From f3a098a1ba5e618bd50f9b61cac8542c4be25f41 Mon Sep 17 00:00:00 2001 From: umagnus Date: Thu, 13 Jun 2024 07:07:06 +0000 Subject: [PATCH] Fix shield guard issues for KSM: --- charts/latest/csi-driver-nfs-v0.0.0.tgz | Bin 11363 -> 11384 bytes .../templates/csi-nfs-controller.yaml | 12 ++++++++++++ .../templates/csi-snapshot-controller.yaml | 4 ++++ charts/v4.6.0/csi-driver-nfs-v4.6.0.tgz | Bin 10973 -> 11001 bytes .../templates/csi-nfs-controller.yaml | 12 ++++++++++++ .../templates/csi-snapshot-controller.yaml | 4 ++++ charts/v4.7.0/csi-driver-nfs-v4.7.0.tgz | Bin 11288 -> 11315 bytes .../templates/csi-nfs-controller.yaml | 12 ++++++++++++ .../templates/csi-snapshot-controller.yaml | 4 ++++ deploy/csi-nfs-controller.yaml | 14 ++++++++++++++ deploy/v4.6.0/csi-nfs-controller.yaml | 14 ++++++++++++++ deploy/v4.6.0/csi-snapshot-controller.yaml | 4 ++++ deploy/v4.7.0/csi-nfs-controller.yaml | 14 ++++++++++++++ deploy/v4.7.0/csi-snapshot-controller.yaml | 4 ++++ 14 files changed, 98 insertions(+) diff --git a/charts/latest/csi-driver-nfs-v0.0.0.tgz b/charts/latest/csi-driver-nfs-v0.0.0.tgz index d2e935d09c9fd63cd7b7db1188bfde41850e5899..340c251e0850fc855942a16d356b3b7c9d2bc108 100644 GIT binary patch delta 11339 zcmV-REVR?(Som0wJb&$S+c>i5{MJ+8%6n>(SyPrjlG&qMsZ$v{GwZt($7N-*wUskB z2O?V%)+E3MKslOBZta7d^K$znx9~v{q(FW9D-mmVVv#_j0W`WB-Hk>lNDy%{0Upqy zI5-_+E<014#NTZ1>2|x_=O-un-)^^C|F?Vi{OFs*ljq0B-GA<3_xSLe?%_%I@aP-V z-69T+PbMVh-*h)_tKPXs^5B%b11<=oJv2FN;WRCN##n-otq4TONh><5t2_k*MAZn!t_@< z6sDMZIHXJv$@sK~Mj`JIc5wYC5eSJ#gpLA1MuCuw;}IOtp-AIwL}*c2;!zKUm|{LH z-lbU_U$U5l(;hk>UNCvdK>(GyKq$y1XA`3M3UEIbHGh;3Toe@1rzL7Ov-f;5hZ{cBF{U=o#W*YiOB>g2yw~T09MB%ub!&vH7t%gheykf2W1f$(Qsv2 z!)p$T0+jP5o`af2Z0U)Dj}kb=@kX!R4PnD4p>4D zNuB}PLw|oA1J!@;BU=_>Q&^xI631u&wo0Uh@RVg8)CY+qLqi-3KxC+1q8m*0%S?d! z%@Mny9o1gZ1tYNOP&nNR1V(%40w;jj5cMqv7F`9-X`XQfJZhQQFQMrvTmw#v4{%r? z5(Ql=7fPdO8N%qfFFT0?8J9hD^zYA~9jRh$^fOE#?xANbgl-tWCUm5`Yx*UVw1rSaMLu+= zai(zik#HgZO5|7#&jmp z--h|Nk2pxIB@G@92_Wt<_^KEx18#((XrloQ5@oSw#5hzmV6Vk#sgL1@qkLQW(J zaoj>kvKTlvQ?G|HK-Vzsp|+-a&SL0X7kaVcBZ;1*w&e{hRkc;q?N=X(kRty8!y$yS zhuRmcAC4i)VrVY~-%?Mi=KI!L2{vkmgJ2mC!H%3?n8zd`(orxHNHl*w>2_a}R)5a7 z|B-=kOND9HLxe)RK)ow&wlTW) zitI3VTCKf3bOl4;KtoXaA)}xa!-R1_Lg_tHShZ2pL?jSX1=X!rkLXdB=8avaHVAH2F>3cTfHMD zVJDxnn5lJPtBf&+9y-W>W&@=!+F!FedAr-T-<0xhG0!(%&i>pEBO(GZ8cz`gi0r;c zmx|QvCyq9*Xv*k{hE!K+C9t!o;RVb9TnSGNL8LfTVC;|?09?%rNq=%dX;9Q(%!>Yj z&`4|AY9Do;BoGm73%K3OM>J4#GXXAMoOBM?w5!(ae-e^Z+kFo%-n@O)@5qmGa~snl z`~UID_ci<9vu8(#JNw^VJm~Eh>Q;Rs&bh1)79pKl2yNDC>%q0U9X+8 zNFX7x%)~xQW55E`mVdO@Y9XW;QYd2-lxyV0r%$MJ1-e}4B7ciMe^xjcU_l_PV)mkq z)3naksF0X?0HM#H+b9TbunfodJy8Zw8N%v&8 z{_o=X^y%O`G$Bb(Yl1@(gPf-DB2mK zGuGukeF{*d)J{NcIuspMtc`;5i;{(?W4z3IjdtD{kCQ6-W&)g(2+;3JC8Z&Heysl_ zNk1D7$w$-Bt%Z)$DSR zkvIZg;g^$c=TFvwh*J{aRPE&;s?b2!ol|oqu!STr>r#-UhaN=o%o+cl?CWw*IZHW}L z|7^rrmXrm;z~>aU9QJ*E041#^puXN`NNz1EHfV z#=Kswg^&nY3O!Wp1fmu~cE&W60O2UoG=SqvPJgHbeyU)UX4gu<(m9Pts2G}}a;2>l zMl&LiF+(}_B*~QKAQ=aQEovQWi~GA^^b*T)4|UAurlV`WWxt5rV{WGDs{UGPuib#L z7%=tXI7ApxxG8a?0FkKrNB5B&6M?LmO1N5B>4aAOGj^rRcc*B`S%PlHBpjQ%1^62* z(0>!gb9>#>!eHm=YYJhQkbibb5C$pet2i^U;B+3`f=vE0wvSJz4OBMreizdR3BFsmXQ8h`N`jv>Ll(mzjMUY@@@?pI!;>hRTQiU@?2Oyu7d z%U18MfhaPux{9Kn>L3@eQ90a9G5At;SSGfQ7%vE4GF5~_(8!TZ>eXnxKO%I7Jo-dR84>@ zSrf7mCBGH0HA_&9+OX;>Os&UI92>v*zFyJ^o+1vKt7O!HXJd5HYo(?TI%K75zt~OjXm1S&@A8s(=5s^p2^?sE>Y4mWy%<)PNB>1a2l#t3O)I(?}Dku~x;T z@MFGXBhSicWC?@hKK?>l2_xS_Eofmz#oI?{As{^}Ry= z5eThCgk#KcD1ocB7Yegri{)Dg?b?_Prj|o^2g2iZ4H*p~mEs_er++kzpx85sJ>MRp ze6Fn4)2WVzpD*YE(L_{#TN@TjX=-qkoD)iVX!XAo7xj2c&XUdyP=wxUq9YJ%LMKU* zNge8fhqB<9jCRU?%)n^wivHT9e)|g7df8al>3B`K_5wxd(g&$g!?p@*xf5xC>I}DK zq;4329$B@cQ4BwdNc>Kj17(o6sZc~;Zl*YOZgn}FTQxWFN@5(Tp-P8FxSLz3|6W26F zc5B%H*UX!qwj#(tiL0tApa`x!@Z>h$0CvO4G#|}K&3t4O-hT{d=QJqxhduPZ-MI4G zzb>fRND4DG8#ZVQIPbTfEuyA0GP}|D6!i?|qWz^0jBZhB4g((>iD4)aC9zt>#F~=K z9?l3**mZdE=4q z7!ym4?-dNotbc3YvcT1L>mgyr&QXd-wM8|I*@RX3kjx~y$wvHvVE1oP_| z9m=4c_jBLI_w_59#}JcPLmmMIZRk-ZvK<==DZh&p21ILMfL#DGVmqvp+P?DWgh1P`iOl zSWC;a*k=wv-l)k~)_~&Odk8hIA`3$hVwlC~$zZB>GbF-R?ZI+2Gfk}(vsbB@WuBq| z3>9Hz!hbX|V{oxm8x_d;=9fjBdVcLC7`C^g<&e4-HX{5gn%A^;KJ>sWxf+3J9}!uw zZc*}Xe;Z@0my8FfUc}|B$5S(;#&j`P!I^^Wpo=$eU-{VfTZZt2kqD(s2%@$N0>X?F zIYmT>48%SP=aIA*)76OFPu3p5+a`3hGO@3~vVW@nv;_q27R{+yF0d#1*sfzeYcMd@ z4U6cUqG(ESLP8|!Hs#sApb!h#cer>V)rKUFAyWFOZL>heb6T-{tfU0g&YSq4I@d1j zGcx1UZhEz-Ygc7d+XHiSb$NqZX82%if$`Y>KC}F^%n?iI6#_VlJxrZo$Mt zAb*jiDdTEQNUbW&vJ_)%GHk^IxZpFz%xN1mn{`5F^qSg3nbpTgJY(baQ`{Wl2hJH^ zK=ryzPVO-liWBHa@5p|NGVab;(U*NshjkFaw6Yxwb3J$rajGPxWGG9OavH+~Vuvur z6Vic>4=hgg@d`uxMfs-+R0JW3K&?(~l7H4m3rZ`jBs2pwW4zV0go&m^qYpW=Q9Y14 zzyj1}&~Srks%K9RjCbpy=*1W-ylc;p_%%SPh?Q$zpc#wO<{E&qFwD5fr=hy23v<#h zDJuk%T~lWEnzp5d!X5)&!wi*x5JifB`cqXKY|)C{Hv)-CTzFuqJ_-yxr@4l0bbk{i zDzYoqrIoTdhRwS=^~7v6QcGD0D^ggUsGT!RC=x&gkz@j{_UREpXt6~`dPUI8fXVsd z$4u)D7Vfb5jS7o-$3m>$Z=hXov_Ea<3UO9W#0hR_q5;S-+CqH@ksSVnj{B1ohA zL9!2-0H0J@R(8&plyek}c^W_intuiK8YarjY4-r8gv$65*D=I@(kJ@ zIqLAI;iH8W zDqo>K#K9iNz-wU-5Yh+2)cjNa|Q zxBEo*O*W__*I5Pe)XY{yAa4b3W3~e=;QW69=93l_$7rnKHAX6 z0Z44(8~2Qr$$wQdATN*y^%bWR^$C(Pq>Km@Db5m>+o}%1yw4)j#3jS!FmbgeRJ`wHb)r! ztAW!)?S>;C2RWG8SkDsc|E*KSHAARXHrwC(3po9P!hcM+6Ii+nC2bBR-BR%AE?jh( zaM3#m5Peu7pq0Q8wXV0V(8?(#4BzZow$uy z#LXiQH;yyhG^%imF@(1eF}P`b;O5bQUsLSgmZSY{E57dwj_BJwes2rWdRvLj+c*;M zv69kFww1`R`;iihQP@C8Y#Pz^g~xAgBU)=~w76j;*5;JBag^1TVyZTc zpxQKEY8M@~t>~!yHU}p>%6Tx?c_8Jjgj%zGaHr>GEM0Xb%_Nz4lTBZ_B@#m!=jbq7tBw8nAfm5 z5be!3DBdm))kQZ>O6qK1&ui%%4m5q=ZvDBu5hP2280OA5VoJQXCwans>oMw?Be8nV07NERoC4`XWveAwjrQR zLbNr6ZN+J?vlrRs4rJ^5j)%G1*nh=>=VN-?JBqvD;j8Q#wzW^Vm7T#h_5xpo_Wz*u z{oOH#N21d|dM$o=f6UGU^Ef;(hR@%D3&t@uH9BETnMH0Gi*mCcru=Jx`=!8XLkG;G zOS4crYag;CRg$;jG%wMnNIUiCptahGdNqV2%Wf9$#eL$pK|3iJn5(7CjejOx-cr2E zj$I$&-@>-N@#y|(|2&s1IThJ36dhvgQPxV{zUtv{-IonbEOXKhXkEJ+PF|orfSA#d z*d$3pvr}t*oRGLz~8wHXZ}BCgv$*MClNWMcmMd;pe;x^rRY7u~sb9^f``!D;u(VfS(|nYh%s zcB9&0Ek3T|Hxe{Q!p}2-&Gcij8EgsJR6cXfJ)MOV$O}0@qKlI&aBSp*GN#|}nJbhlBk=WB%Hb<8SWRWTYJLnbOx|06TParSj zY(%J1DxW+x5#~d0%71CS93y+Gy?K7-jO*HoM)H$k6*IvT#><`QQxC!o%NQ{}lRi-K zlD}s{mYLSDV@YhJ)0*0M``J$N{{LB<-IqB3RIN};j-k&PJ0lJ z7IR)B222r-(|<9xxiD5?>+5BXS(F*3DJ!j~Q;m6Q(M6GC({SKI3=lfnZ))1pf<57y z>*)G4aqc76%2`B)L(rKy1n9JTMkP0r1^YmXEFABx}oPQV@Zbz|*i}C{c)<(zJ6Xm{L z8Hoso(0Dc6goy(%*(ki{0asIX_YD#{;ns5Y$7ZchQ+H$&+c@Zsahk&N+KC79y823! zu`Pcp^!M`eydDZ?r_#GyTqwD9Pqh_vaogXX4^3md%!x_BOhsY4Lxc(mIGUp-Q3O;H z4#n&m-hX8*SWa34tYfk?5uyLne{*s06Keoz<_qg|0{ZA4BtYf9<{u_AlFmTbS6?~_ zrep|0c5EBK#rvaQo74eCyzmhxX$`b>dY+hUgMV#RsBMrd%%iR#DUmeB15QRG@ZTYU z>^4c~iF&G7I#CkY0YPojpF%{>ApQR6*G7!1V$E6HBXcxpp+Ac;~?Mr-{7elg?!>{T3F2GTxu;+1-?0Z(=(VUf*R30SJsdy z-UVk8hs{@$ej6QsjN{&Hu1j`~E|>4{Ti4Szw{!Dyh_VUr34xn~8^*5*9R-Rs1DkT` zK+B(lJ^jzxebEAJ*$!2t-EHQwGpSYD2O+s{LpYISRxQNd#y784OD!4Z@x zcy5`L)qv{sa^WZIlTJnNHTIAOa0p zWRjC&iU^g@Pdexg)%ExDh_OT|PX878uS5Ogzlndl_%Azj)%9m^rj=F&QR?{NzklBi zx`#pc&;zmC?dkuaU*4WJXPMKuHn2B0?5uq5?c!87mzv$C>eOtHEw5UGgx}rZ`9uZ&YFKv@`#|_9iCs|9iGdkd7B#m?dy>ZiC#0ao7bSXGDXj%TU$sd_dw69Be_*- z-Y9QeqsMfkOmaSR`R2Lhyqe;&+2-bJPc{c)4|P{ktQPt6=lSwUvlHLp8NQKR7+td7 zFgCC8u@dgaFRJFrc+l*eOX9ydmMVp9#6gG^oL+ysi$`}SVpcv8v&EAzkNpJ9?&Qmz zo_yJzczMVtUUu1AZYg_)gQZltBHIz((f* zwi5ZjS&aXt(fk|7?QbPQf0J1JO``5MiLc*9(y!dPT_pW3l71I6zl)jQ#mqmvd&C!; z$iCXU#H&ulO`_H}j#1w{*bd&TJR-96q9=^pQ`#BgsK zvAvb}?A?9bkM=(9M;al$aXj><(a#Sf*7<>6BmU`AfPh9Q`24x`%^f|VAc0xV0Ue41 z2}!D>pbpdrIut>9>qTdZlX#sry4`N~`N@g?x7+R3{yjYT{`>F0IXroOeBA9Gc8`A# zzv&)zpB)~5gSy-A?(CBZiTO9(joYes?vXq}5ZFsm&LEB1Gyy7WH>srJU~*Ww8pTA7 ze)@zu?@aicLnPWx{rPjtHSFo4R}cdh&?!xLpFg)geL{qWaTWn;)1m0ZcmT0zqYnCA zo35!uN2**NYQ-UqNr**L>-l$sfq;J)LYZ%;5-h{<&$@wpUE?