PureStorage.CBS.AVS.VVOLS.ps1

function Mount-VvolDatastore {
    <#
    .SYNOPSIS
      Mounts a FlashArray VVol Datastore to a host or cluster
    .DESCRIPTION
      Mounts a FlashArray VVol Datastore to a cluster, connects a PE to the cluster if not present.
      The datastore will be created if it does not already exist. The function will return the exting (or newly created) datastore
    #>


    Param(
            [Parameter(Mandatory=$True)]
            $Flasharray,

            [Parameter(Mandatory=$True)]
            $vCenterServer,

            [Parameter(Mandatory=$false)]
            [string]$DatastoreName,

            [Parameter(Mandatory=$false)]
            [bool]$UseDefaultStore,

            [Parameter(Mandatory=$true,ValueFromPipeline=$True)]
            [VMware.VimAutomation.ViCore.Types.V1.Inventory.Cluster]$Cluster,

            [Parameter(Mandatory=$false)]
            [String]$AVSCloudName,

            [Parameter(Mandatory=$false)]
            [String]$AVSResourceGroup
    )
    if ($DatastoreName) {
        $datastore = Get-Datastore -Server $vCenterServer -Name $DatastoreName -ErrorAction Ignore
        if ($datastore) {
            throw "Cannot create the datastore. Datastore '$DatastoreName' already exists!"
        }
    }
    $arrayID = Get-ArrayID -FlashArray $Flasharray
    $arrayOui = Get-ArrayOUI -ArrayID $arrayID
    $ArrayName = Get-ArrayName -FlashArray $FlashArray

    if ($UseDefaultStore) {
        $scId = Get-RootStorageContainerID -ArrayID $arrayID
        $datastoreExists = Get-Datastore -Server $vCenterServer |Where-Object {$_.Type -eq "VVol"} |Where-Object {$_.ExtensionData.Info.VVolds.Scid -eq $scId}
        if (-not $datastoreExists)
        {
            if (-not $DatastoreName) {
                $DatastoreName = $ArrayName + "-vvol-DS"
            }
        }
        else {
            if (-not $DatastoreName) {
                $DatastoreName = $datastoreExists.Name
            }
        }
    }
    else {
        if (-not $DatastoreName) {
            throw "Datastore name must be provided when using non default containers."
        }
        # See if a pod was already created
        $pod = Get-Pfa2Pod -Array $Flasharray -Name $DatastoreName -ErrorAction Ignore
        if (-not $pod) {
            Write-Host "Creating a pod $DatastoreName ..."
            $pod = New-Pfa2Pod -Array $Flasharray -Name $DatastoreName -ErrorAction Stop
        }
        $pod_id = $pod.id.Replace("-","")
        $scid = "vvol:"+$pod_id.substring(0,16)+"-"+$pod_id.substring(16)
    }

    Write-Verbose "Using storage container ID '$scid'..."
    $datastoreExists = Get-Datastore |Where-Object {$_.Type -eq "VVol"} |Where-Object {$_.ExtensionData.Info.VVolds.Scid -eq $scId}
    if ($datastoreExists) {
        if ($DatastoreName -ne $datastoreExists.Name) {
            throw "A datastore '$($datastoreExists.Name)' already exists using container ID '$scid'. Will not be able to create a datastore with the name '$DatastoreName."
        }
        Write-Host "A datastore already exists. Using datastore $($datastoreExists.Name)..."
        $datastore = $datastoreExists
    }

    $esxiHosts = $cluster |Get-VMHost
    foreach ($esxi in $esxiHosts) {
        $hostPE = Find-ProtocolEndpoint -Esxi $esxi -DatastoreName $DatastoreName -UseDefaultStore $UseDefaultStore -arrayOui $arrayOui
        if (-not $hostPE)
        {
            if ($datastore)
            {
                $fa = Get-PfaConnectionOfDatastore -FlashArray $Flasharray -datastore $datastore -ErrorAction Ignore
                if ($null -eq $fa) {
                    throw "No protocol endpoints found on the host $($esxi.name) for this array. Attempt to provision a PE failed as no valid PowerShell connections found for the array. Please either provision the protocol endpoint or connect the array to an existing PE."
                }
            }

            $hGroup = Get-PfaHostGroupfromVcCluster -cluster $cluster -flasharray $Flasharray -ErrorAction Stop
            $allPEs = Get-Pfa2Volume -Array $Flasharray | Where-Object {$_.Subtype -eq "protocol_endpoint"}  -ErrorAction Stop
            if (($null -eq $protocolEndpoint) -or ($protocolEndpoint -eq ""))
            {
                $protocolEndpoint = "pure-protocol-endpoint"
                if (-not $UseDefaultStore) {
                    $ProtocolEndpoint = "$DatastoreName::$ProtocolEndpoint"
                }
            }
            $pe = $allPEs | Where-Object {$_.name -eq $protocolEndpoint}
            if ($null -eq $pe)
            {
                $pe = New-Pfa2Volume -Array $Flasharray -Name $protocolEndpoint -Subtype "protocol_endpoint"
            }
            try
            {
                New-Pfa2Connection -Array $FlashArray -HostGroupNames $hGroup.name -VolumeNames $pe.name -ErrorAction Stop
            }
            catch
            {
                if ($_.Exception -notlike "*Connection already exists.*")
                {
                    throw $_.Exception
                }
            }
            # Refresh VASA Providers
            $provider_id = (Get-VasaStorageArray -Server $vCenterServer -Id ("com.purestorage:" + (Get-Pfa2Array -Array $Flasharray).id)).provider.id
            Write-Host "Refreshing VASA Provider..."
            $out = Get-VasaProvider -Server $vCenterServer -id  $provider_id -Refresh
            Write-Host "Refreshed VASA provider $($out.Name) ($($out.Id)"
        }
    }

    $params = @{
            ClusterName = $Cluster.Name;
            DatastoreName = $DatastoreName;
            ScId = $SciD
    }
    Invoke-RunScript -RunCommandName  "New-VvolDatastore" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters $params `
            -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup

    $datastore = Get-Datastore -Server $vCenterServer -Name $DatastoreName -ErrorAction stop
    return $datastore
}

function Dismount-VvolDatastore {
    Param(
        [Parameter(Mandatory=$True)]
        $Flasharray,

        [Parameter(Mandatory=$True)]
        $vCenterServer,

        [Parameter(Mandatory=$True)]
        [string]$DatastoreName,

        [Parameter(Mandatory=$true,ValueFromPipeline=$True)]
        [VMware.VimAutomation.ViCore.Types.V1.Inventory.Cluster]$Cluster,

        [Parameter(Mandatory=$false)]
        [String]$AVSCloudName,

        [Parameter(Mandatory=$false)]
        [String]$AVSResourceGroup
    )

    $Datastore = Get-Datastore -Server $vCenterServer -Name $DatastoreName -ErrorAction Ignore
    if (-not $Datastore) {
        throw "Datastore ($DatastoreName) does not exist."
    }

    if ("VVOL" -ne $Datastore.Type) {
        throw "Datastore $DatastoreName is of type $($Datastore.Type). This cmdlet can only process VVol datastores"
    }

    $params = @{
            ClusterName = $Cluster.Name;
            DatastoreName = $DatastoreName;
    }

