\xeb\x2c\x67\xf5\x2c\x12\x66\x8b\x8f\x69\x9f\x3c\x5b\xac\x63\x3e\x89\xb4\x4a\xf4\x83\x26\x03\x9a\x0c\x68\x32\xa0\xc9\x80\x26\x03\x9a\x4c\x63\x9a\x4c\x99\x05\x34\x03\xc2\x4c\x69\x69\x60\x67\x80\x9d\x01\x76\x26\xf3\x01\xcb\x7b\x25\x4e\x84\x15\x1d\xa2\xe5\xb6\x45\x8c\x17\xe5\x5f\x54\xae\xe2\x4c\xd7\x65\xd6\x74\x5f\x72\xf9\x56\x4e\xd3\x98\x98\xe6\x20\x23\x34\x2b\xd7\xc6\xbf\xf1\x37\x24\xe9\xfb\x4b\x29\x62\xba\x21\xe3\xe3\x4e\x8c\x66\x61\xa0\x3c\xbd\x89\x79\x26\x3f\x90\x48\x7e\x21\x66\xaf\x17\xd0\x5e\xb5\xd2\x9d\xd2\xb7\xa8\x34\x0f\x94\x66\x95\x83\x45\x8c\x8e\x81\xd3\x53\x52\x20\x63\x44\xcb\x03\x5a\xc5\x0e\x4b\xc9\xf0\xb3\x4c\x4f\x05\x54\x6f\x27\xf3\x4c\x44\x5f\x47\x6a\xa2\x89\x70\x52\x3e\x37\x4d\x2f\x1b\x35\x2d\xa1\x34\x29\x3a\x43\x34\xa2\xb4\x2b\x4c\xdf\x0f\x6b\xdf\x3c\x6d\x62\xcd\xf7\x02\xb5\x69\xbe\xd4\xa6\x51\x0e\xc7\x4c\x32\x40\xe2\x79\x5c\x39\xa0\x93\x84\x2a\x85\x7c\x79\x24\xd2\x2b\xc6\x62\x23\x01\x8a\x04\x28\x52\x16\x8a\xc4\x0d\xb1\x15\x23\x22\x95\xbd\xa6\x21\xcb\xea\x05\xc1\x3a\x9a\x2e\xeb\xa8\x46\xc4\xbe\xd8\xb6\x61\x05\x76\xa8\xa4\x2b\x82\x3e\xc7\x0f\xfa\x9c\x7d\xc8\x67\x6a\x31\x2f\x26\x42\xef\xec\xd3\x6f\x69\x9c\x75\x1a\xa4\x97\x35\xe3\xf5\x38\x3d\x75\x65\x2e\xe1\xb0\x59\xd3\x76\x21\x41\x9f\xbc\x09\x31\x86\x28\xdb\x49\xa5\x86\xb7\x16\xef\xa9\x5d\x7e\x9b\xd7\x48\x52\xeb\xac\x45\x0d\xa5\x0f\xe2\xf1\xc5\xb1\x94\x59\xfe\x65\x07\x53\x5f\xdd\x32\x9f\xfe\x51\xeb\xbb\x45\xf5\xcf\xb9\x16\x9a\xa0\xf7\x4f\x66\xd9\x99\xed\x9f\xd8\x2c\x45\xf0\x79\x31\xf8\x7c\x2e\x7d\xb2\x78\xdd\x36\xf5\xc0\xf3\x79\xcc\xb5\x55\x0a\x3a\x9f\x7d\x7f\xac\x47\xc0\xf9\xec\xfb\x69\xbd\x83\xcd\x67\xdf\x7f\x9b\x10\x68\x3e\xe7\x5e\x5c\x9b\x20\xf3\xd9\xf7\xdb\x9a\x05\x98\xcf\xad\xc3\xda\x0c\xb1\xd9\x74\x56\x61\x7c\xd5\x8c\xac\xc2\x98\x1a\xed\xed\x15\xce\xbe\x8c\xaf\xb7\x8e\xd0\x6c\x34\x20\x34\x03\xcd\x0c\x34\x33\xa9\x7f\x69\x02\x34\xf3\x34\xd0\xcc\xa5\xe8\x60\x52\x8e\x3e\x3e\x25\xae\xe3\x0d\xbf\xc7\xa5\x66\x03\x18\x96\x3f\x94\x26\x6f\x10\x00\x87\x27\x03\x0e\x8f\x4a\x27\x50\x63\x6a\x14\x90\x38\xc7\x80\x06\x99\xb8\x84\x4c\xac\x42\x34\xc2\x6c\x28\x4b\x6e\x63\x5c\xec\x80\xa6\x5b\x2a\x1d\xbd\xbe\xab\x48\x6d\xc3\xc7\xd1\xf7\x5c\x1a\x88\x4d\x33\x87\x8f\xb2\x62\x88\xcb\x0e\xef\x5b\xfd\x20\x18\xd3\xcd\x21\x6d\xb6\xe3\xc6\xc4\x7b\x92\x15\x0f\x8f\x33\x6e\x54\x69\xb9\xdd\xa3\x0d\xac\x56\xdc\x63\x8d\xad\xb1\x9b\xd9\x3e\x12\xd9\x4a\xea\x11\x23\x71\xc8\x4b\xc4\xd5\x5d\x51\x50\x63\x63\x5c\x51\x42\x7e\x91\xf8\x12\x61\x0c\xe6\x9f\x97\xba\x3d\xe4\x68\x2e\x03\xa4\xe4\xeb\x9d\x00\x94\x3b\x82\xfb\x0d\xe0\x37\x80\xdf\x00\x7e\x03\xf8\xad\xbf\x1d\x80\xdf\x85\x95\x36\x80\xdf\xd9\xd6\x4c\x01\xf8\x0d\xf0\x35\xc0\xd7\x00\x5f\x03\x7c\x0d\xf0\x35\xc0\xd7\x00\x5f\x57\xf6\x86\x46\x83\x8e\x83\x60\xeb\x9e\xd9\x9c\x07\x3d\xba\x2e\xc0\xa0\xd3\xcb\x80\x41\x8b\x12\x80\x41\x03\x06\x3d\x0e\x0c\xda\x00\x0c\x1a\x30\xe8\x29\xc0\xa0\xd3\xb7\xc8\x00\xa2\x6c\x27\x10\xdb\x66\x6f\xc2\xf8\xcd\xef\x14\xe8\x59\x9e\xd2\xfc\xca\xae\xd8\x85\x79\x2c\xb0\x3d\xb9\x0c\x3d\xad\xa2\xec\x6e\x43\x92\x52\xab\x65\xd3\xea\x35\xc6\x09\x7f\xa1\x34\x19\x69\x66\x3b\x40\x88\xfd\xd4\x4d\x50\xd2\xf7\xf5\xce\xe1\x86\xe3\x2d\xe3\x82\x9e\x0b\x0f\xb0\x61\xc8\x43\x9e\xfa\x92\x84\x3f\xdc\x51\x9a\xec\x50\xf5\x9c\xa8\x3f\x7c\xea\x58\x6c\xb0\x9b\x09\xdf\xd8\x2d\x32\x63\x46\x45\x21\xa8\xb0\x85\x64\x49\xd9\x0e\x9e\x33\x76\x8c\x42\x59\x55\xc5\x4d\xf7\xb6\x9b\xd0\xc9\x06\xb4\x5c\x05\xa5\xf5\x8b\xd1\x28\xb2\xc1\xe5\x06\x96\x08\x4b\x71\xa9\x30\x9a\x5f\xa9\x9c\xec\x31\x11\x2b\xa0\xbe\xeb\x58\x66\x28\x02\x0c\x08\x09\xd3\xe8\x87\x54\x7a\xdc\xd2\x34\xc3\x78\x54\xe0\xc1\xc8\x2e\x8c\x0b\x95\x77\x23\x69\x12\xbb\x50\x5e\xed\xb4\xf6\xe3\xb1\x35\x5e\xde\xee\xf9\x6c\x8d\x17\xbf\x6d\x6e\x9b\xbc\xd4\x5f\x6b\x34\x1b\x77\x24\xbb\xf9\x94\x16\x68\xe8\x2c\x55\xbe\xb8\x6f\x7d\xc7\xea\x13\x9d\xd5\x17\x31\x12\x0c\xbd\x8a\x15\xa0\x5a\x35\x3d\x9e\x7f\xbe\xbe\xbf\xfd\xfc\xf1\xe3\xe5\x6d\xd5\x79\x40\x45\x43\xbb\x95\x93\x35\xcf\x90\x94\x7f\x53\x5d\x15\x0c\xc3\x40\xae\x0c\xfa\xd4\x7a\x31\x74\x4c\x8c\x5e\xcc\x28\x4b\x3b\x18\x47\xcd\xb4\x91\xc1\x25\xf4\x47\x23\x5d\x60\x4a\x10\x64\x4c\xf9\xb8\x57\x52\xec\x6b\xb7\x7b\x74\x93\x94\x19\x3d\x7c\xd7\x99\x11\x09\x3c\x24\xf0\x90\x6b\x01\x39\x01\x1e\x72\xac\x09\x0d\x32\xe4\xaa\x92\x21\x01\x85\x94\xf7\xac\x1a\x14\x52\x28\x27\x72\x7e\x75\x71\x2b\x90\x1d\x6a\x0b\x52\xe1\xc5\xf8\xb8\x36\xed\x81\xfa\x3e\xa9\x2c\x53\x81\x44\x03\xd3\x1f\xe3\x93\xc8\x9b\xf9\xbd\xd3\xeb\x75\xd0\x2a\x41\xab\x04\xad\x12\xb4\xca\xec\x85\xc9\x68\x95\x8d\x91\x6d\xc0\x58\xe6\x85\x19\x30\x96\xc0\x58\x02\x63\x09\x8c\x25\x30\x96\x23\x57\x4d\x20\x58\x82\x60\x09\x82\x25\x08\x96\x39\x82\x65\x17\x04\x4b\x10\x2c\xe7\x4e\xb0\x6c\xd2\x92\x27\xd3\xb3\xbf\x39\x76\xd4\x2f\xb4\xa5\xe4\x81\x5a\xe1\xd5\xe1\x65\x02\x97\x09\x5c\x26\x70\x99\xc0\x65\x02\x97\xd9\xb8\x7f\x80\xcb\x04\x2e\x13\xb8\x4c\xe0\x32\x81\xcb\x04\x2e\x13\xb8\x4c\xe0\x32\x81\xcb\x04\x2e\x13\xb8\xcc\x15\xc2\x65\x9a\xbe\x1f\x36\x8a\xe2\x02\x23\x13\x8c\xcc\xf5\x63\x64\x02\x8f\x29\xff\x90\x03\x04\x3c\xa6\x2c\x17\x4f\xe7\x73\xd7\x0c\xc3\x6b\x6d\x17\x56\xf4\x8c\x11\x7f\xfa\xb8\x38\x68\x9a\x04\x34\xcd\xd5\xa4\x3f\xad\x32\x4d\x73\x7c\xb8\x09\x38\x9c\xe0\x70\xe6\xfe\xc0\xe1\x04\x87\x73\xb3\x39\x9c\x64\x22\x81\x7a\x66\xdb\xdc\x00\xf9\xdd\xa5\xdf\xc9\x57\xf1\xea\xe4\x22\x70\xf8\x6a\x46\xac\x81\xa4\xb0\xe1\x25\x7c\x1a\x70\xa3\x8c\x7c\xf1\x9c\xef\xe4\x82\x0d\x4c\xc7\x23\x77\xcc\x7a\xa1\x22\x4b\xcb\x74\x5d\xf6\x8d\x5c\x38\x2f\x7c\x81\x9f\x91\xbe\x22\x44\x6d\x30\x18\x7a\x8e\x65\x46\x54\x2e\xf5\x24\x95\x8b\xc9\xa7\x50\x22\x9d\x43\xe4\xee\xcd\xb3\xc8\xd9\x4d\x19\x48\xe5\xd9\xa5\xdf\x5f\x99\x6b\xd8\xa2\x69\xe5\xa2\x98\xbf\xc2\x57\xe6\x5e\x0d\x7a\x59\x61\x5c\xf9\x41\xcb\x2b\x37\x8a\x04\xaa\xc2\x87\x2a\x36\x63\xbc\x0f\x00\x84\x2a\x10\xaa\x40\xa8\xe6\xfe\x80\x50\x05\x42\x15\x08\x55\x20\x54\x81\x50\xad\xea\x26\x20\x54\x1b\x7d\xce\x65\x46\xa8\x4e\x1f\x2a\x2a\xb9\xa1\xfc\x99\x25\x17\x05\x71\xb4\x78\x6d\xfd\xd0\xaa\x95\xf4\x54\x52\x07\x5e\x05\x5a\xb5\xe2\x61\xeb\x81\x56\x8d\x1f\x26\xab\x90\xab\x9f\xf0\xcd\xb3\xf2\xb7\x97\xbd\x39\x1f\x67\x66\x8f\x7a\xc9\x92\x10\x9c\x56\x70\x5a\xc1\x69\xd5\x6a\x5c\x3a\x4e\x6b\xf1\xeb\x2b\x7b\xbc\xda\x85\x55\x32\xb7\xca\xc5\x44\x45\x7b\xe4\x20\xbc\x88\xbf\x4c\x71\x24\x92\xe2\xe4\x2b\x48\x96\xb2\xf1\x5a\xf4\xcb\x15\x5b\x3a\xc2\x7f\xd5\xb6\xc9\x71\x9e\xa4\xf2\xa7\xdd\x88\xc0\x9e\x0b\x27\x1b\x2f\x90\xbe\x4f\xea\x79\x4b\x4a\x96\xe4\x48\x16\x7a\x61\x18\x8a\x4f\xc7\x2d\x00\x6d\xab\x58\xfc\xd3\xa5\x91\xa1\xc2\x89\x76\xa5\xb4\xdd\x15\xc5\x92\x0e\xfb\x9f\xa1\x1d\x26\x29\x96\x24\x49\xaa\x9d\x27\x33\x71\x53\x58\xc0\x49\x88\xd5\xd2\x00\x80\x2b\xe1\xbd\xe1\x24\xf4\xde\xf6\x81\x5d\x65\x2f\xb9\xc2\x10\xe0\xaa\x40\xad\x05\x05\x2f\x21\x8e\xa8\xbc\xdd\x4b\xc2\x12\xae\x0e\xb4\x49\x9c\x47\xb9\x58\x1b\xd0\x87\x57\x83\x3e\x5c\x02\x03\xee\x74\xf7\x25\x04\x78\xd4\xb8\x1a\xa5\xaf\x56\x9e\xf4\x3b\xf2\x48\x7e\xe0\x7e\x81\xfb\x5d\x19\x18\x14\x70\xbf\xe3\xcf\x6a\x30\x7f\x57\x95\xf9\x3b\xf2\x6b\x03\xfc\xbb\xbc\xe0\x5f\xf0\x75\xc1\xd7\x05\x5f\x17\x7c\xdd\x85\xf1\x75\x81\xd1\xad\xb7\x31\x81\xd1\x05\x46\x17\x18\x5d\x60\x74\x81\xd1\x6d\xba\x10\x01\x4b\x17\x2c\x5d\xb0\x74\xc1\xd2\xcd\xb1\x74\xf7\xc0\xd2\x05\x4b\x77\xee\x2c\xdd\xf8\x9f\xcb\x46\xb7\x05\xde\x16\x78\x5b\xe0\x6d\x81\xb7\x05\xde\x16\x78\x5b\xe0\x6d\x81\xb7\x05\xde\x16\x78\x5b\xe0\x6d\x81\xb7\x05\xde\x16\x78\x5b\xe0\x6d\x81\xb7\x5d\x4b\xbc\x6d\xfa\xf9\x9b\x87\x2d\x81\x74\x0b\xd2\xed\xfa\x91\x6e\xf9\xe0\xef\x00\x77\x2b\xff\x90\xa6\x02\xdc\xad\x2c\x07\x7e\x2d\x01\xbf\x76\x35\xd1\x5b\xab\xcc\xaf\x05\x85\x16\x14\x5a\x52\x3a\x5a\x40\xa1\xd5\x5f\x03\x14\xda\x0d\xa2\xd0\x02\x65\x0a\x94\x29\x50\xa6\xb9\x3f\xa0\x4c\x81\x32\x05\xca\x14\x28\x53\xa0\x4c\xab\xba\x09\x28\xd3\x46\x9f\x73\x99\x51\xa6\xfd\x28\xf2\xff\xa0\xf9\x36\x69\x00\x43\x79\x6b\xe1\x32\x0b\xa2\x53\xf2\x7e\xef\xfd\xfb\xfc\x15\x3e\x42\x4f\x89\x58\xc9\x17\x59\xfc\xeb\x87\x2c\xad\x82\x92\x92\x5a\x9e\x29\x90\xa5\x15\x0f\x5b\x0f\x64\x29\x28\xa3\xa0\x8c\x82\x32\xaa\xd5\xb8\x74\x94\xd1\x4d\x21\x40\x96\x45\x21\x2c\x0d\x0c\xb2\x6c\xd3\xbd\xed\x26\x74\x25\x50\x72\x12\x9e\xe4\xea\x82\x20\xa7\xb5\x1f\x8f\xad\xf1\xf2\x76\x2f\x09\xc1\x11\x3c\xc6\xd5\xe0\x31\xce\x9d\x6c\x5c\x04\x40\x1e\x37\xa3\x3f\x36\x03\x3f\xae\x2a\xfa\x11\xd4\x47\x50\x1f\xd7\x82\x5d\x02\xea\xe3\x58\x13\x7a\x2d\x80\x8f\x2b\x03\x69\x04\x9f\x51\xde\x03\x3e\x23\xf8\x8c\xe0\x33\x82\xcf\x18\x5f\x03\x9f\x11\x7c\x46\xf0\x19\xc1\x67\x04\x9f\x11\x7c\x46\xf0\x19\x67\xcb\x67\x04\x9a\x11\x68\x46\xa0\x19\x81\x66\x2c\xa0\x19\xbb\x40\x33\x02\xcd\xb8\x2c\x68\x46\xf0\x19\xe7\xcb\x67\x04\xa1\xb1\x82\xd0\x38\x9f\xfe\x59\x27\x4a\xe3\xfc\x46\xd4\xea\x92\x1a\xe7\xd7\x47\xab\x4b\x6b\x9c\xd3\xcc\x5b\x39\x62\xe3\xdc\xfa\x65\xf1\x1a\x6f\xea\xd4\xc6\x79\xcd\xbb\x55\x22\x37\xce\xa7\x4f\xd6\x83\xde\x38\x9f\xbe\x5a\x6f\x82\xe3\x7c\xfa\x70\x13\x28\x8e\x0b\xe8\xc9\xb5\x21\x39\xce\xa7\xef\xd6\x8c\xe6\x38\xd7\x4e\x5b\x71\xa2\xe3\xa6\x61\x1d\x4d\xdf\x0f\x1b\x85\x38\x81\xe5\x08\x96\x23\x58\x8e\x60\x39\xae\x42\xc2\x4a\x7a\x6d\x4a\x54\x47\xbd\xc2\x4d\xe5\x3b\xc6\xf3\xfc\xdc\x35\xc3\xf0\x5a\xdb\x6d\x15\x7d\x64\xc4\xc3\x21\x2e\x0e\x1c\x24\x01\x0e\x72\x35\xf1\x45\xc0\x41\x02\x07\x09\x1c\x24\x70\x90\xc0\x41\xae\x09\x0e\x52\xf0\xe0\x6c\x9b\x1b\x03\xbf\xbb\xf4\x3b\xf9\x2a\x5e\x80\x5c\x04\x0e\x5f\x72\x88\x85\x8a\x14\x19\xbc\x84\x4f\x03\x6e\x20\x91\x2f\x9e\xf3\x9d\x5c\xb0\x81\xe9\x78\xe4\x8e\x59\x2f\x54\xe4\x19\x99\xae\xcb\xbe\x91\x0b\xe7\x85\xaf\xc2\x33\x32\x54\x84\x85\x0d\x06\x43\xcf\xb1\xcc\x88\xca\xf5\x98\x44\x3c\x31\xf9\x14\x4a\xa4\x2b\x87\xdc\xbd\x79\x16\x39\xbb\x29\xa3\x72\x3c\xbb\xf4\xfb\x2b\x73\x0d\x5b\x34\xad\x5c\xa0\xf2\x57\xf8\xca\xdc\xab\x41\x2f\x2b\x52\x2b\x3f\x4b\x79\xe5\x46\x11\x67\x54\xe8\xee\x6c\x33\x40\xd5\x04\x55\x13\x54\xcd\xdc\x1f\xa8\x9a\xa0\x6a\x82\xaa\x09\xaa\x26\xa8\x9a\x55\xdd\x04\xaa\x66\xa3\xcf\x09\xaa\x66\x72\x1b\xa8\x9a\xa3\xfb\x01\x54\xcd\x55\xa7\x6a\xc6\x0f\x93\x55\xc8\x55\x4e\xf8\xe6\x59\xf9\xdb\xcb\xde\x9c\x8f\x33\xb3\x47\xbd\x64\xe6\x00\xd1\x09\x44\x27\x10\x9d\x5a\x8d\x4b\x87\xe8\x2c\x7e\x7d\x65\x77\x57\x3b\x9c\x4a\xe6\x56\xb9\x98\xa8\x68\x8f\x1c\x84\x17\xf1\x97\x29\x8e\x44\x52\x9c\x7c\x05\xc9\x52\x36\x5e\x8b\x5e\xb4\x62\x4b\x47\x78\x9b\xda\x36\x39\xce\x24\x54\xde\xaf\x1b\x11\x2b\x73\xe1\x64\x77\xdf\xd3\xf7\x49\xfd\x64\x49\xc9\x92\x2c\xc2\x42\x2f\x0c\x43\xf1\xe9\xb8\x05\xa0\x6d\xb2\x8a\x7f\xba\x34\x32\x54\x84\xce\xae\x94\xb6\xbb\xa2\x58\xd2\x61\xff\x33\xb4\xc3\x24\x09\x91\x24\x69\xa7\xf3\xc4\xe5\xad\x00\x06\x76\x4a\x20\xd8\x24\x6e\x69\x69\xe8\xaf\x95\xe4\xd6\x70\x12\x74\x6b\xfb\x68\xa9\xb2\x97\x5c\x61\x02\x6c\x55\xf4\xd3\x22\x23\x82\x10\x9c\x53\xde\xee\x25\xa1\xc9\x56\x47\xaa\x24\xbe\xa2\x5c\xb0\x0a\xf8\xb3\xab\xc1\x9f\x2d\xe2\x60\xdf\x01\x07\x0b\x1c\x2c\x70\xb0\x6b\x82\x4a\x02\x0e\x16\x38\x58\xe0\x60\x81\x83\x05\x0e\x16\x38\x58\xe0\x60\x81\x83\x5d\x2f\x1c\x6c\xa5\xd1\x05\x4e\x6c\xbd\x99\x08\x4e\x2c\x38\xb1\xe0\xc4\x82\x13\x0b\x4e\x2c\x38\xb1\xe0\xc4\x82\x13\x0b\x4e\x2c\x38\xb1\xd9\xdb\xc0\x89\x05\x27\x16\x9c\x58\x70\x62\xc1\x89\x05\x27\x16\x9c\x58\x70\x62\xc1\x89\x05\x27\x16\x9c\x58\x70\x62\xc1\x89\x05\x27\x16\x9c\x58\x70\x62\xc1\x89\x05\x27\x16\x9c\x58\x70\x62\xc1\x89\x05\x27\x16\x9c\x58\xa4\xa2\x80\x13\x0b\x4e\x2c\x38\xb1\xcb\x82\x63\x5c\x51\x20\x17\x38\xb1\xe0\xc4\x82\x13\x0b\x4e\x2c\x38\xb1\xe0\xc4\x82\x13\x0b\x4e\xac\x7a\x04\x38\xb1\xe0\xc4\x2e\xd2\x2c\x05\x27\x36\xff\x2a\xe0\xc4\xe6\xfe\xc0\x89\x6d\x34\x50\xc0\x89\x2d\xb6\x09\x9c\x58\x70\x62\xc1\x89\x15\x7f\xe0\xc4\xea\xdd\x04\x4e\x2c\x38\xb1\xe9\x1f\x38\xb1\xe0\xc4\xc6\x6f\x01\x4e\xec\x88\xf1\x06\x4e\x2c\x38\xb1\xe0\xc4\x82\x13\x0b\x4e\x2c\x38\xb1\x08\xce\x01\x27\x16\x9c\xd8\xe9\x73\x62\x8d\xd4\x33\x22\x91\xb1\x31\x54\xe8\x5e\x89\xb4\xaf\xdd\xee\xbb\x9b\xa4\xcc\xb4\x90\xb2\x00\xca\x02\x28\x0b\xa0\x2c\x80\xb2\x00\xca\xce\x1d\x28\x3b\x45\x40\x10\xe0\xb4\x80\xd3\xce\x16\x4e\x2b\x94\x13\x39\xbf\xba\xb8\x15\x98\x20\xb5\x77\xae\x68\x86\x7c\x5c\x9b\xf6\x40\x7d\x9f\x54\x96\xa9\x40\xc2\x81\xe9\x8f\xf1\x49\xe4\xcd\xfc\xde\xe9\xf5\x3a\xa8\xb9\xa0\xe6\x82\x9a\x0b\x6a\x6e\xf6\x02\xa8\xb9\xa5\x1f\x01\xd4\x5c\x50\x73\x41\xcd\x2d\x1f\x19\xa0\xe6\x82\x9a\x5b\xf9\xe6\xa0\xe6\x82\x9a\x0b\x6a\x2e\xa8\xb9\xa0\xe6\x26\x2f\x08\x6a\x6e\xbe\xc0\x2a\x53\x73\x9b\xb4\xe4\xc9\xf4\xec\x6f\x8e\x1d\xf5\x0b\x6d\x29\x79\xa0\x56\xb8\x31\xa3\x77\xe1\x78\xde\x8d\xa1\xf3\x82\xcd\x5b\xca\xe6\x9d\x7d\xdf\xac\x13\x97\x77\x3e\x23\x69\x75\x99\xbc\xf3\xe9\x9f\xd5\xe5\xf1\xce\x61\xb6\xad\x1c\x8b\x77\x2e\x7d\xb2\x78\xdd\x36\x75\x0e\xef\x3c\xe6\xda\x2a\x31\x78\x67\xdf\x1f\xeb\xc1\xdf\x9d\x7d\x3f\xad\x37\x7b\x77\xf6\xfd\xb7\x09\xdc\xdd\x39\xf7\xe2\xda\x30\x77\x67\xdf\x6f\x6b\xc6\xdb\x9d\x5b\x87\xad\x38\x6b\x17\x98\x5d\x60\x76\x81\xd9\xdd\x04\xcc\x2e\x08\xbb\xf2\x0f\x49\x3c\xd9\x79\x07\x9a\x2e\x68\xba\xa0\xe9\x82\xa6\xbb\xac\x34\xdd\xf1\xa9\x3c\xe0\xf0\x82\xc3\x9b\xfb\x03\x87\x17\x1c\xde\x4d\xe7\xf0\x4e\x22\x50\x41\xf0\x9d\x98\xe0\x3b\xfe\x07\x00\xfb\x17\xec\x5f\xb0\x7f\x73\x7f\x60\xff\x82\xfd\x0b\xf6\x2f\xd8\xbf\x60\xff\x56\x75\x13\xd8\xbf\x8d\x3e\xe7\x32\xb3\x7f\xa7\x4f\xc3\x95\xc0\x5b\xfe\xcc\x92\x8b\x02\x95\x5b\xbc\xb6\x7e\x4c\xe0\x4a\xec\x2f\xa9\x23\x06\x83\x09\x5c\xf1\x30\x30\x81\xc1\x04\x06\x13\xb8\xbc\x59\x60\x02\x13\x30\x81\x33\x83\x10\x4c\x60\x30\x81\x97\x87\x09\x0c\x22\x30\x88\xc0\x4d\x1b\x4e\xe6\x4e\x04\x06\x0c\x78\x89\xe3\x88\x00\x03\x06\x0c\x38\x86\x01\x9f\x48\x00\xf0\x48\xc0\xef\xb6\xf4\x75\x0a\x50\x06\xe9\xd3\x80\x3e\x78\x13\xb1\x19\x55\x1c\x77\x73\x40\x63\x3b\x04\x53\x33\x8a\x22\xa9\xe3\x30\x4d\x97\xb7\x96\x42\x7b\xa6\x0b\xd3\xad\x7d\x05\x92\x45\xbd\xb5\x7a\x72\x1d\x21\x72\x2a\x18\xca\xa9\x31\x16\x5b\xf7\x4f\x1e\xa0\x54\xf9\xc9\xd3\x04\x84\xc9\xa9\x85\xe3\x0c\xb9\xf9\xc1\x13\xd7\x90\xeb\x37\x03\x86\x5f\x5b\x5c\xdf\x28\xbc\x59\xfb\x31\xda\x8a\xe4\x94\xcd\x95\x01\xce\x69\x0c\x9c\xd3\xf6\xb6\x58\x84\x66\xb4\x9e\x8e\xa1\x6e\x46\x5a\x2a\xdf\x8d\x1c\xc5\x59\xda\x26\xf7\x4c\x6d\xa2\x4a\xe0\xd2\x0e\x09\x45\x00\x9b\x13\xca\x7d\x1a\x55\xa1\xc0\x2e\x3d\x6c\x91\xff\x30\x3d\xfb\x3f\x44\x11\x93\x78\xcc\x33\xfe\x45\x03\xa6\x36\x11\xb9\xf5\x2a\x99\x4d\xf1\xca\x48\xd4\x2f\x32\x2e\x3a\x84\xfc\x45\x49\x40\xb9\x7d\xc1\xdf\x55\x7a\x7a\x14\xe1\x49\x8b\x50\x1e\x30\x41\x5d\x32\x3d\x72\xb4\xa7\x8c\x6f\x72\xf6\xc4\x5e\x29\xe9\xee\xa9\x1f\x88\x13\x49\x7f\xd4\x36\xa1\x61\x48\xbd\xc8\x31\x5d\x6e\x7e\x8d\x00\x43\x8d\x8b\x4f\x7a\xf0\x1a\x41\x8f\x1a\x31\x8f\xca\x91\x47\x7b\x7a\x81\x52\xe2\x91\xce\xa4\x19\xc5\x3b\x2a\xe0\x8e\xfe\x3a\xbb\xbd\xbe\xba\xfe\x23\x5f\xaa\x0d\xf0\x68\x3c\xde\x51\x82\x3b\xea\x1e\xed\xed\x65\x2f\x94\x63\x8e\xf4\x57\x4b\x5d\x7a\x39\xdc\x0e\x79\xd8\x0a\x87\x4f\x1e\x8d\x64\xb9\x61\x48\x6f\x98\x7d\xee\xd8\x41\x66\xe3\xee\x67\xf6\x79\x55\x20\xa4\x02\x05\x29\xff\xa8\x97\x93\xf0\x91\x4f\xf1\xc7\x88\xbd\x50\x2f\x7e\xfb\xbb\xcb\xdb\xaf\x57\xe7\x97\x67\xe7\xe7\x9f\xbf\x5c\xdf\x3f\xde\x7f\xfe\xf3\xf2\x9a\xbf\x7d\x75\x03\xea\x08\x4a\xea\x29\xbe\xf3\x18\x30\xa6\x5e\x2b\x76\xb9\x64\x7a\x5a\x3d\xf6\xf1\xc3\xe7\xbb\xfb\xc7\xc7\xd3\xd2\x6b\x37\x9f\x6f\xef\x0b\xe0\xa9\x36\x84\xa6\x74\x25\xa4\xbd\x42\xd5\x00\x2c\xa5\x33\x55\xc3\x99\xc6\x60\x33\xc5\xff\x4a\x59\x49\x4a\x36\x36\x4a\x3c\xdc\x6d\x90\x78\x98\xe2\x3c\x17\x91\x7f\x98\x5a\x7f\xcd\xd7\x2b\x48\x45\x44\x2a\xe2\x0a\xa7\x22\xc6\x08\x25\xad\xff\x78\x0f\x9f\x15\x7f\x26\x09\x79\xf7\x42\xbc\xf3\x5d\xf2\x5a\x57\x3d\x8f\x25\x3f\x4b\x87\x16\x9f\x4e\x19\xa1\x97\x71\x1b\xde\xd3\x60\x50\x8c\xb9\x30\xe4\xa0\xbf\xfc\xee\x07\x54\x02\x57\x4b\x02\xbd\x94\xeb\xad\xf4\xfc\xb1\x62\x69\xdd\x99\x76\xcd\xa2\xab\x42\x4c\x37\x89\xbd\x36\x65\xcf\x92\xcf\xfb\xe6\x78\x36\xfb\x96\x54\x5e\x92\x29\x29\xa7\x9b\x9e\x8a\x99\xba\xb0\x4a\xbd\xa5\xb3\xc9\xe4\xcc\xb9\xf4\x9a\x7a\x5c\x77\xe1\x71\xad\xbb\x51\x3c\x57\xda\x5c\x06\x5f\x1d\xe5\xa7\x98\xf4\x3e\xfa\xae\xe9\xe5\xa2\x95\xd2\x4a\x1f\xb6\x54\xb5\x99\xeb\x71\x8b\x1e\xb6\xb4\xbe\xdc\x6a\xf1\x68\x1a\x59\xf6\xf8\x8f\x8c\xbb\x21\x29\x30\x32\x0d\x55\x0d\xab\x86\xa9\x9b\xa3\x43\xe1\x77\x11\x0a\x3f\xe3\x50\xf8\x24\x0c\x33\x1f\xf1\xf7\xec\x54\x25\x0f\x25\xd1\x7e\xbf\x5f\x7d\xbc\xbc\x39\xbb\xff\x50\xf9\xe0\x94\xf2\x3b\xfa\x91\x7c\x66\x87\x6f\xa1\xcb\x7a\x23\x9e\x9a\xc4\x18\xfe\xa3\xca\x37\xff\xb0\x55\x19\x07\x5d\x78\xcd\x30\xb2\xd9\x30\x6a\xfa\xc8\xfa\xb0\xc6\xbf\xcc\xc0\x73\xbc\x5e\xf1\xe1\x8b\x0e\x38\x47\xac\x2d\x69\x17\x6b\xfb\x75\x8e\xb1\xb6\x73\x8a\x9b\xd7\x49\xd5\xd9\x46\xcc\x37\x1b\x06\x01\xf4\x53\x0a\xa0\x9f\x4f\x66\x47\xf2\x14\xc3\xf1\x8c\xab\x9b\xf8\x85\xc5\x14\x1e\x31\x2b\xf8\x68\x6c\x1f\xc1\x9d\x92\xe4\xc3\xa1\xef\xb3\x20\x3a\x4d\xb7\x6f\x45\xc0\xa5\x58\xa8\xc5\x2e\xd6\xda\x26\xdc\xff\xe3\xe6\xc3\xd9\x9f\x27\x77\xca\xd7\xd2\x36\x9d\x6a\xda\x29\x25\x45\x87\x67\x99\x38\x58\x9d\x4c\xb1\xf9\xa5\x31\xad\x7f\x6e\x40\x3f\x8a\xfc\x3f\x68\xbe\x4d\x5a\x44\xb0\xbc\xb5\x70\x59\xcc\x8f\xf7\x7b\xef\xdf\xe7\x5e\x66\xc1\x41\xfe\x23\x5e\x27\xb9\x77\x2a\xef\xb3\x64\xc1\xfa\xeb\x12\x3f\x3f\x02\xbc\x91\xba\x61\xc1\xdf\x00\x7f\xa3\x52\xe9\x6d\x04\x7f\x63\xe5\xf8\x11\xa3\x13\x5a\x76\x91\xd0\x92\xbb\x6f\xb5\x13\x4b\xc4\x71\xfe\xea\x34\x47\xd7\x95\x72\xae\x02\x94\x1a\x8a\xf3\xce\xe4\xe9\x79\xe2\x36\x29\xea\x35\xb7\x59\x1a\x82\x44\x06\x72\x98\xa8\x2d\xbe\x19\xb1\x5a\xe3\xa4\x87\xb5\x3e\xe9\x04\x27\x0c\x94\x9d\x30\x30\xeb\xa1\xe5\xad\xf1\x29\x03\xf3\xe9\xbb\xd5\x3a\x69\x60\x3e\x7d\xb2\x1e\xa7\x0d\xcc\xa7\xaf\xd6\xfb\xc4\x81\xf9\xf4\xe1\x26\x9c\x3a\xb0\x80\x9e\x5c\x9b\x93\x07\xe6\xd3\x77\x6b\x76\xfa\xc0\x9c\x32\x3e\xf9\xff\x89\xf0\x10\x8f\x92\xce\xb9\xcb\x86\xf6\x4d\xc0\x5e\x1d\x9b\x06\xc9\x0e\x6a\x92\xee\x3a\xce\x51\xae\x62\x27\x41\xab\xf5\xe7\x4f\x23\x56\x86\x0d\x8e\x75\xad\xbc\x3b\x0d\xa9\xd5\xdb\x50\xf8\x64\xbb\xaf\x07\x55\x1a\xbb\x22\x13\x52\x56\x6f\x38\xbe\xe3\x1b\x5d\xf5\x89\xf4\x70\x24\xcb\xb1\x03\xf5\x56\xfa\xfe\x88\xba\xca\x6f\xfb\xc4\x6c\x7a\x4a\xd4\x8e\x46\x52\x77\xf4\x79\x18\xf5\x98\xe3\xf5\x62\x17\x5e\xcd\xd7\xbd\x61\x76\xcd\x27\xb5\xa2\xda\xbe\x4b\x5a\x5b\x4a\x4c\x0f\xa8\xd8\xde\x92\xc3\xf3\x94\x7c\xf6\x7e\x97\x7e\x56\x7e\x2d\x1f\x8f\x53\x19\x93\x52\x16\x8d\x52\x1d\x78\x53\x56\x3a\x17\x7b\x61\x94\xbd\x60\xc6\xe9\x16\x5f\x88\xbb\x3a\xe3\x6f\x7b\x72\xbc\xdd\xb0\xaf\x88\xd0\x96\xfc\xdf\xa4\x2a\x62\xfa\xbe\xfb\x46\x8c\xe7\xea\xc1\x24\xd3\x97\x63\x37\x5d\xea\xa0\xab\x0f\x74\xa8\xc8\xa5\x2b\xf1\xc6\x18\xd9\xb1\x95\x75\x44\x65\x48\x2b\x8c\x45\xbb\x42\xcc\x68\x1e\x92\x9a\xbb\x13\x77\x59\x6e\x10\xd7\x4e\x3a\xd1\xb3\x11\x1d\x64\xd3\x22\x85\xbb\x6c\xe4\x7d\x44\x4f\xc2\xaf\xeb\x4c\xaf\x00\x91\xa0\x91\x65\x93\xfb\x8f\x77\x24\xa4\x56\xc0\x35\x9b\x16\x0f\x96\xa4\x00\x7a\xa6\x6b\xbc\x76\x3b\xdd\x83\x86\x29\x80\xe4\xca\xb3\xdc\xa1\x4d\x89\x19\x9b\x3f\x01\x73\x69\xb2\x9d\xac\x67\xec\x26\x11\xb5\x3b\x22\x9c\xd7\xb3\xc9\x93\xe3\xd9\xc4\x11\x11\x00\xf9\xc2\x6a\x9b\xcc\x94\xf2\xb5\x33\xd3\xb4\x42\x3d\xa3\x30\x75\xc2\xca\xe8\xe2\xec\xd9\xef\x3e\xb3\xc3\x1d\x19\xf2\x26\x11\x19\x69\x4e\x61\xe9\x49\xed\x0d\xd3\xf8\x72\x59\x6b\x2d\x92\x15\x27\xc9\xb5\x1b\x95\xd0\x97\x3a\xbc\x6c\x27\xb4\x04\xb9\x55\x15\x17\xbb\xf0\xfc\x13\x9b\xf6\x2b\x0d\x22\x27\xa4\x03\xea\xa5\xe1\x52\x95\x09\x65\x15\xb5\x8a\xed\xde\xb0\x33\xd9\xcb\x89\xfe\xab\xc9\xb6\xdc\x26\xd7\x89\x57\x8b\x58\x2e\x35\x45\x50\xee\x35\xb3\xa9\x12\xd1\x5a\x44\x32\x79\x76\xcd\x9e\xd6\x1e\x5f\x7f\x9d\xc4\x21\x26\xc2\x24\x42\x12\xb2\x01\xcd\xe5\xa6\x68\x2b\x00\x3e\xf9\xc4\x80\xd6\x02\x91\xb5\x9a\xd3\x8c\xae\x6d\xf2\x17\x7f\x8a\x6c\x5e\xdf\xf4\x7a\xf2\xf0\x05\x2d\x40\x4c\x37\x6c\x9c\x8a\x01\x37\xbf\xe4\xc0\xd4\x61\xac\xba\x83\x37\x5c\xf9\x08\xb5\xf7\x9f\x78\x5a\xe4\xe6\x81\x36\x68\x95\x6c\xa8\x68\x76\x45\x36\x65\x61\x7e\x8b\x6f\x4b\x43\x3d\x59\x77\xbc\x36\xd7\x66\xfa\xfa\xe9\xf3\x55\x77\x0d\x98\xe7\x44\x2c\x08\x05\xa9\x9b\x0d\x43\x72\x7e\x7b\x21\x27\x95\x1c\x4b\xa5\x8d\x40\x06\xe6\x2c\x32\x30\x9b\x64\xe1\xa6\xdf\x6d\x18\xc6\x88\x6c\xa1\x01\xe4\x0c\x96\x52\x40\x7c\xc2\x34\x80\x69\x4a\x9f\xb0\xd0\x85\xb5\xdf\xad\xb2\x33\x46\xe5\x9d\xea\xa2\xa8\x95\x84\x53\x3b\x75\xc9\x86\xd1\x1c\x92\xb5\xb3\xd3\x39\x14\x98\xa7\x81\x23\x33\x02\x44\xaa\x84\x40\xc2\x04\xf4\xef\x61\xe0\x28\x91\x9f\x39\xc5\xe5\x75\xbf\x73\x9c\x30\xae\x64\x3d\x29\xe8\x4a\x05\x87\x69\xc7\xe3\x30\xaf\xe4\xb4\x96\x72\x31\xd1\xfe\xf3\xd6\x4c\x9e\xec\x1c\x6c\xfa\x01\x91\x0e\x3c\x97\x74\x60\x45\x6a\xfa\xdd\x35\x45\xdc\x66\xe6\x75\xb6\xc9\xcd\x50\xc4\xab\x49\xcc\x5a\x91\xc7\x64\xb1\x80\xb2\x70\xf7\x59\xde\xbc\xfb\xe4\xb2\xa7\x5d\x99\xa8\xb6\x7b\xc1\xac\x21\x37\xa7\x44\x93\x24\xaa\x49\x15\x33\x44\x93\xdf\xb8\x71\x3f\x13\x6b\x58\x3d\xa6\x0a\xb0\x91\x8e\xb4\x34\xc0\x7a\x2c\x3c\xc5\x38\x95\xd6\xc8\x89\x06\xdc\x84\x56\x4f\x69\xa2\xc8\xd5\xc7\xe7\xb3\x44\x08\xbf\xe7\xe2\x28\x48\x57\x35\x9e\xe9\xe6\x06\x6e\xd9\x7a\x26\x99\x71\xd3\x58\xd6\xf0\x65\x5c\xfa\x39\xa7\x3a\x45\x93\x6a\x5b\x4d\x4f\xcf\xac\xf5\x99\xe4\xfb\x33\x0e\x2f\x6a\xdc\x9d\xb3\x95\x77\xbc\x3b\x93\xb5\xe2\x0c\x04\xde\x94\x3b\x73\x16\xd0\x03\x19\x09\xc0\xfb\x5e\xf5\x33\x79\x3d\xe8\x74\x3b\x5d\xfe\x7b\x2c\xe0\x6c\x66\x85\x45\xed\xb7\xcb\x0b\xee\x06\xd4\xa5\x66\x48\xc3\xed\xf4\xb6\x7c\x3a\xb0\x70\x24\xc8\xf0\xb2\x67\xe6\xba\xec\x1b\x5f\xa1\x59\x6c\xe0\x33\x8f\x7a\x51\xec\xf9\xe5\x5d\xb4\x4d\x88\x1e\xa7\x72\x9a\xd6\x99\xfc\x6e\x79\x4e\xf6\xe7\x8c\xc4\x3d\x7d\xdd\xeb\xbc\xe7\x97\x92\xa1\x27\x1a\x93\x78\x56\x89\x13\xca\x10\x7c\x71\x94\x89\xd4\xce\x02\x2f\x47\xdd\x67\x41\x5b\xa4\xb6\xea\x0d\xdd\x24\xe8\x8c\xe7\xa1\x55\xe3\x2b\x71\x2b\x8d\x74\xca\xca\x45\x8c\xe3\x45\x34\x78\x36\xe3\x64\x01\x11\xba\xc3\x5b\x14\x23\x42\xc9\xc3\x70\x6f\xef\xc0\x32\xc4\xff\xc8\xf8\x2a\xed\x58\x96\x78\x6d\xb6\x4d\xae\x9e\x89\x4b\x9f\x23\xf2\xe4\x9a\xde\xcb\x0e\xef\x7e\x69\xd0\xa5\xf5\x3b\x61\x1c\x5c\x9f\x12\x3f\x79\xbf\xff\x12\xca\x1a\xe2\x78\x7e\x91\x4e\x25\x6a\x15\x2d\x79\x74\x9e\xc5\x4b\xc8\x68\x76\xfe\xcb\x55\x5c\xa5\x0c\x68\x57\xeb\xde\x3e\x8d\xfa\x34\xe0\x86\x96\xc7\x84\x33\x68\x60\x86\x7f\x0f\xa9\xb0\xbe\xa2\xc0\x7c\x7e\x76\x2c\xe1\x2f\xa0\x61\xa4\xd2\xca\x42\x51\x52\xc6\xa2\xcb\x4a\xe2\xac\x41\xb5\x48\x10\x8d\x48\xab\xd1\x03\x82\xb3\xab\xc0\x76\x70\x09\x22\xee\x0b\x7d\x6a\x39\xa6\x72\xb1\xc9\xd4\x50\xe9\x63\x93\xe1\x92\xcf\x4e\x2f\x4e\x51\x20\xe6\x30\x62\xdc\x4c\xb6\x4c\xd7\x7d\x23\x3e\xf3\x87\xae\x19\xa7\xe7\x36\xc1\x54\x34\xe3\x54\x8c\x06\x55\x54\x91\x2a\xb2\x68\x83\x0a\x56\x45\x4c\x07\xfd\x74\xff\x85\xc4\x9c\x4f\xb5\x5f\xc1\x7f\xda\xcb\xf1\x3e\x13\x8e\xc4\x8f\x1f\xfc\xfa\xcf\x9f\x3b\x09\xb8\x33\xa1\x84\xea\x59\xa8\xa4\x31\x05\xa3\x25\x06\x63\x4c\x0e\x46\x25\xef\xa2\x21\xf0\xa2\x19\xf1\x22\x4b\x9c\xa8\x61\x5e\x94\x61\x2f\xea\xea\xa9\x43\x57\xb4\x43\x4b\x68\x6c\x89\xcc\x53\x2a\xc7\x4c\x29\x5e\xa2\x86\x2f\x31\x0e\x60\x22\x6d\x94\x8e\x98\xe0\x33\x31\xb6\xc4\x4b\xa7\x74\x47\xfa\xc2\xa9\xcd\xc5\x1a\xcb\xd8\x6c\x59\x52\xb1\x47\x23\x21\x8a\x3b\xff\x15\x72\x91\xfd\xdf\x85\xf9\x78\x1d\xcf\xbe\xf2\x34\x1d\x6d\xc6\xfd\xa6\x8e\x9f\xc9\x7e\x86\x87\xad\xfb\xa4\xc3\x04\x48\x57\xb4\x42\x95\xed\xf0\x6b\xfa\x67\xf8\x99\xbc\xe4\x46\x52\x34\x46\x58\x3a\xd5\xfc\x0c\x71\xe3\x98\xe4\x0c\xf5\xd0\x4d\x61\x66\x78\x29\xb1\x13\xb4\x0c\xd0\x32\x40\xcb\x98\x80\x96\xc1\xed\x6f\x70\x32\x4a\x6e\x2c\x47\x47\x68\xa2\x67\x83\x8e\x2c\x6f\x7e\x06\x39\x52\xae\xb2\x77\x8d\x91\x72\xe5\x99\xee\xfa\x64\x5c\x65\xfd\x04\xf9\xbf\xcd\x49\xb8\xc2\x41\xc1\x55\xd5\xe5\xf2\x84\x80\xd8\x59\x3c\x62\x07\xa7\xcd\x56\x4f\xe2\x0b\xe6\xfd\x12\xc5\x3c\xdb\xdf\xfe\xb8\x99\xca\x21\xb3\xd5\xe8\xa1\x39\x82\x78\xa4\x71\x53\x68\x81\xb4\x09\x76\xf8\xc2\x39\x94\x86\xc1\x0e\x31\x23\x75\x4e\x81\xa4\x13\x05\x94\xaf\xcc\x5c\x87\xaf\x63\x5c\x97\x38\xbe\x3c\x07\x8b\x84\x51\xe1\x78\xa1\x3c\x72\xe3\xfe\xec\xb7\x8f\x97\x77\xb7\x97\xbf\xdf\x5e\xde\x7d\xb8\xba\xbe\xbf\xbc\xfd\x7a\xf6\xb1\xb2\x99\xc7\x25\x30\x98\x6b\xa6\x31\x1c\x54\x22\x60\x7b\x94\x03\xb0\x2f\x63\x62\x5f\xba\xef\xf7\x3b\xdd\xe3\x93\xce\x5e\x67\x6f\xb7\x7b\x0c\x92\xd3\xca\x9c\x9a\x0a\x8e\xda\xcc\x39\x6a\xa0\xc0\xb4\xa4\xc0\x48\xdf\xca\x29\x11\xbb\x14\xf9\x23\xe2\xd6\x0f\x12\x33\xc9\xeb\x2e\x19\x43\x06\x07\xbe\x4e\x03\x58\x13\xf0\x55\x4e\xbc\xcb\x93\xee\x5c\xcb\x1d\x04\xb1\x43\x67\x0c\x7a\x81\x58\x0a\x50\x2f\xe3\x27\x16\xb1\xed\xea\x54\x4d\xae\x60\x45\xe1\xb0\x64\xb1\xa2\x87\x67\x55\xb8\x4e\xb8\x1d\xa8\x36\x79\xae\x06\xbd\x2a\x0f\x0a\x79\xd8\x12\xeb\xc5\x27\xc7\x8b\x63\x14\x6c\x95\x4f\x63\x38\xbe\x31\x30\xc3\xbf\xe3\xff\xcc\xb5\xff\x61\x8b\xfc\xe7\x74\x04\x5c\x71\x05\x15\xbf\xe6\xcd\xe7\x8b\x99\x2d\xf2\xe3\xbd\x8a\x4e\x91\x88\x96\x7f\xfc\xdd\xcd\xd9\xf9\xec\xdb\x20\x36\x9a\x2a\x54\xcf\xc7\xb3\xeb\xeb\xcb\x8f\x17\x8f\x57\xbf\xb7\x6c\xc9\xb4\xbd\x3c\x69\x7c\xc5\xa8\x96\xde\x3c\x7e\x3a\xbb\xfb\xdf\x0b\x6c\x6b\x1a\x86\xd1\x48\xe2\xb6\x91\x84\xa3\xe4\x60\x8d\x60\x32\xb2\xe1\x6c\x86\xf5\x9c\x7b\x03\xbd\x15\x34\xb2\x32\x91\x98\xbb\x71\x51\x80\x74\x56\xee\x64\xe8\xa7\xb7\xf8\x9b\x97\x7c\x95\x8a\xd1\x50\x4c\xf3\x93\x7f\x75\xb3\x60\xd5\x79\x41\x93\x26\x3f\x8f\xd8\xba\xd7\x02\x1a\x66\xc8\x25\x02\x92\x68\x12\x24\x11\xd0\x3b\x40\xef\x00\xbd\x03\xf4\x0e\xd0\x3b\x40\xef\x00\xbd\x03\xf4\xce\xdc\xd0\x3b\x05\x1c\xc5\x11\x70\x14\xc0\x51\x00\x47\x41\x80\xa3\x00\x8e\x02\x38\x8a\x29\xe2\x28\x1c\xdf\x1c\x3c\xb9\xcc\x7a\x99\x2d\xa2\xa2\xb4\x34\xb8\x15\xe0\x56\x80\x5b\x01\x6e\x05\xb8\x15\xe0\x56\x80\x5b\x01\x6e\x05\xb8\x15\xe0\x56\x80\x5b\x01\x6e\x05\xb8\x15\xe0\x56\x80\x5b\x51\xa8\x0b\xdc\x0a\x70\x2b\xc0\xad\x00\xb7\x02\xdc\x0a\x70\x2b\xc0\xad\x00\xb7\x62\x2e\xdc\x8a\x51\x3b\xce\xb2\xd4\x48\xba\x45\xee\x93\x00\x76\x01\xd8\x05\x60\x17\x80\x5d\x00\x76\x01\xd8\xc5\x7a\xc1\x2e\xce\x13\xa7\xa3\xe8\x0b\x62\xf6\x7a\x01\xed\x29\xd3\x3a\x9e\x7a\x5c\xfd\xf3\x75\x67\x45\x33\xbe\xdc\x5d\x3e\xde\x7c\xbe\xa8\xcf\x94\x2f\x4f\x4a\x07\x6b\x03\xac\x8d\xa4\x05\x60\x6d\x80\xb5\x01\xd6\x46\xb6\x4d\x60\x6d\x80\xb5\x01\xd6\x06\x58\x1b\xd9\xb7\x05\x6b\x03\xac\x0d\xb0\x36\xc0\xda\x00\x6b\x23\xfb\x07\xd6\x46\xbe\x15\x60\x6d\x80\xb5\xa1\xfe\xc0\xda\x00\x6b\x23\xcb\xda\x50\x21\x89\x77\xa2\xb2\xd8\xb9\xb9\x1b\xef\xf1\x87\xbb\x2f\xb6\x6d\x58\x81\x1d\xaa\x13\xca\x81\xe6\x00\x9a\x03\x68\x0e\xa0\x39\x80\xe6\x00\x9a\x03\x68\x0e\xa0\x39\x80\xe6\x78\x58\x7e\x34\xc7\x5c\x3b\xad\xcd\x50\x9b\x4d\x87\x15\xc6\x59\xcd\x08\xd3\xc7\x56\x91\x60\x62\xa4\xee\x20\x09\x33\x51\x79\x49\xf7\xca\x3c\xfe\xda\xed\x1e\xdd\x24\x45\x46\xb3\x4e\x66\xbc\x66\x18\x65\xcb\xcb\x9c\x4e\x73\xc2\xa4\x4e\x60\x50\x80\x41\x01\x06\x05\x18\x14\x60\x50\x92\x6b\xc0\xa0\x8c\xc0\xa0\x88\x77\xe3\x6d\x55\x29\x0b\x95\x73\x04\x7c\x14\xf0\x51\xd6\x8d\x8f\xb2\x82\xe0\x8e\x71\x98\x1d\x2d\xf4\xd1\x34\x6c\xb0\xc9\x28\x1d\x13\x5b\x41\x4b\x85\xe7\x58\x27\x32\x47\xf3\x77\x06\x58\xe3\xa1\x25\x58\x63\xd4\x02\x51\x85\xb6\x2b\xbb\x49\xae\x14\x57\x0e\x57\xc1\xd7\x40\xbc\x91\xb6\x8c\xff\x93\xe1\xb9\x11\xff\xf5\x51\xd9\xbb\x8f\xb2\x72\x3d\x70\x10\x98\x8b\x89\x31\x17\x69\x1a\x01\xbf\xf3\xd3\xfd\x17\xfe\x84\x61\x48\x1b\x43\x1d\x5e\x69\xd4\x7f\x1c\x44\x43\xf5\x7a\x82\xe7\xf0\xb0\x55\x04\x3a\xb8\x21\x2d\xb9\xa3\x7b\x78\xb4\x97\x2b\xfd\xb0\x31\xf8\x8d\xee\x94\xf0\x1b\x7a\x81\xa5\xa2\x64\x28\xcc\xc7\xe3\xe3\xf9\xf5\xd5\xe3\xa7\xfb\x2f\x8f\x8f\xcd\x30\x1a\x8d\x41\x1a\x40\x69\xcc\x18\xa5\xd1\xa4\x25\x4f\xa6\x67\x7f\x73\xec\xa8\x5f\x68\x4b\xc9\x03\xb5\xc2\x00\x77\x10\x0d\xdc\x31\x5a\xc1\x0b\x09\x97\x51\xef\x55\x8c\x0f\xae\xfd\xea\xe9\x1e\x0b\xc2\x7a\x98\xbe\x1f\xd6\x5a\xbe\x75\xe6\x02\x58\x1e\x60\x79\x2c\x19\xcb\xa3\x94\x35\x41\x48\x1e\x93\x71\x4a\x5c\xc7\x1b\x7e\x8f\x0b\x00\x68\x01\xa0\x45\x5c\x0a\x40\x8b\x4a\xa0\x45\x2c\x02\xce\x5d\x33\x0c\xaf\xb5\x15\xb2\xd0\x84\x46\x3c\x00\xe2\xe2\xe3\xf2\x2f\x00\xbe\x00\xf8\x02\xe0\x0b\xf1\xd9\xf8\xba\x5e\x49\xaa\x57\x33\x70\xb8\xed\x51\xfd\x89\x3e\xdd\x7f\x59\xe0\x77\x89\x9d\x08\xf9\xd7\x00\xbf\xa3\xac\xba\x92\xc0\xf9\x71\x33\xaa\xb6\xc9\x99\x6d\x73\x05\xfc\xbb\x4b\xbf\x93\xaf\xe2\xd5\xc9\x45\xe0\x70\x33\x4b\x18\x67\x52\xd2\xf0\x12\x3e\x0d\xb8\xe4\x27\x5f\x3c\xe7\x3b\xb9\x60\x03\xd3\xf1\xc8\x1d\xb3\x5e\xa8\x70\x6e\x99\xae\xcb\xbe\x91\x0b\xe7\x85\xaf\x30\x32\xa2\x57\xf8\x28\x63\xff\x1c\x95\x36\xa8\x4c\xca\x66\xf2\x29\x94\xc8\xf0\x2a\x72\xf7\xe6\x59\xe4\xec\xa6\x2c\x03\xe1\xd9\xa5\xdf\x5f\x99\x6b\xd8\xa2\x69\xe5\x72\x98\xbf\xc2\x57\x56\xcc\x60\xab\x49\xe3\x29\xab\xdc\x28\xe6\x65\x16\x3e\x54\xb1\x19\xe3\x7d\x80\x7a\xf4\x4a\x66\xe1\x07\xe8\x4a\xb6\x35\x80\xae\xb4\x7b\x1a\xa0\x2b\x80\xae\x00\xba\xb2\x04\xd0\x95\xed\x16\xd8\x95\x6d\x80\x57\x00\x5e\x59\x19\xf0\x4a\xfa\xd5\xb5\x77\x7c\xd8\x72\xbc\x67\x56\x0f\x4a\x01\x77\x45\xfc\xd5\x71\x57\xe8\x77\xcd\x51\x99\xd4\xa2\x7c\x0c\xf9\xdf\x0d\x22\x20\x0d\x15\x06\x9b\x2c\x61\x88\xa1\x61\xf0\x67\xe6\xde\x13\xcc\x95\xe4\x0f\xcc\x95\xd5\x67\xae\x10\x4d\x3e\xc8\xe5\x4f\xf8\xe6\x59\xf9\xdb\xcb\xde\x9c\x4f\x1c\xb3\x47\xbd\x48\x5f\x1c\x01\xe0\x02\x80\xcb\xe4\x6d\x00\xc0\x05\x00\x97\xe9\x00\x5c\x3c\xb3\x0c\x12\x02\x74\x0b\xd0\x2d\x4b\x8c\x6e\x29\xbe\x85\x5a\xee\x57\x3b\x99\x4b\x86\x64\xb9\x36\xaf\x68\x88\xfc\x76\x17\x4e\x20\x36\xd4\xdf\x8a\x1f\x90\x14\xc7\x6c\xa9\x01\x90\xef\xf7\xa2\xe7\xbc\xec\xc3\xd7\x7a\x98\xdb\x36\x39\x0e\xe6\x54\x1e\xef\x1b\x11\xfb\x73\xe1\x04\xb9\x93\xb9\xe2\xf7\x49\x7d\xe3\x49\xc9\x92\x40\xce\x42\x2f\x0c\x43\x31\xc3\xf8\xca\x43\xdb\x31\x16\xff\x74\x69\x64\xa8\x88\xa3\x5d\x29\x9e\x76\x45\xb1\xa4\xc3\xfe\x67\x68\x87\x49\x1c\x28\x69\x12\xf7\x3c\x1f\xc8\xcd\xc6\x30\x6e\x66\x4c\x69\x89\xd3\xde\x16\x03\x6a\x39\xfb\xf4\x5b\x2a\x9c\x53\x56\x4b\x36\x17\x4f\xc7\xb5\xa8\x2b\xf3\xe8\x9b\x5c\x8a\xdd\x42\xd8\x3f\xbc\x09\xf1\x09\x44\xd9\x4e\x2a\x4d\x00\xd4\xb0\x3f\xda\xe5\xb7\x79\x8d\xa4\xbe\xe9\xd9\xee\x62\x7a\x8a\x0f\xa5\x0f\xe2\xf1\xc5\xb1\xa4\x9a\x55\x36\x98\xfa\xea\x96\xf9\xf4\x8f\xca\x50\x5d\x54\xff\x9c\x6b\x96\x87\xde\x3f\x99\xc4\xd9\x6c\xff\xc4\xc6\xca\x1c\x66\x9b\x4a\x09\x5c\x10\x62\xeb\x86\xc6\xda\x5e\x23\x6b\x69\x39\x8a\x19\xa0\x96\x2f\x0a\xcf\xa5\x4f\x16\xaf\xdb\xa6\xce\x1f\x9b\xc7\x5c\x5b\x25\xf6\xd8\xec\xfb\x63\x3d\xb8\x63\xb3\xef\xa7\xf5\x66\x8e\xcd\xbe\xff\x36\x81\x37\x36\xe7\x5e\x5c\x1b\xd6\xd8\xec\xfb\x6d\xcd\x38\x63\x73\xeb\xb0\x35\x65\x8c\x29\x3f\xe4\x41\xf7\xe0\xb0\x01\x6e\xec\x3c\x29\x0c\xf0\x18\xc0\x63\xcb\x09\x1e\xdb\x16\x81\x52\xe7\x57\x17\xb7\x22\x3f\xda\xb0\x69\x44\xad\x98\x54\xc3\x87\x90\x69\x0f\xd4\xf7\x31\x2d\x8b\x86\x61\x4a\x15\x20\x03\xd3\x1f\xe3\x93\xc8\x9b\xf9\xbd\xd3\xeb\x75\x10\xd1\x40\x44\x03\x11\x0d\x44\xb4\xec\x05\x10\xd1\x40\x44\x6b\x20\x10\x40\x44\x03\x11\x6d\xb4\x3e\x02\x11\x0d\x44\x34\x10\xd1\x40\x44\x03\x11\x0d\x44\x34\x10\xd1\x94\x46\x01\x11\x0d\x44\x34\x10\xd1\x40\x44\x23\x20\xa2\x81\x88\x06\x22\x5a\x52\x09\x88\x68\x20\xa2\x81\x88\x06\x22\x1a\x88\x68\xc9\x1f\x88\x68\x20\xa2\x95\xbe\x30\x88\x68\xea\x0f\x44\x34\x10\xd1\x40\x44\xab\xfd\x00\x20\xa2\x81\x88\x06\x22\x1a\x88\x68\x20\xa2\x81\x88\x06\x22\x5a\x59\x9b\x40\x44\x03\x11\x0d\x44\x34\x10\xd1\x40\x44\x03\x11\x0d\x44\x34\x10\xd1\xb2\x7f\x20\xa2\xe9\x7f\x20\xa2\x81\x88\x06\x22\x1a\x88\x68\x04\x44\x34\x10\xd1\xb4\xf7\x01\x11\x0d\xcc\x18\xf0\x87\x40\x40\x5b\x02\x02\x1a\xe8\x31\x60\x39\x2e\x92\xe5\x08\xfa\x0e\xe8\x3b\x8b\xa3\xef\x80\x31\x06\xe2\x2a\x18\x99\x60\xac\x16\xfb\x67\x9e\x8c\x55\x70\x1f\x41\x44\xdb\x64\x22\x9a\xe8\xa2\x22\x16\xad\xd3\xdd\x97\x0c\xb4\x51\xa1\xfe\xdb\xe4\xca\xb3\xdc\xa1\x4d\x89\x19\xaf\x02\x02\xe6\xd2\x24\x94\x4b\xdb\x76\x4d\x33\xa7\x76\x44\xbe\x96\x67\x93\x27\xc7\xb3\x89\x13\xa5\x3c\x82\xb4\x70\x16\x05\x54\x46\x25\x68\x9e\x9a\xaf\xbe\x2f\xf8\x65\x2b\xc6\x2f\x03\x26\x0c\x98\x30\x60\xc2\x80\x09\x5b\x18\x26\x0c\x34\x30\xd0\xc0\xd6\x9d\x06\xd6\xd2\x88\x6a\x09\x39\xd2\x82\xee\x66\xc1\x38\x52\x55\xb7\x02\x1d\x65\xe2\x00\xe7\x81\x3b\x5a\x55\xe8\x5a\xb5\xd9\x3c\x82\xbc\x96\x8e\xb4\x34\x32\x76\x62\x00\x5b\xd3\x4a\x27\xe3\xb0\xb5\x7a\xca\xaa\xe0\xd8\xea\xd6\x3f\x2b\xc9\x64\xd3\xfa\x53\x29\xa0\xe6\xdd\x39\x5b\x79\x07\xa8\x9b\x97\x80\xd3\x89\xea\x67\xf2\x7a\xd0\xe9\x76\xba\xfc\xf7\x58\xc0\xd9\xcc\x0a\x8b\xda\x6f\x97\x17\xdc\x0d\xa8\x4b\xcd\x90\x86\xdb\xe9\x6d\x79\x24\x8c\xf0\x38\xc8\x14\xb9\x67\xe6\xba\xec\x1b\x5f\xca\x59\x6c\xe0\x33\x8f\x7a\x51\xec\x34\xe1\x5d\xb4\x4d\x48\x1c\x5e\xc1\xdb\x79\x9a\xd6\x99\xfc\x6e\x79\x4e\xf6\xe7\x8c\xc4\x3d\x7d\xdd\xeb\xbc\xe7\x97\x92\xa1\xb7\x62\xf8\x39\x60\xe4\x26\xc3\xc8\x6d\x02\xae\x6d\x6f\x4a\xb8\xb6\x86\x60\xbd\xb4\x16\x85\x51\x8b\xe9\x7a\x3b\x45\xb8\x9e\x4e\x08\x21\xcb\xc7\x81\xab\xc0\xbc\x35\x84\xbc\x01\xf1\x36\x53\xc4\x5b\xfc\xcf\x4d\x84\xae\x8d\x24\xa9\x25\x3a\x71\x04\x4f\x4d\xd9\x57\x0b\xc2\xaa\xa5\xdb\x35\xa3\xed\xd8\x3a\x8d\x08\xc2\x1a\x08\x6b\x4b\x46\x58\x8b\x43\x0d\xb5\xfe\xe3\x33\xe5\xac\xf8\xb3\xcc\x9d\x74\x02\x6a\x5f\x88\x77\xbe\x4b\x5e\xeb\xaa\xe7\xb1\xe4\x67\x49\xf0\xe2\xd3\x26\x2b\xca\x75\xca\xda\x3d\x0d\x06\xc5\x0c\x4c\x43\x0e\xf4\xcb\xef\x7e\x40\xc3\x30\xf7\x51\xd3\x42\x22\xbb\x84\x4f\xc2\x4e\x1e\x03\x57\x2c\xad\xd3\xc3\xae\x59\x74\x55\x20\xc2\x90\x38\x29\xa6\xec\x59\xf2\x79\xdf\x1c\xcf\x66\xdf\x92\xca\x01\x97\x03\x5c\x2e\x2e\x05\xb8\x5c\x25\x5c\x6e\x5c\x5a\x5c\xaa\xe8\x01\x8d\x03\x34\xae\x58\x6a\xb3\xa0\x71\xa0\xad\x95\x55\x97\xcb\x75\xab\x47\x76\x95\xac\x30\x00\xee\xca\xb6\x06\xe0\xae\x76\x4f\x03\xb8\x0b\xe0\x2e\x80\xbb\x96\x00\xdc\xd5\x1c\xdb\x05\x68\x17\xa0\x5d\xab\x02\xed\xba\xf4\xca\x5f\x33\x8c\x6c\x36\x8c\x9a\x3e\x12\xd4\xae\x71\x58\x56\xf1\xad\x85\xcb\x33\x40\x59\x81\xdc\x15\xff\x81\xdc\xb5\x22\xe4\x2e\xc0\xb6\xc4\x1f\x60\x5b\x13\xb6\x01\xb0\x2d\xc0\xb6\xa6\x03\xdb\x4a\xdc\x3b\x40\x6e\x01\xb9\xb5\x5a\xc8\xad\x92\xd0\xf7\xf4\x00\xdf\x7c\x34\xe5\x38\xe1\x06\x5a\x10\xc6\xb9\xca\x00\x71\x5d\xb9\x17\x51\x91\x5e\x1a\xbb\x23\xb8\x76\x96\x11\x94\x62\x3b\x46\x73\x75\xa6\xa9\x5d\x64\x20\x67\xdd\xb2\x80\xa4\x36\x87\xc7\x02\x16\xd7\x18\x2c\xae\xf9\xf4\xdd\x6a\xe5\xf2\xcf\xa7\x4f\xd6\x83\xb1\x32\x9f\xbe\x5a\x6f\x1a\xd7\x7c\xfa\x70\x13\x88\x52\x0b\xe8\xc9\xb5\xa1\x4a\xcd\xa7\xef\xd6\x8c\x62\x32\xd7\x4e\x5b\x5d\x92\x49\x01\x62\x72\x2c\x09\x26\x0d\x8f\xa0\x56\x49\xf7\x99\x43\xa8\x57\x27\xc9\xe7\xcd\xef\x9b\xbc\x91\xb6\xdc\x35\x91\x9b\x9a\x11\xff\xf5\x51\x45\xca\x3d\xca\xca\xf5\xed\x96\x75\x49\x0e\x42\x6a\xd0\x0c\x53\x83\xba\x48\x0d\x9a\x6e\x6a\x50\xe3\xe4\xa0\x79\xa4\x07\x95\x3c\xf2\xe5\x24\x7c\x34\x87\x51\xff\x31\x62\x2f\xd4\x8b\xdf\xf9\xee\xf2\xf6\xeb\xd5\xf9\xe5\xd9\xf9\xf9\xe7\x2f\xd7\xf7\x8f\xf7\x9f\xff\xbc\xbc\xe6\xef\x5c\xd7\x90\xda\xfc\x22\x64\x17\xad\x68\x76\x11\x9c\x4e\x70\x3a\xc1\xe9\x04\xa7\x13\x9c\x4e\x70\x3a\xc1\xe9\x04\xa7\x13\x9c\x4e\x70\x3a\x6d\xac\xd3\x69\x54\xb2\xe2\x28\x53\x59\x72\xba\x84\x99\xbc\x22\x2c\xdd\x06\x9c\x37\xb0\x74\x8b\x0f\x01\x4b\x37\xf9\x52\x60\xe9\x16\xbe\x25\x58\xba\xb9\x36\x83\xa5\x0b\x96\x2e\x58\xba\x60\xe9\xae\x18\x4b\x77\x05\x21\xaf\xe3\xf0\x5d\x5b\xa8\x9d\x69\x98\x5a\x93\x11\x5d\x27\x36\x76\x96\x0a\xe5\x3a\xe2\x73\xad\x00\xbf\x75\xda\x60\xe5\xe6\x3d\xb7\xfa\xe8\xea\x45\xe0\x5c\x1b\xc6\x4f\x08\x45\x94\x89\x9e\xa8\x02\xcf\xf1\x99\x51\x8f\x9c\x5b\x10\x6b\xce\xf4\xfd\xb0\x7a\x85\x0b\xc0\x5c\xdc\x3e\x00\xe6\x00\x98\xd3\x6e\x05\x60\x6e\x69\x00\x73\xf7\xf2\x77\x2a\xc3\x88\x24\xe0\x81\x84\x2c\x1e\xe9\x09\x65\x22\x1e\x5b\xc2\x3f\x63\x46\x32\x39\xc5\x19\xd0\x0a\x7a\xdb\x06\x50\xe7\x92\xe7\xca\x70\x1f\x83\x6b\xfc\xfc\x8c\x63\x5e\x14\x30\xd7\x77\xcd\x3c\xaf\x20\xad\xf4\x61\x4b\x55\x9b\xb9\x1e\xb7\xe8\x61\x4b\xeb\xcb\xad\x16\x8f\xa6\x91\x65\x8f\xff\xc8\xb8\x1b\xb4\x81\x05\xc4\xde\x44\x88\xbd\x58\xfe\x9f\xbb\x66\x18\x5e\x6b\xd6\x93\x30\x83\x8c\x78\xb4\xc7\xc5\xc7\x25\xf2\x01\xc5\x07\x14\x1f\x50\x7c\x40\xf1\x95\x56\x57\xc8\x81\xdd\x26\x67\xb6\xcd\x95\xed\xef\x2e\xfd\x4e\xbe\x8a\x17\x20\x17\x81\xc3\x4d\x4c\x61\x98\xca\x89\xc6\x4b\xf8\x34\xe0\x82\x8f\x7c\xf1\x9c\xef\xe4\x82\x0d\x4c\xc7\x23\x77\xcc\x7a\xa1\x62\xfb\xd0\x74\x5d\xf6\x8d\x5c\x38\x2f\x7c\x75\x95\x91\x3c\x22\xfc\x3d\x0e\xfd\xa6\xd2\xfe\x96\x94\x24\x26\x9f\x42\x89\xdc\x7a\x26\x77\x6f\x9e\x45\xce\x6e\xca\x52\x82\x9f\x5d\xfa\xfd\x95\xb9\x86\x2d\x9a\x56\x2e\x86\xf8\x2b\x7c\x65\x45\xa4\x44\x4d\x5e\x7d\x59\xe5\x46\x11\x94\x52\xe8\xee\x6c\x33\xea\x89\x86\x99\xa5\x2b\x58\x86\xd9\xd6\x80\x65\xd8\xee\x69\x60\x19\x82\x65\xb8\x74\x2c\xc3\x19\x70\xfd\x00\xe7\x03\x9c\x0f\x70\x3e\xc0\xf9\xf4\xdb\x00\xe7\x4b\xfe\x00\xe7\x5b\x7d\x38\x1f\xd1\x64\x84\x34\xe8\xc3\x37\xcf\xca\xdf\x5e\xf6\xe6\xdc\xdc\x32\x7b\xd4\x8b\x6a\x9c\x42\x20\xfd\x81\xf4\x07\xd2\x1f\x48\x7f\x0b\x23\xfd\x79\x66\x19\x4d\x0e\x8c\x3f\x30\xfe\x96\x98\xf1\x57\x7c\x0b\x15\x3f\x5a\xed\xfc\x2c\x19\x92\xe5\xda\xbc\xa2\x21\xf2\xdb\x5d\x38\x81\xd8\xe9\x7d\x2b\x7e\x40\x52\x1c\xb3\xa5\x06\x40\xbe\xdf\x8b\x1e\xdd\xb2\x0f\x5f\xeb\xf9\x6c\xdb\xe4\x98\xd7\xa0\x3c\xb1\x37\x22\x1e\xe7\xc2\x09\x72\x9c\x86\xf8\x7d\x52\x9f\x6d\x52\x32\xe1\x34\xb8\x21\xad\xb8\x6b\x77\x18\x8a\x19\x46\xbf\x53\x4b\xdb\xc8\x13\xff\x74\x69\x64\xa8\x28\xa0\x5d\x29\x9e\x76\x45\xb1\xa4\xc3\xfe\x67\x68\x87\x09\x09\x82\xfc\xfc\x59\x9a\xb2\x34\x5d\xac\x63\x81\x31\xf3\x0e\x8c\x19\x30\x66\xc0\x98\x01\x63\x06\x8c\x99\xb2\x27\x83\x31\xa3\x5f\x02\x63\x06\x8c\x19\x30\x66\xc0\x98\x01\x63\x06\x8c\x19\x30\x66\xc0\x98\x01\x63\x06\x8c\x19\x30\x66\xc0\x98\x01\x63\x06\x8c\x19\x30\x66\xc0\x98\x01\x63\xa6\xe4\x25\xc0\x98\x49\xaf\x81\x31\x33\x82\x31\x23\xde\x8d\xb7\x55\xa5\xbe\x56\xce\x11\xc0\x67\x00\x9f\x01\x7c\x06\xf0\x19\xc0\x67\x00\x9f\x01\x7c\x66\xe9\xfa\x16\xf0\x19\xc0\x67\x00\x9f\x01\x7c\x06\xf0\x19\xc0\x67\x00\x9f\x01\x7c\x06\xf0\x19\xc0\x67\x00\x9f\x01\x7c\x06\xf0\x19\xc0\x67\x00\x9f\x01\x7c\xa6\xd8\xf5\x80\xcf\xb4\x7b\x1a\xe0\x33\x80\xcf\x00\x3e\x03\xf8\x0c\xe0\x33\x65\x0f\x06\x7c\x26\xe3\x9d\x03\x7c\x06\xf0\x19\xc0\x67\x00\x9f\x01\x7c\x46\xfe\x01\x3e\x33\xb2\x0d\x80\xcf\x00\x3e\x03\xf8\x0c\xe0\x33\xe2\x0f\xf0\x19\xc0\x67\x00\x9f\x99\x3e\x7c\xc6\x48\x0d\x11\xc9\xa1\xd9\x96\x84\x98\x7b\x15\x05\xf3\xb5\xdb\x7d\x77\x93\x14\x69\x98\x49\x34\xbb\x17\x68\x91\xa8\x34\x9b\xe4\x21\xe4\x0d\x21\x6f\x08\x79\x43\xc8\x1b\x42\xde\x10\xf2\x86\x90\x37\x84\xbc\x21\xe4\x0d\x21\x6f\xa8\x4c\x1f\x21\x6f\x68\x0e\x79\x43\x72\x1d\xb3\x52\xd9\x43\x33\xcd\xf8\x11\x4e\x90\x78\x99\x32\x83\x94\x9f\xf5\xc9\xf6\x01\x46\x75\x65\x31\xaa\x0f\x8b\x03\xa9\xa6\xe1\x5d\xfc\xce\x4f\xf7\x5f\xf8\x13\x86\x21\x6d\x8c\x0d\x7d\xa5\x51\xff\x71\x10\x0d\xd5\xeb\x09\x62\x28\xaf\x3e\x8f\x0c\x4d\x3d\x4e\xfa\x1d\xdd\xc3\xa3\xbd\x5c\xe9\x07\x00\x5e\x5b\x02\x5e\xf5\x02\x4b\xc5\x61\x55\x20\xd9\xc7\xc7\xf3\xeb\xab\xc7\x4f\xf7\x5f\x1e\x1f\x57\x10\xd4\x5a\x57\x4f\x2d\x67\x75\x1d\x48\xab\x4d\x5a\xf2\x64\x7a\xf6\x37\xc7\x8e\xfa\x85\xb6\x94\x3c\x50\x2b\x0c\xae\xab\xfa\x1f\xa4\xf3\x22\x9d\x17\xe9\xbc\xab\x98\xce\x5b\x9a\x6e\x4a\x48\x3e\x53\xf6\x94\xb8\x8e\x37\xfc\x1e\x17\x58\xf9\x9c\xd6\x4f\xe6\x0b\x25\x21\x37\x1a\xa5\xac\x11\xdd\x1b\x77\xa6\x88\x9d\xe7\x96\x99\x58\xc7\x64\xf6\xa6\x37\x2a\x7d\x15\x19\x9d\xc8\xe8\x44\x46\x27\x32\x3a\x57\x24\xa3\x93\x7f\x36\xbe\xae\x57\x92\xea\xd5\x0c\x1c\x6e\x7b\x54\x7f\xa2\x4f\xf7\x5f\x16\xf8\x5d\x62\x27\x42\xfe\x35\x90\x98\x5a\x56\x5d\x49\xe0\xd6\xb8\xb1\xbc\x48\x69\x9d\x42\x4a\xeb\xf8\x1f\x00\xc9\xb0\x48\x86\x45\x32\x2c\x92\x61\x37\x35\x19\x56\xda\x98\xf1\x46\xcb\xd5\xcd\xeb\x21\xf1\x19\x73\xb5\x58\xe2\x34\x7c\x44\x6c\x57\x30\x8f\x12\x2a\x16\x66\x1d\x72\xc3\x6c\x11\xbb\xa7\xbc\xff\xf9\x9a\xd5\xde\x8e\xb0\x15\xc4\x66\x81\x58\x61\x77\xc8\x79\xdf\xf4\x64\x66\x23\xff\x51\x34\x4d\x85\x38\xe8\x9b\x65\xb2\xd6\xbe\xf9\x5a\xa8\xd7\x63\x6a\x05\xd9\x91\x2b\x91\xb0\xcf\x86\xae\x4d\x9e\xf9\x37\x91\x7b\x37\xc4\x30\x94\x07\xcd\xb0\x1c\x3b\x6f\x98\x6c\xb7\x48\x01\xde\x6e\x9e\x04\xac\xe5\x8c\xf2\x45\x42\x9c\xbe\x19\x32\xe1\xbf\xb0\x22\x97\xff\x14\x0a\xb7\x5f\x55\xa2\x2c\xf2\x87\x6b\x27\x11\xf2\x87\x49\xfd\x5c\x4e\xbf\xba\xf6\x8e\x0f\x5b\x8e\xf7\xcc\xea\xf3\x7d\x91\x3e\x2c\xfe\xea\xd2\x87\xe9\x77\xcd\x51\x99\xd4\xa2\x7c\x0c\xf9\xdf\x0d\x22\xd2\x03\x2b\x0c\x36\x59\xc2\x10\x43\xc3\xe0\xcf\xcc\xbd\x27\x52\x87\x93\x3f\xa4\x0e\x23\x75\x18\xa9\xc3\x48\x1d\x46\xea\x70\x7d\x4b\x91\x3a\x8c\xd4\x61\xa4\x0e\x23\x75\x18\xa9\xc3\x48\x1d\xae\x4b\x1d\x5e\xf8\x61\xd7\xea\x73\xac\xff\x59\xd7\x33\x3e\xad\x39\x4e\x7b\x5b\xcc\x81\xcd\x67\x9f\x7e\x4b\x85\x73\x7a\x66\x73\x36\x17\x4f\x3f\xb6\x59\x5d\x99\x47\xdf\xe4\x52\xec\x16\x72\x06\x38\x6f\x42\x7c\x08\x41\xb6\x93\x4a\x13\x00\xb5\xe3\xbf\xb5\xcb\x6f\xf3\x1a\x49\x7d\xd3\xb3\xdd\xc5\xf4\x14\x1f\x4a\x1f\xc4\xe3\x8b\x63\x49\x35\xab\x6c\x30\xf5\xd5\x2d\xf3\xe9\x1f\x95\xa1\xba\xa8\xfe\x39\xd7\x2c\x0f\xbd\x7f\x32\x89\xb3\xd9\xfe\x89\x8d\x95\x39\xcc\x36\x95\x12\xb8\xa0\xa3\xf6\x6f\x68\xac\xed\xb5\x13\xf6\xb5\x1c\xc5\xcc\xc1\xfa\xbe\x28\x3c\x97\x3e\x59\xbc\x6e\xfb\xed\x8f\x9b\x1a\xcd\x56\x91\xe4\x99\xe9\xae\x05\x68\x35\x91\x58\xbc\x98\x79\x76\xc3\x98\x9b\x9f\x63\x5a\x9e\xb3\x3e\xbf\x7c\x51\x74\xf6\xfd\x91\xc9\x21\x5f\x44\xaf\x7c\x60\x61\x74\xa9\x1a\x90\xed\x9b\x92\xf4\xf6\xb4\x87\xf4\x8b\xf3\xe8\xa7\x92\x14\xf3\x45\xf4\x96\xaa\xeb\x2a\x6d\x46\xb6\xcf\x2a\x33\xe1\xd3\x9e\x2b\x16\x99\x47\xff\x95\x02\x13\x16\x7e\x62\x7e\xd9\xd1\xef\x35\x68\x87\x8a\x83\xf3\xe3\x63\xe0\xe7\xdc\x8b\x6d\x0e\x82\x9f\x59\x0f\x16\xce\x82\xaf\x40\x5f\x54\x74\x9d\x38\x17\x7e\xf6\xfd\x36\xe6\xb8\x9b\xcd\xf1\xf9\x65\x83\x6e\xc4\x70\x9b\xfb\x40\x1b\x63\x88\xcd\xa6\xb3\x0a\xe3\xab\x66\x64\xe9\x63\xaa\x96\x31\xa6\xfc\x90\x07\xdd\x83\xc3\x06\xb8\xb1\xf3\xa4\x30\xc0\x63\x00\x8f\x2d\x27\x78\x6c\x5b\x04\x4a\x9d\x5f\x5d\xdc\x8a\xfc\x68\xc3\xa6\x11\xb5\x62\x52\x0d\x1f\x42\xa6\x3d\x50\xdf\xc7\xb4\x2c\x1a\x86\x29\x55\x80\x0c\x4c\x7f\x8c\x4f\x22\x6f\xe6\xf7\x4e\xaf\xd7\x41\x44\x03\x11\x0d\x44\x34\x10\xd1\xb2\x17\x40\x44\x03\x11\xad\x81\x40\x00\x11\x0d\x44\xb4\xd1\xfa\x08\x44\x34\x10\xd1\x40\x44\x03\x11\x0d\x44\x34\x10\xd1\x40\x44\x53\x1a\x05\x44\x34\x10\xd1\x40\x44\x03\x11\x8d\x80\x88\x06\x22\x1a\x88\x68\x49\x25\x20\xa2\x81\x88\x06\x22\x1a\x88\x68\x20\xa2\x25\x7f\x20\xa2\x81\x88\x56\xfa\xc2\x20\xa2\xa9\x3f\x10\xd1\x40\x44\x03\x11\xad\xf6\x03\x80\x88\x06\x22\x1a\x88\x68\x20\xa2\x81\x88\x06\x22\x1a\x88\x68\x65\x6d\x02\x11\x0d\x44\x34\x10\xd1\x40\x44\x03\x11\x0d\x44\x34\x10\xd1\x40\x44\xcb\xfe\x81\x88\xa6\xff\x81\x88\x06\x22\x1a\x88\x68\x20\xa2\x11\x10\xd1\x40\x44\xd3\xde\x07\x44\x34\x30\x63\xc0\x1f\x02\x01\x6d\x09\x08\x68\xa0\xc7\x80\xe5\xb8\x48\x96\x23\xe8\x3b\xa0\xef\x2c\x8e\xbe\x03\xc6\x18\x88\xab\x60\x64\x82\xb1\x5a\xec\x9f\x79\x32\x56\xc1\x7d\x04\x11\x0d\x44\xb4\x94\x88\x76\x22\xd1\x67\xa3\x22\xfc\x13\x0c\xc8\x2d\x13\x93\x78\x02\xb4\x83\xea\xfc\x46\x70\xb1\x76\xc4\x84\x66\x04\x30\x32\x35\x44\xc3\x48\x56\x50\x8a\x51\x99\x2e\xa7\xa2\xf6\x15\x48\x16\x53\xd4\xea\xc9\x75\x74\xb3\xa9\x20\xd4\x66\x0c\xde\xa8\xe9\x9f\xa1\x96\xa9\x56\xfb\xc9\x67\x00\xde\x1a\x67\xe4\xad\x01\x20\x6a\x04\x0c\xaa\xf2\xc2\x38\x70\xa7\x8a\x25\xcf\x28\x4e\x4e\xfb\x01\xa3\xb4\x8c\x4e\xd5\x09\xa4\x4c\x5c\x66\x9e\x4e\xb5\xd0\x1d\x01\xd5\x49\xdf\x3f\x0d\x7a\x9a\x98\xad\xd3\xb4\xd2\xc9\x10\x3b\xad\x9e\xd2\x98\xb4\xb3\x70\xd6\x4e\x9d\xfe\x5c\x35\xe0\x4e\x59\x9f\x4a\x69\xd7\xa2\x4b\x5b\x76\x1c\xa8\x3d\x0f\x2d\xa9\x3d\x09\x19\x97\xa8\x7e\x26\xaf\x07\x9d\x6e\xa7\xcb\x7f\x8f\xc5\x9c\