%e+z%l+mN2qGQ--Pd z>*OWhPE%VqUr!c;Vhoq)_j3bb1w^Y6X^NYWVNru5cm$VO9QPsQAVmqi{zYRa+23#y zH`gxE{8I@i=U>H(F%$9v4n(Kqxp781BaI;xd`vlyy35FI4CU?HuX33MtiXzbMd zzKk)2C7R5w#;Gdb(DJ--cL#sWa*t)lI^~3MBBy1jLjxJj6m-cc%=9NlC47|SlnDsc zZsU@(A*m{EhFe@^RPDddOi=pVE=m@I(OaDr>bzWuz)Ihst0Niit>k+d@WfkorpH)Z zau|}2sD03`F8@v_$YohW@meN`WPIv!D$7rLsO^lesXxF1t{`RT^XGq=Z}VXH7L}HG zgg$?6n*oRgEQ!zd+H?n9vjaX7b#s3^n7lY@&%6xOMBpe=8u5!iJb8I`cJ->?f9fe1 z1CD?Pn*Ir+i%XPOn!acfz#bs*QF0s@{u|^H>xJUpp2CW(Stef`9(B8wq$fZp^#QO) zQA`Kx(K2eJdq`=W>i>To!NTkM6e{uK5dq%WNsF@8iJ90$xEYl*6Qt#jIai}_s9|WZ zS9pO8O0k3-XP?$eg1YFeXeYK{4PEp*qIMx49#s);p6)o7lj5E7pNLXT{EAF>{!RdYU=VTsE+s)g6-wP!K|C1p`=SapyHIRfX-Y z?Kz-lmsz#&nk#!-EiSXJs|&b^+D%D48^r=U7BdCLQl>$E#_C1PLL94oSI@8BRxuv~ zj^+50aal#$K%RfRI9h4(Rbj6qg4bRjYb@vrwvR*t)1g>qVbY=4?sA*~IJ+cNku{gz zI?(IOZ0;dzqsqDAWo8CP`a*{O-})b3p1nT5n7NH%@ziNBam;Qmb0l7g5Xabh zd#l(iUSnz?npRe$3ems{*yv}NKm zb#Zq2=KSKVuc)yxD=K!evFC!U3CmMWulOJZo)Do8<(}GxE0jh2kn)Hx12H1JVN`56 z&7aN)_XD%X%L7Ku5d?edasxQ@I?^Be1`Xni|PqgxYWQkBrMEo6oXBQC|~|<1>iyv~L1~dg!?7gCg z8B-RCl7gG1qtngnY@n#lkn({7;H}14ibs|ywSRwb4{X%Qf9-8@t@5(V&)a}Z(#<#F zbSN6+zP%TG)@s%`0g4=FPgbNW&W14;p6S77d^*#-cU&P!<@Ahjn~bSiV|Jh_#TWbk z%tu0p?3Vn0-R`q)x9kF!ilwp?&C1Ed=srey>fc41`pm-3&IgJUmcU;*e9H3X} z7!u(65_s3IF&EO0{hv6?QX`>t@u6_u^pMi=D**3%{x*FUu79N>tiAHhv&jG7efGS% z{tv%DI@$UE@8og({}>WR`>=-lU(?9#I{tr6MwouZ6|V$3p`%~)r(EzR_~S1WPcVtq zf}TaQ`aKu<)=%dGTqk~@HW0Vv{jW9i2>kwgh;cH~=l_(}6*5YVerbb)(ziFB!VB6wVd;QP3t8Lkiy{G|?<=InZT|4(Jv|e9&b8K$# zv7W9Dm33`042?EmUq!z~w%OFAlXDf@I`gxs z8>ZF2{PM%A58C{E@$&VnJ2OBp;REq3iaX`MW#!5=&j;ZaU6+@8dfv#Pyq5+Cq!;u}#Q+en%D%x4~GcGBfjo7B8h$ zo31T^MHJGEfwS_Qb#&j}irs&+?Psq4FAw(L@DT6<|Npb&lareN|M1z)|9>}6jW5DS zbM=KAL~mT<=2*JDY~^n+U;m7TBnBkL>_(t5yFrqnNFO1tCfX=Tr=@FqKOvH&u}=9Z ziX54o#VBSh)tOq|>>6m8QLEYzIqkIe(7BsenNT6I&U}GIk)Begp~Zg!+%(jYk`!c+ znQTE6VTy371Og|DNA5YPWfck`OHxKPiUqcWjttm5;dKQwow38Bqe|WoId1KtcbJkm zb~9q{YgbEPfh71Egw8xvrqC@=>9n?UV%s;-x8uP@9tY;U)@NKozQU$4i-u~^Dsn~B zCyN|SKB)Ts5!dhJyy$-|+tS>l>b_RDcYJ;Rr0z8>OmxHOw>kxOg88*sI3^#H&G#}n zM5kA0=1PsMbe?ONgrdD?-IEIJz=ciX7{N!9C-}x(-{kRq=NZa#tLbzu8d!)GB11x> zO1mPzHA*L~DVO?4YcoZX7_5LKgzDS=swQ8tRNz2A<0B}uw$zh9C=P$7ZPkgZ`u7*O zvKN7R5CH<~oP3|}hWB;*YdOlj0%KiZJ@r-Jsx@_C1GDx|UzMe-t+(6w7EW>2&Q&&@ zvEJ+q=X`^Qe@JYNInLt6MmFz)Y%sdr!s*8Q$fficpT_+kAK);swx?T-|LmR|A0N)d ze;##r`@g$*YRW)8C60f|!lM>ZJy5)e4DVN}%-?m)&A7AOZO3ikTgC-$8&gM^=z8Uh zsCDShgAK=zGa-Rru^1}7)TMDI$BdKTOtRWCl7DVjbxo@(1Ud6|GsNhGK1+9sXR%?| z0m3QKG4!H`-nXr1*pW)_+i4N$Z_Vnq&;uA7)t8U*;H| zuD3>mVT?(#bgL#5+1FO}@Pw~rTOw2%>5~2Qwd21!*4LmNQClHzcOTV0+yg4+LZ4Mf zeIK>cTf^nRBzJ5;X$cH`P3bFL)*$I+I=rx-p&*KBtv$Uym>U5M8RHS5E^G3&q1ox} z44QXYn$4@Py|hv zqwMwK4T#-r-p5vC`wc#b4OmlmXWLv}UY+F}AEM%`V$7Q9ZF!sHm~ZZ2w=kCxu41HF zcc-w($9NkXg(bNEa+?HahVDo>83#`8zuB_LZ4zbM*k~7PKd1MS^OY;pa?W4t1ABKg zf2-qr8*6`LhW6JX`k7v@wL@;)|GAdR+x7n(9(8B@KPSg0yZzr?Jazw%nROj8k$W9H z&XlGsL4BwC0?&%uP#K}HY)DxpFbmlblS&{)rGc5iE>v-bJC5!X_q!G8jx|ajr|X1* zxC^Se-4t`2fCR3aEq^tHejL@}3b@%1czo=YRw{qRR6V0ySqA)?MRSIJrl>bqu2Lnb zg~_|Wm+aUsr2L^gHU8fjL!6KiWgNEG#=`t>NA>(qCr3xS{7-lC?4e7n)C#I^-7zz7 zZW|qBBvwoTr8vCCBM_ZD`n$OIPmCds(I{pE6P-%vXdiKivA!`i#d7St$24l~AqwV@ z8hU?{>L9fIg2Mmxw1eKzc#0U+H5E!I1&(4uq0{P|^*<=#0I{D42l~JHi}C0{{U`q^CiI{LG{E6?mTH@(XnofaH)-p;&H!JxzU#;& zZGHFuv>A^RmI-uz_DZxmDQEglxekc{ADAO@oc+DknTU`@aIj-)yJz?8o=5Qf{{R30 N|NmEMzg7Tb0RTMdA({XH delta 11320 zcmV-8EXULMSmRibJb!C*+c=hJf7Y+Sm1nDy9#fVb+nLp^)K=O~_xMi7aark}n#%Ug zLgbNzF$r)0P>wpCTk}J9|J?kNTX>KJDNt`el880au}I+Hb#UG|2n7iuPA0$uIur+I zW6Wh|ij(-8?LFOYw|jbgtpDwHyY+v&ho?v193G!OJ3Ku;Ie$Dk`KEh#+FK6{T8}0(`gA?Q~lYJ>uQtKDGTn!Epv+%LHKl{y*$KKb+bB zN6&Zr|6ZOj6MvE=Kj8tyqK7_yYLNtwpw~hOp#c_f4Jqp(4kIEYpLTBkBszrYuXHF( zG4*grnIMw!X%CG;-XZMZ=1(FJ5|0QS1%iwMAsNRbIG{t3#@UF_qO!!J9tttVd|JFq zvpBwDF$t$VbTPbS@`{51Ds_QSkSoq6M9~%C{$A9&e1G6}K_Puw0;qOma;(YJvK{GD zoQg4%a@~%I5+g%0DX`XQfJZhQMFQMrrTmw#v4{%tY z5(Qlg7fPaN8N}$hFFTN!BmgY-j z+cDoRXiO;l!s1Ldpr^EjP|8_~M_9t2nUJqlBX6`|B=RDyn`{6v$aBJb=wO2RK}-e* z_GPQ(%zDxJ+1YPtl#EG;MGqae5K`DLVKjX^O`(Ub!OV;*meDu#H5Lk;i%#m7X9n6; zjDM-qe-D`$1CHhRigDRPNB@3$a-@o}(N8dexQ9+!2;DM%L+D5k*NjUhX$zr{xtc}D8;$fY ze;el8KH?y;<}`RXB$UXh=5Yp9`w&AY8GpC0Qcf5ra(WhHAujdOh^df}1fl6p5ON|( zh~pMQlEuKWS$aK<0lI-{54APca~4DArjUyj9ZB>ewJmL6sj97-Zom3KgcSJ)7!Dzn zJ=DHr{csFX7DIa}_!fIowcdB$O0ZEg90bdF2zKWD%seIuk&b|oK%(jMaku-Lw10BC z{f`WUTPjSm9y;tMGu4jrT7Hh*)Y{R8t$EpUQ)7o4Hs%OqcQKxpChs$3OTE2MVvyhu zKhpw^p^sI1wFHrSb}tmcyD@6mf4>;gES^0eQa;-RDH{Yk!^ESK^BJV|OK>Z#bCreH zIrYryx1W<`Ejp|?2tm!V)B~v4j5@{A;A6*QQ9K#ghm;;Wc2-K!P zgd#i5omOja4_(6$IM5K3e8?y$!7yPQkWg}u6jp3hvLd=wVzLsm2^}G=xqk`;g2S+f z#!{xDcW_YUU=a(&fyClQC}uV!ql`n4vPfeDCKULAf){9DLCVPlOUPA_=|O96&uGY3 zSseFGhkEGUudO{4SR8BHstStfa$Aq9Z?p(AT{)g0_<)l%hF(iJpIzzKAn+b?WZfVX zM8Cn5GMUqyJ&iIJOsK%rn144Bft92J{kezQYUSIyW{NpZKmsoz0arq{ZqWSQvDG_b z5_a-6i<#ONw#pcD=%IuBXEspsqWv{1lefEV`%MY&w&%Ix<>=>j8W9nQ(Rhj|KxFkE zT`E$mpE%OE!YLyw8dP1SmB6l|h8HjcaHW1~2qMLy0%NDl0N`p}NPm(uO4CLC#q8+s z35~R*t@NmiB!P%vTfiM&KBIwJn+b67;<$6Trd_pW|C5lU+U|RB`R47ben)VPP&kJ0rd~T` zkw8LXnTdUr#()JVm4CF?Y9XWuQYd2-lzZgG$B(FU4Z2+CGJlIceNufez=A+n!R$pF zr)iz6Q6Vw)079QWwNVhh}NBVHG3#6LL(EsG$g+ZUlcDy9ph!zd$jY5@i?iHZzjMwi2(hsL{b`}(`Wim zlJv9TkbFSxpacdq(tn$-#oB?PMS?NJNhyaTZ@)}&1I+xbM6PDq(nD<@b@A3oFvTN? zg2A*_D>r{ORe!XC$H$K---YfZb{gvy4p!ZoncJ6zAJv(gdc1HD+4qINJr`6jRV zyH;)#HE#d0joRU zhoZLH)1Is&qMss^qnY+PNiRMC3RdbV8OmMg_G=4)W=6ow?eMaBzBh zV$9*~oPPr6tSLyf8rbfk8-O&|_z9zLNdiLRB<&%Z#c^T0GCE@3g6I@Gv#OD{L<-t} zHsUNxOPg1{m;q~N%*=MxuwyM)LjJ|`@h2iofi%uIj%Rw;GWGz*p`$Fu zyk4z^kO)}{Jyd7{Q41lvVj4<-a1?1A!0{C)RDS|LQ!q-iYb9Xmf<`1%1WjSNl2!_% z84<{sp&WaXWJ+?7j03{9YaMHg`@3ND3d?a1b&PV;(Y4>QpGEF5H_LQge=W7wZopU! zn0os-L>N)HE&E0RB2o2^?jt!S0$DSaaHX))39ZIw>`GU^oS`9S3A!DVaBS)p;BT=& zPk$KC?R8HJgPmurDTEyZv!m1jA|z00aN#V*BvA`h8Gm0FzWU{?GJGL9p`*sp7hS8^ z2F08~>%VoW9Ikr&MoTvMJA_h6GsXe0G+VcNxku(tz{Cf=VFGHUmYj_1yo+Y6385s( z5+ulPdd$}F%i$jx;W@sJrx91eqFQbT6@Q!spNGR5+xz6VIuh64FY5W*+S2%p#Maym z5gJTAg_>r6G7D;U(%r91cKNcoyH&)Itk_2NlEsAEqKY6p!JajgqJo4oD6WC*Cpcp1~9>wjYo zC}qTK1S}EYaEzE71MeVfgG8@??!Q&!$Mh8<<0UbnBzROKJ4D#=H)Gm>Wi;~kvUx36 z+ByZ>G+qIyF`&ciEn`BXqeFmcsz9piDj175!5^^muXi9aW?zGj36?h z8>;^fxLls;%t!$hs4qtiz^sUHXn)viIEDoGO8-24d3Ev2vwr0@s!m@Gr-(pU@kIV@ zv2C?>4Md@dl~ok>R42KBjmqg}ioln=!xFK5#CU=DlBpsbf<}sLVsC&;0*-S~3vRh6 z>AbCt?OQc`tJE4ZfFZ9|u7JqSm>~vQFtB7;FGU3~(&M2yzU!bS;6lkdS$`ZURy6^x zcumMgl>An})+9kSYQw6lFtr>*acunJ`+7?!c#1e^s*+I$o{iB(ua%fW=#Z7Zt`U*B z2pzH{$taOi6SP4FnPglXL@Djk2+>Gw_;l?FEX^l@C&*glz@ZQWI%_>P)vK zq;432o>`^QC;}oxmVX%0cc74NPFIB*OyOukSa{^Of{r_@XL`^8bO72?Ue_ig20}@A zh2o+pxJQliAr5Lr9)Ix$0+2tAYRVFb(pa|vQEb@tIe#l-6SKlNj@hjZn34s-s)g(r`2IzzFHx;#fbH3b~G-bm{i=ZaS-;gTnX!32BsL-U+5s^kNu4P?Sv zTBe1bIRJU97GqfhidXj#YFVkkU<3vso z5h4SzkHUE{w8U1?)Riyx?j>62}lJ`P8;qbjEX9v3xA21k}!(c&`T6F6=Wh zn$@+dJgV)1Il8_&Lm`gi4*EeeO0Q*a&L}qRr?fGR?VpH{c~8aMuIAc;iG@HS zOMg?w)t-=ARG1|x#@J-YiU)8(XNr~6HfT2Mgv{s-wTCjRkKuU6#_PwpImi#3Grj=p zb(tL9V=NRU(2?Ge{S;-~U9n;;`IHhDLOOPWAB$gZoAKrwUXAA&EfkPHmFbM}G@SE370m12kj2)wqO-#zZ3zIjd1UkUGEu zlrm_j!8FyYrzgg%dMJD`#tQG=GbnxokSb*5nigonqNKS7pezhCF7jolZtB9E^mEDz z#$@-DS-mE;v=G>1z-ySH5)h(D5m0}sVuLMOvHM0KF^LNgEY(MWf#*2aphh=gqJKiW zVqaP=oAhWRyORAoq>ULboPMxI#FC$lr^@jJDy61__tk+#^WPJKg13oBH< zLw$s4k-Du1FmGR`SW4iuhyL%A|NP_c!PEbE^5k7N`1fD`_~bu3`j79P{>Rhb^B;eF z`t-?@cYk^P$7iKkcUVRrD>5mfpDnlZ_`cTMS2;@D5 zKyEekaeE<;+YEL5l0qCm+t9`VNNnO8_l%Xv6*C|&kO%b@rxW!Fl7BL!j0hAd$`Y2; zeGk37x^QE^%yQ>|ID|kZitXKEPPJdn%)QBqpg^aL3d;^l;127y9cK1`qo{Z{bEt&~ zsziPrr6y2<^%ls-=JvDN9AWgY22KyP8;*P&aM5MLMeiX%^l^oRerW-qn}&LB7}U98_~yoenxAh-<`#l4 zHxIMiIH2+lLnj|3UUAdt#BIbPZXS8Kah&0%QH5KKA-sc#!A;`>H;)GVnqvR99PM{k z@qJ%#MBnD|ds~Rs+e&QS#*uiRE4n?Vn7VC6&}}JRZu984&3|Lzwi5Zar8u`QJgRLg zF>IShtZg2jwuNZ4ZN#2E?ntvuV#;>WV~;s{YzwhsTZs&N7%s863mY(rO(VL#@c6B5 zL~Csg7dMQ=+8h%%jCBPqYg#*IJq^ zD!E!B$DC!OYUr)cQd*j(&1GHoHV-0&wchxm6m&sP$bX9dLKrnyD^$np`{Wt-<4wk8 z=c{n`ly`L)4uU<_5!d{x?IcPv7G{c_Sc(}p&&#}>aKV9i#jS+#WmwC;wmM5;jE02H zx&m@vod+FO?