    Write-Progress -Activity "Removing datastore" -Status "50% Complete:" -PercentComplete 50
    Invoke-RunScript -RunCommandName  "Remove-VvolDatastore" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters $params `
            -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup
}

function Get-ArrayID {
    Param(
        [Parameter(Mandatory=$true)]
        $FlashArray
    )
    $ArrayID = "com.purestorage:" + (Get-Pfa2Array -Array $Flasharray).id
    return $arrayID
}

function Get-ArrayName {
    Param(
        [Parameter(Mandatory=$true)]
        $FlashArray
    )
    $ArrayName = (Get-Pfa2Array -Array $Flasharray).Name
    return $ArrayName
}

function Get-ArrayOUI {
    Param (
        [Parameter(Mandatory=$true)]
        [string]$ArrayID
    )
    $ArrayOui = $ArrayID.substring(16,36)
    $ArrayOui = $ArrayOui.replace("-","")
    $ArrayOui = $ArrayOui.Substring(0,16)
    return $ArrayOui
}


function Get-RootStorageContainerID {
    Param(
        [Parameter(Mandatory=$true)]
        [string]$ArrayID
    )
    $md5 = new-object -TypeName System.Security.Cryptography.MD5CryptoServiceProvider
    $utf8 = new-object -TypeName System.Text.UTF8Encoding
    $hash = $md5.ComputeHash($utf8.GetBytes($ArrayID.substring(16,36)))
    $hash2 = $md5.ComputeHash(($hash))
    $hash2[6] = $hash2[6] -band 0x0f
    $hash2[6] = $hash2[6] -bor 0x30
    $hash2[8] = $hash2[8] -band 0x3f
    $hash2[8] = $hash2[8] -bor 0x80
    $newGUID = (new-object -TypeName System.Guid -ArgumentList (,$hash2)).Guid
    $fixedGUID = $newGUID.Substring(18)
    $scId = $newGUID.Substring(6,2) + $newGUID.Substring(4,2) + $newGUID.Substring(2,2) + $newGUID.Substring(0,2) + "-" + $newGUID.Substring(11,2) + $newGUID.Substring(9,2) + "-" + $newGUID.Substring(16,2) + $newGUID.Substring(14,2) + $fixedGUID
    $scId = $scId.Replace("-","")
    $scId = "vvol:" + $scId.Insert(16,"-")
    return $scId
}


function Find-ProtocolEndpoint {
    Param (
        $Esxi,
        $DatastoreName,
        $UseDefaultStore,
        $arrayOui
    )
    $esxcli = $esxi |Get-EsxCli -v2
    $hostProtocolEndpoint = $esxcli.storage.core.device.list.invoke() |where-object {$_.IsVVOLPE -eq $true}
    foreach ($hostPE in $hostProtocolEndpoint)
    {
        $peID = $hostPE.Device.Substring(12,24)
        $peID = $peID.Substring(0,16)
        if ($UseDefaultStore) {
            if ($peID -eq $arrayOui) {
                return $hostPE

            }
        } else {
            $PEVolumes = Get-Pfa2Volume -Array $Flasharray | Where-Object {($_.Pod.Name -eq $DatastoreName) -and ($_.Subtype -eq "protocol_endpoint")}
            foreach ($peVolume in $PEVolumes) {
                $volumeSerial = $peVolume.Serial.ToLower()
                if ($hostPe.Device -like "*$volumeSerial*"){
                    return $hostPE
                }
            }
        }
    }
    return $null
}

function Get-PfaConnectionOfDatastore {
    <#
    .SYNOPSIS
      Takes in a vVol or VMFS datastore, FlashArray connections and returns the correct connection.
    .DESCRIPTION
      Takes in a vVol or VMFS datastore, FlashArray connections and returns the correct connection or $null if not connected.
    #>


    Param(

      [Parameter(Mandatory=$True,ValueFromPipeline=$True)]
      $Flasharray,

      [Parameter(Mandatory=$true,ValueFromPipeline=$True)]
      [ValidateScript({
        if (($_.Type -ne 'VMFS') -and ($_.Type -ne 'VVOL'))
        {
            throw "The entered datastore is not a VMFS or vVol datastore. It is type $($_.Type). Please only enter a VMFS or vVol datastore"
        }
        else {
          $true
        }
      })]
      [VMware.VimAutomation.ViCore.Types.V1.DatastoreManagement.Datastore]$Datastore
    )

    if ($datastore.Type -eq 'VMFS')
      {
          $lun = $datastore.ExtensionData.Info.Vmfs.Extent.DiskName |select-object -unique
          if ($lun -like 'naa.624a9370*')
          {
            $volserial = ($lun.ToUpper()).substring(12)
            $pureVolumes = Get-Pfa2Volume -Array $Flasharray
            $purevol = $purevolumes | where-object { $_.serial -eq $volserial }
            if ($null -ne $purevol.name)
            {
                return $flasharray
            }
          }
          else
          {
              throw "This VMFS is not hosted on FlashArray storage."
          }
      }
      elseif ($datastore.Type -eq 'VVOL')
      {
          $datastoreArraySerial = $datastore.ExtensionData.Info.VvolDS.StorageArray[0].uuid.Substring(16)

        $arraySerial = (Get-Pfa2Array -Array $Flasharray).id
        if ($arraySerial -eq $datastoreArraySerial)
        {
            return $flasharray
        }

      }
      # The datastore was not found on any of the FlashArray connections.
      return $null
}

function Wait-VvolDatastoreCreation {
    Param(
        [Parameter(Mandatory=$true)]
            [string]$DatastoreName
    )
    $retries = 0
    # Datastore will not be available immediately. The retry logic keeps query the status of the datastore
    while ($retries -le 10) {
      $latestDatastore = (Get-Datastore | Where-Object {$_.Name -eq $DatastoreName})
      if ("Available" -ne $latestDatastore.State) {
        $retries++
        Start-Sleep -s 5
      } else {
        Write-Host "The datastore '$($latestDatastore.Name)' is available"
        break
      }
      Write-Host "Waiting for the datastore '$($latestDatastore.Name)' to be available..."
    }

    if ("Available" -ne $latestDatastore.State) {
      throw "The datastore '$($datastore.Name)' is either not available or not acessible."
    }
}
function Update-VASAProviderCertificates {
    Param (
        [Parameter(Mandatory=$true)]
        $ControllerName,

        [Parameter(Mandatory=$true)]
        $MgmtIP,

        [Parameter(Mandatory=$true)]
        $VASAProvider,


        [Parameter(Mandatory=$true)]
        [PScredential] $FlashArrayCredential,

        [Parameter(Mandatory=$false)]
        [String]$AVSCloudName,

        [Parameter(Mandatory=$false)]
        [String]$AVSResourceGroup
    )

    $ArrayName = Get-ArrayName -FlashArray $FlashArray
    $cert_name = "vasa-$ControllerName"
    Write-Host "Removing certificate $cert_name from FlashArray: $ArrayName ..."
    Remove-Pfa2Certificate -Array $Flasharray -Name $cert_name 
    Write-Host "Creating self-signed certificate $cert_name on FlashArray: $ArrayName ..."
    New-Pfa2Certificate -Array $Flasharray -Name $cert_name -CommonName $MgmtIP.Eth.Address -Organization "Pure Storage" -OrganizationalUnit "Pure Storage" | Out-Null
    Write-Host "Removing VASA provider $provider_name ..."
    $param = @{
        ProviderName = $VASAProvider.Name;
    }
    Invoke-RunScript -RunCommandName  "Remove-VvolVasaProvider" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters $param `
            -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup
}

function Get-VASAProviderFromControllerName {
    Param (
        $FlashArray,
        $ControllerName
    )
    $ArrayId = (Get-Pfa2Array -Array $FlashArray).Id
    $controller_num = $ControllerName.Substring(2)
    $ProviderId = "$ArrayId-$controller_num"
    $vasaProvider = Get-VasaProvider -Server $vCenterServer -ErrorAction Ignore | Where-Object {$_.ProviderId -eq $ProviderId}
    return $vasaProvider
}
function Update-VASAProvider {
    Param (
        [Parameter(ValueFromPipeline=$True)]
        $FlashArray,

        [Parameter(Mandatory=$true)]
        $vCenterServer,

        [Parameter(Mandatory=$true)]
        [PScredential] $FlashArrayCredential,

        [Parameter(Mandatory=$false)]
        [String]$AVSCloudName,

        [Parameter(Mandatory=$false)]
        [String]$AVSResourceGroup,

        [Parameter(Mandatory=$false)]
        [Switch]$RefreshOnly
    )