xcd\xac\xb0\xa8\xaf\x76\x79\xc1\xdd\x80\xba\xd4\x0c\x69\xb8\x9d\xde\x96\xcf\xf9\xb7\xdc\xa1\x4d\x65\x0e\xc4\x33\x73\x5d\xf6\xcd\xf1\x7a\xc4\x62\x03\x9f\x79\xd4\x8b\x62\xab\x98\x77\xd1\x36\x21\xf1\xfe\x19\x6f\xe7\x69\x5a\x67\xf2\xbb\xe5\x39\xd9\x9f\x33\x72\xf7\xf4\x75\xaf\xf3\x9e\x5f\x4a\xb6\xe5\x72\x7c\x21\xcb\xf4\xc8\x13\x5d\x6e\xc6\x10\x58\x41\x93\xb1\x82\xc6\x63\xf2\x3c\xcc\x03\xa5\xb3\xb7\xee\x28\x9d\x0a\x52\x4e\x43\x4e\xce\x94\x29\x39\x05\x46\x4e\xe1\x71\x2f\x27\xe1\x23\x97\xa2\x8f\x11\x7b\xa1\x5e\xfc\xae\x77\x97\xb7\x5f\xaf\xce\x2f\xcf\xce\xcf\x3f\x7f\xb9\xbe\x7f\xbc\xff\xfc\xe7\xe5\x35\x7f\xd7\xba\x46\xd4\x22\x76\xd4\x83\x7c\xe7\x31\x60\x4c\xbd\x5d\x2c\x5c\x33\x5d\xab\x9e\xfc\xf8\xe1\xf3\xdd\xfd\xe3\xe3\x69\xe9\xb5\x9b\xcf\xb7\xf7\x85\x9e\x5f\x07\x88\x4f\xfc\xcf\xb5\xc6\xea\xec\xe8\x37\x7c\xbd\xbe\x12\x95\x14\x4a\x7f\xbd\xbe\xfa\xf9\x33\x53\xf4\x86\x05\x51\x79\x59\x7e\x25\x0d\x74\xf9\xa9\x75\x5e\x62\x7f\xd5\x52\x78\x12\x75\x3b\x82\xc5\xa3\x4c\xb7\x05\x21\x79\x52\x57\xdf\x68\x33\xb9\x4e\xd1\x82\xce\x33\x0f\x3a\xcf\xc4\xc4\x9a\x38\x74\x43\xab\x93\x8f\x9e\xb3\xe2\xcf\x32\x17\xc5\x09\xa8\x7d\x21\xf8\x22\x77\x09\x5a\xe5\xaa\xe7\xb1\xe4\x67\x49\x44\xe1\x43\x29\x2b\x36\x75\x6a\xcd\x3d\x0d\x06\xc5\x8c\x16\x43\x7e\xfc\xcb\xef\x7e\x40\xc3\x30\xf7\xa2\x69\x21\x11\xad\xcb\x07\x66\x27\x8f\xd5\x29\x96\xd6\x69\x2c\xd7\x2c\xba\x2a\x64\xd8\x93\x38\xc8\xb8\xec\x59\xf2\x79\xdf\x1c\xcf\x66\xdf\x92\xca\x57\x06\xd6\x33\x92\x24\x53\x45\xf3\xb9\x97\xbf\x53\x99\xde\x28\x33\x15\x49\xc8\x62\xf3\x30\x49\x97\x8c\x07\x9f\x48\x13\x33\x23\x91\x52\x1a\x39\x03\x5a\x81\xca\xd9\x00\xc4\x4f\xf2\x5c\x69\xd6\x19\x7c\xa9\x9b\x9f\x92\xcc\x8b\x02\xe6\xfa\xae\x99\x4f\xba\x4b\x2b\x7d\xd8\x52\xd5\x66\xae\xc7\x2d\x7a\xd8\xd2\xfa\x72\xab\xc5\xa3\x69\x64\xd9\xe3\x3f\x32\xee\x86\xa4\xc0\x06\x91\x87\xea\x21\x0b\x25\x7a\x1d\xa8\x85\x6c\x6b\xa6\x80\x5a\xd8\x94\x14\xd8\x4b\xaf\xfc\x35\xc3\xc8\x66\xc3\xa8\xe9\x23\xc7\xca\x81\xdd\x40\x68\xc2\x12\x65\xbc\x2f\x3b\xbf\x21\xcd\x7a\xff\x7a\x4c\xc2\xa1\xcf\x57\x99\xbc\xb1\x22\x92\x73\x56\x89\xef\xf3\x25\x9c\xcc\x06\x51\xb1\x70\x14\xca\xf2\xb2\x14\xd6\x3f\xeb\x7e\x44\x2e\x7a\x7c\x6b\xe1\x72\x45\x2a\xfa\xba\xa5\xd6\xaf\x52\xee\xfc\xba\xa4\xb3\x8f\xe0\x5f\xa6\xee\xa7\xd5\xc7\x60\x8e\x01\xb4\x14\xbb\x6e\x20\x5a\x16\x1b\xbd\x70\x2a\xe5\x0a\x62\x15\x01\x7b\x10\x7f\x80\x3d\x4c\xd8\x06\xc0\x1e\x16\x0c\x7b\x90\x75\x07\xc3\x9c\x2c\xc9\x31\x20\xca\xee\x99\x8c\xdc\x40\x1a\xf0\x08\x0a\xcd\xa8\xe1\x0f\x54\x18\x05\xf5\x80\x88\xc4\xc1\x05\x4c\x04\x2b\xf4\xd0\x7a\xf0\x13\x6a\xa1\x13\xb9\x91\x3d\x92\x7f\x51\xac\x61\x8a\xd8\x8a\x79\xd3\x39\x44\xdc\x96\x3a\x9d\xd4\x75\xa5\x89\x5c\x91\xec\x10\xbb\x0c\xb8\xae\xd6\xa2\xfd\xa5\x1b\xd7\x10\x27\x68\x0e\xe4\x2c\x52\x1b\xc6\x33\xca\xb2\xd8\x88\x4c\xdf\x59\x77\xe2\x3a\x73\x1e\xe6\xd3\x77\xab\x95\x27\x36\x9f\x3e\x59\x6f\x7a\xc1\x7c\xfa\x70\x13\x32\xf0\xe7\xd3\x93\x6b\x96\xb9\xb8\x80\xe1\xb7\x36\xe8\x82\xf9\xf4\xdd\x7a\xe0\x0b\x4a\xfb\x2a\x3d\xcb\x38\x9f\x77\x30\x4e\xf4\x5c\x9c\x61\xca\x02\x6a\x7b\xa1\xf1\xda\xed\x74\x8f\x65\x92\xa9\x78\xb4\xc2\x77\xd5\xe4\x9a\x8e\xdf\x34\xf9\xc8\xba\xc6\x4d\x7a\xc2\x73\xee\xb9\xd9\x38\xc1\x4c\x78\xc7\x13\x63\x51\x18\x05\x32\x96\x55\x3e\xc7\x50\x5b\x56\xe1\x43\x3e\xe3\x22\x69\x79\x9c\x84\x95\xcf\x63\x4a\x73\x98\xb2\xfb\x3e\xb9\x04\xcb\x6c\x06\x67\x9a\x95\x95\x4f\x8e\x4d\x13\x9c\xd2\x4c\xaa\x24\x8b\xaa\xf9\xb3\x93\xfc\x2c\xbd\xbe\x5e\x29\x4e\x64\x2a\x27\x69\x17\x03\x09\xcb\xaa\xcd\x7c\x06\x73\x18\x31\x19\x72\x99\xdd\x80\x9b\xfe\x97\x9b\x6a\x6e\x50\xbe\xf6\x36\x39\x42\xa3\x67\x41\x01\x4d\x57\x3e\xe5\xb4\x34\x96\xf1\x66\x5b\x72\xc7\x39\x0b\xe8\xb3\xe3\xd2\x24\xa6\xba\x73\x7a\x74\xa0\x07\x46\xd3\x20\x60\x81\xe6\x51\xe9\x53\xd3\x8d\xb4\x60\xa1\x80\x9a\xb6\x16\x00\x97\x7e\x30\x92\x46\x61\x4b\x62\xe2\xcf\x9f\xe4\xc7\x0f\x01\x08\xbc\xa5\x5c\xa6\xd2\xf3\xab\x8b\xdb\x90\xfc\xfc\xf9\xe3\x47\xd9\x4f\x8a\x01\xf8\xe3\x87\x60\xb5\x1b\xa6\x6d\x07\x1d\x33\xf0\x4d\xe2\xf8\xc7\xe2\x1f\x0f\x5b\xaa\xa0\xe8\xaf\x6c\xfc\xbb\x08\x29\x74\x3c\xe1\x23\xce\xb8\xe3\x9e\x4d\xd7\x8d\xfa\x01\x1b\xf6\xfa\xa4\xbc\xd6\xa4\xb0\xe6\xc1\xf6\x03\x36\xa0\x51\x9f\x0e\x43\x72\xfa\xbe\x7b\x74\xf0\xe0\x3d\x44\x31\xed\xf0\x8b\x1f\x46\x01\x35\x07\xc2\x80\xa1\x01\x7f\x8d\x4c\xa8\xe5\x33\x0b\xbe\x99\x81\x4d\x3a\xe4\xc7\x0f\x15\xa0\xe9\x24\x01\x9a\x25\x37\xf3\x77\x72\x9e\xc9\xbf\x3b\xa2\xbf\x44\xf4\xe5\x8f\x1f\x1d\xfe\xff\xe2\xa4\xaf\xa8\x14\x91\x98\x3e\xe7\x61\x4b\x38\x66\xb8\x4c\x70\x5f\xc5\xb6\x93\x48\xaf\x89\xf4\xc1\x95\x78\x4b\x4c\xab\x4f\xc9\x81\xb6\x45\xea\x32\xe6\xeb\x9f\xd7\x65\xa6\xad\x5f\x35\xed\x27\xd3\x35\xbd\xd8\x21\x5b\x36\x50\x93\x13\x58\x55\x50\x78\x12\x74\x33\xee\x70\xad\x8a\xfb\x16\x85\xec\x78\x1d\x91\x15\x16\xb2\xf2\x87\x2d\x3e\xc2\x2f\xae\xef\x78\x17\xa4\x46\xc0\x4a\x04\x79\xb7\x89\x62\xd7\x7b\x62\xfc\xe0\xf0\x6c\x7f\x56\xc6\x87\x53\xcb\x62\x03\xbf\x13\xef\xc0\x94\x86\x89\xcb\xe8\x70\x9b\x59\x2f\x34\xd8\x55\x42\xba\x2c\x56\xbc\xfa\x00\xc6\xe4\xb0\x92\xe4\x0c\xc6\xd1\x16\x4a\xdc\xc0\x92\x28\xe5\x78\x94\x15\x67\x41\x79\xcc\x72\x12\xfa\x5a\x12\xef\xdb\x22\xe0\x75\x82\xa8\xdf\xf1\xc2\x9c\x2b\x8e\x8b\x2d\x0d\x6e\xcf\x9d\x19\x3b\x9b\x10\x72\x35\x94\x56\x33\x27\xa0\x2a\xee\x59\x26\xc5\x14\x6f\xab\xfe\x2e\x25\xf1\xbe\x46\x51\x02\xca\x3f\x6d\x5b\x55\x4a\xaf\x42\x08\x83\x28\x71\x33\x74\x5d\xb9\xc2\x3d\x25\x57\xcf\xd7\x2c\xba\x09\x68\x98\xe1\x02\x97\xc7\x22\xb9\xce\xc0\x29\x6c\x77\x0f\xe8\x80\x05\x6f\xa7\xa4\xfb\x6e\xef\x93\x93\xff\x1a\x25\x71\x4b\x22\x6a\xa9\xbb\x97\x8d\x5a\x4a\xab\xc9\xd6\x62\x06\xbd\x50\xee\xfe\x1a\x52\x1f\xed\xc4\x5a\x4a\xbd\xfb\x6e\x6c\x88\x64\xb7\x79\x2b\x76\xcf\xd2\x8e\xe3\x12\xc0\x90\xa5\xf4\x76\xe4\xf7\xc1\x0a\x3d\x5c\x1d\xa3\xe3\xb3\x20\xf7\xac\xe4\xcb\xdd\x88\x80\x23\xae\xfe\xd3\x6a\x64\x43\x72\x75\xfb\x01\x8b\x98\xc5\xdc\x53\xf2\xe5\xe2\xa6\x7d\x55\x46\x64\xf9\xe5\xd5\xdd\x9f\xd7\x55\x27\x4d\x93\x7c\x85\x03\x1a\x05\x8e\x55\xd1\xbe\x4c\x85\xd5\x31\x67\xe5\x21\x5a\x6a\xff\x23\x6f\x12\x92\x24\x36\xeb\x64\xef\x24\x17\x27\x16\x5a\x7d\xca\x1b\xf5\xe1\xfe\x3e\x13\xec\x58\x1a\x64\x76\x9c\xb9\x39\x72\x06\x94\x0d\xa3\xe4\xea\x91\x7e\x31\x1c\x5a\x16\x0d\x43\x2d\xfe\xac\x9b\x35\xfb\xf2\xe1\x69\x47\x59\x13\xb6\x22\x38\xad\xf6\xbd\x73\xa6\xaf\xf6\xda\xdd\x93\x6e\x93\xd7\xae\x0b\x61\x10\x27\x57\xde\xc4\x51\x0c\x97\xa1\x65\xca\x54\xf6\x92\x30\x2f\x3d\x5b\x33\xd7\x52\xd3\xce\x1f\xc3\x63\x90\xeb\xcb\xfb\xc7\xdf\xae\xae\x2f\xe2\x9c\xd4\xec\x75\x3b\x60\xf9\x9d\x33\x83\x37\xa6\x6c\xea\xdc\x32\x16\xfd\xee\xb8\x54\xad\x89\x32\x13\xc9\xf6\xc2\x58\x34\x5d\x48\xed\x1f\x5f\x29\xee\x0b\x8f\x9c\xce\x23\xf6\xf4\x8a\x93\x9b\x10\x27\xa2\x05\xd1\x1f\x27\xf0\xc4\xa2\x26\x27\xbd\xe5\x67\x4d\xaf\xd6\x2c\xc0\xd4\x12\xaf\xd4\x9e\xd5\x8d\xa8\x6a\x83\xb6\x68\x5a\xa5\x8b\x0c\x69\x3f\x05\x22\x49\x46\xcc\xe9\xad\xb2\x12\xa1\x15\x98\x7e\xed\xe2\xb9\x89\x99\x1c\x5b\x59\xca\x66\xca\x07\xc3\xb6\xb0\xa9\xb3\x36\x47\xe9\xc3\xd5\xc3\xae\x6e\x4e\xf5\xd5\xe1\xf5\xdd\x9d\x58\xfa\x48\xfd\x96\xca\x5f\x23\x2f\x5c\xfd\x8c\xd0\x2c\x08\x59\xa3\x4c\x82\x56\xdd\xa3\x04\x9f\x51\x26\x24\xfd\x9c\x34\xcd\xdd\x35\x9d\xf5\x8e\x61\x0e\x23\xc6\xa7\xb5\x34\x23\x5a\xa7\xbc\x96\xd4\x32\x5e\xfe\x6b\x69\x73\x26\x48\x30\x2d\xad\x2f\xb1\xfa\xa7\x60\xc3\x67\xaa\x2e\x9a\xf3\x13\x18\xc0\x1b\x6f\xa4\x96\x2d\x85\x6a\x57\x30\x55\x15\xd5\xaf\x5e\xc6\xb0\x91\xf3\xc3\x89\x94\x99\xc9\x67\xc3\x88\xdd\x89\x42\x05\x83\xb9\x75\x54\xbe\xb2\x70\x1f\xb6\xf6\xf7\x06\xf9\x90\x5d\xa2\x19\xba\x0f\x5b\x5d\x6e\xea\x6a\x25\xca\xce\xbf\x33\x48\x22\x69\xfd\x80\x71\x01\xe3\x30\xcf\x74\x0b\xb3\x24\x2e\x6d\x18\x89\x40\xf8\x35\x27\x0f\xf4\x42\x52\x31\x0e\x4c\xff\xd7\xaa\x69\x97\x96\x8d\xcc\xa0\x47\xa3\x5f\x53\xe9\x54\x66\x15\x0b\xea\x8b\x17\x0b\x6a\xe2\x84\x2a\xa0\xd4\xe5\x37\x4b\xb7\xf2\xff\x23\xce\xca\x1e\xb0\x80\x8a\x09\x19\xfe\xbf\xdc\x96\x17\xff\xba\xa1\xc1\x2d\xf5\x5d\xc7\x32\x1f\xb6\xe2\x03\x48\x6d\x26\xb2\x21\xb3\x51\xcb\x82\x6d\x23\x2b\x0e\x07\xa6\xeb\xca\x8a\x77\x54\x9e\xe9\xa8\x7a\xa4\xcb\xe6\xa3\xe3\x51\x33\x38\x4b\x5e\xf7\xc6\x0c\xcc\x41\x98\x8d\x3b\xe5\xaf\xad\x7c\x0f\x86\x2f\xae\xff\xfa\xe3\x61\xcb\x15\x77\x3e\x6c\x9d\xfe\xf8\x51\x59\x4b\xc1\xb3\xd3\xac\xc2\x92\x8e\x38\xed\xee\x9f\xec\x94\xbc\xd8\xe9\xe1\xce\xc3\xd6\xc0\xf1\x78\x89\x9d\x87\x2d\x5f\x9e\x29\x7f\xe7\x78\x3d\x97\xde\x30\xc7\x8b\x7e\x97\x36\xeb\xc3\xd6\xa9\x60\x6d\x14\x93\xb1\xe3\x06\xb9\xac\x17\xb1\x30\xb2\x69\x10\xfc\x9a\x8f\x75\xe5\xd7\x5f\x7f\xdd\x6f\x22\x77\x47\x9b\x3b\x0d\xb6\x78\x1a\x6a\x35\xf1\xac\x09\xa8\x79\xa5\x4d\xc8\xba\xe6\x33\x2d\x69\x05\x2e\x15\xac\x49\xb1\x81\x12\x5f\x93\xbb\x28\xfc\x77\x19\xc0\xcf\x47\xaa\xdc\x93\x91\x25\x1a\x56\x1a\xc8\x6f\xcf\x5f\x45\xa5\x6c\xbb\x34\x08\x77\x45\x23\x4b\x9e\xd5\xa3\xea\x51\x0a\x78\x58\xfe\xac\x74\x33\xf5\x61\x6b\xe7\x61\x8b\xdb\x22\x15\x8f\x4f\x93\x1f\x93\x67\xf2\xda\x55\xab\x42\x1a\x4d\xda\x94\x8a\xe7\x26\x42\xaa\xac\x43\x93\x9a\x15\x00\x92\x97\x28\x1f\x1d\xad\x79\x7c\x6d\x07\x89\xb6\x95\x23\x54\x6b\xc5\x66\x4e\xfd\x88\xaf\x1e\xf3\xfa\x3e\x54\xe3\x0d\xa6\x5c\xed\x8d\xf6\xaf\x52\x93\xa8\x64\xc7\xf7\x1d\x76\x7c\xb1\xe3\x8b\x1d\x5f\xec\xf8\xb6\xdc\xf1\xcd\xee\xaf\xba\xe6\x80\xda\x43\xeb\x85\x1c\x69\x05\x33\xd6\x36\x76\x85\xb1\x2b\xbc\x62\xbb\xc2\xb1\x21\xa4\x7c\xc7\xd8\x24\xc6\x26\x31\x36\x89\xb1\x49\x3c\x4f\xff\x9b\xd0\x51\x67\x5e\xe4\x4c\xff\x95\x0d\x39\xa5\x4b\xbe\x7a\xfc\xd7\xfc\x85\x95\x2c\xa8\x7f\xb3\x5a\x30\x1e\x5f\xfa\x25\x82\x24\x9b\x71\x4f\xc4\x6c\xf3\x99\xcb\x7a\x6f\x7f\x8a\xa7\x65\x3a\xb5\xcf\xc2\x48\x4f\xa1\xc5\xbe\x3a\xf6\xd5\xb1\xaf\x8e\x7d\x75\xec\xab\x63\x5f\x1d\xfb\xea\xd8\x57\xc7\xbe\x3a\xf6\xd5\x97\xce\xae\xc7\xbe\xba\xf6\x87\x7d\x75\xec\xab\xaf\xc2\xbe\x3a\xaf\x5a\xca\xe3\x5f\xeb\x25\x81\xd8\x75\xdf\x29\x15\x84\xbf\x66\xe4\x20\xc1\x8e\x3d\x76\xec\xb1\x63\x8f\x1d\xfb\x16\x3b\xf6\x27\x4b\xb3\x61\x5f\xb0\x4e\x5b\xad\x78\xc4\xa2\x99\x79\x03\xd3\x33\x7b\x34\xc8\x09\xca\x01\xb3\xe9\x29\xb9\xa5\x16\xf3\xac\xf2\x35\xe2\xc2\x82\x03\xda\xb5\x1b\xc1\x04\xab\x1b\x4c\xd0\xe0\x4b\x5f\x7a\xe1\x30\xa0\xa9\x71\x8d\xf8\x83\xb1\x85\x47\xcb\xbe\x9e\x5e\xc6\xfa\xb2\x07\x23\x0c\xd5\xee\xff\x43\xc6\xcf\xda\x38\x40\x81\x90\x28\x72\x33\x7b\xf7\x08\x59\x58\xe9\x90\x85\x11\x7a\xb5\x9d\x76\x42\x96\x3c\x02\x20\x46\x7b\x02\x11\x00\x81\x00\x08\x64\xc9\x63\x37\x1f\xbb\xf9\xd8\xcd\x8f\x2f\x8e\xbb\x9b\x3f\xf9\x7b\x63\x3b\x3f\x7e\x00\xb6\xf3\x97\x74\x3b\x7f\x86\x46\x38\xb6\xff\xb1\xfd\x8f\xed\xff\xd5\xb6\x6a\xb1\xfd\xaf\xfd\x61\xfb\x1f\xdb\xff\xf3\xd9\xfe\x5f\xaf\x9c\xf9\xda\xbd\x8d\x29\xda\x27\xd8\xe9\x9f\xc9\x4e\x3f\x36\xf8\xb1\xc1\x9f\x6e\xf0\xc7\x87\x17\xbd\x76\x3b\xdd\x23\xb9\xc3\xdf\x50\xda\x4c\x30\x33\x15\x63\xbf\xe4\x13\x24\x47\xfb\x55\x4d\xc6\x5f\xd2\xa1\xfc\x4b\xc9\x88\xfa\xc5\x67\x76\xbc\x4c\x8f\x0f\x56\xf8\x25\x37\xb0\x7e\x19\x86\x34\x7f\xaf\xd8\x2e\x12\xf7\x87\x7e\x27\x3e\x2c\x6a\xe8\xa5\xa7\xf7\xfd\x52\x18\xd5\xa9\x05\x93\x9e\x8a\x5c\xb4\x42\xd2\x2d\x72\x7d\x13\x5b\x5e\xe9\xd1\x68\xdc\x4a\x93\x8d\xf1\x62\xad\xf1\x76\xbb\xfc\x2f\xb5\xe5\x3e\xc1\x53\x76\xc3\xc8\x8c\x86\x15\x0f\xf3\xd5\x8e\xfe\x74\x66\x65\x93\x71\x31\xd5\x2d\xed\xa4\xda\x16\x7b\xd9\xda\xe9\x93\x8d\x89\x12\xad\xb4\x71\x83\x07\x24\xc6\x44\xe1\x49\xe9\xf4\xc8\x9f\x65\x71\x23\x8e\x22\x16\x33\x23\x3e\x8d\xa4\xe4\xe1\x55\xe3\xbf\xdc\x07\xd2\x68\x6f\x49\xb8\xc6\xa8\x7d\x13\xb0\x67\xc7\x8d\x67\x5a\x76\xab\xa9\x45\x6d\xea\x0e\xad\xb6\xf2\xca\x4c\xdf\x37\x83\x01\x0b\xd2\xda\x4a\x56\x88\xa5\x4d\x0b\x86\x5e\xe4\x0c\xe8\x18\xd5\x95\xb5\xad\x50\x5b\xb2\x8a\xd7\x8f\x06\x4d\x9c\x84\x59\x6f\x9b\x91\xba\xd2\xe2\x1f\x42\x6a\x05\xf1\x91\x28\x06\xa1\x03\x3f\x7a\xbb\x88\x8f\xca\x33\x92\x03\xe2\xc4\xe7\x92\x2f\xf7\x41\xfd\x94\xd6\xe9\x9b\x51\xff\x26\xa0\xcf\xce\xf7\xd3\xc4\xaf\x9f\x1c\x9e\xb7\x55\x53\x2a\x73\xfa\x6a\x55\xc1\x60\x98\x9c\xa8\x1a\x07\xf5\x94\xbb\x1f\x93\x77\x16\xc7\xf4\x05\xa1\x38\x7e\x59\x1c\x82\x22\x84\x4d\x30\xf4\xce\x42\x7e\x21\x8e\xc4\x19\xba\xdc\x3e\xe4\xbf\x9e\x79\x22\x2d\x2b\x1c\xfa\xbe\x4b\xb9\xd1\x62\xba\x19\xc9\x56\x2c\xfa\x1c\x4a\x49\x51\x75\x7d\x9b\x24\xbe\x5b\x92\x3a\x6f\x93\x5e\xac\x77\xec\xaa\x4f\x7b\x36\xba\xe4\x36\x39\xd7\x9c\xbf\xda\x47\xd2\x7f\xe6\x6a\xe8\xfa\xf2\xfe\xf1\xec\xe2\xd3\xd5\xb5\xd4\x3b\xf1\x13\xec\x7c\xc1\xff\x94\x1d\xac\x5c\x15\x01\xf3\xcb\xae\x6f\x8b\x93\x61\x72\x11\x5a\x62\xa4\x5c\x5d\x68\x8d\xe3\xbf\x5c\xdd\x9c\xe7\x7e\x51\xc7\xf0\xa4\xde\x62\x71\xa3\xe6\xc4\x1b\x38\xde\x29\x51\xfe\xf3\x81\xf9\xfd\x94\x1c\x1f\x1d\x1d\x1c\xc9\xe7\xde\x5d\x7e\x8c\xfd\x2f\x21\x15\xff\x54\x5f\x20\xb9\x24\x96\xa0\x5e\x48\x6d\xe2\x78\xe4\xdc\x34\xef\x6e\xf4\x4f\xf4\x4b\xfc\x8d\x7e\xc9\xea\x98\x74\x52\xe4\xa5\x6c\x95\x83\x37\x77\x48\x63\xc3\xb5\x4d\xe4\xd0\x40\xfa\x5f\x12\x29\xa0\xc9\xe7\xe4\x39\x96\xe7\x88\xa5\x7a\xe7\xbf\x42\xde\x0e\x15\x0f\x94\x44\xd9\x3c\x6c\x89\x3c\xe1\x2d\x3e\x3d\xac\xa7\x60\xef\x61\x6b\x27\xbd\x64\x79\xf1\x0b\x3c\x6c\x9d\x3e\x6c\xed\x75\x0e\x3a\xdd\x4c\x01\xdf\x1d\xf6\x1c\x6e\xb8\x73\x9b\x38\x59\x1d\x66\x42\x78\x1e\xb6\xa2\x37\x5f\x3d\x20\x99\x7a\x3b\xd9\x12\x36\x75\x69\x4f\x58\xd1\xa7\xd9\x9b\xf9\xc5\xbe\xe9\x04\xbe\xe3\x7d\xe2\x2f\xba\x25\x3f\xf5\x4e\xbe\x8c\x13\xaa\x8d\x81\x3f\xcc\x88\x7e\x33\xdf\xe2\x82\x7a\x39\x6d\x79\xfb\x73\xa7\x41\x63\x7d\x16\x44\x03\xd3\x2f\x34\x56\xdf\x22\x29\x6d\x30\xbf\xf1\x93\x0c\xa0\x0b\x47\x35\x24\xfe\xa7\x32\xf9\xc4\x7f\x7b\x34\xaa\xff\x62\x6a\xd8\xcb\x66\xa6\xce\xec\xf3\xab\x8b\xdb\x9f\x3f\x33\xdf\xe7\x37\x75\x9c\x75\xb6\x99\x0f\x5b\xf7\xc9\x5b\xfe\xf8\xd1\x51\x07\x52\xab\xb2\x1d\x7e\x2d\x53\x0d\xbf\xe1\xeb\xf5\x95\xa8\xa4\x50\xfa\xeb\xf5\xd5\xcf\x9f\x99\xa2\x7c\xfe\x95\x97\xe5\x57\x52\x2f\xc3\xcf\xe4\x95\x5b\x18\x0a\x17\x26\x1d\x30\x4f\x9c\xbb\x35\x62\x36\x4d\x30\x93\x12\x7f\x72\x6a\x82\xc5\x7a\xb1\xb5\x6f\x3a\x5f\x77\x79\xfd\x24\x1f\xcb\xb2\xa2\xde\xe0\x52\x47\x77\xb1\xb4\xee\x85\xbd\x66\x51\x2d\x04\xa1\xec\x92\x58\x3c\x38\x9e\xcd\xbe\x25\x95\x97\xa8\x03\xe9\xab\xd3\xa3\x4e\x46\x38\xea\x67\x13\xb4\x92\x73\xae\x95\xbb\xb9\xab\xbc\xd2\x93\x6c\x59\xe4\x8e\xa2\xcf\xb5\xa3\xc6\xdf\x5d\x7e\x90\x7d\xea\xf1\x2e\x38\xb8\x8b\x5e\x67\x83\x14\x4f\xb0\x4f\x2e\x8a\x10\x0e\xbd\x6c\x7a\xac\x7d\xe6\xc7\xfc\xe1\xf6\x5a\xdf\xcb\x68\xcc\xf8\x28\x7d\x2f\xa2\xc1\xb3\x69\x65\xda\x24\x6a\xe5\x3f\xfe\x9a\x0a\xa2\xd2\x82\x05\xe7\x67\xb9\xbb\xbe\x2e\x76\xe5\x61\x4b\x44\xaf\xe4\x3c\xf5\xa9\x97\xfe\x28\xe7\xa5\xaf\x88\x9b\x19\xab\xae\xba\x8d\xff\x52\x2b\x3e\x79\x5a\xf5\x56\xbf\xd8\xeb\x27\xff\x7c\xd8\x4a\x4c\xbd\x0c\x7e\x84\x7a\xaf\x25\x3b\xee\xf1\xc1\xfc\x7a\x55\x55\x27\xcb\x57\x9e\xc5\x5f\x75\x0e\x7f\xf5\xe3\xee\x6e\x72\xa7\xef\x4f\xed\x99\xb9\xb3\xff\x47\x04\x10\xe5\xce\xea\xae\x3c\xa0\x5e\x3b\x4b\xbc\xaa\x7c\xc5\x89\xe1\x23\xce\xf4\x6e\x74\xac\x7d\x5c\x87\x3a\x39\xdd\xc8\xb4\x42\xdb\xd3\xba\xbe\xaa\x9c\xe4\x7c\x5c\xec\x6a\xf7\x77\xc2\x7e\xcd\xe8\xd8\x26\xf7\x7d\x4a\xce\xaf\xaf\xe2\x33\x43\xd5\xaa\x51\x3f\xbe\x9d\x79\x84\x9a\x56\x9f\x54\x9c\x74\x7f\x7e\x7d\xf5\x78\x7d\x79\xff\xd7\xe7\xdb\x3f\x1f\xcf\x3f\x5f\xff\x7e\xf5\x47\x93\xcf\x9d\x2c\x4e\xff\xa4\x6f\x65\x5f\xbd\xda\xfe\xd6\xff\x84\x56\xcb\x98\xd0\xe5\xed\xe3\xed\x2a\x1f\xfd\x72\x46\xc7\xcf\x10\x01\xda\xd2\x07\xdf\x78\x64\xd5\x8c\x14\xae\xf5\x46\x0d\x17\x5e\xc6\x50\x67\xe1\xd7\xd6\xa3\x1d\x7d\x9f\x8c\x97\xea\x00\x9b\xc9\xcf\xa6\xcf\xbd\xd7\x58\xa7\xe8\x4f\x74\xce\x7d\xf5\xc7\x1f\xd5\x77\xf5\x6d\xd5\x3a\x92\x5f\x1f\x66\x82\xbe\x97\x2d\x50\x7c\x7f\xef\x7f\x69\x36\x4a\x89\xe7\xfd\x18\x9e\x77\x78\xde\xe1\x79\x5f\x69\xcf\xbb\x3c\xa8\x1b\x5e\x77\x78\xdd\xe1\x75\x87\xd7\x1d\x5e\x77\x78\xdd\xe1\x75\x87\xd7\x7d\x44\x28\xf9\x82\x5d\xed\x6d\x02\xc9\xb5\x86\xc0\x43\x0f\x0f\x7d\x52\x18\x1e\x7a\x12\xd7\x05\x0f\x3d\x3c\xf4\xf0\xd0\x6b\x15\xc3\x43\x2f\xff\xe0\xa1\x87\x87\x1e\x1e\xfa\x15\xf6\xd0\x9f\x4c\xe6\xa0\x9f\x4e\x7e\xc2\x0a\xba\x62\xa7\x9d\xbe\x33\x62\x97\x22\x15\xf0\xd8\x19\x50\xa9\x1e\xf9\x41\x39\x4d\x27\x8e\x3a\x3a\x45\x7d\xf1\x62\x46\xfb\x94\x1d\x39\x93\xf9\x71\x46\xba\x71\x1a\x79\x71\x0a\x3e\x91\x67\x16\x58\xf4\xcc\xb6\xf9\xb2\x50\xa1\x7c\x9b\x38\x71\x26\xf2\xe1\x34\x76\xe1\x8c\xf2\xe0\xc0\x81\xb3\x04\x61\x93\x6d\x67\x11\x42\x27\xf5\xbf\x65\x77\xcc\x2c\xa7\xff\xa5\x81\xa7\x64\x9a\xae\x91\xe9\xf3\xaf\x84\x97\xe0\xa0\x92\x67\x75\xb4\xb7\xf7\x29\x3f\x08\x2b\xa9\x58\x47\x55\xb5\x1c\x1f\x7e\xd2\xbb\x7a\xb4\xbb\x25\xb3\x3a\x2c\xb8\x7e\xb6\x76\x1e\xb6\x52\x27\x8f\xfc\xaf\xbc\x77\x47\x95\xa9\x71\xd9\xe8\xab\xcc\x98\x5b\x39\xe5\x36\xe4\x9f\x90\xf5\x0c\x35\xf5\xb5\x64\x95\x0b\xdc\x25\x70\x97\xc0\x5d\xb2\x11\xee\x92\xd2\x0d\x6c\x52\xe1\xf5\x57\x62\xb5\x47\x49\x6c\x2c\x2a\x5b\x8b\x3c\x6c\xbd\x76\x3b\xdd\x7d\xc1\x2e\x4e\x87\x62\x35\x82\xb3\x9a\x48\xd3\xec\xae\x1c\xfc\xa6\x84\x09\x3c\x82\xc7\xa3\x78\x0d\xbe\x6b\x7a\x0d\x60\x38\xf5\x0d\xae\x7d\x10\x8d\x2c\xbb\xdd\x03\xca\xde\x2d\x43\x55\xd2\x9e\x98\x7b\x98\xc7\x22\x23\x77\x12\xde\x38\xec\x1f\xf8\xd0\x36\xcb\x87\x36\xf3\x48\x3c\xe5\xa4\xe3\xbf\xa9\x13\x2a\xe2\x30\xda\x09\x01\x6e\x31\xd1\x6e\x42\x82\x5b\x69\x35\x63\xed\xbc\x57\x34\x68\x72\x70\x74\x15\xc4\x4d\x16\xc7\x22\xaf\xe5\xee\x7b\xa1\x29\xd3\x03\xb7\x95\xad\xd7\x2a\xbf\xe2\xea\x72\xde\xfe\x1c\x3e\x6d\x38\xe7\xad\xe6\xa3\x92\x4a\xd0\x5b\x1e\x04\x4f\x40\x7a\x5b\xc9\x83\xde\x1a\xc1\xe0\x26\x53\xac\x13\x2a\xb7\x59\xb1\xde\x66\x9f\xf9\x52\x47\xfc\x2a\xed\x94\x0d\xc1\xc1\xe1\xe0\xb7\x89\x46\x49\x4b\x30\x5c\xa5\x78\x9f\x0e\x19\xae\xa2\xfa\x96\x68\xb8\x69\xc9\x98\x65\x10\x2c\x53\x5a\x0b\x4c\xb2\x00\x98\xf1\x1b\x26\x36\xfb\x36\x89\xa7\x25\xb7\x3c\x23\x61\xcc\x3b\xcf\x0e\xb5\x49\x9f\x06\x54\x15\xe9\x76\xc8\x95\x47\x58\x60\xd3\x80\x44\x8c\x0c\xcc\x17\x4a\xc4\x51\x29\xe4\x93\x7c\x1c\xb1\x99\xb8\x3b\x88\x9f\x40\xa2\xbe\x13\x26\x55\x13\xa1\x2c\x69\x44\x83\x8e\xac\x70\xbf\x13\x03\xe3\xb9\x8d\xd1\x55\xbf\x1e\x74\xc8\x5f\x8e\xeb\x92\x27\x4a\xa2\xa1\x27\xf3\x0c\x02\x6a\xba\xe2\x58\x00\x2e\xe9\x2f\xae\xef\x88\x18\x84\xdc\x54\x74\x85\x59\x68\xf0\x01\xcb\x2d\x09\x27\x24\xd1\x30\xe0\x77\x31\x4f\xd4\x37\xb3\x03\x80\x2a\x17\xb6\x77\xc3\x80\x9b\xa4\x5d\xbe\xa4\x4d\x7e\xcc\xac\x76\xf7\x56\xe3\xf0\x1f\x65\xb3\x07\xa5\x59\x5d\xf1\x59\x3d\x86\x3c\xfe\x27\x7b\xe0\xcf\x72\x6e\x5c\x95\x2c\x4a\x7d\x66\x9f\x79\x91\x53\xba\x2e\xf5\x03\xfa\x4c\x83\xf1\x16\xa6\x06\xf9\x46\x9d\x5e\x3f\x12\xe7\xa6\xe4\xdc\x33\xcc\x8e\x1f\xc7\x17\xac\x85\x45\x87\xf8\x6c\x25\x90\xf2\xf8\xaf\xc1\x6a\x36\x59\x44\xaa\x2f\x5e\xbe\x06\x4d\x57\x60\xe5\x0b\xd8\x64\x09\xcb\xf5\x66\x32\x64\x74\xcf\xbb\xfc\x8b\x98\xcf\x5c\xd6\x7b\xfb\x53\x3c\x31\x33\x48\xfa\x2c\x8c\xb2\xbb\x29\xf0\x02\x64\x9e\x37\x3f\x2f\x40\xf9\xb2\xbe\xd1\xc1\x57\x75\xc7\x5e\xcd\xd1\x33\x90\xf7\x02\x1b\x79\xbb\x48\x1a\x7e\xfa\x22\xbc\xcc\xef\x5a\x54\xce\xe9\x83\xe5\x8a\x3c\xbb\xf1\x30\x62\x2f\xbb\xe2\x34\x27\xe5\x8d\x68\xe8\x83\xd8\x26\xf7\x9f\x2f\x3e\x73\x03\x29\x52\x4e\x05\xb5\x73\x4d\xbe\xf1\x85\xf8\x37\xfa\xcb\x2b\x25\xbe\x4c\x52\xb5\x49\xd4\xa7\x69\xab\xc8\x33\x0b\xe4\xc2\x3c\x5b\xa1\xb2\x12\xc2\x1d\x5e\xdc\x23\x21\x8d\x62\x3f\x07\xf9\x55\x56\xce\x75\xf8\x0b\xa5\xbe\x54\xd2\x69\x85\x59\x27\xf3\x36\xe9\x0d\xcd\xc0\xf4\x22\x4a\x6d\x62\xb9\x66\x18\x76\xc8\xf9\x30\x08\xa8\x17\xb9\x6f\x3b\xf9\x7b\x9f\x4d\xd7\x0d\x89\xe3\x45\x8c\x3f\x36\x5b\xcf\xc3\xd6\xd3\x30\x08\x23\xae\x02\x1f\xb6\x88\xc5\x35\x2c\x7f\xd1\x50\x14\x15\x7d\xe9\xd2\x88\xd8\x8c\x86\xde\x2f\x11\x79\x32\xad\x17\xf6\xfc\x4c\x9e\x03\x36\xe0\xbd\x16\x99\x41\x24\x14\x7c\x94\x71\x22\xcc\xff\x80\xab\x89\x8e\x4e\xb2\xfa\xd4\x7a\xd9\x2d\x8c\x1b\x92\x9c\x2c\xd2\xdd\xdb\x3b\x3a\xcc\x5e\x58\xa7\x83\x94\x92\xfb\xca\xde\xfd\x64\xef\xa4\xdb\xec\xd5\xb7\xc9\x37\x4a\x7c\x26\xb7\x72\x7d\x66\x13\x31\x3c\x86\xbe\x98\x0c\x7c\x34\xfd\x99\x9e\x8f\x3a\x30\x85\x13\x4b\x59\xcb\xc4\xf4\xec\x6c\x4d\xcc\x73\xdf\xf8\xf4\x18\xfa\xe2\xce\xb4\x89\xe2\xa9\x44\x1e\x04\x4a\x98\x67\x71\x6b\xd6\x8c\x7e\x09\x49\x62\xc9\x75\x46\x7e\x8e\x83\x86\x5f\xa3\x24\xa1\xc7\x16\xa7\xb9\xfe\x5a\x3c\xde\xb5\x93\x2b\xe7\x85\x06\xef\xbf\x5f\xf9\xd0\x39\xc8\x5e\x53\xa7\x2c\xd9\x4e\xf0\xeb\x6e\xa5\x98\x4c\xbc\x43\xf1\x0f\x15\xe1\x16\xb7\x9f\x3f\x5d\xde\x7f\xb8\xfc\x72\xf7\x78\xf3\xf9\xf6\x5e\x7f\x31\x6d\xdf\x79\xef\xe8\x48\x57\x1d\x23\x8f\x58\xcb\x35\x5a\x3f\x1a\xcd\x65\xe2\x28\x48\x6d\x94\x34\x3c\x6b\xad\xa6\xce\xc8\xf2\xeb\xea\xad\x3f\x74\x4d\xbe\x5d\xa1\xde\xe6\xa7\xae\x8d\xd8\x77\xaf\xfc\x42\xd9\xbd\xf3\x8a\x62\xda\x11\x47\xd9\x44\xb0\x54\x29\x5d\x5c\xdf\x7d\x32\xc3\xbf\x0b\x4a\x69\x0a\x22\xad\xf0\x54\xb2\x6a\x22\xad\x38\x05\x33\x93\xc2\x20\xba\x8b\x35\xf3\xbb\xfc\x0e\x17\x7c\x92\x89\x38\x98\x93\x90\x77\x47\xdc\x25\x86\x67\x7a\xde\x5b\xe6\x06\xa5\xce\x2e\x64\x81\x9c\xbb\x96\x4f\xc7\xcc\x7f\xbd\xe4\xe6\xb4\x69\xf5\xa9\x11\x3a\xff\xa2\x7c\xc6\xef\x65\x2f\xba\xac\x67\x3c\x9b\x96\xe3\x3a\xd1\xdb\xaf\xd9\x6a\x0c\x29\xc9\x7e\xdd\x2d\x4a\x94\xdd\xee\xfe\xbb\xce\x5e\x67\xaf\xd3\xdd\x56\x73\x27\x3d\x51\x39\x77\x62\x74\x7c\x49\xae\xd6\x8a\x57\x2b\x1e\x58\xfd\x8c\x78\xad\x56\x71\x90\xb2\x5e\x8f\x7e\x68\x74\xb1\xba\xd2\x3b\xd4\xc9\xd2\xa3\x1e\xae\x0f\xd8\x5a\x71\xb5\x34\x27\x42\x6e\x93\x90\xd2\x53\x31\x3f\xc3\xd3\xdd\xdd\x9e\x13\xf5\x87\x4f\x1d\x8b\x0d\x76\xd3\x85\x82\xfe\x4f\x27\x0c\x87\x34\xdc\xdd\x7f\xbf\x77\x74\x24\xb4\xa4\x4d\x23\xd3\x71\xc3\x51\x96\xe9\x78\xc1\x8f\xfb\x19\x8b\x69\x3a\x62\x6f\xe4\xd4\x8a\xeb\x0b\x1d\x9b\x5a\x66\xdd\x1e\xe1\x9d\x2c\x31\x2d\x39\x58\xa2\x00\x56\x5e\xf6\x15\x84\x5f\xa5\xf4\x33\x7c\xde\x5b\xbf\x2a\x9b\x76\x27\x99\x69\xa7\x62\xa6\xed\x68\xeb\x56\xb5\x67\xd6\x09\x5f\xad\x4e\x51\x08\xed\x1c\xed