=vli8YN>g8w%J|HYRhqLFt*L=+ zraY)`WPi|N1vIj@uk|&9ZM|Y`bFE9eF2ogua{b3^+IH_*Qr%0(Q$a!;HysXUwAnPO z`*s7V>=d0^s_|MAja^yXc#UA^k3RqcXqMESO!kVL>dWi=Qpd#zSzHv_gowqBCo@6g zb~Ltxp0P2eQLM?vOj@w&*){rRo5`QeWxGQiq87v#k3)L{3l6C8)yn$(8 z)-l1UQJrgum$Tzqa}J;(bHXFb^x)|27zDUvilz7;nZ8!diMUu#UGvIY`hzQ7ZsDBE zvL{;}jm-PC%DTJg?7NB1HVCvyh_;5XtvKyxrRdX!4w%m_%|h+0eaMnjao&p4yzDkb+NnRMTdSR@S5r8$go^td+EV)x+U> zEE}3w=A<3avUW9`yy*4-Vn#<|lOzevPObI(yi5>$-L#&^#9OplZb;WK)VIOT8PN)Z zF~{mQ9noeZ(S4XRoXc97&&zLXXQ&oKW>Q_CHlsmA#7*1h+9{4q%-^4nz*13nE`RL& zqC3~lBUA$yoOZ7qb}u)RiA$YpH>yq6;^QiQBSCW{{5%ub%s3XC!It1ng}ny;^0GO4XP4NDl=JRrAZcJn}9-VpZ#<9QgePQ9cQRbptq2X0}Lm<|5LnPdr; z7K|@a`K*622c!g!1c@NTZv1jpDt~U<2F)gons0sz88<$k$aDJL*y+^3y>ZQAUni{a zp_dL8&d)Hr6HxJItb$cJlWa~0F>4b=O?FY#WE(~EL*IQiQnb9Cbgtsz8T0Cd#Gb~o zIl4R`i&PQV>0aTjEAbEg2=Xerul`Fkd0nQ09>mc&Lpt%-eipY0?c|DUzleTnl=)e5!b z82X$+UgAB8+U^Cm)u-Xi!(x`_$0haT`B2Jv_RngOhH~y=qcZaCF0zy?J>hO~-*lVr zcCs4?LfP!X%rP#Go3p`9H-9mrtzM|N`5kOk%v|!~wT8lmW*8pxnnjC9OutqBs`IaZ{`dDW3vd4Q&;MCE zv3E6M#1co-xo?H(v2#YIy23t)#hTZU0aJwIbc}5-j8(|`dYNMuWq*cg%1Y}QRAZi6 zbXnxsG!(dC1B8zDo0|5tU{AQ_GP*uZocqYNa2Ao_5Oih^0XprT5y=f_!9I{83&;EJ zA=!cA&>BbxI^lv0W=|Kdzb@C{*^+Z|DqX{{M!&q~FrT2XhJmb}_otsi*jbb|)O`#h zCx(aHSuEnBynw#7(SI@aM7d8ZBN5>c8n1?%FmV7T8-@2g;A*1ozUhQcxV4=9v03WV z*d5u#HcofPI89-B>BIwhU3sO+*p@#P{CjzIQ4fW)OX<}X7jkYrQf&oY-1fH@L(>>9 zb7B%OOHtVF5TQZ>j^>C-6akflL$SJsb{Pwnlhy$1m@JJ%=zst8-&`L2$QnSJ^};%x zfIhkh2~fGO>4(XTq%#oq)t63!DH(#09oq(Q@$Tr?CUHO^FMPmB8pD3>h$}>}d=C*} zrlWwU37$uxvNM2EmM0&-)x%ZnQOSweTJU0W13lE%2Jo_*9~Jh0@?9LFo+l>TU|SVx zo6Z&HQJ0aFoqsgO15QRG@ZTYUteT|rL_Jj`ohXj%fS@+%Pr;&RI{ohG*Tx=K=S%T% z_<)X#icW-@rKfgBiYb-&gK8;M(nizF>V$E6H&2uxpo9~M;~>}lZ}C*kLcVY|EiC48 zF18k_0^gj!>6xA>gc{L2SJsdy+Gi4n%@-|@F^lFtl9PrT7Jr1}!ECNe4vsFD@98Z-^Kyu?3GfMl+k;!iZwMU)3N-_pa_KhyBqG_Y|!0j81q+oU`Vr)$k% zMwZ&XKVO{R4=#ddWUam0sPZ-?18j&SL%wJ-)RaCjm=()CuAK+ETDV#G`^xVbJ?me% zhJ0UllSv#Nf1fG&;N@+U2?&`^)~Fx?4OwK8lVXYpm8ZuY^oHvC`+3Azq6DY^iu~81 z{_)?$zg_;9ox1A&GkvC&Rs~Vw_~E}l?*`q&pnK?n*zNZ8|Ip8G&ziH$>Ap6QH#h98 zd>-uLR5zEJRa13pw$ClES_6mQ-Qf8}KvUt&{Pf*)^BMe{(EV0^5j# z5Gy#ne|8s-?oPz4d?IFxCt*JK6EM4zFZX)#Wq0D`F`szZWpBBo>@5~$Hp<^(U~Dae z%ZjIxKBKcpyR0eZ*`=2Fyw4PU&ZmeTNaWn5*je&q&&KC?ws2}^D`#|8IFU0~j{AZS z;B0){X7j@}kNhaj_72W`xyNKSIuNtT(U;Hje~`@sQXRg z>vxg#D-UiLNxzGv-^I-DV&-=-^N;Ty@x>;xul6qSs#9^3sP&Cw)HjVt|4if0zqn}g zf88zKUuFdPo!;TSVs!ZK9`DC=kM~w$xHpa1-b#G-?mq6%_CD^JAD|$~tco}L<>9UTs)z1zr zgPDO5ojgt9p}sN5X(@kGnY-E~%}ftv5%eo4s(DDoe#t}+#e`<%IsMwYy2zi=H}o|Y z61amps+EAV7^*iA9VEJ7!L6JHbSf`s?9BYWiZO*Hn#`@nsVd*l^1OL>e<#dRk7egN z<%Dq}r)8)^0~*Z~bkQly^e09oe30dm2?&+8amCq?R0TIfEv_@F^zU;MlsAq@+&ufB%kP;Z1!B75nk9 z0PpIgMcL}YOl%_DjLMk>()`Dqt5JQZ_0aTQ^$TQBvL)m=`?ORN)LCamI+LrO@|^uPk3h^J0qSX@A9=-?On`zAitP?ynf;g7 zxKb6iyZz>Xp4|!6!fS56ZMC?})~oKZCWJI4^=cG*;F*{yFqSe6@}f>b8-3BSJaqR6?VG4vBzPo<;GJ@@53Mko)Dq!!=Bn^ua-spkn%t$ z12H1JVODH8O*PI5_XD%1sslz%qvS*H;Gl`EROnu{e>+1=;*7)FF$XbbanwU6mG6qx z{0Oo>2F-3z!Fg(5Q$w!}tNE?|k#X5%>R6Ul>D#e!d=4?5_DwuY4?U~;wk-cFJ|9*; zr@#q|{FN8;tCU5e#NcM0eO6{G_2q1SKIXW{-= zveMc+-#m-_|J{?C|Nrp$(dp@K|KG>s`2R5^jP_v-_rJ!GyLJ4Vj4=I*D_%)9gpPjJ zf1h#*B*7nkrg(x$tTyy)H>=-s*~j|nT!8Du57Z{&uDt)XWFqm~0e1I})MYR4$cqzeNHkWTX1yN?7=^Si9;Sg*xHIE{6~4-$#s@5)-vc|WLo zbAsseZkQ^`NZ&nqJmT{d|+p?j4Q3D>+x~Iyz zhWtBdy}tG47$4z7JzX8j&&2t1Tp10(yOgtqgTR`2ic;EPonkqD@rNhp*B8IMx_*EC z>c{u}H)nr&fA#Y1pJy+&R!|Za!3#eqO`+ZLYndfa7Lutd9axogZ88mw#&BOnf4^zE z+2*E`a}{cx`PnoK)9PP-{{Gc_ZHK>n`TEtpS>l&)26;Bcz0%*Za%Gw4gK&$kOUpeY zZ=~q1Q?zXEaXSJRFq)ljw@KPUiyWXv9Qrz3pF5}GeLEFb61MNyow!*r!5#C9hxcSQ z*uPU-AO6gQ)Wd(1))esSNEFT}e@Vg&CSDOGKooHsH zGsJQ=cDuT#)QcVKc}aZ|+dQ}F8*UB{KOXPxCgXl@<)!ITZJ|Z-*d}N{e;^Bx+w@q8 zGBfLg7H_3ho33qvMHtfD183(s`{<#)6}xBK&s_gseq3O~L%<9C|0hS?f9Ey-|KZ8= zXFLDjeLOX~2p`PV7j787agCc}>GrafzrB3@6B?2jkQlRDfyV3>NrobQgt(e$qePvS zuI>GVNRq}n<)XhY<*)7nE9ZeC?Vg~U4Z1r|kmN}Yxl z3vkm=M~YLBL1wZAQG_YNf2m>!oG2Q(=cJZZT?ko{GOD{+^p?<(0h=ehuJlZ2?6BQY zC2xrwxAxF4n36blGh**+S4&`lB=`n|&OB76&@H;sX>I4kwr`>D#)FGI4$OJ2&$xtq zg-v6&8>&Ss$Q4Z=FLE^bpz8ZaT)&g^qPJ{IbC0U~THW69_4$jsSJ$*L(JiCj>J-=s z<~L^Jn0!n&-^=6>on4=sD>bsxd9Gm+iuO*r#}(Lt3!B6-f)6B5@Qt~?$>VwF1m(Ha zbUGIeEX1lKLqelUyCT0eN++!;xB5s+lQt+Pf0k|4g{%7a7r3$)fqE1H0_&W7pYMkE z4f|_3%Dn<%U0^-+Ro|*LbzuXu_D^4xrL3)Y+xQmFf!0oDHl4BF>=fvHgNJ`gY>he2 z;>AWb?}n@x-5w&{(e9}|jrt!S;4rYZr#p@R>>fXRb~qFNdA!sA?&YZo1ND?RCJT?+ zf1&k2@gg$3U#T)*>zJEyXS-_0UG%q%3*2^39cH5Il`Eq5p}P(?96!#41b)q8sEksV z#+e*5PJT1VYRgFexkJ@8t*8*>#M{jfqZ9fpJt&^V#ylP%oDv;FFM8-*+j@o_uJo>* z7LoqetZoZUfDd$m5yKrHKEA9wyK9G zd@b7&p^`|K9H*}x|JAX+2JMX63VFNxsP^Fjx?(Q$S#{R;Q9He}z8sk3jtyN}q6faF z^p!4ap!6~WUO3KB5Jj}sUS1!}jR1y>@rY2DH2K=le~BzFh;Ar>ZmNkq7PX@s^#H<4kGF64ZC9FYv6m4V4iJ%Z8Ly z0<(|}F{uP%R2rBG>_Qc1xZ~(PcE4Me?pUMrak@?@h`XVh+f6aY2}t0&+45II=*Lkl zu7DeTz~f`Dv{EUi>KWn6e-hx=ESfX*Gey0@a+NAcEll41z2v}lA?1(dsnP$=7~+JC zDC4lbHWuc8JF4e@IzBqy<$t=DXAfOrC00;<>yBA@bKB@3Be5b1D8=Co9)alO(ci_r ze_{-Aj7BjVnCMhONBf9FjP;GFDVAgBJ*H7>4^c3O)XMATw>pF0_<{a!{$e~j zQ2)t)iU~a^0S$0?lcn0GDO%rk#BJL8t~0+C diff --git a/charts/latest/csi-driver-nfs/templates/csi-nfs-controller.yaml b/charts/latest/csi-driver-nfs/templates/csi-nfs-controller.yaml index 7fad4402f..b3c880f28 100644 --- a/charts/latest/csi-driver-nfs/templates/csi-nfs-controller.yaml +++ b/charts/latest/csi-driver-nfs/templates/csi-nfs-controller.yaml @@ -71,6 +71,9 @@ spec: resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }} securityContext: readOnlyRootFilesystem: true + capabilities: + drop: + - ALL - name: csi-snapshotter {{- if hasPrefix "/" .Values.image.csiSnapshotter.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiSnapshotter.repository }}:{{ .Values.image.csiSnapshotter.tag }}" @@ -91,6 +94,10 @@ spec: volumeMounts: - name: socket-dir mountPath: /csi + securityContext: + capabilities: + drop: + - ALL - name: liveness-probe {{- if hasPrefix "/" .Values.image.livenessProbe.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}" @@ -109,6 +116,9 @@ spec: resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }} securityContext: readOnlyRootFilesystem: true + capabilities: + drop: + - ALL - name: nfs {{- if hasPrefix "/" .Values.image.nfs.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" @@ -119,6 +129,8 @@ spec: privileged: true capabilities: add: ["SYS_ADMIN"] + drop: + - ALL allowPrivilegeEscalation: true imagePullPolicy: {{ .Values.image.nfs.pullPolicy }} args: diff --git a/charts/latest/csi-driver-nfs/templates/csi-snapshot-controller.yaml b/charts/latest/csi-driver-nfs/templates/csi-snapshot-controller.yaml index 60f0afc09..448c9b4c6 100644 --- a/charts/latest/csi-driver-nfs/templates/csi-snapshot-controller.yaml +++ b/charts/latest/csi-driver-nfs/templates/csi-snapshot-controller.yaml @@ -67,4 +67,8 @@ spec: - "--leader-election-namespace={{ .Release.Namespace }}" resources: {{- toYaml .Values.externalSnapshotter.resources | nindent 12 }} imagePullPolicy: {{ .Values.image.externalSnapshotter.pullPolicy }} + securityContext: + capabilities: + drop: + - ALL {{- end -}} diff --git a/charts/v4.6.0/csi-driver-nfs-v4.6.0.tgz b/charts/v4.6.0/csi-driver-nfs-v4.6.0.tgz index 05d523174680f2f287058c9604cc419701dbf382..53cc4487789a83be466474c0d2ce145216600a3b 100644 GIT binary patch delta 10910 zcmV;PDq+>#RrytrJb!C*8@ZL}eCDsfrLr~lL`_l;%L#9}QXa`O(VelZ58|VON${dex<%jJ4x%`q_c=VHKzM6X3?Apy(Z1lkaaB$u@@CES#PNu*;IuhN} z3Ffjh!%_In_MTp^*E=~r*8lDGde#5-4o(igIXFH!I(mNi>=@+e8`Rq( z4z*7rBT?