    $MaxRetryCount = 10
    $mgmtIPs =  Get-Pfa2NetworkInterface -Array $Flasharray | Where-Object {$_.services -eq "management" -and $_.Enabled -and $_.Name -like "ct*"}
    $registeredController = @()
    $ArrayName = Get-ArrayName -FlashArray $FlashArray
    foreach ($mgmtIP in $mgmtIPs)
    {
        $vasaRegistered = $false
        $retry_count = 0
        $controller_name = ($mgmtIp.Name.Split("."))[0]

        if ($registeredController -contains $controller_name) {
            continue
        }
        $provider_name = "$ArrayName-$controller_name"
        do
        {
            $vasaProvider = Get-VASAProviderFromControllerName -FlashArray $FlashArray -ControllerName $controller_name
            if ($vasaProvider) {
                Write-Host "VASA Provider already exists for ‘$ArrayName’ controller ‘$controller_name’..."
                if ($RefreshOnly) {
                    Update-VASAProviderCertificates -VASAProvider $vasaProvider -ControllerName $controller_name -mgmtIP $mgmtIP -FlashArrayCredential $FlashArrayCredential `
                            -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup
                    $vasaRegistered = $False
                }
                elseif ($vasaProvider.status -eq "online") {
                    $vasaRegistered = $True
                }
                elseif ($vasaProvider.status -eq "offline") {
                    # VASA provider can be offline if:
                    # - Array is not accessible (in this case, we will get an error when trying to connect)
                    # - Certificate is expired
                    # - Certificate is invalid (for example a new certificate uploaded to the Array)
                    Write-Warning "VASA provider $provider_name status is $($vasaProvider.status)"
                    # No need to check for expiry time as the cert might not be expired but invalid. Remove the certificate and re-register the VASA provider

                    Update-VASAProviderCertificates -VASAProvider $vasaProvider -ControllerName $controller_name -mgmtIP $mgmtIP -FlashArrayCredential $FlashArrayCredential `
                            -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup
                    $vasaRegistered = $False
                }
                else {
                    throw  "Could not update VASA provider. VASA provider $provider_name status is $($vasaProvider.status)."
                }
            }
            else {
                Write-Host "Creating VASA Provider for CBS '$ArrayName' controller '$controller_name'..."
                try {
                    $param = @{
                        ProviderName = $provider_name;
                        ProviderCredential = $FlashArrayCredential;
                        ProviderUrl = "https://$($mgmtIP.Eth.Address):8084";
                    }

                    Invoke-RunScript -RunCommandName  "New-VvolVasaProvider" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters $param `
                        -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup

                    $vasaRegistered = $True
                    Write-Host "VASA Provider for $provider_name created successfully."
                }
                catch {
                    if ($retry_count -lt $MaxRetryCount) {
                        Write-Warning "Failed to register VASA provider $provider_name with error $_ Retrying ..."
                        $vasaRegistered = $false
                        Start-Sleep -Seconds 10
                    }
                    else {
                        throw "Failed to register VASA provider $provider_name with error $_"
                    }
                }
            }
            $retry_count = $retry_count + 1
        }
        while ($vasaRegistered -ne $true -and $retry_count -lt $MaxRetryCount)
        if (-not $vasaRegistered) {
            throw "Failed to register VASA provider $provider_name after $retry_count tries."
        } else {
            $registeredController += $controller_name
        }
    }

    $param = @{}
    Invoke-RunScript -RunCommandName  "Update-VMHostCertificate" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters $param `
            -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup

}

function New-VvolStoragePolicy {
    Param(
        [Parameter(Mandatory = $true)]
        [String]$PolicyName,

        [Parameter(Mandatory = $false)]
        [String]$PolicyDescription,

        [Parameter(Mandatory = $false)]
        [string[]]$SourcePureCloudBlockStores,

        [Parameter(Mandatory = $false)]
        [Nullable[boolean]]$ReplicationEnabled,

        [Parameter(Mandatory = $false)]
        [Nullable[Timespan]]$ReplicationInterval,

        [Parameter(Mandatory = $false)]
        [Nullable[Timespan]]$ReplicationRetentionInterval,

        [Parameter(Mandatory = $false)]
        [Nullable[boolean]]$ReplicationRuleLocalSnapshotEnabled,

        [Parameter(Mandatory = $false)]
        [Nullable[Timespan]]$ReplicationRuleLocalSnapshotInterval,

        [Parameter(Mandatory = $false)]
        [Nullable[Timespan]]$ReplicationRuleLocalSnapshotRetentionInterval,

        [Parameter(Mandatory = $false)]
        [int]$ReplicationConcurrency,

        [Parameter(Mandatory=$false)]
        [Nullable[boolean]]$ReplicationRansomwareProtection,

        [Parameter(Mandatory = $false)]
        [string[]]$TargetPureCloudBlockStores,

        [Parameter(Mandatory = $false)]
        [String]$ConsistencyGroupName,

        [Parameter(Mandatory = $false)]
        [int]$PerVirtualDiskIOPSLimit,

        [Parameter(Mandatory = $false)]
        [String]$PerVirtualDiskIOPSLimitUnit,

        [Parameter(Mandatory = $false)]
        [int]$PerVirtualDiskBandwidthLimit,

        [Parameter(Mandatory = $false)]
        [String]$PerVirtualDiskBandwidthLimitUnit,

        [Parameter(Mandatory = $false)]
        [String]$VolumeTaggingKey,

        [Parameter(Mandatory = $false)]
        [String]$VolumeTaggingValue,

        [Parameter(Mandatory = $false)]
        [Nullable[boolean]]$VolumeTaggingCopyable,

        [Parameter(Mandatory = $false)]
        [Nullable[Timespan]]$PlacementRuleLocalSnapshotInterval,

        [Parameter(Mandatory = $false)]
        [Nullable[Timespan]]$PlacementRuleLocalSnapshotRetentionInterval,

        [Parameter(Mandatory = $false)]
        [int]$PlacementRuleLocalSnapshotRetainAdditionalSnapshots,

        [Parameter(Mandatory = $false)]
        [int]$PlacementRuleLocalSnapshotRetainAdditionalDays,

        [Parameter(Mandatory=$false)]
        [string]$OffloadType,

        [Parameter(Mandatory=$false)]
        [string[]]$OffloadTargetNames,

        [Parameter(Mandatory=$false)]
        [Nullable[Timespan]]$OffloadReplicationInterval,

        [Parameter(Mandatory=$false)]
        [string]$OffloadOffloadReplicationTime,

        [Parameter(Mandatory=$false)]
        [Nullable[Timespan]]$OffloadRetentionInterval,

        [Parameter(Mandatory=$false)]
        [int]$OffloadRetainAdditionalSnapshots,

        [Parameter(Mandatory=$false)]
        [int]$OffloadRetainAdditionalDays,

        [Parameter(Mandatory=$false)]
        [string]$OffloadReplicationBlackoutFrom,

        [Parameter(Mandatory=$false)]
        [string]$OffloadReplicationBlackoutTo,

        [Parameter(Mandatory=$false)]
        [Nullable[boolean]]$DefaultProtectionOptout,

        [Parameter(Mandatory = $false)]
        [String]$AVSCloudName,

        [Parameter(Mandatory = $false)]
        [String]$AVSResourceGroup,

        [Parameter(Mandatory = $true)]
        [String]$vCenterServer
    )
    $StroagePolicy = Get-SpbmStoragePolicy -Server $vCenterServer -Name $PolicyName -ErrorAction Ignore
    if ($StroagePolicy) {
        throw "A storage policy with the name of $PolicyName already exists`n `n Please choose a unique name."
    }

