diff --git a/.changelog/15755.txt b/.changelog/15755.txt new file mode 100644 index 00000000000..61d5e58ffc0 --- /dev/null +++ b/.changelog/15755.txt @@ -0,0 +1,3 @@ +```release-note:improvement +identity: Add identity jobspec block for exposing workload identity to tasks +``` diff --git a/api/tasks.go b/api/tasks.go index d997d37d96f..ecf35727109 100644 --- a/api/tasks.go +++ b/api/tasks.go @@ -570,6 +570,7 @@ func (g *TaskGroup) Canonicalize(job *Job) { for _, s := range g.Services { s.Canonicalize(nil, g, job) } + } // These needs to be in sync with DefaultServiceJobRestartPolicy in @@ -703,6 +704,7 @@ type Task struct { KillSignal string `mapstructure:"kill_signal" hcl:"kill_signal,optional"` Kind string `hcl:"kind,optional"` ScalingPolicies []*ScalingPolicy `hcl:"scaling,block"` + Identity *WorkloadIdentity `hcl:"identity,block"` } func (t *Task) Canonicalize(tg *TaskGroup, job *Job) { @@ -1110,3 +1112,10 @@ func (t *TaskCSIPluginConfig) Canonicalize() { t.HealthTimeout = 30 * time.Second } } + +// WorkloadIdentity is the jobspec block which determines if and how a workload +// identity is exposed to tasks. +type WorkloadIdentity struct { + Env bool `hcl:"env,optional"` + File bool `hcl:"file,optional"` +} diff --git a/client/allocrunner/taskrunner/identity_hook.go b/client/allocrunner/taskrunner/identity_hook.go index cbbfa6ffda4..c45d0b9e65b 100644 --- a/client/allocrunner/taskrunner/identity_hook.go +++ b/client/allocrunner/taskrunner/identity_hook.go @@ -2,20 +2,33 @@ package taskrunner import ( "context" + "fmt" + "path/filepath" "sync" log "github.com/hashicorp/go-hclog" "github.com/hashicorp/nomad/client/allocrunner/interfaces" + "github.com/hashicorp/nomad/helper/users" ) // identityHook sets the task runner's Nomad workload identity token // based on the signed identity stored on the Allocation + +const ( + // wiTokenFile is the name of the file holding the Nomad token inside the + // task's secret directory + wiTokenFile = "nomad_token" +) + type identityHook struct { tr *TaskRunner logger log.Logger taskName string lock sync.Mutex + + // tokenPath is the path in which to read and write the token + tokenPath string } func newIdentityHook(tr *TaskRunner, logger log.Logger) *identityHook { @@ -34,21 +47,43 @@ func (*identityHook) Name() string { func (h *identityHook) Prestart(ctx context.Context, req *interfaces.TaskPrestartRequest, resp *interfaces.TaskPrestartResponse) error { h.lock.Lock() defer h.lock.Unlock() + h.tokenPath = filepath.Join(req.TaskDir.SecretsDir, wiTokenFile) - token := h.tr.alloc.SignedIdentities[h.taskName] - if token != "" { - h.tr.setNomadToken(token) - } - return nil + return h.setToken() } func (h *identityHook) Update(_ context.Context, req *interfaces.TaskUpdateRequest, _ *interfaces.TaskUpdateResponse) error { h.lock.Lock() defer h.lock.Unlock() + return h.setToken() +} + +// setToken adds the Nomad token to the task's environment and writes it to a +// file if requested by the jobsepc. +func (h *identityHook) setToken() error { token := h.tr.alloc.SignedIdentities[h.taskName] - if token != "" { - h.tr.setNomadToken(token) + if token == "" { + return nil } + + h.tr.setNomadToken(token) + + if id := h.tr.task.Identity; id != nil && id.File { + if err := h.writeToken(token); err != nil { + return err + } + } + + return nil +} + +// writeToken writes the given token to disk +func (h *identityHook) writeToken(token string) error { + // Write token as owner readable only + if err := users.WriteFileFor(h.tokenPath, []byte(token), h.tr.task.User); err != nil { + return fmt.Errorf("failed to write nomad token: %w", err) + } + return nil } diff --git a/client/allocrunner/taskrunner/identity_hook_test.go b/client/allocrunner/taskrunner/identity_hook_test.go new file mode 100644 index 00000000000..e1d9a6f47e6 --- /dev/null +++ b/client/allocrunner/taskrunner/identity_hook_test.go @@ -0,0 +1,8 @@ +package taskrunner + +import "github.com/hashicorp/nomad/client/allocrunner/interfaces" + +var _ interfaces.TaskPrestartHook = (*identityHook)(nil) +var _ interfaces.TaskUpdateHook = (*identityHook)(nil) + +// See task_runner_test.go:TestTaskRunner_IdentityHook diff --git a/client/allocrunner/taskrunner/task_runner_getters.go b/client/allocrunner/taskrunner/task_runner_getters.go index 4207bfb36dc..2620435b4a1 100644 --- a/client/allocrunner/taskrunner/task_runner_getters.go +++ b/client/allocrunner/taskrunner/task_runner_getters.go @@ -86,6 +86,14 @@ func (tr *TaskRunner) setNomadToken(token string) { tr.nomadTokenLock.Lock() defer tr.nomadTokenLock.Unlock() tr.nomadToken = token + + if id := tr.task.Identity; id != nil { + tr.envBuilder.SetWorkloadToken(token, id.Env) + } else { + // Default to *not* injecting the workload token into the task's + // environment. + tr.envBuilder.SetWorkloadToken(token, false) + } } // getDriverHandle returns a driver handle. diff --git a/client/allocrunner/taskrunner/task_runner_test.go b/client/allocrunner/taskrunner/task_runner_test.go index 357e0d2abb7..65de74e9433 100644 --- a/client/allocrunner/taskrunner/task_runner_test.go +++ b/client/allocrunner/taskrunner/task_runner_test.go @@ -40,6 +40,7 @@ import ( "github.com/hashicorp/nomad/plugins/drivers" "github.com/hashicorp/nomad/testutil" "github.com/kr/pretty" + "github.com/shoenig/test/must" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) @@ -2522,3 +2523,63 @@ func TestTaskRunner_BaseLabels(t *testing.T) { require.Equal(alloc.ID, labels["alloc_id"]) require.Equal(alloc.Namespace, labels["namespace"]) } + +// TestTaskRunner_IdentityHook_Enabled asserts that the identity hook exposes a +// workload identity to a task. +func TestTaskRunner_IdentityHook_Enabled(t *testing.T) { + ci.Parallel(t) + + alloc := mock.BatchAlloc() + task := alloc.Job.TaskGroups[0].Tasks[0] + + // Fake an identity and expose it to the task + alloc.SignedIdentities = map[string]string{ + task.Name: "foo", + } + task.Identity = &structs.WorkloadIdentity{ + Env: true, + File: true, + } + + tr, _, cleanup := runTestTaskRunner(t, alloc, task.Name) + defer cleanup() + + testWaitForTaskToDie(t, tr) + + // Assert the token was written to the filesystem + tokenBytes, err := os.ReadFile(filepath.Join(tr.taskDir.SecretsDir, "nomad_token")) + must.NoError(t, err) + must.Eq(t, "foo", string(tokenBytes)) + + // Assert the token is built into the task env + taskEnv := tr.envBuilder.Build() + must.Eq(t, "foo", taskEnv.EnvMap["NOMAD_TOKEN"]) +} + +// TestTaskRunner_IdentityHook_Disabled asserts that the identity hook does not +// expose a workload identity to a task by default. +func TestTaskRunner_IdentityHook_Disabled(t *testing.T) { + ci.Parallel(t) + + alloc := mock.BatchAlloc() + task := alloc.Job.TaskGroups[0].Tasks[0] + + // Fake an identity but don't expose it to the task + alloc.SignedIdentities = map[string]string{ + task.Name: "foo", + } + task.Identity = nil + + tr, _, cleanup := runTestTaskRunner(t, alloc, task.Name) + defer cleanup() + + testWaitForTaskToDie(t, tr) + + // Assert the token was written to the filesystem + _, err := os.ReadFile(filepath.Join(tr.taskDir.SecretsDir, "nomad_token")) + must.Error(t, err) + + // Assert the token is built into the task env + taskEnv := tr.envBuilder.Build() + must.MapNotContainsKey(t, taskEnv.EnvMap, "NOMAD_TOKEN") +} diff --git a/client/taskenv/env.go b/client/taskenv/env.go index 1ed6f51814f..2844a928c14 100644 --- a/client/taskenv/env.go +++ b/client/taskenv/env.go @@ -122,6 +122,9 @@ const ( // VaultNamespace is the environment variable for passing the Vault namespace, if applicable VaultNamespace = "VAULT_NAMESPACE" + + // WorkloadToken is the environment variable for passing the Nomad Workload Identity token + WorkloadToken = "NOMAD_TOKEN" ) // The node values that can be interpreted. @@ -406,25 +409,27 @@ type Builder struct { // clientTaskSecretsDir is the secrets dir from the client's perspective; eg /secrets clientTaskSecretsDir string - cpuCores string - cpuLimit int64 - memLimit int64 - memMaxLimit int64 - taskName string - allocIndex int - datacenter string - cgroupParent string - namespace string - region string - allocId string - allocName string - groupName string - vaultToken string - vaultNamespace string - injectVaultToken bool - jobID string - jobName string - jobParentID string + cpuCores string + cpuLimit int64 + memLimit int64 + memMaxLimit int64 + taskName string + allocIndex int + datacenter string + cgroupParent string + namespace string + region string + allocId string + allocName string + groupName string + vaultToken string + vaultNamespace string + injectVaultToken bool + workloadToken string + injectWorkloadToken bool + jobID string + jobName string + jobParentID string // otherPorts for tasks in the same alloc otherPorts map[string]string @@ -567,6 +572,11 @@ func (b *Builder) buildEnv(allocDir, localDir, secretsDir string, envMap[VaultNamespace] = b.vaultNamespace } + // Build the Nomad Workload Token + if b.injectWorkloadToken && b.workloadToken != "" { + envMap[WorkloadToken] = b.workloadToken + } + // Copy and interpolate task meta for k, v := range b.taskMeta { envMap[hargs.ReplaceEnv(k, nodeAttrs, envMap)] = hargs.ReplaceEnv(v, nodeAttrs, envMap) @@ -1018,6 +1028,14 @@ func (b *Builder) SetVaultToken(token, namespace string, inject bool) *Builder { return b } +func (b *Builder) SetWorkloadToken(token string, inject bool) *Builder { + b.mu.Lock() + b.workloadToken = token + b.injectWorkloadToken = inject + b.mu.Unlock() + return b +} + // addPort keys and values for other tasks to an env var map func addPort(m map[string]string, taskName, ip, portLabel string, port int) { key := fmt.Sprintf("%s%s_%s", AddrPrefix, taskName, portLabel) diff --git a/command/agent/job_endpoint.go b/command/agent/job_endpoint.go index 3c0be480230..47f5fce9cb7 100644 --- a/command/agent/job_endpoint.go +++ b/command/agent/job_endpoint.go @@ -1151,6 +1151,13 @@ func ApiTaskToStructsTask(job *structs.Job, group *structs.TaskGroup, structsTask.Affinities = ApiAffinitiesToStructs(apiTask.Affinities) structsTask.CSIPluginConfig = ApiCSIPluginConfigToStructsCSIPluginConfig(apiTask.CSIPluginConfig) + if apiTask.Identity != nil { + structsTask.Identity = &structs.WorkloadIdentity{ + Env: apiTask.Identity.Env, + File: apiTask.Identity.File, + } + } + if apiTask.RestartPolicy != nil { structsTask.RestartPolicy = &structs.RestartPolicy{ Attempts: *apiTask.RestartPolicy.Attempts, diff --git a/command/assets/connect.nomad.hcl b/command/assets/connect.nomad.hcl index 6f785e47867..cca46cb0100 100644 --- a/command/assets/connect.nomad.hcl +++ b/command/assets/connect.nomad.hcl @@ -356,6 +356,14 @@ job "countdash" { # max_file_size = 15 # } + # The "identity" block instructs Nomad to expose the task's workload + # identity token as an environment variable and in the file + # secrets/nomad_token. + # identity { + # env = true + # file = true + # } + # The "resources" block describes the requirements a task needs to # execute. Resource requirements include memory, network, cpu, and more. # This ensures the task will execute on a machine that contains enough diff --git a/command/assets/example-short.nomad.hcl b/command/assets/example-short.nomad.hcl index 80bae974df4..930e0662785 100644 --- a/command/assets/example-short.nomad.hcl +++ b/command/assets/example-short.nomad.hcl @@ -16,6 +16,11 @@ job "example" { auth_soft_fail = true } + identity { + env = true + file = true + } + resources { cpu = 500 memory = 256 diff --git a/command/assets/example.nomad.hcl b/command/assets/example.nomad.hcl index 92419752ddf..3403321ec93 100644 --- a/command/assets/example.nomad.hcl +++ b/command/assets/example.nomad.hcl @@ -331,7 +331,6 @@ job "example" { # } # } - # The "logs" block instructs the Nomad client on how many log files and # the maximum size of those logs files to retain. Logging is enabled by # default, but the "logs" block allows for finer-grained control over @@ -347,6 +346,14 @@ job "example" { # max_file_size = 15 # } + # The "identity" block instructs Nomad to expose the task's workload + # identity token as an environment variable and in the file + # secrets/nomad_token. + identity { + env = true + file = true + } + # The "resources" block describes the requirements a task needs to # execute. Resource requirements include memory, cpu, and more. # This ensures the task will execute on a machine that contains enough diff --git a/command/job_init.bindata_assetfs.go b/command/job_init.bindata_assetfs.go index 5384cf24e60..f855b9ad4e0 100644 --- a/command/job_init.bindata_assetfs.go +++ b/command/job_init.bindata_assetfs.go @@ -72,7 +72,7 @@ func (fi bindataFileInfo) Sys() interface{} { return nil } -var _commandAssetsConnectShortNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x52\xc1\x6e\xdb\x30\x0c\xbd\xfb\x2b\x08\x61\xd7\x21\x6e\x77\x69\x0b\xf8\x10\x34\xc1\x50\x60\x4d\x87\xb4\xd9\x65\x18\x04\x5a\x62\x62\x2d\xb1\x24\x48\xb4\xbb\xa1\xf0\xbf\x0f\xf6\x3c\xd5\x6d\xb7\x22\xdb\x74\xb1\xf5\x48\x8a\x8f\x8f\xef\xab\x2b\x41\x28\xd7\x58\xd6\x18\x2b\x01\x0f\x19\x80\x46\x46\x45\x96\x29\x44\x28\xe0\xb3\xd0\xea\x44\x7c\xc9\x32\x80\x5d\x70\x8d\x07\x81\xde\xfc\x4c\x04\xb0\xc4\xf7\x2e\xec\xc7\x1b\x40\xed\x34\x41\x01\xa2\x0c\x46\xef\x48\x0c\x68\x97\x0d\x9f\x48\xa1\x35\x8a\x52\xaa\xc5\x7a\x48\x1d\x9a\xbf\xed\xdf\x1c\x03\xde\x05\xee\x03\xe7\x79\x7e\x22\xb2\x11\x54\xce\x5a\x52\x9c\xaa\x01\xa2\xd1\xa4\x30\xc8\xf4\x6e\x37\x86\xba\x69\x57\xc6\xb8\x07\x71\x4f\xa5\x48\xa5\x3a\x98\x96\x42\xdf\x41\x3b\xb5\xa7\x30\xed\xb1\x35\xbb\x49\x0b\x53\xe3\x8e\x20\x9d\x02\x44\x85\xb1\x32\xca\x05\xaf\xa9\x9d\x0d\xcc\x29\xf4\xdc\x2f\xda\x77\x22\x95\x61\xc3\x95\x8c\x6e\xcb\x72\x8b\xe6\x00\x05\x70\x68\xe8\x19\xb9\x91\xe0\xa8\x68\xaf\x7d\xe9\x30\xe8\x63\x75\x9d\x4a\x25\x2a\x66\x2f\xa6\xca\x30\xb2\x51\x50\xc0\x79\x9e\x9f\x26\x94\xdd\x38\xc4\x04\xed\x8e\x5f\xd0\x23\xc5\x97\x6b\x3a\xfd\x9b\x35\x65\x8f\x82\xfa\xe0\xbe\x7d\x7f\x82\x00\x34\x3e\x72\x20\xac\xe3\x33\x1c\x40\x53\x64\x63\x91\x8d\xb3\xf2\x8f\xe6\xf9\x75\x0e\x4e\xe1\x41\x96\xc6\x6a\x39\x10\x85\x02\xce\xf2\xb3\xfc\x49\x56\x97\xfd\xee\xff\x15\x1b\xbd\x58\xd3\x2b\x66\x22\xdb\x4e\x26\xb8\xbc\xd9\xac\xee\xae\x56\xef\xe5\xed\x72\xfd\xe9\xea\x72\x29\x37\xeb\x0f\x83\x9f\x98\xfd\xc5\x6c\xf6\xe6\x61\x75\x73\x3d\x5f\xc8\xcd\xc7\xdb\xbb\xf5\x72\x7e\x2d\xe7\x8b\xc5\x5a\x0e\xc3\x49\xf4\xa6\x13\x89\xd3\x7f\x5a\x35\x4d\xf0\x4f\x86\xed\xb2\x1f\x01\x00\x00\xff\xff\x86\xf2\xc5\x22\x2f\x04\x00\x00") +var _commandAssetsConnectShortNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xa4\x52\xc1\x6e\xdb\x30\x0c\xbd\xfb\x2b\x08\x61\xd7\x21\x5e\x77\x69\x0b\xf8\x10\x34\xc1\x50\x60\x4d\x07\xb7\xd9\x55\x90\x25\xc6\xd6\x12\x4b\x82\x44\xbb\x1b\x0a\xff\xfb\x60\xc1\x53\xdd\x66\x0b\xb2\x4d\x17\x5b\x8f\xa4\xf8\xf8\xf8\xbe\xd9\x0a\x98\xb4\x9d\x21\x25\x42\xc3\xe0\x39\xcb\x00\x6a\x6f\x3b\x07\x4c\x38\x3d\x02\x00\x00\x06\xe9\xc9\xfa\xfd\x74\x03\x68\xad\x42\x28\x80\x55\x5e\xab\x1a\x59\x44\x87\x2c\x7e\x02\xfa\x5e\x4b\x4c\xa9\x46\xb4\x31\x35\x36\x79\x3f\xbe\x39\x05\x9c\xf5\x34\x06\xae\xf2\xfc\x03\xcb\x26\x50\x5a\x63\x50\x52\xaa\x06\x08\x5a\xa1\x14\x9e\xa7\x77\x87\x29\x34\xcc\xbb\x92\x08\x7b\x60\x4f\x58\xb1\x54\xaa\xbc\xee\xd1\x8f\x1d\x94\x95\x7b\xf4\xf3\x1e\x3b\x5d\xcf\x5a\xe8\x56\xd4\x08\xe9\x14\xc0\x1a\x11\x1a\x2d\xad\x77\x0a\xfb\x45\x64\x8e\x7e\xe4\x7e\xdd\x7f\x64\xa9\x4c\x74\xd4\xf0\x60\x77\xc4\x77\x42\x1f\xa0\x00\xf2\x1d\xbe\x21\x37\x11\x9c\x14\x1d\x35\xae\xac\xf0\xea\x5c\x5d\xe7\x52\xb1\x86\xc8\xb1\xb9\x32\x24\x48\x4b\x28\xe0\x2a\xcf\x2f\x12\x4a\x76\x1a\x62\x86\x0e\xe7\x2f\xe8\x85\xe2\xf1\x9a\x2e\xfe\x66\x4d\xd9\x8b\xa0\xce\xdb\xef\x3f\x5e\x21\x00\x9d\x0b\xe4\x51\xb4\xe1\x0d\x0e\xa0\x30\x90\x36\x82\xb4\x35\xfc\x8f\xe6\xf9\x75\x0e\x56\x8a\x03\xaf\xb4\x51\x3c\x12\x85\x02\x2e\xf3\xcb\xfc\x55\xd6\x90\xfd\xee\xff\x84\x8d\x8e\xd6\x74\xc2\x4c\x68\xfa\xd9\x04\x37\xf7\xdb\xcd\xe3\xed\xe6\x13\x7f\x58\x97\x5f\x6f\x6f\xd6\x7c\x5b\x7e\x8e\x7e\x22\x72\xd7\x8b\xc5\xbb\xe7\xcd\xfd\xdd\x72\xc5\xb7\x5f\x1e\x1e\xcb\xf5\xf2\x8e\x2f\x57\xab\x92\xc7\xe1\xb8\x70\x7a\x60\x89\xd3\x7f\x5a\x35\x4d\xf0\x4f\x86\x1d\xb2\x9f\x01\x00\x00\xff\xff\x9e\xa8\xfc\x22\x17\x04\x00\x00") func commandAssetsConnectShortNomadHclBytes() ([]byte, error) { return bindataRead( @@ -87,12 +87,12 @@ func commandAssetsConnectShortNomadHcl() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "command/assets/connect-short.nomad.hcl", size: 