PureStorage.CBS.AVS

1.1.320

PureStorage.CommonUtil.ps1

                                <#

Common Utility functions.

#>

$DEFAULT_PER_HOST_TIMEOUT_IN_SECONDS = 30

$MIN_TIMEOUT_IN_MINUTES = 10

$MAX_TIMEOUT_IN_MINUTES = 60

function Get-PfaHostFromVmHost {

    <#

    .SYNOPSIS

      Gets a FlashArray host object from a ESXi vmhost object

    .DESCRIPTION

      Takes in a vmhost and returns a matching FA host if found

    #>

    Param(

        [Parameter(Mandatory=$true,ValueFromPipeline=$True)]

        [VMware.VimAutomation.ViCore.Types.V1.Inventory.VMHost]$Esxi,

        [Parameter(Mandatory=$true,ValueFromPipeline=$True)]

        $Flasharray

    )

    $iscsiadapter = $esxi | Get-VMHostHBA -Type iscsi | Where-Object {$_.Model -eq "iSCSI Software Adapter"}

    $fahosts = Get-Pfa2Host -Array $FlashArray | Where-Object {$_.IsLocal -eq $True}

    $ArrayName = Get-ArrayName -FlashArray $FlashArray

    if ($null -ne $iscsiadapter)

    {

        $iqn = $iscsiadapter.ExtensionData.IScsiName

        foreach ($fahost in $fahosts)

        {

            if ($fahost.iqns.count -ge 1)

            {

                foreach ($fahostiqn in $fahost.iqns)

                {

                    if ($iqn.ToLower() -eq $fahostiqn.ToLower())

                    {

                        $faHostMatch = $fahost

                        break

                    }

                }

            }

        }

    }

    if ($null -ne $faHostMatch)

    {

      return $faHostMatch

    }

    else

    {

        throw "No matching host for $($esxi.Name) could be found on the Pure Cloud Block Store $ArrayName"

    }

}

function Get-PfaHostGroupfromVcCluster {

    <#

    .SYNOPSIS

      Retrieves a FA host group from an ESXi cluster

    .DESCRIPTION

      Takes in a vCenter Cluster and retrieves corresonding host group

    #>

    Param(

        [Parameter(Mandatory=$true,ValueFromPipeline=$True)]

        [VMware.VimAutomation.ViCore.Types.V1.Inventory.Cluster]$Cluster,

        [Parameter(Mandatory=$True)]

        $Flasharray

    )

    $esxiHosts = $cluster |Get-VMHost

    $faHostGroups = @()

    $faHostGroupNames = @()

    $ArrayName = Get-ArrayName -FlashArray $FlashArray

    foreach ($esxiHost in $esxiHosts)

    {

        try {

            $faHost = $esxiHost | Get-PfaHostFromVmHost -flasharray $flasharray

            if ($null -ne $faHost.HostGroup.Name)

            {

                if ($faHostGroupNames.contains($faHost.HostGroup.Name))

                {

                    continue

                }

                else {

                    $faHostGroupNames += $faHost.HostGroup.Name

                    $faHostGroup = Get-Pfa2HostGroup -Array $Flasharray -Name $($faHost.HostGroup.Name)  -ErrorAction stop | Where-Object {$_.IsLocal -eq $True}

                    $faHostGroups += $faHostGroup

                }

            }

        }

        catch{

            continue

        }

    }

    if ($null -eq $faHostGroup)

    {

        throw "No host group found for cluster  $($Cluster.Name) on $ArrayName."