    $PureCapability = Get-SpbmCapability -Server $vCenterServer | Where-Object { $_.name -like "com.purestorage*" }
    if (-not $PureCapability) {
        throw "This vCenter does not have any Pure VASA providers registered and therefore no policy can be created. ..."
    }

    Write-Host "Creating policy $PolicyName..."
    $policyConfig = [FlashArrayvVolPolicyConfig]::new($policyName,
                                                    $policyDescription,
                                                    $SourcePureCloudBlockStores,
                                                    $ReplicationEnabled,
                                                    $replicationInterval,
                                                    $replicationRetentionInterval,
                                                    $replicationConcurrency,
                                                    $consistencyGroupName,
                                                    $TargetPureCloudBlockStores,
                                                    $ReplicationRuleLocalSnapshotEnabled,
                                                    $ReplicationRuleLocalSnapshotInterval,
                                                    $ReplicationRuleLocalSnapshotRetentionInterval,
                                                    $ReplicationRansomwareProtection,
                                                    $PerVirtualDiskIOPSLimit,
                                                    $PerVirtualDiskIOPSLimitUnit,
                                                    $PerVirtualDiskBandwidthLimit,
                                                    $PerVirtualDiskBandwidthLimitUnit,
                                                    $VolumeTaggingKey,
                                                    $VolumeTaggingValue,
                                                    $VolumeTaggingCopyable,
                                                    $PlacementRuleLocalSnapshotInterval,
                                                    $PlacementRuleLocalSnapshotRetentionInterval,
                                                    $PlacementRuleLocalSnapshotRetainAdditionalSnapshots,
                                                    $PlacementRuleLocalSnapshotRetainAdditionalDays,
                                                    $OffloadType,
                                                    $OffloadTargetNames,
                                                    $OffloadReplicationInterval,
                                                    $OffloadOffloadReplicationTime,
                                                    $OffloadRetentionInterval,
                                                    $OffloadRetainAdditionalSnapshots,
                                                    $OffloadRetainAdditionalDays,
                                                    $OffloadReplicationBlackoutFrom,
                                                    $OffloadReplicationBlackoutTo,
                                                    $DefaultProtectionOptout
                                                    )
    $PolicyConfigJsonString = $policyConfig.ToJsonString()
    Write-Debug "PolicyConfigJsonString: $PolicyConfigJsonString"
    Invoke-RunScript -RunCommandName "New-VvolStoragePolicy" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters @{PolicyConfigJsonString = $PolicyConfigJsonString } -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup
}

function Remove-VvolStoragePolicy {
    Param(
        [Parameter(mandatory = $true)]
        [string]$PolicyName,

        [Parameter(Mandatory = $false)]
        [String]$AVSCloudName,

        [Parameter(Mandatory = $false)]
        [String]$AVSResourceGroup,

        [Parameter(Mandatory = $true)]
        [String]$vCenterServer
    )
    $StroagePolicy = Get-SpbmStoragePolicy -Server $vCenterServer | Where-Object { $_.Name -eq $PolicyName }

    if (-not $StroagePolicy) {
        throw "No existing policy is found with policy name $PolicyName."
    }

    $PureCapability = $StroagePolicy.AnyOfRuleSets.AllOfRules.Capability | where-object { $_.Name -like "com.purestorage*" }
    if ($PureCapability.Count -eq 0) {
        throw "The policy $PolicyName is not managed by Pure Storage."
    }
    Invoke-RunScript -RunCommandName "Remove-VvolStoragePolicy" -RunCommandModule "Microsoft.AVS.VVOLS" -Parameters @{ PolicyName = $PolicyName } -AVSCloudName $AVSCloudName -AVSResourceGroup $AVSResourceGroup
}

#Custom Classes
Class FlashArrayvVolPolicyConfig {
    [String] $version = "1.0.0"
    [String] $vendor = "Pure Storage"
    [System.Boolean]$flasharray = $true
    [String]$policyName = ""
    [String]$policyDescription = "Pure Storage Cloud Block Store vVol storage policy default description"
    $SpbmRules = @{
    }


    FlashArrayvVolPolicyConfig ([String]$policyName,
                                [String]$policyDescription,
                                [String[]]$sourceFlashArrays,
                                [Nullable[boolean]]$replicationEnabled,
                                [Nullable[System.TimeSpan]]$replicationInterval,
                                [Nullable[System.TimeSpan]]$ReplicationRetentionInterval,
                                [int]$replicationConcurrency,
                                [String]$consistencyGroupName,
                                [String[]]$targetFlashArrays,
                                [Nullable[boolean]]$ReplicationRuleLocalSnapshotEnabled,
                                [Nullable[System.TimeSpan]]$ReplicationRuleLocalSnapshotInterval,
                                [Nullable[System.TimeSpan]]$ReplicationRuleLocalSnapshotRetentionInterval,
                                [Nullable[boolean]]$ReplicationRansomwareProtection,
                                [int]$PerVirtualDiskIOPSLimit,
                                [String]$PerVirtualDiskIOPSLimitUnit,
                                [int]$PerVirtualDiskBandwidthLimit,
                                [String]$PerVirtualDiskBandwidthLimitUnit,
                                [String]$VolumeTaggingKey,
                                [String]$VolumeTaggingValue,
                                [Nullable[boolean]]$VolumeTaggingCopyable,
                                [Nullable[System.TimeSpan]]$PlacementRuleLocalSnapshotInterval,
                                [Nullable[System.TimeSpan]]$PlacementRuleLocalSnapshotRetentionInterval,
                                [int]$PlacementRuleLocalSnapshotRetainAdditionalSnapshots,
                                [int]$PlacementRuleLocalSnapshotRetainAdditionalDays,
                                [string]$OffloadType,
                                [string[]]$OffloadTargetNames,
                                [Nullable[Timespan]]$OffloadReplicationInterval,
                                [string]$OffloadOffloadReplicationTime,
                                [Nullable[Timespan]]$OffloadRetentionInterval,
                                [int]$OffloadRetainAdditionalSnapshots,
                                [int]$OffloadRetainAdditionalDays,
                                [string]$OffloadReplicationBlackoutFrom,
                                [string]$OffloadReplicationBlackoutTo,
                                [Nullable[boolean]]$DefaultProtectionOptout)
    {
        $this.policyName = $policyName
        $this.policyDescription = $policyDescription

        if ($replicationEnabled -eq $false) {
            if ([System.TimeSpan]0 -ne $replicationInterval -and $null -ne $replicationInterval) {
                throw "Do not specify a replication interval if replicationEnabled is set to false."
            }
            if ([System.TimeSpan]0 -ne $ReplicationRetentionInterval -and $null -ne $ReplicationRetentionInterval) {
                throw "Do not specify a replication retention if replicationEnabled is set to false."
            }
        }
        if ($ReplicationRuleLocalSnapshotEnabled -eq $false) {
            if ([System.TimeSpan]0 -ne $ReplicationRuleLocalSnapshotInterval -and $null -ne $ReplicationRuleLocalSnapshotInterval) {
                throw "Do not specify a snapshot interval if ReplicationRuleLocalSnapshotEnabled is set to false."
            }
            if ([System.TimeSpan]0 -ne $ReplicationRuleLocalSnapshotRetentionInterval -and $null -ne $ReplicationRuleLocalSnapshotRetentionInterval) {
                throw "Do not specify a snapshot retention if ReplicationRuleLocalSnapshotEnabled is set to false."
            }
        }

        if ($null -eq $OffloadRetentionInterval) {
            if ($OffloadRetainAdditionalSnapshots -gt 0 -or $OffloadRetainAdditionalDays -gt 0) {
                throw "Do not specify additional retention options if Offload retention interval is not set."
            }
        }

        if ($sourceFlashArrays.count -ne 0) {
            $this.SpbmRules["com.purestorage.storage.policy.FlashArrayGroup"] = $sourceFlashArrays
        }
        $this.SpbmRules["com.purestorage.storage.policy.PureFlashArray"] = $true