1071, mode: os.FileMode(420), modTime: time.Unix(1675191836, 0)} + info := bindataFileInfo{name: "command/assets/connect-short.nomad.hcl", size: 1047, mode: os.FileMode(436), modTime: time.Unix(1675363032, 0)} a := &asset{bytes: bytes, info: info} return a, nil } -var _commandAssetsConnectNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xc4\x7b\x6d\x8f\x1c\xb7\x91\xff\xfb\xfd\x14\x85\xde\x00\x49\xfe\xd8\x9d\x7d\x90\x95\xd8\xc2\x7f\x0f\x90\x2d\xe7\x4e\x77\xb1\x7c\x90\xe4\xcb\x8b\xc0\x58\x71\xba\x6b\x66\xa8\xed\x26\xdb\x24\x7b\x46\x6b\x63\xbf\xfb\xa1\x8a\x45\x36\xbb\x67\x66\x2d\xcb\x87\x28\x01\x24\x79\x48\x16\x8b\xf5\xf8\xab\x22\xfb\x14\xde\x6e\xd0\x21\xd4\xca\x80\x35\xed\x3d\x2c\x11\x14\x78\x6d\xd6\x2d\xc2\x7b\xbb\x84\x06\x57\xda\xe8\xa0\xad\x81\x1e\x1d\xac\x74\x8b\x0b\x78\xbb\xd1\x9e\x47\xb5\x07\xa3\x3a\x6c\x4e\x4e\xa1\xaa\xed\x60\x42\xa3\xfc\xa6\x02\x6f\x41\x07\xd8\xe9\xb6\x85\xda\xa1\x0a\x44\x93\xa6\xef\x74\xd8\x40\xd8\x20\xbc\x7c\x01\xca\x34\xf0\x4a\x75\x58\x2e\x5c\x9c\x9c\x30\x43\x50\xbd\xb7\xcb\x0a\x96\xad\xad\xef\x68\x0f\x5a\x12\x6c\x7f\xde\x59\x1f\xa0\xb6\x66\xa5\xd7\x83\x53\xcc\x94\xed\xf9\x2f\x6d\x78\xd2\x7b\xbb\x3c\x39\x05\xdf\x63\xad\x57\xba\xe6\x19\x0b\x78\x9e\x58\x55\xd0\x60\xdd\x2a\x5a\xb9\xc5\xe9\x2c\xb0\x2b\x08\xca\xdf\xd1\x5e\x2a\xc0\x2b\xdb\x29\x3a\x94\xdf\xd8\xa1\x6d\xc0\x0d\x66\x01\xff\x69\x97\x1e\x36\x6a\x4b\x87\x59\xb7\x76\xa9\xda\xf6\x1e\x06\xa3\x7f\x1a\x90\x85\x70\x06\xd6\x20\x58\x07\x9d\x32\xf7\x4c\x0c\xd6\xce\x0e\xbd\x3f\x83\xdd\x46\xd7\x9b\x93\x53\x50\x0e\x89\xcd\xce\x63\xbb\x45\x0f\xb5\x6d\x5b\xac\x69\x7b\x4f\xfb\xcf\x97\xfb\xc5\xc9\xe9\xc9\x29\xfc\x8d\x7e\xb3\x0e\x41\x9b\x95\x75\x5d\x64\x97\xa4\x87\x1f\x54\xd7\xb7\xe8\xc1\xc6\xc3\x17\x42\x3b\x83\xbe\x45\xe5\x11\x3c\xe2\xc9\x29\x8f\x5a\xd3\x6a\x83\xd0\xd8\x7a\xe8\xd0\x04\x21\x13\x9e\xf1\x1e\xf4\xbf\x4d\x08\xbd\x7f\x76\x71\xb1\xdb\xed\x16\x86\xce\xdf\x3b\xfb\x1e\xeb\xb0\xd0\xf6\xa2\xb1\xb5\xbf\x78\x6f\x97\xe7\x13\xa1\xd1\x2f\x8b\x4d\xe8\xda\x93\xd3\x13\x12\x71\x69\x02\xbf\x9c\x00\x88\x2e\x1d\xae\xb5\x35\x15\xf4\xca\xa9\x0e\x03\xba\x24\x7a\x8c\x9a\x8d\xe3\xa4\x42\x96\x13\x04\x0b\xf8\x01\xeb\x21\x60\xd2\xe9\x02\x5e\xae\x98\x9e\xed\x74\x08\xd8\x9c\x41\x20\x0b\xd4\x66\x83\x4e\x87\x48\xa5\xc1\x95\x1a\xda\x90\xa8\x91\x46\x48\xa8\x55\x54\x55\xb5\xe0\xf5\x32\x78\x93\x7f\xa6\x5f\x47\x4e\x1b\x15\x54\x8d\x26\xa0\xf3\xc7\xd9\x6d\xb5\x0f\x44\xb9\x98\x2c\x8c\x47\x6b\x61\x72\x4b\x24\x3b\xf5\xba\x41\x87\x0d\xec\x36\x68\xa0\x6f\x55\xad\xcd\x3a\xb2\x4e\xfa\x15\x3f\xea\x06\x1f\x68\x7e\xef\xec\x56\x37\xd8\x10\xa7\x25\xed\x1b\xf8\x67\xd5\xd4\x57\xd5\x8f\x27\x23\xa3\xe1\xbe\xc7\x92\xc3\xda\x9a\xe0\x6c\x2b\x9e\x72\xdf\xf3\xd1\xdf\xdb\xa5\x98\x1e\xe8\xae\x57\xb5\x08\xca\xd7\x1b\x6c\x86\x16\xdd\x1f\x3d\x13\x6c\xb0\xd6\x9e\x5d\x20\xf2\x88\x64\x1e\xc2\xdb\xd4\xd7\xb4\x17\x77\x53\x2d\x1b\xa0\x88\xdc\x43\xb0\x4c\xa9\xf2\xe8\xb6\xba\xc6\x6a\xc1\x46\xab\x60\x35\xb4\x6d\x96\x17\x59\x08\xb1\xe6\x79\x6d\xd8\xa0\x76\xd0\xe8\xd5\x0a\x1d\x9a\x1a\xfd\xc4\x64\x89\xda\x31\xa3\x5d\x64\x9d\x1d\xf2\x8c\x92\xcc\xe3\x76\x9f\xa8\x7c\xac\xed\x93\x15\x5c\x64\xe1\xf9\x68\xf8\x91\x08\x4b\xfc\x66\x3c\x7f\xa1\x29\xb2\x82\xe0\x94\x36\x21\xc5\x33\x8e\xa8\x24\x85\xa6\xd1\x22\xcc\x71\x92\x87\x95\x75\x53\x53\x21\x35\x32\x3d\x6d\xf2\x1a\xf2\x11\x0a\x13\x0e\xbd\x1d\x5c\xcd\x71\xa3\x71\x7a\x1b\x4d\x21\xd1\x12\x25\xc6\x6d\x3b\xc5\xc1\x9d\x35\x1c\x6d\x54\x85\x31\x6c\x9c\x41\xc5\xc1\xaa\x3a\x23\x52\x15\x99\x67\x05\x2d\x6e\xb1\x3d\x63\x75\xf9\xa1\xef\xad\x0b\x1e\xb6\xca\x69\xb5\x6c\x49\xe6\x01\x5d\x6f\xdb\x8f\xd0\xc9\xe1\x68\xb5\x27\x99\x8f\xb6\x80\x4f\x52\xdf\x2c\x74\x8d\xbb\x97\x8a\x3c\x2d\xc4\x27\x21\x0c\x40\x85\xe0\xf4\x92\xc2\xd1\x0d\x54\x7f\xf8\x85\xfe\x73\x71\x87\xce\x60\xbb\xa0\x28\xf3\x50\xc9\xbc\xad\x6a\x07\x64\x7e\x6e\xa0\x6a\xb5\x19\x3e\xc4\x91\x87\xc2\x1c\x86\xbe\x51\x01\x93\x29\x4c\x03\x4b\x1c\x03\xda\x3e\xe0\xfa\x3e\xa5\x24\xc9\x22\x0b\x26\x10\xe7\x30\xbd\x3c\x4f\x7b\x18\x3c\x36\x64\x13\x12\x07\xc8\x70\xcc\xda\x43\xab\xef\x10\x9c\x6d\x5b\x32\xa6\xa1\x5f\x3b\xd5\x90\xa3\xd5\xca\x28\xa7\xe9\x5f\xca\x48\xb8\x6a\x07\xbc\x58\x3b\x44\x03\x0d\xf6\xad\xbd\x27\x59\x7b\x0a\xbb\x63\xc8\x35\x76\x8f\x43\xed\x01\x49\xcd\x35\x36\xcc\x5e\x8c\x02\xd3\x33\x4e\xec\x2e\xd9\x1c\xc5\x02\xeb\x8a\xe3\x2d\xe0\x1f\x29\x46\xe6\x59\x4c\x8d\x83\x98\x0e\xa0\xfa\xbe\x65\x41\x59\x50\x6d\x2b\x32\x61\x40\x31\xa6\xfe\x3d\x22\x4b\x2b\x78\x83\xf6\x4b\x67\xe5\xa5\xc9\xb6\x69\x90\xf9\xf4\x9c\x9c\x3b\x74\x6b\x8a\xd7\x09\xa7\xf0\xdc\x3f\x52\xb8\xbe\x23\x11\xf6\x0e\x6b\x6c\x28\x5c\x7d\x8a\xc1\x4f\xe4\xf2\x2f\x35\xf6\xb8\x73\x69\xe8\xa2\x49\x32\xf1\x6c\x9b\x9d\xfa\x70\x4b\x29\xa5\x6d\xb1\x3d\x9e\xfe\x3a\xf5\x41\x77\x43\x07\x66\xe8\x96\xe8\xc8\x48\x23\x2d\xc9\x02\x44\xad\x47\x47\xa2\xa0\x80\x95\xe8\x2d\xe0\xa5\x89\xe1\xac\x56\x1e\x25\x7f\x17\x84\xb3\x6d\x65\xf0\x49\xb6\x21\xf4\x54\x00\x05\x41\x77\x2c\x75\x80\x92\x4f\xb8\x81\xab\x93\xc9\x21\xb4\xb9\xdd\xa0\x6a\xc3\xe6\xfe\x96\x96\x3c\x72\x10\x6d\xf8\x20\x34\x8b\x7f\x50\x6d\x6b\xa3\xc0\x84\x60\xca\xcc\x62\x61\x42\x16\x7c\x20\x46\x97\xb8\x62\xad\x07\xf2\x82\x4e\xb9\x3b\x32\x39\x9f\x27\x91\x05\x0c\x26\x9a\x96\x90\x5b\x0d\x2e\x6c\xd0\x15\xfb\x78\x58\x39\xdb\xc1\x12\xa3\x7f\x92\x00\x1a\x39\xe3\xec\x18\x14\x52\xae\x2e\x7d\x35\x39\x6b\x9a\xd0\xa0\x6a\xc8\x70\x8e\x9f\x35\xcd\x28\x40\x16\xfb\x17\x4b\x37\xb3\x93\x0f\x7c\xe0\x38\x2b\x22\x9a\x97\x96\x8b\x74\x3a\x9f\x1a\x82\x25\xfb\xaf\x19\x19\x07\xa7\x8c\xe7\x64\x15\x43\xd3\x60\x84\xd6\x02\xde\xe6\x21\x4e\x72\xc5\x18\xd7\x0c\x49\x5c\x4a\xb7\xc2\x7c\x8a\x48\x2c\xd5\xde\x06\x34\x41\xf3\x26\x14\xdb\x60\xa9\xea\xbb\xec\xe5\x7a\x05\x15\x31\x72\xeb\x70\x8b\x2e\x54\x23\x7b\x1e\x03\xed\x15\xdc\x20\x76\x34\x17\x1f\xc9\xf8\x49\x37\x15\x71\xef\xec\xda\xa1\xf7\x9f\x24\x63\x65\x7e\x83\x88\x63\x7c\xcf\x44\x96\xb8\xd6\xc6\x47\xe4\x48\xd4\x57\xda\xf9\xb0\x4f\x8e\xd0\xc2\x4c\x46\xe4\x63\x5c\x74\x35\x2c\x2e\xed\x09\x25\x60\x60\x52\x24\x13\x50\x66\xdf\xd4\x95\xa7\x73\x31\x4e\x9b\x91\x1b\xf5\x18\x83\xef\xd4\x0d\x38\x45\x18\xbb\x4f\x70\xb6\xec\xa8\xff\xd0\x40\x12\x72\x3e\xfd\x59\x61\x9e\xd3\x93\x8d\x62\x23\xf3\x48\xde\xb2\xa7\xa5\xe8\x2e\x33\x5d\x4e\xcc\xe2\x90\x16\xf5\x2a\x9b\x91\x14\x7e\xb4\xe4\x3c\x2e\x91\x53\x08\xc1\x56\xf9\x40\x07\x59\x4a\x99\x6c\xcb\xc4\xc9\xbc\x0d\x0e\x8b\xd2\x73\xe4\x5b\x16\xe9\x15\xe7\xb1\x43\x6e\xe8\x4b\x6d\x50\x79\x53\x50\xde\x51\xb1\x2e\xc4\x92\xe1\x30\x81\xe2\x70\x70\x03\x2b\xd5\x7a\x9c\x1c\x9e\x73\xfe\xfd\x31\xeb\x55\x01\xea\x8d\x32\x6b\xcc\xca\x62\xb4\x4e\xbf\xef\x62\x05\x8c\x7e\x68\x93\xfd\x69\x3a\xac\x0f\x6e\xa8\xb9\x90\x4e\xf1\x5f\x64\x26\x15\x3f\x97\x1a\xb2\x45\x53\x64\x8b\x04\x3e\x84\x16\xa5\x5a\x3b\x90\x2c\x6d\xdf\x53\x38\x20\x58\xdb\x3b\xdc\x6a\x3b\xf8\x52\x28\x0b\xf8\xde\xd4\x02\xe9\x7b\x74\x2a\x10\xe4\xa5\x83\x74\x8c\xa6\x47\x41\xa6\x0d\x38\xa1\x8b\x8c\xd8\xa0\xee\xb9\xcb\x11\x2b\xad\xce\x06\xae\xcb\xc8\x4d\x53\x98\x06\x55\x60\x25\x81\x59\x5c\x74\xae\xa4\x4c\xed\x94\xe6\x88\x35\x51\x15\xe5\x26\x82\x43\x5c\x6c\x4e\x52\x68\x54\xcc\xa9\x50\xf9\x5b\x8c\xfe\x67\x14\x87\x02\x51\xc9\x2a\xc1\x9f\x06\xd5\x26\xb9\x73\x09\x9d\xb6\x1c\xf1\x11\xef\xb9\x4b\x42\x3b\x06\xd7\xfe\x91\xa2\x85\x58\x9d\xa4\x94\xb3\x54\x8a\x51\x18\x10\xd2\x06\x77\x42\x6c\x8b\xce\x4b\x75\x17\x89\x49\xe0\x18\x7a\x2a\x08\x59\x54\x5a\x20\x8c\x6d\x9b\x72\x3a\xeb\x2c\xf9\x60\x3c\x0d\xdc\xc0\xe5\x09\xc0\x43\x46\xbc\x9d\x5e\xb3\x74\x0e\x01\xde\x84\xae\x32\x9e\xa4\x68\x16\x17\x90\x80\xec\x6a\x05\x36\xd6\xfd\x8d\x13\xd1\x1b\xdb\xe0\x0c\x97\xaa\x5c\xfa\xcb\x52\x6b\x26\x08\x35\x22\xc7\xe6\x57\x10\x5b\x02\x69\xc2\xef\xe7\x40\x69\xb2\x75\x09\xd3\x92\xf4\x12\x4e\x7b\x33\x91\xdf\xe8\x54\x45\x9d\x20\xde\x1c\x2d\x5d\xd6\x67\xdc\xed\x55\x97\xac\x9a\xf1\x54\x2c\x10\x85\x4e\x4a\x4d\x2d\x85\xe2\xb0\x51\x46\xfa\x6e\x81\x2b\x54\x32\xcb\x94\x6d\xc4\x24\x93\x39\xfe\x29\x8e\x9e\x4f\x90\xd9\x9f\x63\xff\x8f\xe9\xad\x02\xb8\xc1\xb0\x02\x9b\xc1\xd1\x5f\x59\x55\xfe\x71\x4c\x37\x3d\x70\x87\x14\xa5\xb4\xef\x8a\x1c\x5b\xf8\x62\x74\xf6\x68\xc8\x12\x18\x72\x5d\xc2\xb8\x34\x21\x87\x58\xaa\xc5\x08\x51\xd5\x1b\xac\xef\x7c\x95\xeb\xde\x5b\xce\x4f\xbe\x2a\x41\xc2\x2d\x4f\xa2\xac\x22\xb3\x8f\xf0\x77\x1c\x52\x3e\x0a\x26\x93\x5b\x7f\x3c\xa4\xfc\x15\x30\x99\x00\xac\xa8\x5f\xf4\x5c\x40\xee\x06\x06\xcf\xa1\x0c\x5a\xb5\xc4\x16\xfc\xb0\x5a\xe9\x0f\xb1\x60\xac\x9e\x5c\x8a\x38\xae\x9e\x76\xd5\xc7\xe1\xd1\x37\xbf\x0e\x37\x3f\x0a\x05\xa5\x64\xf8\x18\xdc\xfc\x0d\x40\x73\x93\xd1\xdf\xc7\x9e\xfd\xba\x93\xa3\x6f\xaa\xe3\x28\xf1\x69\x57\x4d\x82\x9c\xf4\x4e\xe6\x0d\x1e\xf0\xc8\x89\x68\xda\x5b\x96\x34\xc9\x1d\xc2\x73\x3e\x16\x36\xc0\xb8\xe9\x34\xfb\x68\x6c\x40\x43\xdd\x6a\xee\xc5\x3d\x4f\x0d\x65\xa9\x77\x95\x78\x60\xf2\x30\xa9\x78\x25\x86\x89\x93\x9f\xa6\xe5\x9f\x50\xaa\x96\xe7\xf9\x97\xc6\xc0\xd8\x0c\x28\x22\x60\x3c\x68\xa5\x7a\x5d\x4d\xab\x55\x8e\x39\xc7\xd1\x78\x11\x1b\x27\x89\x74\xa2\x84\xec\x77\x39\x3c\x0d\xa6\x41\x17\xab\x53\xe9\x4b\xb0\xe7\xc4\xd6\x4e\xb2\x5a\x63\xcd\xb9\xc1\x75\xbc\x46\x28\x1b\xa1\x29\xb4\x5a\xb8\x92\xa4\xc8\x81\x71\x5e\xa3\x3a\xf4\x41\xb9\xdc\x10\x4c\x4d\x56\x36\x99\x94\x13\x97\xb8\x51\x5b\x6d\x1d\xab\x84\xb8\xcf\x98\x92\x5b\xe1\x8c\x41\x29\xae\x0e\x26\x9b\x75\x99\x0a\x65\x0b\xe8\x6d\xab\xeb\xb1\x45\xb4\x54\x7e\xb4\x93\xd4\x90\x9d\xe1\x94\x8f\x36\x92\xe9\x31\x66\x66\xf2\x11\x86\x32\xee\xf9\x89\xc6\x22\x0c\x24\x73\x49\xf4\xd2\xd9\xa3\xb9\x24\xa9\x8f\x06\xa1\x42\xc0\xae\xe7\xb6\x35\xe9\x3d\xcb\xa2\x68\x26\x8d\xa1\x82\xdb\x9c\x5b\xd5\x2e\x84\x58\x5e\x7c\x03\xd7\xf2\x53\x9a\xc2\xf5\x63\x2e\x3a\xc6\x4b\x05\x6c\xd5\x51\xe0\x8d\x94\x10\x55\x6a\xe9\xee\x94\x0e\x29\x0b\xc8\x29\x52\x30\xe7\xa8\x18\x2d\x21\x06\x47\x1d\x60\x33\x2b\x83\x00\x78\x2f\x8e\xcd\x4f\xfd\x9c\x8f\xce\x36\x87\xef\x0c\x76\xe4\x10\x1b\xd5\xf7\x98\x0a\x4e\xd9\x88\xe8\x0b\x1b\xd8\x64\x62\x55\x12\x41\xc5\x79\x6e\xd2\x84\xcb\xd2\xca\xc7\xa6\x5d\x23\x5b\xe2\x97\xf8\x21\x64\x52\x49\x53\x83\x09\x52\xeb\xd3\x70\x49\x85\x8e\x97\x88\x58\xf4\x60\xec\x68\xdb\xc9\xb1\x33\x39\xae\xfd\x33\x73\xc4\xfd\x92\x20\xf2\x86\xef\x22\xf7\x79\x94\x75\x4c\xfc\x46\xb6\xe2\xdf\x1e\x26\xde\x8a\xfd\x06\x3b\x74\xaa\xbd\x6d\xb4\xbf\xcb\xb7\x92\x26\x16\x40\x5e\x42\x35\x25\x9e\xa0\x5b\xfd\x33\x45\x04\xc8\x6b\x80\xd6\xe4\xb2\xc9\x07\x54\x0d\x9b\x20\x6c\x94\x6b\x78\x10\x1c\xfe\x34\x68\x27\xb7\x2e\xdf\x70\xc8\xf6\x92\xa1\xc2\xd8\xbe\x9f\x04\x2c\x92\x42\xb4\xa2\xfb\x3d\x1a\x3e\x21\x8c\x74\x37\x90\x28\x14\xa1\x70\x01\xcf\x73\x9b\x25\x66\x26\x6d\x8a\xa0\x17\xf3\x8a\xdf\xc8\x75\x65\xcc\x48\xd3\x23\x7d\x6a\xcc\x38\x28\xcc\x14\x3a\x72\xa3\xe6\x57\x6f\x6e\x7e\x77\xe8\x98\xf2\x31\x8f\x20\xd3\xd1\x22\x90\x70\x81\xe5\x83\xae\xef\x38\xa6\x06\x37\x60\xba\xcd\x2a\x8b\xb5\xb2\xf4\x9a\x5c\xb9\x65\x42\x2c\xe1\xde\xe1\x8a\xb2\x8d\x8d\x09\xbc\xb8\x04\x68\x4a\xc4\x53\xa4\x75\xae\x7f\xa4\x93\x5d\x10\x4a\x65\x02\xc7\x13\x15\xd4\x88\xf7\x06\x8f\xab\xa1\x8d\xc0\xbd\x80\x20\x81\x94\x45\x33\x33\x9d\x12\x9a\xf4\x54\xe2\xf9\x00\xaa\x76\xd6\x97\x45\x78\x2a\xf5\x17\x79\x99\xc8\xe2\x86\x45\x91\x7e\xcd\xa3\x6f\xa4\xd4\xcd\xfc\xc5\xf6\x9b\x74\x13\xb2\xa5\x16\x1b\x34\xda\x61\x1d\xac\xe3\xdb\x0f\x35\xdf\xe6\xe0\xc4\x60\xcb\x4a\x67\x64\x2d\x6d\x7a\x84\x37\xf6\x6d\xaf\x7f\x7e\xa4\xa3\x47\xa3\xc4\xe3\x77\x5f\x13\x37\xec\x0f\xcd\x21\xd7\x8e\x18\x22\xec\x28\xd8\x14\xee\x24\x75\x52\xe2\x88\xa9\xdd\xc0\x93\xcb\xcb\x03\x41\x46\xad\xf8\x99\xc5\x7d\x0a\x2f\x68\xd4\x92\xfd\x46\x5a\x1d\x3e\xde\x8a\xf7\xdc\x26\xcb\xb7\xb4\x62\x41\x7c\x7f\x9a\xb0\x4c\xca\xf0\xd1\x52\xd2\xd5\x95\xe7\x97\x05\x18\x14\x9b\xc7\x27\x3a\xef\x8c\xc9\xcf\xe0\xb6\x89\x83\xb9\xc3\x52\xc5\x10\x47\x32\x48\x8c\x17\x07\xe9\xe6\x6e\x06\x0e\xe5\x71\x80\x9a\x49\xa9\x14\x52\x26\x33\xbb\xfe\xa3\x15\x8b\xf1\x7e\xfe\xa1\x9a\x9d\xeb\x54\xc0\xe2\xbc\x39\xec\xb5\xe3\x3a\x3c\x11\xe3\x59\xe3\xb5\x88\x08\x5b\x5e\x9e\x8c\xc4\xca\x40\x31\xea\x5d\xa7\x2b\x25\x7f\xbe\x43\x1f\xae\xaa\xe2\xc5\xc0\x22\xaf\x8e\x8c\xdc\x14\xd3\xf6\x78\xdd\xa1\x5e\x6f\x72\xbb\x20\x5d\x23\x6a\xd3\x90\xc4\xc9\x51\xdb\x88\x72\x47\x43\x2b\x17\x97\xed\x26\x4a\xb7\x5d\xec\xe8\xf2\x5b\x22\xcc\x2a\x59\xc0\xcb\x50\xbe\x15\x80\xa7\x97\x94\xaa\x39\x89\x61\x18\xd9\x15\x5e\x6e\xe0\x4a\x5c\x84\xaf\x4e\x4b\x2f\xf1\xbd\x43\xd5\x24\x1f\x89\x2d\xb1\xa9\x8b\x68\x53\x3b\x46\xa1\xdc\x33\x8f\x90\x19\x82\x6d\xd1\x29\x53\x63\x6c\x27\x09\x34\xd5\x2e\xb6\x86\x52\xf5\xbc\xbc\x4f\x39\x35\x16\x87\x33\xd3\xe0\x00\x59\x54\xdb\xc9\xea\x73\x35\x17\x99\x03\xbb\xcd\x2a\xf8\xcd\x0e\x36\x39\xdf\x67\x70\xaf\xb8\xff\xbe\x73\xc9\xd1\x3e\x93\x6b\x8d\xa1\x32\x28\xb7\xc6\xe0\xe7\xe6\x1a\x0b\xee\xec\x63\x3d\x3a\x22\xa0\xd6\xb1\xf4\xde\xd7\x19\x65\x43\x54\xf5\x46\xe8\x1d\x70\xcb\x99\x30\xe3\x3c\xf6\x23\x54\xec\x6e\xbf\x14\x82\x96\xfd\xe0\x06\xfe\x72\x99\x7f\x7e\x38\xb4\x58\x7c\xf5\xf0\xe2\x2f\x0e\x2c\x9e\x26\x09\x83\x61\x67\x5d\x86\xa0\x2b\x7e\x63\x13\x11\x47\x6c\xba\x53\x01\x29\x93\x58\x11\xbe\x27\x58\x11\x13\x57\xca\x0f\xf7\xf1\xde\x81\xd3\x54\x81\x8a\x8b\x54\x95\x28\x8c\xb0\x47\x6a\x07\x79\x89\xf7\xcd\xab\x97\xd0\xb7\xc3\x5a\x9b\xf2\xdd\x41\x2c\x61\x05\xc4\xcf\x58\x28\xf0\x82\x58\xf1\xd4\x7c\xe9\x24\x23\x55\x9f\xcd\xb9\xcc\xd7\xa5\x49\xaf\x75\xd8\x0c\xcb\x45\x6d\xbb\x0b\xaa\x62\x94\x36\xe8\x64\x53\x6d\xd6\x17\x42\x66\x46\x22\xe1\xfc\xa5\xd3\xcd\x1a\x67\xd5\x91\xbc\xdc\x81\x1d\x26\x6b\x8a\xbd\xce\x0c\x89\xb5\x07\x55\xd7\xe8\xbd\x5e\xb6\x18\x9f\x4a\x6e\xf5\x08\x50\xbe\xb1\xc6\x0f\x2d\xfd\x65\xb0\x0e\x67\xe0\x2d\x93\xb2\x1c\xe5\x84\x62\x7c\x40\xa3\x0d\xdf\xe9\x08\xbb\xa3\x64\x68\x14\x2a\x3a\x61\x55\x48\x1e\x48\xba\x37\x50\x7d\x79\xf9\xe5\x65\x95\x7f\x7d\x98\x97\x98\xc6\x3f\x16\x14\x29\x24\x39\xdd\x44\xc9\xbf\x78\xf5\x66\xfa\xac\x6b\x2c\x9f\xe2\x73\x3a\x6c\xc8\x48\xb8\x47\xc9\xcf\x2d\x73\x13\x29\xce\x6a\x8c\x9f\xf0\x47\x92\x4b\xcf\xd4\xae\x16\xfc\xff\xea\xc7\x82\x53\x28\xec\x39\x06\x71\x79\x24\x35\x43\x3a\x53\x09\xc6\xfd\x92\x56\xd2\x7e\x1c\x5c\x6e\xa4\xf7\x73\xae\x7a\x3d\xd3\x22\xcb\x30\x95\xf0\xb2\x76\xf2\x88\x94\x27\x94\xa3\xad\xf6\x81\xca\xde\xf8\x84\x69\xa4\xf4\xad\xd9\xda\x7b\xe8\x9d\xfd\x10\xef\xa4\x67\x3d\x47\x67\x39\x25\x38\x4a\x71\x75\xbc\xba\x51\x81\xa9\x17\xd2\xf4\x49\xe4\xfb\xfe\x00\x2f\x63\x31\x56\x24\x20\x58\x6a\xd3\xb0\xba\x28\x5c\xb5\x24\xfb\x4c\xcb\x0a\x48\xa0\x0d\xce\xc6\x62\xc3\x20\x36\x9e\x6f\x5f\xc7\xa7\x64\x69\xaf\x89\x8a\xd3\xd9\xf8\xf8\x37\x50\x7d\x75\x79\x79\x35\x6f\x0f\x70\x63\x7b\xff\x61\x52\xba\xef\x85\xd8\x01\x57\xde\xdb\x5a\x73\x85\x92\x1f\xc9\x88\x2c\x4b\x01\xea\x1c\xa3\xc7\x4e\x4a\x37\xb4\x41\x13\xc4\x89\x5d\x83\x31\x6e\xe7\x81\xd8\x5b\x4f\xb7\x0c\x45\xcc\x88\xf4\xe1\x95\x4d\x79\x58\x66\xba\xc1\x94\x72\x66\xa1\x24\xec\x92\xad\x38\x3e\x66\xcb\xd4\x56\x1a\xdb\xb1\x4a\xc8\x3f\xc7\xe3\x95\x86\xcd\xc6\x06\xf1\x35\x97\x6a\xf5\x16\xab\xd2\x2b\xef\xfb\x3c\x18\xea\x7e\x32\x44\x5c\xa4\x75\x64\xa2\xe3\x50\xd9\x29\xe2\xee\x79\xb1\x4a\x77\x68\x87\xc0\xab\xae\xfd\x01\x57\xaf\xa3\x63\x64\x16\x8b\x1a\xa6\xc1\x5a\xb9\xdb\x99\x5f\x15\x5d\xc5\x90\x0d\x5a\xe6\x82\x6a\x3a\xed\xfd\xe8\xfc\x10\x5f\xbe\x05\x67\xdb\x16\x5d\x7c\xbe\x29\x19\x32\x17\xb5\xac\x6f\x05\xb3\xed\xce\xa4\xff\x31\xbe\xdc\x48\xe6\x4f\x58\x03\x94\x91\x9d\x45\x37\x72\xcb\x59\x3e\xfc\x7a\x2e\xf4\x93\xe5\x4a\x53\xbb\xa0\x25\xdd\x8d\x78\x2d\xa9\xa0\xb9\x37\xaa\xd3\x75\xb4\xe6\xd4\x02\x77\xb8\x26\x57\xa6\x59\x64\x3f\x0e\x3b\x32\x16\x61\xd2\x17\xc4\x62\xb6\x62\x51\x06\x2b\xcc\x65\x53\x66\x9d\xbf\x93\xf1\x73\x76\xff\xf3\xff\x2f\x44\xfe\xed\xdd\x62\x24\x53\x10\xfc\xfa\x3e\x81\xdb\xb3\x4c\x4e\x78\x1a\x0c\x25\x09\x8e\xf7\x96\x22\x85\x56\x2d\x0c\xbd\x0f\x0e\x55\x07\x2f\x6c\x7d\x87\x0e\x74\xa7\xd6\x38\x52\x9e\x89\x17\x7e\x79\x90\xa1\x03\x91\x34\xbe\xd2\x14\x75\x27\x00\x60\xd8\x03\xb6\xba\x19\x68\x33\xa3\xf9\xc6\x97\x04\x7b\x06\x7e\xa8\x37\xa0\xc8\xa7\xe3\xde\x27\xa3\xe2\x39\x85\x9e\xc1\x0e\x97\x65\x4c\xe2\xc7\xa0\x4b\x15\xea\x0d\x85\x42\xce\x7e\x66\xfd\xa9\xe0\xb6\xe0\xf6\x33\xf4\x8a\xb9\xed\x35\x03\xb6\x6c\x85\xd5\x0e\x97\xd5\xac\x57\x5c\xc5\xb7\xb4\xc7\x3b\x03\xbc\x52\x1e\xdc\xce\x2e\x75\x04\x12\x65\x7a\xa9\xc3\xcc\x0c\xc8\xaf\xb2\xf2\x06\xaa\x86\x15\xb1\x17\x8b\xd9\x77\x0f\xbf\x12\x1d\x9f\xf9\x8e\xf1\x3d\x3f\xf3\xf6\xd0\x2b\xef\x8b\x66\x6d\x6c\x93\xb4\xf7\xe9\x79\x41\xe2\xd9\xc2\xb4\x87\x9a\x5e\x1f\x05\xa5\x5b\x46\xcd\x13\xfa\x19\x4a\xf1\x8d\x69\x12\x2c\xb7\x24\x28\x48\x44\xa2\x0c\x7a\x8a\xc7\xd7\x79\x5a\x1c\x1e\x59\xda\x83\x7e\x73\xfb\x59\x8c\x21\x6f\xa5\xd7\x45\xc4\x63\x5f\x21\xb1\x6d\x94\xdf\xe8\xda\xba\xbe\xc1\xed\x05\xa3\x01\x74\x84\x07\x9e\x6d\x9f\x64\x59\x42\xf1\xee\x67\x73\xeb\xed\x2a\xdc\xc6\x6e\xf2\xec\x51\xfb\x7e\x23\x37\xb8\x7b\xe8\x87\x65\xab\xeb\x49\x10\xea\xad\xd7\xc1\xba\xe2\xa5\x50\xbe\x98\x89\x4f\xa3\x86\xb0\x41\x13\x62\xe5\x1c\x9f\xfc\x0f\xf1\x39\x09\xf3\x5d\x06\xa1\xd4\x33\x94\x18\x20\x5a\xa1\x12\x5a\x99\xc