    }

    if ($faHostGroups.count -gt 1)

    {

        Write-Warning -Message "Cluster $($Cluster.Name) spans more than one host group. The recommendation is to have only one host group per cluster"

    }

    return $faHostGroups

}

function Get-ArrayName {

    Param(

        [Parameter(Mandatory=$true)]

        $FlashArray

    )

    $ArrayName = (Get-Pfa2Array -Array $Flasharray).Name

    return $ArrayName

}

function Get-AzureAuthHeader {

    param (

        $AzContext

    )

    $AzProfile = [Microsoft.Azure.Commands.Common.Authentication.Abstractions.AzureRmProfileProvider]::Instance.Profile

    $ProfileClient = New-Object -TypeName Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient -ArgumentList ($AzProfile)

    $Token = $profileClient.AcquireAccessToken($azContext.Subscription.TenantId)

    if (-not $Token) {

        throw "Failed to acquire Azure access token for tenant $($azContext.Subscription.TenantId)"

    }

    $AuthHeader = @{

        'Content-Type'='application/json'

        'Authorization'='Bearer ' + $token.AccessToken

    }

    return $AuthHeader

}

function Get-AVSvCenterEndpoint {

    param (

        [Hashtable] $AuthHeader,

        [String] $SubscriptionId,

        [String] $AvsResourceGroupName,

        [String] $AvsPrivateCloudName

    )

    $RestUri = "https://management.azure.com/subscriptions/$($subscriptionId)/resourceGroups/$($avsResourceGroupName)/providers/Microsoft.AVS/privateClouds/$($avsPrivateCloudName)?api-version=2022-05-01"

    $Response = Invoke-RestMethod -Uri $restUri -Method Get -Headers $authHeader

    if (-not $Response) {

        throw "Failed to get AVS vCenter endpoint. Please make sure you have the right permission to access the AVS instance with subscriptionId $subscriptionId, resource group $avsResourceGroupName and private cloud $avsPrivateCloudName"

    }

    $VcsaEndpoint = $response.properties.endpoints.vcsa

    $VcsaIPAddress = [System.Uri]::new($vcsaEndpoint).Host

    return $vcsaIPAddress

}

function Get-AVSvCenterCredential {

    param (

        [Hashtable] $AuthHeader,

        [String] $SubscriptionId,

        [String] $AvsResourceGroupName,

        [String] $AvsPrivateCloudName

    )

    $RestUri = "https://management.azure.com/subscriptions/$($subscriptionId)/resourceGroups/$($avsResourceGroupName)/providers/Microsoft.AVS/privateClouds/$($avsPrivateCloudName)/listAdminCredentials?api-version=2022-05-01"

    $Response = Invoke-RestMethod -Uri $restUri -Method Post -Headers $AuthHeader

    if (-not $Response) {

        throw "Failed to get AVS vCenter credential. Please make sure you have the right permission to access the AVS instance with subscriptionId $subscriptionId, resource group $avsResourceGroupName and private cloud $avsPrivateCloudName"

    }

    return $Response

}

function Connect-AVSvCenter {

    param (

        [String] $AVSResourceGroupName,

        [String] $AVSPrivateCloudName

    )

    $AzContext = Get-AzContext

    $AzureSubscriptionId = $AzContext.Subscription.Id

    Write-Debug "The default subscriptionId $AzureSubscriptionId of the current Azure context will be used."

    $AuthHeader = Get-AzureAuthHeader -AzContext $AzContext

    $AVSvCenterCredential = Get-AVSvCenterCredential -AuthHeader $AuthHeader -SubscriptionId $AzureSubscriptionId -AVSResourceGroupName $AVSResourceGroupName -AVSPrivateCloudName $AVSPrivateCloudName

    $AVSvCenterEndpoint = Get-AVSvCenterEndpoint  -AuthHeader $AuthHeader -SubscriptionId $AzureSubscriptionId -AVSResourceGroupName $AVSResourceGroupName -AVSPrivateCloudName $AVSPrivateCloudName

    $Credential = New-Object System.Management.Automation.PSCredential -ArgumentList ($AVSvCenterCredential.vCenterUsername, $(ConvertTo-SecureString $AVSvCenterCredential.vCenterPassword -AsPlainText -Force))