}nY()U?HrNYGL zfF<;ijYXn#(T<;E`co@PDgC99d z;&h2@Kjz&z4GD#JEKF1fdP-Xe#hk@>j3xY)3He%e@L-% zAsKeHtFUCFAy|m=nf{oSlYPhzq?mVkRU+o^R0c zd`=|sao9pgvJf~nORuNVL)S3tqqe4c&O+#1XG*c+BavRDw&e{hR$r^G+pj(nAw~KE zMt>vlWgoRK*ubAakc7})3BIMCSgrT1_u@6`hJ#=U_rcDbTbPF=BC?=eL=b8IeBA53 zCasij|1$wmY~{yEA070fxz7&MuiO&5uD8R6y*b5lU1tXkJ1b~ow=tfUX76)sOZ|G6 z%pk%af1w#1!yn81Y6T{DbSE6axiKo#e}A_WQm>xfBT*hTA<7!X&Is`!mwbk3-5T6l z>s%J$RY^U!y2T;S54bwq%3v$Axra`*;73!fmSm$rr&nh}D|OnEyRtZ(fhO>rBC|=+ zN+v>kWQ2s$8MU5ibe(h_tA8tf0;oio2Guue)-(!L&D3b5M4Cm|N9Q9XCon@eNW2PBlsyBW3HaC5uVWSn zBqWxJ*hg^)Sb(xh`mGj1YCHNeM4qR%i-@rgFFt)joh#7oIv44$=<{cVgMR_$dBV!( z7i}EJ6}6O5Au)9TLZ3gkk>}lD=}+!^njh>_yZ=8-AdG>Fj*OeSf|u<7gTte0{O9EO z=yi&_~~OKYwnubhB3Z6k* z{ZA4NlF^8KL~Snz1~kzBHmHT#fvvq^69}VR6+=$EOmhRw{97qW^}MBz+Ai+m{3gN_ zk0J1ev&vVg2dwTxt3iDFgwkDDoWxG;cUgc<_h#nyWfsS?pQ%~th<`~}FIK6k9gLU% zl79KS)^8OzZvU~3+8^2$mYPj6%9gGeLO^=5kz{|zQRr^*J0dht+T@|0egjUeW@TaT zduMzdPc8rVdEgZz6b)j63;F-S@yW?iugw1sdk4>tcKrV?9=n$nUr%?d!>aCB>v3V5 zS_3ruT5W63^IFBE1AiP71&nG}eHwU~9<;6r4f^P`24*V)i32RL=G&AqS@gaXVi{wg znq3YP5(dCa{Bqjs{K>|Ua7;WL$DBgQjkn(4w7*|*rL|4?wEfFMlZ3P^ijtcHy!=;TlR}cgQjMguBtyv z9k>}X76PVD97hNv3O6}!6d(}g5ZOMG6C#lHREVM$md7F0_%v~$%Xg<}#94%HCd8kZ zZ!_>WSfD42r!JePna{>C))@Sbf!R^!01*$WjH?ty zGuDVu5+xB5-*#I&xG)lUMI7FD`inFcYzcN3%-bkHMI}OZ&f0${=N+Jx0R)F z`3bGZ6Mq6UoH-iR&Hi*A)cm9u->!)AMLoJ@!jUZ7M%9+tgxjWyAyK<`i87X02VEK` z2xStGoM5T=85t?Iq_k`{(k&GkVqYdW3}=Pp1ijG0cv@7GA(N8|3NE*-#a}W6R3to4 z>(Jk04k%{CYy>P3V1I&`oB;2j?=3E`e;K@0?0?7L3W0Hyn`{C+uCN^`ZO9TD zII*l>%eA&nCN_;@SS^(vqerMGNzr4j*q_ALKvObIXaGE%6&Z;YmNphpKdhqAE)C*z z{)HJqV50X5{{pyFpXtnL0VSv}$2GvLif~}Wt3QDV_wx`feR+BQ?r2c@8I`B6LQ_N_ ztbb%8|2EsU+PVg!$i(U@ih9bEoWVxgpfz$Jk~ zd`K&9sVZ6cwKBGE)$pxRYuo^ay;{8j0y|@d8ED18vSGaxCBR6Jho6Fd{OebfMYyskSS$ZWsq9q;*cwDUKjK#R6`90n|(jPfhG@H~^i~rc zflw1ViK0a6YzI7&8OLO_laFH#M*UFq+dB2z)wnXs+HVU3uPE0}pa@;MAk}KvR$9<7)jPMt1KGDK!ivlqxudN(Jeq#sKI1`CWM7Uf6MrIVf73KHGe>dpgrYP zYcgOUl!liXE{cOY%s3a}pnBqQH?Ls;=~HW_tUxHW-_{Tct{G2Bn6GY?VLETqxdxZ( z2lES8w?x*otbuFRO)ndx;mocbuBZZv;PL}6#m;NMHe5{e(#+J{OGe?%Xnsw-%s%X+ z_wCx9-~M&Um$jrY_hpTNwts~4e(Nw1HKmbxL*LQVF`3KkOBWd3qtYCPE;bUvNFqu? zwTX#!B^eve2v8HyDqFcZ6(+*H;a{RLnL?KOqPw5qDWE6`C5givvO&1qfm=E-ntv4o z*HL*Bk?$B6ONH-c49o0m*S5greydqQ#?O(9M`fZK#%wZcTu3Go-G8LBhlOB1(IPcR z77@!ki}SnM>KEYM5IHf+RDhf!s#itLiB2q%6Q#`4RY}aGEh$R~+eIw&ptbfAP`#={ z0E!~aujh0qgLXR3eVgJnC}|!eOhOHL3>37ZM=?pID0a}RD3-33vpP00D~!XC-Pp4N zGGka3H3}_aMHyQt{eS9N<;kI(&T%YbE-z3|O@o47Z?yG=92VS*j@p?OXj zRr-Ol1`=UCEwjwd9D=-2i?ON$#c6v8HLoJ^eGp=lgy_j|rmPtfV5|0Ext^P*(u=WG zN^Y5_Xb2-kScx!Q%sE`_r?m>?V)x53PQCc+6&SX2p!t**J%4OOxK%W#YwdjGfSGeO z0>M5aGGpB$=iTl;CRlG72T;9<^HmRLW=f6gVxfXF1KB|rZ{EIgvF*1E;VB~likT2Z znF|8^gcCVKM2G~$KJpilv=h_yh}=!q4#3+cbhI|Hufej)@w6obUTm6Dvs~g&bg|un z_pHXjSamF-bAO708O0Itk*NBV=f{G4EMULD#WSfkB4G%D(ob!l88VIoYx!d(C7^cN z#RoOGcIKav38&WR)uOIlmQig7%<WOOl2|FH zAxt4G5TZKpBIE8_Z(8dU|4zaagcZrWPJh&{87347pn^y;g`)Q95J70UM@BkD z(AkSsgX>&Ujmh+CKSTArr&xar;q zq>Sv-g(@a^EZhk$eX@xfsY%SK^8jkAk$o7>B#6~@$ihBwfZa@o%=Uo;;!-4+?gF<0 zRHs1df)0i%Ow7D?AzdV|SHaRtA*P}eG=DDM=p+phVZAWg?__pHHGijqD$%>7pwebL zweY>+qnQ^f-JveVw9MSr16Z^#V=N_b+DHHQ$$$Rwckk(6o;-Qq^ZxwnAD{eZNB`ry zr+<0+d-}&8pFVx^te|&rS>R0mg_xCi3uFYS+KY0(Yeq9mB)2Dy=!yGCfy?;V_ zr?U7M_sqV}>O>S)$0a7`{bin>qE_u!M(-}bw{~Ljmt}9@k>f^e6*>JLy*|yH|`lPQ&G);v_YEGmz_@3CrI*? zG9pl*IE$Zi_dWFT^1PV)WtKYy#DBpDGF4*l26L+8YG&@W%;pMo%&4&9Fb7@`-4*cabTfsTsh~>b*I8-;MObfvbZkXD%iR%1|7PIyQM=~IM>hpCpX-@p{l9g!uzCoU zkB#|ze+j2wP@3s>5=(cfr1hz!TS^|?rHihTE_w$Eq7N%2^h-+sZJO%YFn_7DVftp{ zM9s&WlDUQC%jRj8jT0(wF?I4@@)etACvGDbv3cfU<2=KrS%q87A-si*!KV3v&9ec& zrrf_RXZzh&e%}|I(bqhGZwuLaTglC9oQd~X$?YNK)NLz+ZcF)c&9md0=fZ6z^KDCc zZeMs-+g5VenrEyv&rjPzHha}7;-yslS{ zaX;K*Tz0;)U{8!Wj(^m`SP6n1-jSmFRr^VlW-QDU7jh})!aOh2e*7f|;+3=#CYE76 z``YU)g>f1ZIv)y1V|5O|Py~%RAj)WdM?mlZvNI}ja90G(p-Y!{;exd&H&mATid@F! zjx6(>jd)E3Y(3{e1EYgxE1-$BeWh=jYwHzjn~Un&RV6NKlz-YkPShP%8ys+y?)CHGP^6X zju5jOPv(-w?PzQZJ!2D0gHW@Lxw3Q)s;f)%*j3Pbs3}poU@b31QQ@j{Sk}51%4s;c z=+;Yl4KvTIV}FEWV>(v|FBQj??h1fLtdJg=mj_30Cm^86rdW*sndqCf3K;ms>dJvg*l}2cz?Tt-9_mJNtIBvkd_?Nzv92ww0&7i7m2C3uNnd$HTNXcDdl` zoZhxYaTh#%9jjqmcEYV#2HUU&z6kCALF@awV-Al*r+JV%=%9n@cd)_N!E z)fA2`yIF3FyTosec9Jo$qL#8Sn{;(g@j4c}KEl5Rv%U7{{^{U6l`Sb1*)$ZLV(U=W za^Ak~;eT*FmWD2t1!V`cu3b(i&(I!1$mm!!DUwhh)Y=^9Rg&PVuJtr0-jda7L%M>I zz72N4h}Ia4Iab$nM9oH`aab^%i%Ofv6}PoBRLLPTr7lpLQ7<6ky6p<>WJe|z@6QL| zsi+1Qc5%^NXy*Z%flE%imkztIuh3l4FYU@tJ3Qjf$$St|u9FSLc#Qnf{nue@PFDXNn7@qHdoB1T> zlYem{S%jqpN@)LshAetS<*K?-NCJeo<8C8%2v#-(5aZw7Q>kq2b{e z^ZJa$p2o5@x*Q<0QW3a-UKXv(=@0z~@-j@uges--$y1YIK5~|v*4r_#r`qe+XTiK~ zTxcXc8CG%=JYhVyOrJUsuGz+j@wxJWihq~meiBhL&@jaJ*!z6%7u%K^31o}s8X`> zgcqB;rrW%?lU>6Q@@|(_jw#Z(IU8Je6C>K{g?i2JU@KGRiWjfdG&VfL$e7nGSbxT1 z29@S16OYut%g14ECajQF;FzcMOt#kk)r#2KZ2$h(fB!&2FuUO2|N0-rb^iUY|NcH? z{`J5A^*<{Y_AY0PSmtPu`&Jl?3uk1?E9`=pt$BqQFhw|wC)n1)Sck1|Ryk%_Wth6E zw2nd5)~Q7oS&dD@fip2c=y<=bYkx-%_JnJyqwCYeX^dPeX8{?FKv(7vpv&$VmE1@c z>;fqgf3jaZBs)|RS_APx7hI6u{ORJ&*X0TvTXI27r7IX!_?Oci=28?kaFA8&{tRO9 zJIl(379T^%k&)qc7PGu4C!lX_c8ony?y|~AKsfj&s!=SMI0RFT!g(HWJ%3eq-yoq2 zZms5jtk?Q9bqBVvO#$5rj$>F|J8?kXR9~rcwxv&r{$5_5S5x8aQaY{0rIK5ZRC_^} z_xBt~zhUYM->dw=t}t~fZlTD`+>i;=d4gIiQXludz83EXsV7{4ZT>?zXpY{{jr zmOtG+{hy7;q6OHh11d?o+Z>hZM|3wDR2o`XU50)1)SqoMg9%w_`~Gr%b~gl`kbjN#YOTpzR}8QwlMK1C z$xvPSKyO|xcZ7EC>1yG6`Pz7F+| z{~`Y4;=kursy%BBDyD)b5~+# z#gjda&+%;G)XrAU=&W%fXQ3XG*BnuQGXI<9_&3ewZ=AQkl??qRx%f@8?wjP-?=tDv z9^5XIewRtV%bDNh%>zg}zd_g?3ojp1dT?tXFv!J@_1sw@5zxARs!%?_NAH80$cXE8J|J&>J zD*rt=e*XOVHwVWjM@P>OpPd|?eA7GZJv%=72KBZ--1#RF67z3*jr*z&?vXs6=h;h9 z&L9riECMPkH>t#;J3S~}jbgHYMn8Q*op&bvtw1E&PyP9GtLWI%O|KvXETEIS@IHTT zefoq5^}{3p)TSfR3Gom@(MBEgyLMeui4Ik}G}Vej91h_%b!8A}syM z&$@$jU*kAlJ`N!{mN2$SQ--Oyze!uZoyGRsbU#@PvN>E~+$RRY8i#qewZ*JFF@Wfer*zV5!x$Uql0iL z7@`1y4wOX7oI!LX3P~&hNrhxUh0R^7nTM=F-oN7a#D|x@wv;ZaR9k*sfMqDtGpduL zD?HLS1{Hcre<{sfWs>H9riZcs1|<^JGNk0cWTKBkLX-TQeq~*Y#GlYN^feX|c!6|O zFCJ$hly4yFM!I1ptqKcR_;^WYr{?d=5K~y8%hYQetM)ZLFPit_gjw#f>RiX1Fizww zPj#pvqq&Afa`F@Xictw4Wxiwrd}VE1ayBAm#m#VwtAr~1`^+SNr7s+!WFZ*6wXj1A zKdwb!d2Fz#BN^_kt-EEh*f5#W(GXFyHS|*5Od{*RCmY?)d zyD-1z`ym!^1u;XPKhM2e1iQbiwZvoe`E%P$Kqz2Ee74tTandzA;A2sB_qV<2i^KNZ zkDgix90W=ue({HYCoj*=u3ilWPaO?IzyWYi(?4N!d5io?(-(CD*Z~ASN{&6lf4x*< zy-?iS(O8i+OXQ1#!(Ojc^aSX%Isx`5iWy)vTSm=vA1SR<{eMR=|GK(_O8huPfOB=? ztZjK=rnV4nLgm~7Y58N$)hHY)7#i#qULd_(ETKZMPirNAUR89Kv=iH~f-d?UQM-{3 z4$BDF@*HG+aBpZhyJAe{6?hA0W75aRF&>hTI5WdJi>tqR=;hBpJ6T4t($8uvV~~Hb zb(T>J+qr#GTk3N)ma%1?u^C5L&UhXY8z|0r9UIte#}*(j*s+UP%mOB&o_Y?n zkPU2ScZXzu3KWD;TEP%j+1%+Dm+FJ_j@nI2y&BmD zI}&pZCQ`;;ddBKS$b1|syQ}Y3Z_AiZ0EcpN$+#>dZ6Hry9Imzb%CI*P!5i<74K{QM z+eadS=}4@yG3iKbcRS7joZk|v$%b2R6X?}#ws4hyVos(cgmLNI@G2{V1AQUG;O~PE zFV9||U(DUcuzcw>m@s5FmnjmjgpWgPqrGKpmhUk&5p_GOR)wfx1#J8?Od)g&ePwHt z;Kd)FT)a7Z_2K-?rCnrP=MPU#2j?GNU7TIMIlp-8YHEDUii(Ta*mFVFh2{86?|3f; z9uc8`9p#R%4OhsUxFMw(Uj|}8c+ITXcA7t(5$*myU&DUME9Eb%vC?3V`!7&SE^a zOsV~S@xVrv{5Lj}D<7}A{hS@hC~j_q(~+o=`}SV&d9PXR0w{8vKUop4xf;e@c%~g8y!3yoZC7_3j={=fu4o!u$0)JTxEA$rO|e?&weH&@MnIgFR02&hFvO@guPIv z5{DQ8)+a-N;$aBqG$hpCab>r#hhD{h6NrH8OW=!fjfIeY82rdt5*rDvn~y}{mp)QD zehJ`xuV2$=>Hb$L!p1w_Jj>$$y=N!o{eSTM@cAzOe3;0`uv~Lx_m~d(J$>$%ORj4XV*Y=V3Z}Y2m=X_h2pcfp9!Gmch%6bUW@w(8tabl zB@@Ao%0|I?H>f)cg719ZU#!nt6Vg}d?bai|4?lP2rDg%7N+pLe5t8GTqQ&Y%V`W^W zpKaNXy{rR==h^Yerhe{Q=)Jms^%nTt;A6F19ZJu{xoTV)3&6RQ^Nl^vdN#6FI@}y% zIeGDiCudjZ?_OPfxO(;DhryfEpFUi^eEZk=i>(!uhz0P%4N7z9V*8D}anF{rsWKl} zmvuFnhFTx6>qECkw%*mGi*sdWo%yqF7^c^se);~@2km~oc=`I(ojIU?SBQZ)HpQLt z-~8j!GA{;EY`Q5gcZ|H2qZea_d3W~`CtErGwM5YDLZ5Zo7FrhfGwRUS5%Jr_((XEz zwwAJe%TcsuG4xxO7xy2)tMPxw_Ivm%6H*WVO5z4g>SeyJp6EimQBX}!Rkx1 zmHI-<^sy#nzjz=^h}&SSRGGQ;LCd$&x?NYcz%mM{$DpwD3j653qZPYn+t0%IUz+US z@DT8l`2Vw`CB>`dbEmM*7fnSK$8oqzJH_`cPjkQU$v)&N7Y@uZtwW| z;zix7+nDHv(QkDL>Ngh0Z*Dwi1d(V2uCD>jOHVH!n zA4yu^8*_b=$MeoJl-5?