8\xf0\x9c\x4d\x36\x85\x31\x4c\x4c\xcf\x34\xed\x71\xcd\xd1\xa1\x72\x41\xaf\x54\x1d\x1e\x69\x5d\x37\x76\x67\x5a\xab\x1a\x7e\x1b\x26\xd3\xe3\x75\xf2\x08\x71\x53\x48\x8d\x0f\xce\x7b\xa7\xed\x68\x47\xb1\x59\x8d\xe5\x67\x0d\xf2\x39\x03\x45\x9b\xda\x9a\x2d\x1a\x82\x91\x63\x73\x2e\xdf\xe4\x93\x01\xa4\xed\x89\xcc\xf4\xd8\x2b\xdd\xc6\xde\x15\x95\x85\x0c\x78\x62\xc1\x21\x5e\x95\xe9\xc5\x8d\x5f\xf2\xcd\x79\x6f\x05\xa5\x13\x77\xd2\x25\x0f\x87\x04\xb1\x87\x48\x0a\x1b\x15\x79\xe4\x29\x69\xad\xdf\x87\x0e\xbf\xa1\x81\x36\x65\x60\x2f\x0c\x7e\x54\x20\x3c\x56\x14\xfd\x96\x36\x9a\xf0\x31\x06\xc4\x92\x68\x36\x80\x09\xcc\x8f\x6a\xbf\x89\x25\xca\xb3\x8b\x8b\x95\xb5\x5c\x80\x65\x5a\x41\xb9\xc5\xfa\xe7\x12\xd3\xc4\x8f\x45\xa6\xe5\x02\x08\x76\x1b\x3a\xa2\xd5\x35\x4f\x9f\xd5\x5f\x28\xf5\xe5\xd3\x27\xaa\xb9\xbe\xbe\x7a\xfa\xc5\xf5\x5f\x70\xf9\xd7\xe6\xaf\x97\xea\xfa\xea\xab\xeb\x6b\xfc\xeb\x57\x5f\x94\x14\x1f\x4a\x5c\x34\xb5\xf2\xd6\xae\xfd\xbe\x85\x93\x34\xcb\xbb\x74\x52\xc5\xc6\xee\xe2\x47\x56\xad\x5d\x8b\x81\x95\x1d\xf5\xf2\x91\x33\xf7\x6c\xf9\xe2\xc4\x7a\xa4\xf9\x5e\x16\x90\x09\x52\xb0\x34\x0b\xf8\xbb\x5d\xaf\xd9\xc9\xbd\xd4\x32\x84\x3c\x47\x4b\x4a\xd0\x60\x39\xc8\xe7\x16\x25\xa3\x52\xad\x91\x0f\x10\x14\x76\xe7\x6b\x47\x99\xb8\xc9\x0f\xf9\x6d\x19\x39\xf9\xeb\x23\xbb\x06\x67\xc3\x68\x64\x3e\x58\x47\x51\xf1\x20\xe0\xff\x14\x23\x2d\xf8\xfb\x6c\x06\x4a\x3c\x1c\x36\x4e\xd6\x41\x69\x50\x9d\xfa\x70\x1b\x75\x02\x8c\xb9\xaf\x2e\x0f\x0c\xde\x4a\xf3\xfd\xea\xe9\xd1\x1a\x3a\x5f\x97\x8d\xcf\x38\x7c\xed\xf4\x32\x7f\xa4\x56\xdc\xb0\xa9\xb2\xfe\x2a\xc2\x86\x7c\xb6\xb6\x80\xd7\xe9\xbb\x9c\xd9\xc5\x5c\xdd\x0e\x0d\x42\x87\x9d\x75\xf7\x67\x09\xf1\x9e\x41\xdd\x0f\xf1\x33\x1b\xd2\xd0\xac\x8e\x42\xe3\x33\x88\x97\x37\x20\x6d\x9b\x3f\x90\x23\xb1\x43\xa7\xea\x0d\xa9\x23\x96\x46\x11\xcd\xd1\x42\x3b\xac\x37\x45\xf8\x16\x96\x6a\xd5\xab\x5a\x87\xfb\xdf\x63\x23\x73\x61\x7d\x36\x43\xc9\x8c\x1c\xb2\x96\xf1\x06\x74\x84\x10\x75\x3f\x44\x3b\x79\x7a\x79\x09\xa7\xfc\xe7\x77\xff\xf1\x73\x1e\x8e\xaa\x81\x1b\xb8\x7e\xfa\x17\x38\xa5\x3f\xbf\xfb\x7a\x06\xc0\x0b\x04\x7e\xa4\xa8\x2a\x4a\xa9\xa8\xad\xa3\xc5\x90\xd0\x9a\x7e\x30\x3a\xf6\x27\x73\x57\xea\x60\xe9\x95\x82\xdd\xa8\xf3\xd4\x4b\x3f\x52\x52\x7d\x42\x21\x75\x02\x93\xdc\x2f\xe5\xd4\xef\x2f\xa2\xfe\x2f\xcb\xa6\xd3\x51\x23\x0e\xe3\x37\xb6\x3b\x0b\x3b\x7e\x71\x60\xa1\xb3\x4d\x02\x00\xe9\x71\x4c\x7a\x5b\xf3\x2c\x97\x14\xff\x0f\xde\x72\x43\xb4\x56\x26\x75\x25\x14\xbc\x4b\xf2\x26\xd5\xbc\xcb\xa9\x85\x49\xa5\xe3\xc9\xcf\x45\x6d\xc2\x4e\xc8\xdf\x11\xf9\xb1\xde\x4d\x3b\x27\x53\x39\x10\xac\x23\x1b\xcf\x9b\x08\x0c\xdf\xdd\x69\xd3\xc4\x56\x57\x21\xc6\x67\x59\x8c\xd5\xbb\xd8\xc8\x88\x1f\x02\x5a\x7e\x0a\x38\x56\x18\x91\x93\xb7\xc4\xc9\x18\x32\x58\xb7\xe3\x45\x73\x62\xa9\xec\x74\xf1\x64\x82\xb0\x0e\xdb\xfb\xa9\x70\x63\xad\x94\xb8\x19\xf9\x28\x9a\xd9\xcc\x32\x3c\xc6\x74\x9e\x7a\xa4\x00\x3a\x9d\x83\xfe\x78\x90\x0c\xfb\xff\xf0\x4b\x87\x41\x2d\x84\xfc\x22\xe9\x87\xc7\x1f\xaa\x62\x85\x72\x6b\x4f\x9c\xfc\xb3\xf8\x0d\xaa\xf3\xba\x3a\x23\x22\xaf\xbe\xff\xee\xf9\x8b\xdb\xb7\xcf\xdf\xfc\xd7\xed\x8b\x97\xaf\x1f\x2e\x96\xd6\x06\x1f\x9c\xea\x17\xef\xbd\x35\xd5\xd9\x74\x51\x1b\x17\x4d\x76\x6e\xed\xfa\x96\xbf\x20\x9b\xec\xfa\x63\xfe\xf7\xc3\x78\x9e\x79\x10\x3a\x9d\x86\xa1\xf1\xae\x6b\x12\x7e\x9e\x5c\x5e\x1e\x22\x56\x64\x3f\x59\x30\xcb\x7e\xd7\x07\xc6\x52\xf2\xbb\x2e\x28\x42\xee\xce\xa6\x57\x8c\xf2\x45\x3f\xd7\x20\xe0\xb1\xb6\xa6\x99\xbd\x6b\x1c\x3b\x76\xc5\x53\x82\x8e\xef\xec\xa6\x1f\x96\x72\x52\xf2\x48\xc5\x73\x98\xc1\x2f\xae\x29\x8a\x27\xc4\x4b\xbb\xcd\xdf\xd2\xc9\x53\xbf\x46\xf9\xcd\xd2\x2a\xd7\x24\xdb\x9a\xdf\x47\x3c\xda\xc8\x7f\xe7\x29\xc9\xd4\x70\x03\x5f\x5d\x5e\x5e\xbf\x2b\x2a\x78\x0a\x7e\xe8\x27\x98\x30\xbf\xcb\xe0\x4f\x64\xdc\x76\xcc\x5d\x1c\x12\x89\x42\x3c\x0c\x77\xc2\x13\x1f\xdc\xc5\x5b\x71\x1b\x97\x77\xe4\x0e\xfd\x6c\xb7\xb1\xdd\x68\xdd\x4e\xb9\x46\xa4\xc5\x74\x62\x13\xda\x16\x7b\x3c\xda\x2b\x16\x52\x87\xee\x07\x00\x26\xa7\xcd\xbf\x06\x2b\xe6\x50\xfc\x3a\x49\x5f\x8f\x37\xd6\x47\x0d\x94\x7b\xc7\xbe\xf1\x75\x75\xbc\x21\xb9\xd7\xbb\xca\x23\x20\x01\xa6\xfc\x25\x69\x2c\x45\x76\x3f\x7b\x3e\x2b\xdf\x5c\x14\x79\x87\x83\x1d\x5f\xc2\xcc\xc8\xfc\x29\x5f\x08\xfc\x99\x53\xdb\x2e\x75\xe3\xe5\xd5\x84\xf5\x02\x8e\x12\x21\x9b\xfa\xc6\x33\x42\x47\xba\xf5\xec\x1d\x82\xd5\xf3\xe7\xfb\xb1\x06\x50\xc5\xb7\x74\x23\x9d\x9c\xad\x54\x18\xdb\xf9\xcf\xbe\xbc\xfc\xf2\x72\x31\x99\x39\x9e\x7d\x2a\x19\xe0\x0f\x6c\xb4\xe1\xfc\x70\x7b\xe0\xda\x63\x3a\x99\xb7\xb8\x5d\x6a\xd3\xdc\xf2\xa9\xe1\x06\x68\xaf\xc9\xac\x87\x93\x43\xff\x7e\x98\x77\x4b\x0e\x26\x3d\xce\xa1\xe3\x53\x86\x98\x38\x0e\x5d\x22\xc1\xf8\xb9\xcc\x3c\xaf\x14\xcd\x53\x28\xf7\x98\x34\xb4\x0f\x63\xb6\xfd\x90\x79\x39\x1b\xcb\x71\xf3\xe9\xd5\xf5\x64\xe8\xa1\xf8\xaf\x79\x27\xb5\xe8\x01\xee\xc5\x9c\x5f\xed\xd1\x95\x37\x37\x84\x1a\x82\xba\x43\x50\xcd\x56\xf1\xc5\x33\xdf\x3b\x4f\x6e\x8c\xe4\x93\xbc\xb1\x54\x30\x5b\xed\xac\xe1\xd7\x1c\xe9\x9b\x7a\xc6\x2b\x2b\x2d\xbd\x21\xd5\x34\xfc\xda\x47\x3e\x02\x4b\xa6\x92\x29\xcc\xae\x5d\xd0\x6c\x0b\x91\x7d\xf3\xfd\x0f\xaf\xde\xbe\x7c\xf5\xef\xb7\x6f\xbe\x7d\xfd\x3f\x2f\xbf\xf9\xf6\xf6\x87\xd7\x7f\x2f\x8a\xf7\x94\x03\x7f\xf8\xef\x37\x6f\x5f\x7f\xfb\xfc\xbb\xdb\xe7\x2f\x5e\xbc\xbe\x65\xfb\xba\x55\xbd\x7e\xa8\xe6\xad\xa4\x23\xad\xb8\xfc\xbf\x63\x3d\xb9\x2c\x58\xee\xcc\xa5\xd9\x8f\x77\xaf\xd2\x9f\x0f\x27\x0f\x27\xff\x1b\x00\x00\xff\xff\xf2\x37\x53\xd3\xa0\x46\x00\x00") +var _commandAssetsConnectNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xc4\x3c\x6b\x8f\x1b\x37\x92\xdf\xe7\x57\x14\x7a\x16\xc8\xee\x62\x46\xf3\x70\x26\x0f\xe3\x74\x80\x13\x67\xef\x7c\xb7\x71\x0e\xb6\x73\xfb\x61\x11\xc8\x54\x77\x49\xa2\x87\x4d\x76\x48\xb6\x64\x25\x98\xff\x7e\xa8\xe2\xa3\xd9\x2d\x69\xe2\x38\x87\x75\x02\x78\xec\x6e\xb2\x58\xac\xf7\xab\xe7\x1c\xde\x6c\xd0\x22\xd4\x42\x83\xd1\x6a\x0f\x4b\x04\x01\x4e\xea\xb5\x42\x78\x67\x96\xd0\xe0\x4a\x6a\xe9\xa5\xd1\xd0\xa1\x85\x95\x54\x38\x83\x37\x1b\xe9\xf8\xad\x74\xa0\x45\x8b\xcd\xd9\x39\x54\xb5\xe9\xb5\x6f\x84\xdb\x54\xe0\x0c\x48\x0f\x3b\xa9\x14\xd4\x16\x85\x27\x98\xb4\x7c\x27\xfd\x06\xfc\x06\xe1\xc5\x73\x10\xba\x81\x97\xa2\xc5\x72\xe3\xec\xec\x8c\x11\x82\xea\x9d\x59\x56\xb0\x54\xa6\xbe\xa7\x33\x68\x8b\x37\xdd\x65\x6b\x9c\x87\xda\xe8\x95\x5c\xf7\x56\x30\x52\xa6\xe3\x1f\x52\xf3\xa2\x77\x66\x79\x76\x0e\xae\xc3\x5a\xae\x64\xcd\x2b\x66\xf0\x2c\xa1\x2a\xa0\xc1\x5a\x09\xda\xb9\xc5\xf1\x2a\x30\x2b\xf0\xc2\xdd\xd3\x59\xc2\xc3\x4b\xd3\x0a\xba\x94\xdb\x98\x5e\x35\x60\x7b\x3d\x83\xff\x32\x4b\x07\x1b\xb1\xa5\xcb\xac\x95\x59\x0a\xa5\xf6\xd0\x6b\xf9\x73\x8f\x4c\x84\x0b\x30\x1a\xc1\x58\x68\x85\xde\x33\x30\x58\x5b\xd3\x77\xee\x02\x76\x1b\x59\x6f\xce\xce\x41\x58\x24\x34\x5b\x87\x6a\x8b\x0e\x6a\xa3\x14\xd6\x74\xbc\xa3\xf3\xa7\xdb\xdd\xec\xec\xfc\xec\x1c\xfe\x46\xcf\x8c\x45\x90\x7a\x65\x6c\x1b\xd0\x25\xea\xe1\x7b\xd1\x76\x0a\x1d\x98\x70\xf9\x82\x68\x17\xd0\x29\x14\x0e\xc1\x21\x9e\x9d\xf3\x5b\xa3\x95\xd4\x08\x8d\xa9\xfb\x16\xb5\x8f\x60\xfc\x53\x3e\x83\xfe\xdb\x78\xdf\xb9\xa7\x57\x57\xbb\xdd\x6e\xa6\xe9\xfe\x9d\x35\xef\xb0\xf6\x33\x69\xae\x1a\x53\xbb\xab\x77\x66\x79\x39\x22\x1a\x3d\x99\x6d\x7c\xab\xce\xce\xcf\x88\xc4\xa5\x08\xfc\x7a\x06\x10\x79\x69\x71\x2d\x8d\xae\xa0\x13\x56\xb4\xe8\xd1\x26\xd2\x63\xe0\x6c\x78\x4f\x2c\x64\x3a\x81\x37\x80\xef\xb1\xee\x3d\x26\x9e\xce\xe0\xc5\x8a\xe1\x99\x56\x7a\x8f\xcd\x05\x78\x92\x40\xa9\x37\x68\xa5\x0f\x50\x1a\x5c\x89\x5e\xf9\x04\x8d\x38\x42\x44\xad\x02\xab\xaa\x19\xef\x8f\x2f\xe7\xf9\x31\x3d\x1d\x30\x6d\x84\x17\x35\x6a\x8f\xd6\x9d\x46\x57\x49\xe7\x09\x72\xb1\x38\x22\x1e\xa4\x85\xc1\x2d\x91\xe4\xd4\xc9\x06\x2d\x36\xb0\xdb\xa0\x86\x4e\x89\x5a\xea\x75\x40\x9d\xf8\x1b\xf5\x48\xd4\x35\x76\xde\x91\xba\x34\xb5\xb0\x8d\x63\xe6\xc6\xeb\x38\x86\x26\x94\x32\x3b\xda\x4b\x30\x90\xd8\x47\x3c\x17\x4a\x95\x48\xd0\x0d\x4b\x9c\xe6\xf0\xcf\xea\xaf\xd5\x4f\x67\xc3\xf5\xfc\xbe\xc3\xf2\x5e\xb5\xd1\xde\x1a\x15\xf5\x6b\xdf\x31\xc1\xde\x99\x65\x14\x58\x90\x6d\x27\xea\x48\x5e\x57\x6f\xb0\xe9\x15\xda\xcf\x02\x4a\x0d\xd6\xd2\xb1\xe2\xe8\x01\xab\x78\xa3\xb1\x86\x4a\x17\x95\x54\xa8\xd1\xcd\xc0\x1b\x86\x54\x39\xb4\x5b\x59\x63\x35\x63\x51\x17\xb0\xea\x95\xca\x54\x26\xb9\x22\xd4\x02\x55\xfc\x06\xa5\x85\x46\xae\x56\x68\x51\xd7\xe8\x46\x82\x4e\xd0\x4e\x89\xfa\x2c\x73\xfa\x98\x3e\x95\x60\x1e\xd7\x96\x04\xe5\x43\x35\x86\x64\xe7\x2a\x13\xcf\x05\x75\x09\x40\x98\xe2\xf3\xe1\xfe\x05\xa7\x48\x76\xbc\x15\x52\xfb\x64\x05\xd9\x0e\x13\x15\x9a\x46\x46\x62\x0e\x8b\x1c\xac\x8c\x1d\x0b\x18\xb1\x91\xe1\x49\x9d\xf7\x90\x66\x91\x71\xb1\xe8\x4c\x6f\x6b\xb6\x36\x8d\x95\xdb\x20\x0a\x09\x56\x64\x62\x38\xb6\x15\xec\x12\x98\xc3\x41\xb2\x85\x1f\x8c\xcd\x05\x54\x6c\xe2\xaa\x0b\x02\x55\x91\x50\x57\xa0\x70\x8b\xea\x82\xd9\xe5\xfa\xae\x33\xd6\x3b\xd8\x0a\x2b\xc5\x52\x11\xcd\x3d\xda\xce\xa8\x0f\xe0\xc9\x71\x1b\x77\x40\x99\x0f\x96\x80\x8f\x62\xdf\xc4\xe0\x0d\xa7\x97\x8c\x3c\x2f\xc8\x17\x0d\x1f\x80\xf0\xde\xca\x25\x19\xb1\x39\x54\x7f\xfa\x95\xfe\x39\xbb\x47\xab\x51\xcd\xc8\x36\x3d\x54\x71\xdd\x56\xa8\x1e\x19\x9f\x39\x54\x4a\xea\xfe\x7d\x78\xf3\x50\x88\x43\xdf\x35\xc2\x63\x12\x85\xb1\x39\x0a\xef\x80\x8e\xf7\xb8\xde\x27\x47\x16\x7d\xcf\x8c\x01\x84\x35\x0c\x2f\xaf\x93\x0e\x7a\x87\x0d\xc9\x44\xb4\x03\x24\x38\x7a\xed\x40\xc9\x7b\x04\x6b\x94\x22\x61\xea\xbb\xb5\x15\x0d\x29\x5a\x2d\xb4\xb0\x92\xfe\x26\x74\x34\x72\xaa\xc7\xab\xb5\x45\xd4\xd0\x60\xa7\xcc\x9e\x68\xed\xc8\x58\x0f\x86\x5a\x9b\x03\x0c\xa5\x03\x24\x36\xd7\xd8\x30\x7a\xc1\x0a\x8c\xef\x38\x92\xbb\x24\x73\x64\x0b\x8c\x2d\xae\x37\x83\x7f\x24\xcb\x9a\x57\x31\x34\x36\x62\xd2\x83\xe8\x3a\xc5\x84\x32\x6c\x2d\x03\x4d\x38\x0c\x19\x02\x86\x03\x20\x4b\x13\xa3\x14\x3a\x2f\xdd\x95\xb7\x26\xd9\xa6\x97\x8c\xa7\x63\x97\xde\xa2\x5d\x93\x95\x4f\xd1\x0d\xaf\xfd\x8c\x8c\xfc\x3d\x1b\x6d\x8b\x35\x36\x64\xae\x3e\x46\xe0\x47\x74\xf9\x97\x0a\x7b\x38\xb9\x14\xf4\xc8\x49\x12\xf1\x2c\x9b\xad\x78\xbf\x20\x97\xa2\x14\xaa\xd3\x4e\xb3\x15\xef\x65\xdb\xb7\xa0\xfb\x76\x89\x96\x84\x34\xc0\x8a\x5e\x80\xa0\x75\x68\x89\x14\x64\xb0\x12\xbc\x19\xbc\xd0\xc1\x9c\xd5\xc2\x61\xf4\xfa\x05\xe0\x2c\x5b\x39\x64\x25\xd9\x88\xf0\x84\x07\x01\x5e\xb6\x4c\x75\x80\x12\x4f\x98\xc3\xcd\xd9\xe8\x12\x52\x2f\x36\x28\x94\xdf\xec\x17\xb4\xe5\x91\x8b\x48\xcd\x17\xa1\x55\xfc\x80\x7c\x73\x20\x58\x04\xd8\xf6\xce\x93\xec\x46\x09\x8b\x60\xc1\x79\x42\x74\x89\x2b\xe6\xba\x27\x2d\x68\x85\xbd\x27\x91\x73\x79\x11\x49\x40\xaf\x83\x68\x45\x70\xab\xde\xfa\x0d\xda\xe2\x1c\x07\x2b\x6b\x5a\x58\x62\xd0\x4f\x22\x40\x13\xef\x38\xb9\x06\x99\x94\x9b\x6b\x57\x8d\xee\x9a\x16\x34\x28\x1a\x12\x9c\xd3\x77\x4d\x2b\x8a\xd0\x8c\xf5\x2b\x85\x24\x31\x74\x4e\x17\x3e\x72\x9d\x15\x01\xcd\x5b\xcb\x4d\x32\xdd\x4f\xf4\xde\x90\xfc\xd7\x1c\x4f\x7b\x2b\xb4\x63\x67\x15\x4c\x53\xaf\x23\xac\x19\xbc\xc9\xaf\xd8\xc9\x15\xef\x38\xd3\x48\xe4\x12\x52\x45\xe4\x93\x45\x62\xaa\x76\xc6\xa3\xf6\x92\x0f\x21\xdb\x06\x4b\x51\xdf\x67\x2d\x97\x2b\xa8\x08\x91\x85\xc5\x2d\x5a\x5f\x0d\xe8\x39\xf4\x74\x96\xb7\x7d\x94\xa3\x29\xf9\x88\xc6\x4f\xda\x31\x89\x3b\x6b\xd6\x16\x9d\xfb\x28\x1a\x0b\xfd\x3b\x48\x1c\xec\x7b\x06\xb2\xc4\xb5\xd4\x2e\xc4\x9b\x04\x7d\x25\xad\xf3\x87\xe0\x28\x5a\x98\xd0\x88\x74\x8c\x53\xb5\x86\xc9\x25\x1d\x45\x09\xe8\x19\x14\xd1\x04\x84\x3e\x14\x75\xe1\xe8\x5e\x1c\xa7\x4d\xc0\x0d\x7c\x0c\xc6\x77\xac\x06\xec\x22\xb4\x39\x04\x38\xd9\x76\x52\x7f\xe8\x45\x22\x72\xbe\xfd\x45\x21\x9e\xe3\x9b\x0d\x64\x23\xf1\x48\xda\x72\xc0\xa5\xa0\x2e\x13\x5e\x8e\xc4\xe2\x18\x17\xe5\x2a\x8b\x51\x4c\x17\x69\xcb\x65\xd8\x12\x6f\x11\x01\x2a\xe1\x3c\x5d\x64\x19\x93\x6b\x53\x3a\x4e\xc6\xad\xb7\x58\x24\xac\x03\xde\x71\x93\x5c\xb1\x1f\x3b\xa6\x86\xae\xe4\x06\x25\x45\x05\xe4\x1d\xa5\xf8\x11\x58\x12\x1c\x06\x50\x5c\x0e\xe6\xb0\x12\xca\xe1\xe8\xf2\xec\xf3\xf7\xa7\xa4\x57\x78\xa8\x37\x42\xaf\x31\x33\x8b\xa3\x75\x7a\xbe\x0b\x79\x33\xba\x5e\x25\xf9\x93\x74\x59\xe7\x6d\x5f\x73\xfa\x9d\xec\x7f\xa4\x59\xac\x13\x70\xaa\x11\x8f\x68\x0a\x6f\x91\x82\x8f\x08\x8b\x5c\xad\xe9\x89\x96\xa6\xeb\xc8\x1c\x50\x58\xdb\x59\xdc\x4a\xd3\xbb\x92\x28\x33\xf8\x41\xd7\x31\xa4\xef\xd0\x0a\x4f\x21\x2f\x5d\xa4\xe5\x68\x7a\x20\x64\x3a\x80\x1d\x7a\xa4\x11\x0b\xd4\x9e\x6b\x23\x4b\x96\xb7\xd6\x78\xce\xe6\x48\x4d\x93\x99\x06\x51\xc4\x4a\x31\xcc\xe2\x54\x75\x15\x93\xdb\x56\x48\xb6\x58\x23\x56\x91\x6f\xa2\x70\x88\x53\xd4\x91\x0b\x0d\x8c\x39\x8f\x50\xfe\x16\xac\xff\x05\xd9\x21\x4f\x50\x32\x4b\xf0\xe7\x5e\xa8\x44\x77\x4e\xbc\xd3\x91\x43\x7c\x14\x12\xc7\x44\xb4\x53\xe1\xda\x3f\x92\xb5\x88\x52\x17\x5d\xca\x45\x4a\xc5\xc8\x0c\x44\xd0\x1a\x77\x11\xd8\x16\xad\x8b\xd9\x5d\x00\x16\x0d\x47\xdf\x51\x42\xc8\xa4\x92\x31\x84\x31\xaa\x29\x97\x33\xcf\x92\x0e\x86\xdb\xc0\x1c\xae\xcf\x00\x1e\x72\xc4\xdb\xca\x35\x53\xe7\x58\xc0\x9b\xa2\xab\x1c\x4f\x92\x35\x0b\x1b\x88\x40\x66\xb5\x02\x13\xaa\x05\x8d\x8d\xa4\xd7\xa6\xc1\x49\x5c\x2a\x72\xc1\x20\x6e\x35\x7a\x14\xa1\x86\xc8\xb1\xf9\x8d\x88\x2d\x05\x69\x11\xdf\x4f\x11\xa5\xc5\xa3\xcb\x30\x2d\x51\x2f\xc5\x69\xaf\x47\xf4\x1b\x94\xaa\xc8\x13\xa2\x36\x07\x49\x8f\xfb\x73\xdc\xed\x44\x9b\xa4\x9a\xe3\xa9\x90\x20\x46\x38\xc9\x35\x29\x32\xc5\x7e\x23\x74\xac\xd6\x79\xce\x50\x49\x2c\x93\xb7\x89\x22\x99\xc4\xf1\xcf\xe1\xed\xe5\x28\x32\xfb\x4b\xa8\x1a\x32\xbc\x95\x07\xdb\x6b\x66\x60\xd3\x5b\xfa\x91\x59\xe5\x1e\x8f\xe9\xc6\x17\x6e\x91\xac\x94\x74\x6d\xe1\x63\x0b\x5d\x0c\xca\x1e\x04\x39\x1a\x86\x9c\x97\x70\x5c\x9a\x22\x87\x90\xaa\x05\x0b\x51\xd5\x1b\xac\xef\x5d\x95\xf3\xde\x05\xfb\x27\x57\x95\x41\xc2\x82\x17\x91\x57\x89\xab\x4f\xe0\x77\x3a\xa4\x7c\x34\x98\x4c\x6a\xfd\xe1\x21\xe5\x6f\x04\x93\x29\x80\x8d\xec\x8f\x7c\x2e\x42\xee\x06\x7a\xc7\xa6\x0c\x94\x58\xa2\x02\xd7\xaf\x56\xf2\x7d\x48\x18\xab\x27\xd7\x91\x1c\x37\x77\x6d\xf5\x61\xf1\xe8\xeb\xdf\x0e\x37\x3f\x28\x0a\x4a\xce\xf0\xb1\x70\xf3\x77\x04\x9a\x9b\x1c\xfd\x7d\xe8\xdd\x6f\xdb\x78\xf5\x4d\x75\x3a\x4a\xbc\x6b\xab\x91\x91\x8b\xb5\x93\x69\x81\x07\x1c\xb2\x23\x1a\x57\xa4\xa3\x9b\xe4\xba\xe2\x25\x5f\x0b\x1b\xe0\xb8\xe9\x3c\xeb\x68\x28\x5b\x43\xad\x24\xd7\xe2\x9e\xa5\x32\x74\xcc\x77\x45\xd4\xc0\xa4\x61\x31\xe3\x8d\x36\x2c\x2a\xf9\x79\xda\xfe\x11\xa9\x6a\x79\x9f\x7f\xa9\x0d\x0c\xc5\x80\xc2\x02\x86\x8b\x56\xa2\x93\xd5\x38\x5b\x65\x9b\x73\x3a\x1a\x2f\x6c\xe3\xc8\x91\x8e\x98\x90\xf5\x2e\x9b\xa7\x5e\x37\x68\x43\x76\x1a\xeb\x12\xac\x39\xa1\xb4\x93\xa4\x56\x1b\x7d\xa9\x71\x1d\x9a\x0f\x93\x12\x2f\x13\xc8\xc0\x4d\x74\x8a\x6c\x18\xa7\x39\xaa\x45\xe7\x85\xcd\x05\xc1\x54\x64\x65\x91\x49\x3e\x71\x89\x1b\xb1\x95\xc6\x32\x4b\x08\xfb\x1c\x53\x72\x01\x9d\x63\x50\xb2\xab\xbd\xce\x62\x5d\xba\xc2\x78\x04\x74\x46\xc9\x7a\x28\x11\x2d\x85\x1b\xe4\x24\x15\x64\x27\x71\xca\x07\x0b\xc9\xf8\x1a\x13\x31\xf9\x00\x41\x19\xce\xfc\x48\x61\x89\x08\x24\x71\x49\xf0\xd2\xdd\x83\xb8\x24\xaa\x0f\x02\x21\xbc\xc7\xb6\xe3\xb2\x35\xf1\x3d\xd3\xa2\x28\x26\x0d\xa6\x82\xcb\x9c\x5b\xa1\x66\x11\x58\xde\x3c\x87\xdb\xf8\x28\x2d\xe1\xfc\x31\x27\x1d\x43\x2b\x02\x95\x38\x19\x78\x23\x39\x44\x91\x4a\xba\x3b\x21\x7d\xf2\x02\xf1\x16\xc9\x98\xb3\x55\x0c\x92\x10\x8c\xa3\xf4\xb0\x99\xa4\x41\x00\x7c\x16\xdb\xe6\x3b\x37\xc5\xa3\x35\xcd\xf1\x9e\xc1\x8e\x14\x62\x23\xba\x0e\x53\xc2\x19\x0f\x22\xf8\x11\x0d\x6c\x32\xb0\x2a\x91\xa0\x62\x3f\x37\x2a\xc2\x65\x6a\xe5\x6b\xd3\xa9\x01\xad\xa8\x97\xf8\xde\x67\x50\x89\x53\xbd\xf6\x31\xd7\xa7\xd7\x25\x14\xba\x5e\x02\x62\xd0\x81\x36\x83\x6c\x27\xc5\xce\xe0\x38\xf7\xcf\xc8\x11\xf6\x4b\x0a\x91\x37\xdc\xc1\x3c\xc4\x31\xee\x63\xe0\xf3\x78\x14\x3f\x7b\x18\x69\x2b\x76\x1b\x6c\xd1\x0a\xb5\x68\xa4\xbb\xcf\xbd\x4c\x1d\x12\x20\x17\x4d\x35\x39\x1e\x2f\x95\xfc\x85\x2c\x02\xe4\x3d\x40\x7b\x72\xda\xe4\x3c\x8a\x86\x45\x10\x36\xc2\x36\xfc\x12\x2c\xfe\xdc\x4b\x1b\xbb\x2e\xdf\xb2\xc9\x76\xd1\x43\xf9\xa1\x7c\x3f\x32\x58\x44\x85\x20\x45\xfb\x03\x18\x2e\x45\x18\xa9\x37\x90\x20\x14\xa6\x70\x06\xcf\x72\x99\x25\x78\x26\xa9\x0b\xa3\x17\xfc\x8a\xdb\xc4\x26\x67\xf0\x48\xe3\x2b\x7d\xac\xcd\x38\x4a\xcc\x64\x3a\x72\xa1\xe6\x37\x3b\x37\x7f\xd8\x74\x8c\xf1\x98\x5a\x90\xf1\xdb\xc2\x90\x70\x82\xe5\xbc\xac\xef\xd9\xa6\x7a\xdb\x63\xea\x66\x95\xc9\x5a\x99\x7a\x8d\x5a\x6e\x19\x10\x53\xb8\xb3\xb8\x22\x6f\x63\x82\x03\x2f\x9a\x00\x4d\x19\xf1\x14\x6e\x9d\xf3\x9f\x58\xc9\x2e\x00\xa5\x34\x81\xed\x89\xf0\x62\x88\xf7\x7a\x87\xab\x5e\x85\xc0\xbd\x08\x41\x3c\x31\x8b\x56\x66\x38\x65\x68\xd2\x51\x8a\xe7\x3c\x88\xda\x1a\x57\x26\xe1\x29\xd5\x9f\xe5\x6d\x91\x16\x73\x26\x45\x7a\x9a\xdf\xbe\x8e\xa9\x6e\xc6\x2f\x94\xdf\x62\x35\x21\x4b\x6a\x71\x40\x23\x2d\xd6\xde\x58\xee\x7e\x88\xe9\x31\x47\x17\x7a\x53\x66\x3a\x03\x6a\xe9\xd0\x13\xb8\xb1\x6e\x3b\xf9\xcb\x23\x15\x3d\x7a\x4b\x38\x7e\xff\x0d\x61\xc3\xfa\xd0\x1c\x53\xed\x10\x43\xf8\x1d\x19\x9b\x42\x9d\x62\x9e\x94\x30\x62\x68\x73\x78\x72\x7d\x7d\xc4\xc8\x88\x15\x0f\x67\xec\x93\x79\x41\x2d\x96\xac\x37\xb1\xd4\xe1\x42\x2f\xbd\xe3\x32\xd9\xd0\x3b\x0e\x12\xc4\xfd\xd3\x14\xcb\x24\x0f\x1f\x24\x25\xb5\xae