    # Try to connect to vcenter everytime when a cmdlet is invoked by the user to make sure right avs instance is connected

    $vCenterServer = Connect-VIserver -server $AVSvCenterEndpoint -Credential $Credential -ErrorAction Stop

    return $vCenterServer

}

function Connect-PureCloudBlockStore {

    Param (

        [Parameter(Mandatory=$false)]

        $PureCloudBlockStoreConnection

    )

    if (-not $PureCloudBlockStoreConnection) {

        $fa = $global:PURE_AUTH_2_X

        if (-not $fa) {

            throw "Please login to Cloud Clock Store using: Connect-Pfa2Array"

        }

    }

    else {

        $fa = $PureCloudBlockStoreConnection

    }

    $ClientName = "PureStorage.CBS.AVS"

    $module = Get-Module -Name $ClientName

    if ($module) {

      $Version = $module.Version.ToString()

    } else {

      $Version = "0.0.0.0"

    }

    # if was able to connect, also update the user agent to track backup sdk telemetry

    $success = $fa.UpdateUserAgent($ClientName, $Version );

    # this should not be a show stopper

    if(-not $success){

        Write-Warning -Level WARN -FunctionName $FunctionName -Msg "Failed to set useragent"

    }

    return $fa

}

function Purge-AzureSecretWithRetry {

    Param (

        [String] $KeyVaultName,

        [String] $SecretName

    )

    $errorOccurred = $true

    $retryCount = 0

    # Unfortunately we have to do retry because Remove-AzKeyVaultSecret is asyncronous. If purge happens directly after delete, "Secret is currently being deleted" error is thrown

    do {

        try {

            # To purge, use -InRemovedState parameter

            $retryCount = $retryCount + 1

            Remove-AzkeyVaultSecret -VaultName $KeyVaultName -Name $SecretName -InRemovedState -Force -ErrorAction Stop

            $errorOccurred = $false

        } catch {

            $errorOccurred = $true

            if ($retryCount -gt 3) {

                throw

            }

            Start-Sleep -Seconds 5

        }

    } while ($errorOccurred)

}

function Get-AVSClusterProvisionStatus {

    param (

        [String] $AvsResourceGroupName,

        [String] $AvsPrivateCloudName,

        [String] $AvsClusterName

    )

    $AzContext = Get-AzContext

    $AzureSubscriptionId = $AzContext.Subscription.Id

    Write-Debug "The default subscriptionId $AzureSubscriptionId of the current Azure context will be used."

    $AuthHeader = Get-AzureAuthHeader -AzContext $AzContext

    $RestUri = "https://management.azure.com/subscriptions/$($AzureSubscriptionId)/resourceGroups/$($avsResourceGroupName)/providers/Microsoft.AVS/privateClouds/$($avsPrivateCloudName)/clusters/$($avsClusterName)?api-version=2022-05-01"

    $Response = Invoke-RestMethod -Uri $restUri -Method Get -Headers $AuthHeader

    if (-not $Response) {

        throw "Failed to get AVS cluster provision status. Please make sure cluster $AvsClusterName exists. The cluster name would be case sensitive."

    }

    return $Response.properties.provisioningState

}

function Test-MPIOProvisionStatus {

    param (

        [Parameter(Mandatory=$true)]

        [VMware.VimAutomation.ViCore.Types.V1.Inventory.Cluster]$Cluster

    )

    $VMHosts = Get-VMHost -Location $Cluster

    foreach ($VMHost in $VMHosts) {

        $MpioAdapterOne = Get-VMHostNetworkAdapter -VMHost $VMHost | Where-Object {$_.Name -eq "vmk5"}

        $MpioAdapterTwo = Get-VMHostNetworkAdapter -VMHost $VMHost | Where-Object {$_.Name -eq "vmk6"}

        if ($MpioAdapterOne -and $MpioAdapterTwo) {

            Write-Host "MPIO is ready on $VMHost..."

        } else {

            Write-Warning "The current provisioning status of MPIO is not ready for host $VMHost. Please check if VMkernel adapter 'vmk5' and 'vmk6' are ready for host $VMhost. If not, please wait for twenty minutes and try again."