\x9c\x95\x55\xac\xbe\xb5\x56\xf1\xf8\xb5\x36\x32\x47\x0e\x27\x51\xf1\xad\x66\x51\xf9\x74\x21\xe9\x8a\x24\x99\x5e\xc5\x23\x36\xb9\x08\xb8\x60\x7c\xa5\x34\x0c\x69\xb2\x55\x7b\x71\x7d\x97\x98\x87\x75\xfb\xfe\x33\x3e\xf1\x72\x49\xcf\xa6\x54\xd3\x7f\xe5\xcf\xa6\xac\xf9\x76\x5a\x8e\xd6\x98\x5f\x4f\xdd\x12\xeb\xff\x2f\x7e\x18\x05\xd4\x1c\x08\xd4\x96\x78\xdf\x58\xd1\x0f\x8b\x57\x92\xb4\x9e\x7f\xfe\xf8\xa1\xfc\xb9\x4e\xe2\xcf\x2d\xa9\xe9\xe7\x4f\xe1\x29\xfe\x77\xe7\xe7\xcf\x9d\x18\x23\xf0\xe3\x87\x1f\x38\x5e\xf4\x4c\x1e\xb6\xfe\xd7\xdf\x0f\x5b\xa4\xc3\x7f\x12\x57\xfe\x33\xbb\xd1\x14\xb7\xf0\x2e\x1a\x3e\xc9\xe9\x1e\xb7\x2c\x4c\x7f\x49\x13\x8d\x7e\x90\x3f\x68\xf4\xa7\x94\x52\xfa\x2d\x85\xfb\x0b\xe7\x1c\x69\x61\x62\x27\xf5\x51\x62\xd9\xa4\x9e\x25\x08\x15\x43\x9c\x57\xbe\xd0\xfa\x7a\x78\x11\xe7\xa5\xfe\x10\xe7\x85\x38\xaf\x25\x8e\xf3\x42\x10\x17\x82\xb8\x96\x28\x88\x0b\xb1\x5b\x88\xdd\xda\x80\xd8\xad\x9a\xe4\x7b\x84\x71\x21\x8c\x0b\x61\x5c\x08\xe3\x42\x18\x17\xc2\xb8\x96\x7d\x91\x8f\x30\x2e\xf5\x87\x30\x2e\x84\x71\x21\x8c\x0b\x61\x5c\x71\x4d\x08\xe3\x42\x18\x17\xc2\xb8\x10\xc6\x85\x30\x2e\x84\x71\x21\x8c\x0b\x61\x5c\x08\xe3\x42\x18\x57\xda\x6d\x08\xe3\x5a\x39\xa7\x76\xb1\x72\x84\x71\x21\x8c\x6b\x82\x30\x2e\x35\xfb\x65\x9b\xdb\x83\xf9\x5b\x1e\x87\x5a\xbd\x27\x59\xf2\x41\x55\xd3\x94\xc1\x73\xaa\x76\xf5\xf8\x03\x0c\xc5\x0f\x67\xc1\xb4\xd1\xfd\x15\x0f\x69\x01\xf2\xcf\xb6\xba\x6e\x30\x8e\xdf\x81\xed\x7a\xce\x10\x6f\xc3\x97\xfe\xf5\xed\x19\xbb\x27\xb3\x5d\x98\xec\x29\x1a\xa6\xef\x68\x2d\xa0\x5e\xa4\xb6\xec\x93\xb6\x2c\xbe\x5b\x4b\x83\x27\xaa\x77\xbd\xf3\xad\x88\xa3\x21\xf2\xe7\x0e\xa4\x67\x0e\x64\x75\x66\x7a\x50\x82\x76\xba\x81\x7e\x04\x41\x98\x0a\xcd\xf4\x8c\xcb\xf4\x3c\x02\xed\x38\x85\xf8\x04\x84\xe4\xf4\x83\xb2\x36\xe8\x21\x0d\x65\xad\xd1\x22\x1a\x5a\x3c\x68\xc2\x0e\xae\x1b\xb9\x55\xfd\x3c\x8b\x49\x9e\x7f\xc8\x4c\x46\x63\x6d\x20\x81\xe9\x3b\x01\xed\x39\x62\x1b\xb7\x7a\xb6\x9f\xdd\x5c\xd5\x59\x2d\xaa\x74\x47\xb5\x29\xe9\x02\xcd\x0a\x90\x66\x87\xd4\x15\x55\x2f\x50\x67\xf2\xf4\x64\x7f\xe7\x9f\x20\x06\x4c\xac\xa4\x55\x93\xb9\xad\x2f\x78\xd6\xf4\xee\xc5\xf1\xef\x3f\xde\x7d\xa5\x81\xf3\xfc\x96\x6e\x3b\x88\xba\x6e\x02\x87\x05\x4e\xf4\xf6\xc9\xf1\x9c\xc1\x70\x90\xec\x24\xaa\xfa\xe2\xcb\xea\xf7\xc9\x02\x30\x26\x90\x1c\xed\xd0\x36\xcd\x1f\x54\x65\x44\x16\x46\xa4\xbe\xe3\xac\xc2\xe6\x54\x7c\x5f\x1a\xd2\xf0\xe3\x47\xe6\xd2\x98\x9b\xef\xf9\x47\x57\xc5\x13\xe4\x82\x0e\x1a\x07\x17\xc4\x6d\x1a\xb5\xb1\x5f\x3d\x3c\xeb\x36\xfd\xcb\xca\x23\x24\x3b\xfb\xb7\x04\xbb\xb5\xcb\x19\x3a\x51\xb6\x96\x2c\x1f\x80\xcb\x1b\x1d\x5e\xde\x5e\xcd\x3d\x44\x3a\x9f\x64\x11\xb9\xae\x13\xee\x21\x52\x7b\xa2\xc4\x99\xfb\xcd\x7c\xd3\xc6\x43\xe9\x69\x9c\x55\xcf\xd5\x96\x0f\x1a\x7d\x7c\xaf\x73\x90\x81\x8f\x93\xe4\x3c\x4e\x97\x46\x46\xac\x38\x8c\x48\x77\xdd\xe9\x25\x92\xa8\x15\xe1\x2b\xa5\x61\x68\x44\x6f\x3e\x0d\x7f\x15\xa7\x39\x78\xa6\x7b\x75\xf3\x30\xda\xad\x53\xed\x8a\x15\xa6\xd1\xaf\xda\xf0\x0e\x87\x83\x81\x19\xbc\x3d\x9a\xbe\x73\x1a\x7b\x23\xcb\xbd\x33\xff\xbf\x6a\xe2\x07\x5e\x4a\x3a\xbd\x87\x7b\x7b\xfb\xc7\xea\xe7\x1b\xb9\x87\xb5\x7f\xb4\x27\x7f\x1e\x86\x34\xab\xb9\xb4\x5b\xe2\x6e\xc8\xb9\xce\xcb\x5c\xba\xfa\xf4\x50\xb3\xe3\xb3\xd8\xe7\xcf\xfb\xab\x89\x61\xc4\xb3\xe3\xd7\x64\x6a\xe8\xd5\x34\x8f\x75\x9c\xb2\xea\x2b\xf5\x65\x7c\xca\x56\xd7\xc4\xa5\x51\x6c\x81\xee\xb4\x90\x1e\x87\xc3\xc3\x72\x97\x83\x98\xda\x22\x37\xe0\x26\x2d\xa7\xd6\xc7\x5e\xcf\xf1\xbe\x3b\x5e\x4f\x8c\xb6\xd7\x6e\xa7\x7b\x24\xd7\xc7\xe5\x7d\x74\x9d\x1e\x58\x51\xd2\x4b\x71\x35\xa2\xce\x09\x0e\x11\x13\xf7\x2b\x8f\xf2\x30\x48\x8e\xf8\xd7\xba\x3c\xf7\xa4\x5c\xa7\x8b\x0e\xcb\x15\x49\x3c\x23\x23\x46\x54\x95\x90\xcd\x8f\xa1\x71\xde\x2b\xb2\xfc\xd8\x47\x96\xf7\xe2\x4c\xab\xeb\x86\x76\xd3\x47\x08\x5d\xd5\xc6\xfd\xd1\xca\x28\x95\x9f\x30\x7e\xa4\x6a\x91\x99\x5d\x66\xd4\xbc\xfa\xa4\x6e\x97\x06\x6d\x52\x7e\xc1\x40\x94\x9e\xec\x70\x40\x2d\x7e\x3d\xd5\x7f\x9e\xed\x33\xc7\xd3\x55\xa2\x76\xdc\x1f\xc9\x1c\x29\xc8\xff\x2b\xa4\x56\x40\xa3\x39\x9d\x06\x58\xfe\x94\x09\x4e\x32\xd4\x87\x5c\x65\xc5\x63\xbd\x4b\x7e\x85\x1f\xff\xae\xce\x79\x71\xbc\x5e\xbc\x5c\xab\x69\x9e\xfa\xe6\x7a\xef\xdb\xe2\xf0\xb5\xb0\xb2\xcb\x27\x69\x73\x75\x53\xc4\xc8\x78\xa5\x5e\xf9\x53\xc5\x58\x92\x59\x0e\xda\x2f\xfe\x7c\xbb\xa8\xf6\xa4\x48\x95\xdd\x31\xa1\x6b\xaf\xc1\xec\x0c\x34\x87\x46\xb9\x9c\x98\xfe\x94\xad\x99\x90\x45\x9f\xd5\x54\xa7\x4f\xbe\x35\x71\x19\xa1\x6e\x93\x72\xdb\xf1\xf6\x51\x48\x22\xc6\x6b\x1c\xee\xed\x1d\x58\xc2\x5e\x70\x98\x67\x38\xb6\xf8\x81\x1a\xf2\xf7\x54\xce\x99\x61\x28\xaf\xa4\xc3\x63\x9b\x7c\xa0\x81\x30\x45\x72\x85\x93\x64\x23\xc3\x95\x3e\x4c\xbd\x4a\xd9\xf3\x85\xaa\xee\xfb\x4e\x48\xfa\xa6\x68\xd5\x13\x25\xa6\x6d\xfa\x11\xb5\xb9\x79\xfc\xc6\x86\xc4\xea\x0b\x7d\x4b\x9d\xa8\x4f\x83\x34\x8b\x20\xbd\x5d\x44\x49\xba\xe6\xd0\xb3\xfa\x8e\xd7\x13\x71\x5c\x39\x49\x9d\x34\xaa\xa3\x77\x68\x65\x9b\xd5\x08\xd9\x6a\x30\xb1\x87\xc9\x99\x25\xd3\xf8\x6c\xf9\x47\xa5\x73\x79\x9c\xda\x73\x1a\xa4\xf4\x3d\x66\xe7\x62\x2f\x4e\x47\xc3\x73\x42\xd3\x78\x8a\xef\xa9\x9d\x9b\xd3\xf1\xb4\x97\x89\x84\x96\x29\x58\xa3\xec\x90\x99\x5b\x22\xcd\xfb\x58\x33\x48\x72\x5d\x3d\x5d\xef\xf0\xff\x65\xef\xda\x76\x1b\xc7\x99\xf4\xfd\x3c\x05\xe1\x59\x20\xbb\xf8\x23\xc5\x96\x0f\x71\xb2\xc8\x85\x27\x9d\xbf\x3b\x98\x74\x3a\x48\xd2\xd3\xbb\x98\x0c\x0c\x5a\x62\x62\x6d\x64\x4a\x43\xc9\x39\xec\xa0\x81\x7d\x8d\x7d\xbd\x7d\x92\x05\x49\x1d\x48\x89\x3a\xd8\x6d\x65\xec\x6e\xfa\xa2\xd1\x91\xa8\xaa\xe2\xa9\x58\xac\xfa\x58\xac\x30\x83\xde\xb0\x71\xab\xf6\x64\x79\xb7\x64\xe5\x3d\xa9\x65\xba\xa2\x7a\x84\xae\x72\xad\x8e\x6a\x3b\x51\xee\x3e\x54\x5c\xb9\xb4\x71\x27\x62\xc1\x51\xa8\x12\x31\x7e\xa3\x3c\x1e\x14\x10\x7f\x81\xa2\x39\x5a\xb2\xd1\xcb\x77\x8f\x7b\x74\xff\x3e\xd8\x2b\x2b\x14\xda\x04\x06\xe8\x18\xec\xd1\x6d\xbb\x7c\x62\x28\xe6\xa4\x5d\x90\x5b\xe0\x82\xe4\xcf\x4b\x2f\xd4\xe3\xe3\xf6\xdd\xe5\x0d\xf7\x82\x65\x5e\x12\x01\xa4\xc2\xc1\xa6\xf9\x02\xe9\xf0\xdc\x4e\x27\x67\xdd\x76\x96\x97\x52\xb9\x42\xeb\xb5\x98\xc4\x97\x3f\xf8\x9b\x3d\xa5\xb1\xfb\x11\x23\x60\x4e\xbc\xc0\xc5\x88\xfb\x3b\xa9\x41\x91\xc9\x48\xa7\xdd\xa9\xca\xa5\xaa\xf2\x74\x86\x73\xf1\x2f\xc3\x96\xde\xbd\x86\x76\xe4\x01\xe3\x19\x60\x14\x99\xb6\x4f\x90\x19\xfa\x0b\xf8\x62\xfb\x18\x9f\xf4\xad\xc3\xd1\xf8\xdf\x73\x65\xdc\xe0\x69\x60\xba\xc1\x94\xc1\xb5\xa7\x54\xbf\x4c\xd9\x10\x38\xb9\xeb\xf4\xba\xd6\x00\x8c\x86\xc3\xbe\x84\x35\xcf\x60\x7e\x42\x7d\xd6\xb8\x10\x38\x0d\x80\xda\x91\x00\x13\x5f\xe7\x02\xda\xa2\x3f\x52\xe1\x9e\xce\x1c\xd4\x55\xcb\x50\xb1\x92\xe7\xbc\x5c\xa1\x96\x05\x34\x1f\x67\x71\xd0\x84\x3a\x90\x52\x57\xcc\xf8\x3d\xe5\xc9\x78\x3e\xf9\x97\x7f\x95\xae\xb2\xfd\xb7\x83\xa4\xe0\x3c\x8a\x82\xa4\x74\x91\x5c\x96\x7f\xa4\x40\xa0\xc4\x4b\x27\x7f\x2f\xba\xbc\xaa\x88\xe5\x5d\x63\x32\x15\xd1\xab\x55\x45\x25\xef\xfd\x92\xa9\x08\x4b\x21\xf3\xb4\xbb\x2f\x27\xac\x0e\x66\xdc\xae\xb2\xd6\x15\xbf\x57\x69\xb0\xb3\x97\x88\xc0\x09\x79\x90\x5d\xd1\x09\xaf\x44\x8d\x31\xb5\x84\x11\xfd\x88\x4e\x4e\xd1\x3f\xad\xc8\x06\x52\x50\x33\x40\x0e\x35\x94\xcf\xf5\xba\x51\x0e\x80\x78\xd1\xbf\x62\x85\x72\x88\x9f\xbf\xa9\x92\xd7\x65\x72\x71\x51\x7c\x0c\x1d\x47\x59\xf8\xf2\xec\x76\xfa\xcb\xf9\xe5\xbb\xe9\xcd\xd9\xf5\x6f\xe7\xf2\x8d\xc9\x00\x90\x25\x9e\x84\x9f\x43\x44\x8e\x41\xbf\x9f\xaf\x62\xb1\xe2\xf2\x51\x16\x20\x1e\x67\x51\x5c\x02\x0d\x2a\x6e\xe9\x05\x55\x17\x33\x83\x46\x17\x42\xab\xd8\x17\x2e\x85\x6e\x45\x86\xd8\xdf\xce\x97\x5d\x36\xea\xce\xf0\x53\x98\x3b\xfb\x9e\x3e\xcf\x8c\xca\x9e\x55\x92\x73\x26\x0f\xa4\xcd\x2a\x46\x75\x41\x6e\xd4\xc8\x10\xdb\x71\xb7\xec\xb3\xb0\xf2\xbb\x34\x32\xc1\x7f\xe5\x58\x6d\x15\xd6\xb9\x2f\x17\x50\xc3\xb9\x73\x07\x5b\xfe\xbb\xf0\x36\x86\x08\x5b\x79\x48\x77\x39\xa8\xbb\x04\xd6\xdd\xcb\x9f\x09\x47\xc4\xf5\x9d\xd2\xd7\x35\xd0\xee\x22\x30\xbc\x27\x1b\xca\xa5\x67\xf5\xb6\xab\xa9\x5a\x68\x05\x61\xc4\xff\x26\x9c\x42\x90\x07\x73\xee\x7c\x42\x7e\x4a\x88\x1f\x96\x4e\x8d\x02\x23\x81\x47\x76\x70\x59\x4d\x5a\xa0\x3a\x96\x88\x7e\x33\xdc\xa6\x6c\x81\x2e\x86\xba\xca\x4a\x36\xd8\xfe\x66\x30\x9b\xde\x2a\xbb\xe1\x32\x8e\xeb\x6d\x5c\xcb\x4d\x11\xbd\xc1\x94\x7f\x5b\xb3\xc1\x8c\x10\x61\xc9\xda\x5c\x1f\xbf\x27\xd0\x46\x57\xf2\xf4\xcf\x8e\xbe\x6c\x2f\xa4\xa4\xda\x00\xfe\x19\x4c\xf0\x2b\xb7\xd8\x81\x1b\x52\xf5\xb6\x70\xc3\x10\xce\x3c\x04\x60\x08\x3c\x1f\x3f\x00\x28\x76\x04\xcf\xb0\x13\xf1\x23\xc7\x21\x80\x60\xd0\x1d\x80\x80\x7e\x0d\x23\x70\x20\x96\xb3\xc4\x72\x56\xb7\x0b\x7c\x0c\x60\xaa\x8c\x53\xb7\xaf\x6a\x6f\x14\x6f\x1b\x7e\xe1\xc2\x6e\xec\x14\x68\x6e\x05\x48\x0f\x74\xe7\x75\xf8\x2a\x87\x9f\xfa\x4d\x0f\x3f\xd5\x1e\xeb\x91\x05\x51\x9f\xd1\x51\x66\x12\xc8\x9f\xc3\xe1\xbf\xb2\x73\x3b\xd5\xe9\x05\x2a\x89\xac\x09\x2a\x59\x5d\x6d\x37\x57\xfe\xa9\xe2\x2c\xa2\x44\x92\xd6\x14\x11\x21\x49\x1b\xe7\xf4\x7f\x05\x83\x52\xf8\x88\xd9\xb3\x38\x82\xe4\x67\x9e\x5f\x22\x59\x12\xe8\x2c\x72\x71\x84\xb0\x83\x1c\x76\x88\x71\x19\x22\x30\x7b\x05\x3c\x9e\x74\x12\x6f\xa0\xbb\x66\xdf\x32\xbb\x1a\x7e\xa2\xe1\x27\x1a\x7e\x92\x2d\x58\x1a\x7e\xd2\x12\xfc\x24\x8b\xff\x36\xaa\x9b\x80\xb4\x10\x24\x53\xe0\x2c\xc0\xcf\xe0\x71\x1c\x82\x9e\xd9\x1b\xfc\xa3\x5c\xec\x1c\x2c\xe5\x6d\x20\x28\x55\x00\x94\x3c\xfc\xa4\x16\x7c\xd2\x56\x83\xfc\x18\x20\x94\x37\x44\x94\x34\xc0\xb7\x34\xc1\x1b\xb4\x30\x1a\xf5\xdc\xdd\xa2\x29\xa5\xe1\x4b\x6f\x04\x5f\xaa\x03\x2f\xd5\x0f\xaa\x1d\x86\x2e\xe5\x17\x99\x0d\xd6\x6b\x8d\xb5\x4d\x63\xa8\x34\x86\x4a\x63\xa8\x34\x86\x4a\x63\xa8\xa4\xdf\x0f\xef\xe2\xd6\x18\xaa\xb6\x31\x54\xbb\x1b\x43\xd0\xb8\x9f\x1a\xdc\x8f\x60\xd6\x9f\x94\x5b\xe7\x85\xcf\x24\xab\xff\x44\x52\xc2\x59\x21\x8d\x29\xfa\x66\x4c\xd1\x2e\x41\x85\x7a\x5d\x09\x2a\xa0\x51\x41\x1a\x15\xa4\x51\x41\x3b\x82\x0a\xfa\xbb\x9a\x6a\xb7\xa1\x43\x1a\x38\xa4\x81\x43\xdf\xeb\xae\x6a\x87\x8d\x7e\x0d\x1c\xd2\xc0\x21\x0d\x1c\x6a\x09\x38\x34\xd6\x69\x67\x34\xee\x47\xe3\x7e\x34\xee\x67\x5b\xd3\xce\xe8\xbc\x32\x1a\xb3\xa3\x13\xc7\xec\x3e\xf2\x42\x27\x8e\xd1\x89\x63\x34\xe8\x41\x83\x1e\x34\xe8\xa1\x4c\xc4\xf8\x8d\x06\x3d\xfc\x80\xee\x39\x0d\x7a\xd0\x89\x63\x74\xe2\x98\xf4\xa9\x4e\x1c\xa3\x13\xc7\xec\x2c\xc8\x43\x27\x8e\x11\x18\x68\x88\x88\x86\x88\x7c\xff\xb8\x87\xec\xe5\xce\x40\x44\x34\xfa\x43\x27\x8e\xd1\xf8\x8f\x5c\xa1\xef\x77\x83\xa9\xf1\x1f\x1a\xff\x91\xca\xa7\xf1\x1f\x3f\x2e\xfe\xc3\x77\x10\xdb\xe4\x8b\x97\x0e\xd5\x5f\xca\xbb\x3e\x32\x80\x6a\x30\xce\x70\xc5\x1b\xb0\xdb\xba\xea\xba\xf2\xe6\xcc\xd5\x2e\xf4\x36\x92\xeb\x9c\x57\xa9\xd7\xb6\xdd\xec\x9d\x5c\x31\x2d\x5d\x87\xb5\xfe\xcd\xdc\xf2\x38\xe5\xc5\x56\xbf\xad\x5b\x4d\xa7\xfe\xde\xf1\xb5\x6f\xf9\x5e\x7b\x9c\xae\xd2\x17\x29\xcf\x53\x9f\xa0\x7b\xd7\x43\xc2\x4d\xdb\xf9\x4b\xf8\x8f\x87\x7d\xf0\x57\xa6\xc4\x10\x21\x3e\x11\x6f\xcd\x83\xf6\x1c\x89\x05\x52\xa5\xcf\x0d\x77\x70\x74\x34\x1e\xe4\x94\x3a\xff\x39\x08\xbb\xd0\xe3\xef\x05\xb5\xfe\x55\x54\xd9\x9e\x0f\x85\xa5\xd5\xf3\x7d\x61\x97\x39\x73\xb1\xc3\xd6\xb6\xab\x09\xbf\x2c\xef\xeb\xd7\xf2\x1b\xde\xf9\xef\xde\x27\xcf\x90\x38\xc0\x04\xd3\xe9\xd5\xf9\xc5\xc5\xe4\x7a\x3a\x3d\xbd\xf8\x7c\x73\x7b\x76\x3d\x9d\xbe\xbb\xbc\x99\x4e\x55\x35\xb9\xf7\x89\x8d\xa6\xe9\x78\xc9\x09\x99\x05\x3b\xc0\xf1\x91\x35\x14\x36\x52\x7c\x8d\xcc\x89\x78\x2c\xaf\x4a\x31\x21\x17\xb3\x1b\xff\x4c\x48\x02\xd8\xa8\xc1\xfb\xdd\xef\xa6\x99\x92\x26\x08\x46\x3f\x72\xf5\xcd\xed\xac\xf7\xe7\xab\x9b\xdb\xeb\xb3\xc9\xc7\x29\x73\xcc\x9d\x5d\x6f\xbe\xf2\xdf\x18\xc4\x5d\x7b\x59\x4f\x74\x76\x91\x42\x8b\x8b\x60\xba\xae\x29\x82\xbd\xea\xb8\xf0\x0a\x41\x60\x2f\x4c\x43\x02\xc4\xf7\xe8\xa6\x95\x7f\x91\x1a\xa6\x0b\xf8\xf2\x19\xc3\x27\xe8\x7a\x74\x3b\x12\xbb\x4a\xd6\xba\x4d\xb9\xd8\x68\x75\x1b\xf8\xe2\x0e\xbe\xa6\x0f\xa4\x1d\x7c\x10\x5f\x98\x7d\xea\xc1\x30\xbc\x14\x2e\x39\x37\xd8\xa7\x36\x71\x23\xd7\x86\x5e\x13\x0b\x92\x13\x54\xc6\xf3\x72\x52\x14\x9d\xcb\xda\x91\xb0\xa2\x23\x41\x11\x4e\xde\xce\x28\xb0\x10\xc5\x8e\xb1\x72\x0c\x36\xe7\xe3\xbd\x88\x25\xaa\x8c\x75\x00\x78\x77\x79\x93\x62\xc9\xd4\x1e\x8a\x35\x1c\x0a\x7c\x0c\x53\x05\x7f\xa7\xd8\xbb\x5f\x26\x3b\xa5\x42\xd0\x4f\xbd\xa5\xad\xda\x8f\x5a\xc3\x92\xfd\xe8\x50\xdc\xd3\xb2\x50\x22\xf8\x1d\xdc\x75\xf8\x74\x70\x83\xbb\xce\x3e\x6b\x50\x71\x39\xd9\x57\x2f\x27\xac\x24\x8b\xb5\xf1\xff\x1e\xa0\xc8\x3e\x48\xec\xcc\xf8\x6d\xb2\x5d\x09\x9f\x6c\xfe\xa4\xb8\x91\xe9\x80\x3f\x32\x81\xd6\x09\xc3\x36\x70\x10\x0c\x25\xaf\x77\x6e\x7b\x91\x50\x2f\x6c\x2b\x56\x21\x65\x48\x4b\xa2\x72\x77\xa1\x24\x27\xaf\x92\xb9\x5b\x88\x1b\x10\x5c\xd5\xab\x43\xe7\xe9\x71\xce\x5c\x90\x4b\x48\x7e\x9f\xdc\x2b\xa5\xdb\x47\xe9\xdc\x19\x35\x75\xee\xe4\xbc\xf3\x59\x43\x2d\xe8\x23\x1e\xec\x3a\x20\x4b\x7c\xf0\x12\xd1\xb5\x2c\x34\x3d\xdf\x7e\x2c\xb6\x58\xfc\xd6\xc8\xbf\x25\x08\x3a\x9f\xb0\xf7\x7a\x0c\xee\xa1\x17\x4a\xb0\x68\xfe\x21\x8f\x15\x1b\x5c\x0c\xf1\x4b\x91\x3f\x1d\xd9\x36\x55\xe6\x38\x2c\x52\x48\x87\x34\x27\x55\x45\x43\xde\x81\x8b\xa1\x03\x99\xa4\xba\x36\xb4\xef\x18\x31\x69\x5c\xd4\xb7\x50\xf4\x1a\xa0\x63\xf0\x4f\xd7\x43\x9f\xc8\x69\x2e\x35\x56\x4d\x15\xec\x64\x0b\x7b\x5c\x6c\xf2\x7c\x65\x00\x5b\x57\xa8\x96\x84\x9e\x3c\x43\x6b\xda\xba\x8a\x89\xca\x60\x88\x87\x5d\x84\x0a\xab\x65\xbc\x0c\xa6\x4a\x28\xb7\x76\xf1\xb6\x4a\xde\x9a\x33\x48\x07\x44\xec\xa6\x7a\x46\xf0\x09\x31\x17\xd5\x88\xbb\xa8\x98\xb9\x1a\x43\x97\xd3\x9d\x3c\xb0\x21\x06\x33\x44\x57\x0a\x07\x44\x3e\x48\xb0\x0d\x08\x40\x6a\x56\xdd\x1b\xb4\x8f\x90\x03\xbe\x50\x6a\xe0\x12\x45\xc0\xc5\x61\x04\x3d\x8f\xa3\x2f\xcb\x3c\x05\x17\xec\x78\x40\x56\x23\x06\x06\x96\xca\x51\xf1\xcb\xc1\x96\x05\x23\x8c\x37\x1e\xaf\x13\xce\xe0\xcc\xe5\x26\xb3\xcc\x31\xb5\xcc\x33\xb6\x82\x75\xbe\x0a\xc7\x82\x31\xb8\xb2\x64\x39\x03\x31\xcc\x5b\x0d\x6a\x03\xb6\x82\x55\xce\x80\x55\xd6\x06\x94\xe2\x22\x41\xec\xe6\x76\x96\x1e\x22\x26\xf4\x82\x79\xde\xe2\x4a\x6c\x54\x23\xf0\x9d\x63\xb0\xb7\xb7\xca\xb7\xa2\xa5\x01\x12\x64\x7d\x6e\x14\xff\xfe\xd7\x5d\xe7\x11\xbd\xde\x75\x8e\xef\x3a\x0e\x72\x5c\x1b\x46\xc8\xb9\xeb\xec\xdf\x75\x12\x8b\x84\xbd\x3a\xfb\x73\x09\x3d\xf6\x98\x59\x72\xec\xd9\x02\xd2\x45\x9c\x3d\xe4\xa1\x12\xf6\x54\x88\x96\x74\xbe\xfe\x21\xb2\x53\x98\xf2\xa5\xcd\x9a\xeb\x27\xa0\xb6\xa2\x41\x95\x25\x0d\xbe\xd5\x9a\x06\x8d\x2c\x6a\xd0\xd4\xaa\x06\x6b\x58\xd6\xa0\x99\x75\x0d\xea\x2c\x6c\x20\x5b\xd9\x55\xc6\x74\xbe\xd6\x39\x8a\x2b\x99\xd5\xe9\x27\x15\xc6\x75\x5a\xa6\xc4\xc4\x06\x65\x48\x38\x20\xac\x05\x6c\xfc\xe4\xf9\x16\x61\x87\xd9\x67\x07\x73\x7f\x81\x0e\xd8\x67\x07\xfc\x2c\x88\x19\xce\xf3\x05\x8b\x80\x20\x91\xe7\x87\x4f\x37\xb7\x2a\x50\x10\xa8\x01\xe5\x80\x3a\x60\x0e\x60\x91\x90\xa2\xc6\x2e\x21\xc3\x2d\x02\x3a\x5d\x4c\xda\x6f\x97\x05\x18\x91\x28\xf4\xf9\xd5\xe4\xe2\xe2\xd3\xe9\xf4\x7a\x72\xf9\xbe\x5c\x72\xde\x53\x89\x99\x7e\x7a\xfe\xee\xba\xd8\x63\x20\x83\x8a\x99\x6c\x81\xba\x82\x61\xf8\xec\x13\xa7\x38\x00\x32\xf6\x5f\xce\x26\xbf\x9d\x4d\xaf\x26\x37\x37\x5f\x3e\x5d\xbf\xab\xe3\x9f\x27\x5b\x22\x41\x61\xb8\xc8\xc2\x7d\xbc\xfd\xac\x18\x94\x12\xa6\x95\x16\xe9\x2a\x0b\xc9\x82\x7f\xbc\xfd\x5c\x27\xf3\xc7\xdb\xcf\x95\x92\x96\x8a\xa2\x7e\x27\xc4\x62\x8b\xd8\x4d\x50\x07\xd8\x01\x15\x98\x1c\x90\xda\xef\x3d\xeb\xd0\xec\x9a\x5d\x53\x39\xcc\x62\x8b\x50\x3c\xa4\x97\x2b\xc0\xcc\xf8\xd1\xe1\xb8\x00\xde\x69\x14\xa9\x05\xa5\x1b\xd2\xe4\x9d\x72\x5b\xca\x7f\xea\x60\x69\x1d\x32\x11\x54\x6e\xff\xf8\xaf\x64\x23\x91\xfc\x24\xbd\xe3\xcc\x54\xb2\x89\xd6\x7a\x69\xb1\xd4\x96\xc5\xae\x31\x73\x95\xba\x5d\xa4\x43\xfb\xeb\xc0\x0f\xa2\x5a\x42\x56\x23\x4a\x54\x07\x56\x93\x62\xfb\xf1\x26\xa4\x50\x64\x97\x53\x72\x66\xea\xa1\x53\xa0\xf2\x04\xc9\x81\xe7\xce\x0e\xd4\x1f\x24\xe4\x3c\x77\x66\x2c\x7c\x6a\x61\xd4\x52\xa5\xc4\x4a\x8b\x56\xef\x8f\xd4\x04\xab\x76\x46\xb9\x61\x61\xe0\xa0\xd0\x26\xdf\xcd\x8a\x92\xe9\xa5\xd3\xcb\xf3\x52\xd5\xb4\xab\xd3\xba\xad\x11\x11\x78\xcb\x07\x17\x17\x86\x62\xa5\xa1\xe2\x07\xd1\x01\x79\x44\x46\xe4\xfb\x5e\x78\x20\xd1\x31\x6c\xec\x2a\xcc\x96\xac\x6f\xd8\x02\x7a\xe1\xfb\xc1\x0c\xda\x8f\x25\xbd\xf4\x66\x8d\xda\x50\xc7\xe5\xd4\x5b\xe9\xc9\xa2\xe4\xe5\xd5\xf9\xbb\xe2\x0b\x82\xc2\x08\x92\x28\xf1\xcd\x4e\xbc\x67\xf8\x2a\x35\x7b\x75\xad\x43\x74\xe1\xe2\xe5\x4b\x9c\x6b\xe3\x18\xfc\x95\xc3\xbd\x17\x83\x00\x8a\x0d\x8c\xda\xd3\x0b\x2a\xbd\xbd\xfc\x57\x05\x3c\x5b\xe5\xeb\x02\xd6\xad\xe8\x23\x92\xbb\xa8\x64\x9d\x52\xba\x8a\xf8\x2f\x36\x0f\x12\xc5\xad\xb0\xc3\x6b\xba\xbf\x9e\x76\x61\xbd\xab\x5b\xeb\xea\x49\x16\x17\xbe\xba\x45\xaf\x9e\x66\x61\x05\xac\x5a\xfd\x9a\xb7\x68\xf1\xeb\x06\xcb\x60\x3d\xf9\xd2\x85\xb1\x89\x0a\xac\x27\x5f\xa6\x14\x37\x19\xbf\x1c\x2b\x37\x8b\xdc\x3d\x79\x2d\x06\x32\x9b\x84\xf7\xbe\x2d\x7f\x8c\x34\xfb\x25\x37\x87\xe2\x7d\x99\x73\xaa\xbd\x54\x32\x2b\x88\x57\x97\xe5\x22\x71\x40\xa9\x12\x08\xc8\xf9\x2c\xf2\xe9\x2b\x40\xa3\x74\x2e\x60\xf5\x04\x27\xc5\x3b\x4e\x4a\x25\x8c\x8b\x06\x74\x59\x70\x37\x2f\x49\x55\xe3\xb0\xaa\x57\xe6\x3a\x49\x13\xab\x80\x0d\xa5\x3e\x69\x98\x15\x60\x95\xd1\x21\x24\x06\xa8\x38\xf1\x2f\x51\x6c\x94\x40\x60\xc5\x44\x00\xb9\xd5\x76\xf3\x33\x6a\x13\x53\xa9\x5c\xae\x55\x27\x99\x9c\x96\xc5\xc8\x57\x7f\x9d\x54\x21\x2b\x65\x25\xa9\x1a\xd7\x4d\x73\x92\xb4\x97\x39\x64\x33\x5d\x52\x18\xd9\xdb\x39\xa4\x05\x7f\x57\x3e\xd4\x34\xd6\x91\xa6\x2c\xf5\x54\x36\x88\xc0\xd6\x05\x9d\x74\xc8\x48\x87\x8c\x74\xc8\x48\x87\x8c\xe4\xdf\x96\x39\xf8\x74\xc8\x48\x87\x8c\x54\x82\xeb\x90\x91\x0e\x19\x55\x92\xd2\x21\x23\x1d\x32\xd2\x21\xa3\xc2\x4f\x87\x8c\xd6\x68\x54\x1d\x32\xca\x5a\x44\x87\x8c\x9a\xd3\xd6\x21\x23\x35\x5d\x1d\x32\xd2\x21\x23\x1d\x32\xd2\x21\x23\x1d\x32\xd2\x21\x23\x1d\x32\xfa\x01\x43\x46\x3f\x01\xf0\x75\xff\xa7\x24\x6a\xd4\x39\x06\x7f\xb1\x18\x12\x77\xf4\x9f\xf4\xcc\xde\xc8\xec\x1a\x2c\x2e\xd0\x39\x96\x4f\x31\xed\xcb\x05\xc7\x66\xd7\x20\x10\xdb\x73\x44\xba\x3c\x4e\x60\x97\x7e\x3d\x66\x6c\x7f\x62\x9c\x3b\xbf\x8e\xc3\xb8\x3f\xcf\xf1\xbd\x1f\x4b\xd0\xa1\x3c\xba\xa9\x38\x0b\xf8\x72\xfd\xeb\x59\x5c\x8c\x92\xea\x9a\x96\x69\xc5\x22\xd0\x97\x9c\xb1\x50\x80\xbe\x4e\xeb\xc6\x88\x99\xbd\x44\xbe\x5e\x4a\xd7\x41\x01\x41\x36\x8c\x50\x39\xf5\xac\x48\x3d\x8f\xde\x26\x05\xb6\x36\x49\xac\x5f\x45\xac\x6f\xf6\xaa\x89\xd1\x02\x12\xb9\x41\x39\xb9\x9e\xd9\x35\xbb\x75\xe4\xfa\x32\xb9\xa1\xd9\xcb\x3a\xc7\x10\x5a\xd1\xc5\x15\xc4\x5d\xbc\x06\x71\xab\x4d\xe2\xfd\x6a\xe2\x87\x75\xc4\x0f\x0b\xc4\x2d\x65\xb3\xa8\xc6\xc3\xd1\x51\xcd\x80\xa0\x25\x4a\xc9\x5b\xd5\x0d\xd3\x33\x2d\x83\xd8\x35\x8d\x33\x30\x07\xac\x50\x05\x93\xca\x06\xea\x99\xfd\x26\x4c\x86\x75\x4c\x06\xd5\x4c\x06\x4d\x98\x8c\xea\x98\x0c\xab\x99\x0c\xd7\x66\x32\x6c\xdc\xe3\xe3\xda\x0e\x97\x69\x8f\xcc\x5e\x37\xab\x40\xe5\x2c\x5b\xbf\xbf\x65\x26\x2d\x0d\xaa\x91\xd9\xeb\x37\xd4\x17\x9b\x62\x52\x53\x93\x75\xfb\x7b\x64\x8e\x5b\x53\x7c\x12\xed\x0d\xeb\xbd\x91\x79\xd4\x58\xee\x7a\xb5\x57\x6c\x97\x43\xda\x23\x2d\xb5\x8b\x44\x7b\xc3\xed\x72\x58\x32\x7f\x37\xd7\x2e\xa3\xd6\xa7\xb0\xc4\xa3\xa5\x19\x7c\xd8\x78\xfc\x6c\x88\x47\x4b\xf3\x77\x6c\xf6\x1b\xf7\xc7\xba\xab\x9b\xc4\xa3\xa6\x1e\xeb\xf3\x18\x35\xee\x8f\x8d\xf0\x68\xa7\x3f\xc6\x1b\xb4\x99\xc7\xc2\x4a\x26\xb6\xc9\x66\xf7\x0c\x63\xd1\x80\x6c\x89\xc7\xd1\x06\x5b\xe5\x88\x6a\xa5\x76\xc4\x8d\xf7\x83\x71\x81\x38\x7b\x52\xb6\x3b\x0c\x93\xad\xa1\x65\x52\x33\x32\x9e\xe2\x2f\x8c\x3e\x53\x97\xdd\xe4\xe9\x50\x7c\xda\x53\x3e\xb5\x94\x4f\x53\xba\xa3\xec\xe9\x40\xc1\x6b\x90\xf1\x92\x9e\xf6\x94\x4f\x2d\xe5\x53\x55\x1d\x06\x25\xdc\x86\xc9\xd3\x71\xf2\x34\x4e\x89\x2b\x3e\x4f\x9a\xef\xd7\xb3\xf2\xa6\xeb\x8a\x55\x94\x4c\x28\x35\x55\x69\xc2\x16\xf6\xeb\xef\x7c\xfb\x11\x11\x71\xd7\x1e\x6f\xda\x7f\x67\x5d\x4e\x37\xc4\xb1\xbc\xec\x0f\x4b\xfc\xa3\x9f\xfd\x71\x68\x76\x85\xbf\xc6\x66\x77\x24\xfd\x75\x94\xfd\x75\xc4\x4b\xfe\x04\xc0\x1f\xfb\x31\xbb\xde\xdb\xb2\xb3\xbe\x91\xdd\xa1\xc4\xee\x50\x62\xb7\xa2\x28\xfd\xed\x11\x65\x20\x8a\xf2\x16\x0c\x87\x6f\xcd\x70\xf4\xd6\x0c\x0f\xdf\x9a\xe1\xf8\x8d\x19\x8e\xd7\x1d\xbe\x02\x8d\xa3\xb7\x99\xfc\x05\xc5\xf7\x85\x63\x60\x63\x47\x6c\x1c\xe1\x17\x3d\x97\x99\x77\x00\x45\xb6\xd3\x39\x06\x78\xe9\x79\x9c\xf0\xe3\x72\x86\x60\xe0\x16\x9e\x79\x28\x4a\x3e\x02\x1d\xc8\x73\xa7\xf1\x45\xb4\x9b\xed\x43\x40\x07\x62\x1f\xbf\x2e\xfc\x65\x68\xc0\x65\x34\xa7\x05\x58\xe2\xb1\xf4\xf5\x32\x9a\x23\x1c\xb9\x36\xf3\x23\x1b\x91\xff\x88\xb0\xf1\x8c\x66\x73\xdf\x7f\xa4\x85\x23\xb2\x94\xca\xa6\x2e\x67\x63\xe1\x3b\x88\x96\xf8\x12\x17\x8e\x0b\xd9\x88\x44\x86\xe3\x12\xfa\xea\xf7\xab\xeb\xb3\x7f\x9e\xff\xc7\xf4\x6a\x72\xfb\xe1\x8f\x34\xb8\x1c\x0b\x7f\x10\x3c\xba\xe9\x47\x0f\xcc\xfb\x6f\x04\x88\x18\x7f\xfa\x61\x41\xca\x38\xe8\xae\xa6\xeb\x07\xd1\x81\x8d\xdd\x83\x99\x8b\xc5\xf2\xb6\x8f\xef\xd5\x1f\xb0\xec\x69\xd8\x3d\xc0\x28\x32\x9d\xe4\x13\x84\x59\x2a\x59\x9e\xd6\x13\x7a\x9e\x6f\x43\x16\x4a\xa6\x9f\xef\xed\xa5\xa5\x9e\x10\x8e\x8c\x3f\x03\xde\xd2\xc9\xd3\x7b\x04\xa3\x25\x41\xc6\x03\x8c\x10\x7b\xf3\xe1\x35\x40\xe4\xb7\xf4\x26\xbb\x13\xda\x8a\xfb\xf1\x20\x78\xff\xf1\x66\x72\x22\x36\x2b\x43\xce\x18\xc1\xd2\xf3\x8c\x80\xf8\x3c\x7b\xbe\x83\xa0\xe3\xb9\x98\x71\xef\x77\x17\x49\x51\xe6\x95\x27\x88\xdd\xc4\x40\x47\x49\xc7\x0e\x96\x27\xc3\x6e\x77\xb1\xcf\xd3\x29\xd2\xff\x7f\x74\xf7\x51\x30\x47\x0b\x44\xa0\x67\x84\x91\x4f\xe0\x03\x3a\xe9\xbd\x4f\xdb\x7a\x01\x1f\x91\xe1\x06\x71\xa4\x7d\x19\xb9\x9e\x61\xcf\xa1\xcb\xc6\xa3\xd4\xdd\x71\xdc\x32\xc6\xfd\x30\x6e\x38\xa5\x42\x10\x74\x0c\x1f\x7b\xaf\x46\xe0\x93\x48\x6a\x0d\x82\x42\xdf\x7b\x62\xed\x2f\x37\x1e\x4f\xb0\xe8\xe2\x07\xfa\x0e\xa7\x77\x40\x7b\xc8\x88\xf3\xf1\xe5\x6a\x1b\x27\x5a\xcd\xd7\xb7\xd7\x15\x2a\x6c\xbd\x57\x55\xd7\xca\xaa\x1b\x79\xa1\x61\xbb\xc1\x1c\x11\x23\x5c\xba\x71\xff\xdc\x5e\xdc\x4c\xcf\x4e\xdf\x7d\x38\xa3\xff\xde\x4c\xa6\x5f\xce\x6f\x3f\x4c\x27\x67\x37\xd3\x9e\x35\x9e\xbe\x3f\xfd\x38\xbd\xf9\x30\xb1\x86\xa3\xfd\xd2\x72\xd6\x70\x94\x94\xeb\x8f\x07\xea\x72\xa7\x1f\x26\xa7\x1f\x26\x56\x77\x7a\xf5\xe9\xe2\x3f\x7b\xfd\xee\x50\x28\x76\xdd\x88\xe9\x75\x23\x96\xd7\xa5\x0c\x93\x36\x78\x62\x56\x73\xfa\x17\x43\xe3\xc4\xdd\xda\x6c\xaa\xf2\x4f\x62\x00\x18\x55\x71\xdc\xbe\xe7\x03\x32\x20\xfe\xcb\x6b\xa6\x8a\x10\xa6\x23\xcb\x70\x42\x52\x98\xc6\x85\x79\xf2\xc5\xc5\x9f\x9e\x10\xf1\xe0\xab\x34\x23\xe2\x3b\x3e\xd8\x75\xc2\x86\xa0\xda\x52\xcc\x70\x52\x90\xb1\x4e\x35\xd1\x23\x22\x18\x79\x2c\x80\x95\xab\x79\x4e\xe2\xd3\xf4\x36\x42\x49\xab\xa6\xe7\x5a\xe2\xa7\xb2\x03\x4b\x6b\x68\xad\xa1\xb5\x86\xd6\x1a\x5a\x6b\xe8\x2d\xd5\xd0\x87\x5a\x43\x6b\x0d\xad\x35\xb4\xd6\xd0\x5a\x43\x6f\xa9\x86\x1e\x6b\x0d\xad\x35\xb4\xd6\xd0\x5a\x43\x6b\x0d\xbd\x5d\x1a\x3a\x76\x58\x9f\xba\x21\x3f\xa5\x72\x05\x09\x5c\xa4\x0e\xea\x2c\xca\xc7\x95\xf7\x0c\x61\x7b\xbe\x80\xe4\x51\x88\xc9\x92\x47\x64\xd8\x6e\x68\xf4\xcc\x61\x0e\xa0\xb6\xde\x67\xa3\xf5\x3e\x3b\x5c\xef\xb3\xf1\x4a\x9f\x65\xad\xf5\x4b\xae\xb4\x18\xda\xe4\x5f\x88\xc0\x57\x0c\x1f\xd8\xfc\x66\xa3\x85\x77\xc6\xc2\xc5\xbf\xa6\x19\x39\x64\x48\x43\x3f\x0e\x2c\x84\x8f\x6e\x10\x20\xe7\x74\x8e\xec\xc7\x50\xea\x49\xec\x47\x93\x80\x5d\x86\x3d\xf3\x90\xf4\x3e\xad\x5c\x22\xf6\xba\x42\x0c\x37\x21\x44\xd6\x7e\xaa\xd6\x60\xab\xc6\xba\x72\xc4\xb3\xb1\x67\xc6\x91\xdd\xce\x19\x9d\x97\x2e\x7e\x88\x4f\x5f\x5e\x2d\x3d\x7e\x7b\x51\xc8\xf2\x17\x2d\x43\x04\x42\xf7\x01\xbb\xf7\xae\x0d\x71\x04\x66\x10\x3b\xcf\xae\x13\xcd\xcd\x64\x2a\x31\xfc\x10\xa3\xf4\x65\x8e\x30\x78\x40\x98\x1d\xa6\xc4\x0f\xfc\x00\x26\x7e\x00\x74\xe9\x67\xdf\x47\x28\xdc\x07\xf7\x4b\x6c\xf3\x2b\x46\xdc\xe8\x15\xd8\xfe\xd2\x73\xc0\x8c\x20\xf8\x08\x5c\x0c\x6c\x1f\xff\x57\xfc\x1e\x3c\xbb\xd1\x9c\x9d\x61\xc3\x70\x81\x80\xff\x84\x08\x71\x1d\x14\x82\xe7\xb9\x6b\xcf\x01\x24\x28\x4d\x1b\x03\xee\x7d\xc2\xb8\x40\x4a\xc2\xf3\x97\x0e\x08\x88\xff\xe4\x3a\x88\x84\xb2\x9c\x03\xa9\xc6\x57\xbe\x03\x6e\xe2\x13\xa6\x80\x1f\x42\x65\x95\xb6\x21\xad\x36\xe4\x9d\xc4\x22\x4f\x20\xf2\xc1\x12\xa3\x97\x00\xd9\x11\x72\xbc\x57\x76\x2d\xbf\x44\xba\x2f\x93\x46\xd8\x26\xaf\x2c\x6a\x05\xec\x39\xc4\xb4\x39\xe7\xfe\x33\x70\x60\x04\x93\xbc\x50\x04\xd9\xb4\x52\xc8\x01\x30\xe4\x2f\xdc\x30\xf9\x0e\x39\x32\xf1\x61\x9b\xc4\xd9\x75\x29\x67\xd4\x82\xb9\x86\x11\xba\x70\x17\x6e\x04\x30\x42\x0e\xab\xf5\x0c\x81\x68\x89\x91\x03\x1c\x14\x20\x76\xba\x03\xf8\x18\x44\xf3\xf4\x9e\x2d\x81\x96\xc5\x81\x18\x13\x87\x15\x8b\xe6\x6e\x08\x20\x79\x58\x2e\x10\x8e\x40\x40\x98\x8d\x14\x82\x18\x7c\xb2\x17\x82\x85\x8f\xdd\xc8\x27\xac\xac\xef\x7b\x3c\x47\x96\xe7\x21\x3b\x4a\xae\x4f\x4a\x58\x65\xf9\x93\x32\x66\x7d\xf3\xb0\x1d\x66\x76\xba\x0a\x80\xe4\xaa\xc0\x8c\xeb\x80\x03\x14\x3a\x93\xf8\x52\xbb\xe4\x94\x31\x80\xfc\xac\x08\x6d\x66\x69\x58\x52\xbb\x9d\x77\x80\xe3\x12\x96\x7a\xe7\x15\xf8\xcf\x18\x91\x70\xee\x06\x26\xb8\x46\xf7\x88\x50\x61\x32\x49\xe7\x90\x38\x08\x53\x41\x1f\x96\xae\x83\x18\x95\x85\x4f\x10\x70\x50\x04\x5d\x8f\xc9\x49\xbb\x5b\x4a\x29\xc6\xea\x9f\xd1\xcd\x04\x3e\xe4\x7d\xd2\xc2\x98\x3f\xe4\x48\x97\x56\x28\xb7\x35\x4f\x0f\xcd\x61\x2b\x94\x2d\x33\xc6\xe5\x6c\xb9\x12\xa4\x72\xb2\xe9\x7e\xc3\x47\xaf\x87\x9e\x90\x97\x0e\xa3\xb8\xa6\x12\x55\x76\x9d\x23\xad\x3c\x23\x46\x17\x18\x3e\xdd\xb2\x7b\xf6\x5c\x0c\x7c\xe2\x20\xc2\x04\x90\xe7\x21\xd7\x1f\x21\x62\xff\xa3\xcb\x96\x29\x9a\x5c\xea\x85\x50\x58\xa0\x8e\x98\x4d\x3e\x47\x19\x41\xc3\x20\x28\x80\x2e\x31\x16\xd0\xbb\xf7\xc9\x02\x39\x06\x3f\x15\x47\xa7\x4d\x08\x66\x08\x61\x40\xd0\xc2\x7f\xe2\x8a\xcf\xbf\x07\xd9\xfa\x08\x9e\xf8\x02\x09\x7a\x66\x6f\x20\x29\x12\xd6\x22\xf1\x11\xc9\x30\xab\x28\x72\xc0\xec\x15\x5c\xff\x7a\x06\xe6\x10\x3b\x1e\x5d\x11\xb3\x4e\x04\x24\xce\x13\x17\xcf\x6b\xef\x15\x44\x73\xe2\x2f\x1f\xe6\xf4\x0b\x59\x63\xd4\x91\x77\x7c\x14\xe2\xbd\x28\x69\x74\x40\x27\x3c\x74\xd9\x26\x11\x40\xb9\x77\xc0\xbd\xeb\x71\x95\xc0\xf6\x7c\x30\x70\xd9\x26\x88\x98\x77\x78\xe2\xe5\x7a\x92\xea\xa2\x00\x86\x21\x72\x68\x1f\xc1\xac\x5f\x42\x00\xa3\x2c\x59\x17\x20\x4b\xcc\xee\x77\x93\x85\xee\x37\x91\x1a\x60\x3f\x02\x74\x77\x85\xd8\x90\xc8\x72\xa5\x25\x37\xca\xb3\x47\x5c\x2a\x60\x13\xe4\x20\x1c\xb9\xd0\x0b\x79\x35\x62\x85\xcb\xce\xdc\xca\xcc\x07\x7f\x23\x73\x6b\x17\xbb\xab\x51\x6f\xad\x2c\x74\xb6\x14\x1a\xc9\x52\xb8\x69\xc1\x1b\xf5\xf4\x36\x0a\x3e\x6c\x45\xf0\xcc\xd2\xd9\xb4\xbc\xb5\x4a\x6e\xcb\xe4\x3d\x6c\x45\x5e\x6a\x8e\x6d\x5c\xd4\xf1\x6e\x88\xca\x8c\x94\x5a\xed\xb6\xfe\x5a\xc7\xe8\xd7\x2a\xa2\x6f\xa3\x5f\xdb\xd4\x76\xf2\x0e\x62\x07\x2c\xfc\x30\xca\xdb\x42\x69\x27\x24\x56\x95\x68\x1d\x59\xb1\x15\x57\xdb\x99\xff\xf7\x3f\xff\xbb\x62\x77\x26\x4b\x94\x87\xa2\x0d\xf7\xaa\xd5\x50\xfb\x7f\x93\xcc\xc9\x46\x67\xe3\xb2\x37\x5b\x00\xb6\x53\xf6\xa3\x5d\x19\x2b\xcc\xea\x56\xb8\x97\x54\x7e\xae\x8d\xb9\x97\x76\x6b\xa3\x6c\xc5\xf7\xc6\xb6\xb0\xeb\xb4\xcc\x7e\xbf\x35\x07\x8e\xd5\xa6\xeb\xc9\xe2\x66\xc3\x76\x6f\x6a\x07\xa9\xda\xde\x7e\x39\xff\xde\xcd\x77\x2c\xc8\xd0\xe4\x33\xbf\x23\x6c\x8e\x63\x71\xb3\xbd\x53\x6e\xbe\x26\xce\xc0\x65\x28\x0c\x90\x61\xe2\xf2\xdb\xf8\xa4\x19\x26\xab\x5a\x2b\x94\xdb\x71\x2f\x51\xca\xed\xb8\x97\x86\xc9\x79\xba\x94\x72\x9c\x6b\x91\x13\x75\x63\x67\x7d\xec\xf6\x4c\x07\xa2\xc4\xe0\x9e\xf8\x0b\x96\xc2\x72\x89\xd9\x33\xfc\xc0\xc7\x37\x82\xf6\x1c\xf8\xd1\x5c\x70\x73\x0e\xcd\x11\x6f\x22\xd5\xf8\x80\xe9\x08\x49\x93\xdf\xac\xe6\xd5\xd9\x41\x77\x48\x13\xbb\xb6\x35\x8f\x44\xef\xef\x74\x87\xc4\xf1\xc8\xdd\xd9\x38\x26\xd7\xbf\xef\x92\xc0\xed\x6c\x75\x5b\xf7\x81\xc4\x61\xe0\x9d\x94\x7c\x07\x9d\x7c\xbd\x5d\x75\xf2\xf5\x76\xd5\xc9\xd7\xdb\x31\x27\x5f\x6f\xc7\x9c\x7c\xbd\xdd\x71\xf2\x35\xf0\x3c\x6d\x8b\xa8\xad\xc6\xb3\x06\x8d\x0d\xb8\xed\xf3\xd8\x0c\xd2\x20\xed\x2e\xb8\x6c\x04\xa1\x9b\x2d\x56\xdb\xd9\xe0\x3b\xe3\x22\x13\x9d\x09\x6d\x38\xc9\x53\x17\x5c\x0c\x86\x7b\xec\xa7\x70\x41\x82\x3c\x04\x43\x06\x7d\x64\x67\xed\xff\x4a\x10\xb9\x2f\xa7\x73\x88\x31\xf2\x6e\x98\x3d\x21\x78\xe0\x9e\x2c\x73\x90\xe6\x23\x64\x8e\xba\xca\x92\x5d\x83\xd8\x29\x38\xf2\x49\x78\xc9\x73\x38\xfd\xe3\xb1\x1f\xf6\x84\x3d\xdc\xc6\xf9\x0f\x2b\xf8\x8f\xcd\x91\xc0\x3f\x4e\x06\xf0\xd3\xd7\xff\x0f\x00\x00\xff\xff\xf3\x1c\x4b\x6d\x14\x35\x0b\x00") func dataDataJsonBytes() ([]byte, error) { return bindataRead( @@ -92,7 +92,7 @@ func dataDataJson() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "data/data.json", size: 653379, mode: os.FileMode(420), modTime: time.Unix(1557785965, 0)} + info := bindataFileInfo{name: "data/data.json", size: 734484, mode: os.FileMode(420), modTime: time.Unix(1557785965, 0)} a := &asset{bytes: bytes, info: info} return a, nil } diff --git a/data/data.json b/data/data.json index 13ae5dba..f9250fe7 100755 --- a/data/data.json +++ b/data/data.json @@ -704,6 +704,266 @@ "v": "2" } }, + "v1.15.12-rancher1-1": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, + "v1.15.12-rancher2-2": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, + "v1.15.12-rancher2-3": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, + "v1.15.12-rancher2-5": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, "v1.15.6-rancher1-2": { "etcd": { "client-cert-auth": "true", @@ -961,6 +1221,201 @@ "v": "2" } }, + "v1.16.10-rancher2-2": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, + "v1.16.13-rancher1-1": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, + "v1.16.13-rancher1-2": { + "etcd": { + "client-cert-auth": "true", + "peer-client-cert-auth": "true" + }, + "kubeapi": { + "allow-privileged": "true", + "anonymous-auth": "false", + "bind-address": "0.0.0.0", + "enable-admission-plugins": "NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,NodeRestriction,Priority,TaintNodesByCondition,PersistentVolumeClaimResize", + "insecure-port": "0", + "kubelet-preferred-address-types": "InternalIP,ExternalIP,Hostname", + "profiling": "false", + "requestheader-extra-headers-prefix": "X-Remote-Extra-", + "requestheader-group-headers": "X-Remote-Group", + "requestheader-username-headers": "X-Remote-User", + "runtime-config": "authorization.k8s.io/v1beta1=true", + "secure-port": "6443", + "service-account-lookup": "true", + "storage-backend": "etcd3", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" + }, + "kubelet": { + "address": "0.0.0.0", + "anonymous-auth": "false", + "authentication-token-webhook": "true", + "authorization-mode": "Webhook", + "cgroups-per-qos": "True", + "cni-bin-dir": "/opt/cni/bin", + "cni-conf-dir": "/etc/cni/net.d", + "enforce-node-allocatable": "", + "event-qps": "0", + "make-iptables-util-chains": "true", + "network-plugin": "cni", + "read-only-port": "0", + "resolv-conf": "/etc/resolv.conf", + "streaming-connection-idle-timeout": "30m", + "tls-cipher-suites": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305", + "v": "2", + "volume-plugin-dir": "/var/lib/kubelet/volumeplugins" + }, + "kubeproxy": { + "healthz-bind-address": "127.0.0.1", + "v": "2" + }, + "kubeController": { + "address": "0.0.0.0", + "allocate-node-cidrs": "true", + "allow-untagged-cloud": "true", + "configure-cloud-routes": "false", + "enable-hostpath-provisioner": "false", + "leader-elect": "true", + "node-monitor-grace-period": "40s", + "pod-eviction-timeout": "5m0s", + "profiling": "false", + "terminated-pod-gc-threshold": "1000", + "v": "2" + }, + "scheduler": { + "address": "0.0.0.0", + "leader-elect": "true", + "profiling": "false", + "v": "2" + } + }, "v1.16.3-rancher1-1": { "etcd": { "client-cert-auth": "true", @@ -3403,6 +3858,35 @@ "metricsServer": "rancher/metrics-server:v0.3.3", "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.3" }, + "v1.15.12-rancher1-1": { + "etcd": "rancher/coreos-etcd:v3.3.10-rancher1", + "alpine": "rancher/rke-tools:v0.1.56", + "nginxProxy": "rancher/rke-tools:v0.1.56", + "certDownloader": "rancher/rke-tools:v0.1.56", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.56", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "coredns": "rancher/coredns-coredns:1.3.1", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "kubernetes": "rancher/hyperkube:v1.15.12-rancher1", + "flannel": "rancher/coreos-flannel:v0.11.0-rancher1", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.8.9", + "calicoCni": "rancher/calico-cni:v3.8.9", + "calicoControllers": "rancher/calico-kube-controllers:v3.8.9", + "calicoCtl": "rancher/calico-ctl:v3.8.9", + "canalNode": "rancher/calico-node:v3.8.9", + "canalCni": "rancher/calico-cni:v3.8.9", + "canalFlannel": "rancher/coreos-flannel:v0.11.0", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.3" + }, "v1.15.12-rancher2-2": { "etcd": "rancher/coreos-etcd:v3.3.10-rancher1", "alpine": "rancher/rke-tools:v0.1.56", @@ -3428,14 +3912,113 @@ "canalCni": "rancher/calico-cni:v3.13.4", "canalFlannel": "rancher/coreos-flannel:v0.11.0", "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", - "weaveNode": "weaveworks/weave-kube:2.6.3", - "weaveCni": "weaveworks/weave-npc:2.6.3", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", "podInfraContainer": "rancher/pause:3.1", "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", "metricsServer": "rancher/metrics-server:v0.3.3", "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.3" }, + "v1.15.12-rancher2-3": { + "etcd": "rancher/coreos-etcd:v3.3.10-rancher1", + "alpine": "rancher/rke-tools:v0.1.58", + "nginxProxy": "rancher/rke-tools:v0.1.58", + "certDownloader": "rancher/rke-tools:v0.1.58", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.58", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "coredns": "rancher/coredns-coredns:1.3.1", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.15.12-rancher2", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.3", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.15.12-rancher2-4": { + "etcd": "rancher/coreos-etcd:v3.3.10-rancher1", + "alpine": "rancher/rke-tools:v0.1.59", + "nginxProxy": "rancher/rke-tools:v0.1.59", + "certDownloader": "rancher/rke-tools:v0.1.59", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.59", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "coredns": "rancher/coredns-coredns:1.3.1", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.15.12-rancher2", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.3", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.15.12-rancher2-5": { + "etcd": "rancher/coreos-etcd:v3.3.10-rancher1", + "alpine": "rancher/rke-tools:v0.1.61", + "nginxProxy": "rancher/rke-tools:v0.1.61", + "certDownloader": "rancher/rke-tools:v0.1.61", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.61", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "coredns": "rancher/coredns-coredns:1.3.1", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.3.0", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.15.12-rancher2", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.3", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, "v1.15.2-rancher1-1": { "etcd": "rancher/coreos-etcd:v3.3.10-rancher1", "alpine": "rancher/rke-tools:v0.1.40", @@ -3788,14 +4371,113 @@ "canalCni": "rancher/calico-cni:v3.13.4", "canalFlannel": "rancher/coreos-flannel:v0.11.0", "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", - "weaveNode": "weaveworks/weave-kube:2.6.3", - "weaveCni": "weaveworks/weave-npc:2.6.3", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", "podInfraContainer": "rancher/pause:3.1", "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", "metricsServer": "rancher/metrics-server:v0.3.4", "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.3" }, + "v1.16.10-rancher2-2": { + "etcd": "rancher/coreos-etcd:v3.3.15-rancher1", + "alpine": "rancher/rke-tools:v0.1.58", + "nginxProxy": "rancher/rke-tools:v0.1.58", + "certDownloader": "rancher/rke-tools:v0.1.58", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.58", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.2", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.16.10-rancher2", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.4", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.16.13-rancher1-1": { + "etcd": "rancher/coreos-etcd:v3.3.15-rancher1", + "alpine": "rancher/rke-tools:v0.1.59", + "nginxProxy": "rancher/rke-tools:v0.1.59", + "certDownloader": "rancher/rke-tools:v0.1.59", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.59", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.2", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.16.13-rancher1", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.4", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.16.13-rancher1-2": { + "etcd": "rancher/coreos-etcd:v3.3.15-rancher1", + "alpine": "rancher/rke-tools:v0.1.61", + "nginxProxy": "rancher/rke-tools:v0.1.61", + "certDownloader": "rancher/rke-tools:v0.1.61", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.61", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.2", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.16.13-rancher1", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.4", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, "v1.16.2-rancher1-1": { "etcd": "rancher/coreos-etcd:v3.3.15-rancher1", "alpine": "rancher/rke-tools:v0.1.50", @@ -4391,14 +5073,113 @@ "canalCni": "rancher/calico-cni:v3.13.4", "canalFlannel": "rancher/coreos-flannel:v0.11.0", "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", - "weaveNode": "weaveworks/weave-kube:2.6.3", - "weaveCni": "weaveworks/weave-npc:2.6.3", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", "podInfraContainer": "rancher/pause:3.1", "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", "metricsServer": "rancher/metrics-server:v0.3.6", "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.3" }, + "v1.17.6-rancher2-2": { + "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", + "alpine": "rancher/rke-tools:v0.1.58", + "nginxProxy": "rancher/rke-tools:v0.1.58", + "certDownloader": "rancher/rke-tools:v0.1.58", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.58", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.5", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.17.6-rancher2", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.6", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.17.9-rancher1-1": { + "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", + "alpine": "rancher/rke-tools:v0.1.59", + "nginxProxy": "rancher/rke-tools:v0.1.59", + "certDownloader": "rancher/rke-tools:v0.1.59", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.59", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.5", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.17.9-rancher1", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.6", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.17.9-rancher1-2": { + "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", + "alpine": "rancher/rke-tools:v0.1.61", + "nginxProxy": "rancher/rke-tools:v0.1.61", + "certDownloader": "rancher/rke-tools:v0.1.61", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.61", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.0", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.0", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.0", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.5", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.17.9-rancher1", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.6", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, "v1.18.3-rancher2-1": { "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", "alpine": "rancher/rke-tools:v0.1.56", @@ -4424,14 +5205,113 @@ "canalCni": "rancher/calico-cni:v3.13.4", "canalFlannel": "rancher/coreos-flannel:v0.11.0", "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", - "weaveNode": "weaveworks/weave-kube:2.6.3", - "weaveCni": "weaveworks/weave-npc:2.6.3", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", "podInfraContainer": "rancher/pause:3.1", "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", "metricsServer": "rancher/metrics-server:v0.3.6", "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.3" }, + "v1.18.3-rancher2-2": { + "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", + "alpine": "rancher/rke-tools:v0.1.58", + "nginxProxy": "rancher/rke-tools:v0.1.58", + "certDownloader": "rancher/rke-tools:v0.1.58", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.58", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.2", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.2", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.2", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.9", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.18.3-rancher2", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.6", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.18.6-rancher1-1": { + "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", + "alpine": "rancher/rke-tools:v0.1.59", + "nginxProxy": "rancher/rke-tools:v0.1.59", + "certDownloader": "rancher/rke-tools:v0.1.59", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.59", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.2", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.2", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.2", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.9", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.18.6-rancher1", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.6", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, + "v1.18.6-rancher1-2": { + "etcd": "rancher/coreos-etcd:v3.4.3-rancher1", + "alpine": "rancher/rke-tools:v0.1.61", + "nginxProxy": "rancher/rke-tools:v0.1.61", + "certDownloader": "rancher/rke-tools:v0.1.61", + "kubernetesServicesSidecar": "rancher/rke-tools:v0.1.61", + "kubedns": "rancher/k8s-dns-kube-dns:1.15.2", + "dnsmasq": "rancher/k8s-dns-dnsmasq-nanny:1.15.2", + "kubednsSidecar": "rancher/k8s-dns-sidecar:1.15.2", + "kubednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "coredns": "rancher/coredns-coredns:1.6.9", + "corednsAutoscaler": "rancher/cluster-proportional-autoscaler:1.7.1", + "nodelocal": "rancher/k8s-dns-node-cache:1.15.7", + "kubernetes": "rancher/hyperkube:v1.18.6-rancher1", + "flannel": "rancher/coreos-flannel:v0.12.0", + "flannelCni": "rancher/flannel-cni:v0.3.0-rancher6", + "calicoNode": "rancher/calico-node:v3.13.4", + "calicoCni": "rancher/calico-cni:v3.13.4", + "calicoControllers": "rancher/calico-kube-controllers:v3.13.4", + "calicoCtl": "rancher/calico-ctl:v3.13.4", + "calicoFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "canalNode": "rancher/calico-node:v3.13.4", + "canalCni": "rancher/calico-cni:v3.13.4", + "canalFlannel": "rancher/coreos-flannel:v0.12.0", + "canalFlexVol": "rancher/calico-pod2daemon-flexvol:v3.13.4", + "weaveNode": "weaveworks/weave-kube:2.6.4", + "weaveCni": "weaveworks/weave-npc:2.6.4", + "podInfraContainer": "rancher/pause:3.1", + "ingress": "rancher/nginx-ingress-controller:nginx-0.32.0-rancher1", + "ingressBackend": "rancher/nginx-ingress-controller-defaultbackend:1.5-rancher1", + "metricsServer": "rancher/metrics-server:v0.3.6", + "windowsPodInfraContainer": "rancher/kubelet-pause:v0.1.4" + }, "v1.8.11-rancher2-1": { "etcd": "rancher/coreos-etcd:v3.0.17", "alpine": "rancher/rke-tools:v0.1.8", @@ -4538,7 +5418,9 @@ "calico": { "\u003e=1.13.0-rancher0 \u003c1.15.0-rancher0": "calico-v1.13", "\u003e=1.15.0-rancher0 \u003c1.15.11-rancher1-1": "calico-v1.15", - "\u003e=1.15.11-rancher1-1 \u003c1.16.0-alpha": "calico-v1.15-privileged", + "\u003e=1.15.11-rancher1-1 \u003c1.15.12-rancher1-1": "calico-v1.15-privileged", + "\u003e=1.15.12-rancher1-1 \u003c1.15.12-rancher2-2": "calico-v1.15.12", + "\u003e=1.15.12-rancher2-2 \u003c1.16.0-alpha": "calico-v1.15-privileged", "\u003e=1.16.0-alpha \u003c1.16.4-rancher1": "calico-v1.16", "\u003e=1.16.4-rancher1 \u003c1.16.8-rancher0": "calico-v1.17", "\u003e=1.16.8-rancher0 \u003c1.17.0-rancher0": "calico-v1.17-privileged", @@ -4549,7 +5431,8 @@ "canal": { "\u003e=1.13.0-rancher0 \u003c1.15.0-rancher0": "canal-v1.13", "\u003e=1.15.0-rancher0 \u003c1.15.11-rancher1-1": "canal-v1.15", - "\u003e=1.15.11-rancher1-1 \u003c1.15.12-rancher2-2": "canal-v1.15-privileged", + "\u003e=1.15.11-rancher1-1 \u003c1.15.12-rancher1-1": "canal-v1.15-privileged", + "\u003e=1.15.12-rancher1-1 \u003c1.15.12-rancher2-2": "canal-v1.15.12", "\u003e=1.15.12-rancher2-2 \u003c1.16.0-alpha": "canal-v1.15-privileged-calico3134", "\u003e=1.16.0-alpha \u003c1.16.4-rancher1": "canal-v1.16", "\u003e=1.16.10-rancher2-1 \u003c1.17.0-rancher0": "canal-v1.17-privileged-calico3134", @@ -4582,8 +5465,8 @@ "\u003e=1.14.0-rancher0 \u003c=1.14.6-rancher1-1": "nginxingress-v1.8", "\u003e=1.14.6-rancher2 \u003c1.15.0-rancher0": "nginxingress-v1.15", "\u003e=1.15.0-rancher0 \u003c=1.15.3-rancher1-1": "nginxingress-v1.8", - "\u003e=1.15.12-rancher1-2 \u003c1.16.1-rancher1-1": "nginxingress-v1.15.12", - "\u003e=1.15.3-rancher2 \u003c1.15.12-rancher1-2": "nginxingress-v1.15", + "\u003e=1.15.12-rancher1-1 \u003c1.16.1-rancher1-1": "nginxingress-v1.15.12", + "\u003e=1.15.3-rancher2 \u003c1.15.12-rancher1-1": "nginxingress-v1.15", "\u003e=1.16.1-rancher1-1 \u003c1.16.10-rancher1-1": "nginxingress-v1.15", "\u003e=1.16.10-rancher1-1 \u003c1.17.0-rancher1-1": "nginxingress-v1.15.12", "\u003e=1.17.0-rancher1-1 \u003c1.17.6-rancher1-1": "nginxingress-v1.15", @@ -4599,6 +5482,7 @@ "calico-v1.13": "\n{{if eq .RBACConfig \"rbac\"}}\n## start rbac here\n\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n## end rbac here\n\n---\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # To enable Typha, set this to \"calico-typha\" *and* set a non-zero value for Typha replicas\n # below. We recommend using Typha if you have more than 50 nodes. Above 100 nodes it is\n # essential.