\x1c\xcf\x23\xa0\x17\x2c\x1e\x1f\xa9\xbc\x13\x24\x3f\x81\xda\x26\x0c\xa6\x0a\x4b\x19\x43\x78\x93\x83\xc4\xd0\x38\x48\x9d\xbb\x49\x70\x18\x47\x0a\xc4\x84\x4a\x25\x91\x32\x98\x49\xfb\x8f\x76\xcc\x86\xee\xfc\x43\x35\xb9\xd7\x79\x0c\x16\xa7\xc5\x61\x27\x2d\xe7\xe1\x09\x18\xaf\x1a\xda\x22\x91\xd8\x71\x5e\x65\x00\x56\x1a\x8a\x81\xef\x32\xb5\x94\xdc\xe5\x0e\x9d\xbf\xa9\x8a\x79\x81\x59\xde\x1d\x10\x99\x17\xcb\x0e\x70\xdd\xa1\x5c\x6f\x72\xb9\x20\xb5\x11\xa5\x6e\x88\xe2\xa4\xa8\x2a\x44\xb9\x83\xa0\x95\x9b\xcb\x72\x13\xb9\xdb\x36\x54\x74\x79\x02\x09\x33\x4b\x66\xf0\xc2\x97\xb3\x02\x70\x77\x4d\xae\x9a\x9d\x18\xfa\x01\xdd\x88\xcb\x1c\x6e\xa2\x8a\x70\xeb\xb4\xd4\x12\xd7\x59\x14\x4d\xd2\x91\x50\x12\x1b\xab\x88\xd4\xb5\xe5\x28\x94\x6b\xe6\x21\x64\x06\x6f\x14\x5a\xa1\x6b\x0c\xe5\xa4\x18\x9a\x4a\x1b\x4a\x43\x29\x7b\x5e\xee\x93\x4f\x0d\xc9\xe1\x44\x34\xd8\x40\x16\xd9\x76\x92\xfa\x9c\xcd\x05\xe4\xc0\x6c\x33\x0b\x7e\xb7\x82\x8d\xee\xf7\x09\xd4\x2b\x9c\x7f\xa8\x5c\xf1\x6a\x9f\x48\xb5\x06\x53\xe9\x85\x5d\xa3\x77\x53\x71\x0d\x09\x77\xd6\xb1\x0e\x2d\x01\x10\xeb\x90\x7a\x1f\xf2\x8c\xbc\x21\x8a\x7a\x13\xe1\x1d\x51\xcb\x09\x31\xc3\x3a\xd6\x23\x14\xac\x6e\xbf\x16\x84\x8e\xe7\xc1\x1c\xbe\xb8\xce\x8f\x1f\x8e\x6d\x8e\xba\x7a\x7c\xf3\xe7\x47\x36\x8f\x9d\x84\x46\xbf\x33\x36\x87\xa0\x2b\x9e\xb1\x09\x11\x47\x28\xba\x53\x02\x19\x17\x31\x23\x5c\x47\x61\x45\x70\x5c\xc9\x3f\xec\x43\xdf\x81\xdd\x54\x11\x15\x17\xae\x2a\x41\x18\xc2\x9e\x98\x3b\xc4\xf9\xbd\x6f\x5f\xbe\x80\x4e\xf5\x6b\xa9\xcb\xb9\x83\x90\xc2\xc6\x20\x7e\x82\x42\x11\x2f\x44\x29\x1e\x8b\x2f\xdd\x64\x80\xea\xb2\x38\x97\xfe\xba\x14\xe9\xb5\xf4\x9b\x7e\x39\xab\x4d\x7b\x45\x59\x8c\x90\x1a\x6d\x3c\x54\xea\xf5\x55\x04\x33\x01\x91\xe2\xfc\xa5\x95\xcd\x1a\x27\xd9\x51\x9c\xdc\x81\x1d\x26\x69\x0a\xb5\xce\x1c\x12\xc7\xf1\x2e\xe7\xe4\x52\x61\x18\xb0\xdc\xca\x21\x40\xf9\xd6\x68\xd7\x2b\xfa\xa1\xb1\xf6\x17\xe0\x0c\x83\x32\x6c\xe5\x22\xc4\x30\x40\x23\x35\xf7\x74\x22\xba\x03\x65\xe8\x2d\x54\x74\xc3\xaa\xa0\x3c\x10\x75\xe7\x50\x7d\x75\xfd\xd5\x75\x95\x9f\x3e\x4c\x53\x4c\xed\x1e\x33\x8a\x64\x92\xac\x6c\x02\xe5\x9f\xbf\x7c\x3d\x1e\xeb\x1a\xd2\xa7\x30\x84\x87\x0d\x09\x09\xd7\x28\x79\x48\x33\x17\x91\xc2\xaa\x46\xbb\x11\x7e\x44\xb9\x34\xa4\x76\x33\xe3\xff\xab\x9f\x0a\x4c\xa1\x90\xe7\x60\xc4\xe3\x90\xd4\x24\xd2\x19\x53\x30\x9c\x97\xb8\x92\xce\x63\xe3\x32\x8f\xb5\x9f\x4b\xd1\xc9\x09\x17\x99\x86\x29\x85\x8f\x7b\x47\xa3\xa7\xbc\xa0\x7c\xab\xa4\xf3\x94\xf6\x86\x11\xa6\x01\xd2\x77\x7a\x6b\xf6\xd0\x59\xf3\x3e\xf4\xa4\x27\x35\x47\x6b\xd8\x25\x58\x72\x71\x75\x68\xdd\x08\xcf\xd0\x0b\x6a\xba\x44\xf2\x43\x7d\x80\x17\x21\x19\x2b\x1c\x10\x2c\xa5\x6e\x98\x5d\x64\xae\x14\xd1\x3e\xc3\x32\x31\x48\xa0\x03\x2e\x86\x64\x43\x23\x36\x8e\xbb\xaf\xc3\x28\x59\x3a\x6b\xc4\xe2\x74\x37\xbe\xfe\x1c\xaa\xaf\xaf\xaf\x6f\xa6\xe5\x01\x2e\x6c\x1f\x0e\x26\xa5\x7e\x2f\x84\x0a\xb8\x70\xce\xd4\x92\x33\x94\x3c\x24\x13\x69\x59\x12\x50\x66\x1b\x3d\x54\x52\xda\x5e\x79\x49\x21\x4e\xa8\x1a\x0c\x76\x3b\xbf\x08\xb5\xf5\xd4\x65\x28\x6c\x46\x80\x0f\x2f\x4d\xf2\xc3\x71\xa5\xed\x75\x49\x67\x26\x4a\x8a\x5d\xb2\x14\x87\x61\xb6\x0c\x6d\x25\x51\x0d\x59\x42\x7e\x1c\xae\x57\x0a\x36\x0b\x1b\x84\x69\x2e\xa1\xe4\x16\xab\x52\x2b\xf7\x5d\x7e\xe9\xeb\x6e\xf4\x8a\xb0\x48\xfb\x48\x44\x87\x57\x65\xa5\x88\xab\xe7\xc5\x2e\xd9\xa2\xe9\x3d\xef\xba\x75\x47\x54\xbd\x0e\x8a\x91\x51\x2c\x72\x98\x06\x6b\x61\x17\x13\xbd\x2a\xaa\x8a\x3e\x0b\x74\x5c\x0b\xa2\x69\xa5\x73\x83\xf2\x43\x98\x7c\xf3\xd6\x28\x85\x36\x8c\x6f\x46\x0f\x99\x93\x5a\xe6\xb7\x80\xc9\x71\x17\xb1\xfe\x31\x4c\x6e\x24\xf1\xa7\x58\x03\x84\x8e\x27\x47\xde\xc4\x2e\x67\x39\xf8\xf5\x2c\xc2\x4f\x92\x1b\x8b\xda\x05\xac\x58\xdd\x08\x6d\x49\x01\xcd\x5e\x8b\x56\xd6\x41\x9a\x53\x09\xdc\xe2\x9a\x54\x99\x56\x91\xfc\x58\x6c\x49\x58\x22\x92\xae\x00\x16\xbc\x15\x93\xd2\x9b\x88\x5c\x16\x65\xe6\xf9\xdb\xf8\xfe\x92\xd5\xff\xf2\xdf\x22\x90\x7f\x7f\x3b\x1b\xc0\x14\x00\xbf\xd9\xa7\xe0\xf6\x22\x83\x8b\x38\xf5\x9a\x9c\x04\xdb\x7b\x43\x96\x42\x0a\x05\x7d\xe7\xbc\x45\xd1\xc2\x73\x53\xdf\xa3\x05\xd9\x8a\x35\x0e\x90\x27\xe4\x85\x5f\x1f\xe2\xab\x23\x96\x34\x4c\x69\x46\x76\xa7\x00\x40\xb3\x06\x6c\x65\xd3\xd3\x61\x5a\x72\xc7\x97\x08\x7b\x01\xae\xaf\x37\x20\x48\xa7\xc3\xd9\x67\x03\xe3\xd9\x85\x5e\xc0\x0e\x97\xa5\x4d\xe2\x61\xd0\xa5\xf0\xf5\x86\x4c\x21\x7b\x3f\xbd\xfe\xd8\xe0\xb6\xc0\xf6\x13\xd4\x8a\xb9\xec\x35\x09\x6c\x59\x0a\xab\x1d\x2e\xab\x49\xad\xb8\x0a\xb3\xb4\xa7\x2b\x03\xbc\x33\x0e\xdc\x4e\x9a\x3a\x31\x24\xca\xf0\x52\x85\x99\x11\x88\x4f\xe3\xce\x39\x54\x0d\x33\xe2\xc0\x16\xb3\xee\x1e\x9f\x12\x1d\xc6\x7c\x07\xfb\x9e\xc7\xbc\x1d\x74\xc2\xb9\xa2\x58\x1b\xca\x24\x6a\x9f\xc6\x0b\x12\xce\x06\xc6\x35\xd4\x34\x7d\xe4\x85\x54\x1c\x35\x8f\xe0\xe7\x50\x8a\x3b\xa6\x89\xb0\x5c\x92\x20\x23\x11\x80\x72\xd0\x53\x0c\x5f\xe7\x65\xe1\xf5\x80\xd2\x41\xe8\x37\x95\x9f\xd9\x60\xf2\x56\x72\x5d\x58\x3c\xd6\x15\x22\xdb\x46\xb8\x8d\xac\x8d\xed\x1a\xdc\x5e\x71\x34\x80\x96\xe2\x81\xa7\xdb\x27\x99\x96\x50\xcc\xfd\x6c\x16\xce\xac\xfc\x22\x54\x93\x27\x43\xed\x87\x85\x5c\x6f\xf7\xd0\xf5\x4b\x25\xeb\x91\x11\xea\x8c\x93\xde\xd8\x62\x52\x28\x37\x66\xc2\x68\x54\xef\x37\xa8\x7d\xc8\x9c\xc3\x87\x02\x7d\x18\x27\x61\xbc\x4b\x23\x94\x6a\x86\xd1\x06\x44\xae\x50\x0a\x2d\x74\x40\x78\x8a\x26\x8b\xc2\x60\x26\xc6\x77\x1a\xd7\xb8\xa6\xd1\xa1\xb0\x5e\xae\x44\xed\x1f\x29\x5d\x37\x66\xa7\x95\x11\x0d\xcf\x86\xc5\xe5\xa1\x9d\x3c\x84\xb8\xc9\xa4\x86\x81\xf3\xce\x4a\x33\xc8\x51\x28\x56\x63\xf9\x31\x44\x67\xcd\x56\x36\x1c\x41\xd4\x46\x6f\x51\x53\x18\x39\x14\xe7\x72\x27\x9f\x04\x20\x1d\x4f\x60\xc6\xd7\x5e\x49\x15\x6a\x57\x94\x16\x72\xc0\x13\x12\x8e\xa8\x55\x19\x5e\x38\xf8\x05\x77\xce\x3b\x13\xa3\x74\xc2\x2e\x56\xc9\xfd\x31\x42\x1c\x44\x24\x85\x8c\x46\x7a\xe4\x25\x69\xaf\x3b\x0c\x1d\x7e\x47\x01\x6d\x8c\xc0\x81\x19\xfc\x20\x43\x78\x2a\x29\xfa\x3d\x65\xb4\x88\xc7\x60\x10\x4b\xa0\x59\x00\x46\x61\x7e\x60\xfb\x3c\xa4\x28\x4f\xaf\xae\x56\xc6\x70\x02\x96\x61\x79\x61\x67\xeb\x5f\xca\x98\x26\x7c\x2c\x32\x4e\x17\x20\xc6\x6e\x7d\x4b\xb0\xda\xe6\xee\x69\xfd\xb9\x10\x5f\xdd\x3d\x11\xcd\xed\xed\xcd\xdd\xe7\xb7\x5f\xe0\xf2\xcb\xe6\xcb\x6b\x71\x7b\xf3\xf5\xed\x2d\x7e\xf9\xf5\xe7\x25\xc4\x87\x32\x2e\x1a\x4b\xb9\x32\x6b\x77\x28\xe1\x44\xcd\xb2\x97\x4e\xac\xd8\x98\x5d\xf8\x34\x4b\x99\x75\x14\xb0\xb2\xa2\x5e\x0e\x39\x73\xcd\x96\x1b\x27\xc6\x21\xad\x77\x71\x03\x89\x20\x19\x4b\x3d\x83\xbf\x9b\xf5\x9a\x95\xdc\xc5\x5c\x86\x22\xcf\x41\x92\x52\x68\xb0\xec\xe3\xe7\x16\x25\xa2\x31\x5b\x23\x1d\xa0\x50\xd8\x5e\xae\x2d\x79\xe2\x26\x0f\xf2\x9b\xd2\x72\xf2\x37\x4b\x66\x0d\xd6\xf8\x41\xc8\x9c\x37\x96\xac\xe2\xd1\x80\xff\x63\x84\xb4\xc0\xef\x93\x09\x28\xe1\x70\x5c\x38\x99\x07\xa5\x40\xb5\xe2\xfd\x22\xf0\x04\x38\xe6\xbe\xb9\x3e\xf2\x72\x11\x8b\xef\x37\x77\x27\x73\x68\xd9\x90\xed\x1e\x2a\xf0\x47\xac\x24\xbe\xef\x8c\x1b\x52\x8d\xcf\x1c\xc7\x55\x64\x27\x86\xac\x2f\x42\x01\x6f\xee\x51\x43\x30\xe8\xa8\xb7\xd2\x1a\xcd\x95\xdb\xfc\xfd\x0c\xcf\xe6\xa6\xd9\x5e\x55\x66\x3b\xb5\x45\xef\xae\x98\x52\x0b\x06\x33\x3b\x04\x5f\x52\x00\xf5\x16\x26\x5d\x0e\x00\x06\x3a\x7d\x3a\xbd\x73\x6e\x11\x0e\xa3\x2b\xae\xb6\x72\x99\x3f\xe7\x2b\xba\x8a\xa2\xcc\x39\x0b\x53\x19\x3f\xf0\x9b\xc1\xab\xf4\x2d\xd2\xa4\x19\x59\xab\xbe\x41\x68\xb1\x35\x76\x7f\x91\xa2\xfc\x0b\xa8\xbb\x3e\x7c\x5a\x44\x52\x39\xc9\x1d\x51\xbb\x9c\xb8\xc4\xb9\x17\xa5\xf2\xa7\x84\x24\x6a\xd0\x8a\x7a\x43\x22\x18\xd2\xc1\x10\xc1\xd2\x46\xd3\xaf\x37\x85\xcb\x8a\x28\xd5\xa2\x13\xb5\xf4\xfb\x3f\xa2\x17\x53\x62\x7d\x32\xe5\xc8\x88\x1c\xd3\x90\xa1\xeb\x3b\x84\x4d\x75\xd7\x07\xdd\xb8\xbb\xbe\x86\x73\xfe\xf3\xfb\xff\xfc\x25\xbf\x0e\xac\x81\x39\xdc\xde\x7d\x01\xe7\xf4\xe7\xf7\xdf\x4c\x92\x8e\x22\xeb\x38\x91\x48\x16\xe9\x63\xe0\xd6\xc9\x04\x30\xc2\x1a\x7f\x5a\x3b\xd4\x64\x73\x25\xee\x68\xba\x99\x94\x73\xe0\x79\xea\x1f\x9c\x48\x23\x3f\x22\x79\x3c\x83\x51\xbc\x13\x53\xc8\x3f\x9e\x38\xfe\x7f\xa6\x8a\xe7\x03\x47\x2c\x86\xaf\x91\x77\x06\x76\x3c\x65\x61\xa0\x35\x4d\x0a\x7a\xd2\x40\x50\x9a\x27\x7a\x9a\xd3\xa8\xbf\xc2\x1b\x2e\x02\xd7\x42\xa7\x4a\x8c\x80\xb7\x89\xde\xc4\x9a\xb7\xd9\x14\x32\xa8\x74\xbd\xf8\xb8\xc8\xc7\x58\x09\xf9\xdb\x29\x37\xe4\xf8\xe9\xe4\x24\x2a\x47\x1c\x54\x40\xe3\x59\x13\x82\xe1\xb7\xf7\x52\x37\xa1\xbc\x57\x90\xf1\x69\x26\x63\xf5\x36\x14\x6f\xc2\xc7\x8f\x86\xc7\x1f\x87\xac\x2a\x60\xf2\x86\x30\x19\x4c\x06\xf3\x76\x68\xae\x27\x94\xca\xea\x1e\x2f\x26\xab\x6a\x51\xed\xc7\xc4\x0d\xf9\x61\xc2\x66\xc0\xa3\x28\xe0\x33\xca\xf0\x18\xd2\x79\xe9\x89\xa4\xef\x7c\x9a\xe8\x84\x8b\xe4\x54\xe7\x4f\xbf\xb6\xe8\xc5\x2c\x82\x9f\x25\xfe\xf0\xfb\x87\xaa\xd8\x21\xec\xda\x11\x26\xff\x2c\x9e\x41\x75\x59\x57\x17\x04\xe4\xe5\x0f\xdf\x3f\x7b\xbe\x78\xf3\xec\xf5\x7f\x2f\x9e\xbf\x78\xf5\x70\xb5\x34\xc6\x3b\x6f\x45\x37\x7b\xe7\x8c\xae\x2e\xc6\x9b\x54\xd8\x34\x3a\x59\x99\xf5\x82\xbf\x9a\x1b\x9d\xfa\x53\xfe\xfb\xc3\x70\x9f\xa9\x11\x3a\x1f\x9b\xa1\xa1\xbf\x37\x32\x3f\x4f\xae\xaf\x8f\x01\x2b\x3c\x7e\xdc\x30\xf1\xf8\xb7\x47\xde\x25\x87\x7f\x5b\x40\x84\x5c\x91\x4e\x93\x9b\xf1\x77\x1f\x70\xde\x45\x8e\xd7\xe8\x66\x32\xcb\x39\x54\x29\x8b\xf1\x89\x96\xfb\x94\xe3\x8f\x69\xd9\x29\x39\xec\x04\xcf\x1c\x8c\x42\x4e\xce\xa3\x8a\xb1\xe9\xa5\xd9\xe6\xef\x07\xe3\x78\x63\x23\xdc\x66\x69\x84\x6d\x92\x6c\x4d\x7b\x30\x8f\x36\x2f\xde\x3a\x72\x32\x35\xcc\xe1\xeb\xeb\xeb\xdb\xb7\x45\xd5\x82\x8c\x1f\xba\x51\x1c\x9c\x67\x51\xf8\xb3\x20\xbb\x1d\x7c\x17\x9b\x44\x82\x10\x2e\xc3\xd5\xff\x84\x07\x57\x2e\x57\x5c\xba\xe6\x13\xb9\x2b\x31\x39\x2d\x03\x5a\x19\xbb\xe3\xcf\xdf\x99\x5a\x0c\x27\x14\xde\x4d\x71\xc6\xa3\xf5\xf1\x08\xea\x58\x4f\x04\x60\x74\xdb\xfc\xd4\x9b\x28\x0e\xc5\xd3\x91\xfb\x7a\xbc\x99\x30\x70\xa0\x3c\x3b\xd4\xca\x6f\xab\xd3\x45\xd8\x83\x7a\x5d\x7e\x03\xd1\xc0\x94\x4f\x12\xc7\x92\x65\x77\x93\x91\xe1\xf8\x9d\x49\xe1\x77\xd8\xd8\x71\xe3\x69\x02\xe6\xcf\xb9\x09\xf2\x17\x76\x6d\xbb\xd4\x81\x18\x45\xaa\xc2\x67\x40\x26\xd5\xca\x27\x80\x4e\x74\x28\xc2\x6f\x34\x08\xf9\x49\xfe\x45\x07\x21\xef\x11\xc5\xf7\x83\x03\x9c\xec\xad\x84\x1f\x5a\x18\x4f\xbf\xba\xfe\xea\x7a\x36\x5a\x39\xdc\x7d\x4c\x19\xe0\x8f\x8a\xa4\x66\xff\xb0\x38\xd2\xea\x19\x2f\xe6\x23\x16\x4b\xa9\x9b\x05\xdf\x1a\xe6\x40\x67\x8d\x56\x3d\x9c\x1d\xfb\xfb\xc3\xb4\x42\x74\xd4\xe9\xb1\x0f\x1d\xc6\x37\x82\xe3\x38\xd6\x38\x83\xe1\x13\xa1\xa9\x5f\x29\x0a\xc6\x50\x9e\x31\x2a\xe2\x1f\x8f\xd9\x0e\x4d\xe6\xf5\xe4\x5d\xb6\x9b\x77\x37\xb7\xa3\x57\x0f\xc5\xbf\xa6\xd5\x63\xfe\x11\xfc\xda\x81\xcd\xf9\xcd\xba\x64\xd9\xad\xa2\xa8\xc1\x8b\x7b\x04\xd1\x6c\x05\x37\xdb\xb9\xd7\x3e\xea\x92\xc5\xcf\x10\x87\x54\xe1\x48\x1e\xc4\xf1\xca\x4a\xc6\x7a\x98\x68\x1a\x9e\x70\x8a\x1f\xbe\x25\x51\x29\x92\xa3\x51\xab\x89\x32\x9f\x81\x64\xdf\xfe\xf0\xe3\xcb\x37\x2f\x5e\xfe\xc7\xe2\xf5\x77\xaf\xfe\xf7\xc5\xb7\xdf\x2d\x7e\x7c\xf5\xf7\xa2\x60\x91\x7c\xe0\x8f\xff\xf3\xfa\xcd\xab\xef\x9e\x7d\xbf\x78\xf6\xfc\xf9\xab\x05\xcb\xd7\x42\x74\xf2\xa1\x9a\x96\xcf\x4e\x94\x1f\xf3\x7f\xa7\xea\x90\x99\xb0\x5c\x8d\x4c\xab\x1f\xaf\xd8\xa5\x3f\x1f\xce\x1e\xce\xfe\x2f\x00\x00\xff\xff\x2e\x00\xb8\x85\xca\x47\x00\x00") func commandAssetsConnectNomadHclBytes() ([]byte, error) { return bindataRead( @@ -107,12 +107,12 @@ func commandAssetsConnectNomadHcl() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "command/assets/connect.nomad.hcl", size: 18080, mode: os.FileMode(420), modTime: time.Unix(1675191836, 0)} + info := bindataFileInfo{name: "command/assets/connect.nomad.hcl", size: 18378, mode: os.FileMode(436), modTime: time.Unix(1675363032, 0)} a := &asset{bytes: bytes, info: info} return a, nil } -var _commandAssetsExampleShortNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x5c\x4f\xed\x6a\xc3\x30\x0c\xfc\xef\xa7\x38\xf4\x04\xdd\x46\x5b\x36\xf0\x93\x94\x52\x5c\x5b\x49\xbd\x34\x51\x90\xed\x7d\x30\xfa\xee\x23\xab\xf1\x42\x0d\xfe\xba\x3b\x9d\x4e\xef\x72\x06\xf1\x97\x1b\xe7\x2b\x13\x7e\x0c\x10\x5c\x76\x9e\xa7\xcc\x9a\x60\x71\xa0\xe0\x9f\xe8\x68\x0c\xd0\xab\x94\x19\xe4\x9d\xbf\x54\x29\x30\x71\xfe\x14\x1d\xea\x0f\x98\x45\x33\x28\x9c\xa9\x21\x40\x16\x58\xec\x5e\xf6\xaf\x15\xb9\x99\xfb\xf9\x77\x65\x97\x06\x90\x72\x88\xe9\xbf\x26\x68\xfc\x60\x85\x05\x05\xf1\x03\x2b\x99\x4a\x78\x99\xba\xd8\xaf\xbc\xe3\xe8\x7a\x46\x5b\xb6\x5a\xbd\xed\xa9\x49\x96\x48\x69\x2d\x39\x2c\xf9\x8e\x8d\x77\x25\x5f\x4e\x49\xba\x7c\xea\x5c\xbc\xc2\x22\x6b\xe1\x16\xb5\x3e\x94\x93\x14\xf5\x9c\x56\xbd\xfd\x5c\xee\x86\xdb\xcd\xa6\x81\x23\x8f\xa2\xdf\xb0\x78\xde\xee\x1e\xe6\x5d\xf6\xcd\xfc\x06\x00\x00\xff\xff\x46\x98\x1b\x9b\x71\x01\x00\x00") +var _commandAssetsExampleShortNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x74\x90\x6b\x6a\xc3\x30\x10\x84\xff\xfb\x14\x83\x4e\x10\x5a\x92\xd0\x82\x4e\x52\x4a\x50\xa4\xb5\xa3\xfa\xb1\x66\xb5\x4a\x1b\x4a\xee\x5e\x9c\x08\xd5\x2d\x44\xa0\xd7\xec\x68\xf4\xb1\x1f\x7c\x84\xa1\x2f\x37\xce\x03\x19\x7c\x37\x0d\xd0\x09\xe7\x19\xc6\x3b\x7f\xba\x49\x00\x30\x91\x7e\xb2\xf4\xe5\x06\xcc\x2c\x0a\x13\x8e\xa6\x2a\x80\x32\x2c\x76\xcf\xfb\x97\xa2\x5c\x9b\xfb\x7a\xdb\xd4\xa5\x1e\x46\x28\xc4\xf4\xfb\x26\x48\x3c\x93\xc0\xc2\x04\xf6\x3d\x89\x69\x4a\xc1\xf3\xd4\xc6\x6e\x95\x1d\x47\xd7\x11\xea\xb0\x25\xea\x75\x6f\xaa\x65\x41\x4a\x6b\xcb\xdb\xc2\xf7\x5e\xeb\x2e\xeb\xe9\x90\xb8\xd5\x43\xeb\xe2\x00\x0b\x95\x4c\x15\xb5\x1c\x62\xa0\x49\xa3\x5e\x56\x5f\xd3\x74\xc6\x5f\x37\xd0\xc6\x81\x1e\x24\x08\x25\xce\xe2\x29\xad\x22\xfc\x9c\xef\x48\xdb\xcd\xa6\x8a\x23\x8d\x2c\x17\x58\x3c\x6d\x77\xff\x3a\xb6\xcc\x6b\xf3\x13\x00\x00\xff\xff\x79\xf2\x64\x01\x9b\x01\x00\x00") func commandAssetsExampleShortNomadHclBytes() ([]byte, error) { return bindataRead( @@ -127,12 +127,12 @@ func commandAssetsExampleShortNomadHcl() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "command/assets/example-short.nomad.hcl", size: 369, mode: os.FileMode(420), modTime: time.Unix(1675191836, 0)} + info := bindataFileInfo{name: "command/assets/example-short.nomad.hcl", size: 411, mode: os.FileMode(436), modTime: time.Unix(1675363032, 0)} a := &asset{bytes: bytes, info: info} return a, nil } -var _commandAssetsExampleNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xc4\x5b\xdd\x6f\x24\x37\x72\x7f\xd7\x5f\x51\x68\x05\xb8\x04\x90\x46\x1f\x6b\x79\x73\x1b\xcc\x83\xed\xcb\xc5\x9b\xc4\x97\x20\x76\x72\x08\xce\x07\x81\xd3\x5d\x3d\xcd\x1d\x36\xd9\x26\xd9\x33\x3b\xbb\xd0\xff\x1e\x54\xf1\xa3\xd9\x33\x23\xad\x2c\x23\x27\x3f\xc8\xf6\x90\x2c\x16\xeb\xf3\x57\x45\xf6\x39\xfc\xd4\xa1\x45\xa8\x85\x06\xa3\xd5\x1e\x56\x08\x02\x9c\xd4\x6b\x85\xf0\xc1\xac\xa0\xc1\x56\x6a\xe9\xa5\xd1\x30\xa0\x85\x56\x2a\x5c\xc0\x4f\x9d\x74\x3c\x2a\x1d\x68\xd1\x63\x73\x76\x0e\x15\x7e\x14\xfd\xa0\xb0\x02\x67\x40\x7a\xd8\x49\xa5\xa0\xb6\x28\x3c\x51\xa4\xc9\x3b\xe9\x3b\xf0\x1d\xc2\xfb\x3f\x80\xd0\x0d\xfc\x49\xf4\x38\x2d\x5b\x9c\x9d\x31\x33\x50\x7d\x30\xab\x0a\x56\xca\xd4\x1b\xa2\x4f\x0b\xbc\x19\x2e\x7b\xe3\x3c\xd4\x46\xb7\x72\x3d\x5a\xc1\x0c\x99\x81\xff\x25\x35\x4f\xfa\x60\x56\x67\xe7\xe0\x06\xac\x65\x2b\x6b\x9e\xb1\x80\x6f\x12\x9b\x02\x1a\xac\x95\xa0\x95\x5b\x9c\xcf\x02\xd3\x82\x17\x6e\x43\x7b\x09\x0f\x7f\x32\xbd\xa0\x03\xb9\xce\x8c\xaa\x01\x3b\xea\x05\xfc\xab\x59\x39\xe8\xc4\x96\x8e\xb2\x56\x66\x25\x94\xda\xc3\xa8\xe5\x2f\x23\xb2\x00\x2e\xc0\x68\x04\x63\xa1\x17\x7a\xcf\xc4\x60\x6d\xcd\x38\xb8\x0b\xd8\x75\xb2\xee\xce\xce\x41\x58\x24\x36\x7b\x87\x6a\x8b\x0e\x6a\xa3\x14\xd6\xb4\xbd\xa3\xfd\x0f\x97\xbb\xc5\xd9\xf9\xd9\x39\xfc\x91\x7e\x33\x16\x41\xea\xd6\xd8\x3e\xb0\x4b\xb2\x8b\x52\x73\x60\xc2\xe1\x0b\xa1\x5d\xc0\xa0\x50\x38\x04\x87\x78\x76\xce\xa3\x46\x2b\xa9\x11\x1a\x53\x8f\x3d\x6a\x1f\xc9\xf8\x77\xbc\x07\xfd\xd3\x79\x3f\xb8\x77\x57\x57\xbb\xdd\x6e\xa1\xe9\xfc\x83\x35\x1f\xb0\xf6\x0b\x69\xae\x1a\x53\xbb\xab\x0f\x66\x75\x39\x13\xda\x15\x8b\xfb\x8c\xa4\x3b\x69\xfe\xf3\x19\x40\x54\xa2\xc5\xb5\x34\xba\x82\x41\x58\xd1\xa3\x47\x9b\x64\x8e\x41\xa5\x61\x9c\x74\xc7\x02\x02\x6f\x00\x3f\x62\x3d\x7a\x4c\xca\x5c\x30\xb1\xf7\x2d\x98\x5e\x7a\x8f\xcd\x05\x78\x32\x3b\xa9\x3b\xb4\xd2\x07\x2a\x0d\xb6\x62\x54\x3e\x51\x23\x55\x90\x34\xab\xa0\xa3\x2a\x90\x88\x83\xcb\xfc\x33\xfd\x3a\x71\xda\x08\x2f\x6a\xd4\x1e\xad\x7b\x9c\x5d\x25\x9d\x27\xca\xc5\xe4\xc8\x78\x30\x13\x26\xb7\x42\x32\x50\x27\x1b\xb4\xd8\xc0\xae\x43\x0d\x83\x12\xb5\xd4\xeb\xc0\x3a\x29\x36\x3a\x4f\x3f\x3a\x4f\xf3\x07\x6b\xb6\xb2\xc1\x86\x38\x2d\x69\x2f\xe1\x2f\x55\x53\xdf\x54\x7f\x3d\x9b\x18\xf5\xfb\x01\x4b\x0e\x6b\xa3\xbd\x35\x2a\xba\xc8\x7e\xe0\xa3\x7f\x30\xab\x68\x73\x20\xfb\x41\xd4\x51\x50\xae\xee\xb0\x19\x15\xda\xdf\x39\x26\xd8\x60\x2d\x1d\xdb\x7e\xe0\x11\xc9\x2e\x22\x6f\x73\x27\x93\x2e\xfa\x99\x50\x6c\x79\x51\xe4\x0e\xbc\x61\x4a\x95\x43\xbb\x95\x35\x56\x0b\xb6\x56\x01\xed\xa8\x54\x96\x17\xd9\x07\xb1\xe6\x78\xad\xef\x50\x5a\x68\x64\xdb\xa2\x45\x5d\xa3\x9b\xd9\x2a\x51\x7b\xcc\x5a\x17\x59\x67\xa7\x5c\xa2\x24\xf3\xb4\xc1\x27\x2a\xcf\x32\xfa\x2c\x34\x17\xd7\xb1\x90\x97\xd3\x91\x0b\xe5\x90\xe2\xbd\x15\x52\xfb\x14\xbb\x38\x72\xd2\xc1\x9b\x46\x46\xf9\x4d\x93\x1c\xb4\xc6\xce\xad\x83\x34\xc7\xf4\xa4\xce\x6b\xc8\x2d\x28\x24\x58\x74\x66\xb4\x35\xc7\x88\xc6\xca\x6d\xd0\x7e\xa2\x15\xf5\x16\xb6\xed\x05\x07\x71\x56\x6a\x30\x4b\xe1\xa7\x10\x71\x01\x15\x07\xa6\xea\x82\x48\x55\x64\x91\x15\x28\xdc\xa2\xba\x60\x0d\xb9\x71\x18\x8c\xf5\x0e\xb6\xc2\x4a\xb1\x52\x24\x66\x8f\x76\x30\xea\x19\x6a\x38\x1d\x99\x8e\x24\xf3\x6c\xa5\xff\x7a\x8d\x1d\x87\xa9\x69\xf7\x4c\x69\xfa\x29\x06\x2c\x00\xe1\xbd\x95\x2b\x0a\x3e\x4b\xa8\xfe\xee\x33\xfd\xef\x62\x83\x56\xa3\x5a\x50\x4c\x79\xa8\xe2\xbc\xad\x50\x23\x32\x2b\x4b\xa8\x94\xd4\xe3\xc7\x30\xf2\x50\x58\xc2\x38\x34\xc2\x63\xb2\x82\x79\x18\x09\x63\x40\xdb\x7b\x5c\xef\x53\xe6\x89\xc9\x62\xc1\x04\xc2\x1c\xa6\x97\xe7\x49\x07\xa3\xc3\x86\xcc\x21\x7a\x3d\xd9\x8c\x5e\x3b\x50\x72\x83\x60\x8d\x52\x64\x47\xe3\xb0\xb6\xa2\x21\xb7\xaa\x85\x16\x56\xd2\x7f\x09\x1d\x83\x93\x1a\xf1\x6a\x6d\x11\x35\x34\x38\x28\xb3\x27\x31\xbb\xc5\x2c\xc0\x6a\x73\xc4\xa1\x74\x80\xa4\xe1\x1a\x1b\x66\x2f\xf8\xfc\xfc\x8c\x33\x93\x4b\xe6\x46\x9e\x6f\x6c\x71\xbc\x05\xfc\x39\x45\xc4\x3c\x8b\xa9\x71\xc8\x92\x1e\xc4\x30\x28\x16\x94\x01\xa1\x54\x94\x09\xa3\x86\x29\xc3\x1f\x11\x59\x99\x08\x2a\x68\xbf\x74\x56\x5e\x9a\xcc\x9a\x06\x99\x4f\xc7\x39\xb8\x47\xbb\xa6\xe8\x9c\xc0\x08\xcf\xfd\x1d\x05\xe7\x0d\x89\x70\xb0\x58\x63\x43\xc1\xe9\x25\xb6\x3e\x93\xcb\xdf\xd4\xce\x27\xab\x39\x83\xa4\x44\xb2\xee\x6c\x96\xbd\xf8\x78\x4f\xb9\x43\x29\x54\x8f\xe7\xb9\x5e\x7c\x94\xfd\xd8\x83\x1e\xfb\x15\x5a\xb2\xcf\x40\x2b\x86\x7b\xa2\x36\xa0\x25\x29\x50\x98\x4a\xf4\x16\xf0\x5e\x87\x20\x56\x0b\x87\x31\x51\x17\x84\xb3\x59\x65\x68\x49\x66\x11\xe9\x09\x0f\x02\xbc\xec\x59\xe0\x00\x25\x9f\xb0\x84\x9b\xb3\xd9\x21\xa4\xbe\xef\x50\x28\xdf\xed\xef\x69\xc9\x13\x07\x91\x9a\x0f\x42\xb3\xf8\x07\xa1\x94\x09\xb2\x8a\x04\x53\x0a\x8e\xc6\x15\xc9\x82\xf3\xc4\xe8\x0a\x5b\x56\xb8\x27\x07\xe8\x85\xdd\x90\xb5\xb9\x3c\x89\x94\x3f\xea\x60\x55\x91\x5c\x3b\x5a\xdf\xa1\x2d\xf6\x71\xd0\x5a\xd3\xc3\x0a\x83\x6b\x92\x00\x9a\x78\xc6\x83\x63\x50\x34\xb9\xb9\x76\xd5\xec\xac\x69\x42\x83\xa2\x21\x9b\x79\xfc\xac\x69\x46\x81\xa6\xd8\xb5\x58\xba\x99\x9d\x7c\xe0\x13\xc7\x69\x89\x68\x5e\x5a\x2e\x92\xe9\x7c\x62\xf4\x86\x4c\xbf\x66\xec\xeb\xad\xd0\x8e\x53\x54\x88\x4a\xa3\x8e\xb4\x16\xf0\x53\x1e\xe2\xd4\x56\x8c\x71\x4d\x90\xc4\x25\xa4\x8a\xcc\xa7\x60\xc4\x52\x1d\x8c\x47\xed\x25\x6f\x42\x61\x0d\x56\xa2\xde\x64\x07\x97\x2d\x54\xc4\xc8\xbd\xc5\x2d\x5a\x5f\x4d\xec\x39\xf4\xb4\x97\xb7\x63\xb4\xa3\x43\xf1\x91\x8c\xdf\xf4\x73\x11\x0f\xd6\xac\x2d\x3a\xf7\x22\x19\x0b\xfd\x2b\x44\x1c\x42\x7b\x26\xb2\xc2\xb5\xd4\x2e\x40\x44\xa2\xde\x4a\xeb\xfc\x31\x39\xc2\x08\x07\x32\x22\x1f\xe3\xa2\xaa\x61\x71\x49\x47\xd8\x00\x3d\x93\x22\x99\x80\xd0\xc7\xa6\x2e\x1c\x9d\x8b\x01\xd9\x01\xb9\x49\x8f\x21\xee\xce\xdd\x80\xb3\x83\x36\xc7\x04\x0f\x96\x3d\xea\x3f\x34\x90\x84\x9c\x4f\x7f\x51\x98\xe7\xfc\x64\x93\xd8\xc8\x3c\x92\xb7\x1c\x69\x29\xb8\xcb\x81\x2e\x67\x66\x71\x4a\x8b\xb2\xcd\x66\x14\x4b\x3b\x5a\x72\x19\x96\xc4\x53\x44\x82\x4a\x38\x4f\x07\x59\xc5\x22\xd8\x94\x39\x93\x79\x1b\x2d\x16\xc5\xe5\xc4\x77\x5c\x24\x5b\x4e\x61\xa7\xdc\xd0\x95\xda\xa0\x3a\xa6\xa0\xbc\xa3\x52\x3c\x12\x4b\x86\xc3\x04\x8a\xc3\xc1\x12\x5a\xa1\x1c\xce\x0e\xcf\xe9\x7e\xff\x98\xf5\x0a\x0f\x75\x27\xf4\x1a\xb3\xb2\x18\x96\xd3\xef\xbb\x50\xe3\xa2\x1b\x55\xb2\x3f\x49\x87\x75\xde\x8e\x35\x97\xca\x29\xfe\x47\x99\xc5\x8a\x9e\x6b\x8a\xb8\x45\x53\x64\x8b\x84\x3b\x22\x2d\xca\xb2\x66\x24\x59\x9a\x61\xa0\x70\x40\x60\x76\xb0\xb8\x95\x66\x74\xa5\x50\x16\xf0\x1f\xba\x8e\xd8\x7d\x40\x2b\x3c\x01\x5d\x3a\x48\xcf\x18\x7a\x12\x64\xda\x80\x73\x79\x94\x11\x1b\xd4\x9e\x7b\x18\xa1\xa4\xea\x8d\xe7\x02\x8c\xdc\x34\x85\x69\x10\x05\x4c\x8a\xb9\x92\x08\x46\x9f\xb0\xd8\x0b\xc9\x11\x6b\xa6\x2a\xca\x4d\x84\x84\xb8\xaa\x9c\xa5\xd0\xa0\x98\xf3\x48\xe5\x8f\x21\xfa\x5f\x50\x1c\xf2\x44\x25\xab\x04\x7f\x19\x85\x4a\x72\xaf\xcd\xa8\xb3\x1b\x4e\xd0\x88\xf7\xdc\x25\xa1\x3d\x86\xd4\xfe\x9c\xa2\x45\xb4\xba\x98\x52\x2e\x52\xcd\x45\x61\x20\x92\xd6\xb8\x8b\xc4\xb6\x68\x5d\x2c\xe3\x02\xb1\x18\x38\xc6\x81\x2a\x3f\x16\x95\x8c\xe8\xc5\xa8\xa6\x9c\xce\x3a\x4b\x3e\x18\x4e\x03\x4b\xb8\x3e\x03\x78\xc8\x60\xb7\x97\x6b\x96\xce\x29\xac\x9b\x80\x55\x86\x92\x14\xcd\xc2\x02\x12\x90\x69\x5b\x30\x6d\x28\x46\x6d\x14\xbd\x36\x0d\x1e\x40\x52\x91\x6b\xfc\xb8\xd4\xe8\x19\x38\x0d\xa0\xb1\xf9\x02\x58\x4b\xf8\x2c\xf2\xfb\x1a\x00\x2d\x6e\x1d\xc9\x24\xc1\x25\x88\xf6\xe3\x4c\x74\x93\x3f\x15\xd5\x41\x74\xe4\x60\xe4\x71\x7d\x46\xdb\x4e\xf4\xc9\xa0\x19\x4a\x85\x8a\x30\xd2\x49\x59\x49\x51\x14\xf6\x9d\xd0\xb1\xa9\xe6\xb9\x24\x25\x8b\x4c\x89\x26\x5a\x63\xb2\xc4\xbf\x0f\xa3\x97\x33\x50\xf6\x0f\xa1\xb5\xc7\xf4\x5a\x0f\x76\xd4\xac\xbb\x66\xb4\xf4\xaf\xac\x25\xf7\x34\x9c\x9b\x1f\xb8\x47\x0a\x50\xd2\xf5\x45\x7a\x2d\xdc\x30\xf8\x79\xb0\xe1\x18\x13\x72\x35\xc2\x90\x34\x81\x86\x50\xa0\x85\xe0\x50\xd5\x1d\xd6\x1b\x57\xe5\x42\xf7\x9e\x53\x93\xab\x4a\x7c\x70\xcf\x93\x28\xa1\xc4\xd9\x8f\xf0\xf7\x38\x9a\x7c\x12\x47\x26\x8f\x7e\x3e\x9a\xfc\x02\x8e\x4c\xd8\x35\xaa\x3f\xea\xb9\x40\xdb\x0d\x8c\x8e\xa3\x18\x28\xb1\x42\x05\x6e\x6c\x5b\xf9\x31\x94\x89\xd5\x9b\xeb\x28\x8e\x9b\xbb\xbe\x7a\x1e\x14\xfd\xf1\xcb\x48\xf3\x59\x00\x28\xe5\xc1\xa7\x90\xe6\xaf\xc0\x98\x5d\x06\x7e\xcf\x3d\xfb\x6d\x1f\x8f\xde\x55\x8f\x03\xc4\xbb\xbe\x9a\xc5\xb7\xd8\x2c\x39\xec\xe8\x80\x43\xce\x41\xf3\xc6\x71\xcc\x90\xdc\x05\xbc\xe4\x63\x61\x03\x0c\x99\xce\xb3\x8f\x86\xee\x32\xd4\x4a\x72\xbf\xed\x9b\xd4\x2d\x8e\x55\xae\x88\x1e\x98\x3c\x2c\xd6\xb9\x31\x7c\x45\x27\x3f\x4f\xcb\x5f\x50\xa0\x96\xe7\xf9\x9b\x86\x3f\xde\x38\x12\x09\x67\xac\x6a\x51\x77\xb1\x69\x5c\xb4\xd1\x46\xfd\x08\x7e\x3b\x08\x8c\xb3\x04\x3a\xd3\x40\x76\xba\x1c\x9b\x46\xdd\xa0\x0d\x55\x69\x6c\x45\xb0\xdb\x84\x6e\x4e\x32\x59\x6d\xf4\xa5\xc6\x75\xb8\x20\x28\x3b\x9d\x29\xae\x1a\xb8\x89\xc9\x90\xa3\xe2\x61\x6d\xaa\xd1\xef\x8c\xdd\x9c\x6e\xfc\xc4\xc1\x83\xde\x6a\x0a\xbb\x47\xf8\x5a\xea\x5a\x8d\x0d\xb1\x6e\xf1\x97\x11\x1d\x67\xcc\xc1\x58\x0f\x2b\xa9\xe9\x77\x77\x00\x3f\x9e\x6d\x00\x73\x2e\x0f\x4c\xe0\x19\x46\x30\xed\xf9\x42\x43\x88\x0c\x14\xa4\x92\x6c\x82\x21\x40\x38\x67\xd5\xac\xaa\xfc\x0b\x90\xf0\x97\xf0\xf5\x9b\xb7\xbf\x8f\xbf\x3c\x9c\x85\xbf\xa5\x02\x52\x57\x36\xdd\x1d\xe9\x00\x62\x5d\xf4\x39\x6f\xf8\x26\xc0\xf9\x64\x0a\x6c\x3e\x22\xba\x33\xad\x9c\x00\x30\x7b\x5b\xf8\x11\x1a\xe9\x6a\xb3\x45\xbb\x07\xd4\x6b\x2e\x5f\x62\x7b\xdd\x41\x3d\x5a\x8b\xda\xab\x7d\xdc\xc2\x58\xf8\xce\x68\x37\xaa\x59\x84\x62\x67\xee\xc5\x06\x4f\x92\xe5\x7a\x21\x84\xc5\x40\xa4\xa3\xfa\x20\xf8\xbd\xf4\xa4\x37\x01\x9d\x71\x3e\x36\xb7\x42\xba\xb3\xfe\xa5\xfa\x9f\x0b\xe9\x15\xf4\x3f\x93\x35\xff\x4d\x12\x49\xda\xe6\x5b\x9c\xd8\x63\xb5\xd8\x48\x77\x19\x22\x45\x1c\xf6\x62\xed\xe2\xf0\x5f\xd2\x8d\xce\x45\x8a\x26\x7f\x2d\x6d\x28\xd2\x68\x56\x69\x69\xbc\x6d\xb1\xf4\x2b\xb3\x1b\xd3\xdc\x14\x7e\x08\x04\x3c\x61\x40\xf9\x3e\x33\xa8\x39\x01\x93\x00\x22\x5a\x63\x33\xb5\xd0\x01\x0b\x07\xa3\x42\xd1\xb1\x1a\xe2\x44\xe9\xf2\xbd\x0f\xf0\xed\x2b\xc5\x81\xbd\x19\xb9\xa9\xbf\x45\x2d\x51\xd7\xf8\x4f\x99\xd6\xa8\x6b\xd3\x87\x12\x99\xeb\x54\xd4\xa1\xc6\xf4\x8b\x53\x4c\xbb\xac\x36\x32\x20\x9d\x4b\xa7\xd9\x5d\x4d\x4a\x68\xf3\x2b\x96\x3c\x2f\xb0\xf9\x39\xff\xff\x5c\x27\x42\xc9\x6d\xd6\x06\x0d\xf2\xb5\x48\x1c\xf4\xf5\x50\x0e\xf1\xed\xc1\x56\xa8\x0c\x2b\x8a\x55\xb2\x47\xaa\x0d\x69\xe8\xb6\x18\x89\x4e\x3d\xf7\x6d\x8b\xce\x0b\x9b\xef\x56\x52\x18\xe5\x64\x9c\x0a\x8d\x15\x76\x62\x2b\x8d\x65\x5b\x27\xdf\xce\x85\xfa\xfb\x36\x15\xf6\x84\x58\x47\x9d\x01\x43\x59\x5f\xc4\x2d\x60\x30\x4a\xd6\x53\xcb\x7d\x25\xdc\x94\x81\xd3\x75\xd6\x4b\xbd\x6f\x7e\x8c\x57\xf0\xbe\xc8\x40\x41\x2a\x1d\xfb\xf3\xcc\x13\xa6\x44\x2b\xbc\xc7\x7e\xe0\xfb\x3e\xca\xa7\x59\x0c\x45\x5f\x7e\xc2\x5f\x49\xdd\x8b\x48\x2c\x2f\x5e\xc2\x6d\xfc\xa9\xb4\x88\x37\xb9\x89\x33\xdd\xc6\xa2\x12\x8f\x36\x32\x90\xaa\x0c\x91\x2e\xc6\x76\x42\xfa\x04\xad\xe3\x29\x12\x42\x66\xa8\x19\x03\x3c\x87\x56\xe9\x39\xae\x96\x6d\x25\x00\xde\x8b\x2d\xf3\xce\x1d\xf2\xd1\x9b\xe6\xf4\x65\xeb\x8e\x80\x46\x27\x86\x01\x53\x03\x2f\x6e\x44\xf4\x23\x1b\xd8\x4c\x2e\x97\x44\x50\xb1\xc1\xcf\xee\x33\xb2\xb4\xf2\xb1\x69\xd7\xc0\x56\x82\x0d\x1f\x7d\x26\x95\x34\x35\x6a\x1f\x7b\xa7\x34\x5c\x52\xa1\xe3\x25\x22\x06\x1d\x68\x33\x99\x75\x02\x4c\x99\x1c\xf7\x52\x33\x73\xc4\xfd\x0a\x51\x43\xc7\x6f\x37\x8e\x79\x8c\xeb\x98\xf8\x32\x6e\x75\xc2\x51\x71\xe8\xb0\x47\x2b\xd4\x7d\x23\xdd\x53\xa1\x74\xf4\x52\xc9\x4f\x84\xb4\x20\xaf\xa1\xa4\xb8\xc9\x59\xd8\x79\xa4\x9c\xda\x52\x02\x14\xb6\xe1\x41\xc6\x43\xd2\xc6\xeb\xea\xef\x18\x07\xbb\x08\xfb\xfd\x74\x09\x3a\x03\x82\x24\x85\x60\x45\xfb\x23\x1a\x2e\x65\xfb\x74\xc3\x9a\x28\x14\x10\x73\x01\xdf\xe4\xb6\x75\x80\xfb\x52\x17\x60\x32\xe4\x77\xd7\xc5\x07\x1e\x01\xe6\xcf\x8f\xf4\xd2\x70\x71\x52\x98\x29\x6a\xe4\xc6\xf7\x17\xaf\xbc\x7f\x73\xd4\x98\xf3\x51\x50\x9c\x0f\x14\x31\x84\x7b\x55\xce\xcb\x7a\xc3\x91\xd4\xdb\x11\xd3\x0b\x80\xb2\xef\x55\x76\xb1\x66\xcf\x14\x32\x21\x16\xee\x60\xb1\x25\xd4\x66\x02\x30\x2a\xae\x52\x9b\xb2\x82\x2c\xca\x24\x6e\x25\x65\xc8\x34\xa1\xb0\xd8\x76\xe1\x50\x22\xbc\x98\xea\xe7\xd1\x61\x3b\xaa\x80\xc8\x8b\x92\xce\x93\x9e\x68\x66\x91\xd9\xa7\x52\x6f\x40\xeb\x24\x41\xb3\xda\x1a\x57\xf6\x33\x53\xd7\x74\x91\x97\x45\x59\x2c\x59\x14\xe9\xd7\x3c\xfa\x63\xec\x1a\x66\xfe\xc2\x4d\x46\x6c\xcc\x66\x23\x2d\x36\x68\xa4\xc5\xda\x1b\xcb\x77\xc8\xe2\x70\x9b\x93\x13\xbd\x29\x3b\x47\x13\x6b\x69\xd3\x47\x78\x0b\xd8\x5a\x7e\x7a\xe2\x72\x84\x46\x89\xc7\x1f\xbe\x25\x6e\xd8\x15\x9a\x53\x5e\x1d\xca\x32\xbf\xa3\x38\x53\x78\x52\xec\x3b\x25\x8e\x98\xda\x12\xde\x5c\x5f\x9f\x88\x2f\xa2\xe5\xf7\x68\xfb\x14\x59\x02\x18\x72\xb9\x6b\xec\xc2\x4b\xa2\x81\x6f\x1c\xf2\xcb\x96\x68\x41\xfc\xe6\x24\x95\x87\x29\xaf\x07\x4b\x49\x0f\x00\x1c\x3f\xc3\x42\x2f\xd8\x3c\x5e\xe8\xb7\x07\x4c\xbe\x82\xc7\x26\x0e\x66\xb4\xd2\x8f\xb9\xe4\x9e\x9e\x3d\x1c\x54\xab\xf1\x1d\x95\x38\x10\x4e\x29\x9b\x23\x12\xfc\x72\x82\xe6\x2f\xa6\x87\x4c\x0f\xd5\x59\xd2\x5e\x28\xb6\x0f\x2f\xd5\x9c\xb4\xdc\xc4\x4c\x44\x78\xd6\x74\x9d\x1c\x25\x1b\xdf\xe4\x1d\x47\x84\x49\xc1\x32\xdd\xc0\xbb\xcb\x1d\x3a\x7f\x53\x15\xcf\xa9\x16\x33\x16\x88\xd1\x3c\x2b\xb3\xb7\x43\xb9\xee\x72\x7b\x35\x3d\xb6\xa0\x62\xbb\x26\xdf\xb0\xa8\x42\x63\x60\x32\xa4\xb4\xb0\xec\xca\x53\x16\xed\xc3\xc5\x17\x3f\xa8\xc4\x2c\xf3\x05\xbc\xf7\xe5\xdb\x29\xb8\xbb\xa6\x0c\xcc\xb9\x09\x53\x35\x97\xb8\x58\xc2\x4d\x34\xfe\x73\xb6\xff\x59\x95\x3b\x58\x14\x4d\x32\xff\x70\x71\x30\xb7\x7e\xa9\xa9\x4c\x71\xc1\xc8\x22\x06\x06\x6f\x14\x5a\xa1\x6b\x0c\x4d\xf7\x88\x35\xa5\x0d\x0d\xf4\xd4\x68\x5c\xed\x53\xa6\x0c\x7d\xb4\x03\xf5\x73\xec\x2b\x1a\x93\xc9\xa0\x73\xe3\x2b\x30\x07\x54\xd7\xbe\xb8\x40\x2d\xcf\xf7\x0a\x9e\x13\xf6\x9f\x51\x8a\xa7\x7a\x0d\xaf\xf1\xc2\xae\xd1\xbb\x43\xbb\x0c\x9d\xc8\xec\x3f\x03\x5a\x5a\x29\xd6\xa1\x27\x79\xac\x21\x4a\x6b\x28\xea\x2e\xd2\x3b\xe1\x72\x07\xa2\x0b\xf3\xd8\x51\x50\xb0\x3b\x7d\x2e\xc4\x1a\xf7\x83\x25\x7c\x9d\xcd\x34\xb6\x64\x0e\x16\x47\x5f\x3c\xbd\xf8\xab\x13\x8b\xe7\xd1\x3e\xbc\x4f\x8b\x35\x1f\xd7\xde\x8e\x00\x23\xb9\xe5\x56\x36\xa3\x50\x30\x6a\xc9\xb7\x5e\x3b\x63\x37\x17\xe0\xc6\xba\x0b\x2d\x9d\x3f\x98\x7a\x13\x61\x04\xbf\xf8\xf2\x42\x6a\xb4\x17\xb0\xc3\x55\x69\xf2\xfc\x0c\x6e\x25\x7c\xdd\x51\x49\x5e\xa3\x23\x24\xf9\x52\xd3\x2d\xb8\x7d\x85\xd2\x6e\x7a\x52\xc3\x7f\x19\x65\x85\xfe\x49\x75\x50\xdc\x55\xe1\x09\xe1\xe3\xf9\x9c\xd7\xc6\x77\x86\x07\xad\xed\x68\x81\x53\x51\x12\x4b\x42\x06\xca\xa9\xae\x0a\x2b\x97\x50\x35\xac\x85\xa3\x2e\x0b\x57\xef\xa7\x1b\xa5\xd3\xeb\xc6\xa9\x4f\x5a\x74\xdc\x06\xe1\x5c\x51\x5d\x05\x70\xa3\xf6\xe9\x7e\x35\xf1\x6c\x60\x5e\xf4\xa4\xe7\x17\x5e\x48\xc5\x2e\x32\xa3\xef\xa6\x9a\xd1\x4e\x6f\xc3\x19\x48\x90\xcf\x04\xa2\x17\xe0\x4c\xf9\xcc\x34\x4f\x0b\xc3\x13\x4b\x33\xdd\xb6\x27\x8c\x27\x89\x29\xf0\x50\x34\x39\x65\x2f\xd6\x98\xbb\x5e\xef\xde\x56\x79\x24\xbc\xc9\xe4\x47\xc1\xab\xf0\x26\x78\x26\x50\x31\xfa\xee\xde\x99\xd6\xdf\x87\x0a\xf0\xe0\x05\xef\x71\xf1\xe5\xed\x1e\x86\x71\xa5\x64\x5d\x90\xb2\x38\x18\x27\xbd\xb1\xc5\x6b\x89\xdc\x47\x09\xcf\x43\x46\xdf\xa1\xf6\x21\x25\x86\xf7\xcd\x63\xb8\x52\x67\xd6\x5d\x41\x2c\x81\xfd\xe0\x87\x49\x31\x94\x1f\x85\x0e\x0c\x1f\xb2\xc9\xd6\xb0\xc8\x24\xe6\x67\x9a\x83\xd3\x87\x03\x83\xa2\xca\xbf\x15\xb5\x7f\xa2\xdc\x6c\xcc\x4e\x2b\x23\x1a\x7e\x1f\x13\xa7\x87\x7b\x35\x51\x14\xd8\xbd\xa1\xa8\x1e\x9e\xda\x0e\x56\x9a\xc9\x94\x42\x81\x89\xe5\x1b\xee\xd8\xc3\xa3\x68\x93\xfb\x76\x53\xb5\x3e\x5d\x69\x92\x0d\xa4\xed\x89\xcc\xc1\x1d\x80\x54\x01\x74\x52\xfc\x07\x8d\xd8\x84\x10\x1f\x1d\x6b\xaa\x3b\x78\xe3\xf7\x7c\x85\x38\x18\xe7\xe4\x4a\x71\x9d\x90\x2a\x5b\x7f\x4a\x10\xfd\xa8\xbc\x24\x00\x15\x7a\x0f\x85\xdf\x66\x79\xe4\x29\x69\xed\x54\xb4\xe4\xc9\xbf\x02\xf9\xce\x19\x38\x0a\x83\xcf\x0a\x84\xe5\xd6\x2f\x0c\x86\x89\x8f\x23\x7a\x59\xf7\x65\x77\x33\x6a\x7c\x09\x15\x6d\xf5\xee\xea\xaa\x35\x66\x51\x9b\x3e\x93\x59\x78\x61\x17\xeb\x4f\x65\xfb\x32\x3c\x8a\x77\x33\x3a\x10\x3a\xa7\x6e\xec\x89\x56\xdf\xdc\xbd\xab\xbf\x12\xe2\x1f\xef\xde\x88\xe6\xf6\xf6\xe6\xee\xab\xdb\xaf\x71\xf5\xb6\x79\x7b\x2d\x6e\x6f\x7e\x7f\x7b\x8b\x6f\x7f\xff\x55\x49\xf1\xa1\x6c\x81\xce\x0d\x5c\x99\xb5\x3b\x36\x6e\x12\x64\x79\x9f\x48\x5a\xe8\xcc\x2e\x7c\x45\xa2\xcc\x3a\xda\x56\x59\x05\x97\x6f\x3c\xb9\xce\xe2\x3e\x87\x71\x48\xf3\x5d\x5c\xc0\x37\x25\x94\x30\x17\xf0\xef\x66\xbd\x66\xff\x76\xb1\xd2\x6a\x60\xb5\x9f\x8c\x28\xe0\xd9\x0b\x58\x8d\xf1\x8d\x79\xc9\x68\xc4\xa6\x64\xfe\x84\x56\xec\xe5\xda\x52\x12\x6e\xf2\x13\x66\x53\xc6\x4d\xfe\xca\xc2\xac\xc1\x1a\x3f\xd9\x17\xd5\xdf\x14\x13\x67\x2e\xf3\x5b\xec\xb3\xe0\xef\xd5\x6c\x93\x78\x38\xa2\xc5\xe2\x2f\x6d\xa9\x17\x1f\xef\x83\x3a\x80\x3b\xeb\x37\xd7\x27\x06\xef\x63\xad\x7c\x73\x57\xda\xce\xcc\x74\x72\x63\x6b\xba\xc5\x76\xb5\x95\xab\xfc\x1d\x4e\xd1\x0b\x8b\x9d\x4c\x0a\x42\xb3\x60\x11\xbf\xcc\x59\xc0\x7f\xa5\xef\x10\x0e\x5a\x68\xb5\x1a\x1b\x84\x1e\x7b\x63\xf7\x17\x50\x0f\x63\xf8\x9a\x80\x74\xb2\x28\xd8\x61\x2b\x72\xdc\xb6\xcf\xc9\x85\xcb\xb9\xf4\xe9\x0f\xdf\x76\xf5\xa2\xee\x48\x01\xe1\xbd\x4b\x80\x6e\xb4\xd0\x8c\xeb\xae\x6c\x86\x06\x4e\x6a\x31\x88\x9a\x0a\xac\xdf\x60\x15\x87\x32\x7a\x35\xd3\xc8\x8c\x1c\x10\x9c\xba\x93\x13\x5a\xa8\x87\x31\x58\xc6\xdd\xf5\x35\x9c\xf3\xdf\x1f\xbe\xff\x94\x87\x83\x32\x60\x09\xb7\x77\x5f\xc3\x39\xfd\xfd\xe1\xdb\x29\x7d\xce\x6d\xc4\x63\x3f\xa8\xe2\x41\xff\x89\xfc\xd9\x0b\x4d\x8e\x28\x20\xcd\xcd\x60\x7b\x0a\xad\x27\x32\x1b\x25\x36\x32\xb7\x21\x7d\x5c\x94\x96\x87\x2f\x0e\xe3\x87\x45\x6a\xcf\x40\x62\xde\x68\xe3\xe4\x1c\xef\xd9\x8c\x85\xff\xe1\x4b\x1a\x6f\x60\x30\xc3\xc8\x14\xec\xa8\xf9\xc5\xca\x7c\xd7\xa9\x6f\xf3\x32\x5b\x38\x90\xc5\xab\x99\x42\xe2\xe3\x88\x5e\x96\x60\x19\x2d\x18\x3c\xe4\x7f\x96\x50\x5d\x5e\x5e\xfe\xac\x37\xb8\x7f\x07\x9f\x3f\xc3\x06\xf7\xf0\x73\xba\xfc\xbb\xea\xf7\x97\x1b\xdc\xff\x5c\xc1\xc3\x43\x99\x7e\x1a\x7e\x66\x10\xce\x11\xbe\x6f\x31\xb5\x50\x57\xfc\xc5\xe7\xbe\x57\xe5\xd4\xf0\x9a\xf4\x9e\xef\x02\x78\xaa\x93\x6b\x2d\x4e\x4d\x09\x03\x34\xe5\xc7\xf7\xff\xf2\xfd\x7f\xff\xe7\xd1\x35\xdf\xa3\x36\x58\xf3\x43\x66\x67\xca\xb2\x37\x5e\xbf\xa2\xde\x4a\x6b\x34\xf7\x7d\xd2\x77\x4a\x93\x19\x1e\xb4\x70\x53\xef\x98\x93\x5c\xf8\x7e\x86\x50\x37\x87\xd6\x50\x16\x4c\x61\x68\x85\x27\x6e\x70\x18\xe7\xb2\x7c\xc9\x46\xb1\x39\x6d\x98\xf1\x81\xed\xb1\xe5\x7d\x51\x5d\x4b\xa8\xfe\xed\x9f\xff\x77\xf9\x12\x35\xcd\x95\x84\x7a\x5b\x4e\x44\xbd\x2d\x0c\xa2\x6c\xed\x1e\xc9\x7e\x4b\x47\x78\x06\xbe\xa0\x12\xa0\xe6\xc0\x4f\x81\xc0\x6c\x50\xb3\x30\x8a\x08\xf0\xbd\x70\x9d\xfc\xce\xd8\x21\x8a\x85\x0e\x83\x36\xc8\x39\x90\x0a\xbf\x4c\x5f\x40\xe6\xab\xdc\x66\x06\x54\x08\xfe\x1b\x2b\x3f\xa5\x8f\x9e\xfa\x7e\xd4\xb1\xee\x90\xbe\x0b\xd4\x17\xf0\xed\x7e\xc2\x20\x81\x3c\xeb\x51\x6a\x72\xae\xd9\x19\x03\xb7\x52\x17\x0f\xa0\xb7\x52\xf0\xed\xd3\x09\x6b\x0a\xd9\x2b\x3d\xd9\xe0\xb5\x13\x67\x5b\x21\x95\x88\xe8\xfb\x54\xc8\x28\x4f\x1b\x05\xd7\x09\xdd\xa8\x9c\x71\x35\xee\x84\x9a\xe8\xe9\x06\x2c\x6e\x4d\xf1\x31\x72\x87\x39\xdc\x6d\xf0\x37\xe1\x9d\x52\xb3\xaf\x16\xca\x98\x89\x23\x62\xfc\xeb\xcc\x2b\xf8\xe6\x5d\x46\xc4\xc3\xd5\x6e\xdd\xe8\xea\x02\xaa\xd6\x1a\xed\x51\x37\xf9\x79\xc7\xff\x43\x10\xfa\x6e\xf6\x35\x6d\x7c\x9b\x90\x2e\x2b\x02\x05\x15\x9a\xa2\x1c\x2f\xd2\x17\xee\x2b\x84\x8d\xa4\xb0\x30\xd3\x27\xfd\x34\xaf\x18\xdf\xe7\x5e\x6f\xf1\xe4\x20\xbe\x31\x98\x20\x12\xad\xbb\x4f\x9b\x2f\xa1\xba\x4d\x4f\x26\x1e\xf8\x59\xe2\xc3\xd9\xff\x05\x00\x00\xff\xff\x83\x27\x0c\x89\xb0\x3f\x00\x00") +var _commandAssetsExampleNomadHcl = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xc4\x5c\xdd\x6f\x24\x37\x72\x7f\xd7\x5f\x51\x68\x05\x70\x12\x48\xa3\x8f\xb5\xec\x78\x83\x79\xb0\x7d\xb9\x78\x93\xf8\x12\xc4\x4e\x0e\x81\x7d\x10\xd8\xdd\x35\xd3\xdc\x61\x93\x6d\x92\x3d\xb3\xe3\x85\xfe\xf7\xa0\x8a\x1f\xcd\x9e\x19\x69\x65\x19\x77\xf2\x83\x7c\x1e\x92\xc5\x62\x7d\xfe\xaa\xc8\xbe\x73\xf8\xb1\x43\x8b\xd0\x08\x0d\x46\xab\x3d\xd4\x08\x02\x9c\xd4\x6b\x85\xf0\xde\xd4\xd0\xe2\x4a\x6a\xe9\xa5\xd1\x30\xa0\x85\x95\x54\xb8\x80\x1f\x3b\xe9\x78\x54\x3a\xd0\xa2\xc7\xf6\xec\x1c\x2a\xfc\x20\xfa\x41\x61\x05\xce\x80\xf4\xb0\x93\x4a\x41\x63\x51\x78\xa2\x48\x93\x77\xd2\x77\xe0\x3b\x84\x77\x7f\x00\xa1\x5b\xf8\x93\xe8\x71\x5a\xb6\x38\x3b\x63\x66\xa0\x7a\x6f\xea\x0a\x6a\x65\x9a\x0d\xd1\xa7\x05\xde\x0c\x97\xbd\x71\x1e\x1a\xa3\x57\x72\x3d\x5a\xc1\x0c\x99\x81\xff\x25\x35\x4f\x7a\x6f\xea\xb3\x73\x70\x03\x36\x72\x25\x1b\x9e\xb1\x80\xaf\x13\x9b\x02\x5a\x6c\x94\xa0\x95\x5b\x9c\xcf\x02\xb3\x02\x2f\xdc\x86\xf6\x12\x1e\xfe\x64\x7a\x41\x07\x72\x9d\x19\x55\x0b\x76\xd4\x0b\xf8\x37\x53\x3b\xe8\xc4\x96\x8e\xb2\x56\xa6\x16\x4a\xed\x61\xd4\xf2\x97\x11\x59\x00\x17\x60\x34\x82\xb1\xd0\x0b\xbd\x67\x62\xb0\xb6\x66\x1c\xdc\x05\xec\x3a\xd9\x74\x67\xe7\x20\x2c\x12\x9b\xbd\x43\xb5\x45\x07\x8d\x51\x0a\x1b\xda\xde\xd1\xfe\x87\xcb\xdd\xe2\xec\xfc\xec\x1c\xfe\x48\xbf\x19\x8b\x20\xf5\xca\xd8\x3e\xb0\x4b\xb2\x8b\x52\x73\x60\xc2\xe1\x0b\xa1\x5d\xc0\xa0\x50\x38\x04\x87\x78\x76\xce\xa3\x46\x2b\xa9\x11\x5a\xd3\x8c\x3d\x6a\x1f\xc9\xf8\xb7\xbc\x07\xfd\xd3\x79\x3f\xb8\xb7\x57\x57\xbb\xdd\x6e\xa1\xe9\xfc\x83\x35\xef\xb1\xf1\x0b\x69\xae\x5a\xd3\xb8\xab\xf7\xa6\xbe\x9c\x09\xed\x8a\xc5\x7d\x46\xd2\x9d\x34\xff\xf1\x0c\x20\x2a\xd1\xe2\x5a\x1a\x5d\xc1\x20\xac\xe8\xd1\xa3\x4d\x32\xc7\xa0\xd2\x30\x4e\xba\x63\x01\x81\x37\x80\x1f\xb0\x19\x3d\x26\x65\x2e\x98\xd8\xbb\x15\x98\x5e\x7a\x8f\xed\x05\x78\x32\x3b\xa9\x3b\xb4\xd2\x07\x2a\x2d\xae\xc4\xa8\x7c\xa2\x46\xaa\x20\x69\x56\x41\x47\x55\x20\x11\x07\x97\xf9\x67\xfa\x75\xe2\xb4\x15\x5e\x34\xa8\x3d\x5a\xf7\x38\xbb\x4a\x3a\x4f\x94\x8b\xc9\x91\xf1\x60\x26\x4c\xae\x46\x32\x50\x27\x5b\xb4\xd8\xc2\xae\x43\x0d\x83\x12\x8d\xd4\xeb\xc0\x3a\x29\x36\x3a\x8f\x68\x1a\x1c\xbc\x23\x2f\x69\x1b\x61\x5b\xc7\x5a\x8d\xc7\x71\x4c\x4d\x28\x65\x76\xb4\x96\x68\x20\xe9\x8d\x94\x2d\x94\x2a\x99\xa0\x13\x96\x3c\x2d\xe1\xa7\xea\x1f\xab\xbf\x9c\x4d\xc7\xf3\xfb\x01\xcb\x73\x35\x46\x7b\x6b\x54\x74\xac\xfd\xc0\x02\x7b\x6f\xea\x68\xa9\x20\xfb\x41\x34\x51\xbc\xae\xe9\xb0\x1d\x15\xda\xcf\x02\x4b\x2d\x36\xd2\xb1\xc7\xe8\x89\xab\x78\xa2\xb9\x6b\x4a\x17\xbd\x53\xa8\xd9\xc9\xc0\x1b\xa6\x54\x39\xb4\x5b\xd9\x60\xb5\x60\x1b\x17\xb0\x1a\x95\xca\x52\x26\xab\x22\xd6\x82\x54\x7c\x87\xd2\x42\x2b\x57\x2b\xb4\xa8\x1b\x74\x33\x0b\x27\x6a\x8f\xd9\xf8\x22\x6b\xfa\x94\x23\x95\x64\x9e\x76\x93\x44\xe5\x59\xae\x92\x85\xe6\xe2\x3a\x16\xf2\x72\x3a\x72\xa1\x1c\x32\x17\x6f\x85\xd4\x3e\x45\x3c\x8e\xb7\x74\xf0\xb6\x95\x51\x7e\xd3\x24\x07\x2b\x63\xe7\x36\x45\x9a\x63\x7a\x52\xe7\x35\xe4\x4c\x14\x48\x2c\x3a\x33\xda\x86\x23\x4b\x6b\xe5\x36\x68\x3f\xd1\x8a\x7a\x0b\xdb\xf6\x82\x43\x3f\x2b\x35\x18\xb3\xf0\x53\x60\xb9\x80\x8a\xc3\x59\x75\x41\xa4\x2a\xb2\xe3\x0a\x14\x6e\x51\x5d\xb0\x86\xdc\x38\x0c\xc6\x7a\x07\x5b\x61\xa5\xa8\x15\x89\xd9\xa3\x1d\x8c\x7a\x86\x1a\x4e\xc7\xb3\x23\xc9\x3c\x5b\xe9\xbf\x5d\x63\xc7\xc1\x6d\xda\x3d\x53\x9a\x7e\x8a\x61\x0e\x40\x78\x6f\x65\x4d\x21\x6b\x09\xd5\xdf\x7d\xa4\xff\x5c\x6c\xd0\x6a\x54\x0b\x8a\x44\x0f\x55\x9c\xb7\x15\x6a\x44\x66\x65\x09\x95\x92\x7a\xfc\x10\x46\x1e\x0a\x4b\x18\x87\x56\x78\x4c\x56\x30\x0f\x3e\x61\x0c\x68\x7b\x8f\xeb\x7d\xca\x57\x31\xc5\x2c\x98\x40\x98\xc3\xf4\xf2\x3c\xe9\x60\x74\xd8\x92\x39\x44\xaf\x27\x9b\xd1\x6b\x07\x4a\x6e\x10\xac\x51\x8a\xec\x68\x1c\xd6\x56\xb4\xe4\x56\x8d\xd0\xc2\x4a\xfa\x5f\x42\xc7\x90\xa6\x46\xbc\x5a\x5b\x44\x0d\x2d\x0e\xca\xec\x49\xcc\x6e\x31\x0b\xcb\xda\x1c\x71\x28\x1d\x20\x69\xb8\xc1\x96\xd9\x0b\x3e\x3f\x3f\xe3\xcc\xe4\x92\xb9\x91\xe7\x1b\x5b\x1c\x6f\x01\x7f\x4e\x71\x34\xcf\x62\x6a\x1c\xb2\xa4\x07\x31\x0c\x8a\x05\x65\x38\x36\x06\x99\x30\xd6\x98\x70\xc1\x11\x91\xda\x44\x28\x42\xfb\xa5\xb3\xf2\xd2\x64\xd6\x34\xc8\x7c\x3a\xce\xdc\x3d\xda\x35\xc5\xf4\x04\x61\x78\xee\x67\x14\xd2\x37\x1c\xa2\x2d\x36\xd8\x52\x70\x7a\x89\xad\xcf\xe4\xf2\x37\xb5\xf3\xc9\x6a\xce\x20\x29\x91\xac\x3b\x9b\x65\x2f\x3e\xdc\x53\xee\x50\x0a\xd5\xe3\xd9\xb1\x17\x1f\x64\x3f\xf6\xa0\xc7\xbe\x46\x4b\xf6\x19\x68\xc5\x70\x4f\xd4\x06\xb4\x24\x05\x0a\x53\x89\xde\x02\xde\xe9\x10\xc4\x1a\xe1\x30\xa6\xf7\x82\x70\x36\xab\x0c\x48\xc9\x2c\x22\x3d\xe1\x41\x80\x97\x3d\x0b\x1c\xa0\xe4\x13\x96\x70\x73\x36\x3b\x84\xd4\xf7\x1d\x0a\xe5\xbb\xfd\x3d\x2d\x79\xe2\x20\x52\xf3\x41\x68\x16\xff\x40\x49\x38\xc8\x2a\x12\xec\x47\xe7\xc9\x6c\xa3\x71\x45\xb2\xe0\x3c\x31\x5a\xe3\x8a\x15\xee\xc9\x01\x7a\x61\x37\x64\x6d\x2e\x4f\x22\xe5\x8f\x3a\x58\x55\x24\xb7\x1a\xad\xef\xd0\x16\xfb\x38\x58\x59\xd3\x43\x8d\xc1\x35\x49\x00\x6d\x3c\xe3\xc1\x31\x28\x9a\xdc\x5c\xbb\x6a\x76\xd6\x34\xa1\x45\xd1\x92\xcd\x3c\x7e\xd6\x34\xa3\xc0\x60\xec\x5a\x09\x7b\x44\x70\x9c\x0e\x7c\xe2\x38\x2b\x22\x9a\x97\x96\x8b\x64\x3a\x9f\x18\xbd\x21\xd3\x6f\x18\x31\x7b\x2b\xb4\xe3\x14\x15\xa2\xd2\xa8\x23\xad\x05\xfc\x98\x87\x38\xb5\x15\x63\x5c\x49\x24\x71\x09\xa9\x22\xf3\x29\x18\xb1\x54\x07\xe3\x51\x7b\xc9\x9b\x50\x58\x83\x5a\x34\x9b\xec\xe0\x72\x05\x15\x31\x72\x6f\x71\x8b\xd6\x57\x13\x7b\x0e\x3d\xed\xe5\xed\x18\xed\xe8\x50\x7c\x24\xe3\x37\xfd\x5c\xc4\x83\x35\x6b\x8b\xce\xbd\x48\xc6\x42\xff\x06\x11\x87\xd0\x9e\x89\xd4\xb8\x96\xda\x05\x60\x49\xd4\x57\xd2\x3a\x7f\x4c\x8e\x30\xc2\x81\x8c\xc8\xc7\xb8\x14\x6b\x59\x5c\xd2\x11\x36\x40\xcf\xa4\x48\x26\x20\xf4\xb1\xa9\x0b\x47\xe7\x62\x40\x76\x40\x6e\xd2\x63\x88\xbb\x73\x37\xe0\xec\xa0\xcd\x31\xc1\x83\x65\x8f\xfa\x0f\x0d\x24\x21\xe7\xd3\x5f\x14\xe6\x39\x3f\xd9\x24\x36\x32\x8f\xe4\x2d\x47\x5a\x0a\xee\x72\xa0\xcb\x99\x59\x9c\xd2\xa2\x5c\x65\x33\x8a\x05\x21\x2d\xb9\x0c\x4b\xe2\x29\x22\x41\x25\x9c\xa7\x83\xd4\xb1\x74\x36\x65\xce\x64\xde\x46\x8b\x45\x49\x3a\xf1\x1d\x17\xc9\x15\xa7\xb0\x53\x6e\xe8\x4a\x6d\x50\xf5\x53\x50\xde\x51\x01\x1f\x89\x25\xc3\x61\x02\xc5\xe1\x60\x09\x2b\xa1\x1c\xce\x0e\xcf\xe9\x7e\xff\x98\xf5\x0a\x0f\x4d\x27\xf4\x1a\xb3\xb2\x18\x96\xd3\xef\xbb\x50\x19\xa3\x1b\x55\xb2\x3f\x49\x87\x75\xde\x8e\x0d\x17\xd8\x29\xfe\x47\x99\xc5\x3e\x00\xd7\x14\x71\x8b\xb6\xc8\x16\x09\x77\x44\x5a\x94\x65\xcd\x48\xb2\x34\xc3\x40\xe1\x80\xc0\xec\x60\x71\x2b\xcd\xe8\x4a\xa1\x2c\xe0\x3f\x75\x13\xb1\xfb\x80\x56\x78\x02\xba\x74\x90\x9e\x31\xf4\x24\xc8\xb4\x01\xe7\xf2\x28\x23\x36\xa8\x3d\x77\x3e\x6a\xb6\xb7\xde\x78\x2e\xdb\xc8\x4d\x53\x98\x06\x51\xc0\xa4\x98\x2b\x89\x60\xf4\x09\x8b\xbd\x90\x1c\xb1\x66\xaa\xa2\xdc\x44\x48\x88\x6b\xd1\x59\x0a\x0d\x8a\x39\x8f\x54\xfe\x18\xa2\xff\x05\xc5\x21\x4f\x54\xb2\x4a\xf0\x97\x51\xa8\x24\xf7\xc6\x8c\x3a\xbb\xe1\x04\x8d\x42\x85\x98\x84\xf6\x18\x52\xfb\x73\x8a\x16\xd1\xea\x62\x4a\xb9\x48\x35\x17\x85\x81\x48\x5a\xe3\x2e\x12\xdb\xa2\x75\xb1\x8c\x0b\xc4\x62\xe0\x18\x07\xaa\xfc\x58\x54\x32\xa2\x17\xa3\xda\x72\x3a\xeb\x2c\xf9\x60\x38\x0d\x2c\xe1\xfa\x0c\xe0\x21\x83\xdd\x5e\xae\x59\x3a\xa7\xb0\x6e\x02\x56\x19\x4a\x52\x34\x0b\x0b\x48\x40\x66\xb5\x02\xb3\x0a\xc5\xa8\x8d\xa2\xd7\xa6\xc5\x03\x48\x2a\x72\x67\x20\x2e\x35\x7a\x06\x4e\x03\x68\x6c\x3f\x01\xd6\x12\x3e\x8b\xfc\xbe\x06\x40\x8b\x5b\x47\x32\x49\x70\x09\xa2\xfd\x30\x13\xdd\xe4\x4f\x45\x75\x10\x1d\x39\x18\x79\x5c\x9f\xd1\xb6\x13\x7d\x32\x68\x86\x52\xa1\x22\x8c\x74\x52\x56\x52\x14\x85\x7d\x27\x74\x6c\xc5\x79\x2e\x49\xc9\x22\x53\xa2\x89\xd6\x98\x2c\xf1\xef\xc3\xe8\xe5\x0c\x94\xfd\x43\x68\x08\x32\xbd\x95\x07\x3b\x6a\xd6\x5d\x3b\x5a\xfa\x57\xd6\x92\x7b\x1a\xce\xcd\x0f\xdc\x23\x05\x28\xe9\xfa\x22\xbd\x16\x6e\x18\xfc\x3c\xd8\x70\x8c\x09\xb9\x1a\x61\x48\x9a\x40\x43\x28\xd0\x42\x70\xa8\x9a\x0e\x9b\x8d\xab\x72\xa1\x7b\xcf\xa9\xc9\x55\x25\x3e\xb8\xe7\x49\x94\x50\xe2\xec\x47\xf8\x7b\x1c\x4d\x3e\x89\x23\x93\x47\x3f\x1f\x4d\x7e\x02\x47\x26\xec\x1a\xd5\x1f\xf5\x5c\xa0\xed\x16\x46\xc7\x51\x0c\x94\xa8\x51\x81\x1b\x57\x2b\xf9\x21\x94\x89\xd5\x9b\xeb\x28\x8e\x9b\xbb\xbe\x7a\x1e\x14\xfd\xe1\xd3\x48\xf3\x59\x00\x28\xe5\xc1\xa7\x90\xe6\x6f\xc0\x98\x5d\x06\x7e\xcf\x3d\xfb\x6d\x1f\x8f\xde\x55\x8f\x03\xc4\xbb\xbe\x9a\xc5\xb7\xd8\x2c\x39\xec\xe8\x80\x43\xce\x41\xf3\x76\x73\xcc\x90\xdc\x3b\xbc\xe4\x63\x61\x0b\x0c\x99\xce\xb3\x8f\x86\x9e\x34\x34\x4a\x72\xbf\xed\xeb\xd4\x63\x8e\x55\xae\x88\x1e\x98\x3c\x2c\xd6\xb9\x31\x7c\x45\x27\x3f\x4f\xcb\x5f\x50\xa0\x96\xe7\xf9\x9b\x86\x3f\xde\x38\x12\x09\x67\xac\x1a\xd1\x74\xb1\xd5\x5c\xb4\xd1\x46\xfd\x08\x7e\x3b\x08\x8c\xb3\x04\x3a\xd3\x40\x76\xba\x1c\x9b\x46\xdd\xa2\x0d\x55\x69\x6c\x45\xb0\xdb\x84\x6e\x4e\x32\x59\x6d\xf4\xa5\xc6\x75\xb8\x56\x38\xe8\xe1\xb2\x74\x0c\xdc\xc4\x64\xc8\x51\xf1\xb0\x36\xd5\xe8\x77\xc6\x6e\x4e\x37\x7e\xe2\xe0\x41\x6f\x35\x85\xdd\x23\x7c\x2d\x75\xa3\xc6\x96\x58\xb7\xf8\xcb\x88\x8e\x33\xe6\x60\xac\x87\x5a\x6a\xfa\xdd\x1d\xc0\x8f\x67\x1b\xc0\x9c\xcb\x03\x13\x78\x86\x11\x4c\x7b\xbe\xd0\x10\x22\x03\x05\xa9\x24\x9b\x60\x08\x10\xce\x59\xb5\x75\x95\x7f\x01\x12\xfe\x12\xbe\x78\xf3\xe5\x57\xf1\x97\x87\xb3\xf0\xb7\x54\x40\xea\xca\xa6\x1b\x27\x1d\x40\xac\x8b\x3e\xe7\x0d\xdf\x1f\x38\x9f\x4c\x81\xcd\x47\x44\x77\xa6\x95\x13\x00\x66\x6f\x0b\x3f\x42\x2b\x5d\x63\xb6\x68\xf7\x80\x7a\xcd\xe5\x4b\x6c\xaf\x3b\x68\x46\x6b\x51\x7b\xb5\x8f\x5b\x18\x0b\xdf\x1a\xed\x46\x35\x8b\x50\xec\xcc\xbd\xd8\xe0\x49\xb2\x5c\x2f\x84\xb0\x18\x88\x74\x54\x1f\x04\xbf\x97\xe1\xa2\x00\x3a\xe3\x7c\x6c\x6e\x85\x74\x67\xfd\x4b\xf5\x3f\x17\xd2\x2b\xe8\x7f\x26\x6b\xfe\x9b\x24\x92\xb4\xcd\x77\x3f\xb1\xc7\x6a\xb1\x95\xee\x32\x44\x8a\x38\xec\xc5\xda\xc5\xe1\x9f\xd2\x3d\xd0\x45\x8a\x26\x7f\x29\x6d\x28\xd2\x68\xeb\xb4\x74\xb0\x66\x2b\x29\x14\x2c\xa1\x62\x76\x63\x9a\x9b\xc2\x0f\x81\x80\x27\x0c\x28\xdf\x82\x06\x35\x27\x60\x12\x40\xc4\xca\xd8\x4c\x2d\x74\xc0\xc2\xc1\xa8\x50\x74\xac\x86\x38\x51\xba\xc4\x09\x95\x79\x16\x39\x0e\xec\xcd\xc8\x4d\xfd\x2d\x6a\x89\xba\xc1\x7f\xce\xb4\x46\xdd\x98\x3e\x94\xc8\x5c\xa7\xa2\x0e\x35\xa6\x5f\x9c\x62\xda\x65\xb5\x91\x01\xe9\x5c\x3a\xcd\xee\x6a\x52\x42\x9b\x5f\xb1\xe4\x79\x81\xcd\x8f\xf9\xbf\xe7\x3a\x11\x4a\x6e\xb3\x36\x68\x90\xaf\x45\xe2\xa0\x6f\x86\x72\x88\x6f\x0f\xb6\x42\x65\x58\x51\xac\x92\x3d\x52\x6d\x48\x43\xb7\xc5\x48\x74\xea\xb9\x6f\x5b\x74\x5e\xd8\x7c\xb7\x92\xc2\x28\x27\xe3\x54\x68\xd4\xd8\x89\xad\x34\x96\x6d\x9d\x7c\x3b\x17\xea\xef\x56\xa9\xb0\x27\xc4\x3a\xea\x0c\x18\xca\xfa\x22\x6e\x01\x83\x51\xb2\x99\x5a\xee\xb5\x70\x53\x06\x4e\xd7\x59\x2f\xf5\xbe\xf9\x31\x5e\xc1\xfb\x22\x03\x05\xa9\x74\xec\x8f\x33\x4f\x98\x12\xad\xf0\x1e\xfb\x81\xef\xfb\x28\x9f\x66\x31\x14\x7d\xf9\x09\x7f\x25\x75\x2f\x22\xb1\xbc\x78\x09\xb7\xf1\xa7\xd2\x22\xde\xe4\x26\xce\x74\x87\x8b\x4a\x3c\xda\xc8\x40\xaa\x32\x44\xba\x18\xdb\x09\xe9\x13\xb4\x8e\xa7\x48\x08\x99\xa1\x66\x0c\xf0\x1c\x5a\xa5\xe7\xb8\x5a\xb6\x95\x00\x78\x2f\xb6\xcc\x3b\x77\xc8\x47\x6f\xda\xd3\x97\xad\x3b\x02\x1a\x9d\x18\x06\x4c\x0d\xbc\xb8\x11\xd1\x8f\x6c\x60\x3b\xb9\x5c\x12\x41\xc5\x06\x3f\xbb\xcf\xc8\xd2\xca\xc7\xa6\x5d\x03\x5b\x09\x36\x7c\xf0\x99\x54\xd2\xd4\xa8\x7d\xec\x9d\xd2\x70\x49\x85\x8e\x97\x88\x18\x74\xa0\xcd\x64\xd6\x09\x30\x65\x72\xdc\x4b\xcd\xcc\x11\xf7\x35\xa2\x86\x8e\x5f\x7c\x1c\xf3\x18\xd7\x31\xf1\x65\xdc\xea\x84\xa3\xe2\xd0\x61\x8f\x56\xa8\xfb\x56\xba\xa7\x42\xe9\xe8\xa5\x92\xbf\x12\xd2\x82\xbc\x86\x92\xe2\x26\x67\x61\xe7\x91\x72\xea\x8a\x12\xa0\xb0\x2d\x0f\x32\x1e\x92\x36\x5e\x57\x7f\xcb\x38\xd8\x45\xd8\xef\xa7\x4b\xd0\x19\x10\x24\x29\x04\x2b\xda\x1f\xd1\x70\x29\xdb\xa7\x1b\xd6\x44\xa1\x80\x98\x0b\xf8\x3a\xb7\xad\x03\xdc\x97\xba\x00\x93\x21\xbf\xbb\x2e\x3e\x0b\x09\x30\x7f\x7e\xa4\x97\x86\x8b\x93\xc2\x4c\x51\x23\x37\xbe\x3f\x79\xe5\xfd\xbb\xa3\xc6\x9c\x8f\x82\xe2\x7c\xa0\x88\x21\xdc\xab\x72\x5e\x36\x1b\x8e\xa4\xde\x8e\x98\x5e\x00\x94\x7d\xaf\xb2\x8b\x35\x7b\xa6\x90\x09\xb1\x70\x07\x8b\x2b\x42\x6d\x26\x00\xa3\xe2\x2a\xb5\x2d\x2b\xc8\xa2\x4c\xe2\x56\x52\x86\x4c\x13\x0a\x8b\x6d\x17\x0e\x25\xc2\x8b\xa9\x7e\x1e\x1d\xae\x46\x15\x10\x79\x51\xd2\x79\xd2\x13\xcd\x2c\x32\xfb\x54\xea\x0d\x68\x9d\x24\x68\xd6\x58\xe3\xca\x7e\x66\xea\x9a\x2e\xf2\xb2\x28\x8b\x25\x8b\x22\xfd\x9a\x47\x7f\x88\x5d\xc3\xcc\x5f\xb8\xc9\x88\x8d\xd9\x6c\xa4\xc5\x06\xad\xb4\xd8\x78\x63\xf9\x0e\x59\x1c\x6e\x73\x72\xa2\x37\x65\xe7\x68\x62\x2d\x6d\xfa\x08\x6f\x01\x5b\xcb\x5f\x9f\xb8\x1c\xa1\x51\xe2\xf1\xfb\x6f\x88\x1b\x76\x85\xf6\x94\x57\x87\xb2\xcc\xef\x28\xce\x14\x9e\x14\xfb\x4e\x89\x23\xa6\xb6\x84\x37\xd7\xd7\x27\xe2\x8b\x58\xf1\x2b\xb6\x7d\x8a\x2c\x01\x0c\xb9\xdc\x35\x76\xe1\xfd\xd1\xc0\x37\x0e\xd3\x7b\x9b\x60\x41\xfc\xe6\x24\x95\x87\x29\xaf\x07\x4b\x49\x0f\x00\x1c\x3f\xde\x42\x2f\xd8\x3c\x5e\xe8\xb7\x07\x4c\xbe\x82\xc7\x26\x0e\x66\xb4\xd2\x8f\xb9\xe4\x9e\x9e\x3d\x1c\x54\xab\xf1\xf5\x95\x38\x10\x4e\x29\x9b\x23\x12\xfc\x72\x82\xe6\x2f\xa6\x67\x4c\x0f\xd5\x59\xd2\x5e\x28\xb6\x0f\x2f\xd5\x9c\xb4\xdc\xc4\x4c\x44\x78\xd6\x74\x9d\x1c\x25\x1b\x5f\xf2\x1d\x47\x84\x49\xc1\x32\xdd\xc0\xbb\xcb\x1d\x3a\x7f\x53\x15\x8f\xa9\x16\x33\x16\x88\xd1\x3c\x2b\xb3\xb7\x43\xb9\xee\x72\x7b\x35\x3d\xb6\xa0\x62\xbb\x21\xdf\xb0\xa8\x42\x63\x60\x32\xa4\xb4\xb0\xec\xca\x53\x16\xed\xc3\xc5\x17\x3f\xc3\xc4\x2c\xf3\x05\xbc\xf3\xe5\xdb\x29\xb8\xbb\xa6\x0c\xcc\xb9\x09\x53\x35\x97\xb8\x58\xc2\x4d\x34\xfe\x73\xb6\xff\x59\x95\x3b\x58\x14\x6d\x32\xff\x70\x71\x30\xb7\x7e\xa9\xa9\x4c\x71\xc1\xc8\x22\x06\x06\x6f\x14\x5a\xa1\x1b\x0c\x4d\xf7\x88\x35\xa5\x0d\x0d\xf4\xd4\x68\xac\xf7\x29\x53\x86\x3e\xda\x81\xfa\x39\xf6\x15\x8d\xc9\x64\xd0\xb9\xf1\x15\x98\x03\xaa\x6b\x5f\x5c\xa0\x96\xe7\x7b\x05\xcf\x09\xfb\xcf\x28\xc5\x53\xbd\x86\xd7\x78\x61\xd7\xe8\xdd\xa1\x5d\x86\x4e\x64\xf6\x9f\x01\x2d\xad\x14\xeb\xd0\x93\x3c\xd6\x10\xa5\x35\x14\x4d\x17\xe9\x9d\x70\xb9\x03\xd1\x85\x79\xec\x28\x28\xd8\x9d\x3e\x16\x62\x8d\xfb\xc1\x12\xbe\xc8\x66\x1a\x5b\x32\x07\x8b\xa3\x2f\x9e\x5e\xfc\xf9\x89\xc5\xf3\x68\x1f\xde\xa7\xc5\x9a\x8f\x6b\x6f\x47\x80\x91\xdc\x72\x2b\xdb\x51\x28\x18\xb5\xe4\x5b\xaf\x9d\xb1\x9b\x0b\x70\x63\xd3\x85\x96\xce\x1f\x4c\xb3\x89\x30\x82\x5f\x7c\x79\x21\x35\xda\x0b\xd8\x61\x5d\x9a\x3c\x3f\x83\xab\x85\x6f\x3a\x2a\xc9\x1b\x74\x84\x24\x5f\x6a\xba\x05\xb7\xaf\x50\xda\x4d\x4f\x6a\xf8\x2f\xa3\xac\xd0\x3f\xa9\x0e\x8a\xbb\x2a\x3c\x21\x7c\x3c\x9f\xf3\xda\xf8\xce\xf0\xa0\xb5\x1d\x2d\x70\x2a\x4a\x62\x49\xc8\x40\x39\xd5\x55\x61\xe5\x12\xaa\x96\xb5\x70\xd4\x65\xe1\xea\xfd\x74\xa3\x74\x7a\xdd\x38\xf5\x49\x8b\x8e\xdb\x20\x9c\x2b\xaa\xab\x00\x6e\xd4\x3e\xdd\xaf\x26\x9e\x0d\xcc\x8b\x9e\xf4\xfc\xc2\x0b\xa9\xd8\x45\x66\xf4\xdd\x54\x33\xda\xe9\x45\x39\x03\x09\xf2\x99\x40\xf4\x02\x9c\x29\x9f\x99\xe6\x69\x61\x78\x62\x69\xa6\xdb\xd5\x09\xe3\x49\x62\x0a\x3c\x14\x4d\x4e\xd9\x8b\x35\xe6\xae\xd7\xdb\x2f\xab\x3c\x12\xde\x64\x2e\xe1\xa7\xaa\xad\xc3\x9b\xe0\x99\x40\xc5\xe8\xbb\x7b\x67\x56\xfe\x3e\x54\x80\x07\x2f\x78\x8f\x8b\x2f\x6f\xf7\x30\x8c\xb5\x92\x4d\x41\xca\xe2\x60\x9c\xf4\xc6\x16\xaf\x25\x72\x1f\x25\x3c\x0f\x19\x7d\x87\xda\x87\x94\x18\x5e\x45\x8f\xe1\x4a\x9d\x59\x77\x05\xb1\x04\xf6\x83\x1f\x26\xc5\x50\x7e\x14\x3a\x30\x7c\xc8\x26\x5b\xc3\x22\x93\x98\x9f\x69\x0e\x4e\x1f\x0e\x0c\x8a\x2a\xff\x95\x68\xfc\x13\xe5\x66\x6b\x76\x5a\x19\xd1\xf2\xfb\x98\x38\x3d\xdc\xab\x89\xa2\xc0\xee\x0d\x45\xf5\xf0\xd4\x76\xb0\xd2\x4c\xa6\x14\x0a\x4c\x2c\x5f\x7e\xc7\x1e\x1e\x45\x9b\xdc\xb7\x9b\xaa\xf5\xe9\x4a\x93\x6c\x20\x6d\x4f\x64\x0e\xee\x00\xa4\x0a\xa0\x93\xe2\x3f\x68\xc4\x36\x84\xf8\xe8\x58\x53\xdd\xc1\x1b\xbf\xe3\x2b\xc4\xc1\x38\x27\x6b\xc5\x75\x42\xaa\x6c\xfd\x29\x41\xf4\xa3\xf2\x92\x00\x54\xe8\x3d\x14\x7e\x9b\xe5\x91\xa7\xa4\xb5\x53\xd1\x92\x27\xff\x06\xe4\x3b\x67\xe0\x28\x0c\x3e\x2b\x10\x96\x5b\xbf\x30\x18\x26\x3e\x8e\xe8\x65\xdd\x97\xdd\xcd\xa8\xf1\x25\x54\xb4\xd5\xdb\xab\xab\x95\x31\x8b\xc6\xf4\x99\xcc\xc2\x0b\xbb\x58\xff\x5a\xb6\x2f\xc3\xa3\x78\x37\xa3\x03\xa1\x73\xea\xc6\x9e\x68\xf5\xed\xdd\xdb\xe6\x73\x21\xfe\xe9\xee\x8d\x68\x6f\x6f\x6f\xee\x3e\xbf\xfd\x02\xeb\x2f\xdb\x2f\xaf\xc5\xed\xcd\x57\xb7\xb7\xf8\xe5\x57\x9f\x97\x14\x1f\x0e\x5b\xa0\xd9\xbe\x95\x59\xbb\x63\xdb\x26\x39\x96\xd7\x89\xa4\x84\xce\xec\xc2\xa7\x27\xca\xac\xa3\x69\x95\x45\x70\xf9\xc4\x93\xcb\x2c\x6e\x73\x18\x87\x34\xdf\xc5\x05\x7c\x51\x42\xf9\x72\x01\xff\x61\xd6\x6b\x76\x6f\x17\x0b\xad\x16\xea\xfd\x64\x43\x01\xce\x5e\x40\x3d\xc6\x27\xe6\x25\xa3\x11\x9a\x92\xf5\x13\x58\xb1\x97\x6b\x4b\x39\xb8\xcd\x2f\x98\x4d\x19\x36\xf9\xd3\x0c\xb3\x06\x6b\xfc\x64\x5e\x54\x7e\x53\x48\x9c\x79\xcc\xef\x31\xcf\x82\xbf\x57\x33\x4d\xe2\xe1\x88\x16\x8b\xbf\x34\xa5\x5e\x7c\xb8\x0f\xea\x00\x6e\xac\xdf\x5c\x9f\x18\xbc\x8f\xa5\xf2\xcd\xdd\xa3\xa6\x23\x5b\x0a\xd8\x53\xbd\x7c\x22\x34\xe2\x87\xc1\xc4\x6a\x81\x82\xcc\x67\x8e\xc1\x14\x05\x87\xa9\x57\x18\xa9\x80\x37\x1b\xd4\x10\xa2\x38\xea\xad\xb4\x46\x73\xf9\x95\x3f\x17\xe0\x47\x89\xe9\x51\xa3\x9a\x24\xeb\xb0\xb1\xe8\xdd\x15\x0b\xe9\x9e\xc9\x24\x45\x66\xe2\x53\x26\x44\xbd\x85\x79\xc8\x07\x26\xf7\x74\x1a\xc8\x3d\xbc\xe9\xc2\xde\x35\x56\xd6\xf9\x43\xa5\xa2\xed\x17\x9b\xb6\x14\x6f\x67\x71\x31\x7e\xba\xb4\x80\xff\x4e\x9f\x5c\x1c\x74\x0b\x1b\x35\xb6\x08\x3d\xf6\xc6\xee\x2f\xa0\x19\xc6\xf0\xe1\x04\xd9\xdf\xa2\x60\x87\x3d\xc6\xf1\x0d\x45\xce\xa3\x5c\xb9\xa6\x6f\xa3\xf8\x62\xaf\x17\x4d\x47\xc6\x16\x9e\xf6\x04\x94\x4a\x0b\xcd\xb8\xee\x8a\xb4\x14\x39\x69\xc4\x20\x1a\xaa\x25\x7f\x87\x07\x1c\xca\xe8\xd5\xdc\x20\x33\x72\x40\x70\x6a\xc4\x4e\xe6\xd0\x0c\x63\xf0\x82\xbb\xeb\x6b\x38\xe7\xbf\xdf\x7f\xf7\x6b\x1e\x0e\xca\x80\x25\xdc\xde\x7d\x01\xe7\xf4\xf7\xfb\x6f\x26\x13\x99\xdb\x88\xc7\x7e\x50\xc5\xb7\x0b\x27\xfc\xa1\x17\x9a\x82\x8e\x80\x34\x37\xd7\x15\x53\x16\x39\x91\xc4\x29\x87\x93\xb9\x0d\xe9\x3b\xaa\xb4\x3c\x7c\x92\x19\xbf\xa1\x52\x7b\xc6\x4c\xf3\x9e\x22\xe3\x90\x78\xa5\x68\x2c\xfc\x2f\xdf\x47\x79\x03\x83\x19\x46\xa6\x60\x47\xcd\x8f\x73\xe6\xbb\x4e\x2d\xaa\x97\xd9\xc2\x81\x2c\x5e\xcd\x14\x12\x1f\x47\xf4\xb2\x04\xcb\xc8\xc8\x38\x29\xff\xb3\x84\xea\xf2\xf2\xf2\x67\xbd\xc1\xfd\x5b\xf8\xf8\x11\x36\xb8\x87\x9f\xd3\x3d\xe7\x55\xbf\xbf\xdc\xe0\xfe\xe7\x0a\x1e\x1e\xca\x4c\xdb\xf2\x8b\x8a\x70\x8e\xf0\x29\x8f\x69\x84\xba\xe2\x4f\x62\xf7\xbd\x2a\xa7\x86\x87\xb3\xf7\x7c\xed\xc1\x53\x9d\x5c\x6b\x71\x6a\x4a\x18\xa0\x29\x3f\xbc\xfb\xd7\xef\xfe\xe7\xbf\x8e\x6e\x34\x1f\xb5\xc1\x86\xdf\x6c\x3b\x53\x56\xf8\xf1\xa6\xf9\x54\x8c\x9d\xcc\xf0\xa0\x5b\x9d\xda\xe4\x9c\xd0\xc3\xa7\x42\x54\x60\x70\x1a\x09\x15\xd0\x14\x86\x6a\x3c\x71\x59\xc5\x90\x9e\xe5\x4b\x36\x8a\xed\x69\xc3\x8c\x6f\x89\x8f\x2d\xef\x93\xea\x5a\x42\xf5\xef\xff\xf2\x7f\xcb\x97\xa8\x69\xae\x24\xd4\xdb\x72\x22\xa7\x8b\xbc\x47\xd9\xc5\x3e\x92\xfd\x96\x8e\xf0\x0c\x2c\x45\xd5\x4e\xc3\x81\x9f\x02\x01\x67\x3d\x12\x46\x11\x01\xbe\x13\xae\x93\xdf\x1a\x3b\x44\xb1\xd0\x61\xd0\x06\x39\x07\x52\xe1\x17\x97\x5f\x18\xe5\x5b\xeb\x76\x06\xca\xa8\xd2\x31\x56\xfe\x9a\xbe\xef\xea\xfb\x51\xc7\x12\x4b\xfa\x2e\x50\x5f\xc0\x37\xfb\x09\x6f\x05\xf2\xac\x47\xa9\xc9\xb9\x66\x67\x0c\xdc\x4a\x5d\xbc\xf5\xde\x4a\xf1\x64\xc6\xce\xaf\x53\x78\xed\xc4\xd9\x56\x48\x25\x62\xa1\x71\x2a\x64\x94\xa7\x8d\x82\xeb\x84\x6e\x55\xce\xb8\x1a\x77\x42\x4d\xf4\x74\x0b\x16\xb7\xa6\xf8\x5a\xbb\xc3\x1c\xee\x0a\x48\xf0\x92\x68\x56\x6a\xf6\xd5\x42\x19\x33\x71\x44\x8c\x7f\x9d\x79\x05\x3f\x32\x90\x11\xdd\x71\x61\xdf\xb4\xba\xba\x80\x6a\x65\x8d\xf6\xa8\xdb\xfc\x92\xe5\xaf\x10\x84\xbe\x9d\x7d\x38\x1c\x9f\x61\xa4\x7b\x99\x40\x41\x85\xfe\x2f\xc7\x8b\xf4\x7f\x01\x50\x23\x6c\x24\x85\x85\x99\x3e\xe9\xa7\x79\x71\xfc\x2e\xb7\xb5\x8b\xd7\x15\xf1\x39\xc5\x04\x91\x68\xdd\x7d\xda\x7c\x09\xd5\x6d\x7a\x1d\xf2\xc0\x2f\x30\x1f\xce\xfe\x3f\x00\x00\xff\xff\x6b\x66\xbd\x13\xd1\x40\x00\x00") func