$0k~pRc zkJ?1lMDZ*$d{FvivDLA#;?8!>j@!UD&kNi(rUhYtqQA>mMD4@kI@omlFcA{?6$_y> zO5GYKa>6+I%@nK6Gx-+|Rexz!1utdZ#R@UHpwG&K;z?-OwTEy_bPm1fqxWqa87@er z_w6{#^tWzx+h_`Ws2hwyw)asxBtrl9Mp;7YA7)zAzsxZ_{oMu~`XMIK%DtLYWLID1 z!xOH5o^1R4BYc1G<7X}|lZ^5Py)F&Fx*JL~(X9p4%*T~pk#2Bj4+ zaCN1xblHHUR~hiqar%NNrnT|%x?nZ}=rhIxLW``))rV%Mw=-$ZZE1{GSAV}29Bu`! z`@Ok3>Nc2fr81XiZ>d`S$b`90$8uk%&_if{ec`;C&{IOfCQQsrs?Eg?%GPkfH1CxD z^`FK1|8@dE%i=%JpC47@KhKX3cKZKaJZr~)uD*YHYC=D0Y{KDD?zHxH!Jcgedm39Y zcNgn%%gQYY$pypkctTAP%ZFl}+_NRJx+2<818r)FJQTAdAN6tr#2TCTVTx?O!v|r1 zfYl9mzR%U=)mh5%A;{h;#;lp%md%`k`{oX;g@uf89VgAEmcp_a<82rUD{%kSjD*4p z-H~uI0h}~`vt^N6C(5>AXlHvrrT3ik>RT7g%A4Efh6xGv?dUP~ zukjc}C(ZuL?tKyy2tzau+0bMs={x&5gjnC07h^do{Elg$%q%d66ws4cCn2O4RQ<1~ z9rT8VGsLL=QlW%m;3y;%I<3yx;KM*Nt}L}v7DbGrcc%js5H4DsF_B&UzXttjR%iGd z@9O_ef0&HB>VMKd#guk)Ktt?bC$Y9^MeDncxQSceb%yx5^<76saqGMPr_DG{SR&B* z*(=fN#GL6ng*qev+%@eu`$wxY6+R1~yK_G6p53#19>Mef0{{U3{}6n78~|Ja0O}k# AhX4Qo delta 10888 zcmV;3DtFcSRozvPJb!6(8#lISKJ!=LQFAMHMom(S?HRsuO*xX2(Mv3;M8{K8zInc2 z_aTW`E-D8#vew&W;0L5HH|l3f!Y3(LI@9 zE;}GgWO=f}tTXRp_*{_Gt*Km6w4`1z6g|FC!XO@Hs;xOaH`4eD*N54BGs zBA=YJk|o_Bh!0EEv;EcLsS!5KRLVSr9G%AgVB z=%-`|oPq?=qBw#+Dx*|uT7h@pBi=p5r?UU2I7~onnE))=|1X{$A657N;fvk=zmvyL zgk;grcnG2Bqkm7ITO`6`=(i9;Xov+|LCpGy!$h#)M`yB_3y_A$=DoVR*?x;?Mf%Y;?}#B?kdi>H@wXmz+(B zA}YYw?}EbkI0rD-k=_~|8BiRH36pZuj))vUr6bQfM}M88)jATADNqpNlCvSK-;cC< ztg2Ufao9OHTy;Ju3&8M&E7Ka@a8eYYlqm5O)O^QQUMTn|fm0kdTCH@YJfBg?Sr~4* zVl4rDN_=?b`z)bS^~C3ZCG?Tx37|dnw+T@F`#!Q|5jKSdx*=hRhG44%ngh>R(m?}| zNHR3Sp??5GM(QQH!BoFY1gO6`VmGv-+RKJuxHTP#!mvDn(H=U-5g;}~1KR`JT?MYt zJmU&@&@!u^L(@yR0h|^eV!t{i3c8jolsM5ch|w>;?D&G@q$yJHFM&rys4Xt~sMl(Z z0Lz5y-2oI2L-=9vBWFpRE|G1=d^@8dq417{iGON9PiYIGn6nsXJ*F0@o6 z(ju+vWC$V1Q^NbGJH@;kl3~}rY_$rro^^hH_FEbyL*ir6M+Ys06!uFP&)&{r=%Xtz zGoy+n^n$*@LZNfkN&WJ~K)VbvE%e_(CMJMGIk{w9_R-;=pFcZP#n|{~m_pb`&sqrG zFn@kc=vWWej7vsw3!#9Dbm~sRMD^hZ!iD@BkrOpN=O7W~&VT6-V z?$^~Se^3pX3K#TL%_5|Y2Kp~|8|K?S;vli+G5k`fB8iW~7DAGRz<;q>dOeLEx`tUFwKdjr7DDGb6N(ibiS#11 zEp1@2s;!!Czy3&s6zK;Tjlh?E)IMhee*!@gLVG3n7JFi~-nZV0*Qgl|f+gGsJ9BPk z9+HU2f^-oYWD2Y(G4 zD@bFvF`kwt?{j2Jy}e6f5aEx%&4KAeI^@EjwvNzpfp0&PGU1V1{tW0S7Y#YEvLWk)7sFtF^a>u3!Wls1Hg$WE7NO7%>h=D7i-pD>f=w z5#1;;S&7+%j*(Vdg#y80)JGF3W6|$+%N#6VzUWFUu7zS|BQj1ncrgn!Mt@*Jfp--= zPXqH}PNrBws)EeAt-U>?9$zM5I4~XRqxZkI_K;_BtZl0*D5lHphi&kx*ncEMafl^| z?)k;r*MpAyD4Vyj%>H|H{Gww2dG_q+XlMVqiwC`(K-H>C1R8^sYFh;mhinFc+IL!m z%y;WshWrWm*VWoF3j`7p%YQ`dqc{XCKxrlYRtq7u9eo)h&r{n)#Mp1pWDduZm{$x_dU%I_Nm?fA0`mSz(q&K zO-;c|_W!}*QPuzR{P^JcZvWrK^XXIfJ2WLxUkd{x5`vt?@G?@<;(t$|kG|`E{@iNm zVy{2ON&=7*(A*9&&C-#teTKT+r%#?z*a-#HrX$f&#oEZrzbJ7Zb&Qu$@6paX<8e?W zFQ&jb2>|`Bq!Q|*=STWi5)G2kh z2}$*|rH|S!>f)>uVSkFp5O~8`rB-SItE*@wh)d>k?R(o7nrd9#XYO8JSd0wj+bbw=`fKhF#PaQAQgVr^nK_8vez-&bzaeyV( zbemEpi`JKdFJlZ;lgnX3!T@-QUQTMA?DR;Erf*6V(6nx69`%e*?$$&P&|Z#K;r-oFFBzS_=$p% zTi!|mD`zwyz9MJ}%ayc}*-eN*#u8C5DM+Ry2gx`fY`fO6=9qs7MlZ3P^ijtsHyvI3 zE&D~JPE)f?SJl^2J8p)Ig@CEEk0XQ;g`2!@6d({~7ui0N6C#kcREVM!mir;q_%w2% z%XcSe#D7_YZYIQ^n7SGG8!XTh##58c)68b$7;6lE$H43;b$|#7R2p132{DP(LY2lp z(1kDGos@25wj7nM1cJXVsZk!gTA+YdGpKQts+0BuMikRxrrvg z;|kd!!j8Wl(}paefwPzOYq{3e$=Ieb46CKmWAq61Bq>_V75S6+8fc1!2@QaUvmzm} z%+mS->W5Wi+ND99%zrQ=2#oh$^}hfvm49bCb5cMF>Z@@LFe@S)820KeppxKOfA5(bJ@O@S+3;xU|kFI>8ZyCs@F( zFMyh9;i-vTZ3$AjzitWC_Y(RCAhZmkyCXS61rjlxM?D7xaW^B&xoxOpC=dH93mU3B^6M_@A?j zYRDaDQD+V)LT@$F5ePM+lPF50j&{H!nNdteJNY=~VAKyqf2|Y0U4<*7tgTxZctyB& z0!8T31*ulTwgPLeiPS(XOn`^QC;}ox5*g8VsE}?!SA`l(=4e7#IOMmC zju%$X^q>al5VWPds!awAgp%+w#YItYhZ^TX98`}y?&38BAbo1plob%Awr≶F|H2 znEC2j8K(0(oojHpd@#RobxUMb%Nn?5-So0C8qVz6;fg4r5H3IPQh#i`25iH{G#|}O z&3$APE=Kcf>Sg+2AH8qa?)>(zOKR4l!d%T71#JoC{nnu(YD^>ZioT<$V=|ZNmo6~6 zMI|{5U1TJLkwlb)Y7-M{N-{c}VW7sLRn~HIEKG!Z!@ojfGKDPkMK?deQ$SG?N)m@T zWYght18(lXXkIG@u7ADq#v|V`CYB1_%Lta)*RE}W%k5U9f{dLbXOBunHH6tj*0?&E zNOY6V9u|W6M6=Yqvxr#QS)AY1R=)u6hRBIorUK-&qk2`;oan$JIZ?tqT@}Sl*pkwO zuwBGL3tDO~0oAKI1fVFw{CZA?GTlzcxo<hc2d)D$Sl^+sAxI9I$v z370&|3?|s2ADZWcQ6(QJZ6FcW(lX2R%pu4dwHT`!P@KAlQ1dDh-v=Q^Nr;{dXG)tP z0k&cfmg|{mDu1mQU8Q7}d5VTGQizoZ)5M&?#a68qAQziomQm`(wO1h6&VlArTC}hc z;TF-HrnR$?17=Ru2n73x$c%K0oOZk0m|(qS96gedI4fX=hK@Lw|BNS~~!58`06)$i4>2D*Mxx zAb7E8ip_F~J<&yW3)Zt517p>&h|VYqW)w%nN1|#|o*xVHv4H&o70N*m&I-w*dKpbH-!OODIfUupol15QyQL zLPuzZi+R?w$^~0t73NuBLAtviB>RvEaDQ=?Re9%PPPst9SR?_|bklUoNx4>Fol6;| zizCQ=BhcND8kt3yGwbcQJb|`@&pLsk2(S$WQ3E6tMAc=nh^x*=;}oYNi+Y$x?1h`9 zg7q1gsy@3Upu>&#h9PBWpDt7}z+>S~aLJQR#7K=|PMHT#TaE0)a3(>lE<+affqw(+ zW-?^94;&Dec5>-1a0@_n0;EppV6ejY%xf3Yh4Ok8EWQ+cDmp;p{6Yt5hzRS2(RL@Z zGpg}Bm97%KO9~=wwo?oB4IRy_Q0WeJ5vFD8wjRKueHmjZfzv+vzfb=2kH33Q|MKL? z`=0mbU;p^zKRf!D@1FkU>F?MpusSX_Id3oX^c1yfYZ6t- ztC=IqyU<8?l;Bqx68Y7KLheE!?U;Kd0_{=+)&}G4{(WcM6Du4`iy?-VNqd`_;_cYo5&& z=$KJq*wup`Zy#FXu##~yO@*cM{N zwh|e3KU`vY7aA~$rV(9Vc>LBjqP4b$iwz^Onqy+)D61{SR5gvDY8o%Ki;mh>bX1zq zzYrc(c(ph_Dz`#l-+zZ#LU3Nqf7dqN%rvE){?lhPuzB>+`(In8WeDD-De2V9T~5R8 zZEp?kIWiskSu5FJusHo;TEpf*w3nZ(odB^AdtoSN zDbC`w_-a|i$tg(Sk#+&5T1%ZpB~?r0gtKH^4!w0*N^{e+xqq+8Ug$uiu+|$_l!7kk z2wBlz2&3j2n(}yEpB&?UxXHNed}Yp_7;_w{g|Qq2JFFu`^Q*R#D9KouDK5lP%(;19 zrS14j4#X>NC5$h_TK2WoSqft`By`>tkoxKzfT0K)b3l~Q{EmR&0Yqn1_~0%Hm_wE> z@4^LZQ7))7^?wzqjLRHZra2qYnhMx@%7X?*2F+GLBWwFg-!#|OE7mp_)wQcaTvjO6 zf1IZ6;#E7Ud+}r@h>yd%!@-Q!n?`ltt|6A4tWzsBUTLDXE6W?N5bX4E2S5N#qN1#IEh!e+FcckP>k!s*+P?1La6OiWCYA+h2ehnR4kypLJ%o_av1pPcq28&rd7oDa zg0Gs^)0lXRR;vx^3P$=i*aah6V=(4eUDFXY8;S12g5jK3$~-Q=t(~Dt44FxFf!d6E z0e=zKZI^2&J2J6&e?9<9Mb){m^Na3WI}cC|TyomIbl5%LOeQXMq1~u5S<8>BxQzt$ zk?@O5U~}VGZU$R{H|5VlbI&S*lmq5g3}~*tZpoy!?li1mWOIPrlG)7xd38hF4~(Z_ z$U60sQdEhd`3|_5O=3Ry7blWMSXwZyNPp#%!Px?k5;zhh03R3Qm&;Od+cs!6X;6Rj zlh3&E`2>#B@5WB22JVb&7W+D3g$uoOuyA^Yxi|qOf5tjkl`_ftbP)44QB-FaMRm4O zv^ezLWg|ta+esHH9*!}uPe|-(ESsat0WwP!feYQsymdMLp&vnBhRK*vB~(6nYJVck zN6wVfdOHU8RD1pUEST4g6OE)N!%Aj?CyeKs=~G9CYql|Bd@g;Uq9y-Ggv>Lo;esWx z7Edc;-|c5RNyqO4 zHA_ReaIsMy`F0ywN>-lmVsY1Wn}6?ivTF!J-t5xMF-06VXM^i*VnkcLP_OwNY-P+` z@#3|b!iHuT9`l9;%SgR%wj;3?p3e)4l8JY45yC7z3UVlLbOc4&_ z3AVW~)*=zHo4i$&iKzz^%7o<0Tx_I+-xdO+QT#!@g3Pu(B z{6oLi4nTS1q%{q5PvG{*Csm;}sHWVSm*sE~kz1!59KKz}9SkgcwvUB-e{ zNNa#~OqNC>^nV5y=iMJ!4M?+ISf>-vNB1BCD)%-0Fqx5b2Eu{*(upu7BM`D<+W;=! zAO2b=4k+Y>k2s1$*iRjCnFyBdAtKClWDqsMb0}1H22jk>$i+@AZ^TcEuY^y?T)49w%T4W@7CynudlkphbcSsd!Ws!Gx@|eSbMSy&D8i z$VPj$R^_cr23QkGhFsBPs4jh=H!qeuTs!x4wQ#-g_m$r>dNMdG8uDG;oipw4?iyVy z2U}(ssWE?-v$2(JBw({SW$ydj41#{4>+Ao} zFK^NY&Ch9CC*ofW3!U_rY( zJio#_JbzbB^R_Sm+BG5@61`z&H>W{wZH%5vx3&~f?g5|I@8njoxl!J@T90X?OmZ%B zdGp+IPDydqY;%jHCz}JYk9unfR?GbPi+uT{-icqJ8LpXJ8eOv4G}iC&iDK@?FRIqb zc+l*cOX9vcmMVd5%t44XoL;+&M|US;);m9p_)Vhjo5a`eBI(y2+%A%S7fHX1ncv0C?_%a3-aX>WO=Mr~ zUE*b@Vw0%##xd$mBhnvf{P`CbZN9t3`^$_Vztuau*NhI|-Q)d`?(yDA40qFr?XART z@9yJ%wD)m8(g^9s@z719pC3l7^8=Hr9UOn7pt|Y<9SJYL^`bMwQMgGPyX0+MJu_2RL~~n;r-V!I!Bz6=CU5 ze%1}7`x?jb@^J{sv4pV=nlePiT_-L1b{5;Z>3*_3$mVc`aX&W@*63(CB27^fGRkU@ z2#?`13Bv*S9HhvhSHI}qN%nUfh4p{6vu^$=2b9vU?8Sr$c@FZ1@oN*Xi_l)-8Xbf~ z!4L%qw4)?a>I|YIQ3zrQNXjGwDs1dp%{*iU^7a+ICqBILwWf4l#oF@c0xW}>o)MiK zP2rKgF{sc|`ld8@l}VbL9?Ak3lu%Ujkdpn9i9QMmP4aX4m31v5e?l+l8!Ue$@B-?n zRy@u^DBnQTjda0`TNM_tPRiX1Fizww z4|S+Pqq%}bbn+AZiBSn3Wxiwre5Gw%ayBAm!Oc*MtAr~3`_u%bFC3y|AsD%}utN(k z*Fvz|H&~RB4E0w0Jr8)|ExUix6D%${jL1jS?zYR@zvByXnb%OXmI)#mpA{*Ur6+yV zF3hi~Kg0sAAZFTg>%riuqhJU)0Pbo0CyXvHkzZ;0vW@{efWUu8$+2hXua|PH zmx_8j3M;f`iF|o**z1*&o&cRzC%_&>F$1hd%cz;|BPDgJ|2u;D*VQFd?8m_ZoU0RO zWy=dQwTW;OD(4nR^B;4rM)jf6L(_ZJFOXi&mQcajr==3F$~sHZi7i;^F8Uo&yO9qL z%N?$zImp`JE@(KrVoZPL8F&k4V^C$o7xVP2w&4ePjjeC^TG-CbS1i5xhTl?~t8Mr# z@A%F3^K!EBkT!8~#_KlmX8WxGdBJ{LL?9NB0QJ<-kF;V)ra(am#de3V%Kl4hT&fD& z-F^!