        }

    }

}

function Get-RunCommandNamedOutput {

    param (

        [String] $RunCmdExecutionName,

        [String] $AvsResourceGroupName,

        [String] $AvsPrivateCloudName

    )

    $AzContext = Get-AzContext

    $AzureSubscriptionId = $AzContext.Subscription.Id

    Write-Debug "The default subscriptionId $AzureSubscriptionId of the current Azure context will be used."

    $AuthHeader = Get-AzureAuthHeader -AzContext $AzContext

    $RestUri = “https://management.azure.com/subscriptions/$($AzureSubscriptionId)/resourceGroups/$($avsResourceGroupName)/providers/Microsoft.AVS/privateClouds/$($avsPrivateCloudName)/scriptExecutions/$($RunCmdExecutionName)?api-version=2021-12-01”

    $Response = Invoke-RestMethod -Uri $restUri -Method Get -Headers $AuthHeader

    return $Response.properties.namedOutputs

}

function Get-Timeout {

    param (

        [Parameter(Mandatory=$true)]

        [string]$Cluster,

        [Parameter(Mandatory=$true)]

        $InputParams

    )

    if ($InputParams.ContainsKey("TimeoutInMinutes")) {

        return $InputParams["TimeoutInMinutes"]

    }

    $HostCount = (Get-VMHost -Location $Cluster).Count

    $Timeout = [Math]::Ceiling(($HostCount * $DEFAULT_PER_HOST_TIMEOUT_IN_SECONDS)/60)