\n typha_service_name: \"none\"\n # Configure the Calico backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.0\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n---\n\n# This manifest installs the calico/node container, as well\n# as the Calico CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: extensions/v1beta1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n affinity:\n nodeAffinity:\n requiredDuringSchedulingIgnoredDuringExecution:\n nodeSelectorTerms:\n - matchExpressions:\n - key: beta.kubernetes.io/os\n operator: NotIn\n values:\n - windows\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n serviceAccountName: calico-node\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n initContainers:\n # This container installs the Calico CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n containers:\n # Runs calico/node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Typha support: controlled by the ConfigMap.\n - name: FELIX_TYPHAK8SSERVICENAME\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: typha_service_name\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Enable felix logging to stdout\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -bird-ready\n - -felix-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n volumes:\n # Used by calico/node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n\n# Create all the CustomResourceDefinitions needed for\n# Calico policy and networking mode.\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n\n\n{{if ne .CloudProvider \"none\"}}\n---\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: {{.CloudProvider}}-ippool\n namespace: kube-system\ndata:\n {{.CloudProvider}}-ippool: |-\n apiVersion: projectcalico.org/v3\n kind: IPPool\n metadata:\n name: ippool-ipip-1\n spec:\n cidr: {{.ClusterCIDR}}\n ipipMode: Always\n natOutgoing: true\n---\napiVersion: v1\nkind: Pod\nmetadata:\n name: calicoctl\n namespace: kube-system\nspec:\n hostNetwork: true\n restartPolicy: OnFailure\n tolerations:\n - effect: NoExecute\n operator: Exists\n - effect: NoSchedule\n operator: Exists\n containers:\n - name: calicoctl\n image: {{.Calicoctl}}\n command: [\"/bin/sh\", \"-c\", \"calicoctl apply -f {{.CloudProvider}}-ippool.yaml\"]\n env:\n - name: DATASTORE_TYPE\n value: kubernetes\n volumeMounts:\n - name: ippool-config\n mountPath: /root/\n volumes:\n - name: ippool-config\n configMap:\n name: {{.CloudProvider}}-ippool\n items:\n - key: {{.CloudProvider}}-ippool\n path: {{.CloudProvider}}-ippool.yaml\n # Mount in the etcd TLS secrets.\n{{end}}\n", "calico-v1.15": "\n{{if eq .RBACConfig \"rbac\"}}\n---\n# Source: calico/templates/rbac.yaml\n# Include a clusterrole for the kube-controllers component,\n# and bind it to the calico-kube-controllers serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-kube-controllers\nrules:\n # Nodes are watched to monitor for deletions.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - watch\n - list\n - get\n # Pods are queried to check for existence.\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n # IPAM resources are manipulated when nodes are deleted.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n verbs:\n - list\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n # Needs access to update clusterinformations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - clusterinformations\n verbs:\n - get\n - create\n - update\n---\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-kube-controllers\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-kube-controllers\nsubjects:\n- kind: ServiceAccount\n name: calico-kube-controllers\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n # These permissions are required for Calico CNI to perform IPAM allocations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ipamconfigs\n verbs:\n - get\n # Block affinities must also be watchable by confd for route aggregation.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n verbs:\n - watch\n # The Calico IPAM migration needs to get daemonsets. These permissions can be\n # removed if not upgrading from an installation using host-local IPAM.\n - apiGroups: [\"apps\"]\n resources:\n - daemonsets\n verbs:\n - get\n---\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # Configure the backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.0\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"info\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"calico-ipam\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the calico-node container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: extensions/v1beta1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n hostNetwork: true\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-node\n{{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n initContainers:\n # This container performs upgrade from host-local IPAM to calico-ipam.\n # It can be deleted if this is a fresh installation, or if you have already\n # upgraded to use calico-ipam.\n - name: upgrade-ipam\n image: {{.CNIImage}}\n command: [\"/opt/cni/bin/calico-ipam\", \"-upgrade\"]\n env:\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n volumeMounts:\n - mountPath: /var/lib/cni/networks\n name: host-local-net-dir\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n containers:\n # Runs calico-node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"info\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -bird-ready\n - -felix-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n volumes:\n # Used by calico-node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Mount in the directory for host-local IPAM allocations. This is\n # used when upgrading from host-local to calico-ipam, and can be removed\n # if not using the upgrade-ipam init container.\n - name: host-local-net-dir\n hostPath:\n path: /var/lib/cni/networks\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n---\n# Source: calico/templates/calico-kube-controllers.yaml\n# See https://github.com/projectcalico/kube-controllers\napiVersion: extensions/v1beta1\nkind: Deployment\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n annotations:\n scheduler.alpha.kubernetes.io/critical-pod: ''\nspec:\n # The controller can only have a single active instance.\n replicas: 1\n strategy:\n type: Recreate\n template:\n metadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-kube-controllers\n{{end}}\n containers:\n - name: calico-kube-controllers\n image: {{.ControllersImage}}\n env:\n # Choose which controllers to run.\n - name: ENABLED_CONTROLLERS\n value: node\n - name: DATASTORE_TYPE\n value: kubernetes\n readinessProbe:\n exec:\n command:\n - /usr/bin/check-status\n - -r\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n", "calico-v1.15-privileged": "\n# CalicoTemplateV115Privileged\n{{if eq .RBACConfig \"rbac\"}}\n# Source: calico/templates/rbac.yaml\n# Include a clusterrole for the kube-controllers component,\n# and bind it to the calico-kube-controllers serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nrules:\n # Nodes are watched to monitor for deletions.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - watch\n - list\n - get\n # Pods are queried to check for existence.\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n # IPAM resources are manipulated when nodes are deleted.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n verbs:\n - list\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n # Needs access to update clusterinformations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - clusterinformations\n verbs:\n - get\n - create\n - update\n---\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-kube-controllers\nsubjects:\n- kind: ServiceAccount\n name: calico-kube-controllers\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n # Pod CIDR auto-detection on kubeadm needs access to config maps.\n - apiGroups: [\"\"]\n resources:\n - configmaps\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n # These permissions are required for Calico CNI to perform IPAM allocations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ipamconfigs\n verbs:\n - get\n # Block affinities must also be watchable by confd for route aggregation.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n verbs:\n - watch\n # The Calico IPAM migration needs to get daemonsets. These permissions can be\n # removed if not upgrading from an installation using host-local IPAM.\n - apiGroups: [\"apps\"]\n resources:\n - daemonsets\n verbs:\n - get\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # Configure the backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"info\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"calico-ipam\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n },\n {\n \"type\": \"bandwidth\",\n \"capabilities\": {\"bandwidth\": true}\n }\n ]\n }\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the calico-node container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n hostNetwork: true\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-node\n{{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container performs upgrade from host-local IPAM to calico-ipam.\n # It can be deleted if this is a fresh installation, or if you have already\n # upgraded to use calico-ipam.\n - name: upgrade-ipam\n image: {{.CNIImage}}\n command: [\"/opt/cni/bin/calico-ipam\", \"-upgrade\"]\n env:\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n volumeMounts:\n - mountPath: /var/lib/cni/networks\n name: host-local-net-dir\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n securityContext:\n privileged: true\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n securityContext:\n privileged: true\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n securityContext:\n privileged: true\n containers:\n # Runs calico-node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"info\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-live\n - -bird-live\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-ready\n - -bird-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n volumes:\n # Used by calico-node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Mount in the directory for host-local IPAM allocations. This is\n # used when upgrading from host-local to calico-ipam, and can be removed\n # if not using the upgrade-ipam init container.\n - name: host-local-net-dir\n hostPath:\n path: /var/lib/cni/networks\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n---\n# Source: calico/templates/calico-kube-controllers.yaml\n# See https://github.com/projectcalico/kube-controllers\napiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\nspec:\n # The controllers can only have a single active instance.\n replicas: 1\n selector:\n matchLabels:\n k8s-app: calico-kube-controllers\n strategy:\n type: Recreate\n template:\n metadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n annotations:\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-kube-controllers\n{{end}}\n priorityClassName: system-cluster-critical\n containers:\n - name: calico-kube-controllers\n image: {{.ControllersImage}}\n env:\n # Choose which controllers to run.\n - name: ENABLED_CONTROLLERS\n value: node\n - name: DATASTORE_TYPE\n value: kubernetes\n readinessProbe:\n exec:\n command:\n - /usr/bin/check-status\n - -r\n", + "calico-v1.15.12": "\n{{if eq .RBACConfig \"rbac\"}}\n---\n# Source: calico/templates/rbac.yaml\n# Include a clusterrole for the kube-controllers component,\n# and bind it to the calico-kube-controllers serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-kube-controllers\nrules:\n # Nodes are watched to monitor for deletions.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - watch\n - list\n - get\n # Pods are queried to check for existence.\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n # IPAM resources are manipulated when nodes are deleted.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n verbs:\n - list\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n # Needs access to update clusterinformations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - clusterinformations\n verbs:\n - get\n - create\n - update\n---\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-kube-controllers\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-kube-controllers\nsubjects:\n- kind: ServiceAccount\n name: calico-kube-controllers\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n # These permissions are required for Calico CNI to perform IPAM allocations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ipamconfigs\n verbs:\n - get\n # Block affinities must also be watchable by confd for route aggregation.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n verbs:\n - watch\n # The Calico IPAM migration needs to get daemonsets. These permissions can be\n # removed if not upgrading from an installation using host-local IPAM.\n - apiGroups: [\"apps\"]\n resources:\n - daemonsets\n verbs:\n - get\n---\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # Configure the backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.0\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"info\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"calico-ipam\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the calico-node container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: extensions/v1beta1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n hostNetwork: true\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-node\n{{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n initContainers:\n # This container performs upgrade from host-local IPAM to calico-ipam.\n # It can be deleted if this is a fresh installation, or if you have already\n # upgraded to use calico-ipam.\n - name: upgrade-ipam\n image: {{.CNIImage}}\n command: [\"/opt/cni/bin/calico-ipam\", \"-upgrade\"]\n env:\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n volumeMounts:\n - mountPath: /var/lib/cni/networks\n name: host-local-net-dir\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n containers:\n # Runs calico-node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"info\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -bird-ready\n - -felix-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n volumes:\n # Used by calico-node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Mount in the directory for host-local IPAM allocations. This is\n # used when upgrading from host-local to calico-ipam, and can be removed\n # if not using the upgrade-ipam init container.\n - name: host-local-net-dir\n hostPath:\n path: /var/lib/cni/networks\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n---\n# Source: calico/templates/calico-kube-controllers.yaml\n# See https://github.com/projectcalico/kube-controllers\napiVersion: extensions/v1beta1\nkind: Deployment\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n annotations:\n scheduler.alpha.kubernetes.io/critical-pod: ''\nspec:\n # The controller can only have a single active instance.\n replicas: 1\n strategy:\n type: Recreate\n template:\n metadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-kube-controllers\n{{end}}\n containers:\n - name: calico-kube-controllers\n image: {{.ControllersImage}}\n env:\n # Choose which controllers to run.\n - name: ENABLED_CONTROLLERS\n value: node\n - name: DATASTORE_TYPE\n value: kubernetes\n readinessProbe:\n exec:\n command:\n - /usr/bin/check-status\n - -r\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n", "calico-v1.16": "\n{{if eq .RBACConfig \"rbac\"}}\n# Source: calico/templates/rbac.yaml\n\n# Include a clusterrole for the kube-controllers component,\n# and bind it to the calico-kube-controllers serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nrules:\n # Nodes are watched to monitor for deletions.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - watch\n - list\n - get\n # Pods are queried to check for existence.\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n # IPAM resources are manipulated when nodes are deleted.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n verbs:\n - list\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n # Needs access to update clusterinformations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - clusterinformations\n verbs:\n - get\n - create\n - update\n---\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-kube-controllers\nsubjects:\n- kind: ServiceAccount\n name: calico-kube-controllers\n namespace: kube-system\n---\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n # These permissions are required for Calico CNI to perform IPAM allocations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ipamconfigs\n verbs:\n - get\n # Block affinities must also be watchable by confd for route aggregation.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n verbs:\n - watch\n # The Calico IPAM migration needs to get daemonsets. These permissions can be\n # removed if not upgrading from an installation using host-local IPAM.\n - apiGroups: [\"apps\"]\n resources:\n - daemonsets\n verbs:\n - get\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # Configure the backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"info\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"calico-ipam\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n---\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the calico-node container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n hostNetwork: true\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-node\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container performs upgrade from host-local IPAM to calico-ipam.\n # It can be deleted if this is a fresh installation, or if you have already\n # upgraded to use calico-ipam.