commandAssetsExampleNomadHclBytes() ([]byte, error) { return bindataRead( @@ -147,7 +147,7 @@ func commandAssetsExampleNomadHcl() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "command/assets/example.nomad.hcl", size: 16304, mode: os.FileMode(420), modTime: time.Unix(1675191836, 0)} + info := bindataFileInfo{name: "command/assets/example.nomad.hcl", size: 16593, mode: os.FileMode(436), modTime: time.Unix(1675362981, 0)} a := &asset{bytes: bytes, info: info} return a, nil } diff --git a/e2e/e2eutil/utils.go b/e2e/e2eutil/utils.go index c501a45a2ce..aefb587c57e 100644 --- a/e2e/e2eutil/utils.go +++ b/e2e/e2eutil/utils.go @@ -222,10 +222,12 @@ func WaitForAllocsStopped(t *testing.T, nomadClient *api.Client, allocIDs []stri } } -func WaitForAllocStopped(t *testing.T, nomadClient *api.Client, allocID string) { +func WaitForAllocStopped(t *testing.T, nomadClient *api.Client, allocID string) *api.Allocation { + var alloc *api.Allocation + var err error testutil.WaitForResultRetries(retries, func() (bool, error) { time.Sleep(time.Millisecond * 100) - alloc, _, err := nomadClient.Allocations().Info(allocID, nil) + alloc, _, err = nomadClient.Allocations().Info(allocID, nil) if err != nil { return false, err } @@ -243,6 +245,7 @@ func WaitForAllocStopped(t *testing.T, nomadClient *api.Client, allocID string) }, func(err error) { require.NoError(t, err, "failed to wait on alloc") }) + return alloc } func WaitForAllocStatus(t *testing.T, nomadClient *api.Client, allocID string, status string) { diff --git a/e2e/workload_id/input/identity.nomad b/e2e/workload_id/input/identity.nomad new file mode 100644 index 00000000000..85027807803 --- /dev/null +++ b/e2e/workload_id/input/identity.nomad @@ -0,0 +1,102 @@ +job "identity" { + datacenters = ["dc1"] + type = "batch" + + constraint { + attribute = "${attr.kernel.name}" + value = "linux" + } + + group "identity" { + + # none task should log no secrets + task "none" { + driver = "docker" + config { + image = "bash:5" + args = ["-c", "wc -c < secrets/nomad_token; env | grep NOMAD_TOKEN; echo done"] + } + resources { + cpu = 16 + memory = 32 + disk = 64 + } + } + + # empty task should log no secrets + task "empty" { + + identity {} + + driver = "docker" + config { + image = "bash:5" + args = ["-c", "wc -c < secrets/nomad_token; env | grep NOMAD_TOKEN; echo done"] + } + resources { + cpu = 16 + memory = 32 + disk = 64 + } + } + + # env task should log only env var + task "env" { + + identity { + env = true + file = false + } + + driver = "docker" + config { + image = "bash:5" + args = ["-c", "wc -c < secrets/nomad_token; env | grep NOMAD_TOKEN; echo done"] + } + resources { + cpu = 16 + memory = 32 + disk = 64 + } + } + + # file task should log only env var + task "file" { + + identity { + file = true + } + + driver = "docker" + config { + image = "bash:5" + args = ["-c", "wc -c < secrets/nomad_token; env | grep NOMAD_TOKEN; echo done"] + } + resources { + cpu = 16 + memory = 32 + disk = 64 + } + } + + # falsey task should be the same as no identity block + task "falsey" { + + identity { + env = false + file = false + } + + driver = "docker" + config { + image = "bash:5" + args = ["-c", "wc -c < secrets/nomad_token; env | grep NOMAD_TOKEN; echo done"] + } + resources { + cpu = 16 + memory = 32 + disk = 64 + } + } + } +} diff --git a/e2e/workload_id/input/nobody.nomad b/e2e/workload_id/input/nobody.nomad new file mode 100644 index 00000000000..04b2126477f --- /dev/null +++ b/e2e/workload_id/input/nobody.nomad @@ -0,0 +1,33 @@ +job "nobodyid" { + datacenters = ["dc1"] + type = "batch" + + constraint { + attribute = "${attr.kernel.name}" + value = "linux" + } + + group "nobodyid" { + + # nobody task should have a file owned by nobody with -rw------- perms + task "nobody" { + user = "nobody" + + identity { + file = true + } + + driver = "docker" + + config { + image = "bash:5" + args = ["-c", "stat -c 'perms=%#a username=%U' secrets/nomad_token; echo done"] + } + resources { + cpu = 16 + memory = 32 + disk = 64 + } + } + } +} diff --git a/e2e/workload_id/workload_id_test.go b/e2e/workload_id/workload_id_test.go new file mode 100644 index 00000000000..a12c77e35e2 --- /dev/null +++ b/e2e/workload_id/workload_id_test.go @@ -0,0 +1,173 @@ +package main + +import ( + "fmt" + "io" + "strconv" + "strings" + "testing" + + "github.com/hashicorp/nomad/e2e/e2eutil" + "github.com/hashicorp/nomad/helper/uuid" + "github.com/shoenig/test/must" +) + +// TestWorkloadIdentity runs subtests exercising workload identity related +// functionality. +func TestWorkloadIdentity(t *testing.T) { + nomad := e2eutil.NomadClient(t) + + e2eutil.WaitForLeader(t, nomad) + e2eutil.WaitForNodesReady(t, nomad, 1) + + t.Run("testIdentity", testIdentity) + t.Run("testNobody", testNobody) +} + +// testIdentity asserts that the various combinations of identity block +// parameteres produce the expected results. +func testIdentity(t *testing.T) { + nomad := e2eutil.NomadClient(t) + + jobID := "identity-" + uuid.Short() + jobIDs := []string{jobID} + t.Cleanup(e2eutil.CleanupJobsAndGC(t, &jobIDs)) + + // start job + allocs := e2eutil.RegisterAndWaitForAllocs(t, nomad, "./input/identity.nomad", jobID, "") + must.Len(t, 1, allocs) + allocID := allocs[0].ID + + // wait for batch alloc to complete + alloc := e2eutil.WaitForAllocStopped(t, nomad, allocID) + must.Eq(t, alloc.ClientStatus, "complete") + + assertions := []struct { + task string + env bool + file bool + }{ + { + task: "none", + env: false, + file: false, + }, + { + task: "empty", + env: false, + file: false, + }, + { + task: "env", + env: true, + file: false, + }, + { + task: "file", + env: false, + file: true, + }, + { + task: "falsey", + env: false, + file: false, + }, + } + + // Ensure the assertions and input file match + must.Len(t, len(assertions), alloc.Job.TaskGroups[0].Tasks, + must.Sprintf("test and jobspec mismatch")) + + for _, tc := range assertions { + logFile := fmt.Sprintf("alloc/logs/%s.stdout.0", tc.task) + fd, err := nomad.AllocFS().Cat(alloc, logFile, nil) + must.NoError(t, err) + logBytes, err := io.ReadAll(fd) + must.NoError(t, err) + logs := string(logBytes) + + ps := must.Sprintf("Task: %s Logs: < 10 + n, err := strconv.Atoi(lines[0]) + must.NoError(t, err, ps) + must.Greater(t, 10, n, ps) + + case tc.env && !tc.file: + must.Len(t, 3, lines, ps) + + parseEnv(t, lines[0], ps) + + case !tc.env && !tc.file: + must.Len(t, 2, lines, ps) + } + } + +} + +func parseEnv(t *testing.T, line string, ps must.Setting) string { + must.StrHasPrefix(t, "NOMAD_TOKEN=", line, ps) + token := strings.Split(line, "=")[1] + must.Positive(t, len(token), ps) + return token +} + +// testNobody asserts that when task.user is set, the nomad_token file is owned +// by that user and has minimal permissions. +// +// Test assumes Client is running as root! +func testNobody(t *testing.T) { + nomad := e2eutil.NomadClient(t) + + jobID := "nobodyid-" + uuid.Short() + jobIDs := []string{jobID} + t.Cleanup(e2eutil.CleanupJobsAndGC(t, &jobIDs)) + + // start job + allocs := e2eutil.RegisterAndWaitForAllocs(t, nomad, "./input/nobody.nomad", jobID, "") + must.Len(t, 1, allocs) + allocID := allocs[0].ID + + // wait for batch alloc to complete + alloc := e2eutil.WaitForAllocStopped(t, nomad, allocID) + must.Eq(t, alloc.ClientStatus, "complete") + + logFile := "alloc/logs/nobody.stdout.0" + fd, err := nomad.AllocFS().Cat(alloc, logFile, nil) + must.NoError(t, err) + logBytes, err := io.ReadAll(fd) + must.NoError(t, err) + logs := string(logBytes) + + must.StrHasSuffix(t, "done\n", logs) + + lines := strings.Split(logs, "\n") + must.Len(t, 3, lines) + parts := strings.Split(lines[0], " ") + stats := map[string]string{} + for _, p := range parts { + kvparts := strings.Split(p, "=") + stats[kvparts[0]] = kvparts[1] + } + + must.Eq(t, "0600", stats["perms"], must.Sprintf("is the client running as root?")) + must.Eq(t, "nobody", stats["username"], must.Sprintf("is the client running as root?")) +} diff --git a/helper/users/lookup.go b/helper/users/lookup.go index bb0872e07d9..7c5bafc8683 100644 --- a/helper/users/lookup.go +++ b/helper/users/lookup.go @@ -1,8 +1,13 @@ package users import ( + "fmt" + "os" "os/user" + "strconv" "sync" + + "github.com/hashicorp/go-multierror" ) // lock is used to serialize all user lookup at the process level, because @@ -30,3 +35,63 @@ func Current() (*user.User, error) { defer lock.Unlock() return user.Current() } + +// WriteFileFor is like os.WriteFile except if possible it chowns the file to +// the specified user (possibly from Task.User) and sets the permissions to +// 0o600. +// +// If chowning fails (either due to OS or Nomad being unprivileged), the file +// will be left world readable (0o666). +// +// On failure a multierror with both the original and fallback errors will be +// returned. +func WriteFileFor(path string, contents []byte, username string) error { + // Don't even bother trying to chown to an empty username + var origErr error + if username != "" { + origErr := writeFileFor(path, contents, username) + if origErr == nil { + // Success! + return nil + } + } + + // Fallback to world readable + if err := os.WriteFile(path, contents, 0o666); err != nil { + if origErr != nil { + // Return both errors + return &multierror.Error{ + Errors: []error{origErr, err}, + } + } else { + return err + } + } + + return nil +} + +func writeFileFor(path string, contents []byte, username string) error { + user, err := Lookup(username) + if err != nil { + return err + } + + uid, err := strconv.Atoi(user.Uid) + if err != nil { + return fmt.Errorf("error parsing uid: %w", err) + } + + if err := os.WriteFile(path, contents, 0o600); err != nil { + return err + } + + if err := os.Chown(path, uid, -1); err != nil { + // Delete the file so that the fallback method properly resets + // permissions. + _ = os.Remove(path) + return err + } + + return nil +} diff --git a/helper/users/lookup_linux_test.go b/helper/users/lookup_linux_test.go new file mode 100644 index 00000000000..1559befbbb7 --- /dev/null +++ b/helper/users/lookup_linux_test.go @@ -0,0 +1,80 @@ +//go:build linux + +package users + +import ( + "errors" + "fmt" + "os" + "os/user" + "path/filepath" + "syscall" + "testing" + + "github.com/shoenig/test/must" + "golang.org/x/sys/unix" +) + +func TestLookup_Linux(t *testing.T) { + cases := []struct { + username string + + expErr error + expUser *user.User + }{ + {username: "nobody", expUser: &user.User{Username: "nobody", Uid: "65534", Gid: "65534", Name: "nobody", HomeDir: "/nonexistent"}}, // ubuntu + {username: "root", expUser: &user.User{Username: "root", Uid: "0", Gid: "0", Name: "root", HomeDir: "/root"}}, + {username: "doesnotexist", expErr: errors.New("user: unknown user doesnotexist")}, + } + + for _, tc := range cases { + t.Run(tc.username, func(t *testing.T) { + u, err := Lookup(tc.username) + if tc.expErr != nil { + must.EqError(t, tc.expErr, err.Error()) + } else { + must.Eq(t, tc.expUser, u) + } + }) + } +} + +func TestLookup_NobodyIDs(t *testing.T) { + uid, gid := NobodyIDs() + must.Eq(t, 65534, uid) // ubuntu + must.Eq(t, 65534, gid) // ubuntu +} + +func TestWriteFileFor_Linux(t *testing.T) { + // This is really how you have to retrieve umask. See `man 2 umask` + umask := unix.Umask(0) + unix.Umask(umask) + + path := filepath.Join(t.TempDir(), "secret.txt") + contents := []byte("TOO MANY SECRETS") + + must.NoError(t, WriteFileFor(path, contents, "nobody")) + + stat, err := os.Lstat(path) + must.NoError(t, err) + must.True(t, stat.Mode().IsRegular(), + must.Sprintf("expected %s to be a normal file but found %#o", path, stat.Mode())) + + linuxStat, ok := stat.Sys().