    if ($Timeout -lt $MIN_TIMEOUT_IN_MINUTES ) {

        $Timeout = $MIN_TIMEOUT_IN_MINUTES

    }

    elseif ($Timeout -gt $MAX_TIMEOUT_IN_MINUTES){

        $Timeout = $MAX_TIMEOUT_IN_MINUTES

    }

    return $Timeout

}

# SIG # Begin signature block

# MIIXRQYJKoZIhvcNAQcCoIIXNjCCFzICAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA5kx6X9Sq0DruE

# m9khJZOD+qVaRcnATYuUkVml0d64MqCCE2gwggVyMIIDWqADAgECAhB2U/6sdUZI

# k/Xl10pIOk74MA0GCSqGSIb3DQEBDAUAMFMxCzAJBgNVBAYTAkJFMRkwFwYDVQQK

# ExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBHbG9iYWxTaWduIENvZGUgU2ln

# bmluZyBSb290IFI0NTAeFw0yMDAzMTgwMDAwMDBaFw00NTAzMTgwMDAwMDBaMFMx

# CzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQD

# EyBHbG9iYWxTaWduIENvZGUgU2lnbmluZyBSb290IFI0NTCCAiIwDQYJKoZIhvcN

# AQEBBQADggIPADCCAgoCggIBALYtxTDdeuirkD0DcrA6S5kWYbLl/6VnHTcc5X7s

# k4OqhPWjQ5uYRYq4Y1ddmwCIBCXp+GiSS4LYS8lKA/Oof2qPimEnvaFE0P31PyLC

# o0+RjbMFsiiCkV37WYgFC5cGwpj4LKczJO5QOkHM8KCwex1N0qhYOJbp3/kbkbuL

# ECzSx0Mdogl0oYCve+YzCgxZa4689Ktal3t/rlX7hPCA/oRM1+K6vcR1oW+9YRB0

# RLKYB+J0q/9o3GwmPukf5eAEh60w0wyNA3xVuBZwXCR4ICXrZ2eIq7pONJhrcBHe

# OMrUvqHAnOHfHgIB2DvhZ0OEts/8dLcvhKO/ugk3PWdssUVcGWGrQYP1rB3rdw1G

# R3POv72Vle2dK4gQ/vpY6KdX4bPPqFrpByWbEsSegHI9k9yMlN87ROYmgPzSwwPw

# jAzSRdYu54+YnuYE7kJuZ35CFnFi5wT5YMZkobacgSFOK8ZtaJSGxpl0c2cxepHy

# 1Ix5bnymu35Gb03FhRIrz5oiRAiohTfOB2FXBhcSJMDEMXOhmDVXR34QOkXZLaRR

# kJipoAc3xGUaqhxrFnf3p5fsPxkwmW8x++pAsufSxPrJ0PBQdnRZ+o1tFzK++Ol+

# A/Tnh3Wa1EqRLIUDEwIrQoDyiWo2z8hMoM6e+MuNrRan097VmxinxpI68YJj8S4O

# JGTfAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0G

# A1UdDgQWBBQfAL9GgAr8eDm3pbRD2VZQu86WOzANBgkqhkiG9w0BAQwFAAOCAgEA

# Xiu6dJc0RF92SChAhJPuAW7pobPWgCXme+S8CZE9D/x2rdfUMCC7j2DQkdYc8pzv

# eBorlDICwSSWUlIC0PPR/PKbOW6Z4R+OQ0F9mh5byV2ahPwm5ofzdHImraQb2T07

# alKgPAkeLx57szO0Rcf3rLGvk2Ctdq64shV464Nq6//bRqsk5e4C+pAfWcAvXda3