        # Replication
        if ($null -ne $ReplicationRuleLocalSnapshotEnabled) {
            $this.SpbmRules["com.purestorage.storage.replication.LocalSnapshotPolicyCapable"] = $ReplicationRuleLocalSnapshotEnabled
        }
        if ($null -ne $ReplicationRuleLocalSnapshotInterval) {
            $this.SpbmRules["com.purestorage.storage.replication.LocalSnapshotInterval"] = $ReplicationRuleLocalSnapshotInterval.ToString()
        }
        if ($null -ne $ReplicationRuleLocalSnapshotRetentionInterval) {
            $this.SpbmRules["com.purestorage.storage.replication.LocalSnapshotRetention"] = $ReplicationRuleLocalSnapshotRetentionInterval.ToString()
        }
        if ($targetFlashArrays.count -ne 0) {
            $this.SpbmRules["com.purestorage.storage.replication.ReplicationTarget"] = $targetFlashArrays
        }
        if ($null -ne $replicationEnabled) {
            $this.SpbmRules["com.purestorage.storage.replication.RemoteReplicationCapable"] = $replicationEnabled
        }
        if ($null -ne $replicationInterval) {
            $this.SpbmRules["com.purestorage.storage.replication.RemoteReplicationInterval"] = $replicationInterval.ToString()
        }
        if ($null -ne $replicationRetentionInterval) {
            $this.SpbmRules["com.purestorage.storage.replication.RemoteReplicationRetention"] = $replicationRetentionInterval.ToString()
        }
        if (!([string]::IsNullOrWhiteSpace($consistencyGroupName))) {
            $this.SpbmRules["com.purestorage.storage.replication.ReplicationConsistencyGroup"] = $consistencyGroupName
        }
        if (($null -ne $replicationConcurrency) -and ($replicationConcurrency -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.replication.replicationConcurrency"] = $replicationConcurrency
        }
        if ($null -ne $ReplicationRansomwareProtection) {
            $this.SpbmRules["com.purestorage.storage.replication.RansomwareProtection"] = $ReplicationRansomwareProtection
        }

        # IOPS Limit
        if (($null -ne $PerVirtualDiskIOPSLimit) -and ($PerVirtualDiskIOPSLimit -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.policy.IopsLimit.IopsLimit"] = $PerVirtualDiskIOPSLimit
        }
        if (!([string]::IsNullOrWhiteSpace($PerVirtualDiskIOPSLimitUnit))) {
            $this.SpbmRules["com.purestorage.storage.policy.IopsLimit.IopsLimitUnit"] = $PerVirtualDiskIOPSLimitUnit
        }

        # Bandwidth Limit
        if (($null -ne $PerVirtualDiskBandwidthLimit) -and ($PerVirtualDiskBandwidthLimit -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.policy.BandwidthLimit.BandwidthLimit"] = $PerVirtualDiskBandwidthLimit
        }
        if (!([string]::IsNullOrWhiteSpace($PerVirtualDiskBandwidthLimitUnit))) {
            $this.SpbmRules["com.purestorage.storage.policy.BandwidthLimit.BandwidthLimitUnit"] = $PerVirtualDiskBandwidthLimitUnit
        }

        # Volume Tag
        if (!([string]::IsNullOrWhiteSpace($VolumeTaggingKey))) {
            $this.SpbmRules["com.purestorage.storage.policy.VolumeTagging.TagKey"] = $VolumeTaggingKey
        }
        if (!([string]::IsNullOrWhiteSpace($VolumeTaggingValue))) {
            $this.SpbmRules["com.purestorage.storage.policy.VolumeTagging.TagValue"] = $VolumeTaggingValue
        }
        if ($null -ne $VolumeTaggingCopyable) {
            $this.SpbmRules["com.purestorage.storage.policy.VolumeTagging.TagCopyable"] = $VolumeTaggingCopyable
        }

        # Local snapshot
        if ($null -ne $PlacementRuleLocalSnapshotInterval) {
            $this.SpbmRules["com.purestorage.storage.policy.LocalSnapshotProtection.LocalSnapshotInterval"] = $PlacementRuleLocalSnapshotInterval.ToString()
        }
        if ($null -ne $PlacementRuleLocalSnapshotRetentionInterval) {
            $this.SpbmRules["com.purestorage.storage.policy.LocalSnapshotProtection.LocalSnapshotRetention"] = $PlacementRuleLocalSnapshotRetentionInterval.ToString()
        }
        if (($null -ne $PlacementRuleLocalSnapshotRetainAdditionalSnapshots) -and ($PlacementRuleLocalSnapshotRetainAdditionalSnapshots -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.policy.LocalSnapshotProtection.LocalSnapshotThenRetain"] = $PlacementRuleLocalSnapshotRetainAdditionalSnapshots
        }
        if (($null -ne $PlacementRuleLocalSnapshotRetainAdditionalDays) -and ($PlacementRuleLocalSnapshotRetainAdditionalDays -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.policy.LocalSnapshotProtection.LocalSnapshotForAdditionalDays"] = $PlacementRuleLocalSnapshotRetainAdditionalDays
        }

        # Offload
        if (!([string]::IsNullOrWhiteSpace($OffloadType))) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadTargetProtocol"] = $OffloadType
        }
        if ($null -ne $OffloadTargetNames) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadTargetNames"] = $OffloadTargetNames
        }
        if ($null -ne $OffloadReplicationInterval) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadReplicationInterval"] = $OffloadReplicationInterval.ToString()
        }
        if (!([string]::IsNullOrWhiteSpace($OffloadOffloadReplicationTime))) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadReplicationTime"] = $OffloadOffloadReplicationTime
        }
        if ($null -ne $OffloadRetentionInterval) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadRetentionInterval"] = $OffloadRetentionInterval.ToString()
        }
        if (($null -ne $OffloadRetainAdditionalSnapshots) -and ($OffloadRetainAdditionalSnapshots -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadRetentionExtraSnapshotsPerDay"] = $OffloadRetainAdditionalSnapshots
        }
        if (($null -ne $OffloadRetainAdditionalDays) -and ($OffloadRetainAdditionalDays -ne 0)) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadRetentionExtraSnapshotsDays"] = $OffloadRetainAdditionalDays
        }
        if (!([string]::IsNullOrWhiteSpace($OffloadReplicationBlackoutFrom))) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadReplicationBlackoutFrom"] = $OffloadReplicationBlackoutFrom
        }
        if (!([string]::IsNullOrWhiteSpace($OffloadReplicationBlackoutTo))) {
            $this.SpbmRules["com.purestorage.storage.policy.Offload.OffloadReplicationBlackoutTo"] = $OffloadReplicationBlackoutTo
        }

        # Default Protection
        if ($DefaultProtectionOptout) {
            $this.SpbmRules["com.purestorage.storage.policy.DefaultProtection"] = "Opt out"
        }
    }