\n - name: upgrade-ipam\n image: {{.CNIImage}}\n command: [\"/opt/cni/bin/calico-ipam\", \"-upgrade\"]\n env:\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n volumeMounts:\n - mountPath: /var/lib/cni/networks\n name: host-local-net-dir\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n containers:\n # Runs calico-node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"info\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -bird-ready\n - -felix-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n volumes:\n # Used by calico-node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Mount in the directory for host-local IPAM allocations. This is\n # used when upgrading from host-local to calico-ipam, and can be removed\n # if not using the upgrade-ipam init container.\n - name: host-local-net-dir\n hostPath:\n path: /var/lib/cni/networks\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n---\n# Source: calico/templates/calico-kube-controllers.yaml\n\n# See https://github.com/projectcalico/kube-controllers\napiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\nspec:\n # The controllers can only have a single active instance.\n replicas: 1\n selector:\n matchLabels:\n k8s-app: calico-kube-controllers\n strategy:\n type: Recreate\n template:\n metadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n annotations:\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-kube-controllers\n{{end}}\n priorityClassName: system-cluster-critical\n containers:\n - name: calico-kube-controllers\n image: {{.ControllersImage}}\n env:\n # Choose which controllers to run.\n - name: ENABLED_CONTROLLERS\n value: node\n - name: DATASTORE_TYPE\n value: kubernetes\n readinessProbe:\n exec:\n command:\n - /usr/bin/check-status\n - -r\n", "calico-v1.17": "\n{{if eq .RBACConfig \"rbac\"}}\n# Source: calico/templates/rbac.yaml\n\n# Include a clusterrole for the kube-controllers component,\n# and bind it to the calico-kube-controllers serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nrules:\n # Nodes are watched to monitor for deletions.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - watch\n - list\n - get\n # Pods are queried to check for existence.\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n # IPAM resources are manipulated when nodes are deleted.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n verbs:\n - list\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n # Needs access to update clusterinformations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - clusterinformations\n verbs:\n - get\n - create\n - update\n---\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-kube-controllers\nsubjects:\n- kind: ServiceAccount\n name: calico-kube-controllers\n namespace: kube-system\n---\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n # These permissions are required for Calico CNI to perform IPAM allocations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ipamconfigs\n verbs:\n - get\n # Block affinities must also be watchable by confd for route aggregation.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n verbs:\n - watch\n # The Calico IPAM migration needs to get daemonsets. These permissions can be\n # removed if not upgrading from an installation using host-local IPAM.\n - apiGroups: [\"apps\"]\n resources:\n - daemonsets\n verbs:\n - get\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # Configure the backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"info\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"calico-ipam\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n---\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the calico-node container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n hostNetwork: true\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-node\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container performs upgrade from host-local IPAM to calico-ipam.\n # It can be deleted if this is a fresh installation, or if you have already\n # upgraded to use calico-ipam.\n - name: upgrade-ipam\n image: {{.CNIImage}}\n command: [\"/opt/cni/bin/calico-ipam\", \"-upgrade\"]\n env:\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n volumeMounts:\n - mountPath: /var/lib/cni/networks\n name: host-local-net-dir\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n containers:\n # Runs calico-node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"info\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -bird-ready\n - -felix-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n volumes:\n # Used by calico-node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Mount in the directory for host-local IPAM allocations. This is\n # used when upgrading from host-local to calico-ipam, and can be removed\n # if not using the upgrade-ipam init container.\n - name: host-local-net-dir\n hostPath:\n path: /var/lib/cni/networks\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n---\n# Source: calico/templates/calico-kube-controllers.yaml\n\n# See https://github.com/projectcalico/kube-controllers\napiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\nspec:\n # The controllers can only have a single active instance.\n replicas: 1\n selector:\n matchLabels:\n k8s-app: calico-kube-controllers\n strategy:\n type: Recreate\n template:\n metadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n annotations:\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n beta.kubernetes.io/os: linux\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-kube-controllers\n{{end}}\n priorityClassName: system-cluster-critical\n containers:\n - name: calico-kube-controllers\n image: {{.ControllersImage}}\n env:\n # Choose which controllers to run.\n - name: ENABLED_CONTROLLERS\n value: node\n - name: DATASTORE_TYPE\n value: kubernetes\n readinessProbe:\n exec:\n command:\n - /usr/bin/check-status\n - -r\n", "calico-v1.17-privileged": "\n# CalicoTemplateV117Privileged\n{{if eq .RBACConfig \"rbac\"}}\n# Source: calico/templates/rbac.yaml\n# Include a clusterrole for the kube-controllers component,\n# and bind it to the calico-kube-controllers serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nrules:\n # Nodes are watched to monitor for deletions.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - watch\n - list\n - get\n # Pods are queried to check for existence.\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n # IPAM resources are manipulated when nodes are deleted.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n verbs:\n - list\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n # Needs access to update clusterinformations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - clusterinformations\n verbs:\n - get\n - create\n - update\n---\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-kube-controllers\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-kube-controllers\nsubjects:\n- kind: ServiceAccount\n name: calico-kube-controllers\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n # Pod CIDR auto-detection on kubeadm needs access to config maps.\n - apiGroups: [\"\"]\n resources:\n - configmaps\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n # These permissions are required for Calico CNI to perform IPAM allocations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n - ipamblocks\n - ipamhandles\n verbs:\n - get\n - list\n - create\n - update\n - delete\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ipamconfigs\n verbs:\n - get\n # Block affinities must also be watchable by confd for route aggregation.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - blockaffinities\n verbs:\n - watch\n # The Calico IPAM migration needs to get daemonsets. These permissions can be\n # removed if not upgrading from an installation using host-local IPAM.\n - apiGroups: [\"apps\"]\n resources:\n - daemonsets\n verbs:\n - get\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Calico installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: calico-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # Configure the backend to use.\n calico_backend: \"bird\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1440\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"info\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"calico-ipam\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n },\n {\n \"type\": \"bandwidth\",\n \"capabilities\": {\"bandwidth\": true}\n }\n ]\n }\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the calico-node container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: calico-node\n namespace: kube-system\n labels:\n k8s-app: calico-node\nspec:\n selector:\n matchLabels:\n k8s-app: calico-node\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: calico-node\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n hostNetwork: true\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-node\n{{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container performs upgrade from host-local IPAM to calico-ipam.\n # It can be deleted if this is a fresh installation, or if you have already\n # upgraded to use calico-ipam.\n - name: upgrade-ipam\n image: {{.CNIImage}}\n command: [\"/opt/cni/bin/calico-ipam\", \"-upgrade\"]\n env:\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n volumeMounts:\n - mountPath: /var/lib/cni/networks\n name: host-local-net-dir\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n securityContext:\n privileged: true\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-calico.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n securityContext:\n privileged: true\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n securityContext:\n privileged: true\n containers:\n # Runs calico-node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Choose the backend to use.\n - name: CALICO_NETWORKING_BACKEND\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: calico_backend\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,bgp\"\n # Auto-detect the BGP IP address.\n - name: IP\n value: \"autodetect\"\n # Enable IPIP\n - name: CALICO_IPV4POOL_IPIP\n value: \"Always\"\n # Set MTU for tunnel device used if ipip is enabled\n - name: FELIX_IPINIPMTU\n valueFrom:\n configMapKeyRef:\n name: calico-config\n key: veth_mtu\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"{{.ClusterCIDR}}\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"info\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-live\n - -bird-live\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-ready\n - -bird-ready\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n volumes:\n # Used by calico-node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Mount in the directory for host-local IPAM allocations. This is\n # used when upgrading from host-local to calico-ipam, and can be removed\n # if not using the upgrade-ipam init container.\n - name: host-local-net-dir\n hostPath:\n path: /var/lib/cni/networks\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: calico-node\n namespace: kube-system\n---\n# Source: calico/templates/calico-kube-controllers.yaml\n# See https://github.com/projectcalico/kube-controllers\napiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\nspec:\n # The controllers can only have a single active instance.\n replicas: 1\n selector:\n matchLabels:\n k8s-app: calico-kube-controllers\n strategy:\n type: Recreate\n template:\n metadata:\n name: calico-kube-controllers\n namespace: kube-system\n labels:\n k8s-app: calico-kube-controllers\n annotations:\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n tolerations:\n # Make sure calico-node gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n{{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: calico-kube-controllers\n{{end}}\n priorityClassName: system-cluster-critical\n containers:\n - name: calico-kube-controllers\n image: {{.ControllersImage}}\n env:\n # Choose which controllers to run.\n - name: ENABLED_CONTROLLERS\n value: node\n - name: DATASTORE_TYPE\n value: kubernetes\n readinessProbe:\n exec:\n command:\n - /usr/bin/check-status\n - -r\n", @@ -4607,6 +5491,7 @@ "canal-v1.15": "\n{{if eq .RBACConfig \"rbac\"}}\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: flannel\nrules:\n - apiGroups:\n - \"\"\n resources:\n - pods\n verbs:\n - get\n - apiGroups:\n - \"\"\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups:\n - \"\"\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: canal-flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n---\n# Bind the Calico ClusterRole to the canal ServiceAccount.\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: canal-calico\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n\n# Canal Version v3.1.1\n# https://docs.projectcalico.org/v3.1/releases#v3.1.1\n# This manifest includes the following component versions:\n# calico/node:v3.1.1\n# calico/cni:v3.1.1\n# coreos/flannel:v0.9.1\n\n---\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.0\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n \"mtu\": {{.MTU}},\n{{- end}}\n{{- end}}\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n---\n\n# This manifest installs the calico/node container, as well\n# as the Calico CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: extensions/v1beta1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n affinity:\n nodeAffinity:\n requiredDuringSchedulingIgnoredDuringExecution:\n nodeSelectorTerms:\n - matchExpressions:\n - key: beta.kubernetes.io/os\n operator: NotIn\n values:\n - windows\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Make sure canal gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n initContainers:\n # This container installs the Calico CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n containers:\n # Runs calico/node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"192.168.0.0/16\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Enable felix logging to stdout\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by calico/node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n\n---\n\n# Create all the CustomResourceDefinitions needed for\n# Calico policy and networking mode.\n\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n", "canal-v1.15-privileged": "\n# CanalTemplateV115Privileged\n{{if eq .RBACConfig \"rbac\"}}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n---\n# Source: calico/templates/rbac.yaml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nrules:\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: canal-flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: canal-calico\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1450\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n },\n {\n \"type\": \"bandwidth\",\n \"capabilities\": {\"bandwidth\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the canal container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Make sure canal gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n securityContext:\n privileged: true\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n securityContext:\n privileged: true\n containers:\n # Runs canal container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n # - name: CALICO_IPV4POOL_CIDR\n # value: \"192.168.0.0/16\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-live\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by canal.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n", "canal-v1.15-privileged-calico3134": "\n# CanalTemplateV115PrivilegedCalico3134\n{{if eq .RBACConfig \"rbac\"}}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n---\n# Source: calico/templates/rbac.yaml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n # Pod CIDR auto-detection on kubeadm needs access to config maps.\n - apiGroups: [\"\"]\n resources:\n - configmaps\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nrules:\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: canal-flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: canal-calico\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1450\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n },\n {\n \"type\": \"bandwidth\",\n \"capabilities\": {\"bandwidth\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the canal container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Make sure canal gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n securityContext:\n privileged: true\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n securityContext:\n privileged: true\n containers:\n # Runs canal container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n # - name: CALICO_IPV4POOL_CIDR\n # value: \"192.168.0.0/16\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-live\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by canal.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n---\n", + "canal-v1.15.12": "\n{{if eq .RBACConfig \"rbac\"}}\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: calico\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: calico-node\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: flannel\nrules:\n - apiGroups:\n - \"\"\n resources:\n - pods\n verbs:\n - get\n - apiGroups:\n - \"\"\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups:\n - \"\"\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1beta1\nmetadata:\n name: canal-flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n---\n# Bind the Calico ClusterRole to the canal ServiceAccount.\napiVersion: rbac.authorization.k8s.io/v1beta1\nkind: ClusterRoleBinding\nmetadata:\n name: canal-calico\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n\n# Canal Version v3.1.1\n# https://docs.projectcalico.org/v3.1/releases#v3.1.1\n# This manifest includes the following component versions:\n# calico/node:v3.1.1\n# calico/cni:v3.1.1\n# coreos/flannel:v0.9.1\n\n---\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.0\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n \"mtu\": {{.MTU}},\n{{- end}}\n{{- end}}\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n---\n\n# This manifest installs the calico/node container, as well\n# as the Calico CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: extensions/v1beta1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n affinity:\n nodeAffinity:\n requiredDuringSchedulingIgnoredDuringExecution:\n nodeSelectorTerms:\n - matchExpressions:\n - key: beta.kubernetes.io/os\n operator: NotIn\n values:\n - windows\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Make sure canal gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n initContainers:\n # This container installs the Calico CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n containers:\n # Runs calico/node container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n - name: CALICO_IPV4POOL_CIDR\n value: \"192.168.0.0/16\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Enable felix logging to stdout\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by calico/node.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n\n---\n\n# Create all the CustomResourceDefinitions needed for\n# Calico policy and networking mode.\n\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n", "canal-v1.16": "\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n \"mtu\": {{.MTU}},\n{{- end}}\n{{- end}}\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\",\n \"k8s_auth_token\": \"__SERVICEACCOUNT_TOKEN__\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n{{if eq .RBACConfig \"rbac\"}}\n---\n# Source: calico/templates/rbac.yaml\n\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nrules:\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the canal container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n affinity:\n nodeAffinity:\n requiredDuringSchedulingIgnoredDuringExecution:\n nodeSelectorTerms:\n - matchExpressions:\n - key: beta.kubernetes.io/os\n operator: NotIn\n values:\n - windows\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Tolerate this effect so the pods will be schedulable at all times\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n - key: \"node-role.kubernetes.io/controlplane\"\n operator: \"Exists\"\n effect: \"NoSchedule\"\n - key: \"node-role.kubernetes.io/etcd\"\n operator: \"Exists\"\n effect: \"NoExecute\"\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n containers:\n # Runs canal container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n - name: CALICO_IPV4POOL_CIDR\n value: \"192.168.0.0/16\"\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Enable felix logging to stdout\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by canal.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\n\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n", "canal-v1.17": "\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n \"mtu\": {{.MTU}},\n{{- end}}\n{{- end}}\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\",\n \"k8s_auth_token\": \"__SERVICEACCOUNT_TOKEN__\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n\n---\n\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n{{if eq .RBACConfig \"rbac\"}}\n---\n# Source: calico/templates/rbac.yaml\n\n# Include a clusterrole for the calico-node DaemonSet,\n# and bind it to the calico-node serviceaccount.