|&+mkC;SD$6wpv_e>y`Id9YUItdNr~=a3tmmOr(sx^bmj3%aHjvREkaCEkBlf zJ^>uc$tB~m+-U=O`toqC{ZWR!36I+lg*V!BrQY5Ni=!j4%C=Gp_f|L49Kd;mRz)`4 zIGaGPZjyy_9CI=yA&g7MYSYKZF&>hTxZJxq(DxM#{yzBd>h#UodF8SK9ER-XG6nux z_&CJY$ysh?Ip%+>0oLJrE$^+_pltjzOd)i0OQm9x;N>5loL`*2{&05cV#^sV_`{Qv z!P$q`=ckt!XXkHSMU81yVP~;7_Bf2S+&HS~edxu&BO!l`Y*$5{7@BewT#t180syS=#sI46`rB zJ!=b@wj<2t)=yh5E~#6(9jme`eLFS|Pa(v!fr*FdqocBK%kt0c^FjG@44kmQ zU3odbidlakatyBLS%qO)CfU_EBF&d9w(HrKp!ULlI*?38eugQ#3%exgdn z@7wG0aGs_9Kl72$5xXV-U$6J9*Q@&fj-Maz{C|IU@pztBa`(+8BeCAWlfjwIbF|PA zSe9%uw;h%e`;)8ej;qw$ZV1lLWCZ@q5A_9AS<0|W)g@ssl&Sb3Mu7Fn5TJM%!Wj(- zwRc=uTIQkG@dP5^`V#n}Ut=Mp9|k{imc&L>(Zxri@TQNH3Q_`i-|N@(S-Ss~thDjY zH_v}E|9|gU#s7cs;_%tC-TuFer{Mp`5HUJ{4cz}4M{d{gZ!*FRO0IY%*$_JZMSn^q zkO+VLh2kkDq1w>%-7J4kWgqLOD+1gkexNcDx8?n>H1i1j{(FdVGS=t+l=$g0N{ygx zk6I1^4LQ38svV;&kwq9tfGi}Rz5Pf4HNStWx{mc)+=tUxH+(OV2=1&wJjU!mo?xptvjl0YRJEZ z)~j1@f$H3Co82L)-jfomw$M2dUf{h_0@-~*FS%L z7+jqE^x^W=+rQ3VY^|U~EP$78P?|y)%Wq_se72NKmFd8`q^rp^)EdKG72T%kdYhY0 z&XuWk=Fhrem{x!K<@?tkv>pEZ)tlFMW{F?H8RXa$cS?Wr%B5vq45CV8c7u*~kemLISCgc8K<)zt5ZJ}lISQE5gJdh>GZF+yKM47qu zLCd$&x=mNMz%mS}??GYb75346dnf|AS}G4|o2* zyLc*e5k8u$FN$IK#x-t^rQ6F^{{HIC&uBzKKw`pf1e&lLBpC|y5#n;9jU07ay0-HZ zB2gUbl%FEYk;z$zLdIg9skMKYT?360YDF6&XPwp_IxFT?CR9kQGhbklrKi+sXt97| z8tOoC3NlPgwjhcyML1RrffGd|_X??HRTq2~#f<7MX1yhJY`~@ouS-4C89QuuRLL76 zC#^m74pS0_#f;ed+STG&AQ8R>p)(KVDRi^0bXwavvF%#u+wtHchXa3eQR{OqAy;A3 znC*sY(F$@|)5pskO)jYV{*j{Jsqmt|YD)``s=Hd<-tqOti@I00G0_d9-|7_D5$4xs zPtx$6A`nlEh#IBqCJb_E$Ffij@Kf1_>WSp0%YKN?Zj4Ag@N5ZL78`(ih|YuI1QQSLPe>k{j!tNK>0sY@G} zw|}~-tYmGy-Nv_Y4zzMIv+j&_vs0jp4Ib_(u{9Pri{o ze29I|+MaGT{sXj^XS-_0 zZS*&f3*2^33(Q2<%U4A0!{R#FaQrY468IGhp)^We8YgnXIQh*atIZ?%7YG$HkinHKe%IghC8ZP1_}ViK*~stHAQwN*Ym;cD5I@RdZm;y7LHxUY_NHE3tl zR!H03N0krv&=qr`&$_d|kJ|CA^`&c)JJxh*g&w$?(pP`FY=F|M40!1{eL)n_+IV?g zFdG5%8RG$=MbhMILzC0nnKb9NG|H>1yip_7rT7qJUln22L~qM# zPQiS02in3yLb#5RW>ZaJnUC={6onP2|7uD?VTFJ0h&dStPU^qeGRv)FW!q4+v%R0< zdrtZCooOlOuhogYJDk7O`Mr%jGKc${ApP8^H`0(R`d?=PVMNB1aoC=Yu{8hBVKx89 z@!`=f|Hqv?d*~7?w4(af1+((zwz*+KLVY`WjQwjo2GL2Q|FV0Z#00_+jYBpx(MkHw zehz;j);H$GSWXJ>F%6WO1?G?fdJ^j(g!F={|Mj$kE@(JIjOv=IODG18LPDX_>YNTf z3?$=9Q#)Z%#3*`qGC%?0qSYA_+13A=?zcL_-*{L5o4%NgyXv3xPcfz49MBN^*Ga5( zTG9HhBW~i>cby@=ZhhC0QQZ3O|7kUj6P7dxbawh$v^p_o`c9z^2>^FZInMsk>P&^t e0_g6HPrGOL?4C#P{Qm#|0RR8h%1GP*Tmb+f=R{2a diff --git a/charts/v4.6.0/csi-driver-nfs/templates/csi-nfs-controller.yaml b/charts/v4.6.0/csi-driver-nfs/templates/csi-nfs-controller.yaml index 7fad4402f..b3c880f28 100644 --- a/charts/v4.6.0/csi-driver-nfs/templates/csi-nfs-controller.yaml +++ b/charts/v4.6.0/csi-driver-nfs/templates/csi-nfs-controller.yaml @@ -71,6 +71,9 @@ spec: resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }} securityContext: readOnlyRootFilesystem: true + capabilities: + drop: + - ALL - name: csi-snapshotter {{- if hasPrefix "/" .Values.image.csiSnapshotter.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.csiSnapshotter.repository }}:{{ .Values.image.csiSnapshotter.tag }}" @@ -91,6 +94,10 @@ spec: volumeMounts: - name: socket-dir mountPath: /csi + securityContext: + capabilities: + drop: + - ALL - name: liveness-probe {{- if hasPrefix "/" .Values.image.livenessProbe.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}" @@ -109,6 +116,9 @@ spec: resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }} securityContext: readOnlyRootFilesystem: true + capabilities: + drop: + - ALL - name: nfs {{- if hasPrefix "/" .Values.image.nfs.repository }} image: "{{ .Values.image.baseRepo }}{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}" @@ -119,6 +129,8 @@ spec: privileged: true capabilities: add: ["SYS_ADMIN"] + drop: + - ALL allowPrivilegeEscalation: true imagePullPolicy: {{ .Values.image.nfs.pullPolicy }} args: diff --git a/charts/v4.6.0/csi-driver-nfs/templates/csi-snapshot-controller.yaml b/charts/v4.6.0/csi-driver-nfs/templates/csi-snapshot-controller.yaml index 60f0afc09..448c9b4c6 100644 --- a/charts/v4.6.0/csi-driver-nfs/templates/csi-snapshot-controller.yaml +++ b/charts/v4.6.0/csi-driver-nfs/templates/csi-snapshot-controller.yaml @@ -67,4 +67,8 @@ spec: - "--leader-election-namespace={{ .Release.Namespace }}" resources: {{- toYaml .Values.externalSnapshotter.resources | nindent 12 }} imagePullPolicy: {{ .Values.image.externalSnapshotter.pullPolicy }} + securityContext: + capabilities: + drop: + - ALL {{- end -}} diff --git a/charts/v4.7.0/csi-driver-nfs-v4.7.0.tgz b/charts/v4.7.0/csi-driver-nfs-v4.7.0.tgz index a3456aa556258f42a46e293bf231dff2f8748f93..489185106fab83e886fc56bb1287246d1ba06424 100644 GIT binary patch delta 10942 zcmV;vDnZqlShHA=On;UiNp^KBHI=s0J-*X%TvocLrm}sr5P2kFOadGLl%r1P*8Gs& zKR3VR79J!)3e?-LM68*PMFIz}gY(8gC`b@-G65dYp*T1lV=g;WoW$R3@9B2C-RCDK z`rmH1TmQFv`26Ub!;|O7$1jeab&tE>bPrFuN6)`O-7WT^@qfvL#QdA?#%z zRZ*%nslmJN5$_)NsqOy>jx!KjCIIvI|6%vpitd+2<4!Q>?e0aWS&p&*x>O^6~Yz*p~r!uYfV zFw>Fl3LWWFoQg4%a@~%I59B;H*`AP*Lqmr{YUU$V>0{Dc4@G1;h zMy2XW$N@{}A;~j9d+4uYp!)B9WXmFK3JY{Y;usCUR*5tRp0cci`XG^HXozD0hz!+B zbc3mWnSTjTzd2$zw4>T9hG4ig9SUbyfxu`FUEl-|8=}7Lf$gpW=QPi_0v@%@>X*>; z60QNK#RoX7PlxamoS>Xo2Jl1S72sF70c*b`UVSy z&P6Bn%TojGGRD;DzlThW0mpKD$++yHqyKpR>_`=3qn}^`aSuIfA#}s|HK8LtTr)12 zq<<}hA}aE!JB>5dhaU(R@~=dW)%09|L}(A;2_~_cQDg**9y)^|&SJUWRIBXw&rEaO^qFH*q9@Y-NtxYnt!~{ zkS+E0E{Q>cKmJS$IEFq}>D3ZM?)Xk9f_G!ou>Wo`q**+>N2EO71SuN?JHy1IlJgm) z^-FLot#g%y*E#jf>bgUo9dLcPwZYbAa}S+r#*ZdiEGb5VPOr{{7V5MncV+u<1{%Rj zj4UQa3z-P*ks%UFX4G<~k#+KUtbhMj@&r(cFpcV8)U4?))Fo3RkrHVZVIQ3jksQMm z;g|!CrU=xgK!hSY&7D?jZx3C;5IE2flzhl2D8Vpc9FS0Qj}%sHRI(zvQDU+Zvk4s` zt+omUg2S+f#!{xDcW_YUU=a(&fyClkC}uV!ql`n4vPfeDCKULAf){9DL4V501WU+O zkm*5dZ_lX5msuS5O^15u{jaS(6j&T<+o}qR>2h0-t8cUjGhI2JAoz%rG=^SFIGLgAA}{eX8)6rq%oEt4ldrld)@EIk8<-i7TN!gPhQmQ zf6tyBKik>=?&3l3#!$EF6M;q`rP`wrq%oU9r0A};Ae7Yl9Yf(5!s~kNltlswiDf4C zQ5pjlptRCntA&sv$Dxc-Q0};wpFW|^73gxEi~KG6{8{zE0DlVtVP&(IZJeexwS-V1 zG4%jKpFg)z5ZquHj_-S#AMDe(|38c&PJxS#OgD7}EZF~tN5^&l-}95B?r#6z#q;UY z!FOmvlAaa@ha?6$P2pvtrX?Ih4}Ev=`E#qKi@pAsDhW`IL5m}ZX^{?v+GniGefkuj zNJ*Z6+H@#7s()A;1?3mTSy9J$ne`s+{9-&#s^r@Va84pXzbmPfhUodR{*xsAY&awz zQ9CGs0gd$ErfacwU}ynj3~^G5;>g=CQ``VEe=Di0nYQ#$+eclzbrMYR2%=yxt<}mc zpiLF681v~9%6FkViJiuJg@aYMX6E));m5Vr)U0&G_~A=U{Uv@!ghoo6IMUN^z^T=&E$n^ojIZNqr2iq0 z0@p*eflqiY{XaZ;{`|OGrT<6W!)Gsc^#3j%yO$MR&v&cGs?xF6gSllI4G=|bwXK67 zXt_ZrIDaJy7}XkPuA)s2Ti1j}J#^Xtvz36v5tdlfZAzJRt#6JmYXnr2%Rxrs2zZ5F zPP(0cw?0Iik^rYlGlZy0UVEsW8xuxEj)o)uO1?@r`ah9c} z*{fd6fVDGbX1i+Ju|_N*|Kj=h6A`9B8fP5GGremW>jLBQqHHBV6Z?VCQ5Iufuhv3H zge-*~Dl~zpg^*n_4JAN0iZl-3_>vPUfuAZErRB8}uyjr%5-NhGuv|$ih24w@WGqpR zNqqT`+oy<+z7BM!D(e+V9xUB6pgbWxA@rmfCSQU@Qhqy?q=a zj40fceWL)8sJck^ksK3&tffl0QdsGSR^v0KrORJV(U7wQ-Hb^%HgyZ|H&~!2jOQl1 zr-jYVGu9Nsj)B=x>HrZEs5H268e@{Eg@3Ayzpo2l{&HFwzL1>IQRC=~u2sx~V$PuT z-?~%|S3Q2aB^&%5LaC$~?B=>+cu!{9SEne0E}M@rDQurhlG7 zO|w6l1vNYA?$;%|e9_$9D&k01Y@>R~V!~}vMUbf7yF@8Vtb;C%5ri@cNRF{o^o$G@ zSyECq8|sn@4RI(l9LG~9I7KhCFqRfoWWeOO)&-wg-u7QI1XN_a4C~SLF$a_~Vm1Pn z2yi$?OpbwfkhN%{H$V5^De`0b3V)Gtl$dA|JgSi$BJB8^F>Syy8hLx!yp}6%oq}x| z$ADTYJ;s30KoZwuqR5}b*FbYL%xDBWp1Op@GE3_VY95x$v@3%+o&8`&5Si!=)qe+E zF3)skq<{+4SEB}CRzx^7>@^%if_tTlp1!&~|K+$}d5x;mSHmeH5LP^qe}7wSTdiFK zQD|ai6@@+3NiJZca=Mu!@FnlCL~I{1ULd|?stAXmks_P$8{m?F;~&(5TP{jEZ);=w zRt?`OwZ;r!$g7nrAhI)Nh=CRiEE(2IQ2~tfcxaCAI<5)0P_j-IM~YQVfGb`TvJoY} z6|gl)P>pK!O4eX%IfmlcxPQj?^_EWX6mig0C8G{J8>5TfC^3c5AuHWoBO-GVI%G+b zQ6i@%Zi5Um$+$R(U;?oYY{NVp6A7WrI2a?T1U z8PXt?scJ?s%aX5N_urKcGPM}>*{|_(Q7(a+FhYmG%_3^?N3(evX@4X&)~cA4G^N1R zY>*IHV7ky``&8={S~g50*ANJ7u zcH_=(|GJ=NBPz_)Y*5e^P~LAnDx$_TGOOr&ih3qNb#C_#lgABAe=fKB4!j#8$7Y!v$azQg zs;D{9fn{>6gn7CwikYxAr3qoXh)xSyYOes*t2zLnD8c-CMusxo&d0fLL;U&`$zzB~ ztRatpf;RLhBB=z$4tkxW(zkL}#wKQkaU8Q78-67Vf>jfv&^%I9kcGf3^rN(qISHPKqf9#-(x9?v2$o4yi@Pv^F zrA!E-)CB=y#)+IFB18saABFQ!