    [string] ToJsonString() {
        return $this | ConvertTo-Json
    }
}



# SIG # Begin signature block
# MIIn+AYJKoZIhvcNAQcCoIIn6TCCJ+UCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB
# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR
# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUBv6PSz5PJiNznqHT3S1/qcTa
# KsOggiEoMIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAYWjANBgkqhkiG9w0B
# AQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD
# VQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVk
# IElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5MjM1OTU5WjBiMQsw
# CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
# ZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQw
# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz
# 7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS
# 5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7
# bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfI
# SKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jH
# trHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14
# Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2
# h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt
# 6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPR
# iQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ER
# ElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4K
# Jpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0TAQH/BAUwAwEB/zAd
# BgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0jBBgwFoAUReuir/SS
# y4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsGAQUFBwEBBG0wazAk
# BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAC
# hjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS
# b290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0
# LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYDVR0gBAowCDAGBgRV
# HSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3QbPbYW1/e/Vwe9mqyh
# hyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5+KH38nLeJLxSA8hO
# 0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+nBgMTdydE1Od/6Fmo
# 8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc/RzY9HdaXFSMb++h
# UD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVrzyerbHbObyMt9H5x
# aiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o4rmUMIIGrjCCBJag
# AwIBAgIQBzY3tyRUfNhHrP0oZipeWzANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQG
# EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
# cnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwHhcNMjIw
# MzIzMDAwMDAwWhcNMzcwMzIyMjM1OTU5WjBjMQswCQYDVQQGEwJVUzEXMBUGA1UE
# ChMORGlnaUNlcnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQg
# UlNBNDA5NiBTSEEyNTYgVGltZVN0YW1waW5nIENBMIICIjANBgkqhkiG9w0BAQEF
# AAOCAg8AMIICCgKCAgEAxoY1BkmzwT1ySVFVxyUDxPKRN6mXUaHW0oPRnkyibaCw
# zIP5WvYRoUQVQl+kiPNo+n3znIkLf50fng8zH1ATCyZzlm34V6gCff1DtITaEfFz
# sbPuK4CEiiIY3+vaPcQXf6sZKz5C3GeO6lE98NZW1OcoLevTsbV15x8GZY2UKdPZ
# 7Gnf2ZCHRgB720RBidx8ald68Dd5n12sy+iEZLRS8nZH92GDGd1ftFQLIWhuNyG7
# QKxfst5Kfc71ORJn7w6lY2zkpsUdzTYNXNXmG6jBZHRAp8ByxbpOH7G1WE15/teP
# c5OsLDnipUjW8LAxE6lXKZYnLvWHpo9OdhVVJnCYJn+gGkcgQ+NDY4B7dW4nJZCY
# OjgRs/b2nuY7W+yB3iIU2YIqx5K/oN7jPqJz+ucfWmyU8lKVEStYdEAoq3NDzt9K
# oRxrOMUp88qqlnNCaJ+2RrOdOqPVA+C/8KI8ykLcGEh/FDTP0kyr75s9/g64ZCr6
# dSgkQe1CvwWcZklSUPRR8zZJTYsg0ixXNXkrqPNFYLwjjVj33GHek/45wPmyMKVM
# 1+mYSlg+0wOI/rOP015LdhJRk8mMDDtbiiKowSYI+RQQEgN9XyO7ZONj4KbhPvbC
# dLI/Hgl27KtdRnXiYKNYCQEoAA6EVO7O6V3IXjASvUaetdN2udIOa5kM0jO0zbEC
# AwEAAaOCAV0wggFZMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLoW2W1N
# hS9zKXaaL3WMaiCPnshvMB8GA1UdIwQYMBaAFOzX44LScV1kTN8uZz/nupiuHA9P
# MA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDCDB3BggrBgEFBQcB
# AQRrMGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggr
# BgEFBQcwAoY1aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1
# c3RlZFJvb3RHNC5jcnQwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybDMuZGln
# aWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZFJvb3RHNC5jcmwwIAYDVR0gBBkwFzAI
# BgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEBCwUAA4ICAQB9WY7Ak7Zv
# mKlEIgF+ZtbYIULhsBguEE0TzzBTzr8Y+8dQXeJLKftwig2qKWn8acHPHQfpPmDI
# 2AvlXFvXbYf6hCAlNDFnzbYSlm/EUExiHQwIgqgWvalWzxVzjQEiJc6VaT9Hd/ty
# dBTX/6tPiix6q4XNQ1/tYLaqT5Fmniye4Iqs5f2MvGQmh2ySvZ180HAKfO+ovHVP
# ulr3qRCyXen/KFSJ8NWKcXZl2szwcqMj+sAngkSumScbqyQeJsG33irr9p6xeZmB
# o1aGqwpFyd/EjaDnmPv7pp1yr8THwcFqcdnGE4AJxLafzYeHJLtPo0m5d2aR8XKc
# 6UsCUqc3fpNTrDsdCEkPlM05et3/JWOZJyw9P2un8WbDQc1PtkCbISFA0LcTJM3c
# HXg65J6t5TRxktcma+Q4c6umAU+9Pzt4rUyt+8SVe+0KXzM5h0F4ejjpnOHdI/0d
# KNPH+ejxmF/7K9h+8kaddSweJywm228Vex4Ziza4k9Tm8heZWcpw8De/mADfIBZP
# J/tgZxahZrrdVcA6KYawmKAr7ZVBtzrVFZgxtGIJDwq9gdkT/r+k0fNX2bwE+oLe
# Mt8EifAAzV3C+dAjfwAL5HYCJtnwZXZCpimHCUcr5n8apIUP/JiW9lVUKx+A+sDy
# Divl1vupL0QVSucTDh3bNzgaoSv27dZ8/DCCBrAwggSYoAMCAQICEAitQLJg0pxM
# n17Nqb2TrtkwDQYJKoZIhvcNAQEMBQAwYjELMAkGA1UEBhMCVVMxFTATBgNVBAoT
# DERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UE