# XaRcELdyU/hBTsz6eBolSsr+hWJDYcO0N6qB0vTWOg+9jVl+MEfeK2vnIVAzX9Rn

# m9S4Z588J5kD/4VDjnMSyiDN6GHVsWbcF9Y5bQ/bzyM3oYKJThxrP9agzaoHnT5C

# JqrXDO76R78aUn7RdYHTyYpiF21PiKAhoCY+r23ZYjAf6Zgorm6N1Y5McmaTgI0q

# 41XHYGeQQlZcIlEPs9xOOe5N3dkdeBBUO27Ql28DtR6yI3PGErKaZND8lYUkqP/f

# obDckUCu3wkzq7ndkrfxzJF0O2nrZ5cbkL/nx6BvcbtXv7ePWu16QGoWzYCELS/h

# AtQklEOzFfwMKxv9cW/8y7x1Fzpeg9LJsy8b1ZyNf1T+fn7kVqOHp53hWVKUQY9t

# W76GlZr/GnbdQNJRSnC0HzNjI3c/7CceWeQIh+00gkoPP/6gHcH1Z3NFhnj0qinp

# J4fGGdvGExTDOUmHTaCX4GUT9Z13Vunas1jHOvLAzYIwggbmMIIEzqADAgECAhB3

# vQ4DobcI+FSrBnIQ2QRHMA0GCSqGSIb3DQEBCwUAMFMxCzAJBgNVBAYTAkJFMRkw

# FwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBHbG9iYWxTaWduIENv

# ZGUgU2lnbmluZyBSb290IFI0NTAeFw0yMDA3MjgwMDAwMDBaFw0zMDA3MjgwMDAw

# MDBaMFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS8w

# LQYDVQQDEyZHbG9iYWxTaWduIEdDQyBSNDUgQ29kZVNpZ25pbmcgQ0EgMjAyMDCC

# AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANZCTfnjT8Yj9GwdgaYw90g9

# z9DljeUgIpYHRDVdBs8PHXBg5iZU+lMjYAKoXwIC947Jbj2peAW9jvVPGSSZfM8R

# Fpsfe2vSo3toZXer2LEsP9NyBjJcW6xQZywlTVYGNvzBYkx9fYYWlZpdVLpQ0LB/

# okQZ6dZubD4Twp8R1F80W1FoMWMK+FvQ3rpZXzGviWg4QD4I6FNnTmO2IY7v3Y2F

# QVWeHLw33JWgxHGnHxulSW4KIFl+iaNYFZcAJWnf3sJqUGVOU/troZ8YHooOX1Re

# veBbz/IMBNLeCKEQJvey83ouwo6WwT/Opdr0WSiMN2WhMZYLjqR2dxVJhGaCJedD

# CndSsZlRQv+hst2c0twY2cGGqUAdQZdihryo/6LHYxcG/WZ6NpQBIIl4H5D0e6lS

# TmpPVAYqgK+ex1BC+mUK4wH0sW6sDqjjgRmoOMieAyiGpHSnR5V+cloqexVqHMRp

# 5rC+QBmZy9J9VU4inBDgoVvDsy56i8Te8UsfjCh5MEV/bBO2PSz/LUqKKuwoDy3K

# 1JyYikptWjYsL9+6y+JBSgh3GIitNWGUEvOkcuvuNp6nUSeRPPeiGsz8h+WX4VGH

# aekizIPAtw9FbAfhQ0/UjErOz2OxtaQQevkNDCiwazT+IWgnb+z4+iaEW3VCzYkm

# eVmda6tjcWKQJQ0IIPH/AgMBAAGjggGuMIIBqjAOBgNVHQ8BAf8EBAMCAYYwEwYD

# VR0lBAwwCgYIKwYBBQUHAwMwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU

# 2rONwCSQo2t30wygWd0hZ2R2C3gwHwYDVR0jBBgwFoAUHwC/RoAK/Hg5t6W0Q9lW

# ULvOljswgZMGCCsGAQUFBwEBBIGGMIGDMDkGCCsGAQUFBzABhi1odHRwOi8vb2Nz

# cC5nbG9iYWxzaWduLmNvbS9jb2Rlc2lnbmluZ3Jvb3RyNDUwRgYIKwYBBQUHMAKG

# Omh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2NvZGVzaWduaW5n

# cm9vdHI0NS5jcnQwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC5nbG9iYWxz

# aWduLmNvbS9jb2Rlc2lnbmluZ3Jvb3RyNDUuY3JsMFYGA1UdIARPME0wQQYJKwYB

# BAGgMgEyMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t

# L3JlcG9zaXRvcnkvMAgGBmeBDAEEATANBgkqhkiG9w0BAQsFAAOCAgEACIhyJsav

# +qxfBsCqjJDa0LLAopf/bhMyFlT9PvQwEZ+PmPmbUt3yohbu2XiVppp8YbgEtfjr

# y/RhETP2ZSW3EUKL2Glux/+VtIFDqX6uv4LWTcwRo4NxahBeGQWn52x/VvSoXMNO

# Ca1Za7j5fqUuuPzeDsKg+7AE1BMbxyepuaotMTvPRkyd60zsvC6c8YejfzhpX0FA

# Z/ZTfepB7449+6nUEThG3zzr9s0ivRPN8OHm5TOgvjzkeNUbzCDyMHOwIhz2hNab

# XAAC4ShSS/8SS0Dq7rAaBgaehObn8NuERvtz2StCtslXNMcWwKbrIbmqDvf+28rr

# vBfLuGfr4z5P26mUhmRVyQkKwNkEcUoRS1pkw7x4eK1MRyZlB5nVzTZgoTNTs/Z7

# KtWJQDxxpav4mVn945uSS90FvQsMeAYrz1PYvRKaWyeGhT+RvuB4gHNU36cdZytq

# tq5NiYAkCFJwUPMB/0SuL5rg4UkI4eFb1zjRngqKnZQnm8qjudviNmrjb7lYYuA2

# eDYB+sGniXomU6Ncu9Ky64rLYwgv/h7zViniNZvY/+mlvW1LWSyJLC9Su7UpkNpD

# R7xy3bzZv4DB3LCrtEsdWDY3ZOub4YUXmimi/eYI0pL/oPh84emn0TCOXyZQK8ei

# 4pd3iu/YTT4m65lAYPM8Zwy2CHIpNVOBNNwwggcEMIIE7KADAgECAgxcuW61kTkv

# +4t8zgQwDQYJKoZIhvcNAQELBQAwWTELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEds

# b2JhbFNpZ24gbnYtc2ExLzAtBgNVBAMTJkdsb2JhbFNpZ24gR0NDIFI0NSBDb2Rl

# U2lnbmluZyBDQSAyMDIwMB4XDTI0MDMxMTE0MDQxMloXDTI3MDMxMjE0MDQxMlow

# cjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFDASBgNVBAcTC1Nh

# bnRhIENsYXJhMRswGQYDVQQKExJQdXJlIFN0b3JhZ2UsIEluYy4xGzAZBgNVBAMT

# ElB1cmUgU3RvcmFnZSwgSW5jLjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAMCQrioSn48IvHpTg5dofsUYj/pNTDidwjYUrcxVu78NoyhSweG8FhcxDi/S