(*syscall.Stat_t) + must.True(t, ok, must.Sprintf("expected stat.Sys() to be a *syscall.Stat_t but found %T", stat.Sys())) + + current, err := Current() + must.NoError(t, err) + + if current.Username == "root" { + t.Logf("Running as root: asserting %s is owned by nobody", path) + nobody, err := Lookup("nobody") + must.NoError(t, err) + must.Eq(t, nobody.Uid, fmt.Sprintf("%d", linuxStat.Uid)) + must.Eq(t, 0o600&(^umask), int(stat.Mode())) + } else { + t.Logf("Running as non-root: asserting %s is world readable", path) + must.Eq(t, current.Uid, fmt.Sprintf("%d", linuxStat.Uid)) + must.Eq(t, 0o666&(^umask), int(stat.Mode())) + } +} diff --git a/helper/users/lookup_test.go b/helper/users/lookup_test.go deleted file mode 100644 index 8189adf3b9f..00000000000 --- a/helper/users/lookup_test.go +++ /dev/null @@ -1,41 +0,0 @@ -//go:build linux - -package users - -import ( - "errors" - "os/user" - "testing" - - "github.com/shoenig/test/must" -) - -func TestLookup(t *testing.T) { - cases := []struct { - username string - - expErr error - expUser *user.User - }{ - {username: "nobody", expUser: &user.User{Username: "nobody", Uid: "65534", Gid: "65534", Name: "nobody", HomeDir: "/nonexistent"}}, // ubuntu - {username: "root", expUser: &user.User{Username: "root", Uid: "0", Gid: "0", Name: "root", HomeDir: "/root"}}, - {username: "doesnotexist", expErr: errors.New("user: unknown user doesnotexist")}, - } - - for _, tc := range cases { - t.Run(tc.username, func(t *testing.T) { - u, err := Lookup(tc.username) - if tc.expErr != nil { - must.EqError(t, tc.expErr, err.Error()) - } else { - must.Eq(t, tc.expUser, u) - } - }) - } -} - -func TestLookup_NobodyIDs(t *testing.T) { - uid, gid := NobodyIDs() - must.Eq(t, 65534, uid) // ubuntu - must.Eq(t, 65534, gid) // ubuntu -} diff --git a/helper/users/lookup_windows_test.go b/helper/users/lookup_windows_test.go new file mode 100644 index 00000000000..688f740061a --- /dev/null +++ b/helper/users/lookup_windows_test.go @@ -0,0 +1,51 @@ +//go:build windows + +package users + +import ( + "os" + "os/user" + "path/filepath" + "testing" + + "github.com/shoenig/test/must" +) + +func TestLookup_Windows(t *testing.T) { + stdlibUser, err := user.Current() + must.NoError(t, err, must.Sprintf("error looking up current user using stdlib")) + must.NotEq(t, "", stdlibUser.Username) + + helperUser, err := Current() + must.NoError(t, err) + + must.Eq(t, stdlibUser.Username, helperUser.Username) + + lookupUser, err := Lookup(helperUser.Username) + must.NoError(t, err) + + must.Eq(t, helperUser.Username, lookupUser.Username) +} + +func TestLookup_Administrator(t *testing.T) { + u, err := user.Lookup("Administrator") + must.NoError(t, err) + + // Windows allows looking up unqualified names but will return a fully + // qualified (eg prefixed with the local machine or domain) + must.StrHasSuffix(t, "Administrator", u.Username) +} + +func TestWriteFileFor_Windows(t *testing.T) { + path := filepath.Join(t.TempDir(), "secret.txt") + contents := []byte("TOO MANY SECRETS") + + must.NoError(t, WriteFileFor(path, contents, "Administrator")) + stat, err := os.Lstat(path) + must.NoError(t, err) + must.True(t, stat.Mode().IsRegular(), + must.Sprintf("expected %s to be a normal file but found %#o", path, stat.Mode())) + + // Assert Windows hits the fallback world-accessible case + must.Eq(t, 0o666, stat.Mode().Perm()) +} diff --git a/jobspec/parse_task.go b/jobspec/parse_task.go index 018f27149bf..b7315be74e5 100644 --- a/jobspec/parse_task.go +++ b/jobspec/parse_task.go @@ -33,6 +33,7 @@ var ( "constraint", "affinity", "dispatch_payload", + "identity", "lifecycle", "leader", "restart", @@ -104,6 +105,7 @@ func parseTask(item *ast.ObjectItem, keys []string) (*api.Task, error) { delete(m, "dispatch_payload") delete(m, "lifecycle") delete(m, "env") + delete(m, "identity") delete(m, "logs") delete(m, "meta") delete(m, "resources") @@ -281,6 +283,15 @@ func parseTask(item *ast.ObjectItem, keys []string) (*api.Task, error) { } } + // Parse identity + if o := listVal.Filter("identity"); len(o.Items) > 0 { + v := &api.WorkloadIdentity{} + if err := parseIdentity(v, o); err != nil { + return nil, multierror.Prefix(err, "identity ->") + } + t.Identity = v + } + // Parse templates if o := listVal.Filter("template"); len(o.Items) > 0 { if err := parseTemplates(&t.Templates, o); err != nil { @@ -742,3 +753,41 @@ func parseVolumeMounts(out *[]*api.VolumeMount, list *ast.ObjectList) error { *out = mounts return nil } + +func parseIdentity(out *api.WorkloadIdentity, list *ast.ObjectList) error { + list = list.Elem() + if len(list.Items) == 0 { + return nil + } + if len(list.Items) > 1 { + return fmt.Errorf("only one 'identity' block allowed per task") + } + + o := list.Items[0] + var listVal *ast.ObjectList + if ot, ok := o.Val.(*ast.ObjectType); ok { + listVal = ot.List + } else { + return fmt.Errorf("identity: should be an object") + } + + valid := []string{ + "env", + "file", + } + + if err := checkHCLKeys(listVal, valid); err != nil { + return multierror.Prefix(err, "identity ->") + } + + var m map[string]interface{} + if err := hcl.DecodeObject(&m, o.Val); err != nil { + return err + } + + if err := mapstructure.WeakDecode(m, out); err != nil { + return err + } + + return nil +} diff --git a/nomad/structs/diff.go b/nomad/structs/diff.go index 3ae15b4237c..086517faae1 100644 --- a/nomad/structs/diff.go +++ b/nomad/structs/diff.go @@ -544,6 +544,12 @@ func (t *Task) Diff(other *Task, contextual bool) (*TaskDiff, error) { diff.Objects = append(diff.Objects, tmplDiffs...) } + // Identity diff + idDiffs := idDiff(t.Identity, other.Identity, contextual) + if idDiffs != nil { + diff.Objects = append(diff.Objects, idDiffs) + } + return diff, nil } @@ -2370,6 +2376,32 @@ func configDiff(old, new map[string]interface{}, contextual bool) *ObjectDiff { return diff } +// idDiff returns the diff of two identity objects. If contextual diff is +// enabled, all fields will be returned, even if no diff occurred. +func idDiff(oldWI, newWI *WorkloadIdentity, contextual bool) *ObjectDiff { + diff := &ObjectDiff{Type: DiffTypeNone, Name: "Identity"} + var oldPrimitiveFlat, newPrimitiveFlat map[string]string + + if reflect.DeepEqual(oldWI, newWI) { + return nil + } else if oldWI == nil { + diff.Type = DiffTypeAdded + newPrimitiveFlat = flatmap.Flatten(newWI, nil, true) + } else if newWI == nil { + diff.Type = DiffTypeDeleted + oldPrimitiveFlat = flatmap.Flatten(oldWI, nil, true) + } else { + diff.Type = DiffTypeEdited + oldPrimitiveFlat = flatmap.Flatten(oldWI, nil, true) + newPrimitiveFlat = flatmap.Flatten(newWI, nil, true) + } + + // Diff the primitive fields. + diff.Fields = fieldDiffs(oldPrimitiveFlat, newPrimitiveFlat, contextual) + + return diff +} + // ObjectDiff contains the diff of two generic objects. type ObjectDiff struct { Type DiffType diff --git a/nomad/structs/diff_test.go b/nomad/structs/diff_test.go index a7fc697c630..8cef345cd4a 100644 --- a/nomad/structs/diff_test.go +++ b/nomad/structs/diff_test.go @@ -7546,6 +7546,99 @@ func TestTaskDiff(t *testing.T) { }, }, }, + { + Name: "Identity added", + Old: &Task{}, + New: &Task{ + Identity: &WorkloadIdentity{ + Env: true, + }, + }, + Expected: &TaskDiff{ + Type: DiffTypeEdited, + Objects: []*ObjectDiff{ + { + Type: DiffTypeAdded, + Name: "Identity", + Fields: []*FieldDiff{ + { + Type: DiffTypeAdded, + Name: "Env", + Old: "", + New: "true", + }, + { + Type: DiffTypeAdded, + Name: "File", + Old: "", + New: "false", + }, + }, + }, + }, + }, + }, + { + Name: "Identity removed", + Old: &Task{ + Identity: &WorkloadIdentity{ + Env: true, + }, + }, + New: &Task{}, + Expected: &TaskDiff{ + Type: DiffTypeEdited, + Objects: []*ObjectDiff{ + { + Type: DiffTypeDeleted, + Name: "Identity", + Fields: []*FieldDiff{ + { + Type: DiffTypeDeleted, + Name: "Env", + Old: "true", + }, + { + Type: DiffTypeDeleted, + Name: "File", + Old: "false", + }, + }, + }, + }, + }, + }, + { + Name: "Identity modified", + Old: &Task{ + Identity: &WorkloadIdentity{ + Env: true, + }, + }, + New: &Task{ + Identity: &WorkloadIdentity{ + Env: true, + File: true, + }, + }, + Expected: &TaskDiff{ + Type: DiffTypeEdited, + Objects: []*ObjectDiff{ + { + Type: DiffTypeEdited, + Name: "Identity", + Fields: []*FieldDiff{ + { + Type: DiffTypeEdited, + Name: "File", + Old: "false", + New: "true", + }, + }, + }, + }, + }, + }, } for _, c := range cases { diff --git a/nomad/structs/structs.go b/nomad/structs/structs.go index ba300873ee6..eb05ade656b 100644 --- a/nomad/structs/structs.go +++ b/nomad/structs/structs.go @@ -7213,6 +7213,10 @@ type Task struct { // CSIPluginConfig is used to configure the plugin supervisor for the task. CSIPluginConfig *TaskCSIPluginConfig + + // Identity controls if and how the workload identity is exposed to + // tasks similar to the Vault block. + Identity *WorkloadIdentity } // UsesConnect is for conveniently detecting if the Task is able to make use @@ -7273,6 +7277,7 @@ func (t *Task) Copy() *Task { nt.Meta = maps.Clone(nt.Meta) nt.DispatchPayload = nt.DispatchPayload.Copy() nt.Lifecycle = nt.Lifecycle.Copy() + nt.Identity = nt.Identity.Copy() if t.Artifacts != nil { artifacts := make([]*TaskArtifact, 0, len(t.Artifacts)) diff --git a/nomad/structs/structs_test.go b/nomad/structs/structs_test.go index e283058dc41..a1cf101d02c 100644 --- a/nomad/structs/structs_test.go +++ b/nomad/structs/structs_test.go @@ -429,6 +429,10 @@ func testJob() *Job { GetterSource: "http://foo.com", }, }, + Identity: &WorkloadIdentity{ + Env: true, + File: true, + }, Resources: &Resources{ CPU: 500, MemoryMB: 256, diff --git a/nomad/structs/workload_id.go b/nomad/structs/workload_id.go new file mode 100644 index 00000000000..a5bb332f875 --- /dev/null +++ b/nomad/structs/workload_id.go @@ -0,0 +1,39 @@ +package structs + +// WorkloadIdentity is the jobspec block which determines if and how a workload +// identity is exposed to tasks similar to the Vault block. +type WorkloadIdentity struct { + // Env injects the Workload Identity into the Task's environment if + // set. + Env bool + + // File writes the Workload Identity into the Task's secrets directory + // if set. + File bool +} + +func (wi *WorkloadIdentity) Copy() *WorkloadIdentity { + if wi == nil { + return nil + } + return &WorkloadIdentity{ + Env: wi.Env, + File: wi.File, + } +} + +func (wi *WorkloadIdentity) Equal(other *WorkloadIdentity) bool { + if wi == nil || other == nil { + return wi == other + } + + if wi.Env != other.Env { + return false + } + + if wi.File != other.File { + return false + } + + return true +} diff --git a/nomad/structs/workload_id_test.go b/nomad/structs/workload_id_test.go new file mode 100644 index 00000000000..937f02ccfa0 --- /dev/null +++ b/nomad/structs/workload_id_test.go @@ -0,0 +1,32 @@ +package structs + +import ( + "testing" + + "github.com/hashicorp/nomad/ci" + "github.com/shoenig/test/must" +) + +func TestWorkloadIdentity_Equal(t *testing.T) { + ci.Parallel(t) + + var orig *WorkloadIdentity + + newWI := orig.Copy() + must.Equal(t, orig, newWI) + + orig = &WorkloadIdentity{} + must.NotEqual(t, orig, newWI) + + newWI = &WorkloadIdentity{} + must.Equal(t, orig, newWI) + + orig.Env = true + must.NotEqual(t, orig, newWI) + + newWI.Env = true + must.Equal(t, orig, newWI) + + newWI.File = true + must.NotEqual(t, orig, newWI) +} diff --git a/scheduler/util.go b/scheduler/util.go index cbc0536b4f5..c02e05840b3 100644 --- a/scheduler/util.go +++ b/scheduler/util.go @@ -598,6 +598,11 @@ func tasksUpdated(jobA, jobB *structs.Job, taskGroup string) bool { } else if !ar.Devices.Equal(&br.Devices) { return true } + + // Inspect Identity being exposed + if !at.Identity.Equal(bt.Identity) { + return true + } } return false } diff --git a/scheduler/util_test.go b/scheduler/util_test.go index 475c3d67228..c8285709ac3 100644 --- a/scheduler/util_test.go +++ b/scheduler/util_test.go @@ -1848,3 +1848,20 @@ func TestUtil_connectSidecarServiceUpdated(t *testing.T) { require.False(t, connectSidecarServiceUpdated(a, b)) }) } + +func TestTasksUpdated_Identity(t *testing.T) { + ci.Parallel(t) + + j1 := mock.Job() + name := j1.TaskGroups[0].Name + j1.TaskGroups[0].Tasks[0].Identity = nil + + j2 := j1.Copy() + + must.False(t, tasksUpdated(j1, j2, name)) + + // Set identity on j1 and assert update + j1.TaskGroups[0].Tasks[0].Identity = &structs.WorkloadIdentity{} + + must.True(t, tasksUpdated(j1, j2, name)) +} diff --git a/website/content/api-docs/json-jobs.mdx b/website/content/api-docs/json-jobs.mdx index ed30efeeba2..36687139f34 100644 --- a/website/content/api-docs/json-jobs.mdx +++ b/website/content/api-docs/json-jobs.mdx @@ -77,6 +77,7 @@ $ nomad job run -output example.nomad.hcl "User": "", "Lifecycle": null, "Config": { + "auth_soft_fail": true, "image": "redis:7", "ports": [ "db" @@ -109,7 +110,11 @@ $ nomad job run -output example.nomad.hcl "ShutdownDelay": 0, "KillSignal": "", "Kind": "", - "ScalingPolicies": null + "ScalingPolicies": null, + "Identity": { + "Env": true, + "File": true + } } ], "Spreads": null, @@ -151,7 +156,6 @@ $ nomad job run -output example.nomad.hcl "Meta": null, "Services": [ { - "Id": "", "Name": "redis-cache", "Tags": [ "global", @@ -161,14 +165,16 @@ $ nomad job run -output example.nomad.hcl "EnableTagOverride": false, "PortLabel": "db", "AddressMode": "", + "Address": "", "Checks": null, "CheckRestart": null, "Connect": null, "Meta": null, "CanaryMeta": null, + "TaggedAddresses": null, "TaskName": "", "OnUpdate": "", - "Provider": "" + "Provider": "nomad" } ], "ShutdownDelay": null, @@ -453,6 +459,13 @@ The `Task` object supports the following keys: } ``` +- `Identity` - Specifies whether to expose Nomad's [Workload Identity][] + to the task. + + - `Env` - If `true` the `NOMAD_TOKEN` environment variable will be set. + + - `File` - If `true` the `secrets/nomad_token` file will be created. + - `KillSignal` - Specifies a configurable kill signal for a task, where the default is SIGINT. Note that this is only supported for drivers which accept sending signals (currently `docker`, `exec`, `raw_exec`, and `java` drivers). @@ -1191,3 +1204,4 @@ The `Scaling` object supports the following keys: [ct]: https://github.com/hashicorp/consul-template 'Consul Template by HashiCorp' [drain]: /nomad/docs/commands/node/drain [env]: /nomad/docs/runtime/environment 'Nomad Runtime Environment' +[Workload Identity]: /nomad/docs/concepts/workload-identity 'Nomad Workload Identity' diff --git a/website/content/docs/commands/acl/policy/info.mdx b/website/content/docs/commands/acl/policy/info.mdx index b9e9e99a4b1..f0622d92c4f 100644 --- a/website/content/docs/commands/acl/policy/info.mdx +++ b/website/content/docs/commands/acl/policy/info.mdx @@ -46,7 +46,7 @@ Rules } ``` -If the ACL Policy is associated with a [Workload Identity], additional information will be shown: +If the ACL Policy is associated with a [Workload Identity][], additional information will be shown: ```shell-session $ nomad acl policy info my-policy @@ -69,3 +69,5 @@ Rules "Rules": "list_jobs" } ``` + +[Workload Identity]: /nomad/docs/concepts/workload-identity 'Nomad Workload Identity' diff --git a/website/content/docs/concepts/workload-identity.mdx b/website/content/docs/concepts/workload-identity.mdx index 4ce00a0d823..7b7725fff52 100644 --- a/website/content/docs/concepts/workload-identity.mdx +++ b/website/content/docs/concepts/workload-identity.mdx @@ -6,10 +6,11 @@ description: Learn about Nomad's workload identity feature # Workload Identity -When an [allocation][] is accepted by the [plan applier][], the leader generates -a Workload Identity for each task in the allocation. This workload identity is a -[JSON Web Token (JWT)][] that has been signed by the leader's keyring. The -workload identity includes the following identity claims: +Every workload running in Nomad is given an identity. When an [allocation][] is +accepted by the [plan applier][], the leader generates a Workload Identity for +each task in the allocation. This workload identity is a [JSON Web Token +(JWT)][] that has been signed by the leader's keyring. The workload identity +includes the following identity claims: ```json { @@ -20,6 +21,11 @@ workload identity includes the following identity claims: } ``` +# Using Workload Identity + +While Nomad always creates and uses workload identities internally, the JWT is +not exposed to tasks by default. + # Workload Associated ACL Policies You can associate additional ACL policies with workload identities by passing diff --git a/website/content/docs/job-specification/identity.mdx b/website/content/docs/job-specification/identity.mdx new file mode 100644 index 00000000000..36cf26fcdf7 --- /dev/null +++ b/website/content/docs/job-specification/identity.mdx @@ -0,0 +1,55 @@ +--- +layout: docs +page_title: identity Block - Job Specification +description: |- + The "identity" block allows tasks to use their Nomad Workload Identity via an + environment variable or file. +--- + +# `identity` Block + + + +The `identity` block allows a task access to its [Workload Identity][] via an +environment variable or file. By default Nomad will create an identity for all +workloads, but it is *not* exposed to a task. + +The following will expose the Workload Identity as an environment variable and +file to the task: + +```hcl +job "docs" { + group "example" { + task "api" { + + identity { + env = true + file = true + } + + # ... + } + } +} +``` + +## `identity` Parameters + +- `env` `(bool: false)` - If true the workload identity will be available in the + task's `NOMAD_TOKEN` environment variable. +- `file` `(bool: false)` - If true the workload identity will be available in + the task's filesystem via the path `secrets/nomad_token`. If the + [`task.user`][taskuser] parameter is set, the token file will only be + readable by that user. Otherwise the file is readable by everyone but is + protected by parent directory permissions. + +Note that while both parameters default to `true`, the `identity` block itself +must be present in the job specification or the workload identity will not be +exposed. + +[taskuser]: /nomad/docs/job-specification/task#user "Nomad task Block" +[Workload Identity]: /nomad/docs/concepts/workload-identity "Nomad Workload Identity" diff --git a/website/data/docs-nav-data.json b/website/data/docs-nav-data.json index 24959a882e6..d6807853507 100644 --- a/website/data/docs-nav-data.json +++ b/website/data/docs-nav-data.json @@ -1569,6 +1569,10 @@ "title": "group", "path": "job-specification/group" }, + { + "title": "identity", + "path": "job-specification/identity" + }, { "title": "job", "path": "job-specification/job"