# AxMYRGlnaUNlcnQgVHJ1c3RlZCBSb290IEc0MB4XDTIxMDQyOTAwMDAwMFoXDTM2
# MDQyODIzNTk1OVowaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJ
# bmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBS
# U0E0MDk2IFNIQTM4NCAyMDIxIENBMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
# AgoCggIBANW0L0LQKK14t13VOVkbsYhC9TOM6z2Bl3DFu8SFJjCfpI5o2Fz16zQk
# B+FLT9N4Q/QX1x7a+dLVZxpSTw6hV/yImcGRzIEDPk1wJGSzjeIIfTR9TIBXEmtD
# mpnyxTsf8u/LR1oTpkyzASAl8xDTi7L7CPCK4J0JwGWn+piASTWHPVEZ6JAheEUu
# oZ8s4RjCGszF7pNJcEIyj/vG6hzzZWiRok1MghFIUmjeEL0UV13oGBNlxX+yT4Us
# SKRWhDXW+S6cqgAV0Tf+GgaUwnzI6hsy5srC9KejAw50pa85tqtgEuPo1rn3MeHc
# reQYoNjBI0dHs6EPbqOrbZgGgxu3amct0r1EGpIQgY+wOwnXx5syWsL/amBUi0nB
# k+3htFzgb+sm+YzVsvk4EObqzpH1vtP7b5NhNFy8k0UogzYqZihfsHPOiyYlBrKD
# 1Fz2FRlM7WLgXjPy6OjsCqewAyuRsjZ5vvetCB51pmXMu+NIUPN3kRr+21CiRshh
# WJj1fAIWPIMorTmG7NS3DVPQ+EfmdTCN7DCTdhSmW0tddGFNPxKRdt6/WMtyEClB
# 8NXFbSZ2aBFBE1ia3CYrAfSJTVnbeM+BSj5AR1/JgVBzhRAjIVlgimRUwcwhGug4
# GXxmHM14OEUwmU//Y09Mu6oNCFNBfFg9R7P6tuyMMgkCzGw8DFYRAgMBAAGjggFZ
# MIIBVTASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBRoN+Drtjv4XxGG+/5h
# ewiIZfROQjAfBgNVHSMEGDAWgBTs1+OC0nFdZEzfLmc/57qYrhwPTzAOBgNVHQ8B
# Af8EBAMCAYYwEwYDVR0lBAwwCgYIKwYBBQUHAwMwdwYIKwYBBQUHAQEEazBpMCQG
# CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQQYIKwYBBQUHMAKG
# NWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRSb290
# RzQuY3J0MEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
# bS9EaWdpQ2VydFRydXN0ZWRSb290RzQuY3JsMBwGA1UdIAQVMBMwBwYFZ4EMAQMw
# CAYGZ4EMAQQBMA0GCSqGSIb3DQEBDAUAA4ICAQA6I0Q9jQh27o+8OpnTVuACGqX4
# SDTzLLbmdGb3lHKxAMqvbDAnExKekESfS/2eo3wm1Te8Ol1IbZXVP0n0J7sWgUVQ
# /Zy9toXgdn43ccsi91qqkM/1k2rj6yDR1VB5iJqKisG2vaFIGH7c2IAaERkYzWGZ
# gVb2yeN258TkG19D+D6U/3Y5PZ7Umc9K3SjrXyahlVhI1Rr+1yc//ZDRdobdHLBg
# XPMNqO7giaG9OeE4Ttpuuzad++UhU1rDyulq8aI+20O4M8hPOBSSmfXdzlRt2V0C
# FB9AM3wD4pWywiF1c1LLRtjENByipUuNzW92NyyFPxrOJukYvpAHsEN/lYgggnDw
# zMrv/Sk1XB+JOFX3N4qLCaHLC+kxGv8uGVw5ceG+nKcKBtYmZ7eS5k5f3nqsSc8u
# pHSSrds8pJyGH+PBVhsrI/+PteqIe3Br5qC6/To/RabE6BaRUotBwEiES5ZNq0RA
# 443wFSjO7fEYVgcqLxDEDAhkPDOPriiMPMuPiAsNvzv0zh57ju+168u38HcT5uco
# P6wSrqUvImxB+YJcFWbMbA7KxYbD9iYzDAdLoNMHAmpqQDBISzSoUSC7rRuFCOJZ
# DW3KBVAr6kocnqX9oKcfBnTn8tZSkP2vhUgh+Vc7tJwD7YZF9LRhbr9o4iZghurI
# r6n+lB3nYxs6hlZ4TjCCBsIwggSqoAMCAQICEAVEr/OUnQg5pr/bP1/lYRYwDQYJ
# KoZIhvcNAQELBQAwYzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJ
# bmMuMTswOQYDVQQDEzJEaWdpQ2VydCBUcnVzdGVkIEc0IFJTQTQwOTYgU0hBMjU2
# IFRpbWVTdGFtcGluZyBDQTAeFw0yMzA3MTQwMDAwMDBaFw0zNDEwMTMyMzU5NTla
# MEgxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjEgMB4GA1UE
# AxMXRGlnaUNlcnQgVGltZXN0YW1wIDIwMjMwggIiMA0GCSqGSIb3DQEBAQUAA4IC
# DwAwggIKAoICAQCjU0WHHYOOW6w+VLMj4M+f1+XS512hDgncL0ijl3o7Kpxn3GIV
# WMGpkxGnzaqyat0QKYoeYmNp01icNXG/OpfrlFCPHCDqx5o7L5Zm42nnaf5bw9Yr
# IBzBl5S0pVCB8s/LB6YwaMqDQtr8fwkklKSCGtpqutg7yl3eGRiF+0XqDWFsnf5x
# XsQGmjzwxS55DxtmUuPI1j5f2kPThPXQx/ZILV5FdZZ1/t0QoRuDwbjmUpW1R9d4
# KTlr4HhZl+NEK0rVlc7vCBfqgmRN/yPjyobutKQhZHDr1eWg2mOzLukF7qr2JPUd
# vJscsrdf3/Dudn0xmWVHVZ1KJC+sK5e+n+T9e3M+Mu5SNPvUu+vUoCw0m+PebmQZ
# BzcBkQ8ctVHNqkxmg4hoYru8QRt4GW3k2Q/gWEH72LEs4VGvtK0VBhTqYggT02ke
# fGRNnQ/fztFejKqrUBXJs8q818Q7aESjpTtC/XN97t0K/3k0EH6mXApYTAA+hWl1
# x4Nk1nXNjxJ2VqUk+tfEayG66B80mC866msBsPf7Kobse1I4qZgJoXGybHGvPrhv
# ltXhEBP+YUcKjP7wtsfVx95sJPC/QoLKoHE9nJKTBLRpcCcNT7e1NtHJXwikcKPs
# CvERLmTgyyIryvEoEyFJUX4GZtM7vvrrkTjYUQfKlLfiUKHzOtOKg8tAewIDAQAB
# o4IBizCCAYcwDgYDVR0PAQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/
# BAwwCgYIKwYBBQUHAwgwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcB
# MB8GA1UdIwQYMBaAFLoW2W1NhS9zKXaaL3WMaiCPnshvMB0GA1UdDgQWBBSltu8T
# 5+/N0GSh1VapZTGj3tXjSTBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsMy5k
# aWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRSU0E0MDk2U0hBMjU2VGltZVN0
# YW1waW5nQ0EuY3JsMIGQBggrBgEFBQcBAQSBgzCBgDAkBggrBgEFBQcwAYYYaHR0
# cDovL29jc3AuZGlnaWNlcnQuY29tMFgGCCsGAQUFBzAChkxodHRwOi8vY2FjZXJ0
# cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRSU0E0MDk2U0hBMjU2VGlt
# ZVN0YW1waW5nQ0EuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCBGtbeoKm1mBe8cI1P
# ijxonNgl/8ss5M3qXSKS7IwiAqm4z4Co2efjxe0mgopxLxjdTrbebNfhYJwr7e09
# SI64a7p8Xb3CYTdoSXej65CqEtcnhfOOHpLawkA4n13IoC4leCWdKgV6hCmYtld5
# j9smViuw86e9NwzYmHZPVrlSwradOKmB521BXIxp0bkrxMZ7z5z6eOKTGnaiaXXT
# UOREEr4gDZ6pRND45Ul3CFohxbTPmJUaVLq5vMFpGbrPFvKDNzRusEEm3d5al08z
# jdSNd311RaGlWCZqA0Xe2VC1UIyvVr1MxeFGxSjTredDAHDezJieGYkD6tSRN+9N
# UvPJYCHEVkft2hFLjDLDiOZY4rbbPvlfsELWj+MXkdGqwFXjhr+sJyxB0JozSqg2
# 1Llyln6XeThIX8rC3D0y33XWNmdaifj2p8flTzU8AL2+nCpseQHc2kTmOt44Owde
# OVj0fHMxVaCAEcsUDH6uvP6k63llqmjWIso765qCNVcoFstp8jKastLYOrixRoZr
# uhf9xHdsFWyuq69zOuhJRrfVf8y2OMDY7Bz1tqG4QyzfTkx9HmhwwHcK1ALgXGC7
# KP845VJa1qwXIiNO9OzTF/tQa/8Hdx9xl0RBybhG02wyfFgvZ0dl5Rtztpn5aywG
# Ru9BHvDwX+Db2a2QgESvgBBBijCCB2cwggVPoAMCAQICEATd+82EVAN2YngfhA+f
# z/UwDQYJKoZIhvcNAQELBQAwaTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lD
# ZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IENvZGUgU2ln
# bmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENBMTAeFw0yMzEwMDQwMDAwMDBaFw0y
# NjExMTUyMzU5NTlaMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MREwDwYDVQQHEwhCZWxsZXZ1ZTEbMBkGA1UEChMSUHVyZSBTdG9yYWdlLCBJbmMu
# MRswGQYDVQQDExJQdXJlIFN0b3JhZ2UsIEluYy4wggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQCdhXqOLFS3HR5KD2RtAOzGdwKU0mMGGHfU7qUo1YFvDCN8
# vF/X8LDhouGtsZPdIfd298orsXHfXYElTgBo91gba7SqKBWi9xdXTqMR5vpt41K/
# a554AgiQp02nfYwuspZoAGnt//mDJ6ErP1jUFiWuwHsYsxk0gFEayp5xIKzmj3q4
# 9g+AenKpktbDn6HPpXZPdvg+g+GR9lPpiJo7Z40SIqzaacJsVcl5MhPfbFdLeP1s
# n0MBW3BiYLyz4CEUq8IA2vJ2557N0uB0UzWERE31brL0mBn5gB1g8Zij9VsI9J5+
# Q+THKYIgwknlnXFiSwQhQbJ3Cn7IVotei1M/D011XjUR66kNHm02VVDsbxX92xLf
# qIX7BZ0e6shMsOFVakkdM00nXhfRscDkRqEQ+IwgC3vcyJgp/QRX0SfWaaD5G0fi
# ECMBZtmq5hijTJ18MAW2KaFePW0PIn9IRnoXS3tx9coXVJMTFwnLYdIukelF4jIW
# 779IP5lQH7IBNHS01BgysjWVaQhPYxWZYtsxyRUX3gVRjFChhOtBNCAy2S+YYjUS
# TOM7CdUNTtCARX/HgcRYxxU7UTOYXPYyabdQu3mFF8yD5YNkarlgc4TQ+H1PWnIU
# l7pq3P0ZSaE5Est24ApVi6wlZC/Q3jQRKPziRg8x7Zv1TZX8TfxPDmE0Nsd+BwID
# AQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHQYD
# VR0OBBYEFCvH/lBQxrVtiuuihv+e6+2VgDPXMD4GA1UdIAQ3MDUwMwYGZ4EMAQQB
# MCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNV
# HQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwgbUGA1UdHwSBrTCBqjBT
# oFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0
# Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwU6BRoE+GTWh0dHA6
# Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5n
# UlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMIGUBggrBgEFBQcBAQSBhzCBhDAkBggr
# BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFwGCCsGAQUFBzAChlBo
# dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2Rl
# U2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNydDAJBgNVHRMEAjAAMA0GCSqG
# SIb3DQEBCwUAA4ICAQCrjkZxw1B2w/pYu4siB36x5J9Xate13IDt57bxZvc7OGgz
# limeUq1/HObzW4Vej9tESBpT6a5FBuVSXQXvYQntQczEFBBksRXyad3tx5/xElHA
# LaE6BCZUtPKu3/CSrgsvVi7OgWNybOFWF2Xk9K1djImG55J7jOY+8ZKegUSlHPjB
# 8HF9G4VdS85L2SuFaRzOMTEIW+h0Ihkp6Js1rbe0YLZu/ad6VWFKoX++FDg3cbM8
# FLf482p+XCmuX/qZuFmySYDQQ4jvNiecEiyZ4m6HUryx9Fagc0NBADiOJc1R2p2I
# QbBasyndhn8KWlGSudJ+uCfuzD6ukGVe4kOpYlqkzVeOscetaY0/5v+896yP4FA8
# NS68I2eMuKbis2ouOIrAVkNPdymBjaEW1U6q979upeEG22UjjrRkq5qSdO+nk2tK
# NL1ZIc92bqIs132yuwVZ6A7Dvez03VSitT2UVBMz0BKNy1EnZ4hjqBrApU+Bbcwc
# 7nPV9hKKbEFKCcCNLpkAP8SCVX6r7qMyqYhAl+XKSfCkMpxRD2LykRup5mz54cQP
# RPoy86iVhFhWUez1O3t371sgYulMuxaff5mXK3xlzYZUHpJGkOYntQ2VlqUpl/VO
# KcNTXWnuPOyuUZY0b9tWU0Ofs8Imp7+lULJ7XUbrJoY1bUa22ce912PVBsWOojGC
# BjowggY2AgEBMH0waTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJ
# bmMuMUEwPwYDVQQDEzhEaWdpQ2VydCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBS
# U0E0MDk2IFNIQTM4NCAyMDIxIENBMQIQBN37zYRUA3ZieB+ED5/P9TAJBgUrDgMC
# GgUAoHAwEAYKKwYBBAGCNwIBDDECMAAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcC
# AQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkEMRYE
# FH9ga1VQ5xI5iNrr20ntGlg2M79xMA0GCSqGSIb3DQEBAQUABIICAERWv1d9wD74
# h5n9xMB+zWZSbn9Nhg4FhZwVonVhhjjrevaejSqzPhKr877bISfByhh0XsfTYfsG
# hhM6GuSDbLsRn3eHOjMOEz1WvhACJJv62F+OWjzl6BBdCviq1xiMxiop7CnvOS/C
# 608ODJ+8DlaR1gzkH3qXZf4oGJWBRRUjwTSB50tifAhQy7CaQAabkfe1kzhSglPT
# WKIBgLyRD9zaz6M+no5p7MzOxSO3cIieHRBgBgUPVmoI/RcrCHWDXBz1ntX/KGqc
# KoZbDiZDHBQIrpZyblpllEmy2+tJccGN8n6m1W/kptsh0DaxxCH0GtrkiBbk0qOI
# g6/2gRephARXHIGqQM43YFlgSrXyiqS3pOlxB2B9MDyuzOw9qCf65YjO0hg+W57v
# Knbn1d2TdG5qxwg2CBoCFwiZ1lJfNBpIWX8soCGqHzVgmTkj29O/DFpX6T8bcFwd
# P6w5YNPzD1+9SlImuhvmtCitPANwKElyimYmp6OcBc1jm4Pz2AGfoSTerdqY+dv5
# RBTNWiUGY4JDHypgJgjWcG8+mE5yeSgNUN0RTeczHuuGBTBdXxj0iuXrfuY06D1H
# 3Ea5VQR9NZiXUNyBczdyw6TZ74+Jx7qxvbI1wzONbo8Ybzd8G1oncT2+J8UKSm7n
# jXCeta39Yg1PtK+R0K6+svC2NpZl/O3YoYIDIDCCAxwGCSqGSIb3DQEJBjGCAw0w
# ggMJAgEBMHcwYzELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMu
# MTswOQYDVQQDEzJEaWdpQ2VydCBUcnVzdGVkIEc0IFJTQTQwOTYgU0hBMjU2IFRp
# bWVTdGFtcGluZyBDQQIQBUSv85SdCDmmv9s/X+VhFjANBglghkgBZQMEAgEFAKBp
# MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI0MDMw
# ODAwMDUyM1owLwYJKoZIhvcNAQkEMSIEINSQRoS1BKzuIeRaZKEvBamGHOaILpMC
# IKSlw3x9xYzrMA0GCSqGSIb3DQEBAQUABIICAJGEXl4bAXNUAAnqz6bR50eNbwTr
# QBnnAT3ibf5AiY49EZsyCCZfxAWoqdrwMCTAQZTxcxZnMB4SKs3FN42RFvAae0+h
# ZXog/UCPX/hGJGQu6rhMLCz8TwNpwDWDOsShMo4rDQiipIU8Psazoa8Pi6AQvnhr
# rFvsz/oLZVRAoPknlze9S8M8LHdUvtC0Sd29jGveerxK4VCCRbYDhz4OtqPXO+G7
# 7z+Yx8574eI+A7aO5tMT1L7G1ImMHiMSgYGr7fe1F61+S4UrZDT+RBAGaLwutJpL
# IBcTV76VHUDZgRPBOUS/WB7hm/2Sh+yuHc60w+RzLKTCCodn+t7IxNwf7Pq7ey2t
# i2tdVgmBlW7/sgsRAiGBIEaMzX7ySHgTjW4Wdye7ja+jJvdIVUjcfcDJKzq/NO9Q
# +gbNLlcXZioaLvQUMXwq+VTrAx+edJ0Gv3xu7wHtoZgrnuE4GO2tULVlOacnwGVb
# QYHj3DK2Jyj8gAFRjj7g40f+t2kIU8HlN9Wr80UP1Zuq5/7uKBQWbspF79xPeOIj
# +ukvmG2dBWkT+FSpLQZoktymWQNCdYgUTk7UCaq3qQFC/FrLOmzFlqFFudHcwGfs
# 4kuZeRgM6vPpJivPFpwnzjr122eLeOoK4kDYl8O/IWBvfH7FLgRabN/KqhtUBjSb
# w2sePZqIXV8zm8Xq
# SIG # End signature block