# I40+8Fccl3D5ZoqpjkFnGhzSwmpxU3J4AP7+fdTZht9eWD1I5qKY07esYwdPDV4y

# g+csPfdGPqI2XjRfT5UC3YkXQeUrX8KQZldD4KqvgxzpYcuBwsgHbTb/eArpi68Y

# gFR2jgZGyZigfy8RuJMrL1thcBOe/VWjUyK21wVT8cuunBYFaStLHhsRBRMDcZBD

# uTSGC4evE6oaCqlQbdMl9YFJ64mDQsKlCxrr7rmLVtcVzKGwmjp4b2xRwE+RmTh6

# JtrUL9Wx/3a3UzgAnDNimfwp85zoL48kyLtHqQ3FI8tVKGm+aBOgBZfmURoy7fbp

# 4zKhGgqFbpOmILO16i4f999YsEEJQgIF3CtyH1R60/ZZWlDmoeeEgjAGrnd14muU

# 5Hk3Cksr43uPUAg+fV78Y0fDV85ibm42ZwwPuz6MI4HhYNUlGzRwIQ31vjaGuAMW

# HNqFKkcO0JuIeHQ/gFKPnYIxnGC9H9R4Kw/uMezqtnYJwGU2epB/ABl/w7U4NgU2

# ZOxWB5BFy4frZ3f+hNgbjFUjMaXnVFotOJxXntzjdSl4znw8DaKiC5ooChteZMIT

# G9p078p/TUsOJQbUtFADSY1hsfCfB7t+gJSNt5peS9GOZIMVAgMBAAGjggGxMIIB

# rTAOBgNVHQ8BAf8EBAMCB4AwgZsGCCsGAQUFBwEBBIGOMIGLMEoGCCsGAQUFBzAC

# hj5odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2djY3I0NWNv

# ZGVzaWduY2EyMDIwLmNydDA9BggrBgEFBQcwAYYxaHR0cDovL29jc3AuZ2xvYmFs

# c2lnbi5jb20vZ3NnY2NyNDVjb2Rlc2lnbmNhMjAyMDBWBgNVHSAETzBNMEEGCSsG

# AQQBoDIBMjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv

# bS9yZXBvc2l0b3J5LzAIBgZngQwBBAEwCQYDVR0TBAIwADBFBgNVHR8EPjA8MDqg

# OKA2hjRodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjQ1Y29kZXNpZ25j

# YTIwMjAuY3JsMBMGA1UdJQQMMAoGCCsGAQUFBwMDMB8GA1UdIwQYMBaAFNqzjcAk

# kKNrd9MMoFndIWdkdgt4MB0GA1UdDgQWBBSzJ9KiDCa3UBiAajy+Iioj5kQjzDAN

# BgkqhkiG9w0BAQsFAAOCAgEAHsFQixeQEcoHurq9NWSUt4S39Q+UGP6crmVq3Wwy

# 9g23YbdWg+SgMxoLUqdoDfA4k4B6Dyoo0jEQzn2kxnsnT9lNHKrcZHH88dv0hjfi

# H2qAiQWazPjS3LhK2J6nhpyipJPpyRaSQG4x4aG0NB2D4WUfUz9CGAYsERJGww/w

# kTaaxMipttKDTaI1C49u1igDfRzIO+Q8vuyyBFLiYTno/df97xtjNC+KxxFhDhl/

# 4tawK6kwxaVzCMAfj48I67Wbo4DMH6pM1s19as7c3qp92i3MylGKsB6+u+o7UkbS

# dLNkS4ALI33CJOUc+GoK3Nt5IXXCFJTQFHBXkBdAur3gmlXEm8vlNG/1Sbxr0H7T

# 1e7ABGH/48o/+PeMLuCc72EeK5dJ4cX9NEQ3QnTsZHwGnYzjEOvOvP0s1c7yNsDb

# cUHoIqQvb5xS5aqMU5G+8sdPQ1nwpPf7gGaEEbAVW4w51Pam42qeN9HIPa+ZinXn

# sN02Kk1Qw0QwUqzaQy9W/gIquI0KOjw0LmoW9M/8S0lrjpEq2eEeUw9WQLhhUEIi

# rFxGPtjqiCLiiS9CZ+kf2vWLJKUspkYv+OHT3q805Zg1dJsBFAzEYUFLb1mhmigD

# EO9bsMorjECIL2ijE5zHtbGkalrrsPWu8tiDT/B7P9GSYzKfOOy4PoOIfWSK0Ixl

# S7IxggMzMIIDLwIBATBpMFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxT

# aWduIG52LXNhMS8wLQYDVQQDEyZHbG9iYWxTaWduIEdDQyBSNDUgQ29kZVNpZ25p

# bmcgQ0EgMjAyMAIMXLlutZE5L/uLfM4EMA0GCWCGSAFlAwQCAQUAoIGcMBkGCSqG

# SIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3

# AgEVMC8GCSqGSIb3DQEJBDEiBCD5ALXQo/oTPWA0b3udCi3amQGrb3YIr2wztBxU

# XNWCKDAwBgorBgEEAYI3AgEMMSIwIKACgAChGoAYaHR0cHM6Ly9wdXJlc3RvcmFn

# ZS5jb20gMA0GCSqGSIb3DQEBAQUABIICAGGi9iB8K1MnVoLtHtFRBYiG5vur4gg3

# 0cNHovohbDuzegYgv6aAPCQ4ml3RGlb+hXo1rxa73feD1UnltUYb7FIGe9eKz3GX

# NtS/3wi1nGqkVK+ZfAwqILeH+Z9xuJepix6OLDQzBLFVxsxPF1axhWjWLlJor+N1

# 6E4i5BxXCoQbcIZjDgiPXiPXn3Xf7xYIO5nqXFpOG2dHR3f8HXv7y90UYxqOE5xP

# tnoPibf+kFwyaXmKExYa1P/ObFY+SJYlpt8LJU0V5++HrtO+Mgn8Q852A3AwLjEN

# HpvY3BIDRjrzr/UcQM2iw4bhdxo8TFiHx4HEC+RtwNlKVYq1Pcm18RfsEuFEq5hL

# 64L8nUPpEUVbZRGunOBc20vqBVpp3TJn7CmS6q2RZmvTUVOQM27uBdVIk+ogj9zl

# I1YFK4Yypv73n4hHXvKRxcVzigw4Mw4HQGkIjIIA9lVzecMhZ9H7HBJALzK9DOl8

# 1AFeYszQDEB1h6vV0EbsiySuBqynfOeTXZJehfO0OFS5aoZPAztVH8IhVfXxJLxI

# bTvbtFXEAvY+PR0eJ9uX/+s69+ZxPmQHnfReJxr4uaePSVLUpGA0CSdaEr7WalBU

# p0uY0VNFoned8IMQnKgt9nqwXI5NC9KKsWgrRSyqlBX6L9XoGTbCN2oFUSHQLjlm

# AzNqS/ybJkyq

# SIG # End signature block