+S}9Bklc^f9>Cj1bhI+EuRyY@{#9)(wm3oT6w-aY8~Q>Ne%sv7itO*mtOS!PSN&jv-R=scp09jOV~&`B+W~ zsGT?QK@F~5f7oYa#;H|$HLGh^c~sj2b98liib5R69rS}{lwQl;oKbArPibQs+dmN@ z^PY;iUCp%x6AOVvmZprWJt4KIFiTR5vB{7X58#5%6f37~&}`NTnbB)%&t+C0!|{xb z*N<^?kRLc_d;!+$GC8`(SSU)Ms-hveH=mV8-ea? zhBU}5!sIMyzvCISJ$%*+6eWOdD2N&$p&;rmi+NmiHX6sBiX!S^7P04UmKxRig{%oKy5X$4}+-$vAhiF>;n(j^<>CmA9x@x z?Bv3e-4PxEt&{u_B!41xTMuB~zD%){z-bTt-zWe1$KQjee|qxdeK+`zU;p^zKRf!5 z@1FkY>F@cEKR$i>lM zPNnfN9+-V!LSt)A$<$p*C(#(#xb%^X?Zg+}_L1i#9V z$ge&Wau))5MS^m*;Nmms#!{5Qh-RM6taa%&GRPnYlMP78K}|QDNC(3EW}bw!_RG za1<5qW)8IwL4TFVucOoiO0eDn`PkfkR+}S?{?)+gp?1TOkAob{Y^-P5>;J8@#Wh2y zRW|DH{RNzUL1Cub2`t@(k~W8uZYg+l7cRO?xab`Oh(4^4&@U|jbkk7J4TCy24By;1 zQ1kJIWNsn&a`Q0DjRPugF?8}?;uSZIPTWQ;;^vWu8-K?cZW>j%#Tdd{h#1^7K5+AB zz^^IxZ_Cksw-w*_1xNI49>2GRXuYk(=4~8__gK;GA;r{fD}ruI@p79-$88=9x0T4Z zEycNg;Zbc{iDBD3Vr}#Iv@JxVZ6o&VVMm&65>vK|9(%~qV_S$7+e&2E{cwrJUD$w0 zY#Pz^g@4CyZ6jK1Yq+>!B-ZAbxN(%#mSUJkfb9NOL*-1B5Q42xEZUob!YVP3=LK!3EC->jSf(TTkFT+~) zwSU!F3S%@Rbk-G+`|3P^!3B*uAj)WYM?mxdqBClIaF+zkBTH9z;heRo7F3%0l2pcL zj;zw0wP;NZY%}FSeItVwE1;3JeWh<2Z0i+kn@eKabs?@Ol z&?ZDIZakR@8n>gdCG?DqF^ytPHfGY&d9bc2&|{ZD@1cf7xmRkr#a)4`$za)NUZ{rQ zl&o7XPQ=A}>VKM7 z-qIgj>2eF_T$VlA@?d1%uT|FFMQ7hmbhbgDO+vIagl)xXucM1>Qv=z$-tjQCja@8w zKBu>>QQQR$Uqx%!mY#4cn!z@7fiFV(f6(&&?wG?Pk?9}36u-PbX6J!<93B`$=kLG; zxrGMzth7OoVmu8`M);?rOsyJ`OX2I-_AV6K!hH=1;LOYtfiyFS9d1+~5L=>BQ{Jm)Pr7TGWq9b)Sd z)=JvG>fvxbmJLlTbJ7lIS-ToeUUYi^F{2}~Ns@$Sr`Gy?UM2{>Zd%V{;(sk#EjOeq z80y<#=Zt8D!I)!pn~rF+k?20m8O}wm%;WOg+8L_FkeO5$sLf~)5pmu2xps;p6Z7}y z1F%%ooeMj^=+3qC0M)<+r`;=u-OJ5n;!@|@jcSv%__&JSNYES!KhFd@|=D*b~-h1 zZ(Ot3*9j|p=%s^&^E1ru1XTPPt6){mB%9Mg%-TdzlU)=w*+$X)(0_NIjT9|!C!MQ! zc*eXsA+e{iY>qAu$Rbq)cDh%1>q`7XKZ3lBvk{?6sC@F&M3@h~DW~;zjO?lQ=JlB~ zuWKh7$xnt=%mhyuFE!Jro(?x`W5oDO`anfX{+ zU*h~zwL&d9hCXMImw)&`qPBa1ZS`q5^RSrZ`Ef}-c|MeKp8d00q@kR<*r<$ryNxU* zOHa64+&A6kyPfO?f>1WQFmsHHGnc%0t)Z}?8HUHaVbLNI z)2|iJiFl&^t{#WE88auWz%x(znQSfns}-@i+5Yv<|Neo*V1IVOzyA3@it7C9pa1=R z%);w`{quj8PV8Nc7_r3BbnaVWdhDE$sjjdOVzK5mWWW^RI2~h~3u6_szFy{-MVVom zveJ46)tILiT@*Ps4FxXP0HLG(rlvhD*b}a~jIK`;=RR^RoJC|f1f7{ffKIz-L~_Gf zun(lj!tuU)NPl*qIJ5>5f=;*~gW1!?>#xfdc(&x6oJv{5EQ#f6+(k5pSh z7q|WG`Oq}R%bb`5%u*D#J4C3EfTKBL5=B5I;ZUrup1nyg&N2NgPnf3mypM4jH zsOO2vHrQ5$+NN`bdDLYjWhagCfRoV({C7wot0w6@QBM^~CyFCGAgE3HQ?TfnPQO3; zwXw(5`BHowKB6O|q7$KJ>8ah3VoD|cs9Fk@w13ewvpQj%-pvyw2q@tM;yB24{~J72 zvyd;GO$&>;oQthRs=&8rZ+oU^3ZX_c&y_VKiuRerVe>@`WXz(uk0cypIx6xO4l|i? zSTEJXtfe@AJQm|R;kY-O>ym?`%jG-#*7dZ_9o)PeqHF?uLg41$hVg4cM}b1kz@}U} z(0}~rU{C+E_E-!A^kPF;2XnLg7>tAZ$T{O~_sbc60;&^`1(>~?$lf9U6Tr_EXBbYC0Dn|~X2 zRzCN3ajKh3&8n$7HQQs$tJc8bcQ<%`Q90P~!@j?>#*{oPXm^L_S9pi#vT5Gt20;5p zWJ99Y%xwF?Zt^RqJFtXm-sd@!uRvmB2RQ zAjAqzuieF?yAv@hpNQGwNtnle0%mve`uHq@ByHy~U!;M)_L|jICvG zS@BfTBRY$;%bH@IU22KPeWvI!pCY;^k#m<~XUUU28=vFZ!l|9DoY7g~M1Rg)IqnNS zfV1&&o6Qf`Jn*A5+dDY(DsbolNb?}v1c_f}%KH;vfdN__V2KJG_*ANM1Tklr{Rdei9VhY{=i zK(7)1^eI3H{5$puF{>Gk?WNyiOb4ZnyjV zggU>N@HYoZw4M6%=ay^O(?zc!1}vac zn(#hhM4TKdsT8&6k z)PxL+8YICZxXj|X4WJHCHU2B+!qCnZcqW2_(SE1IFF6vlY{p`Rp zm>C$+$KlWcmhv~1xvNdm%=AzeLBE2cnuk>EmrV3fOlVe~)32?oi~JdVOW$B2 zfjg+9S_wFdp?`V<(LtgM7Tn5NK&SG8#!k)e%NSEwqRHH9oT~B-Ezg^Gcfu_7Saz;c zP8cV0T826_pwUc07oEaPe_~X^M_DeJfKX{0mz)hrRd6%Z;wqy`|2{K8>2rrDSqw&Q zb#|!pawP;SeS@xyWT>~|?`6OfZ`qX|V{yr0NIs(WL4Uit{X3x`mt_q_YndRD@u^Fx zEIsL=wllw`{s0TOf|Q}ppJ%?!gWX$HTH+D<{JCu=AQrG>f40}AJL#Gn@R6vS``f|f z)1U%6APZ(WXqP)`dWfKGT0D+H^;w6@T^i6jo@>GWqiGsN1b1JpnqYPk=p&Vg^``mQgd^LrUsY|L+JEUe}jUu^$f$ z@UBi;l&vnz#3sVcsGM0K&40|f8r6qd4^8h?zd!~hTSAVrPfI01opn~E6I-y>UGzJm zb|W7iRXf~BbC9*cy`}N=iZNMc;C0T%1R2T z(JyOkon$n^_HJLd^!g-YOKmPkGPX=J)}siE3C}|!1MZABk%9GgtOI$@j-5wh<`5C} zG*h6tWMDhHJ0=sLAcT?%2C&TL&TCw%3ftY=b3o5-vufcrclNegTxMTaH*gcSo057p zihm7uEM^LfrA&kTjMdASg*aAvSI;lrR(n1M9Lw<~gw$Nf!mx`NNab{`rU37iX7m&oAEjiW(cU!eX~K_FRxPVR@?Q z9Ur8?6C$*s+*8|7g|dhrQXcVTAV!2Y%!)0i>C+kEeqi=^dBCVSf?#i5ZUAXZzkj9X z*jTZ2O9@JL`h9}Z51e^Ur)ejk_q>4{0Ip4i+MqIX$w1z+yQF?OEu-XP@8F<`fmJAM zwL3#h;*7()F$XbbanwW4D&G}T`w?V)44Sc_g2&aqriL>ZruJL?Bjd8k=CdqQ)YpXL z_zYq^?VG@$9y+c%`7Ea{J|9*;r+>f+i~N-rbHYpUt3MCRbF=cc^i;Py15cghoXV++k3%ht!9l2pwMylWJS8-Y8Z3j znVx*cr!&oa=M|DvPR|Ip$(X7&W+$pre6jz}d?a+pZpr`G?LO;v>;Au!=YP+4{=d6; zf*`24`(~1nSnuFz|J>#|n(GLxGW5c2ho!{f_^P<$D)+XVefAR>LO2a$eL+=`GVD@y zN!SZzYJP|zV0|(KC?3RcPGdst9anY>2k3P=h6K321m5*)%!Twr|3}WU)Np8Bd?=hZ zJ)~s(3c&kbzfGTo`(KF&Yk%*2^DOfJcb`44?*GFVN6&Wt|2ugc|38L=(LSu<{?|Bi zyN-X85vE^p#VdwR=;&wtDQCP1{`fP+6HH>Yp=Y~U{hqUY>!))8t`k2{n~2-;{@0p$ z1b+WL#5fu0^M6X}3K^wFzO+Xz2Y?2gT?5sQQI<&;1`;5hRQ34fsGcUjl5UW@y1 z8taDdB@)5km9?Dneo%Mj1mD@bzgU~MMx?LO+O0=^A9n7-O3fn3g-Q-1A|%I4d5cv= zqh(y>)wXQMUetic^6aUyuATc9TCZ=tIW{-=SWj1n@-uP199KpI@Gj+S;UKVX&RU;g3A+12?kuYa#TT)qDBL;vmRUp`#EdiUqqi>(!ughlYu4@y&LxBObxxMvH= zRFw{_O1d_ghDIB(ucF@~+iYsm$+-%(&irf|hH3RLKY#!FgEl{3yn6Hc&J55?_&_|H z;!f#rS-G;z^Fg>p*QMp2kvCFw*JoHZcQ1ajrTt$E7|qW0*?%N$p+$Z_BMyBX9>1M0 z?XG=kD+$}T>_ywmhknca;{F|Y4fgNU)`vecA@%UzrZok;IueC5N|G>x2^p>5yzEW~ z$nYR9+nFib3^J%+`ZX75Cz=`Q46$5|-LCE+^kT<)&Ox8VHqTr5mYc)F565Y_$+$mQ zd1<;-TWFCywtorQ&mYJFm6+6K#~J)6%uQpAbpXSf~6HMUG6)Vt*7fmg-EcZgvec%%~M@h@5s> zd+6NFt4yenSZBV#qDW7v)6il8ZW`)HaSAfXOtv73Fhw|341p6xBln!tvZ@OqOHxL4 z7mMB!Ix=AMgx8gx>5Lt=JF4Ujk>l1L`UO)G$8JXKeeG%qERY0WgV33W$`raqS30fj zoY?j)^ndMmaFNG>Ij{8@myoZpY0P#*wP*#oqUn=GjwT;eegBB-cXD3zmThV7QFULd z+dIBKe^K|EHYU1Z^jn<*JHhw{R9HP^!GjpXzRyxl$OhVD#v+hX+cHqJ$ zag5+2$rF5Iu5a>q(RqgQ+-f?Viv|{A)sZ2gQGcafk>47nlh%}5eWazCB1sHZKoUar zZGTmhuUIN@pr7#(lv!Kqp#u>cUn1`wLvzi$Fby0D*N*zR!2V z`-c6s9OYhtur9Ek`l@f$n!2!oS^KB2%2L+W+iiRcr#NfpDx1z&Z+3=rzQMykCAP*K zXMgcxBb#?aHW=M*;dJADfVpT{RV{qHWGnlMmL ziDR5yg#2C2(8YXmt%U0N!WmiSx&V++d;(|&Y9+& z(7*aKU;f{Y189-|=f#WTy8q|J(SNg@{C^kE%Ko3L?_Zr7*H7-7@K}^Pt-YPIXIsvm zjkTD&^Y!?7<(8P_oM8k!qb7;vL(xv|Srb`a5ZzD$-Bc5KC~8MJ>ct9(RW|QK71@4+ z4?+QJ8t!bH%k!(VoZ>@Nd{u;56TK~~Iga_}4zz{2gm4uj&AOVxA|K;zD1Qn|Q2*tW z1ZRcrh&dStPVT?iGRtjZW!q4+i@l%YdrA4qooOlOul0$&JDk7O`Mr%jGK2f;ApOj! z*V2$1^*`5AdAt6f!|vgX|L5dnm;d8Vp1S|Xth$bv$h{68XG&9+puSUmfoH{SsEklp zZcjSqA$`8B6AI#DcqJmE(tlElIZi+V*C83@uZCERqne|i8v)(p^scm0DW>WfX~$B; zH!PYn7c)h@(QB0|NiA;O{oT{qiprtQM#b$yyT9hAM*llwh!ZlRjKlWYSeXCqsGk4n z^FrfAXJVLJvwn0~}sw zskUi~)^{ColeWI=3`6jB>${Fj($;tXPn+>LVVOYZXRk%8lX9l-lJ0OHeh00000 delta 10898 zcmV;DDs9!XSeRIlOn;IcC)w4l)KuC|_xMi7aark}n#%UgLgbNzF$r)0P>wpCTk}J9 z|J?kNTX>KJDNt`el880au}I+Hb#UG|2n7iuPNu*EIuhN}3Ffjh!%6(j?w($+*L!wy zqW|sndi8&MN6(JGIXZdvME(D`_xzjQ(Mj*g(Ko2K!#*@VnSYR&f79E#t@_|TlLx2d z7vO?0+DFr)7EaUh=Sk;zr`L)=gq);OzdIeAql+H~=uD#w8ZnOkk_~}VkRVzVC(uV# zlxj_D@a}uW`^SB1`+th#48)EJz~cRX)O-5;q`v=;pFiL4|GRj?Oh}gegohA|KKl5n zMG`!QehVRlhJRSV6{M_>IE;yqeAc=CchMnCf2AW~im8V~$^?;&&*lnu1sMlIGLFa4 zr6ZBX*_hCxro`idH01BnERHW(Ou|_oosTYd`d!i8HOyQ zQuQR{fF<;ikFoqun zKXR6(`4ZW7%(rtI6AHhuI8zPiDQzK?a+cyTmVfYPCgf|?$QvyciM&YbIvYX^@{I64 z>P|85#$?#FFIz2V){D;1&wfjzWK2RV`sk>Ikivcmd`I8%N2fp8)JO5{XM&jmp--h{ih&V{BISn3-2qki+8Jt1Y0mKkW#_g+=6UK?0oyJ&*3%xXACL|<5 zXu1=GoJbPlxP_2pF>q{_UQc6yu3^?kZGVmRoW;<&E`(x5M-shAZA%+is%opI+pj(l zAw~WHMk5GiAGI&oAe=yy#n4^}zQvwYt@o|B5^U8B2f;EPf}J@(Gml9^q$6D$tw7|S+zCbSZj2iC-z|nTi)Z(Ulux!n$_ByCF!8A5dPPCd7}?vUpPTpw<2u(jDdK&P7Vqp224iqW9ct23d6I<3iF**=_sM(`3N zi%HQ!CPD{fgoKhAwVY{WoqQhazkiiH0aPMPqxu&$Yq|?{$<#=sM4Cl7MCT(UCon@e z=76Ia0<|d+p~y~ir`0+*KvysV4m1QMA2JF`FiaQ+B$V7Eg%ul>tcY%un5@KXLdQs} ztwMp|FzTa;l&R=Cvk@6*9Dg z-~;5yxe@?KdTH+g|6|k}0E9+p!}e5To%7QGm!QE4oyqmMn2ZXoUzyz%%%@PAh?( zdJQjN2H;wg>;*4>1ukBkbdDZ`CA4P$laQn_mLR$pZ{EHdbmRxQeH+W{|4&Yy*X(~! zpPuyg_P@J$(Ax>rt@=cuF-WQQXas4@W)La5t1Sp6wSLP`IDzoGUOQ!xKtf`fi9?je zfCVV6wBKqWq{wk7V-%D-?