\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico-node\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nrules:\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: calico-node\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico-node\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the canal container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n affinity:\n nodeAffinity:\n requiredDuringSchedulingIgnoredDuringExecution:\n nodeSelectorTerms:\n - matchExpressions:\n - key: beta.kubernetes.io/os\n operator: NotIn\n values:\n - windows\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Tolerate this effect so the pods will be schedulable at all times\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n - key: \"node-role.kubernetes.io/controlplane\"\n operator: \"Exists\"\n effect: \"NoSchedule\"\n - key: \"node-role.kubernetes.io/etcd\"\n operator: \"Exists\"\n effect: \"NoExecute\"\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n containers:\n # Runs canal container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n - name: CALICO_IPV4POOL_CIDR\n value: \"192.168.0.0/16\"\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Enable felix logging to stdout\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n httpGet:\n path: /liveness\n port: 9099\n host: localhost\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by canal.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\n\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n", "canal-v1.17-privileged": "\n# CanalTemplateV117Privileged\n{{if eq .RBACConfig \"rbac\"}}\n---\napiVersion: v1\nkind: ServiceAccount\nmetadata:\n name: canal\n namespace: kube-system\n---\n# Source: calico/templates/rbac.yaml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: calico\nrules:\n # The CNI plugin needs to get pods, nodes, and namespaces.\n - apiGroups: [\"\"]\n resources:\n - pods\n - nodes\n - namespaces\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - endpoints\n - services\n verbs:\n # Used to discover service IPs for advertisement.\n - watch\n - list\n # Used to discover Typhas.\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n # Needed for clearing NodeNetworkUnavailable flag.\n - patch\n # Calico stores some configuration information in node annotations.\n - update\n # Watch for changes to Kubernetes NetworkPolicies.\n - apiGroups: [\"networking.k8s.io\"]\n resources:\n - networkpolicies\n verbs:\n - watch\n - list\n # Used by Calico for policy information.\n - apiGroups: [\"\"]\n resources:\n - pods\n - namespaces\n - serviceaccounts\n verbs:\n - list\n - watch\n # The CNI plugin patches pods/status.\n - apiGroups: [\"\"]\n resources:\n - pods/status\n verbs:\n - patch\n # Calico monitors various CRDs for config.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - globalfelixconfigs\n - felixconfigurations\n - bgppeers\n - globalbgpconfigs\n - bgpconfigurations\n - ippools\n - ipamblocks\n - globalnetworkpolicies\n - globalnetworksets\n - networkpolicies\n - networksets\n - clusterinformations\n - hostendpoints\n - blockaffinities\n verbs:\n - get\n - list\n - watch\n # Calico must create and update some CRDs on startup.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - ippools\n - felixconfigurations\n - clusterinformations\n verbs:\n - create\n - update\n # Calico stores some configuration information on the node.\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - get\n - list\n - watch\n # These permissions are only requried for upgrade from v2.6, and can\n # be removed after upgrade or on fresh installations.\n - apiGroups: [\"crd.projectcalico.org\"]\n resources:\n - bgpconfigurations\n - bgppeers\n verbs:\n - create\n - update\n---\n# Flannel ClusterRole\n# Pulled from https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel-rbac.yml\nkind: ClusterRole\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: flannel\nrules:\n - apiGroups: [\"\"]\n resources:\n - pods\n verbs:\n - get\n - apiGroups: [\"\"]\n resources:\n - nodes\n verbs:\n - list\n - watch\n - apiGroups: [\"\"]\n resources:\n - nodes/status\n verbs:\n - patch\n---\n# Bind the flannel ClusterRole to the canal ServiceAccount.\nkind: ClusterRoleBinding\napiVersion: rbac.authorization.k8s.io/v1\nmetadata:\n name: canal-flannel\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: flannel\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n name: canal-calico\nroleRef:\n apiGroup: rbac.authorization.k8s.io\n kind: ClusterRole\n name: calico\nsubjects:\n- kind: ServiceAccount\n name: canal\n namespace: kube-system\n- apiGroup: rbac.authorization.k8s.io\n kind: Group\n name: system:nodes\n{{end}}\n---\n# Source: calico/templates/calico-config.yaml\n# This ConfigMap is used to configure a self-hosted Canal installation.\nkind: ConfigMap\napiVersion: v1\nmetadata:\n name: canal-config\n namespace: kube-system\ndata:\n # Typha is disabled.\n typha_service_name: \"none\"\n # The interface used by canal for host \u003c-\u003e host communication.\n # If left blank, then the interface is chosen using the node's\n # default route.\n canal_iface: \"{{.CanalInterface}}\"\n\n # Whether or not to masquerade traffic to destinations not within\n # the pod network.\n masquerade: \"true\"\n\n # Configure the MTU to use\n{{- if .MTU }}\n{{- if ne .MTU 0 }}\n veth_mtu: \"{{.MTU}}\"\n{{- end}}\n{{- else }}\n veth_mtu: \"1450\"\n{{- end}}\n\n # The CNI network configuration to install on each node. The special\n # values in this config will be automatically populated.\n cni_network_config: |-\n {\n \"name\": \"k8s-pod-network\",\n \"cniVersion\": \"0.3.1\",\n \"plugins\": [\n {\n \"type\": \"calico\",\n \"log_level\": \"WARNING\",\n \"datastore_type\": \"kubernetes\",\n \"nodename\": \"__KUBERNETES_NODE_NAME__\",\n \"mtu\": __CNI_MTU__,\n \"ipam\": {\n \"type\": \"host-local\",\n \"subnet\": \"usePodCidr\"\n },\n \"policy\": {\n \"type\": \"k8s\"\n },\n \"kubernetes\": {\n \"kubeconfig\": \"{{.KubeCfg}}\"\n }\n },\n {\n \"type\": \"portmap\",\n \"snat\": true,\n \"capabilities\": {\"portMappings\": true}\n },\n {\n \"type\": \"bandwidth\",\n \"capabilities\": {\"bandwidth\": true}\n }\n ]\n }\n\n # Flannel network configuration. Mounted into the flannel container.\n net-conf.json: |\n {\n \"Network\": \"{{.ClusterCIDR}}\",\n \"Backend\": {\n \"Type\": \"{{.FlannelBackend.Type}}\"\n }\n }\n---\n# Source: calico/templates/calico-node.yaml\n# This manifest installs the canal container, as well\n# as the CNI plugins and network config on\n# each master and worker node in a Kubernetes cluster.\nkind: DaemonSet\napiVersion: apps/v1\nmetadata:\n name: canal\n namespace: kube-system\n labels:\n k8s-app: canal\nspec:\n selector:\n matchLabels:\n k8s-app: canal\n updateStrategy:\n{{if .UpdateStrategy}}\n{{ toYaml .UpdateStrategy | indent 4}}\n{{else}}\n type: RollingUpdate\n rollingUpdate:\n maxUnavailable: 1\n{{end}}\n template:\n metadata:\n labels:\n k8s-app: canal\n annotations:\n # This, along with the CriticalAddonsOnly toleration below,\n # marks the pod as a critical add-on, ensuring it gets\n # priority scheduling and that its resources are reserved\n # if it ever gets evicted.\n scheduler.alpha.kubernetes.io/critical-pod: ''\n spec:\n nodeSelector:\n kubernetes.io/os: linux\n hostNetwork: true\n{{if .NodeSelector}}\n nodeSelector:\n {{ range $k, $v := .NodeSelector }}\n {{ $k }}: \"{{ $v }}\"\n {{ end }}\n{{end}}\n tolerations:\n # Make sure canal gets scheduled on all nodes.\n - effect: NoSchedule\n operator: Exists\n # Mark the pod as a critical add-on for rescheduling.\n - key: CriticalAddonsOnly\n operator: Exists\n - effect: NoExecute\n operator: Exists\n {{if eq .RBACConfig \"rbac\"}}\n serviceAccountName: canal\n {{end}}\n # Minimize downtime during a rolling upgrade or deletion; tell Kubernetes to do a \"force\n # deletion\": https://kubernetes.io/docs/concepts/workloads/pods/pod/#termination-of-pods.\n terminationGracePeriodSeconds: 0\n priorityClassName: system-node-critical\n initContainers:\n # This container installs the CNI binaries\n # and CNI network config file on each node.\n - name: install-cni\n image: {{.CNIImage}}\n command: [\"/install-cni.sh\"]\n env:\n # Name of the CNI config file to create.\n - name: CNI_CONF_NAME\n value: \"10-canal.conflist\"\n # The CNI network config to install on each node.\n - name: CNI_NETWORK_CONFIG\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: cni_network_config\n # Set the hostname based on the k8s node name.\n - name: KUBERNETES_NODE_NAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # CNI MTU Config variable\n - name: CNI_MTU\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: veth_mtu\n # Prevents the container from sleeping forever.\n - name: SLEEP\n value: \"false\"\n volumeMounts:\n - mountPath: /host/opt/cni/bin\n name: cni-bin-dir\n - mountPath: /host/etc/cni/net.d\n name: cni-net-dir\n securityContext:\n privileged: true\n # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes\n # to communicate with Felix over the Policy Sync API.\n - name: flexvol-driver\n image: {{.FlexVolImg}}\n volumeMounts:\n - name: flexvol-driver-host\n mountPath: /host/driver\n securityContext:\n privileged: true\n containers:\n # Runs canal container on each Kubernetes node. This\n # container programs network policy and routes on each\n # host.\n - name: calico-node\n image: {{.NodeImage}}\n env:\n # Use Kubernetes API as the backing datastore.\n - name: DATASTORE_TYPE\n value: \"kubernetes\"\n # Configure route aggregation based on pod CIDR.\n - name: USE_POD_CIDR\n value: \"true\"\n # Wait for the datastore.\n - name: WAIT_FOR_DATASTORE\n value: \"true\"\n # Set based on the k8s node name.\n - name: NODENAME\n valueFrom:\n fieldRef:\n fieldPath: spec.nodeName\n # Don't enable BGP.\n - name: CALICO_NETWORKING_BACKEND\n value: \"none\"\n # Cluster type to identify the deployment type\n - name: CLUSTER_TYPE\n value: \"k8s,canal\"\n # Period, in seconds, at which felix re-applies all iptables state\n - name: FELIX_IPTABLESREFRESHINTERVAL\n value: \"60\"\n # No IP address needed.\n - name: IP\n value: \"\"\n # The default IPv4 pool to create on startup if none exists. Pod IPs will be\n # chosen from this range. Changing this value after installation will have\n # no effect. This should fall within --cluster-cidr.\n # - name: CALICO_IPV4POOL_CIDR\n # value: \"192.168.0.0/16\"\n # Disable file logging so kubectl logs works.\n - name: CALICO_DISABLE_FILE_LOGGING\n value: \"true\"\n # Set Felix endpoint to host default action to ACCEPT.\n - name: FELIX_DEFAULTENDPOINTTOHOSTACTION\n value: \"ACCEPT\"\n # Disable IPv6 on Kubernetes.\n - name: FELIX_IPV6SUPPORT\n value: \"false\"\n # Disable felix logging to file\n - name: FELIX_LOGFILEPATH\n value: \"none\"\n # Disable felix logging for syslog\n - name: FELIX_LOGSEVERITYSYS\n value: \"\"\n # Set Felix logging to \"info\"\n - name: FELIX_LOGSEVERITYSCREEN\n value: \"Warning\"\n - name: FELIX_HEALTHENABLED\n value: \"true\"\n securityContext:\n privileged: true\n resources:\n requests:\n cpu: 250m\n livenessProbe:\n exec:\n command:\n - /bin/calico-node\n - -felix-live\n periodSeconds: 10\n initialDelaySeconds: 10\n failureThreshold: 6\n readinessProbe:\n httpGet:\n path: /readiness\n port: 9099\n host: localhost\n periodSeconds: 10\n volumeMounts:\n - mountPath: /lib/modules\n name: lib-modules\n readOnly: true\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - mountPath: /var/run/calico\n name: var-run-calico\n readOnly: false\n - mountPath: /var/lib/calico\n name: var-lib-calico\n readOnly: false\n - name: policysync\n mountPath: /var/run/nodeagent\n # This container runs flannel using the kube-subnet-mgr backend\n # for allocating subnets.\n - name: kube-flannel\n image: {{.CanalFlannelImg}}\n command: [ \"/opt/bin/flanneld\", \"--ip-masq\", \"--kube-subnet-mgr\" ]\n securityContext:\n privileged: true\n env:\n - name: POD_NAME\n valueFrom:\n fieldRef:\n fieldPath: metadata.name\n - name: POD_NAMESPACE\n valueFrom:\n fieldRef:\n fieldPath: metadata.namespace\n - name: FLANNELD_IFACE\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: canal_iface\n - name: FLANNELD_IP_MASQ\n valueFrom:\n configMapKeyRef:\n name: canal-config\n key: masquerade\n volumeMounts:\n - mountPath: /run/xtables.lock\n name: xtables-lock\n readOnly: false\n - name: flannel-cfg\n mountPath: /etc/kube-flannel/\n volumes:\n # Used by canal.\n - name: lib-modules\n hostPath:\n path: /lib/modules\n - name: var-run-calico\n hostPath:\n path: /var/run/calico\n - name: var-lib-calico\n hostPath:\n path: /var/lib/calico\n - name: xtables-lock\n hostPath:\n path: /run/xtables.lock\n type: FileOrCreate\n # Used by flannel.\n - name: flannel-cfg\n configMap:\n name: canal-config\n # Used to install CNI.\n - name: cni-bin-dir\n hostPath:\n path: /opt/cni/bin\n - name: cni-net-dir\n hostPath:\n path: /etc/cni/net.d\n # Used to create per-pod Unix Domain Sockets\n - name: policysync\n hostPath:\n type: DirectoryOrCreate\n path: /var/run/nodeagent\n # Used to install Flex Volume Driver\n - name: flexvol-driver-host\n hostPath:\n type: DirectoryOrCreate\n{{- if .FlexVolPluginDir }}\n path: {{.FlexVolPluginDir}}\n{{- else }}\n path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds\n{{- end }}\n---\n# Source: calico/templates/kdd-crds.yaml\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: felixconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: FelixConfiguration\n plural: felixconfigurations\n singular: felixconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamblocks.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMBlock\n plural: ipamblocks\n singular: ipamblock\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: blockaffinities.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BlockAffinity\n plural: blockaffinities\n singular: blockaffinity\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamhandles.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMHandle\n plural: ipamhandles\n singular: ipamhandle\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ipamconfigs.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPAMConfig\n plural: ipamconfigs\n singular: ipamconfig\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgppeers.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPPeer\n plural: bgppeers\n singular: bgppeer\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: bgpconfigurations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: BGPConfiguration\n plural: bgpconfigurations\n singular: bgpconfiguration\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: ippools.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: IPPool\n plural: ippools\n singular: ippool\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: hostendpoints.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: HostEndpoint\n plural: hostendpoints\n singular: hostendpoint\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: clusterinformations.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: ClusterInformation\n plural: clusterinformations\n singular: clusterinformation\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworkpolicies.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkPolicy\n plural: globalnetworkpolicies\n singular: globalnetworkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: globalnetworksets.crd.projectcalico.org\nspec:\n scope: Cluster\n group: crd.projectcalico.org\n version: v1\n names:\n kind: GlobalNetworkSet\n plural: globalnetworksets\n singular: globalnetworkset\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networkpolicies.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkPolicy\n plural: networkpolicies\n singular: networkpolicy\n---\napiVersion: apiextensions.k8s.io/v1beta1\nkind: CustomResourceDefinition\nmetadata:\n name: networksets.crd.projectcalico.org\nspec:\n scope: Namespaced\n group: crd.projectcalico.org\n version: v1\n names:\n kind: NetworkSet\n plural: networksets\n singular: networkset\n", @@ -4670,17 +5555,45 @@ "minRKEVersion": "1.0.7", "minRancherVersion": "2.3.7" }, + "v1.15.12-rancher1-1": { + "maxRKEVersion": "0.2.99", + "maxRancherVersion": "2.2.99" + }, "v1.15.12-rancher2-2": { - "minRKEVersion": "1.0.7", - "minRancherVersion": "2.3.7" + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.15.12-rancher2-3": { + "minRKEVersion": "1.1.3-rc0", + "minRancherVersion": "2.4.5-rc0" + }, + "v1.15.12-rancher2-4": { + "minRKEVersion": "1.1.4-rc0", + "minRancherVersion": "2.4.6-rc0" + }, + "v1.15.12-rancher2-5": { + "minRKEVersion": "1.1.5-rc0", + "minRancherVersion": "2.4.6-rc0" }, "v1.15.5-rancher1-1": { "maxRKEVersion": "0.2.8", "maxRancherVersion": "2.2.9" }, "v1.16.10-rancher2-1": { - "minRKEVersion": "1.0.7", - "minRancherVersion": "2.3.7" + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.16.10-rancher2-2": { + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.16.13-rancher1-1": { + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.16.13-rancher1-2": { + "minRKEVersion": "1.1.5-rc0", + "minRancherVersion": "2.4.6-rc0" }, "v1.16.8-rancher1-1": { "minRKEVersion": "1.0.0", @@ -4707,12 +5620,36 @@ "minRancherVersion": "2.3.7-rc0" }, "v1.17.6-rancher2-1": { - "minRKEVersion": "1.0.7", - "minRancherVersion": "2.3.7" + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.17.6-rancher2-2": { + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.17.9-rancher1-1": { + "minRKEVersion": "1.1.2-rc0", + "minRancherVersion": "2.4.4-rc0" + }, + "v1.17.9-rancher1-2": { + "minRKEVersion": "1.1.5-rc0", + "minRancherVersion": "2.4.6-rc0" }, "v1.18.3-rancher2-1": { - "minRKEVersion": "1.1.1-rc99", - "minRancherVersion": "2.4.4-rc0" + "minRKEVersion": "1.1.3-rc0", + "minRancherVersion": "2.4.5-rc0" + }, + "v1.18.3-rancher2-2": { + "minRKEVersion": "1.1.3-rc0", + "minRancherVersion": "2.4.5-rc0" + }, + "v1.18.6-rancher1-1": { + "minRKEVersion": "1.1.3-rc0", + "minRancherVersion": "2.4.5-rc0" + }, + "v1.18.6-rancher1-2": { + "minRKEVersion": "1.1.5-rc0", + "minRancherVersion": "2.4.6-rc0" }, "v1.8": { "maxRKEVersion": "0.2.2", @@ -4741,16 +5678,18 @@ "2.3.1": "v1.15.x", "2.3.2": "v1.15.x", "2.3.3": "v1.16.x", - "2.4": "v1.18.x", + "2.4": "v1.17.x", "2.4.0": "v1.17.x", "2.4.1": "v1.17.x", "2.4.2": "v1.17.x", "2.4.3": "v1.17.x", + "2.4.4": "v1.17.x", + "2.4.5": "v1.18.x", "default": "v1.18.x" }, "RKEDefaultK8sVersions": { "0.3": "v1.16.3-rancher1-1", - "default": "v1.18.3-rancher2-1" + "default": "v1.18.6-rancher1-2" }, "K8sVersionDockerInfo": { "1.10": [ @@ -5006,19 +5945,19 @@ }, "CisConfigParams": { "default": { - "benchmarkVersion": "rke-cis-1.4" + "benchmarkVersion": "rke-cis-1.5" }, "v1.15": { - "benchmarkVersion": "rke-cis-1.4" + "benchmarkVersion": "rke-cis-1.5" }, "v1.16": { - "benchmarkVersion": "rke-cis-1.4" + "benchmarkVersion": "rke-cis-1.5" }, "v1.17": { - "benchmarkVersion": "rke-cis-1.4" + "benchmarkVersion": "rke-cis-1.5" }, "v1.18": { - "benchmarkVersion": "rke-cis-1.4" + "benchmarkVersion": "rke-cis-1.5" } }, "CisBenchmarkVersionInfo": { @@ -5087,11 +6026,13 @@ "1.2.6": "When generating serving certificates, functionality could break in conjunction with hostname overrides which are required for certain cloud providers.", "4.2.10": "When generating serving certificates, functionality could break in conjunction with hostname overrides which are required for certain cloud providers.", "4.2.6": "System level configurations are required prior to provisioning the cluster in order for this argument to be set to true.", + "5.1.5": "Kubernetes provides default service accounts to be used.", "5.2.2": "Enabling Pod Security Policy can cause applications to unexpectedly fail.", "5.2.3": "Enabling Pod Security Policy can cause applications to unexpectedly fail.", "5.2.4": "Enabling Pod Security Policy can cause applications to unexpectedly fail.", "5.2.5": "Enabling Pod Security Policy can cause applications to unexpectedly fail.", - "5.3.2": "Enabling Network Policies can prevent certain applications from communicating with each other." + "5.3.2": "Enabling Network Policies can prevent certain applications from communicating with each other.", + "5.6.4": "Kubernetes provides a default namespace." }, "notApplicableChecks": { "1.1.1": "Clusters provisioned by RKE doesn't require or maintain a configuration file for kube-apiserver.\nAll configuration is passed in as arguments at container run time.", @@ -5122,12 +6063,12 @@ { "maxChannelServerVersion": "v2.4.99", "minChannelServerVersion": "v2.4.0-rc1", - "version": "v1.17.5+k3s1" + "version": "v1.17.9+k3s1" }, { "maxChannelServerVersion": "v2.4.99", - "minChannelServerVersion": "v2.4.4-rc1", - "version": "v1.18.2+k3s1" + "minChannelServerVersion": "v2.4.5-rc1", + "version": "v1.18.6+k3s1" } ] }