#0KCsB;CnT<0Qxi#~l)eK5d(f_r==X-zF5R7gxc zfY7H;Z4?AISca4Pp5_PpH17ZR6Nppbq9fC7T>(q>|IzW2y8rLl$?=o@{=bXoGjQi|fp+b>hx05g9psjHc`^ikVKUA%P?Oz{|^U^uJQ$}ONx z6|ETa@gvH2p*xA4#(IT=Rkvp5_GRJ6wbj(Dbi|~8s~4+M)D9*n-{dua*ZPg3#_d10 zQTu({!cwzIM#a*(E+nKU8%g#zoW%YTzav5;rA-{`={MliYStF^zIVpg@ifx^kVk>* zq1wVHypaAMojiN?q*tZ?$2ufrPyg@Wv3pt3^?bK_tSTLAJy=+#(Ew4@R@*uVf|eU} zf>WY@fKjbs<|^9ssC7+f)JLZcFk1;o9ASwy-KLaD*ZSu8vc^C)xg2IBj(}I_<+RuN zck4sMDG6|@G((80LD$!hU6cG|s#Q(J6LjRljYC6toL%%vqL}X0LiN z1J=%%neD1=#~QJO{EO$~PehmkX`FE!&-JcltP70Gi?WpfP3;Fl$61Vdy;=()5waBe zsL%wW7D9H#G?W10DAG89<4aDc1b(Vul$O^@z|uL5NT>*!!g3|86m~Nrkg-HLCMC&# zl;j{82ZU|cI@TQbcfsf-mXki}80Ds;Yrkbbi`;2$mg%bgT58ALkg*sr_4aXuFrsi% z_KgBWqUs_&L~=p|vX(00N@1lRT8+<`mM(ueMI+7hj{iUot#f9p~? zT=n?vmTdTU2&Ix{j1OLEwr=%uk1U>msSkR?1k_5cI2l)Y7tL4`LP?S(NRZ$3n62%X z!#^^@b9|l5BCdo*wcHLWI19cAhc&hj$ZvHduD@T_^S8C7@!5&3#Tz0toOud=HO>BX z9@PA#yI)uA@k!dO~Vks*_lS{Hm~dE0-<5KxivGOS0}#~e_~h}j5OBEaDU zF*yO=LDr&)UjICJtH_V(D@4YBQDUM=@VG{Hh_K^t#^IER8bqcm=90O{p z^cVv|14&$ui6VazUjxn2FryLhc;*rk%Pg%gsCif})2fiHQ7C1Qt&@dEKBQ$;ugjTG60-vE~c9RHve+;UOUd0QLXw`%xS zsWoN*Ltd?10g;_CLkzTFV9BsviV9$)$3t^`*Ktk2g_3o$I8v-?3S9A;kc}z%t$?jb zf@)N&SF#3E%P|zk#x;I_sJC>2XNZHQDj9X)*%)2)T8Sxyj#%mL8WWj|&>>5bj1oCB zaT{cqNybGtf+@s0unqHYLL`JT_Nmq@v}~A0#-({q(J4+KKE(oVeF4-=i$G26YDddaDq7w zC2+O(LSZ&+v3(1sU7NGv%u)#NM0gypA)_IrQgri>N<#<=ok<+{bcph~vQkf{Ivakv zpeIBlQT=UgS}dlMkPH$Vb3hS#tC5aCtP!0gNhWo)3m(aWVlvt($1w+!y$m)PP$Aud zt_n4n!qJ4V@W^ik9d}mG^q>Lg5R(iIAb%AQrLk@UqTq({RG9hdS{bJEI-PHDrF<~I za7{~ORm%prX5I9%6(I|XT~$Q^g>dD8C%5qiuv;#s`DkWp?jxh{W;DO1L7^Y^(Ytoz z&Ts#^q-G;3%++jA(3Vi%Z#^oa#xydo=zEHKCUcp7=>wx%RFcEcM@C{8NkmDkHXt#v zrX-`o83t+`T2(E##KKJYH~dR9CQ~RvpLFvRJOz`>4NQNow)zgd8zLuWnHg zd4YIp3OJLN4jzBZ3O#cO@ebg@vtnSp=opo=$eU-`)PTZZtIkqD(s z2%^*l0b$08oFO7a2I3Hfi%{Cz)Af+tkJcW*yGC@hHnOilva0^HB?#^o&9PZ7u_yY- zu46rGFfi5)i|Cx9Xhv~DLL}-o<@vFo5DPeTsCdEEMkJ0QQu3*7v*?WHz+(AWP6?=; zH}PH#u3dlFXJp2yReCk6Ygc(x+XHiab$NgJzUo%ie-fY}-$1V;b8(5h3%Q ziiKUxwFMIkfkc+3jH^8%wWu&pQjD?5kQEQ$g3c5xr)|(|-U*q}YiiGBRv*LhjE&ci zaSMGJnTvD=TJ23ab;fYlaC$0;nL8Ou>~tJuC<< zx5!8@3!0lSxtRT!Wxc_|oi@KwVL9zs+Uo_ThcfbE356*OIwIH#ff&9i^n_;km}fJq zT(A{ZVV({P(%pS8+51d@kE^W8I~Q}x1p>w*380~yrc++ZwF2v0$|!vtK^_``?rVlL z$SlI-ENH*w8MHlo)(aFRfNdy<8X%z{>Mn~#Ty;Jg$DN8I>R}$S7jBjs))!#v`s|W` z4nN)-hE$+^zEEy}$HJZ9lP9+kBQ=V7Wgb9nHL~}^nFO)A4C(9x57^CQ$YLLOATI6X z(v#s49s!M#5+r{zbz2W$(Y{Qvl)z~p{ohCb`N!Xb$A5bC=v^=Pk6-`z=s!F9kMAD; z>GALRk3T+s{OHlUzr6nO?d7Xq$>ZPO(JZ+(zkYx84qpAbB9OzGU*rjKR>#LC=j~;Io}yM`EhBe3@U5QczR8BQ6UKjqSV!R z-pw3pA%Y(&kzYrt36x;H1@f`E{j4@e82zh((?{)wBOl!y%zTqU6Bd8F2`t@*k~W8u z?kIS4A1=B|xab`Oh(4^4&@U|jblXtRErU9@4By;3Q1kN*$=pHk<@RBgTL)C$V(8?( z#4Bzaow$ow#O)&ww~jO1HmY!kF@(1eF}Q7f;P%mgUsLSgj-&lPz zwu{)ahaG9QO-$K7dh8)bkL@5*;E8qt=2}aWMI~2D8q_EZ-UzCC_=m}ZTUkIb-qK4{teV;tzez?iF?0gl@p7Q1o!$Gje zI^vpNwVgys#==ao6H77Y=6RX76D~Orueg;kz6@*G*H&jKjM0$Lc~?O0tMdQ`7c}O8 zD5K>a0nr19&ZzOheG)K_EM47&3)Z4qP-*HbQW>8)vPyq*Hlj5(u+5YQ4U7z0tbj(= z_LaVAu&r0DZ7zvv*M+#EP_F-YP228OOR9V6WF|<6FTbm7StfD>Ytg zqOmK>8?O=U{P71s0L_xRlgVDVQ+;`r-|M&>A&a|0n-HXYU&@(o{G>SFZ zm`h9N!McB@K#zR}y@whSyS}S9-#&Xa>8` z1-=OB|3S<9`(qBDiA?|5OYy7wWA+}H&%*;_==>eHU>s9ZqZ7uIS>}eZU2gWnlz%O8 zzZ8Ai(gE|?rCF$*wGUa6D$ZMRnwQ??7#DJi326IL~=Yjzu;MMTgjWgtd~kuX{LLk7Y{}%Yw86TGpg@wjdu9|Uv%%y#kgxHN=u1dvi+o0K`QS;4DA>+p96M0U*8#|pExHqm@9O{G>KJ?PT!uc6ycLFN@ zjCHUoXOhk7Am(kNsL3vhnrx$Jap=3xMv7LqlP**|JY!y;kl52$Hb<8SWRWTYJKZb1 zbtV3xA3R9Dysu~_pOGGK~uoKAnR&4sZJS>G&k%(BcdO<8F@gKErEi!O>Bn}z}xY=F@5 zVN=td7VHVvTt?TYiE|&h7S19v8iCHtAwZ|yGa|X+EZ7H9WZ~q{JtR9+99jbjK_^_0 z!Tjms&DZ4$JX>->PNgdt)##Vk9Oe@gHZYLY^ZpD{2s_KthPsbICP)o+$TeWh5dTLgUqN6DAJ9WTWt&2V76oJv5!r3Aa|WKQ>E!8oMK#*v9GZ1g9yi zE}eKFZz``e8Qb!wf`2bB&+DOZb}7Bu;!@77N2;x$%iI3;d}JEqWll^2W+@8W9U@dn zz|jIRi6Wqqa41&S&@O*t!E(|XU>%dCkqG^t!JCWjkE{WtSud>93FxDHkN}m3ntqtf zNIC=IKz->Xn353)*|BW^7w?XLZ4w6*^1=t4q%j=kj<`Yu%l8lwW;zOpn&5d9Dmw!x zWqI=P8$Ddb9+jMktpzV8*U(38Z2&L3`B7p2C*Q>(>Um_c4Yq$(p|Y(uv~84hU+K{uC^FuG8<1e{Jk>b-olIhY#r3sOUtfS$b@D zq?l2OKd6>MC2cg#tWFrGck@&U0!lc6I1X~%{|3+0EaVGk)52md7h-FXD)7zOo4)Cp zLZ~s#b7hT)qJ4iRaoA$f0vWSt?js2&n2w9Qg`-Sn95ze!FmEZ&ACJYjPB`w(=DOnG z=xX^6zjZxr3kSC-hbWr@pAxv~-Y|Ym=r~ZQ8Q7FdUCn>G2l}6l$D$e7sspNUyW1R< zYDaW88dUCDSe=i3JIF(sYISRpQ9)xHHWLvj!4Z@xcy50gmDPmm^m5@WuyH*Brjh#F zq&y908_i%wR@%NlpP$_gf@fr-z1pbqHYEdWh$KV4Xfo84J}{UU%RR20d%9YkvRT~M|Y)*yyzBGfNpDFp^%5BU+rDuRj1-MQR`dBsBasQ{+Y&~e{s>~`&+!f%n0&Zy~BIW=v?AbR*C(oX! z{~!0Bf73heJv~182K9D7-1#RH67zp=dRwCmsc>(f<@oN*Xi_n2{jSj-GV2A=l+EJ1ybq3LqaDrGO zk~7JO3LCrDFb_q6vVBGGNeF*0L#-)Y)Umeu*@0y+Gccl)rzt$rHwHN^r;SDU1{ z>7guwK?OxM52@HMndqaK(5yVCUt3of`7`>4zQ#fVcTh*Q5^xqn^#-DDq6-$>%2`0C z@{-0*&F{+?Q&^$N+-jVv@(nF7ns;}?EcIA*u2W7JCvsMXIy9isTtR;qox)6iVpPHh zSuUA?P-z>NoQ+6Ta5L26Dx*sOJ~Kh-3x_CK3`TBscBu1mEd(olgRYEZsJG(pWxx|} z*_EDPamissKA?8DUEThjP>{>AhN87h5Xtz=rBs%l^ikWHUsHdG1zbVO(5Fvx-xk5{ zFDota7=8NGHWLsFSh0UUyKB>(bWINUSk%q^?O^)ixIOnWPz!;hNJ+#m{_yDK+1b^r z!Qio{U<^0{9%%e0j4m%xUTONGi2-|nzz4~3VCZjO-xEruV8}AcK-EA;;OLrIMh|IxEtNEm-R=`W;cbk&lk69d4vK$lBoE(0F#mm@G5! zI%i{0ZNs~HdRE);gR;iXH+&;(@8)w$Z@%Go)aGg%e#bk0v;DlBY&@h*?9O=8Cf;nn zIgl6Zw?zbE0SSLlPZRyfE5>9B6ogQ0cL=NOzr4n!s<7Mbw*d6~PN){%aP#e|#Z|Um zb&oY6q$#Oaqu2va#9V=ilxdJ3VtNs?5XVZf>HFo!YR@NtV>!8GTvj`6AWvT$ueCp_ zus7jx8=~+=d#=*kJ7IBjBv#p0O5xt=W|{*ykI<^fh8urp6X^9#vT%-5PNpP=aphQT z{)9NiLlP68dlyIgzJkHu2Jc^hOnB83Fz+Z_F$JjbKtF0`@d^Nx(d~f8v z4I7k=e}XB*er~B$OcK5L!=sBgXRqF$pZVBwK@0xy=yY)Y{?*0V<(u=1x4xprw5qVv z?TtMSV=aF-o@#m@1}X4_2yGws)HZvyEaHch2Ra#u5#bH9V#{f&aYncwm_1b;Flr+2 z?PbFaAZ_V4)SQ+omTn~p!%n|X!uWwR&!H^s`|^g_yK&FjLZsmqR`Y)&$od#GyFmr#seMfiy*8}oxB5rM zWs|96RaT{M$Hws)#CSF^@i2Y#r0UzU{ImFcRQ;R+CoJ+;Ue2#l7Ksvrn|YQq%6b^qVV^P|20?=GGo2rBNrxnv~PJ9s)cw|R~hIs&VbP2sk~QsQuORorovd)p1c z`H74moQ1KzpsGk2cB#4~?1eHlKg0;IJ{f-k6c1xKr!k@Sjw?&c0`w}KKmuG}0`K}Y z7DD=A@FQngYD5)Xd?cJVeWX;73c&kbzipqT`(MdQ8}EGcEc5^Op4R;TN6(L+9q;%5 zT|AEeA49_E05)*{YaF><$G^!4GpM-Ym1INc_-Fkomp~Hy;b)4cn8a#B&v&!>J(qud zte?&WxJmp#Z6a>V`(JD3Gw}N#AjZj9pZ`>8+cjIvC+FpvQ0 zB%i(gNB}jztGbT$THJ@zST}qxkqG{-Y~-BxgSs;(_}(P{#hTX&~t;4!Uxs%&b=zlGN8TW^8!5kAz@)uH@MoG-_f z(Ez+lIbS#ktcj;6r5)BOmXjBMcyxAk{>!VY_gAled_Q<|`j_{YFW>%o{$gtdC1DY~ z@PpD6+AY74S@P*pGF7Dm>yoZ*rlHXo?yKlGO*h-zbaJjjtusHHhGAO$%g=w`zk09j z@E0#%zq&I^{0hz>&!)Ij`de16Ec0RzZqZF?xo6~!6y0@-md!nEN8l1hv-j;bNn2={ z1JsB^Ux({+?^L{Nr{Y?|_AR>;w+kk?Wqxu0p3DaOcWUdypP7()_;1ph0$v@7!Wkt= zn8AdM)^A>Rrvqfz&C7P?$~J$44Cw8MQ*s+t@!oDT?)O$+nyu6pS|*QegZ7IDvIMzJkCiAhw?1h3R$8~|+7?)bA`t14M|92NpjV{6mbM=3P8-{OO)gFJJ$JMkEF#ChSI_3A;g(p-3Mgt|r z-Rv4@lu;|%5IO6#4$!%qSD8>DvCe#fMUkFTr=i6H+%(jY;uK_7X zMjkk+WmOkKmZXg8E*5{iC3I}S<_WJWJ<}OGY`E9yE(D#Tj<;I;3AI$b5ZMaE+JoG)0pjsYS9XEMbjtC98Er``u-8u z@8rDbuiDbWqw2m^cXxb!@uD6yZA^5-=(jorc7pk}**GR2lg)qkGCe}4S7+u*jjVK@ zYnX(hgQvZd3hcmzP2w2A2a+fF#$4az@x1dC<+;^#Iu{Kr#Hu4BLZeE%BEL0CC#@;B z`dCXdMUoh-fFy+K+y1I1U$Ii)z#!veD6_WILkY|US^iLgCRe|K6jzpQ-G!_A_m{Y` zmw|c^0Ro$xd|!X;hW8EoYdOlj24P)dJ@r-JsWo+J1M~JzUzL@tt+(6w4$gtrPG&Zp zvEJ?!=wgG1e@bkP1z+EyMAs`H=es?L*X#iO~PvC{0NHVWvg>WzHk&dK)wt z#+W24w`zYvk$r7d4^Q}7wk1L(k*+vSUpxM*V|@+U8MPJib`MeQ!##AxT@6FXww?TYsnYjXcOV#Q}Cd_|zI+pr+nI1yxGw0Qqo?;Rid_c#`Tl?COj79 zPU~Rr?AevGXKO9y?tDFdUb!PCxnLLp&!|aa`B1czd)7o&7eu#|K)2OI9*Wvgj(WKQ zVwHc*`%p!8-{6B#z?z0T-{$K4>MW=D5EWk)Vb(-%$7+sazPST!VId)0$4IlOrm)P% zcpHks3eWwtyM*YvVRNk)t=csoy=l_2>dAiU4aVJmR|6^8NM@-~i2ahwQDNE46 zslLRs;x<%9D6F<89rKVr-_{8QaWT9Skx^+W#T+Lff$NZr@>fGF#&ONj&y9fYae7x; zsT5Q7jI?7Z;%gQyn2Wih-srVTm82H8?*8uUY(?eJ=A+{Fq1|8eQ=|W#3B(B*Q^tQ` zcWo@q|8`u@|8#PEvZw!d@*JQ`ti%ecZ{0B~Z*ChMW+YZL2&Fi@#$ynjJo>x1_fJe9 zj?p+~Lld1!==czEh_SvgHN|q`yvHL9fIg2MmxxP#u%c!n6&HC2~T z3LM3RLZ{U^8@yM{1zHE_lqCtH=$CfW0g4D0t